security/openssh-portable 10.6.p1,1

- Update mirror site for HPN patch

Feature safe:	yes

- Take maintainership

Feature safe:	yes

Convert to OptionsNG Trim Headers

PR:	ports/172429
Submitted by:	Michael Gmelin <freebsd@grem.de>
Feature safe:	yes

When installing in the base, USE_RCORDER does the right thing without all the gymnastics

Add KEYWORD: shutdown Simplify some code Fix an error message

- Fix ECDSA key generation in openssh rc.d script - Bump PORTREVISION for package change

Submitted by:	J. Hellenthal <jhellenthal@dataix.net>

Change HPN patch mirror location to one that works

PR:		ports/168306
Submitted by:	"Bryan Drewery" <bryan@shatow.net>

- Reset maintainership

PR:		ports/167423
Submitted by:	Grzegorz Blach <magik@roorback.net> (maintainer)

- Perl only needed to build, not needed to run. remove PERL5_RUN from Makefile - Bump PORTREVISION

PR:		ports/166413
Submitted by:	Gleb Smirnoff <glebius@cell.glebius.int.ru>
Approved by:	Grzegorz Blach <magik@roorback.net> (maintainer)
Feature safe:	yes

In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.

- Add USE_PERL5_BUILD

PR:		ports/163414
Submitted by:	portmgr (pav)
Approved by:	gabor (mentor)

- openssh-portable needs perl to build (reported by Gleb Smirnoff via mail) - add ssh_engine.5 man page when openssh-portable WITH_X509 is turned on (reported by John Hein via mail)

PR:		ports/163414
Submitted by:	Grzegorz Blach <magik@roorback.net>
Approved by:	gabor (mentor)

- update to 5.8p2 [1] - fix Kerberos knob [2] - fix build on 9.0 [3] - fix deinstall with various knobs [4] - fix LPK knob [5]

PR:		ports/161818 [1], ports/144597 [2], ports/160389 [3]
		ports/150493, ports/156926 [4], ports/155456 [5]

Submitted by:	"Grzegorz Blach" <magik@roorback.net> [1], [2], [4], [5]
		pluknet [3]
Reported by:	Jonathan <lordsith49@hotmail.com> [2]
		Kevin Thompson <antiduh@csh.rit.edu> [4]
		Alexey Remizov <alexey@remizov.org> [5]

- Maintainer to magik@roorback.net

Approved by:	maho (mentor) and magik@roorback.net

- Add VersionAddendum support. - Bump portrevision.

PR:		ports/142824
Submitted by:	Scot Hetzel <swhetzel@gmail.com>
Approved by:	gabor (mentor)

-remove MD5

Unbreak build with LPK option (broken after commit 1.674 in bsd.port.mk).

Remove OpenSC support. This port should be updated to support PKCS#11.

- Fix optional dependency on security/heimdal - Bump PORTREVISION PR:		ports/152029 Submitted by:	Joerg Pulz [Joerg.Pulz frm2.tum.de] Approved by:	Ryan Steinmetz <rpsfa@rit.edu> (maintainer of net/freeradius*) 		girgen (maintainer of databases/postgresql*-server, 		        14 day timeout)

Add the sftpfilecontrol patch as an OPTION (WITH_FILECONTROL) See http://sftpfilecontrol.sourceforge.net/  for details.

PR:             ports/146338
Submitted by:   Steve Wills <steve@mouf.net>

Reset dindin@dindin.ru due to maintainer-timeout and no response to email.

Hat:		portmgr

- Annotate the combination of X509 and KERB_GSSAPI patches as broken

PR:		ports/142819
Submitted by:	Scot Hetzel <swhetzel@gmail.com>
Approved by:	maintainer timeout (1 month)

Mark BROKEN on 9.x: does not build

RC_SUBR_SUFFIX has not been needed for a long time now, all supported versions of FreeBSD now use /etc/rc.subr and rc.d scripts without .sh appended to the script name.

Begin the process of deprecating sysutils/rc_subr by s#. %%RC_SUBR%%#. /etc/rc.subr#

- Remove BROKEN on 8.x WITH_KERBEROS case. Builds fine on 8.0 and 9.0, i386 and amd64 - While here, fix minor plist issue for WITH_X509 case

PR:		141679
Submitted by:	Denis Barov <dindin@dindin.ru> (maintainer)

- Under OSVERSION >= 800000, only mark BROKEN if WITH_KERBEROS. - The port links fine otherwise.

- Mark BROKEN on 8.X with Kerberos - does not link

Reported by:	pointyhat

- Revert USE_RC_SUBR change from last commit, it breaks OVERWRITE_BASE - Add a hint to pkg-message about running this together with base sshd

PR:		ports/138943
Submitted by:	Denis Barov <dindin@yandex-team.ru> (maintainer)
Feature safe:	yes

- Unbreak KERBEROS option - Add option for OpenBSD support - Fix crash in sftp listing

PR:		ports/138409 (cumulative patch)
Submitted by:	Denis Barov <dindin@dindin.ru> (maintainer)
Feature safe:	yes

- Mark BROKEN on 8.X: does not link

Reported by:	pointyhat

Fix build error WITH_HPN.

PR:			ports/135407
Submitted by:		maintainer implicit (already submitted)
Pointy hat to:		pgollucci

- Fix the previous commit   The patch file names for LPK were not updated completely in the Makefile

PR:             ports/135968
Submitted by:   Konstantin Kukushkin <dark@rambler-co.ru>
Approved by:    maintainer (implicit, shouyld have been in previous patch)

- security/openssh-portable: update HPN and LPK patches to newer versions - still broken on -CURRENT

PR:             ports/135407
Submitted by:   Denis Barov <dindin@dindin.ru> (maintainer)

Fix build with WITH_LPK support for amd64 by change extra patches order. Do not bump PORTREVISION.

Submitted by:	Fedor Dikarev aka fe at rambler dash co dot ru
Spotted by:	maxim
Approved by:	maintainer unavailable, i.e.
		$ whois dindin.ru | grep ^state
		state:      REGISTERED, NOT DELEGATED
PR:		amd64/134706

Fix HPN crash issue by using aes128-ctr, aes192-ctr and aes256-ctr.

Approved by:	pav

- Update to 5.2p1 - Assign maintainership to the submitter

PR:		ports/134160
Submitted by:	Denis Barov <dindin@dindin.ru>

Fix several problems with OPENSSH_OVERWRITE_BASE=1. - Empty dir handling - rc.d installation - prefix modification in manuals

From:		Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
PR:		ports/133412

- Reset long-term inactive maintainer

- Integrate x509 certificate patch (optional, default off) from http://www.roumenpetrov.info/openssh/

PR:		ports/121438
Submitted by:	Dirk-Willem van Gulik <dirkx@webweaving.org>
Approved by:	maintainer timeout (mnag; 1 year)

- Add vendor patch for lpk patch that fixes runtime on amd64

PR:		ports/129092
Submitted by:	Jui-Nan Lin <jnlin@csie.nctu.edu.tw>
Approved by:	maintainer timeout (mnag; 4 months)

- Update to 5.1p1

PR:		ports/128679
Submitted by:	Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
Approved by:	maintainer timeout (mnag; 4 months)

Fix rootless build.

PR:		ports/126164
Submitted by:	skv
Approved by:	maintainer timeout (> 3 months)

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script. Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:		126524 (obsoletes 52917)
Submitted by:	rafan
Tested on:	two pointyhat 7-amd64 exp runs (by pav)
Approved by:	portmgr (pav)

- Mark BROKEN after recent kerberos update

- Update to 5.0p1 - Port LPK patch to 5.0p1 and add to files dir - Remove USE_PERL_BUILD since doesn't need [1] - Update KERB_GSSAPI to 5.0p1 - Update HPN patch to 5.0p1 13v3 - Respect LOCALBASE on configure_args of LPK [2] - Change MASTER_SITE of snapshot - portlint(1)

PR:		121826 [2]
Submitted by:	Andrew Kolchoogin <andrew___rinet.ru> [2]
Reported by:	Björn König <bkoenig___alpha-tierchen.d [1]

- Update HPN patch to hpn12v20 - Bump PORTREVISION

Submitted by:	Ollivier Robert <roberto__keltia.freenix.fr>

- Update gsskex patch to 20070927 - Update HPN patch to hpn12v19 [1]

Notified by:	ale [1]

Remove always-false/true conditions based on OSVERSION 500000

- Update MD5/SHA256 of openssh hpn patch. This patch are rerolled to update version:

--- openssh-4.7p1-hpn12v18.diff 2007-09-13 17:11:05.000000000 -0300
+++ /usr/ports/distfiles/openssh-4.7p1-hpn12v18.diff    2007-09-05 18:13:03.000000000 -0300
@@ -1580,5 +1580,5 @@

  #define SSH_PORTABLE  "p1"
 -#define SSH_RELEASE   SSH_VERSION SSH_PORTABLE
-+#define SSH_HPN         "-hpn12v18"
++#define SSH_HPN         "-hpn12v17"
 +#define SSH_RELEASE   SSH_VERSION SSH_PORTABLE SSH_HPN

Reported by:	Tsurutani Naoki <turutani___scphys.kyoto-u.ac.jp>