security/wazuh-manager 4.14.9

security/wazuh*: update to 4.14.9

- Update cpython bundle to 3.11.17
- Remove obsolete patch file
- Use PYTHON_DISTVERSION for avoid temporarily pkg-plist issues when
  system python is updated. The best is keep system python and bundle
  python with the same version.

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-14-9.html
PR:		299490

security/wazuh-*: Update to 4.14.8

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-14-8.html

security/wazuh-manager: Fix fetch

Reported by:	pkg-fallout

security/wazuh-manager: Fix extract

PR:		297853

security/wazuh-*: Update to 4.14.7

ChangeLog:     https://documentation.wazuh.com/current/release-notes/release-4-14-7.html

security/wazuh-manager: Fix build/install

- Remove sqlite3 from USES. Now it consumes sqlite3 inside of wazuh
  libraries
- Other minor modifications

Reported by:	pkg-fallout

security/wazuh-manager: Fix fetch

Reported by:	pkg-fallout

security/wazuh-*: Update to 4.14.6

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-14-6.html

security/wazuh-manager: Remove non-default option PRELUDE

prelude has been defunct for some times and I have marked it deprecated.

PR:		296319
Approved by:	acm

security/wazuh-manager: Fix package on 15-aarch64

- Bump PORTREVISION

Reported by:	pkg-fallout

security/wazuh-manager: Update wazuh whl cache files to reflect arrow update

- Bump PORTREVISION

security/wazuh-manager: comment CCACHE variables

security/wazuh*: Update to 4.14.15

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-14-5.html

security/wazuh-manager: Fix issues on 14.x-amd64 and 15.x-aarch64

- Sort pkg-plist entries

security/wazuh-manager: Fix pkg-plist

Approved by:    acm@

security/wazuh-manager: Fix extract on 15.x

security/wazuh-manager: Remove CCACHE entries

- Bump PORTREVISION

security/wazuh*: Update to 4.14.4

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-14-4.html

security/wazuh-manager: Fix build with new version of python 3.11.15

- Update bundle python version to 3.11.15
- Fix issue when MySQL option is selected [1]
- Bump PORTREVISION

PR:		293256
Reported by:	Mykola K. <nikolaytihonov2022  at  gmail.com> [1]

security/wazuh-manager: Comment CCACHE entries

security/wazuh-*: Update to 4.14.3

- Fallback to 0 when elapsed-times is a non-numeric value
- Fix getPorts function issues on all versions of FreeBSD
- Update entry about java version into wazuh-indexer/pkg-message file
- Use a modified version of Python async inotify module to
  work on FreeBSD (https://github.com/alonsobsd/asyncinotify)
- Define USE=inotify when INOTIFY option is selected

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-14-3.html

security/wazuh-manager: Fixes cpython several vulnerabilities

- cpython source package was updated to afc40bdd3dd71f343fd9016f6d8eebbacbd6587c
- Bump PORTREVISION

security/wazuh-manager: Fix package

security/wazuh-manager: Disable CCACHE settings

security/wazuh-*: Update to 4.14.2

- Now, Wazuh source code is obtained from https://github.com/alonsobsd/wazuh-freebsd.
  This repository includes all changes to run Wazuh Suite on FreeBSD. dtxdf and I
  will maintain this repository in where will try to add all Wazuh features to
  FreeBSD.
- wazuh-dashboards : Update version of opensearch to 2.19.4

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-14-2.html
Reviewed by:	acm dtxdf
Tested by:	acm dtxdf

security/wazuh-manager: Add users and groups functions support

- Now wazuh-manager can obtain users and groups information from host
- Fix start_time data to show correct datetime data from wazuh-dashboard processes option
- Bump PORTREVISION

security/wazuh-manager: Improve port

- Fix issue when agent/manager connection use TCP instead of UDP.
  (Thanks to dtxdf) [1]
- wazuh-manager settings use TCP by default
- FreeBSD sca,decoders and rules files were updated to fix some conflict
  issues.
- Bump PORTREVISION

PR:		291040
Reported by:	Paweł Krawczyk <p+freebsd at krvtz.net> [1]

security/wazuh-manager: Fix error when running with legacy algorithms

Traceback (most recent call last):
  File "/var/ossec/framework/scripts/cluster_control.py", line 16, in <module>
    import wazuh.core.cluster.cluster
  File "/var/ossec/framework/python/lib/python3.11/site-packages/wazuh/core/cluster/cluster.py", line 22, in <module>
    from wazuh.core.cluster.utils import (
  File "/var/ossec/framework/python/lib/python3.11/site-packages/wazuh/core/cluster/utils.py", line 21, in <module>
    from wazuh.core.configuration import get_ossec_conf
  File "/var/ossec/framework/python/lib/python3.11/site-packages/wazuh/core/configuration.py", line 23, in <module>
    from wazuh.core.utils import cut_array, load_wazuh_xml, safe_move
  File "/var/ossec/framework/python/lib/python3.11/site-packages/wazuh/core/utils.py", line 32, in <module>
    from api import configuration
  File "/var/ossec/framework/python/lib/python3.11/site-packages/api/configuration.py", line 13, in <module>
    from cryptography import x509
  File "/var/ossec/framework/python/lib/python3.11/site-packages/cryptography/x509/__init__.py", line 7, in <module>
    from cryptography.x509 import certificate_transparency, verification
  File "/var/ossec/framework/python/lib/python3.11/site-packages/cryptography/x509/certificate_transparency.py", line 8, in <module>
    from cryptography.hazmat.bindings._rust import x509 as rust_x509
RuntimeError: OpenSSL 3.0's legacy provider failed to load. This is a fatal error by default, but cryptography supports running without legacy algorithms by setting the environment variable CRYPTOGRAPHY_OPENSSL_NO_LEGACY. If you did not expect this error, you have likely made a mistake with your OpenSSL configuration.

Approved by:    acm@

security/wazuh-{agent,manager}: Improve getSerialNumber

Instead of returning UNKNOWN_VALUE, we can leverage the sysctl
'kern.hostuuid' so that users can uniquely identify their devices.

Approved by:    acm@

security/wazuh-manager: Fix SIGSEGV when modulesd is starting

When modulesd stops while decompressing the vulnerability detection database,
it accesses an uninitialized structure, causing a SIGSEGV.

Approved by:    acm@

security/wazuh-manager: Fix distinfo on 16-amd64

Reported by:	pkg-fallout

security/wazuh-*: Improve ports

- agent and manager: Avoid change permissions to local.sqlite file.
  Now it uses read-only mode.
- manager: dos2unix to api.yaml file
- server: logstash8 was updated to 8.19.9 and it needs openjdk21+
- Bump PORTREVISION

Reported by:	dtxdf

security/wazuh-manager: Improve port to run inside jail

- Reimplement getPackages() using SQLite
  getPackages() is a function used to get a set of information about
  the packages installed on the system where the manager and agent
  are installed. To obtain this information, pkg-query(8) was used;
  however, prior to this commit, it was assumed that pkg(8) was
  installed on the system, which could be wrong, especially on systems
  such as jails, where pkg(8) is normally used from the host. With
  this change, we leverage SQLite to read the pkg(8) database and
  obtain information about the packages, which is also much more
  efficient than executing a command. This also fixes the segmentation
  fault inside jail in wazuh-modulesd when this condition occurs.
- Fix wazuh-apid when security.bsd.see_other_{u,g}ids=0
  wazuh-apid checks the status of some daemons (or services) before
  starting completely, and if it cannot detect the status, it may
  mark the service as failed or stopped. When security.bsd.see_other_{u,g}ids
  is enabled, apid cannot correctly detect the status of some daemons
  running as root, such as wazuh-execd and wazuh-modulesd, so the API
  will always return that it is DOWN. To work around this issue,
  a small C program with the SUID bit set is used to check as root
  if a process exists in /proc. This C program is used in the
  wazuh.core.cluster.utils.get_manager_status() function for this
  task.
- Fix package on 14-aarch64 and 16-aarch64
- Bump PORTREVISION

security/wazuh-manager: Fix package on 13-amd64 and 15-amd64

Reported by:	pkg-fallout

security/wazuh-manager: Fix package on 15-amd64 and 16-amd64

security/wazuh-manager: Fix pkg-plist

PR:	        291769
Reported by:	Trond.Endrestol  at ximalas.info

security/wazuh-manager: Fix extract

security/wazuh-manager: Fix distinfo

security/wazuh-manager: Fix distinfo

Reported by:	pkg-fallout

security/wazuh: Update to 4.14.1

- Python bundle update to 3.11.4
- wazuh-agent and wazuh-manager : Add support for 15-RELEASE and 16-CURRENT
- wazuh-agent and wazuh-manager : Improve FreeBSD system information functions
- wazuh-dashboards : Update version of opensearch to 2.19.3
- wazuh-manager: Update pkg-message with entries about vulnerability detector
  and indexer connector configuration

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-14-1.html
PR:		290771 290782 291040

security/wazuh-manager: Unbreak build

PR:		290782
Approved by:	portmgr (blanket)

security/wazuh-manager: Fix install on 13.x and 14.x

- Re-generate cache files with latest version of FreeBSD
- Update pyarrow whl to 20.0.0
- Bump PORTREVISION

PR:		288597
Reported by:	Trond.Endrestol __at__ ximalas.info

databases/arrow: update 19.0.1 → 20.0.0 and depending ports

... depending ports can't be built w/out updating.

PR:		287404
Differential Revision:	https://reviews.freebsd.org/D50765

security/wazuh-manager: Fix build on 13.x

Reported by:	pkg-fallout

security/wazuh-manager: Fix extract issues

- Fix extract issues on amd64/aarch64
- Update cpython bundle to 3.11.13
- Update whl cache files
- Bump PORTREVISION

python.mk: rename PYTHON_EXT_SUFFIX to PYTHON_TAG, document, etc

EXT_SUFFIX, according to PEP 3149, refers to the full tag and
extension for compiled extension module objects, eg .cpython-311.so,
.cpython-313t.so, etc. We do not use the correct semantic meaning,
and this usage becomes ambiguous and confusing when tags do not
match between bytecode and compiled extension module objects.

Rename our PYTHON_EXT_SUFFIX to PYTHON_TAG to align with PEP 3147's
specification of a magic tag, which consists of implementation name
and shorthand version only. This is meant for bytecode and other
files containing this tag in their filename that do not depend on
a specific Python ABI for the same version. Chase all existing
consumers.

Introduce PYTHON_SOABI to align with PEP 3149's specification of a
tag, which consists of implementation name, shorthand version and
any ABI flags present (this and PYTHON_TAG are identical without
ABI flags). This is meant for compiled extension module objects and
other files that depend on a specific Python ABI for the same
version.

Add documentation for these variables that our PYTHON_EXT_SUFFIX
never had.

PR: 274671
Event: Kitchener-Waterloo Hackathon 202506

security/wazuh-manager: Fix build on 13.x

security/wazuh-manager: Fix build with llvm >= 18

- Update nlohmann-json bundle to 3.12.0. It fixes issues when
  llvm >= 18 is used. [2]
- Add a missing dependency of numpy whl installed from wazuh-cache [1]
- Other minor changes
- Bump PORTREVISION

PR:		287003
Reported by:	girgen [1]
Reported by:    Trond Endrestøl [2]

security/wazuh-*: Updatet to 4.12.0

- Update bundle python to 3.11.12
- Update opensearch dependency to 2.19.1
- Update opensearch-dashboards dependency to 2.19.1

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-12-0.html
Sponsored by:   Entersekt

security/wazuh-*: Update to 4.11.2

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-11-2.html
Sponsored by:   Entersekt