Fetchmail is a full-featured IMAP/POP2/POP3/APOP/KPOP/ETRN/ODMR client with
easy configuration, daemon mode, forwarding via SMTP or local MDA, and
superior reply handling. It is used to handle intermittent email connections
by acting as a coupling that seamlessly batch forwards fetched mail from your
mail server to your local delivery system, allowing you to read it with your
favourite mail user agent. Fetchmail also includes useful spam filtering and
multi-user functions.
A typical use of fetchmail is to connect to your ISP's POP3 server,
downloading your mail into the INBOX on your local computer. You may then
read the mail, offline if you want, using pine, mutt, or any standard mail
user agent.
===> The following configuration options are available for fetchmail-6.6.9:
DOCS=on: Build and/or install documentation
NLS=on: Native Language Support
OPIE=off: Build with OPIE support (deprecated - weak/broken cryptography)
RPA=on: Build with RPA support (deprecated - weak/broken cryptography)
====> GSSAPI Security API support: you have to select exactly one of them
GSSAPI_BASE=on: GSSAPI support via base system (needs Kerberos)
GSSAPI_HEIMDAL=off: GSSAPI support via security/heimdal
GSSAPI_MIT=off: GSSAPI support via security/krb5
GSSAPI_NONE=off: Disable GSSAPI support
====> Secure network connection support via TLS: you have to select exactly one of them
OPENSSL=on: SSL/TLS support via OpenSSL
WOLFSSL=off: SSL/TLS support via wolfSSL
===> Use 'make config' to modify these settings
Reason:
OPIE and RPA have been made optional because both have significant security
problems. OPIE support was not provided by the port on 14.x until the update
to 6.5.0, when it was briefly re-activated. Because of its security flaws, it
has now been disabled by default on both 13.x and 14.x.
RPA is currently enabled by default, but this will change in a future update.
mail/fetchmail{,conf}: Update 6.6.7 => 6.6.8
fetchmail 6.6.8 updates the NEWS file and the fetchmail-SA-2026-01
security announcement. There are no code changes since 6.6.7.
Changelog:
* Bugfix: The Serbian (sr) translation was not installed due
to an oversight in the po/LINGUAS file.
* Translation updates and new traditional Chinese <zh_TW>.
https://gitlab.com/fetchmail/fetchmail/-/blob/6.6.8/NEWS#L113
PR: 298887
Approved by: osa, vvd (Mentors, implicit)
Security: CVE-2026-94184 (Fixed in 6.6.7)
MFH: 2026Q3
security/wolfssl: Bump PORTREVISION of dependent ports for shlib change
(followup of ebd1ab3805d31a82613a1db818e6dc2bf5cdf75d)
wolfssl was updated to 5.9.2 in ebd1ab3805d31a82613a1db818e6dc2bf5cdf75d which
updates from libwolfssl.so.44 to libwolfssl.so.45. Therefore, PORTREVISION bump
is required. ftp/curl and net/libngtcp2-wolfssl are skipped because both ports
have version updates after ebd1ab3805d31a82613a1db818e6dc2bf5cdf75d.
% readelf -d /usr/local/lib/libwolfssl.so | grep SONAME
0x000000000000000e (SONAME) Library soname: [libwolfssl.so.45]
mail/fetchmail{,conf}: Update 6.6.4 => 6.6.5 (vulnerability fix)
Fetchmail 6.6.5 is the sixth fetchmail 6.6 release on 2026-06-17, it
fixed a buffer sizing bug in the RPA code that could crash fetchmail
due to a buffer overrun when long user names and service realm and
challenges were used, POP3 was used, the username contained
@compuserve.com and the server would offer a non-standard
"AUTH"-without-arguments request that would list RPA
(case-insensitively) as supported authentication option.
Changelog:
https://sourceforge.net/projects/fetchmail/files/branch_6.6/
Improve mail/fetchmailconf:
- Replace PORTVERSION with DISTVERSION.
- Fix antipattern "BUILD_DEPENDS=RUN_DEPENDS".
- Fix warnings from portclippy.
PR: 296204283227
Approved by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer)
Sponsored by: UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>
MFH: 2026Q2
all: drop support for FreeBSD 13, mips and risc64sf
Reviewed by: many (*)
Differential Revision: https://reviews.freebsd.org/D55624
Differential Revision: https://reviews.freebsd.org/D55642 (merged in from bofh)
many (*)
acm arrowd brooks cmt dch decke dinoex eduardo fluffy fuz gahr garga
jbeich joerg jrm kai kenrap martymac matthew mfechner michaelo mizhka
nobutaka pkubaj se tagattie thj
Anton Saietskii
GenericRikka
Gert Doering
Jan Bramkamp
Oleh Hushchenkov
Oleksandr Kryvulia
Ralf van der Enden
Yamagi
desktop kde python tcltk office
mail/fetchmail: Revert "update to 6.6.1"
This reverts commit 685e0668a312ae1fbc44aa1635b182c0659718c6,
which does not yet have maintainer approval and escaped - sorry.
mail/fetchmail: update to 6.5.4
BUGFIXES:
* socket: avoid crash when writing to a socket without SSL/TLS fails.
Reported by Andrea Venturoli via mailing list, fixes #71.
* wolfSSL support: avoid fetchmail.c compilation failure in certain
configurations of wolfSSL (for instance, on FreeBSD's wolfssl-5.8.0_1
package), OpenSSL_version enables a newer 1.1.x compat API that passes its
argument to a wolfSSL API, with OPENSSL_DIR and OPENSSL_ENGINES_DIR, causing
related compiler failures.
PR: 287616
PR: 287435 (patch integrated upstream)
Approved by: Corey Halpin (maintainer)
MFH: 2025Q2
mail/fetchmail: update to 6.5.3
= BUGFIXES:
* IMAP: Reinstate workaround for missing IDLE support if --idle is requested.
This had been a long-standing feature but got broken in fetchmail 6.4.22
(commit 616e8c70). Thanks to Lukáš Tesař for the detailed report including
a Git bisect that identified this faulty commit. Fixes Gitlab issue #69.
* IMAP: Only print 'will idle after poll' if --idle is enabled
and either offered by the server, or forced through --forceidle.
This fixes a regression introduced in fetchmail 6.4.22 (commit 616e8c70).
= TRANSLATIONS: fetchmail's translation was updated, courtesy of:
* es: Cristian Othón Martínez Vera [Spanish]
PR: 287435
MFH: 2025Q2
Approved by: Corey Halpin (maintainer)
mail/fetchmail: update to 6.5.2 (translation updates)
Also add pkg-config to USES, which is now required by updated autotools.
PR: 283744
Approved by: Corey Halpin (maintainer)
mail/fetchmail: update to 6.5.1, minor polishing.
Translation updates for files we missed to have translated.
Some improvements to the build experience were made;
most of the local patches have been integrated upstream.
(Also fixes missing TIMESTAMP and SIZE fields in distinfo,
vs. Corey's review. -- Thanks!)
Approved by: Corey Halpin (maintainer)
PR: 282743
mail/fetchmail: make OPIE and RPA optional, UPDATING info added
Fix a build failure on FreeBSD 14+ with OPIE (now in ports) enabled and
NLS disabled, by adding ${LOCALBASE}/include to the compiler's path.
OPIE and RPA have been made optional because both have significant security
problems. OPIE support was not provided by the port on 14.x until the update
to 6.5.0, when it was briefly re-activated. Because of its security flaws, it
has now been disabled by default on both 13.x and 14.x.
RPA is currently enabled by default, but this will change in a future update.
PR: 282444
Reported by: Helge Oldach
mail/fetchmail*: update to 6.5.0
Improve upon the prior opie handling and use the port on FreeBSD 14.
For the FreeBSD 13 base OpenSSL 1.x version, allow it by patching
socket.c, and also simplify the EVP_MD* API update check which will go
upstream.
PR: 282413
Approved by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer)
mail/fetchmail*: bugfix update to 6.4.39
* When a server offers STARTTLS although the connection is already wrapped
in TLS, fetchmail would issue a bogus "WARNING: server offered STARTTLS but
sslproto '' given." (or STLS for POP3). In situations where we wrap the
connection in TLS, suppress the warning. Reported by Mike Pope.
* If fetchmail was running localized, generate an error e-mail message locally,
and if the selected translation would require the Subject: line to wrap
inside an RFC-2047 encoded word (=?UTF-8?Q?...?=), the wrapped encoded-word
was not indented, thus not marked as a continuation line.
PR: 280384
Approved by: Corey Halpin <chalpin@cs.wisc.edu>
*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree
- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
Also move conditional flags for non sparc64/arm ARCH to fixed flags.
Reviewed by: brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068
mail/fetchmail: update to 6.4.34 (critical fix)
= CRITICAL BUG FIXES:
* When an SMTP receiver refuses delivery, a message would be deleted from
the mail store in spite of a softbounce option that is enabled.
Bug report, analysis and patch by Horváth Zsolt. Gitlab, fixes #50.
= BUILD NOTE:
* If you are reusing config.cache from prior builds, this may cause
issues with finding Python or some libraries. In case of trouble,
remove config.cache and retry.
= TRANSLATIONS: language translations were updated by this fine person:
* sr: Мирослав Николић (Miroslav Nikolić) [Serbian]
mail/fetchmail: Chase src 0aa2700123e2: Put OPIE to rest
As of src 0aa2700123e2 OPIE has been removed from 14-CURRENT. When
building on a 14-CURRENT machine with __FreeBSD_version > 1400071
avoid linking libopie else this will result a build failure or if
built the following runtime error:
ld-elf.so.1: Shared object "libopie.so.8" not found, required by "fetchmail"
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
mail: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ashish@FreeBSD.org>
* Aaron Dalton <aaron@FreeBSD.org>
* Adam David <adam@FreeBSD.org>
* Adam McDougall <mcdouga9@egr.msu.edu>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Akinori MUSHA aka knu <knu@idaemons.org>
* Alex Deiter <tiamat@komi.mts.ru>
* Alex Dupre <ale@FreeBSD.org>
* Alex Dupre <sysadmin@alexdupre.com>
* Alex Perel <veers@disturbed.net>
(Only the first 15 lines of the commit message are shown above )
mail/fetchmail: update to 6.4.31.
Since the distro was built with a newer autoconf, the patch-configure
no longer applies and has been converted to a post-patch REINPLACE_CMD,
also to avoid future breakage.
This also adds one upstream Git patch to fix the version and date tags
in the manual page.
PR: 265251
Approved by: Corey Halpin (maintainer)
mail/fetchmail: update to 6.4.28
BREAKING CHANGES:
* Bump wolfSSL minimum required version to 5.1.1 to pull in security fix.
FIXES:
* When using wolfSSL 5.0.0, work around a bug that appears to hit wolfSSL when
receiving handshake records while still in SSL_peek(). Workaround is to read
1 byte and cache it, then call SSL_peek() again.
This affects only some servers. https://github.com/wolfSSL/wolfssl/issues/4593
TRANSLATIONS: language translations were updated by this fine people:
* es: Cristian Othón Martínez Vera [Spanish]
* ro: Remus-Gabriel Chelu [Romanian]
* sr: Мирослав Николић (Miroslav Nikolić) [Serbian]
MFH: 2022Q1
mail/fetchmail: update 6.4.25, add WOLFSSL support
WOLFSSL is a GPLv2+ licensed SSL library with OpenSSL compatibility
layer. This is to permit shipping fetchmail under a clean GPLv2+
license with OpenSSL 1.1.1.
mail/fetchmail: update to 6.4.24 and block LibreSSL.
Now really 6.4.24 and not a 6.4.25 WIP.
fetchmail cannot legally be linked with LibreSSL,
because there is no GPLv2 clause 2b exemption for
LibreSSL, only for OpenSSL.
Correct LICENSE and remove LICENSE_COMB.
Add comment on FSF dynamic linking dynamically
suggested by Corey Halpin in the approval.
Remove LibreSSL patch.
Related to:
PR: 259214
Update:
PR: 259945
MFH: 2021Q4
Approved by: chalpin@cs.wisc.edu (maintainer)
Revert "mail/fetchmail: update to 6.4.24 and block LibreSSL."
This reverts commit 30e97245f9dd9ddef1bffd874a9035a6fe9b6817.
That wasn't the approved patch, but a later WIP one. Fixing up.
mail/fetchmail: update to 6.4.24 and block LibreSSL.
fetchmail cannot legally be linked with LibreSSL,
because there is no GPLv2 clause 2b exemption for
LibreSSL, only for OpenSSL.
Correct LICENSE and remove LICENSE_COMB.
Remove LibreSSL patch.
Add FSF comment suggested by Corey Halpin in PR.
Related to:
PR: 259214
Update:
PR: 259945
MFH: 2021Q4
Approved by: chalpin@cs.wisc.edu (maintainer)
mail/fetchmail: update to 6.4.22 release.
This contains documentation updates, and one code change to the IMAP
client: IMAP: fix error code when LOGIN fails
This recently printed 'we've run out of authentication methods'
instead of the actual authentication failure.
This also formally adds OpenSSL 3.0.0 support.
PR: 258486
Approved by: Corey Halpin (maintainer)
mail/fetchmail: update to 6.4.22.rc3
This fixes an IMAP protocol issue affecting all but the first IMAP
server in a run. It also updates translations.
PR: 258146
MFH: 2021Q3
Approved by: Corey Halpin (maintainer)
mail/fetchmail: update to 6.4.19
* CHANGE: fetchmailconf: properly catch and report option parsing errors
* BUG FIX: LMTP: do not try to validate the last component of a
UNIX-domain LMTP socket as though it were a TCP port. Reported by
Christoph Heitkamp, Gitlab issue #33.
* TRANSLATION UPDATE: This fine person has contributed an updated
translation:
- sr: Мирослав Николић (Miroslav Nikolić) [Serbian]
PR: 256242
Approved by: Corey Halpin (maintainer)
mail/fetchmail: update to 6.4.18 (includes mail/fetchmailconf)
fetchmail-6.4.18 (released 2021-03-27, 30011 LoC):
# REGRESSION FIX:
* fetchmailconf: fetchmail 6.4.16 added --sslcertfile to the configuration dump,
but fetchmailconf support was incomplete in Git 7349f124 and it could not
parse sslcertfile, thus the user settings editor came up empty with console
errors printed. Fix configuration parser in fetchmailconf.
# ROBUSTNESS FIXES:
* fetchmailconf: do not require fetchmail for -V. do not require Tk (Tkinter)
for -d option. This is to fail more gracefully on incomplete installs.
* TLS code: remove OPENSSL_NO_DEPRECATED macros to avoid portability issues
with OpenSSL v3 - these are for development purposes, not production.
(Only the first 15 lines of the commit message are shown above )
mail/fetchmail: fetchmailconf: update to 6.4.17 (minor fixes, Japanese
translation)
# BUG FIXES
* IMAP client: plus memory leaks for username and password when trying
the LOGIN (password-based) authentication and encountered a timeout situation.
* dist-tools/getstats.py: also counts lines in *.py files [for NEWS file]
# CHANGES
* fetchmail.man: now mentions that you may need to add --ssl when specifying
a TLS-wrapped port.
* fetchmailconf: --version (-V) now prints the Python version in use.
# TRANSLATION UPDATE
* ja: Takeshi Hamasaki [Japanese]
PR: 254208
Approved by: Corey Halpin (maintainer)
MFH: 2021Q1
mail/fetchmail: mail/fetchmailconf: Update to 6.4.13 [1], fix rcfile bug [2]
Update mail/fetchmail{,conf} to 6.4.13 and fix rc script to work correctly
when root's shell does not include /usr/local/bin in $PATH.
mail/fetchmail passes 'poudriere testport' on both i386 and amd64 under
11.4 and 12.1 for the following configurations:
- Default settings
- Default settings, build as non-root
- ssl=base, GSSAPI_MIT
- ssl=base, GSSAPI_NONE
- ssl=openssl
- ssl=openssl with SSL2 and SSL3 disabled
- ssl=openssl, GSSAPI_NONE
- ssl=libressl
(Only the first 15 lines of the commit message are shown above )
mail/fetchmail: Fix shell's 'Bad -c option' in rcscript.
Turns out that our fetchmail_dump_config() function needs to add
one more level of quoting because it's being unquoted and word split
twice, once by su's shell, and again by sh.
While here, change sh to /bin/sh to make the intention clearer.
Bump PORTREVISION to get the fix out onto the systems.
PR: 250691
Reported by: Helmut Ritter <freebsd-ports@charlieroot.de>
Approved by: chalpin@cs.wisc.edu
MFH: 2020Q4 (blanket, one-line tested working fix, 4-eyes principle)
mail/fetchmail: fix rcscript regression from _1 that broke global mode
In a situation where fetchmail is to be started globally with the
configuration in $LOCALBASE/etc, the rc.d file would try to run
fetchmail for the wrong user.
Simplify script more, avoiding recursive call in single-user mode.
Submitted by: Corey Halpin (maintainer, direct mail to mandree@)
Reported by: Armin Tuting
mail/fetchmail: avoid rc.conf overriding daemon interval, many other fixes
Authors: CH = Corey Halpin, MA = Matthias Andree
- fetchmail's rc script now queries the daemon interval from the
configuration, and falls back to the rc.conf value if given. [CH]
- Similarly, the logging facility will be taken from the configuration [MA]
- Add documentation to the rcfile's header comments. [MA]
- Drop support for fetchmail_home_prefix in rc.conf, and query the
respective users' home directories with getent instead. [MA]
- In the rc scripts, redirect input from /dev/null so it will not ask
for passwords. [MA]
- Add support for the typical 12.1 rc.conf ${name}_... keywords. [MA]
- Make script execution easier to follow by simplifying if...else logic. [CH]
- Fix rcscript's exit code to be 1 if one of the per-user calls fails. [CH]
- Add relevant notes to UPDATING. [MA]
PR: 249860
Submitted by: Corey Halpin (maintainer)
Reported by: Chris James (on fetchmail-users mailing list)
Approved by: Corey Halpin (maintainer)
mail/fetchmail: update to 6.4.12 (regression fixes)
Fixes these regressions:
- Misleading false complaints that TLSv1.3 support were missing from the
system but still auto-negotiating it (broken in 6.4.9, fixed in 6.4.11).
- README contained NEWS fragments (broken since c. 1 year/c. 6.4.2,
fixed in 6.4.12) instead of the actual contents.
(This was also the reason to skip 6.4.11).
For the potential MFH 6.4.8 -> 6.4.12, 6.4.9 also
adds to the manual page which has is used for fingerprints, MD5,
and adds a Romanian-language translation by Florentina Musat.
PR: 249009
Approved by: Corey Halpin (maintainer)
MFH: 2020Q3 (manpage, README fixes, added translation)
mail/fetchmail: update to 6.4.10
while here, switch distfile back to xz format and update
the > 2^31 "long long" fix so it patches the right place of the NEWS file.
- adds Romanian translation
- minor manual page fix to add "MD5" hash to sslfingerprint documentation
PR: 248954
Approved by: Corey Halpin (maintainer)
mail/fetchmail: update to 6.4.8, adds Serbian translation, ...
and updates a few other translations:
Czech, French, Japanese, Polish, Albanian, Swedish, Chinese/simplified,
Esperanto.
PR: 247261
Approved by: chalpin@cs.wisc.edu (Corey Halpin, maintainer)
MFH: 2020Q2 (translation updates)
mail/fetchmail: update to 6.4.4 (updates Japanese translation and version)
No code changes.
PR: 245927
Approved by: chalpin@cs.wisc.edu (Corey Halpin, maintainer)
MFH: 2020Q2 (only translation update for ja (Japanese))
mail/fetchmail, fetchmailconf: update to 6.4.3-rc2 (bug fixes)
Add a patch to document --sslproto tls1.3+ and tls1.3 through the manpage,
which hasn't made 6.4.3-rc2 but works since 6.4.0 assuming that the SSL library
supports TLSv1.3.
Remove fetchmailconf patch that is now part of the upstream code.
Switch to .lz downloads, a tiny bit smaller.
Upstream changelog:
## BUGFIXES:
* Plug memory leaks when parts of the configuration (defaults, rcfile, command
line) override one another.
* fetchmail terminated the placeholder command string too late and included
(Only the first 15 lines of the commit message are shown above )
mail/fetchmail: mail/fetchmailconf: update to 6.4.2, make Python 3 compatible
Fetchmail updated to new revision 6.4.2
- one bugfix
- manual page updates
- update of Chinese (simplified) translation
- massive fetchmailconf overhaul
+ Python 3 compatible (requires py-future)
+ Supports IPv6 and SSL probing
- remove two patches for fetchmail that are in the upstream release
- add a smoke test to fetchmailconf's post-install,
and a patch to support that running without X11 $DISPLAY.
PR: 244130
Submitted by: mandree@
Reviewed by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer)
Approved by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer)
MFH: 2020Q1 (bugfixes and fetchmailconf update and Python3 compat.)
mail/fetchmail: cat(1) test-suite.log from build
This is to assist with build error diagnosis,
after PRs 240914 and 241032.
Submitted by: mandree@
Approved by: Corey Halpin (maintainer)
(obtained by e-mail outside Bugzilla)
Limit USES+=compiler:c11 to powerpc* and FreeBSD < 13.
MIPS regressed in r513614 because it does not have a C11
compiler. Fetchmail 6.4.1 is C89 code, one patch we provide
makes it C99 (it requires the long long int type).
The base compiler on powerpc 11/12 does not yield an executable,
but MIPS on the other hand does not offer a C11 compiler,
so for now, revert anything but powerpc before FreeBSD 13
to use its base compiler. FreeBSD 13 is exempt and also uses
the base compiler, because the ARCH guys intend to merge LLVM 9
soon.
PR: 241031
Reviewed by: pkubaj@
Approved by: blanket (fix recent regression from r513614)
Fixup minor oversights from r490780 mail/fetchmail*
* Update comment in mail/fetchmail/files/fetchmailrc.sample
* Remove mail/fetchmail/files/fetchmail.in that got copied
to mail/fetchmailconf/files/
mail/fetchmail depends overhaul, new fetchmailconf port
* Bring back SNI (server name indication) support for TLS connections,
lost in 6.3.26_10 (PORTREVISION=10) as a regression over _9.
Pointy hat: mandree@
* Drop the X11 option, remove the Python dependency, and create a new
mail/fetchmailconf slave port/package that installs the fetchmailconf
configurator. Note that the _DEPENDS of the ports reflects a technical
dependence (fetchmailconf needs fetchmail), and we cannot keep an
X11 option that depends on fetchmailconf, since that would create
a circular dependency, which we must avoid.
* Patch configure instead of configure.ac with Cy's Kerberos fix, drop
autoreconf from USES, and add a new configure check directly to set
HAVE_DECL_SSLV3_CLIENT_METHOD to cover the various TLS providers
(currently five, base, openssl, openssl111, libressl, libressl-devel)
* Add -Wl,--as-needed to LDFLAGS so as not to pull in unneeded .so
libraries, for instance, libcom_err when compiling under GSSAPI_NONE.
* Bump PORTREVISION.
Very fruitful and nice collaboration with and
Approved by: chalpin@cs.wisc.edu (maintainer)
Fix GSSAPI-based, and NLS-less, builds.
This was also tested on a live 12.0 amd64 machine,
11.2-arm64 and 11.2-i386 poudriere boxes with base GSSAPI.
PR: 234740
Reported by: Peter Putzer (Bugzilla), Alex V. Petrov (e-mail)
Approved by: Corey Halpin (maintainer)
Correctly link to MIT KRB5 libraries when selected.
This was discovered while working through issues relating to an
exp-run using base with private Heimdal, part of the project to
make a) Heimdal in base private and b) import MIT into base (PR 222745).
PR: 227680
Submitted by: cy@
Approved by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer)
MFH: 2018Q2
Do not use post-stage. Use post-install instead.
The only reason to use post-stage is because the port needs to do
"things" at a later time, like some plist manipulation.
While there, fold post-install in do-install targets when they are
defined.
PR: 214780
Submitted by: mat
Exp-run by: antoine
Sponsored by: Absolight
Fix pkg-plist when X11 option is on.
PR: 210757
Submitted by: Ting-Wei Lan <lantw44@gmail.com>
Approved by: Corey Halpin <chalpin@cs.wisc.edu> (maintainer)
Disable SSLv2, to fix new/from-ports OpenSSL builds.
Newer and ports-based builds define the SSLv2_client_method() in the
headers unless OPENSSL_NO_SSL2, or, depending on version,
OPENSSL_NO_SSL2_METHOD is defined, however newer OpenSSL versions in
FreeBSD no longer provide the implementation in the library.
Preload the autoconf (configure) cache to pretend SSLv2_client_method()
were universally _un_available, effectively disabling SSLv2 altogether.
PR: 209596
Submitted by: peter@ [first proposal], mandree@ [committed proposal]
Reported by: peter@
Approved by: chalpin@cs.wisc.edu (maintainer)
Improve shebangfix framework
- Support multiple values in *_OLD_CMD, i.e. we can now fix both
"/usr/bin/python" and "/usr/bin/env python" at the same time
- Default *_OLD_CMD values are now always appended, so you don't need to specify
them in individual ports
- Add lua support (depends on USES=lua)
- Add more default values, such as "/usr/bin/env foo" for python, perl, bash,
ruby and lua
- Shebangfix now matches whole words, e.g. we will no longer (erroneously)
replace "/usr/bin/perl5.005" with "${perl_CMD}5.005" (but "/usr/bin/perl -tt" is
still (correctly) replaced with "${perl_CMD} -tt")
Note that *_OLD_CMD items containing spaces must now be quoted (e.g.
perl_OLD_CMD=/bin/perl /usr/bin/perl "/usr/bin/env perl")
Update shebangfix usage according to new rules in many ports:
- Remove *_OLD_CMD for patterns now replaced by default
- Quote custom *_OLD_CMD which contain spaces
Fix shebangfix usage in many ports (irrelevant to infrastructure change):
- Remove redundant SHEBANG_LANG (no need to duplicate default langs)
- Remove redundant *_CMD (such as
python_CMD=${LOCALBASE}/bin/python${PYTHON_VER} when USES=python is present)
- Never use *_OLD_CMD in REINPLACE_CMD matchers, these should always look for
exact string
Approved by: portmgr (bapt)
Differential Revision: D3756
