dns/opendnssec2: Update 2.1.13 → 2.1.14

News:
https://www.opendnssec.org/2024/08/opendnssec-2-1-14/

Also:
- Repalace http with https in MASTER_SITES
- Remove GNU_CONFIGURE_MANPREFIX
- Formatting

PR:	281078

dns/opendnssec2: make the rc script service jails aware

PR:		279634
Approved by:	maintainer timeout (1 month)

dns/opendnssec2: Moved man to share/man

Approved by:    portmgr (blanket)

*/*: Refactor with IGNORE_WITH_MYSQL

- There are multiple ports which has MYSQL options and are non-DEFAULT.
  Most of the time committers actually forget to check with the OPTION
  enabled and in some cases they are BROKEN with newr versions of mysql.
  So test with different versions of mysql and mark IGNOPRE_WITH_MYSQL
  appropriately. Due to the EOL of 5.7 this has not been checked.
- Unbreak sysutils/cfengine* with MySQL 8.0 and later
- The primary purpose of running this check is having statistics of the
  MySQL usability over MariaDB to explore the future possibility of
  shifting to MariaDB as the default as major ports upstream have moved
  their codebase to support MariaDB over MySQL.
- The following actions will also be taken after the sunset of MySQL 5.7
  If a port is broken on all instances of MySQL/MariaDB:
  - If a port has the option of multiple DB backends and MySQL is the
    default then the DEFAULT will be changed to PGSQL/SQLITE before
    2024Q1. And the OPTION will be removed before 2024Q2. If a
    MAINTAINER is aware about such cases and want to prefer PGSQL over
    SQLITE or vice versa please do so at your own accord. Otherwise
    PGSQL will be preferred over SQLITE.
  - If a port has the option of multiple DB backends and MySQL is not
    the default then the the OPTION will be removed before 2024Q1.

Approved by:	portmgr (blanket)

dns/opendnssec2: Update t0 2.1.7

ChangeLog: https://www.opendnssec.org/2023/06/opendnssec-2-1-13/

This release fixes a bug that affects both signer and enforcer command
line handling. Under heavy usage of the command line there was a small
change for a crash.
Furthermore there is a small behavioural change for users of the "keep"
policy. The back-off for retrying a sign task change is now equal to
the resign period in case the input file isn't available or updated.
This because users nearly always will emit an external sign command for
this period. This will reduce logging errors.

PR:		272254
Reported by:	jaap@NLnetLabs.nl (maintainer)

dns/opendnssec2: update to 2.1.12

Changelog: https://www.opendnssec.org/2022/11/opendnssec-2-1-12

PR:		270931

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

dns: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Alex Samorukov <samm@freebsd.org>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Allan Jude <allanjude@freebsd.org>
  *  Amar Takhar <verm@drunkmonk.net>
  *  Anders Nordby <anders@fix.no>
  *  Andrew Greenwood <greenwood.andy@gmail.com>
  *  Anton Berezin <tobez@FreeBSD.org>
  *  Ashish SHUKLA <ashish@FreeBSD.org>
  *  Attila Nagy <bra@fsn.hu>

textproc/libxml2: bump all LIB_DEPENDS consumers

This is a separate commit to facilitate easier cherry-picking for
quarterly.

PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)

textproc/libxml2: bump all dependencies

This should make sure that all dependent ports will pick
up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246

dns/opendnssec2: Update to 2.1.10

* Pet portclippy
* Reformat Makefile with portfmt

ReleaseNotes:	https://www.opendnssec.org/2021/09/opendnssec-2-1-10/
PR:		258631
Approved by:	ygy (mentor)
Differential Revision:	https://reviews.freebsd.org/D32536

dns/opendnssec2: Add CPE information

Approved by:    portmgr (blanket)

dns/opendnssec2: Update to 2.1.9

Changes: https://www.opendnssec.org/2021/05/opendnssec-2-1-9/

PR:	255615

all: Remove all other $FreeBSD keywords.

Remove # $FreeBSD$ from Makefiles.

dns/opendnssec2: Add missing patch to fix the build

PR:		254075
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)

dns/opendnssec2: Update to 2.1.8

Changes: https://www.opendnssec.org/2021/02/opendnssec-2-1-8/

PR:		253795
Submitted by:	Jaap Akkerhuis <jaap AT NLnetLabs DOT nl> (maintainer)

dns/opendnssec2: Update to 2.1.7

Patches removed were incorporated upstream.

Changelog:	https://www.opendnssec.org/2020/10/opendnssec-2-1-7/

PR:		250293
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
MFH:		2020Q4 (blanket: bugfix release)

Fix build with -fno-common

While here use INSTALL_TARGET=install-strip to install stripped binaries.

dns/opendnssec2: upgrade 2.1.4 -> 2.1.6

This release of 2.1.6 fixes some issues regarding the key list
wrongfully displayed (a regression bug in 2.1.5) as well as a small
leak in the enforcer (which can add up when you bang the enforcer
with a lot of commands. And as well as a serious signing error when
using Combined Signing Keys (CSKs), this is only relevant if you
combine KSK and ZSK in one. Especially users of CSKs need this fix
now. Another nice fix is a reconnect to a MySQL/MariaDB database
you you don't have to tweak database parameters.

PR:		244047
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Relnotes:	https://www.opendnssec.org/2019/11/opendnssec-2-1-5/
		https://www.opendnssec.org/2020/02/opendnssec-2-1-6/

dns/opendnsssec*: switch to openhsm2 to the HSM option.

Bump PORTREVISION on ldns consumers

Shared lib version changed in update

Reported by:	sunpoet

Convert to UCL & cleanup pkg-message (categories d)

Update to 2.1.4

PR:		237988
Sponsored by:	Netzkommune GmbH

Update to 2.1.3:

As of today version 2.1.3 of OpenDNSSEC has been released. No special
migration steps are required when upgrading from a previous 2.x.x
release. It includes fixes to the build system, some regressions w.r.t.
OpenDNSSEC 1.4 and a signing bug. Please note that version 2.1.2 was
skipped for release.

Build fixes:

* OPENDNSSEC-904: autoconfigure fails to properly identify functions in
  ssl library on some distributions. This caused the "tsig unknown
  algorithm hmac-sha256" error.
* OPENDNSSEC-894: repair configuration script to allow excluding the
  build of the enforcer.

* Bump Revision
* Fix typo in the Port's Makefile, causes a failure in a conversion script
* Added license file
* Cleanup Makefile

PR:		221144
Submitted by:	<jaap@NLnetLabs.nl> (maintainer)
Reviewed by:	matthew (mentor)
Approved by:	matthew (mentor)
MFH:		2017Q3
Differential Revision:	https://reviews.freebsd.org/D11898

Fix OPTIONS_DEFAULT: remove DOCS which is added by framework

Approved by:	portmgr (blanket)

dns/opendnssec2: update 2.1.0 -> 2.1.1

- OPENDNSSEC-889: MySQL migration script didnt work for all database
  and MySQL versions.
- OPENDNSSEC-887: Segfault on extraneous tag.
- OPENDNSSEC-880: Command line parsing for import key command failed.
- OPENDNSSEC-890: Bogus signatures upon wrong zone input when TTLs
  for same rrset are mismatching.

PR:		218995
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)

dns/opendnssec2: update 2.0.3 -> 2.1.0

- Fix DB scripts from docs

PR:		217563
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
MFH:		2017Q1

- Chase ldns shlip bump

PR:		217495

dns/opendnssec2: update 2.0.1 -> 2.0.3

PR:		213610
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
MFH:		2016Q4

dns/opendnssecs: Add SSL flags and honor them, configure SSL base too

Approved by:	SSL blanket

- Update to 2.0.1
- Switch to options helpers

This release is primarily focused on ironing out the issues on the migration
path from 1.4 to 2.0. Besides that there are no functional changes.


* Fixed crash and linking issue in ods-migrate.
* Fixed case where 2.0.0 could not read backup files from 1.4.10.
* Fixed bug in migration script where key state in the database wasn't
transformed properly.

PR:		211403
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Sponsored by:	DK Hostmaster A/S

The current opendnssec porthas seen a massive rewrite by the upstream
so it was rechristened opendnssec Version 2.
To quote the announcement at <https://www.opendnssec.org>:

"OpenDNSSEC got a entire re-write of the enforcer. This part of
OpenDNSSEC controls changing signing keys in the right way to perform
a roll-over. Before, the enforcer would perform a roll-over according
to a strict paradigm. One scenario in which deviations would not be
possible.

The new enforcer is more aware of the zone changes being propagated in
the Internet. It can therefore decide when it is safe to make changes,
rather than to rely upon a given scenario.

PR:		211018
Submitted by:	Jaap Akkerhuis <jaap@NLnetLabs.nl>
Sponsored by:	DK Hostmaster A/S