17:22 Cy Schubert (cy) 

security/heimdal*: Remove LLVM_DEFAULT build prerequisite

Adjust ./configure to set the correct CLANG_FORMAT value when
clang-format is not found (when none of the llvm ports are installed).

PR:		267814
Submitted by:	Tatsuki Makino <tatsuki_makino@hotmail.com>
MFH:		2022Q4

    22a683a

17:18 hrs 

Regen patches.

 

17:12 hrs 

Fix build breakage when PKINIT and/or KX509 disabled.

PR:	244751

 

14:57 hrs 

- Fix build when !BDB.
- Regenerate patches.

PR:	244282

 

19:32 hrs 

Update to 7.3.0.

 

07:50 hrs 

Fix build when !BDB and db5 is installed at the same time.
The configure script picked up the db5 library though
ac_cv_func_db_create=no.

PR:	215772

 

02:09 hrs 

- Fix krb5-config --libs to provide a list of libraries including
  dependency.  This broke ports which depend on this utility.

- Add LMDB option to support database/lmdb.

 

20:00 hrs 

- Enable dbopen() in DB 1.85 even if !BDB because libhdb with
  no backend is very confusing.

- Fix build when !BDB[*]

PR:	215741 [*]

 

13:52 hrs 

Update to 7.1.0.  Changes include:

- hcrypto is now thread safe on all platforms and as much as possible
  hcrypto now uses the operating system's preferred crypto
  implementation ensuring that optimized hardware assisted
  implementations of AES-NI are used.

- RFC 6113 Generalized Framework for Kerberos Pre-Authentication
  (FAST).

- Hierarchical capath support

- iprop has been revamped to fix a number of race conditions that
  could lead to inconsistent replication.

- The KDC process now uses a multi-process model improving resiliency
  and performance.

- AES Encryption with HMAC-SHA2 for Kerberos 5
  draft-ietf-kitten-aes-cts-hmac-sha2-11

- Moved kadmin and ktutil to /usr/bin

- Stricter fcache checks (see fcache_strict_checking krb5.conf setting)

- Removed legacy applications: ftp, kx, login, popper, push, rcp, rsh,
  telnet, xnlock

 

21:22 hrs 

- Fix Berkeley DB dependency.  It now properly uses BDB_LIB specified in
  Mk/Uses/bdb.mk instead of db185 interfaces in libc.
  As a side-effect, this causes a compatibility issue between
  heimdal.db created by kadmin(8) in the base system or one by
  an older security/heimdal.  See UPDATING about this issue.

- Fix readline dependency end eliminate libheimedit.

- Use -lpthread instead of -pthread.

- Use FOO_CONFIGURE_WITH=foo instead of FOO_CONFIGURE_ON=--with-foo.

 

22:42 jkim 

Do not let the configure script pick up Berkeley DB from ports.

Approved by:	hrs (maintainer)

 

10:51 hrs 

- Move headers and libraries into PREFIX/{include,lib}/heimdal.  This
  prevents build breakage when a port depends on heimdal in base and
  some other libraries in LOCALBASE/lib such as OpenSSL from ports
  at the same time.

- Always build libcom_err[*].

PR:	194475 [*]

 

12:44 hrs 

- Add LICENSE.
- Build kcm by default.
- Use gssapi.mk.
- Use ${opt}_* variables instead of .if ${PORT_OPTIONS:Mopt} wherever possible.
- Use /var/heimdal as $hdbdir for compatibility with Heimdal in base.
- Merge pkg-plist.* into pkg-plist.
- Remove lines that are no longer valid.
- Remove stale kdc.sh.  rc.d scripts in base system work with this port.