security/libprelude: Moved man to share/man

*/*: llvm15 build fixes

llvm15 was also merged into 13.2-STABLE effective from OSVERSION
1302505. Fix the ports that failed to build with llvm15.

Approved by:	portmgr (blanket)

security/libprelude: UNBREAK on HEAD

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

security/libprelude: Resurrect

Update to latest release 5.2.0

cleanup: Remove expired ports:

2022-03-31 security/revealrk: Deprecate, marked BROKEN on 12+ in 2018
2022-03-31 devel/apache-commons-modeler: Abandoned upstream, last release in
2013
2022-03-31 security/afl: Abandoned upstream, no new release since 2017. Please
consider using security/afl++ instead
2022-03-31 www/mod_line_edit: Abandoned upstream, last release in 2006, Apache
includes mod_sed
2022-03-31 www/myfaces: Unsupported by upstream, released in 2005
2022-03-31 www/mod_backtrace: Abandoned upstream in 2012 (version 2.0)
2022-03-31 security/base: Broken with PHP 7+, forked here
https://github.com/NathanGibbs3/BASE/
2022-03-31 security/find-zlib: Deprecated, no longer relevant
2022-03-31 security/razorback-clamavNugget: Abandonware, last release in 2012
and listed as alpha quality by upstream
2022-03-31 security/shimmer: Abandonware, last release in 2008
2022-03-31 security/kripp: Abandonware, upstream returns 404 and last release
was back in 2007
2022-03-31 security/ipfilter2dshield: Abandonware, no word of it on upstream web
site
2022-03-31 security/sha: Obsolete, we have tools in base

*/*: Take maintainership

all: return koobs' ports to the pool after safekeeping his commit bit.

security/*: Deprecate and mark ports BROKEN that are dead upstream and/or
abandonware

security/afl			-	Migrate to security/afl++
security/amap			-	Abandoned upstream, last release 10+ years ago
security/amavis-stats		-	Upstream is dead and last release was back in 2005
security/arirang		-	Abandoned (website also refers to Ruby 1.9) and a 9+ year
old webserver security scanner isn't useful today
security/axTLS			-	Very outdated and abandoned, current version in tree was
released in 2013 and last by upstream in 2019
security/base			-	Broken with PHP 7+, forked here
https://github.com/NathanGibbs3/BASE/
security/bruteforceblocker	-	Abandonware, please consider using
security/sshguard
security/cfs			-	Deprecated upstream, reference:
https://www.bayofrum.net/cgi-bin/fossil/cfs/index
security/cisco-torch		-	Unfetchable, dead upstream
security/cp2fwb			-	Used with deprecated software Firewall Builder
security/dcetest		-	Targets deprecated protocol by Microsoft in favour of .NET
security/doscan			-	Abandonware, last release in 2014. Please consider using
security/masscan or sysutils/pnscan
security/find-zlib		-	Deprecated, no longer relevant

Remove # $FreeBSD$ from Makefiles.

Mark as BROKEN on riscv64:

  configure:26760: checking for /nxb-bin/usr/bin/c++
  configure:26788: result: no
  configure:26797: error: Easybindings require a C++ compiler, but none were
found.

NB: in my jail, /nxb-bin/usr/bin/c++ does indeed exist.

Approved by:	portmgr (tier-2 blanket)
Obtained from:	lonesome.com build testing

security/libprelude[db]: remove optional binding for expired Python 2.7

PR:		249763
PR:		249764
Submitted by:	swills

security/libprelude: unbreak on armv{6,7}

Builds fine.

Approved by:	mentors (implicit approval)

For ports that are marked BROKEN on armv6, and also fail to build on
armv7, mark them so.

This is part two of a multipart commit to bring armv7 ports to parity
with armv6.

Approved by:	portmgr (tier-2 blanket)
Obtained from:	lonesome.com -exp run

Mark some ports failing on armv6, for errors classified as "configure_error".

Note: this skips all the ports that _sometimes_ fail with CMake errors.  We
need to investigate that problem, and find out if it is specific to the qemu
environment.

While here, pet portlint.

Approved by:	portmgr (tier-2 blanket)

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

- Update security/gnutls to 3.4.10.
- Rename the LIBDANE option DANE because that's the name of the protocol
  supported by libgnutls-dane and gnutls-cli.  Also clarify the option
  description.
- Add an IDN option.
- libgnutls-openssl has been removed in 3.4.  Some ports used this library
  in their LIB_DEPENDS but no port actually required it.
- Some old API functions have been removed.  Ports that used these have been
  updated or patched to use the new API.
- Add a patch to print/cups to prevent overlinking of libgnutls.so.
- Bump PORTREVISION on dependent ports.

net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.

www/hydra: Mark BROKEN.  This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.

PR:		207768
Exp-run by:	antoine
Approved by:	portmgr (antoine)

By default libtool replaces -export-symbols <file> with -retain-symbols-file
<file> on ELF systems, but this doesn't really do what -export-symbols is
meant to do.  On GNU ELF systems it converts <file> to a simple version
script first and then uses -version-script instead of -retain-symbols-file.
Let USES=libtool patch libtool scripts to do this on all systems with GNU
ld(1).

Bump PORTREVISION on all ports where the build log contains -export-symbols.

audio/calf: This port builds a module that now exports only one function,
but it also builds a number of executables that link to this module and
expect to see other functions.  Because it's already a bit dodgy to link to
a module (libtool warns about this) let the module continue to export only
one function and instead build an ordinary library from the same source that
the executables can link to.  Fix a number of other issues in the same

- Modernize plist
- Modernize BROKEN

Approved by:	portmgr blanket

security/libgcrypt: 1.6.1 -> 1.6.2, bump depends

Changes:
- src/sexp.c (do_vsexp_sscan): Return error for invalid args.
- cipher/md.c (_gcry_md_info): Fix a segv in case of calling
  with wrong parameters.
- cipher/primegen.c (_gcry_generate_elg_prime): Change to return an
  error code, possible NULL deref in call to prime generator.
- cipher/dsa.c (generate): Take care of new return code.
- cipher/elgamal.c (generate): Change to return an error code.  Take
	care of _gcry_generate_elg_prime return code.
- ecc: Support the non-standard 0x40 compression flag for EdDSA.
- mpi: Extend the internal mpi_get_buffer.
- mpi: Fix regression for powerpc-apple-darwin detection.
- Fix bug inhibiting the use of the sentinel attribute in src/gcrypt.h.in

Change the way Perl modules are installed, update the default Perl to 5.18.

Before, we had:

  site_perl :           lib/perl5/site_perl/5.18
  site_perl/perl_arch : lib/perl5/site_perl/5.18/mach
  perl_man3 :           lib/perl5/5.18/man/man3

Now we have:

  site_perl : lib/perl5/site_perl
  site_arch : lib/perl5/site_perl/mach/5.18
  perl_man3 : lib/perl5/site_perl/man/man3

Modules without any .so will be installed at the same place regardless of the

Replace USE_AUTOTOOLS=libltdl with an ordinary LIB_DEPENDS in all ports.
There are only 60 such ports so there doesn't need to be a separate
keyword or USES for this.

Approved by:	portmgr (bapt)

security/libprelude: Take MAINTAINER'ship, STAGE & Modernize

- Take Maintainership
- Enable STAGE support
- Tweak MASTER_SITES https -> http (portlint)
- Add LICENSE and LICENSE_FILE
- Deprecate USE_AUTOTOOLS for libtool (-> USES)
- Sort USES and OPTIONS
- Use OPTIONS helpers as much as possible for now [1]
- Add --enable-static to CONFIGURE_ARGS to retain the static lib
- Assign and Use ETCDIR rather than hardcoding
- Use the install-strip install target
- Update pkg-plist, use @sample and other goodies

While I'm here, bump dependent ports since our SHLIB major version has
changed

[1] https://reviews.freebsd.org/D665

Approved by: portmgr (implicit, bump unstaged port)

security/libgcrypt: 1.5.3_3 -> 1.6.1

- Update to 1.6.1
- Remove some unneeded patches
- Fix pkg-plist
- report configure bug upstream
  https://bugs.g10code.com/gnupg/issue1668
- report API breakage downstream and find that MacPorts had the same issue
  https://rt.cpan.org/Ticket/Display.html?id=97201
- bump PORTREVISION for dependent ports (approx. 100 ports)
- Thanks to exp-run by antoine@ to find ports that break
- patch ports that would otherwise break
  security/shishi with PR 192164 is already committed
  [1] devel/ccrtp
  [2] editors/abiword
  [3] security/p5-Crypt-GCrypt

PR:		191256, 192162 [1], 192163 [2], 192166 [3]
Submitted by:	Carlos Jacobo Puga Medina <cjpugmed@gmail.com>
Approved by:	maintainer timeout, antoine (exp-run), portmgr (implicit)

- Replace security/gnutls with security/gnutls3 and update to 3.2.15
- Bump PORTREVISION on all ports that depend on security/gnutls and
  adjust all ports that depend on security/gnutls3
- Update mail/anubis to version 4.2 which supports gnutls 3.x
- Update mail/libvmime to a development snapshot (recommended by upstream
  developers)

PR:		191274
Exp-run by:	antoine
Approved by:	portmgr (antoine)

Modernize LIB_DEPENDS

With hat:	portmgr

Remove all the bootstrap files (.bs) from the plists.

Starting with perl 5.20, they're not installed any more if empty,
and on FreeBSD, they're (always ?) empty.

PR:		190681
Submitted by:	mat
Exp-Run by:	antoine
Sponsored by:	Absolight

- Convert gmake, bzip2 to USES

Approved by:	portmgr

Fix properties on pkg-plist

Add NO_STAGE all over the place in preparation for the staging support (cat:
security)

- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)

- Convert to new perl framework
- Trim Makefile header

Add a missing directory to pkg-plist

 - Fix build with new site_perl

Submitted by:	olli hauer <ohauer@gmx.de>

- Fix build

Chase security/libgcrypt update

- Convert USE_ICONV=yes to USES=iconv
- Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig and
  USE_GETTEXT=yes to USES=gettext while here

- Convert USE_GETTEXT to USES (part 4)

Approved by:	portmgr (bapt)

Finish converting the whole ports tree to USES=pkgconfig

This changes almost all the "gnomehack" only USE_GNOME cases to USES= pathfix.

If a port used other USE_GNOME items it was untouched.
The ports that used other USES were fixed by hand.

PR:		ports/177081
Reviewed by:	bapt
Approved by:	portmgr (miwi)

- Add UPDATING entry for gnutls update
- Chase shlib version bump for dependant ports

Update Prelude-IDS ports to 1.0.1 release

security/libprelude:
- Remove BROKEN, update to version 1.0.1 [1]
- Add missing deps, port requires pkg-config during build

security/libpreludedb:
- Update to version 1.0.1p1
- Add missing deps
- Make options deterministic and not dependent on what's installed

security/prelude-lml:
- Update to version 1.0.1
- Add missing deps, port requires pkg-config during build
- Convert to OptionsNG

Convert to new options framework

- Mark BROKEN: does not configure
  configure: error: libgnutls is required in order to build libprelude.

Reported by:	pointyhat

Fix master_site

- Fix build by explicitly depending on libgcrypt

Reported by:    pointyhat

-remove MD5

Chase security/gnutls update and add an UPDATING entry.

Reset r.gruyters@snow.nl by request due to lack of time.

Feature safe:   yes

- Update to 0.9.24.1, unbreak

PR:             ports/138371
Submitted by:   Vladimir Korkodinov <viper@perm.raid.ru>
Approved by:    maintainer timeout (17 days)
Feature safe:   yes

- Mark BROKEN: does not configure

Reported by:    pointyhat

- Chase gnuTLS slib bump

- Update to 0.9.21.2

PR:             131286
Submitted by:   Vladimir Korkodinov <viper at perm dot raid dot ru>
Approved by:    Robin Gruyters <r dot gruyters at snow dot nl> (maintainer)

Restore previous maintainer, now with his new email address.

Approved by:    wxs (diff not reviewed, ack'ed to commit)

Reset r.gruyters@yirdis.nl: email address bounces.

- define enable-gtk-doc=no

Reported by:    QAT

- Update to 0.9.20.2
- Fix master sites
- Fix portdocs handling
- Perl and Python binding install new files

PR:             ports/127339
Submitted by:   Yarema <yds@CoolRat.org>
Approved by:    maintainer timeout (> two weeks)

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk

Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)

- Update to 0.9.17.2

PR:             123486
Submitted by:   Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)

- Chase security/gnutls shlib version bump
- Add an entry to UPDATING

Mark as broken on sparc64: does not compile.

- Update to 0.9.16.1

PR:             ports/119708
Submitted by:   maintainer

- Update to 0.9.16
- Added two patches due to some system umask settlement(s).

Added file(s):
- files/patch-prelude-admin__prelude-admin.c
- files/patch-src__prelude-failover.c

Changelog libprelude-0.9.16:
- Implement prelude-admin list [-l] command, which provide the ability to
  list existing profile name, permission, registration permission, analyzerID,
  and Issuer analyzerid.
- Implement multiple analyzer deletion in prelude-admin.
- Correct printing of IDMEF time field using non local GMT offset.
- Patch to avoid struct typespec redefinition, due to variable mispelling.
  This fixes a compilation problem on OpenBSD 3.8.
- Various bug fixes.

PR:             ports/117417
Submitted by:   maintainer (Robin Gruyters)

- Update to 0.9.15.2
- Updated patch-Makefile.in
- Added Man page

Changelog libprelude:
- prelude-adduser has been renamed to prelude-admin, and now include command
  to print or send files containing binary IDMEF data.
- Brand new failover implementation, Feature a real 'journaling' log,
  allowing to restart where we were interupted. Allow multiple process to write
to
  the same failover, and is chroot safe.
- prelude-admin manpage, thanks to Frederic Motte <fred at ubixis com>.
- Use SHA1 in place of MD5 for Analyzer checksum.
- Do not set TCP option on UNIX socket, avoid un-necessary warning.
- New measure all over the public interface to protect against bad API
  usage, when a function is not used correctly, a critical warning is triggered.

- Update dependency on security/gnutls

PR:             ports/114210
Submitted by:   Robin Gruyters <r.gruyters at yirdis.nl> (maintainer)

- Update libprelude to 0.9.14.
- Update dependent ports accordingly.
- Bump PORTVERSION to force rebuild.

PR:             ports/112703
Submitted by:   Marcelo Araujo <araujo@FreeBSD.org>
Approved by:    stas (mentor)

- Update to 0.9.13.2

Changelog libprelude-0.9.13.2:
- Improve error reporting with the central option interface.
- Fix a bug when comparing IDMEF object with optional fields.
- Fix a problem with the logger, where large log entry wouldn't be
  logged.
- Fix distclean target.

PR:             ports/111131
Submitted by:   maintainer (Robin Gruyters)

- Update to 0.9.13.1

PR:             110389
Submitted by:   Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)

- Update to 0.9.13

PR:             ports/109428
Submitted by:   Robin Gruyters <r.gruyters at yirdis.nl> (maintainer)

Remove USE_GPG from all effected ports. This knob is a no-op and the way it
was supposed to work is useless, because if we can't trust the distfile from
the remote machine, we can't trust the signature from the same machine either.
Our MD5 and SHA256 are good for checking both the sanity and the
trustiness of distfiles.

Approved by:    portmgr (erwin), erwin (mentor)

- Update to 0.9.12.2

Changelog libprelude:
- Ability to debug TLS communication through a new LIBPRELUDE_TLS_DEBUG
  environment variable.
- Prevent binding generation error when using old SWIG version.
- Generate bindings for the error handling API.
- Small Perl/Python detection improvement. Fix #182.
- Fix bindings compilation when using make -j.
- New configure --with-perl-installdirs flags: might be used to override
  default site perl installation.
- Fix make installation error when Perl bindings are disabled.

PR:             ports/107677
Submitted by:   maintainer (Robin Gruyters)

- Chase security/gnutls update
- Add an entry to UPDATING
- Pet portlint(1) for some ports while I'm here

- Added post installment for configuration files
- Bump PORTREVISION

PR:             ports/107079
Submitted by:   Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)

- Update to 0.9.12
- Updated patch Perl Prelude bindings

Changelog libprelude-0.9.12:
- Correctly pack and unpack float value when sending/receiving.
- More error checking on IDMEF object copy.
- Fix a crash that occured when destroying a copied object.
- Correct registration warning when using AF_UNIX socket.
- Compile on systems lacking poll().
- IpV6 compatibility fixes.
- Fix OS X compilation issues.
- Various portability fixes.

PR:             ports/107009
Submitted by:   Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)

- Update to 0.9.11
- library version update of related ports

Changelog libprelude:
- Hook class comparison function. Accept NULL, equal, not equal operator.
- Introduce better error checking in the idmef-class API, which is now
  considered public and might be used by external application. Rename
  error code to reflect the API.
- Change to the way IDMEF listed element are handled. Specifying negative
  number as the position of the element from the low level API now allow
  to position the element at the specified (reversed) index. Using the
  high level API a negative index permit to address a list of element
  backward (replace an element).
- Build fixes for SWIG > 1.3.27.
- Modify idmef_value_match() so that it always unroll listed value
  (do it for both val1 and val2. Remove assertion, and let
  idmef_value_type_compare() return an error code in case there is an issue.
- Handle path using IDMEF_LIST_APPEND or IDMEF_LIST_PREPEND as
  path using an undefined list index on idmef_path_get() call.
- Make criteria parser accept (*) list index.
- Implement comparison function for all IDMEF object.

PR:             ports/104328
Submitted by:   maintainer (Robin Gruyters)
Approved by:    portmgr (pav)

- Update to 0.9.10.2

PR:             ports/101585
Submitted by:   Robin Gruyters <r.gruyters at yirdis.nl> (maintainer)

Fix build on 4.x

Submitted by:   Robin Gruyters <r.gruyters@yirdis.nl> (maintainer) by email

- Update to 0.9.10.1
- Mark it as BROKEN on 4.x. Maintainer will alert authors to fix it.

PR:             ports/100854
Submitted by:   Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)

- Update to 0.9.10
  Note that though shlib version bumped, no ports need to be changed.
- OPTIONS'ify

PR:             ports/100490
Submitted by:   maintainer

Chase gnutls shlib version change.

- Update to 0.9.9

PR:             ports/98585
Submitted by:   maintainer

Fix build on 4.x

Submitted by:   maintainer and author by email

- Update to 0.9.8

PR:             ports/96761
Submitted by:   maintainer

- Update to 0.9.7.2

PR:             ports/96314
Submitted by:   maintainer

- Update to 0.9.7.1

PR:             ports/94853
Submitted by:   maintainer

* security/libprelude: [1]
  - Update to 0.9.7
  - Bump libprelude.so version

* security/libpreludedb: [2]
  - Update to 0.9.6
  - Chase libprelude.so version

* security/prelude-lml: [3]
  - Update to 0.9.4
  - Chase libprelude.so version
  - Add a rc.d startup script

* security/prelude-manager: [4]
  - Update to 0.9.4
  - Chase libprelude.so version
  - Add a rc.d startup script

PR:             ports/94402 [1], ports/94403 [2],
                ports/94404 [3], ports/94405 [4]
Submitted by:   maintainer [1] [2] [3] [4]

- Replace deprecated USE_AUTOTOOLS=libtool:15:inc construct (somehow missed
  in the recent sweep) with GNU_CONFIGURE=yes; update pkg-plist appropriately
- Add .../old/ subdir to MASTER_SITES so the port is still fetchable even
  when the Prelude project releases a new version
- Bump PORTREVISION

PR:             ports/93795
Submitted by:   Robin Gruyters (maintainer)
Approved by:    portmgr (linimon)

Conversion to a single libtool environment.

Approved by:    portmgr (kris)

- Fix run-time linking problems of the dependent ports by installing libtool
  archives (.la) files - switch to USE_LIBTOOL=libtool:15:inc
- Add a patch to avoid overwriting existing configuration files
- Bump PORTREVISION

PR:             ports/93498
Submitted by:   Robin Gruyters (maintainer)

- Transfer maintainership of the Prelude ports to the submitter,
  who has kindly agreed to adopt them

PR:             ports/93386
Submitted by:   Robin Gruyters <r dot gruyters at yirdis dot nl>

- Update to 0.9.5
- Unbreak (fix pkg-plist by using @dirrmtry) [1]
- Remove USE_REINPLACE which is not needed anymore

PR:             ports/92401
Submitted by:   Ion-Mihai "IOnut" Tetcu

BROKEN: Incomplete pkg-plist

- Update to 0.9.3 (unbreaks fetching)

Chase gnutls update.

- Add SHA256 checksums to my ports

- Respect NOPORTDOCS
- Fix pkg-plist if WITH_PERL/WITH_PYTHON are defined
- Properly clean up (extra directories) at deinstall
- Bump PORTREVISION

- Update to 0.9.0
- libprelude now always depends on GnuTLS
- Add two new knobs - WITH_PERL and WITH_PYTHON - to install Perl and Python
  bindings, respectively (both knobs are off by default)
- Remove patch we no longer need

- Take maintainership