security/libpreludedb: Moved man to share/man

Approved by:    portmgr (blanket)

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

security/libpreludedb: Helper to find python39

PR:		264717
Reported by:	thierry

security/libpreludedb: Resurrect

Update version 5.2.0

cleanup: Remove expired ports:

2022-03-31 security/revealrk: Deprecate, marked BROKEN on 12+ in 2018
2022-03-31 devel/apache-commons-modeler: Abandoned upstream, last release in
2013
2022-03-31 security/afl: Abandoned upstream, no new release since 2017. Please
consider using security/afl++ instead
2022-03-31 www/mod_line_edit: Abandoned upstream, last release in 2006, Apache
includes mod_sed
2022-03-31 www/myfaces: Unsupported by upstream, released in 2005
2022-03-31 www/mod_backtrace: Abandoned upstream in 2012 (version 2.0)
2022-03-31 security/base: Broken with PHP 7+, forked here
https://github.com/NathanGibbs3/BASE/
2022-03-31 security/find-zlib: Deprecated, no longer relevant
2022-03-31 security/razorback-clamavNugget: Abandonware, last release in 2012
and listed as alpha quality by upstream
2022-03-31 security/shimmer: Abandonware, last release in 2008
2022-03-31 security/kripp: Abandonware, upstream returns 404 and last release
was back in 2007
2022-03-31 security/ipfilter2dshield: Abandonware, no word of it on upstream web
site
2022-03-31 security/sha: Obsolete, we have tools in base

security/*: Deprecate and mark ports BROKEN that are dead upstream and/or
abandonware

security/afl			-	Migrate to security/afl++
security/amap			-	Abandoned upstream, last release 10+ years ago
security/amavis-stats		-	Upstream is dead and last release was back in 2005
security/arirang		-	Abandoned (website also refers to Ruby 1.9) and a 9+ year
old webserver security scanner isn't useful today
security/axTLS			-	Very outdated and abandoned, current version in tree was
released in 2013 and last by upstream in 2019
security/base			-	Broken with PHP 7+, forked here
https://github.com/NathanGibbs3/BASE/
security/bruteforceblocker	-	Abandonware, please consider using
security/sshguard
security/cfs			-	Deprecated upstream, reference:
https://www.bayofrum.net/cgi-bin/fossil/cfs/index
security/cisco-torch		-	Unfetchable, dead upstream
security/cp2fwb			-	Used with deprecated software Firewall Builder
security/dcetest		-	Targets deprecated protocol by Microsoft in favour of .NET
security/doscan			-	Abandonware, last release in 2014. Please consider using
security/masscan or sysutils/pnscan
security/find-zlib		-	Deprecated, no longer relevant

Remove # $FreeBSD$ from Makefiles.

security/libprelude[db]: remove optional binding for expired Python 2.7

PR:		249763
PR:		249764
Submitted by:	swills

Move remaining USE_MYSQL, WANT_MYSQL_VER to USES=mysql

Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330

security/libpreludedb: fix build with GCC-based architectures

Since the switch to MySQL 5.7, C11-aware compiler is required:
/usr/bin/ld: cannot find -latomic

Approved by:	mentors (implicit approval)

- Remove empty directories
- Remove empty lines after .include <bsd.port.mk>

Approved by:	portmgr blanket

Remove USE_SQLITE from bsd.databases.mk, replaced by USES=sqlite.

While there replace USE_SQLITE=x by USES=sqlite:x.

PR:		208971
Submitted by:	mat
Exp-run by:	antoine
With hat:	portmgr
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D5951

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

- Update security/gnutls to 3.4.10.
- Rename the LIBDANE option DANE because that's the name of the protocol
  supported by libgnutls-dane and gnutls-cli.  Also clarify the option
  description.
- Add an IDN option.
- libgnutls-openssl has been removed in 3.4.  Some ports used this library
  in their LIB_DEPENDS but no port actually required it.
- Some old API functions have been removed.  Ports that used these have been
  updated or patched to use the new API.
- Add a patch to print/cups to prevent overlinking of libgnutls.so.
- Bump PORTREVISION on dependent ports.

net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.

www/hydra: Mark BROKEN.  This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.

PR:		207768
Exp-run by:	antoine
Approved by:	portmgr (antoine)

- Switch to options helpers

Convert LICENSE= "GPLxx # or later" to "GPLxx+"

Approved by:	portmgr blanket

By default libtool replaces -export-symbols <file> with -retain-symbols-file
<file> on ELF systems, but this doesn't really do what -export-symbols is
meant to do.  On GNU ELF systems it converts <file> to a simple version
script first and then uses -version-script instead of -retain-symbols-file.
Let USES=libtool patch libtool scripts to do this on all systems with GNU
ld(1).

Bump PORTREVISION on all ports where the build log contains -export-symbols.

audio/calf: This port builds a module that now exports only one function,
but it also builds a number of executables that link to this module and
expect to see other functions.  Because it's already a bit dodgy to link to
a module (libtool warns about this) let the module continue to export only
one function and instead build an ordinary library from the same source that
the executables can link to.  Fix a number of other issues in the same

- Clarify LICENSE
- Add LICENSE_FILE
- Drop @dirrm* from plist

security/libgcrypt: 1.6.1 -> 1.6.2, bump depends

Changes:
- src/sexp.c (do_vsexp_sscan): Return error for invalid args.
- cipher/md.c (_gcry_md_info): Fix a segv in case of calling
  with wrong parameters.
- cipher/primegen.c (_gcry_generate_elg_prime): Change to return an
  error code, possible NULL deref in call to prime generator.
- cipher/dsa.c (generate): Take care of new return code.
- cipher/elgamal.c (generate): Change to return an error code.  Take
	care of _gcry_generate_elg_prime return code.
- ecc: Support the non-standard 0x40 compression flag for EdDSA.
- mpi: Extend the internal mpi_get_buffer.
- mpi: Fix regression for powerpc-apple-darwin detection.
- Fix bug inhibiting the use of the sentinel attribute in src/gcrypt.h.in

Change the way Perl modules are installed, update the default Perl to 5.18.

Before, we had:

  site_perl :           lib/perl5/site_perl/5.18
  site_perl/perl_arch : lib/perl5/site_perl/5.18/mach
  perl_man3 :           lib/perl5/5.18/man/man3

Now we have:

  site_perl : lib/perl5/site_perl
  site_arch : lib/perl5/site_perl/mach/5.18
  perl_man3 : lib/perl5/site_perl/man/man3

Modules without any .so will be installed at the same place regardless of the

Replace USE_AUTOTOOLS=libltdl with an ordinary LIB_DEPENDS in all ports.
There are only 60 such ports so there doesn't need to be a separate
keyword or USES for this.

Approved by:	portmgr (bapt)

security/libpreludedb: support stage

- Use options helpers
- Add LICENSE
- Install stripped libs

PR:		193164
Submitted by:	Ports Fury

security/libprelude: Take MAINTAINER'ship, STAGE & Modernize

- Take Maintainership
- Enable STAGE support
- Tweak MASTER_SITES https -> http (portlint)
- Add LICENSE and LICENSE_FILE
- Deprecate USE_AUTOTOOLS for libtool (-> USES)
- Sort USES and OPTIONS
- Use OPTIONS helpers as much as possible for now [1]
- Add --enable-static to CONFIGURE_ARGS to retain the static lib
- Assign and Use ETCDIR rather than hardcoding
- Use the install-strip install target
- Update pkg-plist, use @sample and other goodies

While I'm here, bump dependent ports since our SHLIB major version has
changed

[1] https://reviews.freebsd.org/D665

Approved by: portmgr (implicit, bump unstaged port)

Convert the Python framework bits to USES=python.

Please use USES=python instead of USE_PYTHON.

  USE_PYTHON=yes becomes USES=python
  USE_PYTHON=2.7+ becomes USES=python:2.7+
  USE_PYTHON_BUILD=3.3 becomes USES=python:3.3,build
  ...

A new PYTHON_FEATURES variable was added, which enables certain features for a
port and replaces some knobs at the same time;

  PYTHON_FEATURES=distutils replaces USE_PYDISTUTILS
  PYTHON_FEATURES=autoplist replaces PYDISTUTILS_AUTOPLIST
  PYTHON_FEATURES=py3kplist replaces PYTHON_PY3K_PLIST_HACK

security/libgcrypt: 1.5.3_3 -> 1.6.1

- Update to 1.6.1
- Remove some unneeded patches
- Fix pkg-plist
- report configure bug upstream
  https://bugs.g10code.com/gnupg/issue1668
- report API breakage downstream and find that MacPorts had the same issue
  https://rt.cpan.org/Ticket/Display.html?id=97201
- bump PORTREVISION for dependent ports (approx. 100 ports)
- Thanks to exp-run by antoine@ to find ports that break
- patch ports that would otherwise break
  security/shishi with PR 192164 is already committed
  [1] devel/ccrtp
  [2] editors/abiword
  [3] security/p5-Crypt-GCrypt

PR:		191256, 192162 [1], 192163 [2], 192166 [3]
Submitted by:	Carlos Jacobo Puga Medina <cjpugmed@gmail.com>
Approved by:	maintainer timeout, antoine (exp-run), portmgr (implicit)

- Replace security/gnutls with security/gnutls3 and update to 3.2.15
- Bump PORTREVISION on all ports that depend on security/gnutls and
  adjust all ports that depend on security/gnutls3
- Update mail/anubis to version 4.2 which supports gnutls 3.x
- Update mail/libvmime to a development snapshot (recommended by upstream
  developers)

PR:		191274
Exp-run by:	antoine
Approved by:	portmgr (antoine)

Modernize LIB_DEPENDS

With hat:	portmgr

- Chase database/sqlite3 slib bump

Approved by:	portmgr (myself)

Remove all the bootstrap files (.bs) from the plists.

Starting with perl 5.20, they're not installed any more if empty,
and on FreeBSD, they're (always ?) empty.

PR:		190681
Submitted by:	mat
Exp-Run by:	antoine
Sponsored by:	Absolight

- Convert gmake, bzip2 to USES

Approved by:	portmgr

Fix properties on pkg-plist

Add NO_STAGE all over the place in preparation for the staging support (cat:
security)

- Convert to new perl framework
- Trim Makefile header

 - Fix build with new site_perl

Submitted by:	olli hauer <ohauer@gmx.de>

Chase security/libgcrypt update

- Convert USE_ICONV=yes to USES=iconv
- Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig and
  USE_GETTEXT=yes to USES=gettext while here

- Convert USE_GETTEXT to USES (part 3)

Approved by:	portmgr (bapt)

Style: tab -> space.

Most contributors copy an existing port when writing their own so reduce the
number of bad examples in the tree.

- Add UPDATING entry for gnutls update
- Chase shlib version bump for dependant ports

Update Prelude-IDS ports to 1.0.1 release

security/libprelude:
- Remove BROKEN, update to version 1.0.1 [1]
- Add missing deps, port requires pkg-config during build

security/libpreludedb:
- Update to version 1.0.1p1
- Add missing deps
- Make options deterministic and not dependent on what's installed

security/prelude-lml:
- Update to version 1.0.1
- Add missing deps, port requires pkg-config during build
- Convert to OptionsNG

Restore option descriptions to what the maintainer actually put in the PR

Pointy hat to:	eadler

PR:		ports/172426
Submitted by:	Michael Gmelin <freebsd@grem.de> (maintainer)

Convert to OptionsNG

PR:	ports/172426
Submitted by:	Michael Gmelin <freebsd@grem.de>

Fix master_site

-remove MD5

Bump PORTREVISION for ports linking to default libmysqlclient.

- Update to 0.9.15.3

PR:             ports/139003
Submitted by:   Vladimir Korkodinov <viper@perm.raid.ru>
Feature safe:   yes

Reset r.gruyters@snow.nl by request due to lack of time.

Feature safe:   yes

- Chase libprelude update

Feature safe:   yes

- Chase security/libprelude shlib version bump

PR:             131286, 131585 (partial)
Submitted by:   Vladimir Korkodinov <viper at perm dot raid dot ru>

Restore previous maintainer, now with his new email address.

Approved by:    wxs (diff not reviewed, ack'ed to commit)

Reset r.gruyters@yirdis.nl: email address bounces.

- Update to 0.9.15.1
- Rework OPTIONS to autodetect installed SQL libs and default their
  tunables to "on"
- Fix portdocs handling

PR:             ports/127340
Submitted by:   Yarema <yds@CoolRat.org>
Approved by:    maintainer timeout (> two weeks)

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk

Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)

- Chase security/libprelude shlib version bump

- Update to 0.9.14.1

PR:             119854
Submitted by:   Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)

- Update to 0.9.13
- bump libprelude library

Changelog libpreludedb:
- Source and Target now use a 16 bits index (required for CorrelationAlert
  with large number of source/target). CorrelationAlert Alertident now use a
  32 bits index (required to link large number of Alert together).
- Fix compilation on system without ENOTSUP (fix #227):
  Include modified patch from Alexandre Anriot <aanriot@atlantilde.com>.
- [pgsql] Patch by Pierre Chifflier <chifflier@inl.fr>, that fixes type
  conversions preventing PostgreSQL to use indexes (fix #225).
- [preludedb-admin] Use separate alert / heartbeat command: this is done to
  have a coherent implementation of the --offset and --count command line
  options.
- [preludedb-admin] Fix --offset with the load command.
- [preludedb-admin] Give the delete table a decent size, should speedup the
  delete command.
- [documentation] preludedb-admin manpage (fix #230), by Pierre Chifflier
  <chifflier@inl.fr>.

PR:             ports/116109
Submitted by:   maintainer (Robin Gruyters)

- Update libprelude to 0.9.14.
- Update dependent ports accordingly.
- Bump PORTVERSION to force rebuild.

PR:             ports/112703
Submitted by:   Marcelo Araujo <araujo@FreeBSD.org>
Approved by:    stas (mentor)

- Update to 0.9.12

Changelog libpreludedb-0.9.12:
- [sqlite3] Provide case-insensitive regex.
- [preludedb-admin] Loading of multiple file and improved reporting.
- Provide substring match for AdditionalData value.
- Fix insertion issue for ProcessArg and File Linkage.
- Fix a bug when retrieving an empty time field (following retrieved fields
  where not the one expected).
- When a given SQL function is not implemented by the driver, return a
  detailed error message with information concerning the missing function.
- Implement Python only get_values, get_heartbeat_idents, get_alert_idents.
  Return the number of rows as well as the rows in a tupple.
- Make sure we have an exception to process: fix a crash with Python
  bindings upon signal reception. Fix #200.

PR:             ports/110583
Submitted by:   maintainer (Robin Gruyters)

- Update to 0.9.11.3

Changelog:
- Fix invalid free() in the SQLite plugin.
- Fix preludedb-admin copy/move operations.

PR:             108923
Submitted by:   Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)

Remove USE_GPG from all effected ports. This knob is a no-op and the way it
was supposed to work is useless, because if we can't trust the distfile from
the remote machine, we can't trust the signature from the same machine either.
Our MD5 and SHA256 are good for checking both the sanity and the
trustiness of distfiles.

Approved by:    portmgr (erwin), erwin (mentor)

- Update to 0.9.11.2

Changelog libpreludedb:
- Prevent binding generation error when using old SWIG version.
- Generate bindings for the error handling API.
- Small Perl/Python detection improvement. Fix #182.
- Fix bindings compilation when using make -j.
- New configure --with-perl-installdirs flags: might be used to override
  default site perl installation.
- Various bug fixes.
- Fix make installation error when Perl bindings are disabled.

PR:             ports/107678
Submitted by:   maintainer (Robin Gruyters)

- Update to 0.9.11

Changelog libpreludedb-0.9.11:
- Avoid using GNU sed extension when generating postgresql/sqlite schema.
- Fix a Python binding memory leak upon alert list deletion.
- Compile and run on OS X.
- Various bugfixes.
- Various portability fixes.

PR:             ports/107008
Submitted by:   Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)

- Update to 0.9.11
- library version update of related ports

Changelog libprelude:
- Hook class comparison function. Accept NULL, equal, not equal operator.
- Introduce better error checking in the idmef-class API, which is now
  considered public and might be used by external application. Rename
  error code to reflect the API.
- Change to the way IDMEF listed element are handled. Specifying negative
  number as the position of the element from the low level API now allow
  to position the element at the specified (reversed) index. Using the
  high level API a negative index permit to address a list of element
  backward (replace an element).
- Build fixes for SWIG > 1.3.27.
- Modify idmef_value_match() so that it always unroll listed value
  (do it for both val1 and val2. Remove assertion, and let
  idmef_value_type_compare() return an error code in case there is an issue.
- Handle path using IDMEF_LIST_APPEND or IDMEF_LIST_PREPEND as
  path using an undefined list index on idmef_path_get() call.
- Make criteria parser accept (*) list index.
- Implement comparison function for all IDMEF object.

PR:             ports/104328
Submitted by:   maintainer (Robin Gruyters)
Approved by:    portmgr (pav)

- Update to 0.9.10

libpreludedb Changelog:
- Fix PostgreSQL schema update version 5.
- Only export symbol starting with preludedb_.
- Verbose error reporting in case of libpreludedb initialization failure.

PR:             ports/104201
Submitted by:   maintainer (Robin Gruyters)

- Update to 0.9.9

Changelog libpreludedb:
- Implement an idea from Lex van Roon <r3boot@r3blog.nl.eu.org> providing
  an alert/heartbeat deletion performance improvement in the order of
  3000% (preludedb-admin already benefit from it, next Prewikka release
  will benefit from it too).
- Fix --with-(perl|python|swig) detection path ordering.
- Verbose error reporting on logfile opening error.
- Various bug fixes.

PR:             ports/101995
Submitted by:   maintainer (Robin Gruyters)

- Update to 0.9.8.1
- OPTIONS'ify
  Note that now MySQL is the default backend, which is also recommended
  by Prelude team.

PR:             ports/100530
Submitted by:   maintainer

- Update to 0.9.8

PR:             ports/98589
Submitted by:   maintainer

- Chase libprelude version
- Bump PORTREVISION

PR:             ports/96758, ports/96759, ports/96760
Submitted by:   maintainer

- Update to 0.9.7.1

PR:             96354
Submitted by:   maintainer

- Update to 0.9.7

PR:             ports/94993
Submitted by:   maintainer

* security/libprelude: [1]
  - Update to 0.9.7
  - Bump libprelude.so version

* security/libpreludedb: [2]
  - Update to 0.9.6
  - Chase libprelude.so version

* security/prelude-lml: [3]
  - Update to 0.9.4
  - Chase libprelude.so version
  - Add a rc.d startup script

* security/prelude-manager: [4]
  - Update to 0.9.4
  - Chase libprelude.so version
  - Add a rc.d startup script

PR:             ports/94402 [1], ports/94403 [2],
                ports/94404 [3], ports/94405 [4]
Submitted by:   maintainer [1] [2] [3] [4]

- Update to 0.9.5.1 (unbreaks fething)
- Add .../old/ subdir to MASTER_SITES so the port is still fetchable even
  when the Prelude project releases a new version
- Add missing LIB_DEPENDS when using WITH_SQLITE knob

PR:             ports/93737
Submitted by:   Robin Gruyters (maintainer)
Approved by:    portmgr (krion)

Conversion to a single libtool environment.

Approved by:    portmgr (kris)

- Fix run-time linking problems of the dependent ports by installing libtool
  archives (.la) files - switch to USE_LIBTOOL=libtool:15:inc
- Add WITH_SQLITE knob
- Fix typo in LDCONFIG_DIRS
- Bump PORTREVISION

PR:             ports/93500
Submitted by:   Robin Gruyters (maintainer)

- Transfer maintainership of the Prelude ports to the submitter,
  who has kindly agreed to adopt them

PR:             ports/93386
Submitted by:   Robin Gruyters <r dot gruyters at yirdis dot nl>

- Update to 0.9.4 (unbreaks fetching)
- Chase libprelude version bump
- Override LDCONFIG_DIRS to specify where we install shlibs [1]
- Sort pkg-plist

Obtained from:  Frank van Vliet <frank@pine.nl> [1]

Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry

Approved by:    krion@
PR:             ports/88711 (related)

BROKEN: Unfetchable

- Chase libprelude version bump (.2 -> .4)
- Bump PORTREVISION

- Update to 0.9.2

- Update to 0.9.1

Thanks to:      edwin's script

- Add SHA256 checksums to my ports

Add security/libpreludedb:

This library provides a framework for easy access to the Prelude database.

WWW:    http://www.prelude-ids.org/