OpenConnect is a client for Cisco's AnyConnect SSL VPN. Beyond
Cisco's official client, OpenConnect supports multiple platforms,
NetworkManager integration, and the ability to run as a user.
===> The following configuration options are available for openconnect-9.21:
DOCS=on: Build and/or install documentation
GNUTLS=off: Use GnuTLS instead of OpenSSL (experimental)
GSSAPI=on: GSSAPI Security API support
LZ4=off: LZ4-based compression
P11=off: PKCS #11 support via libp11
P11KIT=off: PKCS #11 support via p11-kit
PROXY=off: Automatic proxy configuration via libproxy
STOKEN=off: With RSA soft token support via libstoken
===> Use 'make config' to modify these settings
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Aldis Berjoza <aldis@bsdroot.lv>
* Alex Dupre <ale@FreeBSD.org>
* Alex Kapranoff <kappa@rambler-co.ru>
* Alex Samorukov <samm@freebsd.org>
* Alexander Botero-Lowry <alex@foxybanana.com>
* Alexander Kriventsov <avk@vl.ru>
* Alexander Leidinger <netchild@FreeBSD.org>
(Only the first 15 lines of the commit message are shown above )
textproc/libxml2: bump all LIB_DEPENDS consumers
This is a separate commit to facilitate easier cherry-picking for
quarterly.
PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)
textproc/libxml2: bump all dependencies
This should make sure that all dependent ports will pick
up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246
- Add support for RSA soft token via libstoken [1]
- Make GSSAPI optional (still on by default, as before)
PR: 208946 [1]
Requested by: timp87@gmail.com [1]
- Update security/gnutls to 3.4.10.
- Rename the LIBDANE option DANE because that's the name of the protocol
supported by libgnutls-dane and gnutls-cli. Also clarify the option
description.
- Add an IDN option.
- libgnutls-openssl has been removed in 3.4. Some ports used this library
in their LIB_DEPENDS but no port actually required it.
- Some old API functions have been removed. Ports that used these have been
updated or patched to use the new API.
- Add a patch to print/cups to prevent overlinking of libgnutls.so.
- Bump PORTREVISION on dependent ports.
net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.
www/hydra: Mark BROKEN. This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.
PR: 207768
Exp-run by: antoine
Approved by: portmgr (antoine)
- Improve wording and formatting (most notably, missing space before opening
parenthesis) in some buggy option descriptions
- Standardize Makefile header when appropriate, drop one OPTIONS_DEFAULT=IPV6
- Replace security/gnutls with security/gnutls3 and update to 3.2.15
- Bump PORTREVISION on all ports that depend on security/gnutls and
adjust all ports that depend on security/gnutls3
- Update mail/anubis to version 4.2 which supports gnutls 3.x
- Update mail/libvmime to a development snapshot (recommended by upstream
developers)
PR: 191274
Exp-run by: antoine
Approved by: portmgr (antoine)
- Add --without-liboath and --without-stoken to CONFIGURE_ARGS to prevent
auto detection
- Remove USE_AUTOTOOLS
- Add USES=libtool and remove USES=pathfix
- Use option helpers and only define USE_OPENSSL when GNUTLS option is off
The FreeBSD x11@ and graphics team proudly presents
a zeising, kwm production, with help from dumbbell, bdrewery:
NEW XORG ON FREEBSD 9-STABLE AND 10-STABLE
This update switches over to use the new xorg stack by default on FreeBSD 9
and 10 stable, on osversions where vt(9) is available.
It is still possible to use the old stack by specifying WITHOUT_NEW_XORG in
/etc/make.conf .
FreeBSD 8-STABLE and released versions of FreeBSD still use
the old version.
A package repository with binary packages for new xorg will
be available soon.
This patch also contains updates of libxcb and related ports, pixman, as well
(Only the first 15 lines of the commit message are shown above )
- Fix build under 10-CURRENT when using OpenSSL, chasing r254107 (OpenSSL bugfix
for RT #2984)
- Add security/ca_root_nss as a dependency to fix GnuTLS build
- Do not bump PORTREVISION
Reported by: gnn@
This changes almost all the "gnomehack" only USE_GNOME cases to USES= pathfix.
If a port used other USE_GNOME items it was untouched.
The ports that used other USES were fixed by hand.
PR: ports/177081
Reviewed by: bapt
Approved by: portmgr (miwi)
- Use PORT_OPTIONS:MDOCS instead of NOPORTDOCS
- Use new 'created by' header
- Add PORTSCOUT variable to ignore 4.99 beta
- Use USE_PKGCONFIG instead of USE_GNOME=pkgconfig
- Update to 3.15 [1]
- Take maintainership per private conversation with current maintainer
- Remove reliance on OpenSSL from ports
PR: ports/165992 [1]
Submitted by: Stanislav Sedov <stas@deglitch.com> [1]
Feature safe: yes
- Update to 2.26
- Use bsd.port.mk
Changes:
- Fix potential crash on relative HTTP redirect.
- Use correct TUN/TAP device node on Android.
- Check client certificate expiry date.
- Implement CSTP and DTLS rekeying (both by reconnecting CSTP).
- Add --force-dpd option to set minimum DPD interval.
- Don't print webvpn cookie in debug output.
- Fix host selection in NetworkManager auth dialog.
- Use SSLv3 instead of TLSv1; some servers (or their firewalls) don't accept
any ClientHello options.
- Never include address family prefix on script-tun connections.
PR: ports/155705
Submitted by: Ben <ben@gibbed.org>
Approved by: Damian Gerow <dgerow@afflictions.org> (maintainer)
OpenConnect is a client for Cisco's AnyConnect SSL VPN, which is
supported by IOS 12.4(9)T or later on Cisco SR500, 870, 880,
1800, 2800, 3800, 7200 Series and Cisco 7301 Routers.
Like vpnc, OpenConnect is not officially supported by, or
associated in any way with, Cisco Systems. It just happens to
interoperate with their equipment.
WWW: http://www.infradead.org/openconnect.html
PR: ports/135274
Submitted by: Damian Gerow
