Convert another 7 third-party modules to dynamic:

o) gridfs
o) http_push_stream
o) http_upstream_sticky
o) http_video_thumbextractor
o) http_zip
o) let
o) link

Bump PORTREVISION.

Convert another 5 third-party modules to dynamic:

o) drizzle
o) http_dav_ext
o) http_footer_filter
o) http_ip2location
o) http_ip2proxy

Bump PORTREVISION.

Convert the following third-party modules to dynamic:

o) accept_language
o) modsecurity3

While I'm here fix the third-party auth_krb5 module build.

Bump PORTREVISION.

Third-party postgres module is dynamic now and remove
the legacy patch.
While I'm here update the PORTSCOUT.

Bump PORTREVISION.

Update njs module from 0.3.9 to 0.4.0.

<ChangeLog>

*) Feature: added js_import directive.

*) Feature: added support for multi-value headers in r.headersOut.

*) Improvement: iteration over r.headersOut with special headers.

*) Improvement: iteration over r.headersOut with duplicates.

*) Change: r.responseBody property handler now returns "undefined"
   instead of throwing an exception if response body is not available.

Add the knob for the quiet startup.

Bump PORTREVISION.

PR:		245830
Submitted by:	marck

Update some third-party modules to their recent versions.

Convert the following third-party modules to dynamic:
o) ajp
o) cache_purge
o) vts
o) websockify

Bump PORTREVISION.

Update nginx from 1.17.10 to 1.18.0.

<ChangeLog>

*) 1.18.x stable branch.

</ChangeLog>

Update nginx from 1.17.9 to 1.17.10.

Keep third-party modules knobs sorted, but DEVEL_KIT must be
earlier cause ARRAYVAR depends on it, so partially revert back
r531124.

<ChangeLog>

*) Feature: the "auth_delay" directive.

</ChangeLog>

Fix the build issue.

A typo was introduced with r531086.

Do not bump PORTREVISION.

Pointy hat:	osa
Eagle eye:	"Herbert J. Skuhra" <herbert@gojira.at>

Add http_degradation module.

While I'm here keep the knobs inside their groups sorted.

Bump PORTREVISION.

Add STREAM_REALIP knob for the ngx_stream_realip module. (*)

Enable STREAM_REALIP knob by default.

Also, create STREAMGRP group for stream-specific modules.

Bump PORTREVISION.

Requested by:	Kirill I. <kerya@kerya.net> (*)

Update nginx from 1.17.8 to 1.17.9.

<ChangeLog>

*) Change: now nginx does not allow several "Host" request header lines.

*) Bugfix: nginx ignored additional "Transfer-Encoding" request header
   lines.

*) Bugfix: socket leak when using HTTP/2.

*) Bugfix: a segmentation fault might occur in a worker process if OCSP
   stapling was used.

*) Bugfix: in the ngx_http_mp4_module.

*) Bugfix: nginx used status code 494 instead of 400 if errors with code
   494 were redirected with the "error_page" directive.

*) Bugfix: socket leak when using subrequests in the njs module and the
   "aio" directive.

</ChangeLog>

Update NGINX JavaScript (aka njs) module from 0.3.8 to 0.3.9.

To avoid a potential conflict between two versions of LuaJIT let's
update mod_security's dependecy list and use lang/luajit-openresty
instead of original lang/luajit.

Bump PORTREVISION.

Partially revert back r524489, the trird-party opentracing module
is not ready yet to be added to the port.

Bump PORTREVISION.

Commit missing patches for r524122.

Eagle eye notice from:	joneum
No cookie for:		osa

Add link-function third-party module, it provides dynamic linking to
your application in a server context and call the function of your
application in a location directive.

Bump PORTREVISION.

Update nginx from 1.17.7 to 1.17.8.
Update third-party njs module from 0.3.7 to 0.3.8.

<ChangeLog with nginx 1.17.8>

*) Feature: variables support in the "grpc_pass" directive.

*) Bugfix: a timeout might occur while handling pipelined requests in an
   SSL connection; the bug had appeared in 1.17.5.

*) Bugfix: in the "debug_points" directive when using HTTP/2.
   Thanks to Daniil Bondarev.

</ChangeLog>

Update the nginx.8 man page location after r523104.
Bump PORTREVISION.

Update third-party modsecurity3 module to 1.0.1.
Bump PORTREVISION.

Update from 1.17.6 to 1.17.7.

<ChangeLog>

*) Bugfix: a segmentation fault might occur on start or during
   reconfiguration if the "rewrite" directive with an empty replacement
   string was used in the configuration.

*) Bugfix: a segmentation fault might occur in a worker process if the
   "break" directive was used with the "alias" directive or with the
   "proxy_pass" directive with a URI.

*) Bugfix: the "Location" response header line might contain garbage if
   the request URI was rewritten to the one containing a null character.

Update third-party modules ip2location and ip2proxy to
their recent versions.

Bump PORTREVISION.

Update two third-party modules to their recent versions:

o) modsecurity3
o) vod

Remove the needless patch for the third-party vod module,
it's been added to the upstream.

Bump PORTREVISION.

The stream module doesn't imply on the http module in terms of
SSL/TLS usage.

Bump PORTREVISION.

Update third-party auth_ldap module to the recent version.

Bump PORTREVISION.

Update portscount.
No functional change.

Update nginx from 1.17.5 to 1.17.6.
Update njs module from 0.3.6 to 0.3.7.

<ChangeLog with nginx 1.17.6>

*) Feature: the $proxy_protocol_server_addr and
   $proxy_protocol_server_port variables.

*) Feature: the "limit_conn_dry_run" directive.

*) Feature: the $limit_req_status and $limit_conn_status variables.

</ChangeLog>

<ChangeLog with njs 0.3.7>

Update the extra patch for the third-party spnego module,
it was missing with r517770.

Bump PORTREVISION.

PR:	242031

Add support for FreeBSD accept filters.

Bump PORTREVISION.

PR:	238739

When nginx compiled with third-party spnego module, a worker process
may crash due to read-after-free operation.  This third-party module
update fix the issue.

Bump PORTREVISION.

PR:	235296

Merge r517734 revision from www/nginx.
Bump PORTREVISION.

PR:	240274

Merge the r517639 for third-party passenger module from the
www/nginx to fix the build. (*)

While I'm here sort pkg-plist.

Bump PORTREVISION.

PR:		241753 (*)

Add USES={gl,gnome,mate,sdl,xorg} missed in the last round

Update third-party modules to their recent versions.

Switch third-party brotli module's github repo back to google
cause eustas repo, the previous one, has been archived by the
owner.

Bump PORTREVISION.

Fix the issue with third-aprty modsecurity2 module, it is not
being built into after selection.
An additional useful file is installed now.

Bump PORTREVISION.

Submitted by:	Felipe Zipitria <felipe.zipitria@owasp.org> (in a private mail)

Update nginx from 1.17.4 to 1.17.5.
Update njs module from 0.3.5 to 0.3.6.
Sync third-party fastdfs module version with www/nginx.

<ChangeLog for nginx 1.17.5>

*) Feature: now nginx uses ioctl(FIONREAD), if available, to avoid
   reading from a fast connection for a long time.

*) Bugfix: incomplete escaped characters at the end of the request URI
   were ignored.

*) Bugfix: "/." and "/.." at the end of the request URI were not
   normalized.

Drop the ipv6 virtual category for w* category as it is not relevant anymore

Update nginx from 1.17.3 to the latest bugfix release 1.17.4.

Move third-party SLICE_AHEAD knob down to other third-party
knobs. (*)

Requested by:	Herbert J. Skuhra <herbert@gojira.at> (*)

<ChangeLog>

*) Change: better detection of incorrect client behavior in HTTP/2.

*) Change: in handling of not fully read client request body when
   returning errors in HTTP/2.

*) Bugfix: the "worker_shutdown_timeout" directive might not work when

Add missing patch in r512184.

Spotted by:	Herbert J. Skuhra <herbert@gojira.at>

Update from 6.0.3 to 6.0.4.

Add the following third-party modules:
o) ip2location
o) ip2proxy

Add third-party slice_ahead feature.

Update third-party passenger module to the latest release 6.0.3.

Switch third-party lua module dependence from lang/luajit (2.0) to
lang/luajit-openresty (2.1).

Bump PORTREVISION.

Update third-party njs module from 0.3.4 to 0.3.5.
Bump PORTREVISION.

<ChangeLog>

Core:
*) Bugfix: fixed module importing using require(). The bug was
   introduced in 0.3.4.

*) Bugfix: fixed [[SetPrototypeOf]].

</ChangeLog>

Convert to UCL & cleanup pkg-message (categories w)

Security update nginx from 1.17.2 to 1.17.3.

<ChangeLog with nginx 1.17.3>

*) Security: when using HTTP/2 a client might cause excessive memory
   consumption and CPU usage (CVE-2019-9511, CVE-2019-9513,
   CVE-2019-9516).

*) Bugfix: "zero size buf" alerts might appear in logs when using
   gzipping; the bug had appeared in 1.17.2.

*) Bugfix: a segmentation fault might occur in a worker process if the
   "resolver" directive was used in SMTP proxy.

</ChangeLog>

Update some third-party modules to their recent revisions.
Update the download protocol from http to https.

Bump PORTREVISION.

PR:	239776

multimedia/ffmpeg: update to 4.2

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n4.2:/Changelog
ABI:		https://abi-laboratory.pro/tracker/timeline/ffmpeg/

Update nginx from 1.17.1 to 1.17.2.
Update third-party nchan module from 1.2.3 to 1.2.6.

<ChangeLog with nginx 1.17.2>

*) Change: minimum supported zlib version is 1.2.0.4.
   Thanks to Ilya Leoshkevich.

*) Change: the $r->internal_redirect() embedded perl method now expects
   escaped URIs.

*) Feature: it is now possible to switch to a named location using the
   $r->internal_redirect() embedded perl method.

*) Bugfix: in error handling in embedded perl.

Install njs command line utility as a part of the third-party
njs module.

Bump PORTREVISION.

Update nginx from 1.17.0 to 1.17.1.
Update njs module from 0.3.2 to 0.3.3.

<ChangeLog with nginx 1.17.1>

*) Feature: the "limit_req_dry_run" directive.

*) Feature: when using the "hash" directive inside the "upstream" block
   an empty hash key now triggers round-robin balancing.
   Thanks to Niklas Keller.

*) Bugfix: a segmentation fault might occur in a worker process if
   caching was used along with the "image_filter" directive, and errors
   with code 415 were redirected with the "error_page" directive; the
   bug had appeared in 1.11.10.

Update nginx from 1.16.0 to new mainline version 1.17.0.
Update njs module from 0.3.1 to 0.3.2.

<ChangeLog with nginx 1.17.0>

*) Feature: variables support in the "limit_rate" and "limit_rate_after"
   directives.

*) Feature: variables support in the "proxy_upload_rate" and
   "proxy_download_rate" directives in the stream module.

*) Change: minimum supported OpenSSL version is 0.9.8.

*) Change: now the postpone filter is always built.

Update from 1.15.12 to 1.16.0.

<ChangeLog>

*) 1.16.x stable branch.

</ChangeLog>

Update from 1.15.11 to 1.15.12.
Update third-party njs module from 0.3.0 to 0.3.1.

<ChangeLogs>

Changes with nginx 1.15.12                             16 Apr 2019

*) Bugfix: a segmentation fault might occur in a worker process if
   variables were used in the "ssl_certificate" or "ssl_certificate_key"
   directives and OCSP stapling was enabled.

Changes with njs 0.3.1                                 16 Apr 2019

Core:

Update from 1.15.10 to 1.15.11.

<ChangeLogs>

*) Bugfix: in the "ssl_stapling_file" directive on Windows.

</ChangeLogs>

Update from 1.15.9 to 1.15.10.
Update third-party njs module from 0.2.8 to 0.3.0.

<ChangeLogs>

http://nginx.org/en/CHANGES
http://nginx.org/en/docs/njs/changes.html#njs0.3.0

</ChangeLogs>

www/nginx-devel: DAV modules requires xslt

adding module in /www/nginx-devel/work/nginx-dav-ext-module-3.0.0
 + ngx_http_dav_ext_module was configured
checking for PCRE library ... found
checking for PCRE JIT support ... found
checking for OpenSSL library ... found
checking for zlib library ... found
checking for libxslt ... not found
checking for libxslt in /usr/local/ ... not found
checking for libxslt in /usr/pkg/ ...  not found
checking for libxslt in /opt/local/ ... not found
./configure: error: the HTTP XSLT module requires the libxml2/libxslt
libraries. You can either do not enable the module or install the libraries.

Update third-party lua module to its recent version 0.10.14.

Bump PORTREVISION.

Fix PORTSCOUT.
Update third-party dav-ext module to its recent version 3.0.0.

Bump PORTREVISION.

Update from 1.15.8 to 1.15.9.

<ChangeLog>

*) Feature: variables support in the "ssl_certificate" and
   "ssl_certificate_key" directives.

*) Feature: the "poll" method is now available on Windows when using
   Windows Vista or newer.

*) Bugfix: if the "select" method was used on Windows and an error
   occurred while establishing a backend connection, nginx waited for
   the connection establishment timeout to expire.

*) Bugfix: the "proxy_upload_rate" and "proxy_download_rate" directives
   in the stream module worked incorrectly when proxying UDP datagrams.

</ChangeLog>

Update passenger and its third-party modules for www/nginx and
www/nginx-devel from 6.0.1 to 6.0.2.

Bump PORTREVISION for www/nginx and www/nginx-devel.

Update third-party njs module to its recent version 0.2.8.

Bump PORTREVISION.

Add the license file.

Remove GeoIP-related options. Where possible, replace GeoIP 1 defaults
with GeoIP 2.

Also, as suggested by zi, add an UPDATING note about this.

Update third-party tarantool module to its recent version.
Bump RORTREVISION.

Update passenger and its third-party modules for www/nginx and
www/nginx-devel from 6.0.0 to 6.0.1.

While I'm here:
o) remove a needless whitespace and tabs;
o) add a patch to disable anonymouse telemetry for passenger by default.

Update third-party modsecurity module from 2.9.2 to 2.9.3.
Bump PORTREVISION.

Add the extra patch to disable anonymous telemetry for the
third-party passenger module.

Update from 1.15.7 to 1.15.8.
Update clojure, modsecurity and njs third-party modules to their recent
versions.
Disable anonymous telemetry reporting in third-party passenger module
by default.

<ChangeLog>

*) Feature: the $upstream_bytes_sent variable.
   Thanks to Piotr Sikora.

*) Feature: new directives in vim syntax highlighting scripts.
   Thanks to Gena Makhomed.

*) Bugfix: in the "proxy_cache_background_update" directive.

Upgrade passenger and its third-party modules for www/nginx and
www/nginx-devel from 5.3.7 to 6.0.0.

<ChangeLog>

* Introduces support for *all* programming languages. Yes that's
  right... Java, Elixir, Go -- Passenger now supports them all!
  This effort is called "generic language support".
* Bumps the preferred Nginx version to 1.15.7.
* Introduces anonymous usage telemetry, which helps us improve
  Passenger.  Please read the docs on what data is collected and
  how to disable this.
* [Nginx] Introduces a new option "passenger_request_buffering on|off",
  to allow disabling request body buffering. This is only supported in
  Nginx >= 1.15.3. Closes GH-2121.
* Updated various library versions used in precompiled binaries (used
  for e.g. gem installs):
  - OpenSSL: 1.0.2q (was: 1.0.2p)
  - libcurl: 7.62.0 (was: 7.61.1)
  - Ruby: 2.3.8 (was: 2.3.7)

</ChangeLog>

Update passenger and it's modules for www/nginx and
www/nginx-devel ports to 5.3.7.

Update from 1.15.6 to 1.15.7.
Update clojure and njs third-party modules to their recent versions.

MFH:		2018Q4

<ChangeLog>

*) Feature: the "proxy_requests" directive in the stream module.

*) Feature: the "delay" parameter of the "limit_req" directive.
   Thanks to Vladislav Shabanov and Peter Shchuchkin.

*) Bugfix: memory leak on errors during reconfiguration.

*) Bugfix: in the $upstream_response_time, $upstream_connect_time, and
   $upstream_header_time variables.

*) Bugfix: a segmentation fault might occur in a worker process if the
   ngx_http_mp4_module was used on 32-bit platforms.

</ChangeLog>

Rename www/mod_security3 to security/modsecurity3.  It is not an Apache
module, and the upstream name is ModSecurity in a single word.

PR:		233351
Submitted by:	Marie Helene Kvello-Aune, Marius Halden (maintainer)
Differential Revision:	https://reviews.freebsd.org/D18353

Change the distribution for the third-party upstream_fair module,
it contains fixes for openssl 1.1.
Remove the needless patch.

Bump PORTREVISION.

Update ImageMagick to 6.9.10.14 [1]

* Add PKGNAMESUFFIX and rename the directory. This was done to show
  that IM6 is not the "main" version. But still fully supported by upstream.
* Convert a number of options to optionhelpers.
* Add option for ISO/IEC 23008-12:2017 HEIF suport
* Add comment to pkg-descr explaining IM6's "legacy" tag.
* Add comment to the patch-config_policy.xml file why it still needed.

Please note that IM7 is not a drop in replacement due to library API and
command arguments changes. And as a result ports need to decide for themself
which version to use.

Chase these changes in all the ports that using IM6.

PR:		225102 (based on, only the version update) [1]
Submitted by:	Pascal Christen <pascal.christen@hostpoint.ch>

Security update from 1.15.5 to 1.15.6.

Temporary disable third-party upstream_fair module, it should
be updated to build with the modern version of the nginx.

While I'm here fix some whitespaces.

MFH:		2018Q4
Security:	84ca56be-e1de-11e8-bcfd-00e04c1ea73d

<ChangeLog>

*) Security: when using HTTP/2 a client might cause excessive memory
   consumption (CVE-2018-16843) and CPU usage (CVE-2018-16844).

multimedia/ffmpeg: update to 4.1

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n4.1:/Changelog
ABI:		https://abi-laboratory.pro/tracker/timeline/ffmpeg/

Remove compatibility code for FreeBSD < 11.2 from all ports.

Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by:	rene
Reviewed by:	bapt, jbeich
Differential Revision:	https://reviews.freebsd.org/D17724

Upgrade third-party modules to their recent versions.
Fix modsecurity's URL.

Bump PORTREVISION.

Fix the build issue with STREAM_SSL_PREREAD knob.
Bump PORTREVISION.

PR:	232361

Upgrade third-party nchan (aka push) module from 1.1.14
to its recent stable version 1.2.1.

Bump PORTREVISION.

Upgrade third-party vts module from 0.1.15 to 0.1.18.
Bump PORTREVISION.

Upgrade from 1.15.4 to 1.15.5.

<ChangeLog>

*) Bugfix: a segmentation fault might occur in a worker process when
   using OpenSSL 1.1.0h or newer; the bug had appeared in 1.15.4.

*) Bugfix: of minor potential bugs.

</ChangeLog>

Upgrade from 1.15.3 to 1.15.4.

<ChangeLog>

*) Feature: now the "ssl_early_data" directive can be used with OpenSSL.

*) Bugfix: in the ngx_http_uwsgi_module.
   Thanks to Chris Caputo.

*) Bugfix: connections with some gRPC backends might not be cached when
   using the "keepalive" directive.

*) Bugfix: a socket leak might occur when using the "error_page"
   directive to redirect early request processing errors, notably errors
   with code 400.

Upgrade www/passenger and its third-party modules for
www/nginx and www/nginx-devel from 5.3.4 to 5.3.5.
Bump PORTREVISIONs where it's necessary.

Upgrade from 0.2.3 to 0.2.4.

<ChangeLog>

nginx modules:

*) Change: stream module handlers are refactored.

   New methods and properties:
   s.on(), s.off(), s.allow(), s.done(), s.decline(),
   s.deny().

   Removed properties of Stream object:
   s.OK, s.ABORT, s.AGAIN, s.DECLINED, s.ERROR (replaced
   with s.allow(), s.done([code]), s.deny()).

Merge r479404 from www/nginx.

<Commitlog>

Some modules depend on other being there before.

For example, devel_kit needs to be there before a few other, so this
fixes, and allow for future fixes of this kind of problem:

configuring additional dynamic modules
adding module in
/wrkdirs/usr/ports/www/nginx-full/work/array-var-nginx-module-0.05
error: ngx_devel_kit is required to build ngx_array_var; please put it before
ngx_array_var.

PR:		230864
Submitted by:	mat
exp-runs by:	antoine

</Commitlog>

Upgrade from 1.15.2 to 1.15.3.

<ChangeLog>

*) Feature: now TLSv1.3 can be used with BoringSSL.

*) Feature: the "ssl_early_data" directive, currently available with
   BoringSSL.

*) Feature: the "keepalive_timeout" and "keepalive_requests" directives
   in the "upstream" block.

*) Bugfix: the ngx_http_dav_module did not truncate destination file
   when copying a file over an existing one with the COPY method.

Upgrade passenger and its third-party modules for www/nginx and
www/nginx-devel from 5.3.3 to 5.3.4.

PR:	229392

<ChangeLog>

* Fixes a crash during startup on FreeBSD 11.2 and recent OpenBSD versions
  due to C++11 compatibility issues in the code. Closes GH-2097.
* Updates Boost to version 1.67.0.
* [Apache] Fixes the handling of HTTP requests with chunked bodies in
  combination with `PassengerBufferUploads off`. Closes GH-2102.

</ChangeLog>

Upgrade third-party njs module to post 0.2.3 aka a930e69 to
fix a couple of issues.
Bump PORTREVISION.

Upgrade third-party njs module to 950db73 aka 0.2.3.
Bump PORTREVISION.

<ChangeLog>

nginx modules:

*) Bugfix: making a subrequest from a Reply object caused
    a segmentation fault.

*) Bugfix: getting the parent property of the main Request
    object caused a segmentation fault.

Core:

Upgrade from 1.15.1 to 1.15.2.

<ChangeLog>

*) Feature: the $ssl_preread_protocol variable in the
   ngx_stream_ssl_preread_module.

*) Feature: now when using the "reset_timedout_connection" directive
   nginx will reset connections being closed with the 444 code.

*) Change: a logging level of the "http request", "https proxy request",
   "unsupported protocol", and "version too low" SSL errors has been
   lowered from "crit" to "info".

*) Bugfix: DNS requests were not resent if initial sending of a request

Upgrade third-party naxsi module from 0.55.3 to 0.56.

Bump PORTREVISION.

Change location for third-party sticky module from bitbucket.org
to a fork on GH cause last one contains additional fixes.
Remove needless patch.

Bump PORTREVISION.

Upgrade from 1.15.0 to 1.15.1.

<ChangeLog>

*) Feature: the "random" directive inside the "upstream" block.

*) Feature: improved performance when using the "hash" and "ip_hash"
   directives with the "zone" directive.

*) Feature: the "reuseport" parameter of the "listen" directive now uses
   SO_REUSEPORT_LB on FreeBSD 12.

*) Bugfix: HTTP/2 server push did not work if SSL was terminated by a
   proxy server in front of nginx.

*) Bugfix: the "tcp_nopush" directive was always used on backend
   connections.

*) Bugfix: sending a disk-buffered request body to a gRPC backend might
   fail.

</ChangeLog>

Upgrade passenger and its third-party modules for www/nginx
and www/nginx-devel from 5.3.2 to 5.3.3.

Update third-party brotli module to its recent revision to
fix the socket leaks issue, please see next link for details:
https://github.com/eustas/ngx_brotli/issues/11

Bump PORTREVISION.

Upgrade passenger and its third-party modules for
www/nginx and www/nginx-devel from 5.3.1 to 5.3.2.

Upgrade third-party njs module to b4a58c4 (aka 0.2.2).

Upgrade from stable 1.14.0 release to recent release
from mainline - 1.15.0.

<ChangeLog>

*) Change: the "ssl" directive is deprecated; the "ssl" parameter of the
   "listen" directive should be used instead.

*) Change: now nginx detects missing SSL certificates during
   configuration testing when using the "ssl" parameter of the "listen"
   directive.

*) Feature: now the stream module can handle multiple incoming UDP
   datagrams from a client within a single session.

Upgrade to recent bugfix release 5.3.1.

Upgrade third-party redis module to recent 0.3.9 version.

Bump PORTREVISION.

<ChangeLog>

*) Feature: redis "AUTH" command support.
   Original idea from https://github.com/Yongke/ngx_http_redis-0.3.7
   Thanks to Wang Yongke.

</ChangeLog>