MANPREFIX: eleminate its usage  and move man to share/man

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

security: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  <ports@c0decafe.net>
  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Adam Weinberger <adamw@FreeBSD.org>
  *  Ade Lovett <ade@FreeBSD.org>
  *  Aldis Berjoza <aldis@bsdroot.lv>
  *  Alex Dupre <ale@FreeBSD.org>
  *  Alex Kapranoff <kappa@rambler-co.ru>
  *  Alex Samorukov <samm@freebsd.org>
  *  Alexander Botero-Lowry <alex@foxybanana.com>
  *  Alexander Kriventsov <avk@vl.ru>
  *  Alexander Leidinger <netchild@FreeBSD.org>

Deorbit RESTRICTED && NO_CDROM, part one.

For ports that already use the licenses framwork, merge the content of
RESTRICTED/NO_CDROM/LEGAL* entries into LICENSEs.

Approved by:	rene
Differential Revision:	https://reviews.freebsd.org/D30010

Remove # $FreeBSD$ from Makefiles.

security/vpnc: fix issue with destroying tun device on exit

While here, improve formatting and regenerate patches

PR:		241039
Submitted by:	kevans
Reported by:	Hrant Dadivanyan <hrant@dadivanyan.net>

Release maintainership.

Implement new virtual category: net-vpn for VPN related ports

based on discussion at ports@ [1]. As VPN softwares are put in different
physical category net and security. This is a little bit confusing. Let's
give them new virtual category net-vpn.

[1] https://lists.freebsd.org/pipermail/freebsd-ports/2019-April/115915.html

PR:		239395
Submitted by:	myself
Approved by:	portmgr (mat)
Differential Revision:	https://reviews.freebsd.org/D21174

- Fix license
- Simplify installation
- Convert to options helpers
- Correctly set installed files permissions in pkg-plist

PR:		234787
Submitted by:	amdmi3
Approved by:	ehaupt (maintainer)

Remove compatibility code for FreeBSD < 11.2 from all ports.

Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by:	rene
Reviewed by:	bapt, jbeich
Differential Revision:	https://reviews.freebsd.org/D17724

Fix an issue where vpnc cannot connect to AVM Fritzbox VPNs because of wrongly
reported lifetimes.

PR:		223664
Submitted by:	stefan.wendler@tngtech.com

Add licenses

Register security/libgpg-error with LIB_DEPENDS

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

Fix bug on __FreeBSD_version >= 1100042 where once vpnc set up a tunnel and
went into the main loop, no esp could be sent.

PR:             197835 (based on)
Submitted by:   markiyan.kushnir@gmail.com
Fix confirmed:  xmj

security/vpnc: Update sysdep.h patch to support dragonfly

While here, remove the __FreeBSD_version check as this will always
pass on supported releases of FreeBSD.

Approved by:	blanket (non-invasive DragonFly support)

Move MASTER_SITES from CRITICAL to LOCAL/ehaupt

security/libgcrypt: 1.6.1 -> 1.6.2, bump depends

Changes:
- src/sexp.c (do_vsexp_sscan): Return error for invalid args.
- cipher/md.c (_gcry_md_info): Fix a segv in case of calling
  with wrong parameters.
- cipher/primegen.c (_gcry_generate_elg_prime): Change to return an
  error code, possible NULL deref in call to prime generator.
- cipher/dsa.c (generate): Take care of new return code.
- cipher/elgamal.c (generate): Change to return an error code.  Take
	care of _gcry_generate_elg_prime return code.
- ecc: Support the non-standard 0x40 compression flag for EdDSA.
- mpi: Extend the internal mpi_get_buffer.
- mpi: Fix regression for powerpc-apple-darwin detection.
- Fix bug inhibiting the use of the sentinel attribute in src/gcrypt.h.in

security/libgcrypt: 1.5.3_3 -> 1.6.1

- Update to 1.6.1
- Remove some unneeded patches
- Fix pkg-plist
- report configure bug upstream
  https://bugs.g10code.com/gnupg/issue1668
- report API breakage downstream and find that MacPorts had the same issue
  https://rt.cpan.org/Ticket/Display.html?id=97201
- bump PORTREVISION for dependent ports (approx. 100 ports)
- Thanks to exp-run by antoine@ to find ports that break
- patch ports that would otherwise break
  security/shishi with PR 192164 is already committed
  [1] devel/ccrtp
  [2] editors/abiword
  [3] security/p5-Crypt-GCrypt

PR:		191256, 192162 [1], 192163 [2], 192166 [3]
Submitted by:	Carlos Jacobo Puga Medina <cjpugmed@gmail.com>
Approved by:	maintainer timeout, antoine (exp-run), portmgr (implicit)

Use @sample pkg-plist macro.

Quiesce mkdir

Now that this port is staged and DOCS defined we can stop testing for DOCS in
any install target.

Rename MANn to MANPAGEn in order to avoid a 'make check-sanity' warning.

Use new LIB_DEPENDS regime

Fix typo.

Notified by:	John Marino <freebsd.contact@marino.st>

Add LEGAL_TEXT as requested by eadler.

Support staging.

Add NO_STAGE all over the place in preparation for the staging support (cat:
security)

Convert to new perl framework
Convert USE_GMAKE to USES

Remove MAKE_JOBS_SAFE which is now default.

- Convert USE_GMAKE to USES=gmake
- Change pkgconfig:build to pkgconfig since it's the same and it's bad practice.
  It accidentally slipped in during the original introduction
- Trim header

Convert to use shebangfix USES flag.

Chase security/libgcrypt update

- Use DOC instead of NOPORTDOCS
- Pacify portlint
- Convert header

Restore 'Created by' header information. This has been removed during the
first announcement of the new trimming rule and the finalized overworked
version.

Feature safe:   yes

Point shebang in a perl script to ${PERL} in order to solve a build problem if
perl is installed without creating symlinks to /usr/bin/perl.

PR:             171673 (based on)
Notified by:    Yuriy Taraday <yorik.sar@gmail.com>

- Use OPTIONSng
- Remove deprecated header information

- Use sysutils/vpnc-scripts instead of builtin version
- Bump PORTREVISION

Approved by:    ehaupt@ (maintainer)

In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.

Fix a typo in a comment.

Feature safe:   yes

Fix handling of /etc/resolv.conf during connect/disconnect. Now that FreeBSD 9.x
has a script called /sbin/resolvconf it tried to use the Debian, Ubuntu, Gentoo
syntax which is incompatible with FreeBSD's version of the script and will
therefore fail.

Feature safe:   yes

- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:             157936
Submitted by:   myself
Exp-runs by:    pav
Approved by:    pav

- Chase the libgcrypt shared lib version

Include a patchset that solves a problem with phase2 re-keying. That is, when
phase2 lifetime (either in seconds or bytes) expires, then vpnc either silently
stops passing traffic or that plus consuming CPU time by running a tight loop.

This issue have experienced this issue on various platforms.

Example of a bug report:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496718

Bump PORTREVISION and while we're here remove MD5 sums.

Submitted by:   avg
Obtained from:  http://www.gossamer-threads.com/lists/vpnc/devel/3442, with
                slight adjustments to apply to our patchlevel by avg

Chase security/libgcrypt shlib bump.

PR:             ports/148755
Submitted by:   Hirohisa Yamaguchi <umq@ueo.co.jp>

Fix rc.d script return value

PR:             145207
Submitted by:   Dominic Fandrey <kamikaze@bsdforen.de>

Begin the process of deprecating sysutils/rc_subr by
s#. %%RC_SUBR%%#. /etc/rc.subr#

Mark MAKE_JOBS_SAFE

Unbreak security/vpnc and graphics/pecomato. Those ports were fixed by 133053,
thanks. However, it remains unclear why the PR wasn't assigned to me nor why I
wasn't notified as maintainer.

Mark BROKEN on ${OSVERSION} >= 800067 && ${ARCH} == "amd64"

Notified by:    pointyhat via pav

- Fix build after addition of getdelim() and strndup()

PR:             133053
Submitted by:   David Schultz <das@freebsd.org>

- Bump PORTREVISION due to share library version bump in security/libgcrypt

PR:              ports/127478

Update to 0.5.3 (files forgotten in previous commit)

Update to 0.5.3

Use kldstat(8) to check for the availability of the if_tun module in the
kernel instead of checking for existance of /dev/tun. The latter causes
tun(8) to allocate new instance, which is not good by itself, but also
on all FreeBSD versions before the very recent -current it causes number
of tun devices to grow each time the script is invoked (and it's invoked
every time when vpnc makes a new connection).

Bump PORTREVISION.

Approved by:    MAINTAINER

- Remove duplicates from MAKE_ENV after inclusion of CC and CXX in default
MAKE_ENV

Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)

Use MASTER_SITE_CRITICAL

Follow the change of the pid file in the rc script.

Submitted by:   Dominic Fandrey <kamikaze@bsdforen.de>

Fix vpnc-disconnect script

PR:             121942
Submitted by:   Andreas Schwarz <bugs.asc@schwarzes.net>

Some Cisco Concentrator refuse connection if the presentation version string
differs from the official "Cisco VPN Client".

Provide an optional patch which masks the original version string.

PR:             116949
Submitted by:   Raffaele De Lorenzo <raffaele.delorenzo@libero.it>

- Update RC script
- Bump PORTREVISION

Submitted by:   kamikaze@bsdforen.de (author of rc script)

The upgrade of ports/security/vpnc to version 0.5.1 introduced some glitches
against the documented behaviour. In particular, the configuration files are
not searched in the documented locations: /usr/local/etc/vpnc/*.conf is not
searched at all, and /usr/local/etc/vpnc/default.conf is skipped, both in
contrast to the documentation.

PR:             121229
Submitted by:   Helge Oldach <ports-security-vpnc-feb08@oldach.net>

Chase libgcrypt library version

- Update to 0.5.1
- Take maintainership
- Optional install cisco-decrypt utility
- Optional build with hybrid support

Reset delta@lackas.net due to maintainer-timeouts and no response to email.

Hat:            portmgr

- In managed mode the script does not return the proper value due to $?
  is reset by the if command. Therefore, the script does not fail when
  starts with broken configuration files
- While I'm here, use %%RC_SUBR%% instead of /etc/rc.subr

PR:             ports/110320
Submitted by:   Dominic Fandrey <lon_kamikaze at gmx.de>
Approved by:    maintainer timeout (6 months)

- Make port fully respect CFLAGS
- Don't build with debug symbols
- Bump PORTREVISION

PR:             114863
Approved by:    maintainer timeout (14 days)

- Respect %%PREFIX%%
- Bump PORTREVISION

PR:             110466
Submitted by:   Helge Oldach <ports-vpnc-mar07@oldach.net> (maintainer)

- Update to 0.4.0

PR:             110272
Submitted by:   Christian Lackas <delta@lackas.net> (maintainer)

- Improve the style and behaviour of the rc.d script
- Bump PORTREVISION

Submitted by:   dougb
Reviewed by:    Dominic Fandrey <lon_kamikaze@gmx.de>
Approved by:    Christian Lackas <christian@lackas.net> (maintainer)

- Update rc.d script
- Use USE_RC_SUBR instead of direct patching
- Bump PORTREVISION

PR:             ports/107675
Submitted by:   Dominic Fandrey <lon_kamikaze@gmx.de> (with fixes from
maintainer)
Approved by:    Christian Lackas <delta@lackas.net> (maintainer),
                erwin (mentor, implicit)

- Add NAT keepalive capability as per RFC 3947
- Bump PORTREVISION

PR:             ports/100814
Submitted by:   Daniel Roethlisberger <daniel(at)roe.ch>
Approved by:    krion (mentor), maintainer

Remove USE_REINPLACE from all categories starting with S

SHA256ify

Approved by: krion@

- Unbreak vpnc-disconnect by fixing the config.c patch
- Remove obsolete vpnc-wrapper leftovers to make portlint happy
- Use PLIST_FILES and PORTDOCS instead of pkg-plist
- Bump PORTREVISION

PR:             ports/84491
Submitted by:   Daniel Roethlisberger <daniel@roe.ch>
Approved by:    Christian Lackas <delta@lackas.net> (maintainer)

- fix connect script
- remove obsolete fulltunnel script
- add disconnect script

PR:             81550
Submitted by:   Christian Lackas <delta@lackas.net>

Update to 0.3.3

PR:             ports/81008
Submitted by:   maintainer

- Update vpnc.sh-sample-fulltunnel to vpnc-wrapper 1.25
- Bump PORTREVISION.

PR:             79942
Submitted by:   Daniel Roethlisberger <daniel@roe.ch>
Approved by:    Christian Lackas <delta@lackas.net> (maintainer)

Update libgcrypt to 1.2.1. Changes:
        * made the code try to lock secure memory pool not only when running as
          root,
        * fixed type usage in Serpent,
        * made the code mix the PID into the entropy pool for better protection
          after a fork,
        * fixed memory leak in RSA.
        * fixed alignment problems in Rijndael,
        * fixed memory leak in gcry_pk_sign(),
        * fixed broken pointer access in gcry_ac_open(),
        * updated the documentation,
        * fixed several other bugs.
Chase Shared library version and bump PORTREVISION of affected ports.

Update to 0.3.2
- added support for preshared without xauth
- fixed NAT-T support with IOS and PIX
- fixed IP-Len header
- fixed reconnection problems with IOS and PIX

PR:             ports/74271
Submitted by:   maintainer

Update to 0.3.1:
- IPSec over UDP and NAT-T support
- added support for interactive authentication (security tokens for example)
- fixed IOS support

PR:             ports/74040
Submitted by:   maintainer

s/BROKEN/IGNORE/ to prevent package build

- Update to vpnc-0.2-rm+zomb.1.tar.gz
- Update manpage

PR:             ports/66624
Submitted by:   maintainer

- Fix MASTER_SITES
- Update to vpnc-wrapper-1.10 (better FreeBSD 4 support)
  (Daniel Roethlisberger)
- Bump PORTREVISION

PR:             ports/66571
Submitted by:   Christian Lackas (maintainer)

Update to vpnc-0.2-rm+zomb-pre9

PR:             ports/66202
Submitted by:   Christian Lackas <delta@lackas.net> (maintainer)

Update libgcrypt to the new stable version 1.2.0
Retire libgcrypt-devel

Switch back to security/libgcrypt and bump PORTREVISION for
- gnutls
- gnutls-devel
- gsasl
- opencdk
- vpnc

libggz:
- Remove dependency on libgcrypt, because the port does not yet
work with the new libgcrypt

libksba:

Update to vpnc-0.2-rm+zomb-pre8
Add fulltunnel wrapper script by Daniel Roethlisberger

PR:             65945
Submitted by:   Christian Lackas

Mark broken on AMD64

SIZEify (maintainer timeout)

- use tun0 as default-interface
- fix install of startscript

Approved by:    Christian Lackas <delta@lackas.net> (maintainer)
                arved (mentor)

Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 1)

Update to new version.
Depend on new libgcrypt-devel port.

PR:             62111
Submitted by:   Christian Lackas <delta@lackas.net>

- Add pkg-message forgotten to add by last commit.

- using PREFIX/CC/CFLAGS (with help from Markus Brueffer)
- added a man-page
- installing additional docs
- fixed installing with 0666
- sample start script now works and actually contains an usefull example
- fixed install target
- added a comment (in pkg-message) about ESP "Protocol not supported"

PR:             60364
Submitted by:   maintainer

- Fix typo in start/stop script

Submitted by:   arved

Add vpnc 0.2,

VPNC - Client for Cisco 3000 VPN Concentrator

A VPN client compatible with Cisco's EasyVPN equipment.
Supports IPSec (ESP) with Mode Configuration and Xauth.
Supports only shared-secret IPSec authentication, 3DES, MD5,
and IP tunneling.  It runs entirely in userspace

PR:             60283
Submitted by:   Christian Lackas