*/*: Remove GNU_CONFIGURE_MANPREFIX

After 9fd7ee1cdf6c remove GNU_CONFIGURE_MANPREFIX from my ports.

net/openntpd: Sanitize MANPREFIX

Approved by:    portmgr (blanket)

security/libretls: update 3.8.1

Bump portrevision of consumers

net/openntpd: fix for NICs with hardware timestamp support

OpenNTPD enables the reception of a timestamp with datagrams.
Network adapters that support hardware timestamping of packets,
e.g. mlx5en(4), create a SCM_TIME_INFO control message in addition
to the SCM_TIMESTAMP one.  Provide a sufficiently large buffer to
accommodate this and avoid a MSG_CTRUNC error.

PR:		271224
Obtained from:	Dmitry Wagin <dmitry.wagin@ya.ru>

security/libretls: update to 3.7.0

net/openntpd: remove no-op configure argument

Drop the --with-cacert configure option, which does nothing at all.
OpenNTPD always loads the root CA file from the path returned by
tls_default_ca_cert_file(), i.e., /etc/ssl/cert.pem.

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

libretls: bump portrevision of dependent port due to shlib number change

Reported by:	jbeich
PointyHat:	bapt

security/libretls: upgrade to 3.5.0

Bump portrevision of each dependant port because the SONAME changes

security/libretls: update to 3.4.1

Bump revision on consumers

cleanup: drop support for EOL FreeBSD 11.X

Search criteria used:
- 11.4
- OSREL*
- OSVER*
- *_FreeBSD_11

Input from:
- adridg: devel/qca-legacy
- jbeich: _WITH_DPRINTF, _WITH_GETLINE, GNU bfd workarounds
- sunpoet: security/p5-*OpenSSL*

Reviewed by:	doceng, kde, multimedia, perl, python, ruby, rust
Differential Revision: https://reviews.freebsd.org/D32008
Test Plan: make index

net/openntpd: Add CPE information

Approved by:	portmgr (blanket)

One more small cleanup, forgotten yesterday.
Reported by:	lwhsu

all: Remove all other $FreeBSD keywords.

Remove # $FreeBSD$ from Makefiles.

net/openntpd: switch to libretls on FreeBSD 12+

When using LibreSSL use its own libtls but when using OpenSSL use
libtls from libretls.

Reworked from
PR:		252802
Submitted by:	jbeich

security/libressl: re-link static library consumers after r557713

Update to 6.8p1.  This is a large catch-up release.

Configuration changes:
* Servers can be marked as "trusted" to skip constraints processing.
* The -s and -S options are no-ops and will be removed in the future.

http://www.openntpd.org/txt/release-6.8p1.txt

Merge back fixes from OpenBSD 6.8-beta:
If no replies are received for a while due to connectivity issues,
go into unsynced mode.

PR:		221282
Reported by:	Rene Wagner <rw@nelianur.org>
Obtained from:	OpenBSD

Zap double definitions to fix build with -fno-common.

Obtained from:	upstream

Only pass -E to find(1) when passing -regex or -iregex

The -E flag tells find(1) to interpret regular expressions which were
passed as arguments to -regex and -iregex as extended regular expressions.
It has no effect on other otherwise. Let's not invoke find(1) with -E if
not necessary.

Approved by:	portmgr (blanket approval)

net/ntpsec: Add CONFLICTS between net/{ntp,ntp-devel,openntpd,ntpsec} because
they all install sbin/ntpd

Also remove -* for versions because this isn't needed.

PR:		246553
Reported by:	naddy
Approved by:	portmgr (port compliance, infrastructure)

Add a note in pkg-message that you need to override the manual search
path to view the correct ntpd(8) man page.

PR:		246484

Rebuild statically linked security/libressl consumers after r534416

Rebuild statically linked security/libressl consumers after r514815

Rebuild statically linked security/libressl consumers after r502277

Rebuild statically linked security/libressl consumers after r499667

Move the numerical ID for the "_ntp" user, required for net/openntpd's
privilege separation, after its value was usurped by the new "ntpd"
user in 12.0-CURRENT.

PR:		229936

Update to 6.2p3.  No changes on FreeBSD.

Register conflict with ntp, ntp-devel.

Update to 6.2p2: upstream has incorporated the fixes for the "query from"
feature.

Add a missing initialization and correct a memcpy size to fix the new
"query from" feature.

Reported by:	Roger Marquis <marquis@roble.com>

Update to 6.2p1.  Noteworthy changes:
* Added option "query from <ip>" to ntpd.conf, to specify a local IP
  address for outgoing NTP queries.

Add a periodic script for daily status.

Submitted by:	Alexander Milanov <a@amilanov.com>

security/libressl: Bump static library consumers

Reported by:	jbeich

Belated revision bump after libressl 2.5.3 update.
This approach doesn't work, does it?

security/libressl: chase r432997 in static lib consumers

Pointy hat to:	brnrd

- Remove always-true/false conditions after FreeBSD 9, 10.1, 10.2 EOL

Approved by:	portmgr blanket

Belated PORTREVISION bump after security/libressl 2.4.4 update.

PR:		215522
Submitted by:	Rene Wagner <rw@nelianur.org>

Fix building when libressl is not the default.

PR:		215150
Sponsored by:	Absolight

Do not use post-stage.  Use post-install instead.

The only reason to use post-stage is because the port needs to do
"things" at a later time, like some plist manipulation.
While there, fold post-install in do-install targets when they are
defined.

PR:		214780
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight

Unblock the package build via static libressl.  Adapted from [1].

OpenNTPD requires libtls, which is only available from LibreSSL.
If LibreSSL is not the default SSL library, link with a static copy
of the LibreSSL libraries.  This approach has the drawback that
whenever there is an update to libressl, the openntpd port will
require a PORTREVISION bump, otherwise it will not pick up the fixed
library and continue to use the old code.

Drop the RESSL option as LibreSSL is now always available.

PR:		213691 [1]
Submitted by:	jbeich

Most commonly used build systems support silent builds, when they
hide actual commands executed and only show short summary line (like
"CC foo.c"). CMake and ninja enable this by default, some autotools
using ports do as well. This is unacceptable because we need complete
build logs at any time, so we now switch to verbose build logs
unconditionally. Note that this change deliberately affects ALL
builds and not only package builds on cluster, because we need to
be sure that user experiencing failure can always provide informative
build log regardless of settings and without rerunning the build.

Change summary:

- Always do verbose builds for cmake, ninja and GNU configure (the
  latter includes check if --disable-silent-rules is actually supported
  by the configure script; there are isolated cases when it's not true)

Minor changes/improvements:
* switch to USES=ssl
* use the paths set by Mk/Uses/ssl.mk
* move post-install to post-stage

Submitted by:	brnrd

Fix dangling backslash after r418011.

Committed under just-fix-it.

Fix ports depending on security/(open|libre)ssl directly.

Sponsored by:	Absolight

Add support for changing the location of ntpd.conf (openntpd_config),
and add a 'configtest' rc(8) target. Also note openntpd_flags in the
comments at the top of the rc(8) script.

PORTREVISION bump for rc(8) script change.

PR:		210153
Approved by:	naddy (maintainer)

Update to 6.0p1.  Notable fixes:
* Set MOD_MAXERROR to avoid unsynced time status when using ntp_adjtime.
* Hardened TLS for ntpd constraints, enabling server name verification.

PR:		210056

For the RESSL option, switch the dependency from libressl-devel to
security/libressl, now that the latter is new enough.

PR:		209343
Submitted by:	tom.beard@public-internet.co.uk

Update to 5.9p1.  Notable changes:
* The rtable option was removed from server and servers. Users of
  "server * rtable X" will need to switch to launching ntpd with
  # setfib -F X /usr/sbin/ntpd
* Various improvements to the HTTPS constraint feature (requires
  LibreSSL).

This port reenables rtable support in the listen option on FreeBSD.

Relnotes:	http://www.openntpd.org/txt/release-5.9p1.txt

Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight

* Reenable certificate validation through libressl
  (libressl 2.2.6 seems to be happy enough with the ca_root_nss 3.22.2
  upgrade)
* Avoid strptime %Z which is nonstandard and can give surprising
  results on different operating systems. (Same fix as upstream.)

PR:		207685
Submitted by:	mandree

MASTER_SITES cleanup.

- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
  of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
  no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.

While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.

Also, replace some EXTRACT_SUFX occurences with USES=tar:*.

Checked by:	make fetch-urlall-list
With hat:	portmgr
Sponsored by:	Absolight

Clear the timex UNSYNC flag so the RTC receives updates from the
system clock.

Use plain "pgrep" in rc script to accommodate different path in DragonFly.
Reported by: Juan Francisco Cantero Hurtado <iam@juanfra.info>

Update to 5.7p4.  No user-visible changes.

In particular, the new HTTPS contraint feature is *not* enabled, because
* LibreSSL fails with the certificiate bundle from ca_root_nss
* USE_OPENSSL does not handle LibreSSL yet

Update to 5.7p3:
* Fixed issue resolving hostnames when the network is initially unavailable.

Update to OpenNTPD 5.7p2.  No user-visible changes.

After a long hiatus, update to 5.7p1.

Major user-visible changes:
* Added ntpctl(8), which allows for querying ntpd(8) at runtime.
* Added support for different routing tables.

The sample configurarion file moves to etc/ntpd.conf.sample.

Fix a race and make sure the rc.d script only matches the master
process.

Fix properties on pkg-plist

Support staging.

Add NO_STAGE all over the place in preparation for the staging support (cat:
net)

Simplify by dropping support for FreeBSD prior to 8.0-RELEASE.

Remove pointless header lines from ports I created once upon a time.

In the rc.d script, have ntpd start after ntpdate.

PR:		169787
Submitted by:	Brian Conway <bugs@zxvf.us>

In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.

- Get Rid MD5 support

Don't build arc4random_uniform() if provided by libc.

Reported by:    no@spam@mgedv.net

Begin the process of deprecating sysutils/rc_subr by
s#. %%RC_SUBR%%#. /etc/rc.subr#

clean up rc script

Update to 4.6:
* DNS queries are delegated to a dedicated child process.
* The -v option will log all time adjustments.

convert to USERS/GROUPS

Feature safe:   yes

Major update to 4.4.  Frequency correction is now supported.

Mark MAKE_JOBS_SAFE for parallel building.

Use new style of startup script install.

PR:             116772
Submitted by:   Alexander Logvinov <ports@logvinov.com>

Use LOG_NTP syslog facility.

PR:             114191
Submitted by:   Robert Archer <freebsd@deathbeforedecaf.net>

Update to OpenNTPD 3.9p1 (as of OpenBSD 3.9).

Remove USE_REINPLACE from all categories starting with N

Remove the FreeBSD KEYWORD from all rc.d scripts where it appears.
We have not checked for this KEYWORD for a long time now, so this
is a complete noop, and thus no PORTREVISION bump. Removing it at
this point is mostly for pedantic reasons, and partly to avoid
perpetuating this anachronism by copy and paste to future scripts.

SHA256ify

Approved by: krion@

Update to 3.7p1.  No major changes, but lots of small ones.

Add a paragraph to ntpd.8 about enabling ntpd in /etc/rc.conf.
Adapted from the equivalent text in the OpenBSD man page which has been
removed from the portable version.

Requested by:   Don Sullivan <sullivan@gaia.arc.nasa.gov>

Bump PORTEPOCH to keep version number from going backward.

Update to 3.6.1p1.  Many enhancements, among these:
* -s option to set the time immediately at startup if the local
  clock is off by more than 180 seconds.
* Adjustments smaller than 128ms are no longer logged.

Update to 3.6, the first formal release.

Update to release 20040824p.

Fix plist.

Update to 20040719p: improved query interval scaling.

(1)
Update to 20040718p.  Changes in this release:
- Ignore obviously malformed queries.
- Respond to client queries with better server statistics.

(2)
Fix configuration file location in man pages.

PR:             69233
Submitted by:   edwin   (2)

Update to 20040714.  No significant changes.

Update to the release du jour, now with datestamp version numbering.

Kludge for missing IOV_MAX on 4.x.

* Add mirror site.
* Fix typo.

Submitted by:   Darren Tucker <dtucker@zip.com.au>

Initial import of openntpd (OpenBSD's ntpd, portable version).

The ntpd daemon implements the Simple Network Time Protocol version 4 as
described in RFC 2030 and the Network Time Protocol version 3 as de-
scribed in RFC 1305.  It can synchronize the local clock to one or more
remote NTP servers and act as NTP server itself, redistributing the local
time.