security/openscep: Remove expired port:

2023-03-31 security/openscep: Do not support recent RFC 8894

Mk/**ldap.mk: Convert USE_LDAP to USES=ldap

Convert the USE_LDAP=yes to USES=ldap and adds the following features:

- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
  RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features

Reviewed by:	delphij
Approved by:	portmgr
Differential Revision: https://reviews.freebsd.org/D38233

Mk/Uses/apache.mk: Refactor after removal of older versions

apache22 and apache25 had been removed a long time ago however the
apache.mk file has never been refactored and is out of sync from the
file Mk/bsd.default-versions.mk. These changes refactors the removals of
the older versions. In addition:

- Move some keywords like USE_APACHE, USE_APACHE_BUILD, USE_APACHE_RUN
  from SANITY_DEPRECATED to SANITY_UNSUPPORTED
- Remove apache versions from ports Makefiles as currently there is only
  one available version in the tree. However the version checks are
  still valid and should work flawlessly whenever a new version is
  added. For example USES=apache:2.2+ are simply replaced with
  USES=apache. As currently there are no other versions available for
  test this could not be checked on it's own ground.
- Update FOO_USE=APACHE=yes to FOO_USES=apache
- Remove trailing whitespaces

Approved by:    portmgr
Differential Revision: https://reviews.freebsd.org/D38113

security/openscep: Mark DEPRECATED

- This port is based on the RFC
  https://datatracker.ietf.org/doc/draft-nourse-scep/ which has been
  replaced with https://datatracker.ietf.org/doc/rfc8894/. Additionally
  this application has not been updated since 2003. Hence mark this port
  as DEPRECATED
- Set EXPIRATION_DATE to 2023-03-31
- Add LICENSE GPLv2
- Refactor the SSL IGNORE and SSL BROKEN macros

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

security: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  <ports@c0decafe.net>
  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Adam Weinberger <adamw@FreeBSD.org>
  *  Ade Lovett <ade@FreeBSD.org>
  *  Aldis Berjoza <aldis@bsdroot.lv>
  *  Alex Dupre <ale@FreeBSD.org>
  *  Alex Kapranoff <kappa@rambler-co.ru>
  *  Alex Samorukov <samm@freebsd.org>
  *  Alexander Botero-Lowry <alex@foxybanana.com>
  *  Alexander Kriventsov <avk@vl.ru>
  *  Alexander Leidinger <netchild@FreeBSD.org>

net/openldap24-client: bump all dependent port

In the earlier net/openldap24-server commit, only those which depend on
net/openldap24-sasl-client were bumped. Bumping all dependent port that
didn't get a bump to force a rebuild of these packages.

Suggested by:	kib

security/openscep: extend BROKEN to FreeBSD 14

Remove # $FreeBSD$ from Makefiles.

Convert to UCL & cleanup pkg-message (categories s)

Mark BROKEN on FreeBSD 12 and 13

Reported by:	pkg-fallout
MFH:		2019Q2

Migrate USE_APACHE to USES= apache

 - Following migration of Mk/bsd.apache.mk to Mk/Uses/apache.mk

With hat:	apache

security/openscep: Mark IGNORE if SSL_DEFAULT matches libressl

The fix for LibreSSL support is not immediately obvious, so mark the
port IGNOREd until the LibreSSL case is fixed.

Approved by:	SSL blanket

- Fix trailing whitespace in pkg-messages

Approved by:	portmgr blanket

- Fix trailing whitespace in pkg-descrs, categories [p-x]*

Approved by:	portmgr blanket

- Strip library
- Drop @dirrm* from plist

Remove $FreeBSD$ from patches files everywhere.

With hat:	portmgr
Sponsored by:	Absolight

cleanup plist

net/openldap24-*:
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD

databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip

databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample

- Fix build on 10+ (new OpenSSL API)
- Add staging support, allow it as regular user
- Register conflict with security/nss (file ${LOCALBASE}/bin/derdump)
- Convert to USES=libtool
- Use @sample for config files

MFH:		2014Q3

Support LIBS like LDFLAGS.

- Add LIBS="${LIBS}" to MAKE_ENV and CONFIGURE_ENV.
- Add an option helper for LIBS.
- Adjust all ports that already use LIBS.  Also remove references to
  PTHREAD_CFLAGS and PTHREAD_LIBS while here.
- Some ports did not support having a LIBS environment variable and
  required additional patches.

Somewhat simplified a linker command line looks like:

${CC} ${src_LDFLAGS} ${LDFLAGS} ${src_LIBS} ${LIBS}

where src_LDFLAGS and src_LIBS are controlled by upstream and LDFLAGS and
LIBS can be controlled by us.  If possible -L and -l flags need to be

- Convert gmake, bzip2 to USES

Approved by:	portmgr

Add NO_STAGE all over the place in preparation for the staging support (cat:
security)

- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)

- remove www/apache20 and devel/apr0
- s/USE_APACHE= 20+/USE_APACHE= 22+/
- unify s/YES/yes/
- cleanup APACHE_VERSION <= 22 usage
- add entry to MOVED

with hat apache@

- change required APACHE version from 13+ to 20+
  (prepare to remove www/apache13)

- no PORTREVISION bump since apache22 is the default

with hat apache@

- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:             157936
Submitted by:   myself
Exp-runs by:    pav
Approved by:    pav

 - bump PORTREVISION from ports if USE_APACHE=13+ or 20+ is defined

Chase after net/openldap24-server update.

Reminded by:    miwi

 - fix leftover if APACHE_VERSION > 13

PR:             ports/147009

Fix the handling of CPPFLAGS in the context of CONFIGURE_ENV / MAKE_ENV.

PR:             153625
Feature safe:   yes

Fix whitespace in Makefile.  Add USE_LDCONFIG.

Reported by:    portlint
Feature safe:   yes

Sync to new bsd.autotools.mk

re-assign back to ports@

-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:      marcus and kwm
Pointyhat-exp:  a few times by pav
Tested by:      pgollucci, "Romain Tartière" <romain@blogreen.org>, and
                a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:    marcus
Approved by:    portmgr

- Mark most of my ports MAKE_JOBS_SAFE=yes

Tested by: several builds in P6 TB

- Fix pkg-plist

Reported by:    QAT

- Fix pkg-plist
- USE_APACHE=yes is deprecated
- Adopt
- Bump PORTREVISION

Bump PORTREVISION's after OpenLDAP update.

Suggested by:   rafan

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk

Use libtool port instead of included one to avoid objformat a.out botch

Fix compile with OpenSSL 0.9.8b from -CURRENT.

Problem reported by:    kris

Remove USE_REINPLACE from all categories starting with S

Reset vsevolod as maintainer due to unreponsiveness.  We hope to see him
back sometime.

Hat:            portmgr

Conversion to a single libtool environment.

Approved by:    portmgr (kris)

- Rename CONF_FILES to LOCAL_CONF_FILES.

PR:             ports/90438
Submitted by:   flz
Approved by:    maintainer timeouts

SHA256ify

Approved by: krion@

Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry

Approved by:    krion@
PR:             ports/88711 (related)

Mass-conversion to the USE_AUTOTOOLS New World Order.  The code present
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.

Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.

Preliminary documentation can be found at:
        http://people.FreeBSD.org/~ade/autotools.txt

which is in the process of being SGMLized before introduction into the
Porters Handbook.

Light blue touch-paper.  Run.

Update my email address.

Approved by:    perky (mentor)

Add openscep.

OpenSCEP is an open source implementation of the SCEP protocol used by Cisco
routers for certificate enrollment to build VPNs. It implements most of the
draft specification.

OpenSCEP includes a client and a server implementation, as well as some CGI
programs to simplify certificate and revocation list management.

WWW: http://openscep.othello.ch/

PR:             ports/81264
Submitted by:   Vsevolod Stakhov <vsevolod@highsecure.ru>