security/softether5: Update to 5.02.5185

Changes:	https://github.com/SoftEtherVPN/SoftEtherVPN/releases/tag/5.02.5185

security/libsodium: update to 1.0.19, bump dependent ports

PR:	278259
Reported by:	Andrey Korobkov <alster-vinterdalen.se>

security/softether5: Update to 5.02.5184

security/softether5: Update to 5.02.5182

security/softether5: Update to 5.02.5181

security/softether5: Update to 5.02.5180-404-g6a170ac6

Fix 7 vulnerabilities [1].

Security:	CVE-2023-27395
Security:	CVE-2023-22325
Security:	CVE-2023-32275
Security:	CVE-2023-27516
Security:	CVE-2023-32634
Security:	CVE-2023-31192
Security:	CVE-2023-25774

[1] https://github.com/SoftEtherVPN/SoftEtherVPN/pull/1911

security/softether5: Update to 5.02.5180-369-g5d8ff7ed

security/softether5: Update to 5.02.5180-358-gf6f26600

security/softether5: Update to 5.02.5180-343-g56333149

This version fixes build with LLVM 16.

Obtained from:	https://github.com/SoftEtherVPN/SoftEtherVPN/pull/1868

security/softether5: 5.02.5180-335-g1c0bdb0c

Add description to tap device when working as SoftEtherVPN client.

Changes:	https://github.com/SoftEtherVPN/SoftEtherVPN/pull/1860

security/softether5: Update to 5.02.5180-333-g0f689d9d

Now client functionality practically works on FreeBSD!

security/softether5: Update to 5.02.5180-321-g6ae786d5

Fixes Denial of Service and some potential null pointer dereference.

Changes:	https://github.com/SoftEtherVPN/SoftEtherVPN/compare/82ce34fc...6ae786d5
Security:	CVE-2023-23581

security/softether5: Update to 5.02.5180-310-g82ce34fc

security/softether5: Update to 5.02.5180-298-ge6123d36

security/softether5: Update to 5.02.5180-296-g21963c6c

security/softether5: revert adding DEBUG option

Add "WITH_DEBUG_PORTS+= security/softether5" to make.conf instead
if want to enable debug build.

Reported by:	danfe, mat

security/softether5: add DEBUG option

security/softether5: Update to 5.02.5180-292-g8c64dc0c

While here, apply portfmt.

security/softether5: fix wrong CMAKE_BOOL_ON

PR:		268294

No macro with this name is checked by USES=cmake.  The correct
one would be CMAKE_ON, but that one is not evaluated again after
bsd.port.pre.mk.  Just directly add -DSKIP_CPU_FEATURES=1 to
CMAKE_ARGS to work around this shortcoming.

security/softether5: backport some patches from upstream

-  Fix DNS resolution when no IPv6 address is configured on any
   interface [1]
-  Disable MTU changes to avoid frequent interface up/down [2]

[1] https://github.com/SoftEtherVPN/SoftEtherVPN/pull/1510
[2] https://github.com/SoftEtherVPN/SoftEtherVPN/issues/1677

Obtained from:	https://github.com/SoftEtherVPN/SoftEtherVPN/pull/1510
PR:		267178

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

devel/cpu_features: Install cmake files, install headers into a dedicated
directory

do-install is removed in favor of project's install target,

Also update 3 other ports to build with cpu_features.

PR:		261252
Approved by:	skreuzer@ (maintainer)

security/softether5: Update to 5.02.5180

security/softether5: set the appropreate build number

Despite the build number is a monotonically increasing value and never
decreased or reset to zero, upstream accidentaly reset it to zero.

As a result, The older version of SoftEtherVPN client cannot to
connect to 5.x developer version server. To restore compatibility,
this commit sets the appropreate build number. See also the upstream
GitHub issue.

While here, define LIB_DEPENDS pointed out by poudriere QA-test.

Obtained
from:	https://github.com/SoftEtherVPN/SoftEtherVPN/issues/1392#issuecomment-867348281

security/softether5: backport one more patch from upstream

Obtained from:	https://github.com/SoftEtherVPN/SoftEtherVPN/pull/1367

security/softether5: Update 5.02.0

WireGuard support has been added. This PORTVERSION includes some
backports from upstream added after 5.02.0.

One more small cleanup, forgotten yesterday.
Reported by:	lwhsu

Remove # $FreeBSD$ from Makefiles.

security/softether5: increase SecureNAT sessions

to 20000. The factory default is 4096.

Sponsored by:	HAW International

security/softether5: Add rc script for TrafficServer

security/softether*: fix typo s/dirctories/directories/

in pkg-message

security/softether5: deprecate UNLOCK option

RADIUS authentication is available by default config now.

It turned out the restriction is applied only to the original binaries
and source codes. Anyone except Daiyuu Nobori can remove the restriction.

[1]
https://github.com/SoftEtherVPN/SoftEtherVPN/blob/485a592/src/Cedar/Server.c#L10611-L10642

security/softether5: Fix log, pid, db directory

Fix SE_{LOG,PID,DB}DIR weren't reintroduced properly after r532611.
While here, omit nolonger needed post-patch.

security/softether5: Update to 5.01.9674

Sponsored by:	HAW International

security/softether5: Undo update to 5.01.9673

5.01.9673 has a bug that cannot connect from iOS/macOS L2TP/ipsec client.

Upstream issue: https://github.com/SoftEtherVPN/SoftEtherVPN/issues/1102

security/softether5: Update to 5.01.9673

Sponsored by:	HAW International

security/softether5: fix build on aarch64

Tested on Amazon EC2 A1 instances with FreeBSD/ARM 12 image[1].
Build on mips also should be fixed (not actually tested).

[1] https://aws.amazon.com/marketplace/pp/B081NF7BY7

Sponsored by:	HAW International

security/softether5: fix build on non-x86 architectures

Tested on: Raspberry Pi 3 Model B+

Sponsored by:	HAW International

security/softether5: switch to cmake completely

security/softether5: Update to 5.01.9672

Sponsored by:	HAW International, Inc.

security/softether5: make LogFileList command [1] work properly

- Move patch files to my GitHub fork to follow upstream easier
- Use separate PIDDIR from DBDIR

[1]
https://www.softether.org/4-docs/1-manual/6._Command_Line_Management_Utility_Manual/6.3_VPN_Server_%2F%2F_VPN_Bridge_Management_Command_Reference_(For_Entire_Server)#6.3.55_.22LogFileList.22:_Get_List_of_Log_Files

Convert to UCL & cleanup pkg-message (categories s)

Implement new virtual category: net-vpn for VPN related ports

based on discussion at ports@ [1]. As VPN softwares are put in different
physical category net and security. This is a little bit confusing. Let's
give them new virtual category net-vpn.

[1] https://lists.freebsd.org/pipermail/freebsd-ports/2019-April/115915.html

PR:		239395
Submitted by:	myself
Approved by:	portmgr (mat)
Differential Revision:	https://reviews.freebsd.org/D21174

security/softether5: fix build on GCC architectures

Require C11 compiler:
/wrkdirs/usr/ports/security/softether5/work/SoftEtherVPN-5.01.9671/src/./Mayaqua/Str.h:204:
error: redefinition of typedef 'UINT'

Reviewed by:	mentors (implicit approval)

security/softether5: Update to 5.01.9671

There's no detailed release note on SoftEther Developer Edition however
JSON-RPC administration and HTML5 administration console has been added
as well as v4.30-9696-beta [1].

[1] https://www.softether.org/5-download/history

Update devel/readline to 8.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://tiswww.case.edu/php/chet/readline/CHANGES
PR:		236156
Exp-run by:	antoine

security/softether5: Update to 5.01.9670

Sponsored by:	HAW International, Inc.

security/softether5: conditionalize dependence on devel/cpu_features

devel/cpu_features is not available on some architectures after r496118.
Furturemore, upstream doesn't require cpu_features on some architectures
such as armv7l, aarch64, s390x. Add CFLAGS=-DSKIP_CPU_FEATURES on
architectures devel/cpu_features is not available.

Tested no-harm on amd64.

security/softether*: bridge is supported now

security/softether5: Fix typo in substitution at post-patch target

Bump PORTREVISION to force rebuild.

Due to this typo, server log was unintendedly written to /server that
should have been written to %%SE_LOGDIR%%/server.

Sponsored by:	HAW International, Inc.

security/softether5: Avoid hardcoded path in patches

Respect SE_LOGDIR, SE_DBDIR defined in Makefile. Unintended replaced with
hardcoded path by `make makepatch`.

While here, bump PORTREVISION to force rebuild with these paths.

Sponsored by:	HAW International, Inc.

New port: security/softether5: SoftEther VPN 5 (Developer Edition)

SoftEther VPN ("SoftEther" means "Software Ethernet") is an
open-source cross-platform multi-protocol VPN program, created as an
academic project in the University of Tsukuba.  Its protocol is very
fast and it can be used in very restricted environments, as it's able
to transfer packets over DNS and ICMP.  A NAT-Traversal function is
also available, very useful in case the required ports cannot be
opened on the firewall.  The supported third party protocols are
OpenVPN, L2TP/IPSec and SSTP.

This port is a bleeding-edge developer version of SoftEther, not for
production use.  If you're looking for a solid and stable version,
use security/softether (RTM version) or security/softether-devel
(stable version) instead.  This version is available also on other
other than i386/amd64 processors. Users who want to use SoftEther on
single board computers such as Raspberry Pi, BeagleBoard or other
embedded devices, try this port.

WWW: https://www.softether.org