Update from 1.19.6 to 1.19.7.
Update njs module from 0.5.0 to 0.5.1.
Update third-party auth_ldap module to its recent commit.

<Changelog>

Changes with nginx 1.19.7                                        16 Feb 2021

*) Change: connections handling in HTTP/2 has been changed to better
   match HTTP/1.x; the "http2_recv_timeout", "http2_idle_timeout", and
   "http2_max_requests" directives have been removed, the
   "keepalive_timeout" and "keepalive_requests" directives should be
   used instead.

*) Change: the "http2_max_field_size" and "http2_max_header_size"

Fix PROPFIND fail with 500 on simlinks to non exist file/dir
when nginx compiled with the third-party http_dav_ext module.

Bump PORTREVISION.

PR:	220871

Update the following third-party modules to their recent revisions:
o) drizzle
o) echo

Bump PORTREVISION.

Update the following third-party modules to their recent
commits or versions:

o) aws_auth
o) brotli
o) http_shibboleth
o) set_misc
o) srcache

Bump PORTREVISION.

Merge r558438 from www/nginx, i.e. update the following
third-party modules to their recent versions:
o) fancyindex
o) http_geoip2

Bump PORTREVISION.

Update from 1.19.5 to 1.19.6.

<Changelog>

*) Bugfix: "no live upstreams" errors if a "server" inside "upstream"
   block was marked as "down".

*) Bugfix: a segmentation fault might occur in a worker process if HTTPS
   was used; the bug had appeared in 1.19.5.

*) Bugfix: nginx returned the 400 response on requests like
   "GET http://example.com?args HTTP/1.0".

*) Bugfix: in the ngx_http_flv_module and ngx_http_mp4_module.
   Thanks to Chris Newton.

</Changelog>

Fix a worker process issue by adding the vendor's patch.
Bump PORTREVISION.

Reported by:	Peter Putzer <freebsd@mnd.sc>

<ChangeLog>
SSL: fixed SSL shutdown on lingering close.

Ensure c->recv is properly reset to ngx_recv if SSL_shutdown()
blocks on writing.

The bug had appeared in 554c6ae25ffc.
</ChangeLog>

PR:	251664

Update njs module from 0.4.4 to 0.5.0.
Bump PORTREVISION.

<ChangeLog>
nginx modules:

*) Feature: introduced global "ngx" object.
   The following methods were added:
     ngx.log(level, msg)

   The following properties were added:
     ngx.INFO,
     ngx.WARN,
     ngx.ERR.

Update third-party naxsi module from 1.2 to 1.3.

ChangeLog:	https://github.com/nbs-system/naxsi/compare/1.2...1.3

Bump PORTREVISION.

Update third-party passenger module from 6.0.6 to 6.0.7.

ChangeLog:	https://github.com/phusion/passenger/compare/release-6.0.6...release-6.0.7

Bump PORTREVISION.

Update from 1.19.4 to 1.19.5.

<Changelog>

*) Feature: the -e switch.

*) Feature: the same source files can now be specified in different
   modules while building addon modules.

*) Bugfix: SSL shutdown did not work when lingering close was used.

*) Bugfix: "upstream sent frame for closed stream" errors might occur
   when working with gRPC backends.

*) Bugfix: in request body filters internal API.

</Changelog>

Update third-partu link function module from 3.2.3 to 3.2.4.

Bump PORTREVISION.

Update third-party naxsi module from 1.1a to 1.2.

Bump PORTREVISION.

Update third-partu lua module to the recent version.

Bump PORTREVISION.

Update the kernel TLS patch to make all hunks succeeded.
Bump PORTREVISION.

Update from 1.19.3 to 1.19.4.
Remove needless patches.

<Changelog>

*) Feature: the "ssl_conf_command", "proxy_ssl_conf_command",
   "grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.

*) Feature: the "ssl_reject_handshake" directive.

*) Feature: the "proxy_smtp_auth" directive in mail proxy.

</Changelog>

Update third-party naxsi module from 0.56 to 1.1a.
Bump PORTREVISION.

Bump PORTREVISION for www/libjwt shlib change

Actually add the patch for r550845.

Re-add the patch from r550699 to fix build with -fno-common for
the third-party nchan module.

Bump PORTREVISION.

Spotted by:	vanilla

Fix build with -fno-common.
Bump PORTREVISION.

Submitted by:	vanilla

Merge r549093 to fix build with -fno-common.
Bump PORTREVISION.

Spotted by:	vanilla

Update nginx from 1.19.2 to 1.19.3.
Update njs module from 0.4.3 to 0.4.4.

<Changelog for nginx 1.19.3>

*) Feature: the ngx_stream_set_module.

*) Feature: the "proxy_cookie_flags" directive.

*) Feature: the "userid_flags" directive.

*) Bugfix: the "stale-if-error" cache control extension was erroneously
   applied if backend returned a response with status code 500, 502,
   503, 504, 403, 404, or 429.

Add the corresponding library path to the patch for the
third-party http_auth_spnego module.

The third-party http_auth_spnego module may not work with
in-base Kerberos implementation because of gss_locaname()
function usage, so remove the GSSAPI_BASE option from the
GSSAPI radio button.

Bump PORTREVISION.

Update third-party tarantool module to its recent commit.

Bump PORTREVISION.

Update third-party spnego-http-auth module to its recent version.

Bump PORTREVISION.

Partially merge r545592 from www/nginx.

- Fix broken build after NJS update (missing USES+=libedit)

Bump PORTREVISION.

Partially revert back r533146 cause upstream_check third-party
dynamic module can't work as expected, so let's keep it static
for now.

Bump PORTREVISION.

PR:	247523

Update PLIST according to the recent change.

Bump PORTREVISION.

Update third-party dynamic_upstream module.
Add third-party dynamic_healthcheck module.

Bump PORTREVISION.

Update third-party modules to their recent releases:

o) ip2proxy-nginx
o) slact-nchan

Bump PORTREVISION.

Update nginx from 1.19.1 to 1.19.2.
Update njs module from 0.4.2 to 0.4.3.

While I'm here soften some variables and target definitions to
prepare the port for a separate build of dynamic modules.

<Changelog for nginx 1.19.2>

*) Change: now nginx starts closing keepalive connections before all
   free worker connections are exhausted, and logs a warning about this
   to the error log.

*) Change: optimization of client request body reading when using
   chunked transfer encoding.

Update passenger and its third-party module for www/nginx-devel
from 6.0.5 to 6.0.6.

Update the following third-party modules to their new versions:
o) cache_purge
o) clojure

Bump PORTREVISION.

Update third-party brotli module to v1.0.0rc.

Bump PORTREVISION.

Update from 1.19.0 to 1.19.1.

<ChangeLog>

*) Change: the "lingering_close", "lingering_time", and
   "lingering_timeout" directives now work when using HTTP/2.

*) Change: now extra data sent by a backend are always discarded.

*) Change: now after receiving a too short response from a FastCGI
   server nginx tries to send the available part of the response to the
   client, and then closes the client connection.

*) Change: now after receiving a response with incorrect length from a
   gRPC backend nginx stops response processing with an error.

Update third-party modules:

o) lua from 0.10.15 to 0.10.17
o) njs from 0.4.1 to 0.4.2

Bump PORTREVISION.

<ChangeLog for njs 0.4.2>

Core:

*) Feature: added RegExp.prototype[Symbol.replace].

*) Feature: introduced line level backtrace.

Move NJS knob out of the HTTP group cause NGINX JavaScript module
distribution provides modules for http and stream (tcp/udp).

Bump PORTREVISION.

Add kernel TLS option.

It's possible to build nginx on FreeBSD13 with security/openssl
port, compiled with kernel TLS option as well.

Bump PORTREVISION.

Based
on:	https://github.com/nginx/nginx/compare/branches/stable-1.16...bsdjhb:ktls-1.16
Reviewed by:	jhb
Tested by:	jhb

Update passenger and its third-party module from
6.0.4 to 6.0.5.

Bump PORTREVISION for www/nginx-devel.

Merge r538002 from www/nginx.

Update 3rd party module nginx-link-function to 3.2.3.

Bump PORTREVISION.

Merge r537527 and r537550 from www/nginx:

1. Switch with the nginx-upload-module to fdintino, they support http/2:        
                                                       
https://github.com/fdintino/nginx-upload-module/.

2. Update 3rd party module nginx-link-function to 3.2.2.

Bump PORTREVISION.

PR:	246746 [1]
	246897 [2]

Update nginx from 1.18.0 to 1.19.0.

<ChangeLog>

*) Feature: client certificate validation with OCSP.

*) Bugfix: "upstream sent frame for closed stream" errors might occur
   when working with gRPC backends.

*) Bugfix: OCSP stapling might not work if the "resolver" directive was
   not specified.

*) Bugfix: connections with incorrect HTTP/2 preface were not logged.

</ChangeLog>

Update njs module from 0.4.0 to 0.4.1.

While I'm here add '--with-compat' option to the configure script
to enable dynamic modules compatibility.

<ChangeLog>

*) Feature: added support for multi-value headers in r.headersIn.

*) Feature: introduced raw headers API.

*) Feature: added TypedScript API description.

Core:

*) Bugfix: fixed Array.prototype.slice() for sparse arrays.

</ChangeLog>

Remove legacy third-party modules:

o) modsecurity2
o) fastdfs

All modules, including all third-party modules, are dynamic now.

Bump PORTREVISION.

Add third-party opentracing dynamic module.

Bump PORTREVISION.

Add cookie_flag third-party dynamic module.

While I'm here create a description for STREAM related
modules.

Bump PORTREVISION.

- update libgd to 2.3.0
- new option RAQM
- resurrect deprecated gdlib-config
- bump dependend ports

Convert third-party ngx_http_h264_streaming module to dynamic.

Bump PORTREVISION.

Add missing patches for r533146.

Pointy hat:	osa

Convert another 3 third-party modules to dynamic:

o) ngx_http_subs_filter
o) ngx_http_upstream_check
o) ngx_http_response

Bump PORTREVISION.

Convert another 3 third-party modules to dynamic:

o) http_json_status
o) http_mogilefs
o) http_notice

Bump PORTREVISION.

Convert another 2 third-party modules to dynamic:

o) rds_csv
o) rds_json

Bump PORTREVISION.

Convert another 2 third-party modules to dynamic:

o) slowfs_cache
o) xss

Bump PORTREVISION.

Convert another 7 third-party modules to dynamic:

o) gridfs
o) http_push_stream
o) http_upstream_sticky
o) http_video_thumbextractor
o) http_zip
o) let
o) link

Bump PORTREVISION.

Convert another 5 third-party modules to dynamic:

o) drizzle
o) http_dav_ext
o) http_footer_filter
o) http_ip2location
o) http_ip2proxy

Bump PORTREVISION.

Convert the following third-party modules to dynamic:

o) accept_language
o) modsecurity3

While I'm here fix the third-party auth_krb5 module build.

Bump PORTREVISION.

Third-party postgres module is dynamic now and remove
the legacy patch.
While I'm here update the PORTSCOUT.

Bump PORTREVISION.

Update njs module from 0.3.9 to 0.4.0.

<ChangeLog>

*) Feature: added js_import directive.

*) Feature: added support for multi-value headers in r.headersOut.

*) Improvement: iteration over r.headersOut with special headers.

*) Improvement: iteration over r.headersOut with duplicates.

*) Change: r.responseBody property handler now returns "undefined"
   instead of throwing an exception if response body is not available.

Add the knob for the quiet startup.

Bump PORTREVISION.

PR:		245830
Submitted by:	marck

Update some third-party modules to their recent versions.

Convert the following third-party modules to dynamic:
o) ajp
o) cache_purge
o) vts
o) websockify

Bump PORTREVISION.

Update nginx from 1.17.10 to 1.18.0.

<ChangeLog>

*) 1.18.x stable branch.

</ChangeLog>

Update nginx from 1.17.9 to 1.17.10.

Keep third-party modules knobs sorted, but DEVEL_KIT must be
earlier cause ARRAYVAR depends on it, so partially revert back
r531124.

<ChangeLog>

*) Feature: the "auth_delay" directive.

</ChangeLog>

Fix the build issue.

A typo was introduced with r531086.

Do not bump PORTREVISION.

Pointy hat:	osa
Eagle eye:	"Herbert J. Skuhra" <herbert@gojira.at>

Add http_degradation module.

While I'm here keep the knobs inside their groups sorted.

Bump PORTREVISION.

Add STREAM_REALIP knob for the ngx_stream_realip module. (*)

Enable STREAM_REALIP knob by default.

Also, create STREAMGRP group for stream-specific modules.

Bump PORTREVISION.

Requested by:	Kirill I. <kerya@kerya.net> (*)

Update nginx from 1.17.8 to 1.17.9.

<ChangeLog>

*) Change: now nginx does not allow several "Host" request header lines.

*) Bugfix: nginx ignored additional "Transfer-Encoding" request header
   lines.

*) Bugfix: socket leak when using HTTP/2.

*) Bugfix: a segmentation fault might occur in a worker process if OCSP
   stapling was used.

*) Bugfix: in the ngx_http_mp4_module.

*) Bugfix: nginx used status code 494 instead of 400 if errors with code
   494 were redirected with the "error_page" directive.

*) Bugfix: socket leak when using subrequests in the njs module and the
   "aio" directive.

</ChangeLog>

Update NGINX JavaScript (aka njs) module from 0.3.8 to 0.3.9.

To avoid a potential conflict between two versions of LuaJIT let's
update mod_security's dependecy list and use lang/luajit-openresty
instead of original lang/luajit.

Bump PORTREVISION.

Partially revert back r524489, the trird-party opentracing module
is not ready yet to be added to the port.

Bump PORTREVISION.

Commit missing patches for r524122.

Eagle eye notice from:	joneum
No cookie for:		osa

Add link-function third-party module, it provides dynamic linking to
your application in a server context and call the function of your
application in a location directive.

Bump PORTREVISION.

Update nginx from 1.17.7 to 1.17.8.
Update third-party njs module from 0.3.7 to 0.3.8.

<ChangeLog with nginx 1.17.8>

*) Feature: variables support in the "grpc_pass" directive.

*) Bugfix: a timeout might occur while handling pipelined requests in an
   SSL connection; the bug had appeared in 1.17.5.

*) Bugfix: in the "debug_points" directive when using HTTP/2.
   Thanks to Daniil Bondarev.

</ChangeLog>

Update the nginx.8 man page location after r523104.
Bump PORTREVISION.

Update third-party modsecurity3 module to 1.0.1.
Bump PORTREVISION.

Update from 1.17.6 to 1.17.7.

<ChangeLog>

*) Bugfix: a segmentation fault might occur on start or during
   reconfiguration if the "rewrite" directive with an empty replacement
   string was used in the configuration.

*) Bugfix: a segmentation fault might occur in a worker process if the
   "break" directive was used with the "alias" directive or with the
   "proxy_pass" directive with a URI.

*) Bugfix: the "Location" response header line might contain garbage if
   the request URI was rewritten to the one containing a null character.

Update third-party modules ip2location and ip2proxy to
their recent versions.

Bump PORTREVISION.

Update two third-party modules to their recent versions:

o) modsecurity3
o) vod

Remove the needless patch for the third-party vod module,
it's been added to the upstream.

Bump PORTREVISION.

The stream module doesn't imply on the http module in terms of
SSL/TLS usage.

Bump PORTREVISION.

Update third-party auth_ldap module to the recent version.

Bump PORTREVISION.

Update portscount.
No functional change.

Update nginx from 1.17.5 to 1.17.6.
Update njs module from 0.3.6 to 0.3.7.

<ChangeLog with nginx 1.17.6>

*) Feature: the $proxy_protocol_server_addr and
   $proxy_protocol_server_port variables.

*) Feature: the "limit_conn_dry_run" directive.

*) Feature: the $limit_req_status and $limit_conn_status variables.

</ChangeLog>

<ChangeLog with njs 0.3.7>

Update the extra patch for the third-party spnego module,
it was missing with r517770.

Bump PORTREVISION.

PR:	242031

Add support for FreeBSD accept filters.

Bump PORTREVISION.

PR:	238739

When nginx compiled with third-party spnego module, a worker process
may crash due to read-after-free operation.  This third-party module
update fix the issue.

Bump PORTREVISION.

PR:	235296

Merge r517734 revision from www/nginx.
Bump PORTREVISION.

PR:	240274

Merge the r517639 for third-party passenger module from the
www/nginx to fix the build. (*)

While I'm here sort pkg-plist.

Bump PORTREVISION.

PR:		241753 (*)

Add USES={gl,gnome,mate,sdl,xorg} missed in the last round

Update third-party modules to their recent versions.

Switch third-party brotli module's github repo back to google
cause eustas repo, the previous one, has been archived by the
owner.

Bump PORTREVISION.

Fix the issue with third-aprty modsecurity2 module, it is not
being built into after selection.
An additional useful file is installed now.

Bump PORTREVISION.

Submitted by:	Felipe Zipitria <felipe.zipitria@owasp.org> (in a private mail)

Update nginx from 1.17.4 to 1.17.5.
Update njs module from 0.3.5 to 0.3.6.
Sync third-party fastdfs module version with www/nginx.

<ChangeLog for nginx 1.17.5>

*) Feature: now nginx uses ioctl(FIONREAD), if available, to avoid
   reading from a fast connection for a long time.

*) Bugfix: incomplete escaped characters at the end of the request URI
   were ignored.

*) Bugfix: "/." and "/.." at the end of the request URI were not
   normalized.

Drop the ipv6 virtual category for w* category as it is not relevant anymore

Update nginx from 1.17.3 to the latest bugfix release 1.17.4.

Move third-party SLICE_AHEAD knob down to other third-party
knobs. (*)

Requested by:	Herbert J. Skuhra <herbert@gojira.at> (*)

<ChangeLog>

*) Change: better detection of incorrect client behavior in HTTP/2.

*) Change: in handling of not fully read client request body when
   returning errors in HTTP/2.

*) Bugfix: the "worker_shutdown_timeout" directive might not work when

Add missing patch in r512184.

Spotted by:	Herbert J. Skuhra <herbert@gojira.at>

Update from 6.0.3 to 6.0.4.

Add the following third-party modules:
o) ip2location
o) ip2proxy

Add third-party slice_ahead feature.

Update third-party passenger module to the latest release 6.0.3.

Switch third-party lua module dependence from lang/luajit (2.0) to
lang/luajit-openresty (2.1).

Bump PORTREVISION.

Update third-party njs module from 0.3.4 to 0.3.5.
Bump PORTREVISION.

<ChangeLog>

Core:
*) Bugfix: fixed module importing using require(). The bug was
   introduced in 0.3.4.

*) Bugfix: fixed [[SetPrototypeOf]].

</ChangeLog>

Convert to UCL & cleanup pkg-message (categories w)

Security update nginx from 1.17.2 to 1.17.3.

<ChangeLog with nginx 1.17.3>

*) Security: when using HTTP/2 a client might cause excessive memory
   consumption and CPU usage (CVE-2019-9511, CVE-2019-9513,
   CVE-2019-9516).

*) Bugfix: "zero size buf" alerts might appear in logs when using
   gzipping; the bug had appeared in 1.17.2.

*) Bugfix: a segmentation fault might occur in a worker process if the
   "resolver" directive was used in SMTP proxy.

</ChangeLog>

Update some third-party modules to their recent revisions.
Update the download protocol from http to https.

Bump PORTREVISION.

PR:	239776

multimedia/ffmpeg: update to 4.2

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n4.2:/Changelog
ABI:		https://abi-laboratory.pro/tracker/timeline/ffmpeg/