Update third-party auth_ldap module to the recent version.

Bump PORTREVISION.

Update portscount.
No functional change.

Update nginx from 1.17.5 to 1.17.6.
Update njs module from 0.3.6 to 0.3.7.

<ChangeLog with nginx 1.17.6>

*) Feature: the $proxy_protocol_server_addr and
   $proxy_protocol_server_port variables.

*) Feature: the "limit_conn_dry_run" directive.

*) Feature: the $limit_req_status and $limit_conn_status variables.

</ChangeLog>

<ChangeLog with njs 0.3.7>

Update the extra patch for the third-party spnego module,
it was missing with r517770.

Bump PORTREVISION.

PR:	242031

Add support for FreeBSD accept filters.

Bump PORTREVISION.

PR:	238739

When nginx compiled with third-party spnego module, a worker process
may crash due to read-after-free operation.  This third-party module
update fix the issue.

Bump PORTREVISION.

PR:	235296

Merge r517734 revision from www/nginx.
Bump PORTREVISION.

PR:	240274

Merge the r517639 for third-party passenger module from the
www/nginx to fix the build. (*)

While I'm here sort pkg-plist.

Bump PORTREVISION.

PR:		241753 (*)

Add USES={gl,gnome,mate,sdl,xorg} missed in the last round

Update third-party modules to their recent versions.

Switch third-party brotli module's github repo back to google
cause eustas repo, the previous one, has been archived by the
owner.

Bump PORTREVISION.

Fix the issue with third-aprty modsecurity2 module, it is not
being built into after selection.
An additional useful file is installed now.

Bump PORTREVISION.

Submitted by:	Felipe Zipitria <felipe.zipitria@owasp.org> (in a private mail)

Update nginx from 1.17.4 to 1.17.5.
Update njs module from 0.3.5 to 0.3.6.
Sync third-party fastdfs module version with www/nginx.

<ChangeLog for nginx 1.17.5>

*) Feature: now nginx uses ioctl(FIONREAD), if available, to avoid
   reading from a fast connection for a long time.

*) Bugfix: incomplete escaped characters at the end of the request URI
   were ignored.

*) Bugfix: "/." and "/.." at the end of the request URI were not
   normalized.

Drop the ipv6 virtual category for w* category as it is not relevant anymore

Update nginx from 1.17.3 to the latest bugfix release 1.17.4.

Move third-party SLICE_AHEAD knob down to other third-party
knobs. (*)

Requested by:	Herbert J. Skuhra <herbert@gojira.at> (*)

<ChangeLog>

*) Change: better detection of incorrect client behavior in HTTP/2.

*) Change: in handling of not fully read client request body when
   returning errors in HTTP/2.

*) Bugfix: the "worker_shutdown_timeout" directive might not work when

Add missing patch in r512184.

Spotted by:	Herbert J. Skuhra <herbert@gojira.at>

Update from 6.0.3 to 6.0.4.

Add the following third-party modules:
o) ip2location
o) ip2proxy

Add third-party slice_ahead feature.

Update third-party passenger module to the latest release 6.0.3.

Switch third-party lua module dependence from lang/luajit (2.0) to
lang/luajit-openresty (2.1).

Bump PORTREVISION.

Update third-party njs module from 0.3.4 to 0.3.5.
Bump PORTREVISION.

<ChangeLog>

Core:
*) Bugfix: fixed module importing using require(). The bug was
   introduced in 0.3.4.

*) Bugfix: fixed [[SetPrototypeOf]].

</ChangeLog>

Convert to UCL & cleanup pkg-message (categories w)

Security update nginx from 1.17.2 to 1.17.3.

<ChangeLog with nginx 1.17.3>

*) Security: when using HTTP/2 a client might cause excessive memory
   consumption and CPU usage (CVE-2019-9511, CVE-2019-9513,
   CVE-2019-9516).

*) Bugfix: "zero size buf" alerts might appear in logs when using
   gzipping; the bug had appeared in 1.17.2.

*) Bugfix: a segmentation fault might occur in a worker process if the
   "resolver" directive was used in SMTP proxy.

</ChangeLog>

Update some third-party modules to their recent revisions.
Update the download protocol from http to https.

Bump PORTREVISION.

PR:	239776

multimedia/ffmpeg: update to 4.2

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n4.2:/Changelog
ABI:		https://abi-laboratory.pro/tracker/timeline/ffmpeg/

Update nginx from 1.17.1 to 1.17.2.
Update third-party nchan module from 1.2.3 to 1.2.6.

<ChangeLog with nginx 1.17.2>

*) Change: minimum supported zlib version is 1.2.0.4.
   Thanks to Ilya Leoshkevich.

*) Change: the $r->internal_redirect() embedded perl method now expects
   escaped URIs.

*) Feature: it is now possible to switch to a named location using the
   $r->internal_redirect() embedded perl method.

*) Bugfix: in error handling in embedded perl.

Install njs command line utility as a part of the third-party
njs module.

Bump PORTREVISION.

Update nginx from 1.17.0 to 1.17.1.
Update njs module from 0.3.2 to 0.3.3.

<ChangeLog with nginx 1.17.1>

*) Feature: the "limit_req_dry_run" directive.

*) Feature: when using the "hash" directive inside the "upstream" block
   an empty hash key now triggers round-robin balancing.
   Thanks to Niklas Keller.

*) Bugfix: a segmentation fault might occur in a worker process if
   caching was used along with the "image_filter" directive, and errors
   with code 415 were redirected with the "error_page" directive; the
   bug had appeared in 1.11.10.

Update nginx from 1.16.0 to new mainline version 1.17.0.
Update njs module from 0.3.1 to 0.3.2.

<ChangeLog with nginx 1.17.0>

*) Feature: variables support in the "limit_rate" and "limit_rate_after"
   directives.

*) Feature: variables support in the "proxy_upload_rate" and
   "proxy_download_rate" directives in the stream module.

*) Change: minimum supported OpenSSL version is 0.9.8.

*) Change: now the postpone filter is always built.

Update from 1.15.12 to 1.16.0.

<ChangeLog>

*) 1.16.x stable branch.

</ChangeLog>

Update from 1.15.11 to 1.15.12.
Update third-party njs module from 0.3.0 to 0.3.1.

<ChangeLogs>

Changes with nginx 1.15.12                             16 Apr 2019

*) Bugfix: a segmentation fault might occur in a worker process if
   variables were used in the "ssl_certificate" or "ssl_certificate_key"
   directives and OCSP stapling was enabled.

Changes with njs 0.3.1                                 16 Apr 2019

Core:

Update from 1.15.10 to 1.15.11.

<ChangeLogs>

*) Bugfix: in the "ssl_stapling_file" directive on Windows.

</ChangeLogs>

Update from 1.15.9 to 1.15.10.
Update third-party njs module from 0.2.8 to 0.3.0.

<ChangeLogs>

http://nginx.org/en/CHANGES
http://nginx.org/en/docs/njs/changes.html#njs0.3.0

</ChangeLogs>

www/nginx-devel: DAV modules requires xslt

adding module in /www/nginx-devel/work/nginx-dav-ext-module-3.0.0
 + ngx_http_dav_ext_module was configured
checking for PCRE library ... found
checking for PCRE JIT support ... found
checking for OpenSSL library ... found
checking for zlib library ... found
checking for libxslt ... not found
checking for libxslt in /usr/local/ ... not found
checking for libxslt in /usr/pkg/ ...  not found
checking for libxslt in /opt/local/ ... not found
./configure: error: the HTTP XSLT module requires the libxml2/libxslt
libraries. You can either do not enable the module or install the libraries.

Update third-party lua module to its recent version 0.10.14.

Bump PORTREVISION.

Fix PORTSCOUT.
Update third-party dav-ext module to its recent version 3.0.0.

Bump PORTREVISION.

Update from 1.15.8 to 1.15.9.

<ChangeLog>

*) Feature: variables support in the "ssl_certificate" and
   "ssl_certificate_key" directives.

*) Feature: the "poll" method is now available on Windows when using
   Windows Vista or newer.

*) Bugfix: if the "select" method was used on Windows and an error
   occurred while establishing a backend connection, nginx waited for
   the connection establishment timeout to expire.

*) Bugfix: the "proxy_upload_rate" and "proxy_download_rate" directives
   in the stream module worked incorrectly when proxying UDP datagrams.

</ChangeLog>

Update passenger and its third-party modules for www/nginx and
www/nginx-devel from 6.0.1 to 6.0.2.

Bump PORTREVISION for www/nginx and www/nginx-devel.

Update third-party njs module to its recent version 0.2.8.

Bump PORTREVISION.

Add the license file.

Remove GeoIP-related options. Where possible, replace GeoIP 1 defaults
with GeoIP 2.

Also, as suggested by zi, add an UPDATING note about this.

Update third-party tarantool module to its recent version.
Bump RORTREVISION.

Update passenger and its third-party modules for www/nginx and
www/nginx-devel from 6.0.0 to 6.0.1.

While I'm here:
o) remove a needless whitespace and tabs;
o) add a patch to disable anonymouse telemetry for passenger by default.

Update third-party modsecurity module from 2.9.2 to 2.9.3.
Bump PORTREVISION.

Add the extra patch to disable anonymous telemetry for the
third-party passenger module.

Update from 1.15.7 to 1.15.8.
Update clojure, modsecurity and njs third-party modules to their recent
versions.
Disable anonymous telemetry reporting in third-party passenger module
by default.

<ChangeLog>

*) Feature: the $upstream_bytes_sent variable.
   Thanks to Piotr Sikora.

*) Feature: new directives in vim syntax highlighting scripts.
   Thanks to Gena Makhomed.

*) Bugfix: in the "proxy_cache_background_update" directive.

Upgrade passenger and its third-party modules for www/nginx and
www/nginx-devel from 5.3.7 to 6.0.0.

<ChangeLog>

* Introduces support for *all* programming languages. Yes that's
  right... Java, Elixir, Go -- Passenger now supports them all!
  This effort is called "generic language support".
* Bumps the preferred Nginx version to 1.15.7.
* Introduces anonymous usage telemetry, which helps us improve
  Passenger.  Please read the docs on what data is collected and
  how to disable this.
* [Nginx] Introduces a new option "passenger_request_buffering on|off",
  to allow disabling request body buffering. This is only supported in
  Nginx >= 1.15.3. Closes GH-2121.
* Updated various library versions used in precompiled binaries (used
  for e.g. gem installs):
  - OpenSSL: 1.0.2q (was: 1.0.2p)
  - libcurl: 7.62.0 (was: 7.61.1)
  - Ruby: 2.3.8 (was: 2.3.7)

</ChangeLog>

Update passenger and it's modules for www/nginx and
www/nginx-devel ports to 5.3.7.

Update from 1.15.6 to 1.15.7.
Update clojure and njs third-party modules to their recent versions.

MFH:		2018Q4

<ChangeLog>

*) Feature: the "proxy_requests" directive in the stream module.

*) Feature: the "delay" parameter of the "limit_req" directive.
   Thanks to Vladislav Shabanov and Peter Shchuchkin.

*) Bugfix: memory leak on errors during reconfiguration.

*) Bugfix: in the $upstream_response_time, $upstream_connect_time, and
   $upstream_header_time variables.

*) Bugfix: a segmentation fault might occur in a worker process if the
   ngx_http_mp4_module was used on 32-bit platforms.

</ChangeLog>

Rename www/mod_security3 to security/modsecurity3.  It is not an Apache
module, and the upstream name is ModSecurity in a single word.

PR:		233351
Submitted by:	Marie Helene Kvello-Aune, Marius Halden (maintainer)
Differential Revision:	https://reviews.freebsd.org/D18353

Change the distribution for the third-party upstream_fair module,
it contains fixes for openssl 1.1.
Remove the needless patch.

Bump PORTREVISION.

Update ImageMagick to 6.9.10.14 [1]

* Add PKGNAMESUFFIX and rename the directory. This was done to show
  that IM6 is not the "main" version. But still fully supported by upstream.
* Convert a number of options to optionhelpers.
* Add option for ISO/IEC 23008-12:2017 HEIF suport
* Add comment to pkg-descr explaining IM6's "legacy" tag.
* Add comment to the patch-config_policy.xml file why it still needed.

Please note that IM7 is not a drop in replacement due to library API and
command arguments changes. And as a result ports need to decide for themself
which version to use.

Chase these changes in all the ports that using IM6.

PR:		225102 (based on, only the version update) [1]
Submitted by:	Pascal Christen <pascal.christen@hostpoint.ch>

Security update from 1.15.5 to 1.15.6.

Temporary disable third-party upstream_fair module, it should
be updated to build with the modern version of the nginx.

While I'm here fix some whitespaces.

MFH:		2018Q4
Security:	84ca56be-e1de-11e8-bcfd-00e04c1ea73d

<ChangeLog>

*) Security: when using HTTP/2 a client might cause excessive memory
   consumption (CVE-2018-16843) and CPU usage (CVE-2018-16844).

multimedia/ffmpeg: update to 4.1

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n4.1:/Changelog
ABI:		https://abi-laboratory.pro/tracker/timeline/ffmpeg/

Remove compatibility code for FreeBSD < 11.2 from all ports.

Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by:	rene
Reviewed by:	bapt, jbeich
Differential Revision:	https://reviews.freebsd.org/D17724

Upgrade third-party modules to their recent versions.
Fix modsecurity's URL.

Bump PORTREVISION.

Fix the build issue with STREAM_SSL_PREREAD knob.
Bump PORTREVISION.

PR:	232361

Upgrade third-party nchan (aka push) module from 1.1.14
to its recent stable version 1.2.1.

Bump PORTREVISION.

Upgrade third-party vts module from 0.1.15 to 0.1.18.
Bump PORTREVISION.

Upgrade from 1.15.4 to 1.15.5.

<ChangeLog>

*) Bugfix: a segmentation fault might occur in a worker process when
   using OpenSSL 1.1.0h or newer; the bug had appeared in 1.15.4.

*) Bugfix: of minor potential bugs.

</ChangeLog>

Upgrade from 1.15.3 to 1.15.4.

<ChangeLog>

*) Feature: now the "ssl_early_data" directive can be used with OpenSSL.

*) Bugfix: in the ngx_http_uwsgi_module.
   Thanks to Chris Caputo.

*) Bugfix: connections with some gRPC backends might not be cached when
   using the "keepalive" directive.

*) Bugfix: a socket leak might occur when using the "error_page"
   directive to redirect early request processing errors, notably errors
   with code 400.

Upgrade www/passenger and its third-party modules for
www/nginx and www/nginx-devel from 5.3.4 to 5.3.5.
Bump PORTREVISIONs where it's necessary.

Upgrade from 0.2.3 to 0.2.4.

<ChangeLog>

nginx modules:

*) Change: stream module handlers are refactored.

   New methods and properties:
   s.on(), s.off(), s.allow(), s.done(), s.decline(),
   s.deny().

   Removed properties of Stream object:
   s.OK, s.ABORT, s.AGAIN, s.DECLINED, s.ERROR (replaced
   with s.allow(), s.done([code]), s.deny()).

Merge r479404 from www/nginx.

<Commitlog>

Some modules depend on other being there before.

For example, devel_kit needs to be there before a few other, so this
fixes, and allow for future fixes of this kind of problem:

configuring additional dynamic modules
adding module in
/wrkdirs/usr/ports/www/nginx-full/work/array-var-nginx-module-0.05
error: ngx_devel_kit is required to build ngx_array_var; please put it before
ngx_array_var.

PR:		230864
Submitted by:	mat
exp-runs by:	antoine

</Commitlog>

Upgrade from 1.15.2 to 1.15.3.

<ChangeLog>

*) Feature: now TLSv1.3 can be used with BoringSSL.

*) Feature: the "ssl_early_data" directive, currently available with
   BoringSSL.

*) Feature: the "keepalive_timeout" and "keepalive_requests" directives
   in the "upstream" block.

*) Bugfix: the ngx_http_dav_module did not truncate destination file
   when copying a file over an existing one with the COPY method.

Upgrade passenger and its third-party modules for www/nginx and
www/nginx-devel from 5.3.3 to 5.3.4.

PR:	229392

<ChangeLog>

* Fixes a crash during startup on FreeBSD 11.2 and recent OpenBSD versions
  due to C++11 compatibility issues in the code. Closes GH-2097.
* Updates Boost to version 1.67.0.
* [Apache] Fixes the handling of HTTP requests with chunked bodies in
  combination with `PassengerBufferUploads off`. Closes GH-2102.

</ChangeLog>

Upgrade third-party njs module to post 0.2.3 aka a930e69 to
fix a couple of issues.
Bump PORTREVISION.

Upgrade third-party njs module to 950db73 aka 0.2.3.
Bump PORTREVISION.

<ChangeLog>

nginx modules:

*) Bugfix: making a subrequest from a Reply object caused
    a segmentation fault.

*) Bugfix: getting the parent property of the main Request
    object caused a segmentation fault.

Core:

Upgrade from 1.15.1 to 1.15.2.

<ChangeLog>

*) Feature: the $ssl_preread_protocol variable in the
   ngx_stream_ssl_preread_module.

*) Feature: now when using the "reset_timedout_connection" directive
   nginx will reset connections being closed with the 444 code.

*) Change: a logging level of the "http request", "https proxy request",
   "unsupported protocol", and "version too low" SSL errors has been
   lowered from "crit" to "info".

*) Bugfix: DNS requests were not resent if initial sending of a request

Upgrade third-party naxsi module from 0.55.3 to 0.56.

Bump PORTREVISION.

Change location for third-party sticky module from bitbucket.org
to a fork on GH cause last one contains additional fixes.
Remove needless patch.

Bump PORTREVISION.

Upgrade from 1.15.0 to 1.15.1.

<ChangeLog>

*) Feature: the "random" directive inside the "upstream" block.

*) Feature: improved performance when using the "hash" and "ip_hash"
   directives with the "zone" directive.

*) Feature: the "reuseport" parameter of the "listen" directive now uses
   SO_REUSEPORT_LB on FreeBSD 12.

*) Bugfix: HTTP/2 server push did not work if SSL was terminated by a
   proxy server in front of nginx.

*) Bugfix: the "tcp_nopush" directive was always used on backend
   connections.

*) Bugfix: sending a disk-buffered request body to a gRPC backend might
   fail.

</ChangeLog>

Upgrade passenger and its third-party modules for www/nginx
and www/nginx-devel from 5.3.2 to 5.3.3.

Update third-party brotli module to its recent revision to
fix the socket leaks issue, please see next link for details:
https://github.com/eustas/ngx_brotli/issues/11

Bump PORTREVISION.

Upgrade passenger and its third-party modules for
www/nginx and www/nginx-devel from 5.3.1 to 5.3.2.

Upgrade third-party njs module to b4a58c4 (aka 0.2.2).

Upgrade from stable 1.14.0 release to recent release
from mainline - 1.15.0.

<ChangeLog>

*) Change: the "ssl" directive is deprecated; the "ssl" parameter of the
   "listen" directive should be used instead.

*) Change: now nginx detects missing SSL certificates during
   configuration testing when using the "ssl" parameter of the "listen"
   directive.

*) Feature: now the stream module can handle multiple incoming UDP
   datagrams from a client within a single session.

Upgrade to recent bugfix release 5.3.1.

Upgrade third-party redis module to recent 0.3.9 version.

Bump PORTREVISION.

<ChangeLog>

*) Feature: redis "AUTH" command support.
   Original idea from https://github.com/Yongke/ngx_http_redis-0.3.7
   Thanks to Wang Yongke.

</ChangeLog>

Upgrade third-party passenger module from 5.2.3 to 5.3.0.

While I'm here fix the issue with GSSAPIINCDIR variable, it's
been introduced as GSSAPINCDIR without a correct substitution
during the third-party auth_krb5 module's patch time.

Bump PORTREVISION.

Speed-up the port's build by enable multiple jobs build.

While I'm here update third-party vod module to recent 1.23 version.

Bump PORTREVISION.

PR:	228127

multimedia/ffmpeg: update to 4.0

- FFSERVER support was removed upstream
- libressl now uses libtls backend instead of patching openssl one
- Clang i386 no longer uses 16-byte aligned stack

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n4.0:/Changelog
ABI:		https://abi-laboratory.pro/tracker/timeline/ffmpeg/
PR:		227726
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D15175

Cleanup Makefile.extmod file.
Upgrade third-party modules to their recent versions.

Bump PORTREVISION.

Merge from www/nginx and adopt next revisions:
	468201, 468240.

Update third-party modules to their recent versions.
Enable libxml usage for third-party vod module.

Bump PORTREVISION.

Remove the needless patch.

Merge from www/nginx and adopt next revisions:
	465814, 465851, 465931, 468031.

Bump PORTREVISION.

Upgrade from 1.13.12 to 1.14.0.

<ChangeLog>

*) 1.14.x stable branch.

</ChangeLog>

Upgrade from 1.13.11 to 1.13.12.

While I'm here add back modsecurity3 distinfo records.

<ChangeLog>

*) Bugfix: connections with gRPC backends might be closed unexpectedly
   when returning a large response.

</ChangeLog>

Upgrade from 1.13.10 to 1.13.11.

While I'm here upgrade next third-party modules to their
recent version:
o) passenger;
o) njs.

<ChangeLog>

*) Feature: the "proxy_protocol" parameter of the "listen" directive now
   supports the PROXY protocol version 2.

*) Bugfix: nginx could not be built with OpenSSL 1.1.1 statically on
   Linux.

*) Bugfix: in the "http_404", "http_500", etc. parameters of the
   "proxy_next_upstream" directive.

</ChangeLog>

Add modsecurity v3 distinfo entries.

PR:	226848

Upgrade from 1.13.9 to 1.13.10.
Upgrade third-party modules to their recent version.

<ChangeLog>

*) Feature: the "set" parameter of the "include" SSI directive now
   allows writing arbitrary responses to a variable; the
   "subrequest_output_buffer_size" directive defines maximum response
   size.

*) Feature: now nginx uses clock_gettime(CLOCK_MONOTONIC) if available,
   to avoid timeouts being incorrectly triggered on system time changes.

*) Feature: the "escape=none" parameter of the "log_format" directive.
   Thanks to Johannes Baiter and Calin Don.

Migrate USE_APACHE to USES= apache (category www)

 - Following migration of Mk/bsd.apache.mk to Mk/Uses/apache.mk

With hat:	apache

Upgrade from 1.13.8 to 1.13.9.
Upgrade third-party modules to their recent version.
Remove needless patches.

<ChangeLog>

*) Feature: HTTP/2 server push support; the "http2_push" and
   "http2_push_preload" directives.

*) Bugfix: "header already sent" alerts might appear in logs when using
   cache; the bug had appeared in 1.9.13.

*) Bugfix: a segmentation fault might occur in a worker process if the
   "ssl_verify_client" directive was used and no SSL certificate was
   specified in a virtual server.

*) Bugfix: in the ngx_http_v2_module.

*) Bugfix: in the ngx_http_dav_module.

</ChangeLog>

Upgrade from 1.13.7 to 1.13.8.

While I'm here remove needless patch.

<ChangeLog>

*) Feature: now nginx automatically preserves the CAP_NET_RAW capability
   in worker processes when using the "transparent" parameter of the
   "proxy_bind", "fastcgi_bind", "memcached_bind", "scgi_bind", and
   "uwsgi_bind" directives.

*) Feature: improved CPU cache line size detection.
   Thanks to Debayan Ghosh.

*) Feature: new directives in vim syntax highlighting scripts.

Use @postexec keyword instead of deprecated @exec one in pkg-plist.
Bump PORTREVISION.

While I'm here upgrade third-party fancyindex module to the latest
version - 0.4.2.

Add third-party vts (virtual host traffic status) module.

Suggested by:	"Eugene M. Zheganin" <emz@norma.perm.ru>

Upgrade next third-party modules to their recent versions:
o) njs;
o) echo;
o) lua;
o) nchan;
o) redis2;
o) srcache;
o) tarantul;
o) vod.

Remove needless patches cause most of them have been added to their
upstreams.

Switch to fork that uses new brotli ABI.

Thanks to:	Evgenii Kliuchnikov <eustas@google.com>

PR:		224000

While I'm here add CONFLICTS_INSTALL and PORTSCOUNT.
Bump PORTREVISION.

Update from 5.1.11 to 5.1.12:

o) www/rubygem-passenger;
o) third-party passenger modules for www/nginx and www/nginx-devel.

Upgrade from 1.13.6 to 1.13.7.

<ChangeLog>

*) Bugfix: in the $upstream_status variable.

*) Bugfix: a segmentation fault might occur in a worker process if a
   backend returned a "101 Switching Protocols" response to a
   subrequest.

*) Bugfix: a segmentation fault occurred in a master process if a shared
   memory zone size was changed during a reconfiguration and the
   reconfiguration failed.

*) Bugfix: in the ngx_http_fastcgi_module.

multimedia/ffmpeg: update to 3.4

Notable changes:
- i386/amd64 now depend on NASM per
https://git.ffmpeg.org/gitweb/ffmpeg.git/commitdiff/4f9297ac3b39
- NETCDF is now MYSOFA but the dependency doesn't exist in ports yet
- SCHROEDINGER is gone per
https://git.ffmpeg.org/gitweb/ffmpeg.git/commitdiff/220b24c7c9
- DRM, LIBRSVG2, LIBXML2 are new options
- ABI isn't completely compatible: some structs have changed

Minor cleanup:
- Don't pass --disable-{in,out}dev when it's already blocked by disabled
dependency
- Drop redundant "Enable" from option descriptions
- Switch CDIO_DESC to use Mk/bsd.options.desc.mk

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n3.4:/Changelog
ABI:		https://abi-laboratory.pro/tracker/timeline/ffmpeg/
PR:		223057
Exp-run by:	antoine

Security (*) upgrade from 5.1.8 to 5.1.11:

o) www/rubygem-passenger;
o) third-party passenger module for www/nginx-devel;

MFH:	2017Q4

See
details:	https://blog.phusion.nl/2017/10/13/passenger-security-advisory-5-1-11/

Remove WANT_GNOME and HAVE_GNOME.

Approved by:	bapt kwm
Sponsored by:	Absolight
Differential Revision:	  https://reviews.freebsd.org/D12643