Commit graph

216594 commits

Author SHA1 Message Date
joerg
4e8ed292d2 Define initialisers in the headers like most cases already did,
otherwise they might not get emitted correctly. Deal with the freetype
header move.
2014-05-15 21:16:16 +00:00
szptvlfn
09e3eb2e77 Import transformers-0.4.1.0 as devel/hs-transformers,
packaged for wip by pho.

Haskell 98 part of a monad transformer library, inspired by the paper
"Functional Programming with Overloading and Higher-Order
Polymorphism", by Mark P Jones, in Advanced School of Functional
Programming, 1995
(http://web.cecs.pdx.edu/~mpj/pubs/springschool.html).

This part contains the monad transformer class, the concrete monad
transformers, operations and liftings. It can be used on its own in
Haskell 98 code, or with the monad classes in the monads-fd or
monads-tf packages, which automatically lift operations introduced by
monad transformers through other transformers.
2014-05-15 21:15:38 +00:00
christos
8707a29ee0 apply note creation bug fix from the go mercurial head, and adjust our code
so that it works in both cases.
2014-05-15 20:00:47 +00:00
christos
618cddf8e8 fix elf note computation 2014-05-15 19:35:49 +00:00
wiz
d142fd022d Fix fetch. 2014-05-15 18:39:28 +00:00
hiramatsu
4b52782571 Add LICENSE. 2014-05-15 15:56:51 +00:00
jnemeth
f2c046d65b add and enable dnsbl-milter 2014-05-15 15:52:07 +00:00
kleink
bf73a3764f Updated www/py-flask-security to 1.7.2.
Updated www/py-flask-script to 2.0.3.
2014-05-15 14:53:05 +00:00
kleink
4a924b8afb Update py-flask-script to 2.0.3.
No changelog provided.

* bug fixes, documentation improvements
* better sub-manager option handling

Incompatible changes:
* command.handle() is now simply command()
* short help is '-?'. '-h' is used for --host too often.
* Server options '-d' and '-r' are no longer toggles for debugging/reloading.
  Instead, '-d' forces debugging on and '-D' forces it off,
  no matter what the default said.
* The command.prompt_* compatibility methods have beeen removed.
  (They were already heavily deprecated.)
2014-05-15 14:52:00 +00:00
adam
28bb94d01f Revbump after updating graphics/giflib 2014-05-15 14:41:45 +00:00
kleink
966a3d1306 Update py-flask-security to 1.7.2.
Version 1.7.2
-------------

- Fixed a bug regarding the `password_changed` signal.
2014-05-15 14:41:15 +00:00
wiz
06fa9a74be Updated wm/notion to 3.2014010900nb1 2014-05-15 14:19:57 +00:00
wiz
e05576f387 Restrict to lua-5.1.
(Perhaps (re?)compiling the .lc files would work, but it's not done by
the normal build, and then there are errors about binaries for other
lua versions.)

Bump PKGREVISION.
2014-05-15 14:19:48 +00:00
adam
450594f71b Updated graphics/openjpeg to 2.1.0; graphics/giflib to 5.1.0 2014-05-15 14:18:08 +00:00
adam
3eeeaf3ca3 Version 5.1.0
=============

Changes to the API require a library major-version bump.

Code Fixes
----------
* A small change to the API: DGifClose() and EGifClose() now take a
  pointer-to-int second argument (like the corresponding openers)
  where a diagnostic code will be deposited when they return
  GIF_ERROR.  This replaces the old behavior in which the GifFile
  structure was left unfreed so the Error member in it could be filled
  and remain available.  The change was was required because it's
  not always possible to free the struct afterwards. Case in point is
  a C# wrapper for giflib (or any language/environment where you can't
  just free objects allocated in a foreign shared library.)

* Minor fix for SF bug 56; BitsPerPixel may be left as uninitialized
  value when reading (truncated) gif.

* Applied SF patch 17: Use a fallback on Windows where mkstemp is not
  available.

* Applied SF patch 15: Code hardening, preventing spurious
  defective-image messages.

Retirements
-----------
* Removed gif2raw from utils. Its blithe assumption that the EGA16
  palette is a reliable default is now about 20 years obsolete. Format
  conversion is better done with convert(1) from the ImageMagick suite,
  anyway.
2014-05-15 14:16:11 +00:00
adam
c4edf11e88 Changes 2.1.0:
New Features:
    * Digital Cinema profiles have been fixed and updated
        * New option to disable MCT if needed
    * extended RAW support: it is now possible to input raw images
          with subsampled color components (422, 420, etc)
    * New way to deal with profiles

API/ABI modifications: (see abi_compat_report in dev-utils/scripts)
    * Removed deprecated functions
            - opj_stream_create_default_file_stream(FILE*,...)
        - opj_stream_create_file_stream(FILE*,...)
        - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data)
        * Added
        - opj_stream_create_default_file_stream(char*,...)
        - opj_stream_create_file_stream(char*,...)
        - opj_stream_destroy(opj_stream_t*)
        - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data,
            ... opj_stream_free_user_data_fn p_function)
        - JPEG 2000 profiles and Part-2 extensions defined through '#define'
    * Changed
        - 'alpha' field added to 'opj_image_comp' structure
        - 'OPJ_CLRSPC_EYCC' added to enum COLOR_SPACE
        - 'OPJ_CLRSPC_CMYK' added to enum COLOR_SPACE
        - 'OPJ_CODEC_JPP' and 'OPJ_CODEC_JPX' added to CODEC_FORMAT
          (not yet used in use)
        - 'max_cs_size' and 'rsiz' fields added to opj_cparameters_t

Misc:
    * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
          and will soon become official reference software at the
          JPEG committee.
        * Huge amount of bug fixes. See CHANGES for details.
2014-05-15 14:14:54 +00:00
wiz
2a95e5c60a Fix CVE-2014-2856 using upstream patch.
Bump PKGREVISION.
2014-05-15 12:51:58 +00:00
wiz
a15a377e93 Updated lang/python34 to 3.4.0nb1 2014-05-15 12:44:04 +00:00
wiz
c5bda3ec92 Add fix for CVE-2014-2667. Bump PKGREVISION. 2014-05-15 12:43:52 +00:00
wiz
ec9a802425 Updated lang/python33 to 3.3.5nb2 2014-05-15 12:34:31 +00:00
wiz
8416e6796a Add fix for CVE-2014-2667.
Bump PKGREVISION.
2014-05-15 12:33:10 +00:00
wiz
e31474c46a Updated emulators/qemu to 2.0.0nb2 2014-05-15 12:28:25 +00:00
wiz
014679da64 Add a patch based on upstream git fixing five different CVEs in one file.
Congratulations.

Bump PKGREVISION.
2014-05-15 12:28:13 +00:00
pho
63a34fe83e PR pkg/48740 - Fix problems on Darwin
Makefile:
  See ${WRKSRC}/libgcc/config/t-slibgcc-darwin: It uses strip(1) to
  create a stub library, not just to remove symbols, so we must not
  let strip(1) be a no-op regardless of ${INSTALL_UNSTRIPPED} or the
  build fails for missing files.

patches/patch-ac:
  Remove the whitespace between $(LINKER_RPATH_FLAG) and the path.
  Otherwise the flag may be misinterpreted by linker (e.g. Apple's ld)

patches/patch-libgcc_config_t-slibgcc-darwin:
  If we don't install libgcc_s.10.[45].dylib, our gcc links binaries
  with *both* /usr/lib/libgcc_s.1.dylib and
  ${GCC_PREFIX}/lib/libgcc_s.1.dylib, which is certainly a bad thing.
2014-05-15 12:04:41 +00:00
obache
63ea8dc845 Updated emulators/suse131_alsa to 13.1nb1 2014-05-15 12:01:12 +00:00
obache
e4ab297071 Apply openSUSE Recommended Update: openSUSE-RU-2014:0617-1
alsa-oss: bugfix update

Description:

   The ALSA OSS plugin was updated to fix bugs:
   - Fix for dmix with unaligned sample rate:

   - Revert patch 0001-Fix-path-to-libaoss.so.patch, as this
   causes regressions on multi-arch (bnc#874331)

Bump PKGREVISION.
2014-05-15 12:00:59 +00:00
martin
e3b1bfc01e Remove sh change from patch - noticed by Jonathan Perkin 2014-05-15 12:00:04 +00:00
wiz
1f4e847b8a Remove circular dependency.
Perhaps this shouldn't be a dependency in p5-libwww instead.
2014-05-15 11:59:21 +00:00
obache
1ae93f4bfb Updated emulators/suse131_libxml2 to 13.1nb1 2014-05-15 11:27:39 +00:00
obache
c68c5211d0 Apply openSUSE Security Update: openSUSE-SU-2014:0645-1
libxml2

Description:

   - fix for CVE-2014-0191 (bnc#876652)
   * libxml2: external parameter entity loaded when entity substitution is
   disabled
   * added libxml2-CVE-2014-0191.patch

Bump PKGREVISION.
2014-05-15 11:27:22 +00:00
fhajny
48e8c41140 Updated devel/apache-maven to 3.2.1 2014-05-15 11:17:44 +00:00
fhajny
b469c47d52 Update apache-maven to 3.2.1.
Release notes for 3.2.1

Bug
[MNG-5075] - MavenProject.getParent throws undocumented ISE
[MNG-5389] - AbstractMavenLifecycleParticipant need a afterSessionEnd
[MNG-5467] - intermittent "ProtocolException: The server failed to respond
 with a valid HTTP response"
[MNG-5479] - ExecutionEvent.Type.SessionEnded omited when runtime
 exception thrown
[MNG-5494] - Add a license file that corresponds to each GAV
 in the distribution
[MNG-5528] - Help text confuses people
[MNG-5550] - MojoExecution source is never set to LIFECYCLE
[MNG-5553] - ${map(some.key)} is not properly interpolated
[MNG-5557] - Limit the reactor to the projects that are specified
 using --projects
[MNG-5559] - upgrade to last wagon 2.6
[MNG-5572] - Warn for building plugins with extensions in a reactor

Improvement
[MNG-3526] - Small change to artifact version parsing.
[MNG-4099] - Password encryption CLI switches should prompt for password
 if missing
[MNG-5176] - Print build times in an ISO 8601-style manner
[MNG-5530] - mojo execution guice scope
[MNG-5549] - Provide before/after callbacks for project and mojo execution
[MNG-5574] - Write error/warning messages from mvn shell and batch scripts
 to stderr
[MNG-5575] - Separate build strategies into their own implementations
[MNG-5576] - Allow continuous delivery friendly versions
[MNG-5578] - Make the ReactorReader pluggable in the core
[MNG-5581] - Provide a way to customize lifecycle mapping logic
[MNG-5582] - Continue to track all the projects in the reactor even
 if the set is constrained by --projects

New Feature
[MNG-2315] - Add option to exclude all transitive dependencies for
 a particular one
[MNG-3832] - Allow wildcards in dependency exclusions
[MNG-5230] - Command line option to exclude modules from reactor


Release notes for 3.1.1

Bug
[MNG-5459] - failure to resolve pom artifact from snapshotVersion
 in maven-metadata.xml
[MNG-5495] - API incompatibility causes Swagger Maven Plugin (and others)
 to fail under Maven 3.1.0
[MNG-5499] - maven-aether-provider leaks Sisu Plexus and ObjectWeb classes
 onto the classpath when they are not required
[MNG-5500] - help for --legacy-local-repository option explains
 _maven.repositories instead of _remote.repositories
[MNG-5503] - Maven 3.1.0 fails to resolve artifacts produced by reactor build
[MNG-5509] - org.apache.maven.repository.legacy.DefaultWagonManager should
 set User-Agent


Release notes for 3.1.0

Major Changes
- The use of JSR330 in the core for extensions and in Maven plugins.
  You can read more about it in the Maven and JSR330 document.
- The use of SLF4J in the core for logging. You can read more about it
  in the Maven and SLF4J document.
- The switch in the core from Sonatype Aether to Eclipse Aether.

Known Incompatibilities with Maven 3.0.x
- The significant change in Eclipse Aether with respect to API changes
 and package relocation will likely cause issues with plugins that directly depend on Aether.

Bug
[MNG-3131] - Error message is misleading if a missing plugin parameter is
 of a type like List
[MNG-5016] - A mirror's layout setting should default to 'default' since
 thats' the only layout supported lay in maven 3
[MNG-5206] - plexus container never disposed
[MNG-5208] - Parallel (-T option) multi module build fires wrong
 "project failed event"
[MNG-5209] - MavenProject.getTestClasspathElements can return null elements
[MNG-5212] - DefaultPluginDescriptorCache does not retain pluginDescriptor
 dependencies
[MNG-5214] - Dependency resolution substitutes g🅰️v:jar for
 j🅰️v:something-else when something-else isn't in the reactor
[MNG-5233] - ArtifactMetadataRetrievalException from
 org.apache.maven.artifact.metadata is not anymore binary compatible.
[MNG-5258] - localRepository in settings.xml does not handle ~ as home.dir
[MNG-5261] - upgrade wagon version to 2.3 to fix issues with redirect
[MNG-5270] - README.bootstrap.txt says "Ant 1.6.5 or later" BUT 1.8 or
 later is needed
[MNG-5280] - Inconsistent order of repositories and pluginRepositories
 from profiles in settings (regression Maven 3)
[MNG-5289] - -Dmaven.repo.local not honored
[MNG-5312] - MavenProject.getParent intolerably slow when import scope
 used heavily
[MNG-5313] - Unnecessary DefaultModelBuilder.build overload
[MNG-5314] - DefaultModelValidator misuses String.matches
[MNG-5336] - Descriptor Reference for settings.xml is incorrect
[MNG-5387] - Add ability to replace an artifact in mid-build
[MNG-5390] - mvn -rf (no argument) results in NPE
[MNG-5395] - logger name for plugins should not be DefaultMavenPluginManager
[MNG-5396] - logger name for execution events should not be MavenCli
[MNG-5398] - scriptSourceDirectory in superpom is not prefixed
 with /usr/home/cmsslave/slave15/maven-site-staging/build/trunk/
[MNG-5403] - tar.gz release artifacts have wrong permissions on directories
[MNG-5418] - Can't activate a profile by checking for the presence of
 a file in $myProperty
[MNG-5430] - use wagon 2.4
[MNG-5444] - ModelSource API is not sufficient to resolve project hierachies
[MNG-5445] - Missing PathTranslator @Requirement in
 org.apache.maven.project.interpolation.StringSearchModelInterpolator
[MNG-5456] - Maven skips modules and reports success if parallel build
 encounters java.lang.Error
[MNG-5477] - "malformed POM" warning issued when no version
 in reporting section

Improvement
[MNG-4505] - use slf4j to control various logging frameworks
[MNG-5181] - New resolution from local repository is very confusing
[MNG-5239] - Maven integration developers would like to be able to override
 the maven logging appender.
[MNG-5245] - upgrade default plugins versions
[MNG-5338] - Accept a directory with -f/--file
[MNG-5350] - improve @threadSafe error message: tell which goal
[MNG-5399] - Upgrade version of maven-release-plugin in superpom to 2.3.2
[MNG-5400] - Upgrade version of maven-dependency-plugin in superpom to 2.5
[MNG-5402] - Better build number for git
[MNG-5480] - document in POM descriptor reference how urls are interpolated
 from parent
[MNG-5482] - Catch NoClassDefFoundError org/sonatype/aether

New Feature
[MNG-519] - Timestamps on messages
[MNG-5306] - for IDE embedding have ways of collecting model problems
 without failing the process
[MNG-5343] - Allow the use of JSR330 annotation in Maven extensions
 and plugins
[MNG-5344] - Allow the SLF4J loggers to be @Injected
[MNG-5354] - Integrate Eclipse Aether 0.9.0.M2
[MNG-5380] - Cannot preserve whitespace in Maven plugin configuration
[MNG-5381] - Restore MavenSession.getRepositoryCache()
[MNG-5382] - Add an IT for @Inject used in plugins
[MNG-5386] - Dispose of ClassRealms after invocation to prevent
 out of Permgen errors
[MNG-5388] - Restore embedded integration tests
[MNG-5391] - Update the default WAR plugin version to avoid version 2.3
[MNG-5393] - Look at Sonar's use of SLF4J and Logback
[MNG-5397] - Use SLF4J for logging
[MNG-5407] - Change MavenITmng1830ShowVersionTest to account for SHA1
 as version

Task
[MNG-5279] - add CLI options to documentation
[MNG-5365] - Replace Aether's deprecated ConfigurationProperties
 with ConfigUtils
[MNG-5372] - remove classes that were added during Maven 3 alpha and beta
 but were deprecated before 3.0 final release
[MNG-5373] - Document the usage and benefits of JSR330
[MNG-5374] - Fix transfer listener after the JSR330 merge
[MNG-5375] - Document use of SLF4J
[MNG-5376] - Account for changes between the Apple and Oracle JDKs on OSX
[MNG-5453] - Update Maven 3 build to use Eclipse/Sisu

Wish
[MNG-5370] - separate artifact-handlers configuration from plugin bindings
 to default lifecycle
[MNG-5461] - rename _maven.repositories tracking file to _remote.repositories
2014-05-15 11:17:29 +00:00
martin
dbf3f0daa6 Updated multimedia/libvpx to 1.3.0nb1 2014-05-15 11:15:24 +00:00
martin
33554f4b51 sparc cpus better do not try to use "fast" unaligned access. 2014-05-15 11:15:10 +00:00
adam
28c1bd2808 Changes 1.4.0:
- use memory (instead of temporary files) during optimization,
   support for reading input from stdin (and sending output to stdout),
   report also libjpeg version when --version option used,
   new option --strip-none to preserve "all" markers,
   other minor fixes & cleanup
2014-05-15 10:53:11 +00:00
wiz
8e9d6636f0 Updated www/p5-LWP-Protocol-https to 6.06nb1 2014-05-15 10:17:52 +00:00
wiz
b32d17c7fc Fix for CVE-2014-3230, from upstream pull request at
https://github.com/libwww-perl/lwp-protocol-https/pull/14

Bump PKGREVISION.
2014-05-15 10:17:38 +00:00
wiz
a19b620c5a Updated www/p5-LWP-Protocol-https to 6.06 2014-05-15 10:13:25 +00:00
wiz
eb31abcb2c Update to 6.06, add missing dependency on p5-libwww:
2014-04-18 LWP-Protocol-https 6.06

Mike Schilli (3):
      Merge pull request #12 from drieux/subjectAltName
      Merge pull request #9 from chorny/master
      Updated libwww requirement to 6.06 to fix failing t/proxy.t test cases.

Gisle Aas (2):
      Getopt::Long isn't actually used
      Merge pull request #7 from noxxi/master

Alexandr Ciornii (1):
      better diagnostics in case of failures in apache.t

Karen Etheridge (1):
      Merge pull request #8 from cpansprout/patch-1

Steffen Ullrich (1):
      correct behavior for https_proxy, this goes together with change to
      libwww-perl cb80c2ddb7, new method _upgrade_sock in LWP::Protocol::https

cpansprout (1):
      Typo fix: envirionment =~ s/io/o/

drieux (1):
      support for subjectAltName
2014-05-15 10:13:15 +00:00
wiz
f48ccb27fe Updated security/p5-IO-Socket-SSL to 1.985 2014-05-15 10:01:55 +00:00
wiz
dd9153b6b9 Update to 1.985:
1.985 2014/05/15
- make OCSP callback return 1 even if it was called on the server side
  because of bad setup of the socket. Otherwise we get an endless calling
  of the OCSP callback.
- consider an OCSP response which is not yet or no longer valid a soft error
  instead of an hard error
- fix skip in t/external/ocsp.t in case fingerprint does not match
- RT#95633 call EVP_PKEY_free not EVP_KEY_free in
  IO::Socket::SSL::Utils::KEY_free. Thanks to paul[AT]city-fan[DOT]org
- util/analyze.pl - with --show-chain check if chain with SNI is different
  from chain w/o SNI.
1.984 2014/05/10
- added OCSP support:
  - needs Net::SSLeay >=1.59
  - for usage see documentation of IO::Socket::SSL (examples and anything with
    OCSP in the name)
- new tool util/analyze-ssl.pl which is intended to help in debugging of SSL
  problems and to get information about capabilities of server. Works also
  as en example of how to use various features (like OCSP, SNI..)
- fix peer_certificates (returns leaf certificate only once on client side)
- added timeout for stop_SSL (either with Timeout or with the default
  timeout for IO::Socket)
- fix IO::Socket::SSL::Utils mapping between ASN1_TIME and time_t when local
  time is not GMT. Use Net::SSLeay::ASN1_TIME_timet if available.
- fix t/external/usable_ca.t for system with junk in CA files
1.983 2014/05/03
- fix public suffix handling: ajax.googleapis.com should be ok even if googleapis.com
  is in public suffix list (e.g. check one level less)
  #95317, thanks to purification[AT]ukr[DOT]net
- usable_ca.t - update fingerprints after heartbleed attack
- usable_ca.t - make sure we have usable CA for tested hosts in CA store
1.982 2014/04/24
- fix for using subroutine as argument to set_args_filter_hack
1.981 2014/04/08
- #95432 fix ecdhe Test for openssl1.0.1d, thanks to  paul[AT]city-fan[DOT]org
- fix detection of openssl1.0.1d (detected 1.0.1e instead)
- new function can_ecdh in IO::Socket::SSL
1.980 2014/04/08
- fixed incorrect calculation of certificate fingerprint in get_fingerprint*
  and comparison in SSL_fingerprint. Thanks to
  david[DT]palmer[AT]gradwell[DOT]com for reporting.
- disable elliptic curve support for openssl 1.0.1d on 64bit because of
  openssl rt#2975
1.979 2014/04/06
- hostname checking:
  - configuration of 'leftmost' is renamed to 'full_label', but the old
    version is kept for compatibility reasons.
  - documentation of predefined schemes fixed to match reality
1.978 2014/04/04
- RT#94424 again, fix test on older openssl version with no SNI support
1.977 2014/04/04
- fix publicsuffix for IDNA, more tests with various IDNA libs
  RT#94424. Thanks to paul[AT]city-fan[DOT]org
- reuse result of IDN lib detection from PublicSuffix.pm in SSL.pm
- add more checks to external/usable_ca.t. Now it is enough that at least
  one of the hosts verifies against the builtin CA store
- add openssl and Net::SSleay version to diagnostics in load test
1.976 2014/04/03
- added public prefix checking to verification of wildcard certificates,
  e.g. accept *.foo.com but not *.co.uk.
  See documentation of SSL_verifycn_publicsuffix and
  IO::Socket::SSL::PublicSuffix
  Thanks to noloader for pointing out the problem.
1.975 2014/04/02
- BEHAVIOR CHANGE: work around TEA misfeature on OS X builtin openssl, e.g.
  guarantee that only the explicitly given CA or the openssl default CA will
  be used. This means that certificates inside the OS X keyring will no
  longer be used, because there is no way to control the use by openssl
  (e.g. certificate pinning etc)
- make external tests run by default to make sure default CA works on all
  platforms, it skips automatically on network problems like timeouts or ssl
  interception, can also use http(s)_proxy environment variables
1.974 2014/04/02
- new function peer_certificates to get the whole certificate chain, needs
  Net::SSLeay>=1.58
- extended IO::Socket::Utils::CERT_asHash to provide way more information,
  like issuer information, cert and pubkey digests, all extensions, CRL
  distributions points and OCSP uri
1.973 2014/03/25
- with SSL_ca certificate handles can now be used additionally to
  SSL_ca_file and SSL_ca_path
- do not complain longer if SSL_ca_file and SSL_ca_path are both given,
  instead add both as options to the CA store
- Shortcut 'issuer' to give both issuer_cert and issuer_key in CERT_create.
1.972 2014/03/23
- make sure t/external/usable_ca.t works also with older openssl without
  support for SNI. RT#94117. Thanks to paul[AT]city-fan[DOT]org
1.971 2014/03/22
- try to use SSL_hostname for hostname verification if no SSL_verifycn_name
  is given. This way hostname for SNI and verification can be specified in
  one step.
- new test program example/simulate_proxy.pl
1.970 2014/03/19
- fix rt#93987 by making sure sub default_ca does use a local $_ and not a
  version of an outer scope which might be read-only.  Thanks to gshank
1.969 2014/03/13
- fix set_defaults to match documentation regarding short names
- new function set_args_filter_hack to make it possible to override bad SSL
  settings from other code at the last moment.
- determine default_ca on module load (and not on first use in each thread)
- don't try default hostname verification if verify_mode 0
- fix hostname verification when reusing context
1.968 2014/03/13
- BEHAVIOR CHANGE: removed implicit defaults of certs/server-{cert,key}.pem
  for SSL_{cert,key}_file and ca/,certs/my-ca.pem for SSL_ca_file.
  These defaults were depreceated since 1.951 (2013/7/3).
- Usable CA verification path on Windows etc:
  Do not use Net::SSLeay::CTX_set_default_verify_paths any longer to set
  system/build dependended default verification path, because there was no
  way to retrieve these default values and check if they contained usable
  CA. Instead re-implement the same algorithm and export the results with
  public function default_ca() and make it possible to overwrite it.
  Also check for usable verification path during build.
  If no usable path are detected require Mozilla::CA at build and try to
  use it at runtime.
2014-05-15 10:01:43 +00:00
wiz
1a73812aca Updated security/p5-Net-SSLeay to 1.61 2014-05-15 10:00:27 +00:00
wiz
c9f1929379 Update to 1.61 and set LICENSE.
1.61 2014-05-12
     Changes calloc to Newx and free to Safefree, otherwise there might be
     problems because calloc is done from a different memory pool than free (depends
     on the build options for perl, but seen on Windows). Patch from Steffen
     Ullrich. Thanks.

1.60 2014-05-10
     Fixed a typo in an error message. Patch from gregor herrmann. Thanks.
     Fixed a problem with building with openssl that does not support
     OCSP. Also fixed some newly introduced warnings
     if compiled with -Wall. Patch from Steffen Ullrich. Thanks.
     fix build-failure on most Debian architectures:
     SSLeay.xs: In function 'XS_Net__SSLeay_OCSP_response_results':
     SSLeay.xs:5602:3: error: format not a string literal and no format
     arguments. Patch from  gregor herrmann.

1.59 2014-05-10
     Fixed local/30_error.t, so that tests do not fail if diagnostics are
     enabled.
     Fixed error messages about undefined strings used with length or
     split. Reported and patched by Peter Heuchert.
     Improvements to configuration of OPTIMIZE flags, to prevent overriding
     of perls expected optimization flags. Caution: HPUX aCC optimize options are special.
     SSL_peek() now returns openssl error code as second item when called in
     array context, same as SSL_read. Patch from Andreas Mohr.
     Fixed some warnings.
     Added support for tlsv1.1 tlsv1.2 via $Net::SSLeay::ssl_version. Patch
     from Andreas Mohr.
     Improve examples in 'Using other perl modules based on
     Net::SSLeay'. Patched by Andreas Mohr.
     Added support for OCSP. Patched by Steffen Ullrich. Thanks!
     Added missing t/external/ocsp.t
2014-05-15 10:00:17 +00:00
wiz
cb806de263 Set LICENSE. 2014-05-15 09:59:32 +00:00
wiz
0a3fb5512c Add openssl license and allow it by default, since it's FSF approved:
http://www.gnu.org/licenses/license-list.en.html#OpenSSL
2014-05-15 09:59:09 +00:00
marino
cc5f3c3d4b lang/gcc-aux: Save work on OpenBSD - work suspended
gcc-aux builds on OpenBSD, but the default posix thread handling for Ada
tasking no longer works.  All tasks get stuck in a "Thread Sleep" sleep
state.  The gcc4.8.2-based egcc in OpenBSD ports supports Ada and passes
all tests.  There is no difference in the configuration between that and
gcc-aux.  To fix, it probably requires tasking support unique to OpenBSD
and that's out of scope for me at the moment, especially considering the
lack of a suitable development machine.

As such, I'm suspending my work on OpenBSD.  This commit captures some
minor bug fixes.  The addition of "--enable-checking" configuration switch
should be the default so there's no need bump gcc-aux again.
2014-05-15 09:50:44 +00:00
wiz
a5e4376eb9 Updated www/p5-libwww to 6.06 2014-05-15 09:41:32 +00:00
wiz
6fb0e9170e Update to 6.06:
2014-04-16  Release 6.06

Ville Skyttä (3):
      Merge pull request #44 from dsteinbrunner/master
      Spelling fixes.
      Merge pull request #55 from oalders/master

Karen Etheridge (2):
      Merge pull request #38 from mbeijen/typo-sting
      Merge pull request #43 from dsteinbrunner/master

David Steinbrunner (2):
      Spelling corrections

Olaf Alders (1):
      Typo fixes.

Steffen Ullrich (1):
      correct behavior for https_proxy,
      e.g. don't send plain https:// requests to proxy, but instead establish
      CONNECT tunnel and then send requests inside tunnel.
      This change does together with a change in LWP::Protocol::https.
      The change supports LWP::Protocol::https with the default
      IO::Socket::SSL backend, but also with Net::SSL. Also:
      - proxy authorization is supported (http://user:pass@host:port as proxy
        URL, Net::SSL still needs special HTTPS_PROXY_* environemt variables,
        as before)
      - CONNECT request does not need to be the first request inside the
        tunnel (not with Net::SSL)
      - conn_cache is read and written inside request(), instead of writing in
        request() and reading in _new_socket(). If a https tunnel is
        established the cache_key no longer depends only on proxy host,port
        but also on the tunnel endpoint
      - CONNECT is a proxy request and must always use Proxy-Authorization,
        not Authorization header

turugina (1):
      fix: auth-header of Digest auth did not conform to
      RFC 2617 when WWW-Authenticate has 'qop' parameter.

Gisle Aas (1):
      SSL libs might trigger ENOTTY on read

Michiel Beijen (1):
      Small typo.
2014-05-15 09:41:22 +00:00
wiz
d1e6903195 + phpmyadmin-4.2.1. 2014-05-15 09:32:29 +00:00
wiz
f7258902c2 Updated net/libnice to 0.1.7 2014-05-15 09:19:08 +00:00