Update GNUTLS and NSS options

nettle for gnutls support in curl is always enabled because it is an
unconditional dependency of security/gnutls.

Do not bump PORTREVISION because package-depends-list is unchanged.

Update to 7.60.0

Changes:	https://curl.haxx.se/changes.html
Security:	04fe6c8d-2a34-4009-a81e-e7a7e759b5d2
MFH:		2018Q2

Drop support for expired security/polarssl13

Fix build with LibreSSL 2.7

Obtained
from:	https://github.com/openbsd/ports/blob/master/net/curl/patches/patch-lib_vtls_openssl_c
PR:		226845
Submitted by:	Piotr Kubaj <pkubaj@anongoth.pl>
MFH:		2018Q1

Update to 7.59.0

Changes:	https://curl.haxx.se/changes.html

Update dns/libpsl to 0.20.1

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/rockdaboot/libpsl/blob/master/NEWS
		https://github.com/rockdaboot/libpsl/blob/libpsl-0.20.1/NEWS

Update options dependency

Update dns/libpsl to 0.20.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/rockdaboot/libpsl/blob/master/NEWS

Fix build with CURL_DEBUG enabled

lib/checksrc.pl is run when CURL_DEBUG is enabled.
The build failed due to the long line in patched lib/url.c.

./url.c:593:82: warning: Longer than 79 columns (LONGLINE)
       data->set.no_signal = TRUE; /* different handling of signals and threads
*/
checksrc: 0 errors and 1 warnings
checksrc: 0 errors and 5 warnings suppressed
gmake[3]: *** [Makefile:3935: checksrc] Error 5

MFH:		2018Q1

Fix r460400

- Add DICT, FTP, GOPHER, TELNET and TFTP options to OPTIONS_DEFAULT
- Add HTTP options to OPTIONS_DEFAULT
- Bump PORTREVISION for package change

DICT, FTP, GOPHER, TELNET and TFTP options are enabled by default through
configure but not being added to OPTIONS_DEFAULT in r460440.
HTTP option is enabled by default through HTTP2 option.

Add more options

- Add protocol group
- Convert already-enabled protocols to IMAP, POP3, RTSP and SMTP options
- Add DICT, FTP, GOPHER, HTTP, TELNET and TFP options
- Update CA_BUNDLE_DESC
- Use CA_BUNDLE_CONFIGURE_WITH and OPENSSL_CONFIGURE_WITH
- Merge TLS_SRP check

PR:		223967 (based on)
Submitted by:	brnrd

Fix BROTLI option

Remove LIBSSH option to avoid circular dependency

libssh uses cmake which depends on curl.

Update to 7.58.0

- Add BROTLI and LIBSSH options

Changes:	https://curl.haxx.se/changes.html

Disable brotli support to fix build with old brotli installed

Brotli support will be added as an option after archivers/brotli being updated
to a newer version.

PR:             224072
Reported by:    mi

Update to 7.57.0

Changes:	https://curl.haxx.se/changes.html
		https://curl.haxx.se/docs/security.html
Security:	301a01b7-d50e-11e7-ac58-b499baebfeaf
MFH:		2017Q4

Update to 7.56.1

Changes:	https://curl.haxx.se/changes.html
		https://curl.haxx.se/docs/security.html
Security:	143ec3d6-b7cf-11e7-ac58-b499baebfeaf
MFH:		2017Q4

Update to 7.56.0

Changes:	https://curl.haxx.se/changes.html
Security:	ccace707-a8d8-11e7-ac58-b499baebfeaf
MFH:		2017Q4

Update MASTER_SITES

PR:		221724
Submitted by:	xmj

Change RESOLV from RADIO to SINGLE

cURL 7.55.1 use the threaded resolver (THREADED_RESOLVER) backend if c-ares
(CARES) is not available. That means you must enable either CARES or
THREADED_RESOLVER (default) option.

Reference:	https://github.com/curl/curl/pull/1647
MFH:		2017Q3

Update to 7.55.1

Changes:	https://curl.haxx.se/changes.html
MFH:		2017Q3

Update to 7.55.0

Changes:	https://curl.haxx.se/changes.html
Security:	69cfa386-7cd0-11e7-867f-b499baebfeaf
PR:		221362
Submitted by:	brnrd
MFH:		2017Q3

Update COMMENT and pkg-descr

Update to 7.54.1

Changes:	https://curl.haxx.se/changes.html
Security:	9314058e-5204-11e7-b712-b1a44a034d72
MFH:		2017Q2

- Update WWW

Approved by:	portmgr blanket

Update to 7.54.0

Changes:	https://curl.haxx.se/changes.html
Security:	3e2e9b44-25ce-11e7-a175-939b30e0836d
MFH:		2017Q2

Fix HTTP2 option

PR:		218721
Reported by:	<dewayne@heuristicsystems.com.au>
MFH:		2017Q2

Fix CVE-2017-7407

- Bump PORTREVISION for package change

Obtained from:	https://curl.haxx.se/CVE-2017-7407.patch
		https://github.com/curl/curl/commit/1890d59905414ab84a35892b2e45833654aa5c13
		https://github.com/curl/curl/commit/8e65877870c1fac920b65219adec720df810aab9
Security:	04f29189-1a05-11e7-bc6e-b499baebfeaf
MFH:		2017Q2

Cosmetic change

Update to 7.53.1

Changes:	https://curl.haxx.se/changes.html

Update to 7.53.0

Changes:	https://curl.haxx.se/changes.html
Security:	311e4b1c-f8ee-11e6-9940-b499baebfeaf

- Remove inclusion of bsd.default-versions.mk from ftp/curl/Makefile so
  bsd.default-versions.mk can rely on ARCH being defined.
- In bsd.port.mk move inclusion of bsd.default-versions.mk from the
  pre-makefile section to the options section so the variables can be used
  earlier.  Also put the bit of code sitting between the options section and
  the pre-makefile section into the options section.
- Remove last few cases where ports set WITH_OPENSSL_PORT.  This variable is
  handled in bsd.default-versions.mk and some ports were setting it after
  including bsd.port.options.mk.  After FreeBSD 9 EoL all but a few ports,
  and then only when setting non-default options, work without setting that
  variable.

PR:		215996
Exp-run by:	antoine
Approved by:	portmgr (antoine)

The output of tools like awk, date, sort, tr,... depends on the current
locale set by the user.  Add LANG=C and LC_ALL=C at the beginning of
bsd.port.mk and export them so all commands are executed with the C locale.
LC_ALL=C overrides all other LC_* variables.  LANG is used by setlocale(3)
as default value for LC_* variables, so normally it isn't used when LC_ALL
is set, but there's code out there that looks at LANG directly so it's safer
to set it as well.  The only commands not captured by this are !=
assignments before any inclusion of bsd.port.*mk.

Introduce USE_LOCALE=<locale> that adds LANG=<locale> and LC_ALL=<locale> to
CONFIGURE_ENV and MAKE_ENV so upstream build systems can be executed with a
different locale (e.g. USE_LOCALE=en_US.UTF-8).

PR:		215882
Exp-run by:	antoine
Approved by:	portmgr (antoine)

Fix net-p2p/rtorrent with https trackers

- Bump PORTREVISION for package change

Reference:	https://github.com/rakshasa/rtorrent/issues/538
Obtained
from:	https://github.com/curl/curl/commit/a7b38c9dc98481e4a5fc37e51a8690337c674dfb
MFH:		2017Q1

- Update to 7.52.1

Changes:	https://curl.haxx.se/changes.html
Security:	c40ca16c-4d9f-4d70-8b6c-4d53aeb8ead4
MFH:		2016Q4

- Update to 7.52.0

Changes:	https://curl.haxx.se/changes.html
Security:	42880202-c81c-11e6-a9a5-b499baebfeaf
MFH:		2016Q4

- Remove BUILD_DEPENDS and RUN_DEPENDS:
  - RUN_DEPENDS: BUILD_DEPENDS is sufficient to block unqualified version.
  - BUILD_DEPENDS: it's safe to remove BUILD_DEPENDS after nghttp2->libnghttp2
transition because initial version of libnghttp2 is 1.0.0+.

Pointed out by:	adamw

- Change HTTP2 dependency from www/nghttp2 to www/libnghttp2
- Enable HTTP2 option by default
- Bump PORTREVISION for dependency and package change

- Add net to CATEGORIES

PR:		205269
Suggested by:	<bkazemi@users.sf.net>

- Update to 0.16.1
- Bump PORTREVISION for dependent ports

Changes:	https://github.com/rockdaboot/libpsl/blob/master/NEWS

- Update to 0.16.0
- Bump PORTREVISION for dependent ports

Changes:	https://github.com/rockdaboot/libpsl/blob/master/NEWS

- Cleanup Makefile
  - Remove BUILDING_HIPHOP check: curl-hiphop was removed in r425765
  - Use = instead of += for MAINTAINER, COMMENT, CONFIGURE_ARGS and
CONFIGURE_ENV
  - Remove SLAVEDIRS
  - Adjust line wrapping of DOCS

Remove libcurl.so.7 compatibility link that was added in r374303 to
prevent massive PORTREVISION bumps.  Bump dependent ports that have not
been bumped since.

- Sort PLIST

- Add SMB option

PR:		210472
Submitted by:	Marcin Gryszkalis <mg@fork.pl>

- Fix IDN option
- Sort PLIST
- Bump PORTREVISION for dependency change

MFH:		2016Q4

ftp/curl: Update to 7.51.0

- Update to 7.51.0
- Fixes 11 security vulnerabilities
- Remove docs no longer installed from plist

PR:		214000
MFH:		2016Q4
Security:	765feb7d-a0d1-11e6-a881-b499baebfeaf
Security:	CVE-2016-8615
Security:	CVE-2016-8616
Security:	CVE-2016-8617
Security:	CVE-2016-8618
Security:	CVE-2016-8619
Security:	CVE-2016-8620
Security:	CVE-2016-8621
Security:	CVE-2016-8622
Security:	CVE-2016-8623
Security:	CVE-2016-8624
Security:	CVE-2016-8625

Use USES=pathfix where applicable.

PR:		213195
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D8093

devel/nspr, security/nss: drop version from SONAME

No other downstream appends synthetic library version, and doing so
causes underlinking due to fragile build system (see below). Not to
mention being unable to swap out bundled libs from upstream builds.

  $ cc -lplds4 -L/usr/local/lib
  /usr/lib/crt1.o: In function `_start1':
  crt1_c.c:(.text+0xa6): undefined reference to `main'
  /usr/local/lib/libplds4.so: undefined reference to `pthread_set_name_np'
  /usr/local/lib/libplds4.so: undefined reference to `pthread_create'
  /usr/local/lib/libplds4.so: undefined reference to `pthread_condattr_init'
  /usr/local/lib/libplds4.so: undefined reference to `pthread_setschedparam'
  /usr/local/lib/libplds4.so: undefined reference to `pthread_getschedparam'

PR:		213144
Exp-run by:	antoine

ftp/curl: Update to 7.50.3

- Update installed docs

PR:		212677
MFH:		2016Q3
Security:	CVE-2016-7167

ftp/curl: Remove second redundant ports SSL + base GSSAPI check

If one tries to use the base gssapi with SSL from ports, gssapi.mk
will add an IGNORE entry.

Suggested by:	mat

ftp/curl: Remove redundant ports SSL + base GSSAPI check

If one tries to use the base gssapi with SSL from ports, gssapi.mk
will add an IGNORE entry.

Suggested by:	mat

LibreSSL checks: Check for libressl-devel option too

Approved by:	SSL blanket

ftp/curl: Update to 7.50.1

PR:		211575
MFH:		2016Q3
Security:	CVE-2016-5419
Security:	CVE-2016-5420
Security:	CVE-2016-5421

- Update to 7.49.1

Changes:	http://curl.haxx.se/changes.html

Make it possible to have bsd.default-versions.mk included before any
other bsd.*.mk file.

Restore the way ftp/curl was working before.

With hat:	portmgr
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D6921

Unbreak.

Sponsored by:	Absolight

Fix when PORTSDIR doesn't exist at that point. (Which, I think, doesn't
happen outside of portsnap's infrastructure).

Sponsored by:	Absolight

Fix usage of WITH_OPENSSL_BASE, WITH_OPENSSL_PORT and OPENSSL_PORT.

WITH_OPENSSL_* can't be set after bsd.port.pre.mk.
Fold all other usage into using SSL_DEFAULT == foo

PR:		210149
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	The FreeBSD Foundation, Absolight
Differential Revision:	https://reviews.freebsd.org/D6577

Remove NLS, DOCS, EXAMPLES and IPV6 from OPTIONS_DEFAULT, they are enabled by
default anyway and don't need to be listed

Approved by:	portmgr blanket

- Update to 7.49.0
- Fix shebang

Changes:	http://curl.haxx.se/changes.html

- Update to 0.13.0
- Bump PORTREVISION for dns/libpsl shlib change

Changes:	https://github.com/rockdaboot/libpsl/blob/master/NEWS

Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.

With hat:	portmgr
Sponsored by:	Absolight

- Update security/gnutls to 3.4.10.
- Rename the LIBDANE option DANE because that's the name of the protocol
  supported by libgnutls-dane and gnutls-cli.  Also clarify the option
  description.
- Add an IDN option.
- libgnutls-openssl has been removed in 3.4.  Some ports used this library
  in their LIB_DEPENDS but no port actually required it.
- Some old API functions have been removed.  Ports that used these have been
  updated or patched to use the new API.
- Add a patch to print/cups to prevent overlinking of libgnutls.so.
- Bump PORTREVISION on dependent ports.

net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.

www/hydra: Mark BROKEN.  This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.

PR:		207768
Exp-run by:	antoine
Approved by:	portmgr (antoine)

- Update to 7.48.0

Changes:	http://curl.haxx.se/changes.html

- Fix build with RTMP enabled

PR:		207513
Submitted by:	Alexandr Matveev <timon@timon.net.nz>

- Update to 7.47.1

Changes:	http://curl.haxx.se/changes.html

- Add METALINK option

PR:		205875
Submitted by:	Matthieu Volat <mazhe@alkumuna.eu>

- Remove GSSAPI_*_DESC

Update to 7.47.0

PR:		206756
Submitted by:	zeising
Approved by:	ports-secteam (miwi)
MFH:		2016Q1
Security:	CVE-2016-0755

- Add PSL option

Sponsored by:	PortsCamp Taiwan

- Simplify Makefile:
  - Use USES=localbase unconditionally
  - Use *_CONFIGURE_{ENABLE,WITH}
- Bump PORTREVISION for package change

Differential Revision:	https://reviews.FreeBSD.org/D4757
PR:		205804
Exp-run by:	antoine
Accepted by:	bapt (portmgr)

- Use gmake for zsh completions
- Bump PORTREVISION for package change

- Update to 7.46.0

Changes:	http://curl.haxx.se/changes.html

- Use USES=localbase

- Update to 7.45.0
- Add LICENSE_FILE

Changes:	http://curl.haxx.se/changes.html

Do not provide empty do-test target for perl5-using ports

perl5's do-test: target should only be enabled when USE_PERL5=configure
or USE_PERL5=modbuild* are used, otherwise it'll end up being empty
and will prevent other tests from running.

Remove NO_PERL5_TEST as it isn't really needed after this fix.

Approved by:	mat, sunpoet
Differential Revision:	D3830

- Add NO_PERL5_TEST
- Convert to new test framework
- Convert to new options target helper
- Cosmetic change

- Convert to new options dependency helper

- Update to 7.44.0

Changes:	http://curl.haxx.se/changes.html

- Adjust default GSSAPI option:
  - GSSAPI_NONE if OpenSSL/LibreSSL from ports will be used instead of OpenSSL
from base system
  - GSSAPI_BASE if otherwise
- Bump PORTREVISION for package change

Suggested by:	tijl

- Fix multi handles
- Bump PORTREVISION for package change

PR:		201147
Submitted by:	grembo
Obtained
from:	https://github.com/bagder/curl/commit/903b6e05565bf826b4194447864288642214b094

- Rework OpenSSL/LibreSSL check

Be more explicit about which setting to use.

PR:		200555

Try to improve the wording for the GSSAPI+OpenSSL IGNORE in r390499.

PR:		200555

Prevent building a broken curl when using the openssl port when GSSAPI_BASE set.

Without this curl would link to both /usr/lib/libssl.so and
/usr/local/lib/libssl.so
resulting in a crash at runtime.

Bump revision as current builds are broken at runtime and need to be rebuilt.

PR:		200555
Submitted by:	truckman
Approved by:	maintainer timeout

- Update to 7.43.0
- Update HTTP2 option
- Update DOCS

Changes:	http://curl.haxx.se/changes.html

- Update security/polarssl13 to 1.3.11
- Patch a Makefile so regular make install works
- Replace a patch with MAKE_ENV
- Bump dependent ports

PR:		200816

- Remove trailing space
- Regenerate patch files with makepatch:

- Fix typo

Reported by:	Scott Bennett <bennett@sdf.org>

- Reword GSSAPI_BASE_DESC for explicit Kerberos requirement

- Update to 7.42.1

Changes:	http://curl.haxx.se/changes.html

- Fix OPTIONS_DEFAULT

Notified by:	antoine

- Fix OPTIONS_DEFAULT: remove SSL
- Add WOLFSSL option
- Cosmetic change

- Fix build without NTLM

Reference:	https://github.com/bagder/curl/commit/fd9d3a1ef1f7b1cb5812d04bad07818efc6f3b3a

- Update to 7.42.0

Changes:	http://curl.haxx.se/changes.html

Specify library version when depending on libpolarssl and switch ports to
PolarSSL 1.3 when they fail to build with 1.2.

- Disable SSLv2_client_method

- Add IGNORE for LibreSSL

PR:		198397 (based on)
Submitted by:	Bernard Spil <spil.oss@gmail.com>

- Use USES=gssapi
- Adjust options:
  - Change GSSAPI from radio to single
  - Rename HEIMDAL_PORT to GSSAPI_HEIMDAL
  - Rename KRB5_PORT to GSSAPI_MIT
  - Add GSSAPI_NONE