[ 12:04 Matthias Andree (mandree)  ]

• bb6ec079c50dc6f45700dd5897b35f66a19ee51c GIDs
• bb6ec079c50dc6f45700dd5897b35f66a19ee51c UIDs
• bb6ec079c50dc6f45700dd5897b35f66a19ee51c security/openvpn/Makefile
• bb6ec079c50dc6f45700dd5897b35f66a19ee51c security/openvpn/files/patch-doc_man-sections_generic-options.rst
• bb6ec079c50dc6f45700dd5897b35f66a19ee51c security/openvpn/files/patch-doc_openvpn.8
• bb6ec079c50dc6f45700dd5897b35f66a19ee51c security/openvpn/files/patch-doc_openvpn.8.html
• bb6ec079c50dc6f45700dd5897b35f66a19ee51c security/openvpn/files/pkg-message.in

security/openvpn: create and use dedicated openvpn user

PR:		259384

[ 12:16 mat  ]

• 508909 science/afni/files/pkg-message.in
• 508909 science/cdf/files/pkg-message.in
• 508909 science/dlpoly-classic/pkg-message
• 508909 science/fvcom/pkg-message
• 508909 science/gamess-us/files/pkg-message.in
• 508909 science/libsvm/files/pkg-message.in
• 508909 science/py-DendroPy/pkg-message
• 508909 science/py-gpaw/pkg-message
• 508909 science/tinker/files/pkg-message.in
• 508909 security/acme.sh/files/pkg-message.in

Convert to UCL & cleanup pkg-message (categories s)

[ 21:09 mandree  ]

• 468306 security/openvpn/Makefile
• 468306 security/openvpn/distinfo
• 468306 security/openvpn/files/pkg-message.in

Update to new upstream bugfix release 2.4.6.

While here, warn and sleep for 10 s when building against LibreSSL.

Remove some cruft.

Change summary:
<https://github.com/OpenVPN/openvpn/blob/release/2.4/Changes.rst#version-246>

Changelog:
<https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24#OpenVPN2.4.6>

Reported by:	portscout

[ 23:08 mandree  ]

• 385432 security/openvpn/Makefile
• 385432 security/openvpn/files/150322-Reload-OpenSSL-engines-after-forking.patch
• 385432 security/openvpn/files/EF1.patch
• 385432 security/openvpn/files/EF2.patch
• 385432 security/openvpn/files/EF3.patch
• 385432 security/openvpn/files/openvpn-client.in
• 385432 security/openvpn/files/patch-sample__sample-config-files__loopback-client
• 385432 security/openvpn/files/patch-sample__sample-config-files__loopback-server
• 385432 security/openvpn/files/patch-tests__t_cltsrv.sh
• 385432 security/openvpn/files/pkg-message.in

+ Update patch set for crypto engine fix [1].
  Change option name so it is presented anew, default disabled.

+ Add openvpn-client wrapper script and up/down scripts to trigger
  resolvconf, with minor edits. [2]

+ Set proper PLUGIN_LIBDIR so that plugins in the default directory can
  be found with relative paths.

+ Compile shipped plugins with -fPIC.

PR:		195004 [1]
PR:		199529 [2]
Submitted by:	yuri@rawbw.com [2]
Obtained from:	https://community.openvpn.net/openvpn/ticket/480#comment:21

[ 06:14 dougb  ]

• 1.36 audio/aureal-kmod/Makefile
• 1.2 audio/aureal-kmod/files/pkg-message.in
• 1.34 java/jboss3/Makefile
• 1.47 java/jboss4/Makefile
• 1.24 mail/assp/Makefile
• 1.32 mail/dk-milter/Makefile
• 1.30 net/cvsup-mirror/Makefile
• 1.2 net/cvsup-mirror/files/update.sh.in
• 1.84 net/freeradius2/Makefile
• 1.2 net/freeradius2/files/pkg-message.in

RC_SUBR_SUFFIX has not been needed for a long time now, all supported
versions of FreeBSD now use /etc/rc.subr and rc.d scripts without .sh
appended to the script name.

[ 16:28 mandree  ]

• 1.2067 MOVED
• 1.880 UPDATING
• 1.51 security/openvpn-devel/Makefile
• 1.34 security/openvpn-devel/distinfo
• 1.9 security/openvpn-devel/files/openvpn.sh.in
• 1.2 security/openvpn-devel/files/patch-selftest-ports
• 1.6 security/openvpn-devel/files/pkg-message.in
• 1.2 security/openvpn-devel/files/pkg-req.in
• 1.5 security/openvpn-devel/pkg-descr
• 1.14 security/openvpn-devel/pkg-plist

Move security/openvpn to security/openvpn20 (after previous repocopy).
Update security/openvpn20 to 2.0.9, revising pkg-message.

Move security/openvpn-devel to security/openvpn and
update security/openvpn to 2.1.1.

Remove security/openvpn-devel, adding a MOVED entry.

Update security/Makefile to remove openvpn-devel and add openvpn20 to
SUBDIRS.

Add a UPDATING entry for this shuffle.  Currently without upgrade
instructions since neither portupgrade nor portmaster are up to the
task (because of the CONFLICTS).

Approved by:  garga@ (mentor)

[ 09:56 itetcu  ]

• 1.26 security/openvpn/Makefile
• 1.3 security/openvpn/files/pkg-message.in
• 1.1 security/openvpn/files/pkg-req.in
• 1.8 security/openvpn/pkg-plist

1 - build and install lib/openvpn-down-root.so plugin (see --plugin option in
    the man page) and README.openvpn-down-root
2 - match rc.d filename as printed post install in pkg-message to actual file
    name on newer systems (which use openvpn rather than openvpn.sh)
Reported by:    Jean-Baptiste Quenot (Bcc'd)
The maintainer wishes to thank Jean-Baptiste for his report and patience.
3 - add a pkg-req script to prevent installation of 6.1 packages on older
    machines, which is a frequent source of "rc.d script doesn't work"
    complaints.

Added file(s):
- files/pkg-req.in

PR:             ports/100917
Submitted by:   Matthias Andree (maintainer)

[ 15:05 garga  ]

• 1.23 security/openvpn/Makefile
• 1.14 security/openvpn/distinfo
• 1.2 security/openvpn/files/patch-tests-for-jail
• 1.2 security/openvpn/files/pkg-message.in
• 1.3 security/openvpn/pkg-descr

- CATEGORY CHANGE: add "net" secondary category
- fix jail build on FreeBSD 4 (no security.jail.jailed oid in sysctl)
- catch jail IP misconfiguration and print clear error message
- add SHA256 checksum
- revise pkg-message and pkg-descr

PR:             ports/88785
Submitted by:   maintainer

[ 18:48 garga  ]

• 1.15 security/openvpn/Makefile
• 1.10 security/openvpn/distinfo
• 1.1 security/openvpn/files/openvpn.sh.in
• 1.2 security/openvpn/files/openvpn.sh.sample
• 1.1 security/openvpn/files/pkg-message.in
• 1.6 security/openvpn/pkg-message
• 1.5 security/openvpn/pkg-plist

- Security update to version 2.0.1, fixing four denial of service bugs,
  CAN-2005-2531, CAN-2005-2532, CAN-2005-2533, CAN-2005-2534
- Drop old init script and add a modern rcNG script in its place,
  requested by Matthias Grimm and Dirk Gouders (although the script below is
  one I, Matthias Andree, wrote). It can automatically load tun/tap drivers.
- move pkg-message to files/pkg-message.in, revise it, list it in SUB_FILES
  to expand ${PREFIX}.
- print pkg-message after installation from port
- switch to official "make check" as smoke-test, rather than wiring our own.
- prefer LZO2 in most situations, as OpenVPN will pick up LZO2 rather than
  LZO1 if both are installed.

PR:             ports/85109
Submitted by:   maintainer
Approved by:    portmgr (krion)