security/cryptopp-modern: Add TOOLS option
TOOLS option will install cryptest toguether with TestData and TestVectors,
allowing the installed binary to run cryptest v and cryptest tv as post-install
checks.
PR: 297278
java/openjdk{8,11}: Remove USE_LDCONFIG from ports
OpenJDK loads the JVM and other JDK libraries explicitly from the
correct directories, so there's no need for adding them to ldconfig.
PR: 297282
Reviewed by: jrm
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D58841
Mk/bsd.port.mk: fix install-missing-packages without a tty
install-missing-packages runs xargs with -o, which reopens stdin from
/dev/tty so that pkg can prompt interactively. In automated or batch
runs there is no controlling terminal, so xargs fails with "can't open
/dev/tty: Device not configured".
Make the -o flag conditional on BATCH: keep the interactive pkg prompt
outside BATCH, and use pkg install -yA (auto-confirm) inside BATCH.
PR: 267416
Reported by: patmaddox at FreeBSD.org
Mk/Scripts/do-depends.sh: summarize dependency errors
Accumulate and number dependency resolution errors in do-depends.sh
instead of only setting a flag, so that a clear summary of all errors
is printed at the end of the run rather than being buried in the
output of the dependency traversal. (#257069)
Add a record_error() helper that increments an error counter, prints
each error to stderr, and accumulates the messages for the final
summary. Use printf "%b" with a literal format string to avoid
interpreting user-controlled data (origins, patterns) as format
specifiers.
PR: 257069
Submitted by: sobomax at FreeBSD.org
security/openvpn: bugfix update to 2.7.6
This is not security-relevant on FreeBSD, one security fix affects
Windows, the other one only affects builds against mbedTLS (which is not
currently supported by the port), and a third one (second bullet point)
turned out to not be exploitable.
Note that the --dev option defaults to "tun" (if not specified).
Note that --ping and --keepalive settings are now capped at 24 h.
TCP-based configurations now always enable TCP_NODELAY.
Changelog: https://github.com/OpenVPN/openvpn/releases/tag/v2.7.6
MFH: 2026Q3
Pull Request: https://github.com/freebsd/freebsd-ports/pull/584
(cherry picked from commit bbddd98141d38561ab0c715c737ed7dbd87688d6)
