summaryrefslogtreecommitdiff
path: root/net-misc
diff options
context:
space:
mode:
Diffstat (limited to 'net-misc')
-rw-r--r--net-misc/Manifest.gzbin53151 -> 53158 bytes
-rw-r--r--net-misc/bird/Manifest10
-rw-r--r--net-misc/bird/bird-2.0.10.ebuild6
-rw-r--r--net-misc/bird/bird-2.0.11.ebuild6
-rw-r--r--net-misc/bird/bird-2.0.12-r1.ebuild6
-rw-r--r--net-misc/bird/bird-2.0.7.ebuild6
-rw-r--r--net-misc/bird/bird-2.16.1.ebuild4
-rw-r--r--net-misc/curl/Manifest10
-rw-r--r--net-misc/curl/curl-8.13.0.ebuild (renamed from net-misc/curl/curl-8.13.0_rc3.ebuild)210
-rw-r--r--net-misc/curl/curl-9999.ebuild210
-rw-r--r--net-misc/curl/metadata.xml3
-rw-r--r--net-misc/getdate/Manifest2
-rw-r--r--net-misc/getdate/getdate-1.2-r2.ebuild6
-rw-r--r--net-misc/gsasl/Manifest1
-rw-r--r--net-misc/gsasl/gsasl-2.2.2-r1.ebuild104
15 files changed, 388 insertions, 196 deletions
diff --git a/net-misc/Manifest.gz b/net-misc/Manifest.gz
index 7c1f9532b36a..b4072d2922a4 100644
--- a/net-misc/Manifest.gz
+++ b/net-misc/Manifest.gz
Binary files differ
diff --git a/net-misc/bird/Manifest b/net-misc/bird/Manifest
index a089d7243ae1..74e46bf23a35 100644
--- a/net-misc/bird/Manifest
+++ b/net-misc/bird/Manifest
@@ -8,9 +8,9 @@ DIST bird-2.0.11.tar.gz 1301502 BLAKE2B 0761bd50b3b0338ecf2a6325f61f90db9f92324e
DIST bird-2.0.12.tar.gz 1307984 BLAKE2B ca00574bb8e508255afb90e0d65f4e1763880699cff9877731d072efc48944b9f9ac77b35bb7ffd7b780e8e8b1c2eacdc38ee273353817c53723e7972fb5f0d6 SHA512 b5e1235210e500511955c009456710dd12d6ea747825806a6d35a9de5f2f984d9a45fa541d45dd5e353f87f4d61bf1d4612cb6058769e905e4ef6b414ab4212f
DIST bird-2.0.7.tar.gz 1993395 BLAKE2B ceb88d811d254e57e089ef4b4e1e4f34fd96d4622d9f5563cc8694323c060e99d6cdfccfeb5d8c885b9431dc71e96d5cc04e4344901a7c7d899f4249e7503720 SHA512 48ca63be923285dd282e80d7e2b240256953fd7ad4f6eaa5dcba2648f3f148be20198bc8c6e7e888aac1588ecb005a4f4c03e979853e76ea6f8680643a874b35
DIST bird-2.16.1.tar.gz 1433936 BLAKE2B 80698f6e009662ec944831b869538fb3d74e405f94841cfdd372143b0b6ee6db85e8f136e607574a188e8b1794f2da8b59a9fb2629600bae4ddb1c6e5505a464 SHA512 7eccc9ada56f0f151237e7dacaea968526058dbadc36257adfc2f307876237b7267239cb5f3ee6a01832834dc81f9f54000c1550ae200b69f97da8e748f6af70
-EBUILD bird-2.0.10.ebuild 1371 BLAKE2B 2267a95824417c8faca016e403fb6eb5d48c81f4e1c4106143a441bc07d7846411d0ea118b3c4f200229fddb396cd396dba5a07cefba2e43fd20fe8928c2682c SHA512 49032c99ebe89ef43ded09cc541ce934017db6ca84c600f7d3068596974b410ddb1ebe60da14ed0b034b0f146b8bb192f84a4b094c3d0c0790fd808e94d7db0b
-EBUILD bird-2.0.11.ebuild 1372 BLAKE2B fa72b403df11402e3ff132b29034c4b190e6affc42257c4cadd9d43ca6d8b06fd5da66531b436195cad6b98cf351e696f04615f931c1d0b72d68d66d0453be9a SHA512 ca9d85680d83f92292b9e8400248a0b847fcb7f244a8a490a94e42f71f089ab3c49a28874abe327756b1b73a3f41276f8a49bad32762b0738168fb49f4271349
-EBUILD bird-2.0.12-r1.ebuild 1785 BLAKE2B 989ecf9c986caf71c69bba13269089088ac70df82949136e9b9fa322361e8b38b4047d4638314ac58d615f7b8a0dbfd6f4a85452c222691a5ce42fbbe9aac5eb SHA512 6068a414e6a9fd03b16d23a92ae27fbfbbee8e1895bab3be188cd76ecb3b2944c97083904af3ce172a0b6bfcec571cebe1c9679865019513195b349ee5b8235f
-EBUILD bird-2.0.7.ebuild 820 BLAKE2B 25dc6943e802cdf28dea3c9851b22a59367247f0e4fbd1fb9112d117ee5f884b443f7244cd8b6e588f7a3f8b4e388b90c9ea6d7887b92472cf01065a85494ec9 SHA512 4f31aa1fb87d20b3d28049fc1e8e0657fb9caaf9cd6d87e019241fbca5fa16595a89a4d21b515c114b348a84ecf5fdaea3c07559a4e1aa9c760535cc89d5658d
-EBUILD bird-2.16.1.ebuild 1947 BLAKE2B bbcf57aa150de4093e93aa8aebc46b1f496640b3b363023406033980e84fa92b9cf378628b90d1be4df5ec23ba9723aaf0a2c3e470caedbc5394eea9e56663f0 SHA512 c345bbe9fddf6201fa444fb576c6f8884b35695feb107ecdb77be9468548a3ef78d6e5fc126e59836f3c80f52e2c894166e2a2e23da4fe570bf86d3cd02aab68
+EBUILD bird-2.0.10.ebuild 1372 BLAKE2B 4110a587b41dd1225b1b0945df6d123e3baeb4c08700077acea434cbca9ba77c23c3856bae8fb1801edc2ebd2c96ef1b63556a9248eeac2d48f54ce99dbbf687 SHA512 6b34f5642fef2f2897966f671cc27b7241d206e17598578c3e6761d3e64deda77873266f1fa582bbb5dcec9ff229ea14e8d14fd280180e570b68e35a1d40deab
+EBUILD bird-2.0.11.ebuild 1373 BLAKE2B ec1723550ca0285e627ad0050ceba8ead133e07d86de11cbe9577f718484113ea4c07123dcf2ab518faa7c2b9cab55d2ec7a8fc88fb22fb5795098e92c78ac6e SHA512 d9c48b68b536408251f6b7cca5453a96ade61131560f3e5d8c2639807594d031beca42eeb553de1a3a95780d3f6066d17e2bf5055e37743be93c43e0f1014e7c
+EBUILD bird-2.0.12-r1.ebuild 1786 BLAKE2B 4f1c7024d00c7dd6cf3814d854d3f28b2cef233a5ee24d6e93729cea365767f49527df3e8eff94bb54084acf20d4cdc4299d559900672f760f3d86ca25d61c80 SHA512 cf75f0ef302cb4350b89d961400e97612c1504ae906da6f14ad1882866a3efa79c7292015d1b7036b05ae0e8937d2a83f263254fe90b013187bd90ac9304ccef
+EBUILD bird-2.0.7.ebuild 821 BLAKE2B dcc0974d0a8f7d5702779ae909ef472b34314b3f1a28685fad8f162981dd253901ba040904e210956169f5a6dba5b59c5158050f0e4bb675a389c8c3d842d556 SHA512 3c91f3759828b5899f754b2d8ae837fb4a1bec269f6fecfbc60410341f3da88e388733353c918dc353f6a128d98ed1cba98aec2e3042945a4500e902ce77e9bc
+EBUILD bird-2.16.1.ebuild 1948 BLAKE2B c5e0543525562d6baa935e079627e2a1df0b3be44f310babe8b2bd1c40139ceb4c40d6ca7d5a17538cadcb643a0783dd92075135ce8d1b303d3b2a92c6ff6bd2 SHA512 af858926f7b4126567cf8f932a2ce8529803ec321c936cf4f2d6f9f61097892a9a259dd28f76f395801d5e71aa1ef28debfe392cad4982b4b8044461781b447d
MISC metadata.xml 582 BLAKE2B f2fca917d013e377c042ad09e99a53bda1bd27673e27dc17ed683aec7b691e40e405fef758a3243f6d53804f23ab495ccc7692712d9d941d2517d141b33c0a50 SHA512 0d03e6149698726621a62436740e83b6fcd6c6951d201eead7453ea0b565dcd72d6d54f961e40b1598a1d0b499a5166d84c4208de5c0a6b4134e3d32f84d9eae
diff --git a/net-misc/bird/bird-2.0.10.ebuild b/net-misc/bird/bird-2.0.10.ebuild
index 68cedb7d4894..38303091f7e8 100644
--- a/net-misc/bird/bird-2.0.10.ebuild
+++ b/net-misc/bird/bird-2.0.10.ebuild
@@ -1,4 +1,4 @@
-# Copyright 2020-2024 Gentoo Authors
+# Copyright 2020-2025 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=8
@@ -7,9 +7,9 @@ inherit autotools fcaps
DESCRIPTION="A routing daemon implementing OSPF, RIPv2 & BGP for IPv4 & IPv6"
HOMEPAGE="https://bird.network.cz"
-SRC_URI="ftp://bird.network.cz/pub/${PN}/${P}.tar.gz"
-LICENSE="GPL-2"
+SRC_URI="https://bird.network.cz/download/${P}.tar.gz"
+LICENSE="GPL-2"
SLOT="0"
KEYWORDS="amd64 ~arm64 ~x86 ~x64-macos"
IUSE="+client debug libssh"
diff --git a/net-misc/bird/bird-2.0.11.ebuild b/net-misc/bird/bird-2.0.11.ebuild
index 44a995dcc670..9cbdee71abdf 100644
--- a/net-misc/bird/bird-2.0.11.ebuild
+++ b/net-misc/bird/bird-2.0.11.ebuild
@@ -1,4 +1,4 @@
-# Copyright 2020-2024 Gentoo Authors
+# Copyright 2020-2025 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=8
@@ -7,9 +7,9 @@ inherit autotools fcaps
DESCRIPTION="A routing daemon implementing OSPF, RIPv2 & BGP for IPv4 & IPv6"
HOMEPAGE="https://bird.network.cz"
-SRC_URI="ftp://bird.network.cz/pub/${PN}/${P}.tar.gz"
-LICENSE="GPL-2"
+SRC_URI="https://bird.network.cz/download/${P}.tar.gz"
+LICENSE="GPL-2"
SLOT="0"
KEYWORDS="~amd64 ~arm64 ~x86 ~x64-macos"
IUSE="+client debug libssh"
diff --git a/net-misc/bird/bird-2.0.12-r1.ebuild b/net-misc/bird/bird-2.0.12-r1.ebuild
index c65c7403e4df..cb7db960eefb 100644
--- a/net-misc/bird/bird-2.0.12-r1.ebuild
+++ b/net-misc/bird/bird-2.0.12-r1.ebuild
@@ -1,4 +1,4 @@
-# Copyright 2020-2024 Gentoo Authors
+# Copyright 2020-2025 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=8
@@ -7,9 +7,9 @@ inherit autotools fcaps
DESCRIPTION="A routing daemon implementing OSPF, RIPv2 & BGP for IPv4 & IPv6"
HOMEPAGE="https://bird.network.cz"
-SRC_URI="ftp://bird.network.cz/pub/${PN}/${P}.tar.gz"
-LICENSE="GPL-2"
+SRC_URI="https://bird.network.cz/download/${P}.tar.gz"
+LICENSE="GPL-2"
SLOT="0"
KEYWORDS="amd64 ~arm64 ~loong ~x86 ~x64-macos"
IUSE="+client custom-cflags debug libssh"
diff --git a/net-misc/bird/bird-2.0.7.ebuild b/net-misc/bird/bird-2.0.7.ebuild
index 397df5ee7aeb..f513d0f7fe76 100644
--- a/net-misc/bird/bird-2.0.7.ebuild
+++ b/net-misc/bird/bird-2.0.7.ebuild
@@ -1,13 +1,13 @@
-# Copyright 1999-2024 Gentoo Authors
+# Copyright 1999-2025 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=7
DESCRIPTION="A routing daemon implementing OSPF, RIPv2 & BGP for IPv4 & IPv6"
HOMEPAGE="http://bird.network.cz"
-SRC_URI="ftp://bird.network.cz/pub/${PN}/${P}.tar.gz"
-LICENSE="GPL-2"
+SRC_URI="https://bird.network.cz/download/${P}.tar.gz"
+LICENSE="GPL-2"
SLOT="0"
KEYWORDS="amd64 ~arm64 ~x86 ~x64-macos"
IUSE="+client debug"
diff --git a/net-misc/bird/bird-2.16.1.ebuild b/net-misc/bird/bird-2.16.1.ebuild
index b669d6aa4a22..8a173d01cedf 100644
--- a/net-misc/bird/bird-2.16.1.ebuild
+++ b/net-misc/bird/bird-2.16.1.ebuild
@@ -7,9 +7,9 @@ inherit autotools fcaps
DESCRIPTION="A routing daemon implementing OSPF, RIPv2 & BGP for IPv4 & IPv6"
HOMEPAGE="https://bird.network.cz"
-SRC_URI="ftp://bird.network.cz/pub/${PN}/${P}.tar.gz"
-LICENSE="GPL-2"
+SRC_URI="https://bird.network.cz/download/${P}.tar.gz"
+LICENSE="GPL-2"
SLOT="0"
KEYWORDS="~amd64 ~arm64 ~loong ~x86 ~x64-macos"
IUSE="+client custom-cflags debug libssh"
diff --git a/net-misc/curl/Manifest b/net-misc/curl/Manifest
index 254ec6e9a749..761377dc552a 100644
--- a/net-misc/curl/Manifest
+++ b/net-misc/curl/Manifest
@@ -6,10 +6,10 @@ DIST curl-8.11.1.tar.xz 2751236 BLAKE2B a87ec2c78c5d6daf44eee4cf8e3ed124849d067f
DIST curl-8.11.1.tar.xz.asc 488 BLAKE2B 53d58ebb8ab722d8394b7ce94b646c876324cd89b3e47d9129bddcfbb6db338c1dbe93a5e72a25caf7be9ddd450c2b0832cfee17beb8ba701bdeefe653235d53 SHA512 c09bedb67e83fb8ca3ad73c5bd0d92fed7fc2c26dbe5a71cccb193fd151c7219713241a9fe74baefcd1d008cfafba78142bf04cec24dd4a88d67179184d35824
DIST curl-8.12.1.tar.xz 2768160 BLAKE2B 2b3e3d91041881c0951ad470736266105d3b9720440b808fe382baa493a30075aba52eb1d329fb1f148e27cd76290d82e121e7f4abf695f215456a10e26ade3e SHA512 88915468fa1bb7256e3dd6c9d058ada6894faa1e3e7800c7d9bfee3e8be4081ae57e7f2bf260c5342b709499fc4302ddc2d7864e25bfa3300fa07f118a3de603
DIST curl-8.12.1.tar.xz.asc 488 BLAKE2B 2a6563609c9f7ada84ca2c7048ad9406809eef4cc958760d2ab3d1b7be58d26247e579bd025870609e80ebb00295026aae30614b84e3a81bdf3ed3dbd0f5ed70 SHA512 41fc5582935090d13940d86974fdea3ea901dd5dab156c16029a87f811d2535172c59dc8dc366f2ffc37bcf85accbecb5aa765bc7b83c2991a3ef402bf25af69
-DIST curl-8.13.0-rc3.tar.xz 2792136 BLAKE2B af18c877ca6e9fb3e75265f86b3f3416e12b4160b71de00dfb82d687f11f457faf2f7dddde557474631ac7148cada1add189ac4ed002c41745bd546309093312 SHA512 72c0e0b8b0bc9117ab911b97bab6b1502d877f5a72a34091b68e48c046e45dfd188f24f270c0200f4df3f1a70933ada00f3a73a0aa078ec2b125fa5a9294d33f
-DIST curl-8.13.0-rc3.tar.xz.asc 488 BLAKE2B 8778af342578bace6ddea93c719fb74b8a9b85ffb53938f46888c48cb9eef53bd018b4df421c2ceaecae5a8058a32b3b058e7965ba8b092eb17fef69168ab3f4 SHA512 a2d94a898824fabc1c4834f9e5719fb65311d0f218f6170e80fe1a04c6f842f9fbf589d281767ab916f668ff7087bb318b819a1fb26790640df136f335ff3b99
+DIST curl-8.13.0.tar.xz 2773628 BLAKE2B 6869634ad50f015d5c7526699034d5a3f27d9588bc32eacc8080dbd6c690f63b1f25cee40d3fdf8fd9dd8535c305ea9c5edf1d5a02bc6d9ce60fd8c88230aca0 SHA512 d266e460f162ee455b56726e5b7247b2d1aa5265ae12081513fc0c5c79e785a594097bc71d505dc9bcd2c2f6f1ff6f4bab9dbd9d120bb76d06c5be8521a8ca7d
+DIST curl-8.13.0.tar.xz.asc 488 BLAKE2B bd568ec32a44ef7c14c38e4830bcc7711dac726e950325292f1e5de76e619839685300c5afac32330127324327e71ce0d6e574f6e95bcc4a48957345152bc86a SHA512 07f79c7fd7c305c96e10a5f52797254aed7d2a1f3577c8626b8d617855ceb82634ac6787bfa0b7130a4ed72c3a9945d3c9ba5b7be54df8bafa07ded1c62ef2be
EBUILD curl-8.11.1-r2.ebuild 11438 BLAKE2B 23fbba450554c39092a7e6b7a907f4720ca9407fceddd00dfccc4c7517c39f458365ec1e8ca74fb4f1cfe8033ba0a484d0d9a8537fd87a8ee029ad427aa9ae67 SHA512 12449882676c24b4929db4ab9fb7ce77ffd41e00e4091f7835c0434d25e1dfa613cc1d86e65ac1fc072f05d6a3aac671366727f1d04a09f48bde3af8747d013c
EBUILD curl-8.12.1.ebuild 11629 BLAKE2B 3de0fe436f0d733fd18a93911678c4383a33cb8600ffb9e3739ce1763712971631bc410da11489ab992887c70706d83235cd214f5c03076280c999cdb1ffc05e SHA512 5536f39147536ae064d4613fb7bc76afde032d1e175355c9236838c15341df6f4a38869c4c5341f8524c522c376552e0e28b5017e428e984ef3f7fe25879935b
-EBUILD curl-8.13.0_rc3.ebuild 11758 BLAKE2B 4d0d0dcf1ebb5dcd3f922787a9769216aa3929b6383b6bd06cfb0fb20d12044265eb664a11f4d4ccca55d2d6ca37471165e4517c6faa397b89191d0a843232af SHA512 f96981715290d79319451e9438fe71898463dc8053ce72d9ccb5ad8588aeb4b552058e3cd9eba30de578cf7434aea4e8002e545ed7642d05c42b4f83e1bc3e67
-EBUILD curl-9999.ebuild 11758 BLAKE2B 4d0d0dcf1ebb5dcd3f922787a9769216aa3929b6383b6bd06cfb0fb20d12044265eb664a11f4d4ccca55d2d6ca37471165e4517c6faa397b89191d0a843232af SHA512 f96981715290d79319451e9438fe71898463dc8053ce72d9ccb5ad8588aeb4b552058e3cd9eba30de578cf7434aea4e8002e545ed7642d05c42b4f83e1bc3e67
-MISC metadata.xml 2129 BLAKE2B 89432da852617c89e67c8927a7dddf43a4b69753b201623a7d94071724bc1dd9a936cfabfce6cb224700a47d33257f4945bbb695bfde5d20b9fd4796bd712242 SHA512 8ac6fa9535920904ff70c5cadf1fe28b1e806deff5b37a5a326e9ec25d6c54cc1bf2ecbfd8843af34b26dbe270a1a3ac3ca8ec8730d62180af8237fae5ba255a
+EBUILD curl-8.13.0.ebuild 12884 BLAKE2B 67afaa65d36face2d44b5f2f425eb3a6ffbe9b3dc689c239c3ebb6800377a313099c1bbe9484ed563e0b2a4858436e221a36a3d6a33b41e21d4bb557ea703328 SHA512 f9d6085ecad1ae293bcadb9da861235ccd5865ba064e2c897426b4673f661e6dffcd6af7ff971f4a1a0cedb53caad96285ca3a16ba25ada7665ae28e54358c36
+EBUILD curl-9999.ebuild 12884 BLAKE2B 67afaa65d36face2d44b5f2f425eb3a6ffbe9b3dc689c239c3ebb6800377a313099c1bbe9484ed563e0b2a4858436e221a36a3d6a33b41e21d4bb557ea703328 SHA512 f9d6085ecad1ae293bcadb9da861235ccd5865ba064e2c897426b4673f661e6dffcd6af7ff971f4a1a0cedb53caad96285ca3a16ba25ada7665ae28e54358c36
+MISC metadata.xml 2392 BLAKE2B b00c099dddba47b3873118bde600d5ef994b35a8b0a95f3e3186f749f5fe2e31f5c5f7d52266e664c81919323b5da7c583a7666ecc1d99d0b09f8d7ca20cf1b9 SHA512 eb435d7f6fe61b7154461a0c280d7c84049a8ebdc0dd2fdd529f784072d66dacb3b20bea7437979247b002bf6f7de336e32cde0fad1b5ff1ab1198896e42a1d6
diff --git a/net-misc/curl/curl-8.13.0_rc3.ebuild b/net-misc/curl/curl-8.13.0.ebuild
index 5af80a37e9b1..bdceb348fcc7 100644
--- a/net-misc/curl/curl-8.13.0_rc3.ebuild
+++ b/net-misc/curl/curl-8.13.0.ebuild
@@ -32,17 +32,29 @@ fi
LICENSE="BSD curl ISC test? ( BSD-4 )"
SLOT="0"
-IUSE="+adns +alt-svc brotli debug +ftp gnutls gopher +hsts +http2 +http3 idn +imap kerberos ldap mbedtls +openssl +pop3"
-IUSE+=" +psl +progress-meter +quic rtmp rustls samba +smtp ssh ssl sslv3 static-libs test telnet +tftp +websockets zstd"
+IUSE="+adns +alt-svc brotli debug ech +ftp gnutls gopher +hsts +http2 +http3 +httpsrr idn +imap kerberos ldap"
+IUSE+=" mbedtls +openssl +pop3 +psl +quic rtmp rustls samba sasl-scram +smtp ssh ssl static-libs test"
+IUSE+=" telnet +tftp +websockets zstd"
# These select the default tls implementation / which quic impl to use
IUSE+=" +curl_quic_openssl curl_quic_ngtcp2 curl_ssl_gnutls curl_ssl_mbedtls +curl_ssl_openssl curl_ssl_rustls"
RESTRICT="!test? ( test )"
+# HTTPS RR is technically usable with the threaded resolver, but it still uses c-ares to
+# ask for the HTTPS RR record type; if DoH is in use the HTTPS record will be requested
+# in addition to A and AAAA records.
+
+# To simplify dependency management in the ebuild we'll require c-ares for HTTPS RR (for now?).
+# HTTPS RR in cURL is a dependency for:
+# - ECH (requires patched openssl or gnutls currently, enabled with rustls)
+# - Fetching the ALPN list which should provide a better HTTP/3 experience.
+
# Only one default ssl / quic provider can be enabled
# The default provider needs its USE satisfied
# HTTP/3 and MultiSSL are mutually exclusive; it's not clear if MultiSSL offers any benefit at all in the modern day.
# https://github.com/curl/curl/commit/65ece771f4602107d9cdd339dff4b420280a2c2e
REQUIRED_USE="
+ ech? ( rustls )
+ httpsrr? ( adns )
quic? (
^^ (
curl_quic_openssl
@@ -77,7 +89,7 @@ REQUIRED_USE="
curl_ssl_mbedtls? ( mbedtls )
curl_ssl_openssl? ( openssl )
curl_ssl_rustls? ( rustls )
- http3? ( alt-svc quic )
+ http3? ( alt-svc httpsrr quic )
"
# cURL's docs and CI/CD are great resources for confirming supported versions
@@ -104,6 +116,7 @@ RDEPEND="
)
rtmp? ( media-video/rtmpdump[${MULTILIB_USEDEP}] )
ssh? ( >=net-libs/libssh2-1.2.8[${MULTILIB_USEDEP}] )
+ sasl-scram? ( >=net-misc/gsasl-2.2.0[static-libs?,${MULTILIB_USEDEP}] )
ssl? (
gnutls? (
app-misc/ca-certificates
@@ -115,10 +128,10 @@ RDEPEND="
net-libs/mbedtls:0=[${MULTILIB_USEDEP}]
)
openssl? (
- >=dev-libs/openssl-1.0.2:=[sslv3(-)=,static-libs?,${MULTILIB_USEDEP}]
+ >=dev-libs/openssl-1.0.2:=[static-libs?,${MULTILIB_USEDEP}]
)
rustls? (
- >=net-libs/rustls-ffi-0.14.0:=[${MULTILIB_USEDEP}]
+ >=net-libs/rustls-ffi-0.15.0:=[${MULTILIB_USEDEP}]
)
)
zstd? ( app-arch/zstd:=[${MULTILIB_USEDEP}] )
@@ -173,6 +186,57 @@ src_prepare() {
eautoreconf
}
+# Generates TLS-related configure options based on USE flags.
+# Outputs options suitable for appending to a configure options array.
+_get_curl_tls_configure_opts() {
+ local tls_opts=()
+
+ local backend flag_name
+ for backend in gnutls mbedtls openssl rustls; do
+ if [[ "$backend" == "openssl" ]]; then
+ flag_name="ssl"
+ tls_opts+=( "--with-ca-path=${EPREFIX}/etc/ssl/certs")
+ else
+ flag_name="$backend"
+ fi
+
+ if use "$backend"; then
+ tls_opts+=( "--with-${flag_name}" )
+ else
+ # If a single backend is enabled, 'ssl' is required, openssl is the default / fallback
+ if ! [[ "$backend" == "openssl" ]]; then
+ tls_opts+=( "--without-${flag_name}" )
+ fi
+ fi
+ done
+
+ if use curl_ssl_gnutls; then
+ multilib_is_native_abi && einfo "Default TLS backend: gnutls"
+ tls_opts+=( "--with-default-ssl-backend=gnutls" )
+ elif use curl_ssl_mbedtls; then
+ multilib_is_native_abi && einfo "Default TLS backend: mbedtls"
+ tls_opts+=( "--with-default-ssl-backend=mbedtls" )
+ elif use curl_ssl_openssl; then
+ multilib_is_native_abi && einfo "Default TLS backend: openssl"
+ tls_opts+=( "--with-default-ssl-backend=openssl" )
+ elif use curl_ssl_rustls; then
+ multilib_is_native_abi && einfo "Default TLS backend: rustls"
+ tls_opts+=( "--with-default-ssl-backend=rustls" )
+ else
+ eerror "We can't be here because of REQUIRED_USE."
+ die "Please file a bug, hit impossible condition w/ USE=ssl handling."
+ fi
+
+ # Explicitly Disable unimplemented b
+ tls_opts+=(
+ --without-amissl
+ --without-bearssl
+ --without-wolfssl
+ )
+
+ printf "%s\n" "${tls_opts[@]}"
+}
+
multilib_src_configure() {
# We make use of the fact that later flags override earlier ones
# So start with all ssl providers off until proven otherwise
@@ -181,128 +245,107 @@ multilib_src_configure() {
myconf+=( --without-ca-fallback --with-ca-bundle="${EPREFIX}"/etc/ssl/certs/ca-certificates.crt )
if use ssl; then
- myconf+=( --without-gnutls --without-mbedtls --without-rustls )
-
- if use gnutls; then
- multilib_is_native_abi && einfo "SSL provided by gnutls"
- myconf+=( --with-gnutls )
- fi
- if use mbedtls; then
- multilib_is_native_abi && einfo "SSL provided by mbedtls"
- myconf+=( --with-mbedtls )
- fi
- if use openssl; then
- multilib_is_native_abi && einfo "SSL provided by openssl"
- myconf+=( --with-ssl --with-ca-path="${EPREFIX}"/etc/ssl/certs )
- fi
- if use rustls; then
- multilib_is_native_abi && einfo "SSL provided by rustls"
- myconf+=( --with-rustls )
- fi
- if use curl_ssl_gnutls; then
- multilib_is_native_abi && einfo "Default SSL provided by gnutls"
- myconf+=( --with-default-ssl-backend=gnutls )
- elif use curl_ssl_mbedtls; then
- multilib_is_native_abi && einfo "Default SSL provided by mbedtls"
- myconf+=( --with-default-ssl-backend=mbedtls )
- elif use curl_ssl_openssl; then
- multilib_is_native_abi && einfo "Default SSL provided by openssl"
- myconf+=( --with-default-ssl-backend=openssl )
- elif use curl_ssl_rustls; then
- multilib_is_native_abi && einfo "Default SSL provided by rustls"
- myconf+=( --with-default-ssl-backend=rustls )
- else
- eerror "We can't be here because of REQUIRED_USE."
- die "Please file a bug, hit impossible condition w/ USE=ssl handling."
- fi
-
+ local -a tls_backend_opts
+ readarray -t tls_backend_opts < <(_get_curl_tls_configure_opts)
+ myconf+=("${tls_backend_opts[@]}")
else
myconf+=( --without-ssl )
einfo "SSL disabled"
fi
- # These configuration options are organized alphabetically
- # within each category. This should make it easier if we
- # ever decide to make any of them contingent on USE flags:
- # 1) protocols first. To see them all do
- # 'grep SUPPORT_PROTOCOLS configure.ac'
- # 2) --enable/disable options second.
- # 'grep -- --enable configure | grep Check | awk '{ print $4 }' | sort
- # 3) --with/without options third.
- # grep -- --with configure | grep Check | awk '{ print $4 }' | sort
+ # These configuration options are organised alphabetically by category/type
+ # Protocols
+ # `grep SUPPORT_PROTOCOLS=\" configure.ac | awk '{ print substr($2, 1, length($2)-1)}' | sort`
+ # Assume that anything omitted (that is not new!) is enabled by default with no deps
myconf+=(
- $(use_enable alt-svc)
- --enable-basic-auth
- --enable-bearer-auth
- --enable-digest-auth
- --enable-kerberos-auth
- --enable-negotiate-auth
- --enable-aws
- --enable-dict
- --disable-ech
--enable-file
$(use_enable ftp)
$(use_enable gopher)
- $(use_enable hsts)
--enable-http
- $(use_enable imap)
- $(use_enable ldap)
+ $(use_enable imap) # Automatic IMAPS if TLS is enabled
$(use_enable ldap ldaps)
- --enable-ntlm
+ $(use_enable ldap)
$(use_enable pop3)
- --enable-rt
- --enable-rtsp
$(use_enable samba smb)
- $(use_with ssh libssh2)
+ $(use_with ssh libssh2) # enables scp/sftp
+ $(use_with rtmp librtmp)
+ --enable-rtsp
$(use_enable smtp)
$(use_enable telnet)
$(use_enable tftp)
- --enable-tls-srp
+ $(use_enable websockets)
+ )
+
+ # Keep various 'HTTP-flavoured' options together
+ myconf+=(
+ $(use_enable alt-svc)
+ $(use_enable hsts)
+ $(use_enable httpsrr)
+ $(use_with http2 nghttp2)
+ $(use_with http3 nghttp3)
+ $(use_with curl_quic_ngtcp2 ngtcp2)
+ $(use_with curl_quic_openssl openssl-quic)
+ )
+
+ # --enable/disable options
+ # `grep -- --enable configure | grep Check | awk '{ print $4 }' | sort`
+ myconf+=(
$(use_enable adns ares)
+ --enable-aws
+ --enable-basic-auth
+ --enable-bearer-auth
--enable-cookies
--enable-dateparse
+ --enable-dict
+ --enable-digest-auth
--enable-dnsshuffle
--enable-doh
- --enable-symbol-hiding
+ $(use_enable ech)
--enable-http-auth
--enable-ipv6
+ --enable-kerberos-auth
--enable-largefile
--enable-manual
--enable-mime
+ --enable-negotiate-auth
--enable-netrc
- $(use_enable progress-meter)
+ --enable-ntlm
+ --enable-progress-meter
--enable-proxy
+ --enable-rt
--enable-socketpair
--disable-sspi
$(use_enable static-libs static)
+ --enable-symbol-hiding
+ --enable-tls-srp
--disable-versioned-symbols
- --without-amissl
- --without-bearssl
+ )
+
+ # --with/without options
+ # `grep -- --with configure | grep Check | awk '{ print $4 }' | sort`
+ myconf+=(
$(use_with brotli)
--with-fish-functions-dir="${EPREFIX}"/usr/share/fish/vendor_completions.d
- $(use_with http2 nghttp2)
$(use_with idn libidn2)
$(use_with kerberos gssapi "${EPREFIX}"/usr)
- --without-libgsasl
+ $(use_with sasl-scram libgsasl)
$(use_with psl libpsl)
--without-msh3
- $(use_with http3 nghttp3)
- $(use_with curl_quic_ngtcp2 ngtcp2)
- $(use_with curl_quic_openssl openssl-quic)
--without-quiche
- $(use_with rtmp librtmp)
--without-schannel
--without-secure-transport
- --without-test-caddy
- --without-test-httpd
- --without-test-nghttpx
- $(use_enable websockets)
--without-winidn
- --without-wolfssl
--with-zlib
- $(use_with zstd)
--with-zsh-functions-dir="${EPREFIX}"/usr/share/zsh/site-functions
+ $(use_with zstd)
+ )
+
+ # Test deps (disabled)
+ myconf+=(
+ --without-test-caddy
+ --without-test-httpd
+ --without-test-nghttpx
)
if use debug; then
@@ -319,8 +362,7 @@ multilib_src_configure() {
# Since 8.12.0 adns/c-ares and the threaded resolver are mutually exclusive
# This is in support of some work to enable `httpsrr` to use adns and the rest
- # of curl to use the threaded resolver; we'll just make `httpsrr` conditional on adns
- # when the time comes.
+ # of curl to use the threaded resolver; for us `httpsrr` is conditional on adns.
if use adns; then
myconf+=(
--disable-threaded-resolver
diff --git a/net-misc/curl/curl-9999.ebuild b/net-misc/curl/curl-9999.ebuild
index 5af80a37e9b1..bdceb348fcc7 100644
--- a/net-misc/curl/curl-9999.ebuild
+++ b/net-misc/curl/curl-9999.ebuild
@@ -32,17 +32,29 @@ fi
LICENSE="BSD curl ISC test? ( BSD-4 )"
SLOT="0"
-IUSE="+adns +alt-svc brotli debug +ftp gnutls gopher +hsts +http2 +http3 idn +imap kerberos ldap mbedtls +openssl +pop3"
-IUSE+=" +psl +progress-meter +quic rtmp rustls samba +smtp ssh ssl sslv3 static-libs test telnet +tftp +websockets zstd"
+IUSE="+adns +alt-svc brotli debug ech +ftp gnutls gopher +hsts +http2 +http3 +httpsrr idn +imap kerberos ldap"
+IUSE+=" mbedtls +openssl +pop3 +psl +quic rtmp rustls samba sasl-scram +smtp ssh ssl static-libs test"
+IUSE+=" telnet +tftp +websockets zstd"
# These select the default tls implementation / which quic impl to use
IUSE+=" +curl_quic_openssl curl_quic_ngtcp2 curl_ssl_gnutls curl_ssl_mbedtls +curl_ssl_openssl curl_ssl_rustls"
RESTRICT="!test? ( test )"
+# HTTPS RR is technically usable with the threaded resolver, but it still uses c-ares to
+# ask for the HTTPS RR record type; if DoH is in use the HTTPS record will be requested
+# in addition to A and AAAA records.
+
+# To simplify dependency management in the ebuild we'll require c-ares for HTTPS RR (for now?).
+# HTTPS RR in cURL is a dependency for:
+# - ECH (requires patched openssl or gnutls currently, enabled with rustls)
+# - Fetching the ALPN list which should provide a better HTTP/3 experience.
+
# Only one default ssl / quic provider can be enabled
# The default provider needs its USE satisfied
# HTTP/3 and MultiSSL are mutually exclusive; it's not clear if MultiSSL offers any benefit at all in the modern day.
# https://github.com/curl/curl/commit/65ece771f4602107d9cdd339dff4b420280a2c2e
REQUIRED_USE="
+ ech? ( rustls )
+ httpsrr? ( adns )
quic? (
^^ (
curl_quic_openssl
@@ -77,7 +89,7 @@ REQUIRED_USE="
curl_ssl_mbedtls? ( mbedtls )
curl_ssl_openssl? ( openssl )
curl_ssl_rustls? ( rustls )
- http3? ( alt-svc quic )
+ http3? ( alt-svc httpsrr quic )
"
# cURL's docs and CI/CD are great resources for confirming supported versions
@@ -104,6 +116,7 @@ RDEPEND="
)
rtmp? ( media-video/rtmpdump[${MULTILIB_USEDEP}] )
ssh? ( >=net-libs/libssh2-1.2.8[${MULTILIB_USEDEP}] )
+ sasl-scram? ( >=net-misc/gsasl-2.2.0[static-libs?,${MULTILIB_USEDEP}] )
ssl? (
gnutls? (
app-misc/ca-certificates
@@ -115,10 +128,10 @@ RDEPEND="
net-libs/mbedtls:0=[${MULTILIB_USEDEP}]
)
openssl? (
- >=dev-libs/openssl-1.0.2:=[sslv3(-)=,static-libs?,${MULTILIB_USEDEP}]
+ >=dev-libs/openssl-1.0.2:=[static-libs?,${MULTILIB_USEDEP}]
)
rustls? (
- >=net-libs/rustls-ffi-0.14.0:=[${MULTILIB_USEDEP}]
+ >=net-libs/rustls-ffi-0.15.0:=[${MULTILIB_USEDEP}]
)
)
zstd? ( app-arch/zstd:=[${MULTILIB_USEDEP}] )
@@ -173,6 +186,57 @@ src_prepare() {
eautoreconf
}
+# Generates TLS-related configure options based on USE flags.
+# Outputs options suitable for appending to a configure options array.
+_get_curl_tls_configure_opts() {
+ local tls_opts=()
+
+ local backend flag_name
+ for backend in gnutls mbedtls openssl rustls; do
+ if [[ "$backend" == "openssl" ]]; then
+ flag_name="ssl"
+ tls_opts+=( "--with-ca-path=${EPREFIX}/etc/ssl/certs")
+ else
+ flag_name="$backend"
+ fi
+
+ if use "$backend"; then
+ tls_opts+=( "--with-${flag_name}" )
+ else
+ # If a single backend is enabled, 'ssl' is required, openssl is the default / fallback
+ if ! [[ "$backend" == "openssl" ]]; then
+ tls_opts+=( "--without-${flag_name}" )
+ fi
+ fi
+ done
+
+ if use curl_ssl_gnutls; then
+ multilib_is_native_abi && einfo "Default TLS backend: gnutls"
+ tls_opts+=( "--with-default-ssl-backend=gnutls" )
+ elif use curl_ssl_mbedtls; then
+ multilib_is_native_abi && einfo "Default TLS backend: mbedtls"
+ tls_opts+=( "--with-default-ssl-backend=mbedtls" )
+ elif use curl_ssl_openssl; then
+ multilib_is_native_abi && einfo "Default TLS backend: openssl"
+ tls_opts+=( "--with-default-ssl-backend=openssl" )
+ elif use curl_ssl_rustls; then
+ multilib_is_native_abi && einfo "Default TLS backend: rustls"
+ tls_opts+=( "--with-default-ssl-backend=rustls" )
+ else
+ eerror "We can't be here because of REQUIRED_USE."
+ die "Please file a bug, hit impossible condition w/ USE=ssl handling."
+ fi
+
+ # Explicitly Disable unimplemented b
+ tls_opts+=(
+ --without-amissl
+ --without-bearssl
+ --without-wolfssl
+ )
+
+ printf "%s\n" "${tls_opts[@]}"
+}
+
multilib_src_configure() {
# We make use of the fact that later flags override earlier ones
# So start with all ssl providers off until proven otherwise
@@ -181,128 +245,107 @@ multilib_src_configure() {
myconf+=( --without-ca-fallback --with-ca-bundle="${EPREFIX}"/etc/ssl/certs/ca-certificates.crt )
if use ssl; then
- myconf+=( --without-gnutls --without-mbedtls --without-rustls )
-
- if use gnutls; then
- multilib_is_native_abi && einfo "SSL provided by gnutls"
- myconf+=( --with-gnutls )
- fi
- if use mbedtls; then
- multilib_is_native_abi && einfo "SSL provided by mbedtls"
- myconf+=( --with-mbedtls )
- fi
- if use openssl; then
- multilib_is_native_abi && einfo "SSL provided by openssl"
- myconf+=( --with-ssl --with-ca-path="${EPREFIX}"/etc/ssl/certs )
- fi
- if use rustls; then
- multilib_is_native_abi && einfo "SSL provided by rustls"
- myconf+=( --with-rustls )
- fi
- if use curl_ssl_gnutls; then
- multilib_is_native_abi && einfo "Default SSL provided by gnutls"
- myconf+=( --with-default-ssl-backend=gnutls )
- elif use curl_ssl_mbedtls; then
- multilib_is_native_abi && einfo "Default SSL provided by mbedtls"
- myconf+=( --with-default-ssl-backend=mbedtls )
- elif use curl_ssl_openssl; then
- multilib_is_native_abi && einfo "Default SSL provided by openssl"
- myconf+=( --with-default-ssl-backend=openssl )
- elif use curl_ssl_rustls; then
- multilib_is_native_abi && einfo "Default SSL provided by rustls"
- myconf+=( --with-default-ssl-backend=rustls )
- else
- eerror "We can't be here because of REQUIRED_USE."
- die "Please file a bug, hit impossible condition w/ USE=ssl handling."
- fi
-
+ local -a tls_backend_opts
+ readarray -t tls_backend_opts < <(_get_curl_tls_configure_opts)
+ myconf+=("${tls_backend_opts[@]}")
else
myconf+=( --without-ssl )
einfo "SSL disabled"
fi
- # These configuration options are organized alphabetically
- # within each category. This should make it easier if we
- # ever decide to make any of them contingent on USE flags:
- # 1) protocols first. To see them all do
- # 'grep SUPPORT_PROTOCOLS configure.ac'
- # 2) --enable/disable options second.
- # 'grep -- --enable configure | grep Check | awk '{ print $4 }' | sort
- # 3) --with/without options third.
- # grep -- --with configure | grep Check | awk '{ print $4 }' | sort
+ # These configuration options are organised alphabetically by category/type
+ # Protocols
+ # `grep SUPPORT_PROTOCOLS=\" configure.ac | awk '{ print substr($2, 1, length($2)-1)}' | sort`
+ # Assume that anything omitted (that is not new!) is enabled by default with no deps
myconf+=(
- $(use_enable alt-svc)
- --enable-basic-auth
- --enable-bearer-auth
- --enable-digest-auth
- --enable-kerberos-auth
- --enable-negotiate-auth
- --enable-aws
- --enable-dict
- --disable-ech
--enable-file
$(use_enable ftp)
$(use_enable gopher)
- $(use_enable hsts)
--enable-http
- $(use_enable imap)
- $(use_enable ldap)
+ $(use_enable imap) # Automatic IMAPS if TLS is enabled
$(use_enable ldap ldaps)
- --enable-ntlm
+ $(use_enable ldap)
$(use_enable pop3)
- --enable-rt
- --enable-rtsp
$(use_enable samba smb)
- $(use_with ssh libssh2)
+ $(use_with ssh libssh2) # enables scp/sftp
+ $(use_with rtmp librtmp)
+ --enable-rtsp
$(use_enable smtp)
$(use_enable telnet)
$(use_enable tftp)
- --enable-tls-srp
+ $(use_enable websockets)
+ )
+
+ # Keep various 'HTTP-flavoured' options together
+ myconf+=(
+ $(use_enable alt-svc)
+ $(use_enable hsts)
+ $(use_enable httpsrr)
+ $(use_with http2 nghttp2)
+ $(use_with http3 nghttp3)
+ $(use_with curl_quic_ngtcp2 ngtcp2)
+ $(use_with curl_quic_openssl openssl-quic)
+ )
+
+ # --enable/disable options
+ # `grep -- --enable configure | grep Check | awk '{ print $4 }' | sort`
+ myconf+=(
$(use_enable adns ares)
+ --enable-aws
+ --enable-basic-auth
+ --enable-bearer-auth
--enable-cookies
--enable-dateparse
+ --enable-dict
+ --enable-digest-auth
--enable-dnsshuffle
--enable-doh
- --enable-symbol-hiding
+ $(use_enable ech)
--enable-http-auth
--enable-ipv6
+ --enable-kerberos-auth
--enable-largefile
--enable-manual
--enable-mime
+ --enable-negotiate-auth
--enable-netrc
- $(use_enable progress-meter)
+ --enable-ntlm
+ --enable-progress-meter
--enable-proxy
+ --enable-rt
--enable-socketpair
--disable-sspi
$(use_enable static-libs static)
+ --enable-symbol-hiding
+ --enable-tls-srp
--disable-versioned-symbols
- --without-amissl
- --without-bearssl
+ )
+
+ # --with/without options
+ # `grep -- --with configure | grep Check | awk '{ print $4 }' | sort`
+ myconf+=(
$(use_with brotli)
--with-fish-functions-dir="${EPREFIX}"/usr/share/fish/vendor_completions.d
- $(use_with http2 nghttp2)
$(use_with idn libidn2)
$(use_with kerberos gssapi "${EPREFIX}"/usr)
- --without-libgsasl
+ $(use_with sasl-scram libgsasl)
$(use_with psl libpsl)
--without-msh3
- $(use_with http3 nghttp3)
- $(use_with curl_quic_ngtcp2 ngtcp2)
- $(use_with curl_quic_openssl openssl-quic)
--without-quiche
- $(use_with rtmp librtmp)
--without-schannel
--without-secure-transport
- --without-test-caddy
- --without-test-httpd
- --without-test-nghttpx
- $(use_enable websockets)
--without-winidn
- --without-wolfssl
--with-zlib
- $(use_with zstd)
--with-zsh-functions-dir="${EPREFIX}"/usr/share/zsh/site-functions
+ $(use_with zstd)
+ )
+
+ # Test deps (disabled)
+ myconf+=(
+ --without-test-caddy
+ --without-test-httpd
+ --without-test-nghttpx
)
if use debug; then
@@ -319,8 +362,7 @@ multilib_src_configure() {
# Since 8.12.0 adns/c-ares and the threaded resolver are mutually exclusive
# This is in support of some work to enable `httpsrr` to use adns and the rest
- # of curl to use the threaded resolver; we'll just make `httpsrr` conditional on adns
- # when the time comes.
+ # of curl to use the threaded resolver; for us `httpsrr` is conditional on adns.
if use adns; then
myconf+=(
--disable-threaded-resolver
diff --git a/net-misc/curl/metadata.xml b/net-misc/curl/metadata.xml
index b3581ad82856..497d1d0d69db 100644
--- a/net-misc/curl/metadata.xml
+++ b/net-misc/curl/metadata.xml
@@ -11,6 +11,7 @@
</maintainer>
<use>
<flag name="alt-svc">Enable alt-svc support</flag>
+ <flag name="ech">Enable Encrypted Client Hello support</flag>
<flag name="ftp">Enable FTP support</flag>
<flag name="gnutls">Enable gnutls ssl backend</flag>
<flag name="gopher">Enable Gopher protocol support</flag>
@@ -18,6 +19,7 @@
<flag name="imap">Enable Internet Message Access Protocol support</flag>
<flag name="mbedtls">Enable mbedtls ssl backend</flag>
<flag name="http3">Enable HTTP/3 support</flag>
+ <flag name="httpsrr">Enable HTTPS Resource Record support</flag>
<flag name="openssl">Enable openssl ssl backend</flag>
<flag name="pop3">Enable Post Office Protocol 3 support</flag>
<flag name="progress-meter">Enable the progress meter</flag>
@@ -25,6 +27,7 @@
<flag name="quic">Enable support for QUIC (RFC 9000); a UDP-based protocol intended to replace TCP</flag>
<flag name="rtmp">Enable RTMP Streaming Media support</flag>
<flag name="rustls">Enable Rustls ssl backend</flag>
+ <flag name="sasl-scram">Enable snupport for additional SASL SCRAM-SHA authentication methods via <pkg>net-misc/gsasl</pkg></flag>
<flag name="smtp">Enable Simple Mail Transfer Protocol support</flag>
<flag name="ssh">Enable SSH urls in curl using libssh2</flag>
<flag name="ssl">Enable crypto engine support (via openssl if USE='-gnutls -nss')</flag>
diff --git a/net-misc/getdate/Manifest b/net-misc/getdate/Manifest
index ac6f9b2068b9..95799ecbb917 100644
--- a/net-misc/getdate/Manifest
+++ b/net-misc/getdate/Manifest
@@ -1,5 +1,5 @@
AUX getdate-1.2-clang16.patch 154 BLAKE2B 9fc9aead36effd47ebbece800bd8a25db7012ef95168a2e490e40bdfbf7e5bef7f3ce613dc5b5ca770dec4a574ad7152ca5d12e5fcbb666cc393a30b5d73daa4 SHA512 229d01d6b357e3b6484cc97cb497dce3a81ddfbaca3599f3f703cc0d56cc95f5c62c8db5494fbe6782890c747be45bb2f13fab56791fa7064fcda9b19f3dc463
AUX getdate-glibc-2.31.patch 403 BLAKE2B 7fb09ee4c4f6e610c7fadabc5739ede341d037e4c54288603ff351df9dae6105292b47768e6674fc921a67e753d833ce97d29aaafd2f49dba46c6e1d6d98d0a3 SHA512 6602d57061cc9116b7d7a4c649b8829a1b968378167a384e06adfa57661836617d63bfa27af060a84cddcf28be5ea7fa9e9ac085ed233dc123277fa74e671df7
DIST getdate_rfc868-1.2.tar.gz 8323 BLAKE2B 03b9a9c0dd656fbb45785792484cfbce6e1f403f238a841bfc144401ad0deee257d88dcd214d617be2fd1ed0289e5ec63f0509effd51bd94b61be924b5f31836 SHA512 f4ce167e42f2ef54cb961923f15d8101c5d047659991b0f3859a0282d024b0e0273517b94b663a90f8d6af1d3e4acf46b96b17d39cd6b2f3ee25bc89995b1404
-EBUILD getdate-1.2-r2.ebuild 839 BLAKE2B edb2386c807eea72c889dc3365e2ff97850b416b473d330e7548a79dea81d10f93eba3747cb93cf8593081e9a6c0b2225763a8919667a3a296a67db02e56d281 SHA512 267ae86483cc0283782a0cd1d71d27da2e4d31f783629c15a2f69f9bf28fc7164e69bed2715a7b54087b3c008cae5a67a6a99affb344ee0b7d985b6c83f2f468
+EBUILD getdate-1.2-r2.ebuild 841 BLAKE2B 583ed38fe3efde454b02d31a5d8f8ac34622b12d694cb92a3fe022b9613ea5988096e5b97fa0d5967acb2e1db243bebb388d0ebdabf159b61e0a0a79fd829a67 SHA512 23b577f2431e644ee70485f6b3f86d260f79b51b8973eba38dde852e292f1675341e94c39426c6641547c5a47695c728a0adcc30f0092918f2064dee496fff12
MISC metadata.xml 167 BLAKE2B 868e3b584722eaacf68273db062bb773d8c7e5d7ab2b81ca7e8397643bf7cc106c3a1033594401c99c54f667bb45d6b73f9048fc335580bbd44b4589ad26a832 SHA512 30caadd1496c3b9969136038239a1d8e01f236726b4022c2d7e19ca7575f25f735e556835e581afbf44fbd3e4104c40f2b5ef5fa70118d75c881fdf871962d0a
diff --git a/net-misc/getdate/getdate-1.2-r2.ebuild b/net-misc/getdate/getdate-1.2-r2.ebuild
index d06f3c2be84e..aecbd9596201 100644
--- a/net-misc/getdate/getdate-1.2-r2.ebuild
+++ b/net-misc/getdate/getdate-1.2-r2.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2022 Gentoo Authors
+# Copyright 1999-2025 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=7
@@ -9,8 +9,8 @@ MY_P="${MY_PN}-${PV}"
inherit toolchain-funcs
DESCRIPTION="Network Date/Time Query and Set Local Date/Time Utility"
-HOMEPAGE="http://www.ibiblio.org/pub/Linux/system/network/misc/"
-SRC_URI="http://www.ibiblio.org/pub/Linux/system/network/misc/${MY_P}.tar.gz"
+HOMEPAGE="https://www.ibiblio.org/pub/Linux/system/network/misc/"
+SRC_URI="https://www.ibiblio.org/pub/Linux/system/network/misc/${MY_P}.tar.gz"
LICENSE="GPL-1+"
SLOT="0"
diff --git a/net-misc/gsasl/Manifest b/net-misc/gsasl/Manifest
index ba5a93db06ee..cfac23bd3821 100644
--- a/net-misc/gsasl/Manifest
+++ b/net-misc/gsasl/Manifest
@@ -1,5 +1,6 @@
DIST gsasl-2.2.1.tar.gz 3344807 BLAKE2B 3bb1f7dee8510c19215dc8fdc5efd8e53318ab967b4d4af9e48474857a112b0e08872016a5c5bcbd6b1b340f29fbd77623efc6c41a1f87fb734623e2f173e1bf SHA512 161b8a315862a79807ba067c5ae840175b0d8ec14806aceafc3f92d571713b94d1b8c1a5b188c47bf94a79b9a1f133065f96b087baa5e7f360ae7fb8336381ab
DIST gsasl-2.2.2.tar.gz 3254843 BLAKE2B a470697405df87ec6ad98415f2801fa831fdd72eecc951bfe0c16088b95f2a77f2687a5d9081bd86df1094dd198f15729c0e5562d370339975ded99cc1ff8028 SHA512 62fb4a9383392e4816a036f3e8f408c5161a10723e59f0a8f6df5f72101e0b644787f3b07a71c772628fc4f4050960c842c7500736edacd24313ef654e703bc9
EBUILD gsasl-2.2.1.ebuild 2290 BLAKE2B afb070b6a9c206803b3f1f2f66986f721203232e7ee02a14e3e93f297f8a3a2298add1ba48def0a97813baf491ea2ad2bedb5a51b9ca99a90c00b4f01ca27cb8 SHA512 5bda03366f20f32c8851c43ee50071f7f74efa2494462b492ec7bfaa3cc1c04357351d81b9d2eaaebefde9056916e90cfaf3576c06df361f8e7cd6109ccb2dea
+EBUILD gsasl-2.2.2-r1.ebuild 2535 BLAKE2B 975f0c5abea65b4214103dcf80a627d5569e0c8f705b36d6e417ab1622614e78d57a62019a2470bdffc83979193f3e2ab40c104250bdbe0b92e706315f0e7a23 SHA512 5e073b6fd26e37066d5b5dca636ea65cfcf0b2de6417c509543c21a8a28823a3f68c9b3be4b3ca51b193106f10eeecfc2667186ee0b3242ce6f52a3b5bfca444
EBUILD gsasl-2.2.2.ebuild 2147 BLAKE2B d45521036bdb6409146f20d51ba81cbca960b184c9b0585123070e24ddbc552bff0ea6d076872eb0763f02e7158b9d8885db5ec4d467ddd87fc0a0d8a0f040c3 SHA512 cac9458050ccf5fd0a3f4b0a821bff5ebf6000d402a368d266f01edbd9bd887bbd2ea40061930d0a552e0c5008ba1b15cbbcce298c24ad268249cfe9e4e5d79c
MISC metadata.xml 579 BLAKE2B 87f59c4a4c3ba2b3741aac713b47ec1357889afce3d06919705a5e31fba874ba5e0ba53c1a43cfb465d4c3ed138d465060f883afedd882547a39cefd58e20c01 SHA512 ccf34d49ff3453e97e1e4c2c9c769ea7ae201243d3756bd7154cf98581e704ae980a6e82ba8020993e42956a512111972ba2cc39e0f3fe789b1080ebe9e5f351
diff --git a/net-misc/gsasl/gsasl-2.2.2-r1.ebuild b/net-misc/gsasl/gsasl-2.2.2-r1.ebuild
new file mode 100644
index 000000000000..97867eb0c36b
--- /dev/null
+++ b/net-misc/gsasl/gsasl-2.2.2-r1.ebuild
@@ -0,0 +1,104 @@
+# Copyright 1999-2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit multilib-minimal
+
+DESCRIPTION="The GNU SASL client, server, and library"
+HOMEPAGE="https://www.gnu.org/software/gsasl/"
+SRC_URI="mirror://gnu/${PN}/${P}.tar.gz"
+
+LICENSE="GPL-3"
+SLOT="0"
+# Before giving keywords (or ideally even bumping), please check https://www.gnu.org/software/gsasl/ to see
+# if it's a stable release or not!
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux ~ppc-macos"
+IUSE="+client gcrypt gnutls idn kerberos nls ntlm +server static-libs"
+REQUIRED_USE="|| ( client server )"
+
+DEPEND="
+ !net-libs/libgsasl
+ sys-libs/readline:=
+ gcrypt? ( dev-libs/libgcrypt:= )
+ gnutls? ( net-libs/gnutls:= )
+ idn? ( net-dns/libidn:= )
+ kerberos? ( >=net-libs/libgssglue-0.5-r1 )
+ nls? ( >=sys-devel/gettext-0.18.1 )
+ ntlm? ( >=net-libs/libntlm-0.3.5 )
+"
+RDEPEND="${DEPEND}"
+
+QA_CONFIG_IMPL_DECL_SKIP=(
+ # gnulib FPs
+ unreachable
+ MIN
+ alignof
+ static_assert
+)
+
+src_prepare() {
+ default
+ multilib_copy_sources
+}
+
+multilib_src_configure() {
+ local krb5_impl="--with-gssapi-impl=no"
+
+ # See https://blog.josefsson.org/2022/07/14/towards-pluggable-gss-api-modules/
+ if use kerberos; then
+ krb5_impl="--with-gssapi-impl=gssglue"
+ fi
+
+ local myeconfargs=(
+ --disable-gcc-warnings
+ --disable-valgrind-tests
+ --disable-rpath
+
+ --with-packager="Gentoo Linux"
+ --with-packager-bug-reports="https://bugs.gentoo.org"
+ --with-packager-version="r${PR}"
+
+ # Even with multilib we need at least one of these enabled
+ # so rely on REQUIRED_USE to enforce that and purge the non-native
+ # bins in multilib_src_install
+ $(use_enable client)
+ $(use_enable server)
+
+ $(use_enable kerberos gssapi)
+ ${krb5_impl}
+ $(use_enable kerberos gs2)
+
+ $(use_with gcrypt libgcrypt)
+ $(use_with gnutls)
+ $(use_enable nls)
+ $(use_with idn stringprep)
+ $(use_enable ntlm)
+ $(use_enable static-libs static)
+ )
+
+ ECONF_SOURCE="${S}" econf "${myeconfargs[@]}"
+}
+
+multilib_src_install() {
+ default
+
+ if ! multilib_is_native_abi ; then
+ rm -f "${ED}"/usr/bin/gsasl* || die
+ fi
+
+ if ! use static-libs; then
+ rm -f "${ED}"/usr/lib*/lib*.la || die
+ fi
+}
+
+multilib_src_install_all() {
+ doman doc/gsasl.1 doc/man/*.3
+}
+
+pkg_postinst() {
+ ewarn "For USE=kerberos, ${PN} now uses libgssglue to allow choosing"
+ ewarn "the Kerberos implementation at runtime."
+ elog "See https://blog.josefsson.org/2022/07/14/towards-pluggable-gss-api-modules/"
+ elog "for more details."
+}