CVS commit: pkgsrc/sysutils/radmind

["Hauke Fath" <hauke%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   hauke
Date:           Sat Oct 31 20:45:42 UTC 2026

Modified Files:
        pkgsrc/sysutils/radmind: Makefile distinfo
        pkgsrc/sysutils/radmind/patches: patch-ra.sh
Removed Files:
        pkgsrc/sysutils/radmind/patches: patch-Makefile.in patch-cksum.c
            patch-command.c patch-command.h patch-config.h.in patch-configure
            patch-configure.ac patch-ktcheck.c patch-largefile.h patch-lcksum.c
            patch-libsnet_configure patch-libsnet_snet.c
            patch-openssl__compat.c patch-openssl__compat.h patch-retr.c
            patch-stor.c patch-t2pkg.c patch-transcript.c patch-update.c

Log Message:
sysutils/radmind -- update to v1.15.0

1.15.0 - 2026-10-22
Added

    fsdiff -E generates shell-safe transcript paths and link targets: spaces
    are encoded as \ rather than \b. Readers now also accept \ , so
    transcripts can be copied into shell commands without changing their paths.
    fsdiff -t omits differences for files whose only changed attribute is the
    modification timestamp, allowing smaller transcripts when timestamps are
    not significant.

    rash -C generate prints a SHA-1 checksum for the difference transcript of
    applied changes. rash -C <checksum> verifies that checksum in auto mode
    and warns about a mismatch in update and force modes.
    contrib/specialist helps generate special-file transcript entries from a
    path list or an existing transcript.
    Docker image, multi-architecture (including ARM64), Docker Compose, macOS
    package, Ubuntu binary, Homebrew, and GitHub release build workflows.
    bootstrap.sh prepares a source checkout for the ./configure && make
    build workflow.

Changed

    Updated the bundled libsnet dependency and moved its source to the
    GitHub-hosted project.
    Modernized TLS support for OpenSSL 1.1 and later, while retaining
    compatibility shims for older OpenSSL releases. Configuration now detects
    the current OpenSSL version symbol.
    Improved macOS support: APFS resource-fork writes work even when the target
    has no existing resource fork; builds and packages support current macOS
    environments; and the macOS installer now uses pkgbuild/productbuild.
    The build supports parallel make, has corrected program prerequisites, and
    produces uniquely named distribution archives. --with-pam accepts a path;
    configure also detects the appropriate makedev(3) header and common Fink
    installation prefixes.
    Radmind now uses libsnet as a Git submodule; checkout and build
    documentation has been updated accordingly.
    Reworked the project documentation into README.md, with build, Docker,
    Homebrew, and project-history guidance.

Fixed

    Eliminated EVP digest-context leaks and double frees in transfer
    operations, along with several other memory and file-handle leaks.
    Prevented a base64 encode/decode buffer overrun and corrected Finder-info
    encoding length handling.
    Fixed OpenSSL API deprecation and opaque-structure build failures,
    including FreeBSD and Apple-system-OpenSSL compatibility.
    Fixed potential path-buffer overflow when processing file_root.
    Fixed 64-bit time_t support on NetBSD and formatting of custom file mode,
    user, and group metadata.
    lapply -F now warns rather than fails when a file to remove is already
    absent; it also handles APFS resource forks correctly.
    fsdiff -1 - applies exclusions to stdin paths, skips missing stdin paths
    with a warning, and has more robust relative/absolute path
    canonicalization.
    Special-file metadata lookup now checks a per-file transcript, the special
    directory transcript, and the default special transcript, with clearer
    diagnostics and safe path handling.
    Improved configuration parsing: allocation failures are checked, nested
    @include depth is counted correctly, and rejected hosts report the
    configuration file involved.
    t2pkg no longer relies on unnecessary realpath calls; existing output
    directories are accepted. The lcreate manual page was also corrected.

Notes

    The default transcript space encoding remains \b for compatibility with
    older Radmind readers. Use fsdiff -E only where consumers support \ .
    Development infrastructure, CI maintenance, formatting cleanup, and
    release automation changes are included in this release but do
    not alter Radmind's runtime protocol.


To generate a diff of this commit:
cvs rdiff -u -r1.47 -r1.48 pkgsrc/sysutils/radmind/Makefile
cvs rdiff -u -r1.31 -r1.32 pkgsrc/sysutils/radmind/distinfo
cvs rdiff -u -r1.3 -r0 pkgsrc/sysutils/radmind/patches/patch-Makefile.in \
    pkgsrc/sysutils/radmind/patches/patch-command.c \
    pkgsrc/sysutils/radmind/patches/patch-configure \
    pkgsrc/sysutils/radmind/patches/patch-configure.ac \
    pkgsrc/sysutils/radmind/patches/patch-libsnet_snet.c
cvs rdiff -u -r1.2 -r0 pkgsrc/sysutils/radmind/patches/patch-cksum.c \
    pkgsrc/sysutils/radmind/patches/patch-command.h \
    pkgsrc/sysutils/radmind/patches/patch-config.h.in \
    pkgsrc/sysutils/radmind/patches/patch-ktcheck.c \
    pkgsrc/sysutils/radmind/patches/patch-largefile.h \
    pkgsrc/sysutils/radmind/patches/patch-lcksum.c \
    pkgsrc/sysutils/radmind/patches/patch-transcript.c \
    pkgsrc/sysutils/radmind/patches/patch-update.c
cvs rdiff -u -r1.1 -r0 \
    pkgsrc/sysutils/radmind/patches/patch-libsnet_configure \
    pkgsrc/sysutils/radmind/patches/patch-openssl__compat.c \
    pkgsrc/sysutils/radmind/patches/patch-openssl__compat.h \
    pkgsrc/sysutils/radmind/patches/patch-stor.c \
    pkgsrc/sysutils/radmind/patches/patch-t2pkg.c
cvs rdiff -u -r1.2 -r1.3 pkgsrc/sysutils/radmind/patches/patch-ra.sh
cvs rdiff -u -r1.4 -r0 pkgsrc/sysutils/radmind/patches/patch-retr.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/sysutils/radmind/Makefile
diff -u pkgsrc/sysutils/radmind/Makefile:1.47 pkgsrc/sysutils/radmind/Makefile:1.48
--- pkgsrc/sysutils/radmind/Makefile:1.47       Mon Feb  2 20:23:44 2026
+++ pkgsrc/sysutils/radmind/Makefile    Sat Oct 31 20:45:41 2026
@@ -1,36 +1,26 @@
-# $NetBSD: Makefile,v 1.47 2026/02/02 20:23:44 wiz Exp $
+# $NetBSD: Makefile,v 1.48 2026/10/31 20:45:41 hauke Exp $
 
-DISTNAME=      radmind-1.14.1
-PKGREVISION=   13
+DISTNAME=      radmind-1.15.0
 CATEGORIES=    sysutils
-MASTER_SITES=  ${MASTER_SITE_SOURCEFORGE:=radmind/}
+MASTER_SITES=  ${MASTER_SITE_GITHUB:=radmind/}
+GITHUB_PROJECT=        radmind
+GITHUB_RELEASE=        ${DISTNAME}
 
 MAINTAINER=    hauke%NetBSD.org@localhost
-HOMEPAGE=      https://radmind.org/
+HOMEPAGE=      https://github.com/Radmind/
 COMMENT=       Remote file administration and integrity tool
 LICENSE=       modified-bsd
 
 GNU_CONFIGURE=         yes
-CONFIGURE_ARGS+=       --with-openssl=${BUILDLINK_PREFIX.openssl}
+CONFIGURE_ARGS+=       --with-ssl=${BUILDLINK_PREFIX.openssl}
 CONFIGURE_ARGS+=       --with-radminddir=${RADMINDDIR}
-CONFIGURE_ARGS+=       --enable-profiled=no
 CONFIGURE_ENV+=                diffpath=${TOOLS_DIFF:Q}
-# XXX configure script checks for path to echo, which pkgsrc does not
-# provide, so we need to side-step {echopath}.
-CONFIGURE_ENV+=                ac_cv_path_echopath=${TOOLS_ECHO:Q}
 
 USE_LANGUAGES=         c
 USE_CC_FEATURES=       c99
 
 .include "../../mk/compiler.mk"
 
-# libsnet uses K&R function declarations
-.if !empty(CC_VERSION:Mclang-1[5-9].*) || !empty(CC_VERSION:Mclang-[2-9][1-9].*)
-CFLAGS+=               -Wno-deprecated-non-prototype
-.endif
-
-MAKE_JOBS_SAFE=                no
-
 BUILD_TARGET=          all man rash
 RADMINDDIR=            ${VARBASE}/radmind
 BUILD_DEFS+=           VARBASE

Index: pkgsrc/sysutils/radmind/distinfo
diff -u pkgsrc/sysutils/radmind/distinfo:1.31 pkgsrc/sysutils/radmind/distinfo:1.32
--- pkgsrc/sysutils/radmind/distinfo:1.31       Fri Nov 21 19:46:40 2025
+++ pkgsrc/sysutils/radmind/distinfo    Sat Oct 31 20:45:41 2026
@@ -1,25 +1,6 @@
-$NetBSD: distinfo,v 1.31 2025/11/21 19:46:40 hauke Exp $
+$NetBSD: distinfo,v 1.32 2026/10/31 20:45:41 hauke Exp $
 
-BLAKE2s (radmind-1.14.1.tar.gz) = ecab16cf79583ade0b5064fb8f61e2882017b696f04184c6825b9e2cf8d1c34e
-SHA512 (radmind-1.14.1.tar.gz) = bccf9681a6899be3b500065237dd1e04cd83ffb6f9be0e355412e7b0c556325f7d13435cec65a8a5e156e4411da915744f01a615472f6361d52c4d54d8be20eb
-Size (radmind-1.14.1.tar.gz) = 403553 bytes
-SHA1 (patch-Makefile.in) = b7222e8854172104545f3bfd10b843cc3df85ce8
-SHA1 (patch-cksum.c) = 92cc806e8e79e6d4887dba5e838a561e6d59c5d5
-SHA1 (patch-command.c) = b05e15a95571f5df20b3fd2557e11183e196e27c
-SHA1 (patch-command.h) = 03daa77363c681ef625cf429071f02245689e1e9
-SHA1 (patch-config.h.in) = 89bce7b9d256e81ebb6ce1319183cb346260bcde
-SHA1 (patch-configure) = 8db0105f8d0c06129b798f51a2a17bf39514d5d3
-SHA1 (patch-configure.ac) = 706aba64e3427bda499b9935d8c92922a32d1224
-SHA1 (patch-ktcheck.c) = 83c03e417fc93863a8575b0cb2f93e09cba1d937
-SHA1 (patch-largefile.h) = 806f12878aa628f30355b82ac23a5c92740f42a1
-SHA1 (patch-lcksum.c) = 7b7b4da338bb13f2508c5b22307263eaedb32347
-SHA1 (patch-libsnet_configure) = d015bc445f3f4d6f790a287547a3d7655feaf700
-SHA1 (patch-libsnet_snet.c) = f47b805d68c1e55581503fe33a748bd495c5db33
-SHA1 (patch-openssl__compat.c) = 0076abec076f29764d86ec1fc3b0bf7092c7dd18
-SHA1 (patch-openssl__compat.h) = d73ce65dde6e48e378feded637b7b6a4d8e36047
-SHA1 (patch-ra.sh) = 05ba697814bf4833a9c38f881e43639067afba29
-SHA1 (patch-retr.c) = aa667fd76300c8526b1c75137880da83220a2699
-SHA1 (patch-stor.c) = f0a5a94222513a02d6cae3f2141e592866765fcb
-SHA1 (patch-t2pkg.c) = 8c8379ad8e33fc07c83d04c944fb1e425775739c
-SHA1 (patch-transcript.c) = 2fab20d210317b0e0ba52102359588670ba5f941
-SHA1 (patch-update.c) = 2b951451fc1b91492eb0efe16d28e21c5e8d0470
+BLAKE2s (radmind-1.15.0.tar.gz) = 4d0efc96b2e8d9655db88757c915514783f5ab96ead5e57191517a284cb72965
+SHA512 (radmind-1.15.0.tar.gz) = 550367ef502eb6333a2864ea08f7929e5e4e52fa8395f5af7136e43a7cb89ab28cde9d731d6d3e548535e027fa3a03d0c8070e0dc78380e83343e078bdc77cce
+Size (radmind-1.15.0.tar.gz) = 424259 bytes
+SHA1 (patch-ra.sh) = 7843f5cb3c192c919bc7ac9989841d3d05e57932

Index: pkgsrc/sysutils/radmind/patches/patch-ra.sh
diff -u pkgsrc/sysutils/radmind/patches/patch-ra.sh:1.2 pkgsrc/sysutils/radmind/patches/patch-ra.sh:1.3
--- pkgsrc/sysutils/radmind/patches/patch-ra.sh:1.2     Tue Dec 18 14:16:18 2018
+++ pkgsrc/sysutils/radmind/patches/patch-ra.sh Sat Oct 31 20:45:42 2026
@@ -1,10 +1,12 @@
-$NetBSD: patch-ra.sh,v 1.2 2018/12/18 14:16:18 hauke Exp $
+$NetBSD: patch-ra.sh,v 1.3 2026/10/31 20:45:42 hauke Exp $
 
 Insert pkgsrc-style defaults file
 
---- ra.sh.orig 2010-12-13 03:42:49.000000000 +0000
+echo(1) is a shell built-in these days
+
+--- ra.sh.orig 2026-10-23 00:02:17.000000000 +0000
 +++ ra.sh
-@@ -31,7 +31,7 @@ EDITOR=${EDITOR:-vi}
+@@ -31,13 +31,13 @@ EDITOR=${EDITOR:-vi}
  PAGER=${PAGER:-cat}
  USER=${SUDO_USER:-$USER}
  TMPDIR="${TMPDIR:=/tmp}"
@@ -13,6 +15,13 @@ Insert pkgsrc-style defaults file
  FSDIFFROOT="."
  DEFAULTWORKDIR="/"
  FLAG="_RADMIND_DIR/client/.RadmindRunning"
+ CHECKEDOUT="_RADMIND_DIR/client/.CheckedOut"
+ MAILDOMAIN="_RADMIND_MAIL_DOMAIN"
+-ECHO="_RADMIND_ECHO_PATH"
++ECHO="echo"
+ VERSION=_RADMIND_VERSION
+ 
+ # variable containing all network-related flags (-w, -h, -p, etc.) 
 @@ -46,7 +46,7 @@ NETOPTS=
  PREAPPLY="_RADMIND_PREAPPLY"
  POSTAPPLY="_RADMIND_POSTAPPLY"