security/krb5-119: Remove expired port

2024-04-15 security/krb5-119: Desupported by MIT following 1.21

18 files changed, 1 insertions, 661 deletions

diff --git a/MOVED b/MOVED
index 180060f125e8..4669534d12c4 100644
--- a/MOVED
+++ b/MOVED
@@ -3184,3 +3184,4 @@ x11/multi-aterm||2024-04-13|Has expired: Unmaintained, last upstream release in
 devel/py-dateutil|devel/py-python-dateutil|2024-04-13|Move devel/py-dateutil to devel/py-python-dateutil
 science/p5-Algorithm-SVMLight||2024-04-16|Has expired: Depends on DEPRECATED science/svmlight
 science/svmlight||2024-04-16|Has expired: Unmaintained, last upstream release in 2008 and there are more modern alternatives
+security/krb5-119||2024-04-16|Has expired: Desupported by MIT following 1.21
diff --git a/security/Makefile b/security/Makefile
index 5fca409fea1c..711aacd4cc1b 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -269,7 +269,6 @@
     SUBDIR += kpkpass
     SUBDIR += kpmenu
     SUBDIR += krb5
-    SUBDIR += krb5-119
     SUBDIR += krb5-120
     SUBDIR += krb5-121
     SUBDIR += krb5-devel
diff --git a/security/krb5-119/Makefile b/security/krb5-119/Makefile
deleted file mode 100644
index 6258b3a7f307..000000000000
--- a/security/krb5-119/Makefile
+++ /dev/null
@@ -1,175 +0,0 @@
-PORTNAME=		krb5
-PORTVERSION=		1.19.4
-PORTREVISION=		2
-CATEGORIES=		security
-MASTER_SITES=		http://web.mit.edu/kerberos/dist/${PORTNAME}/${PORTVERSION:C/^[0-9]*\.[0-9]*/&X/:C/X\.[0-9]*$//:C/X//}/
-.if !defined(MASTERDIR)
-PKGNAME_X=		-${FLAVOR:S/default//}-119
-.else
-PKGNAME_X=		-${FLAVOR:S/default//}
-.endif
-PKGNAMESUFFIX=		${PKGNAME_X:S/--/-/:C/-$//}
-
-DEPRECATED=		Desupported by MIT following 1.21
-EXPIRATION_DATE=	2024-04-15
-
-PATCH_SITES=		http://web.mit.edu/kerberos/advisories/
-PATCH_DIST_STRIP=	-p2
-
-MAINTAINER=		cy@FreeBSD.org
-COMMENT=		MIT implementation of RFC 4120 network authentication service
-WWW=			https://web.mit.edu/kerberos/
-
-LICENSE=		MIT
-
-CONFLICTS=		heimdal krb5 krb5-118 krb5-12*
-CONFLICTS_BUILD=	boringssl
-
-KERBEROSV_URL=		http://web.mit.edu/kerberos/
-USES=			autoreconf compiler:c++11-lang cpe gmake gettext-runtime \
-			gssapi:bootstrap,mit libtool:build localbase \
-			perl5 pkgconfig ssl
-BROKEN_SSL=	openssl openssl31
-BROKEN_SSL_REASON=	Requires OpenSSL 3.0.0 deprecated RSA_ routines
-BROKEN_FreeBSD_13=	compile-time support without -DINET6... ./configure syntax error
-BROKEN_FreeBSD_14=	Incompatible with OpenSSL 3.0 in 14-STABLE
-BROKEN_FreeBSD_15=	Incompatible with OpenSSL 3.0 in 15-CURRENT
-USE_CSTD=		gnu99
-USE_LDCONFIG=		yes
-USE_PERL5=		build
-GNU_CONFIGURE=		yes
-CONFIGURE_ARGS?=	--enable-shared --without-system-verto \
-			--disable-rpath
-GNU_CONFIGURE_MANPREFIX=${PREFIX}/share
-CONFIGURE_ENV=		INSTALL="${INSTALL}" INSTALL_LIB="${INSTALL_LIB}" YACC="${YACC}"
-MAKE_ARGS=		INSTALL="${INSTALL}" INSTALL_LIB="${INSTALL_LIB}"
-
-CPE_VENDOR=		mit
-CPE_VERSION=		5-${PORTVERSION}
-CPE_PRODUCT=		kerberos
-
-FLAVORS=		default ldap
-
-OPTIONS_DEFINE=		EXAMPLES NLS KRB5_PDF KRB5_HTML DNS_FOR_REALM LDAP LMDB
-OPTIONS_DEFAULT=	KRB5_PDF KRB5_HTML READLINE
-OPTIONS_RADIO=		CMD_LINE_EDITING
-OPTIONS_RADIO_CMD_LINE_EDITING=	READLINE LIBEDIT LIBEDIT_BASE
-CMD_LINE_EDITING_DESC=	Command line editing for kadmin and ktutil
-KRB5_PDF_DESC=		Install krb5 PDF documentation
-KRB5_HTML_DESC=		Install krb5 HTML documentation
-DNS_FOR_REALM_DESC=	Enable DNS lookups for Kerberos realm names
-DNS_FOR_REALM_CONFIGURE_ENABLE=	dns-for-realm
-LDAP=			Enable LDAP support
-LDAP_USES=		ldap
-LDAP_CONFIGURE_WITH=	ldap
-LMDB_DESC=		OpenLDAP Lightning Memory-Mapped Database support
-LMDB_CONFIGURE_WITH=	lmdb
-LMDB_LIB_DEPENDS=	liblmdb.so:databases/lmdb
-LMDB_IMPLIES=		LDAP
-NLS_USES=		gettext
-NLS_CONFIGURE_OFF=	--disable-nls
-READLINE_USES=		readline
-READLINE_CONFIGURE_WITH=readline
-LIBEDIT_USES=		libedit
-LIBEDIT_CONFIGURE_WITH=	libedit
-LIBEDIT_BASE_CONFIGURE_WITH=	libedit
-LIBEDIT_BASE_DESC=	Use libedit in FreeBSD base
-
-.if ${FLAVOR:U} == ldap
-OPTIONS_DEFAULT+=	LDAP LMDB
-.endif
-
-.if defined(KRB5_HOME)
-PREFIX=			${KRB5_HOME}
-.endif
-.if !defined(KRB5_LOCALSTATEDIR)
-KRB5_LOCALSTATEDIR=	"${PREFIX}/var"
-.endif
-.if !defined(KRB5_RUNSTATEDIR)
-KRB5_RUNSTATEDIR=	"${PREFIX}/var/run"
-.endif
-CONFIGURE_ARGS+=	--runstatedir="${KRB5_RUNSTATEDIR}"
-CONFIGURE_ARGS+=	--localstatedir="${KRB5_LOCALSTATEDIR}"
-PLIST_SUB+=		KRB5_LOCALSTATEDIR=${KRB5_LOCALSTATEDIR}
-PLIST_SUB+=		KRB5_RUNSTATEDIR=${KRB5_RUNSTATEDIR}
-CPPFLAGS+=		-I${OPENSSLINC}
-LDFLAGS+=		-L${OPENSSLLIB}
-
-USE_RC_SUBR=		kpropd
-OPTIONS_SUB=		yes
-WRKSRC_SUBDIR=		src
-PORTEXAMPLES=		kdc.conf krb5.conf services.append
-
-.include <bsd.port.options.mk>
-
-# Fix up -Wl,-rpath in LDFLAGS
-.if !empty(KRB5_HOME)
-_RPATH=	${KRB5_HOME}/lib:
-.else
-_RPATH=	${LOCALBASE}/lib:
-.endif
-.if !empty(LDFLAGS:M-Wl,-rpath,*)
-.for F in ${LDFLAGS:M-Wl,-rpath,*}
-LDFLAGS:=	-Wl,-rpath,${_RPATH}${F:S/-Wl,-rpath,//} \
-		${LDFLAGS:N-Wl,-rpath,*}
-.endfor
-.endif
-
-.if defined(KRB5_HOME) && ${KRB5_HOME} != ${LOCALBASE}
-BROKEN=			LIB_DEPENDS when using KRB5_HOME is broken
-.endif
-
-.if defined(PROGRAM_TRANSFORM_NAME) && ${PROGRAM_TRANSFORM_NAME} != ""
-CONFIGURE_ARGS+=	--program-transform-name="${PROGRAM_TRANSFORM_NAME}"
-.endif
-
-HTML_DOC_DIR=		${WRKDIR}/${PORTNAME}-${PORTVERSION}/doc/html
-PDF_DOC_DIR=		${WRKDIR}/${PORTNAME}-${PORTVERSION}/doc/pdf
-
-.include <bsd.port.pre.mk>
-
-post-install:
-	@${MKDIR} ${STAGEDIR}${PREFIX}/share/doc/krb5
-# html documentation
-.if ${PORT_OPTIONS:MKRB5_PDF}
-	pdf_files=`${FIND} ${PDF_DOC_DIR} ! -type d`
-	pdf_dirs=`${FIND} ${PDF_DOC_DIR} -type d`
-	for i in $${pdf_dirs}; do \
-		${MKDIR} ${STAGEDIR}${PREFIX}/share/doc/krb5/$${i}; \
-	done; \
-	for i in $${pdf_files}; do \
-		${INSTALL_DATA} $${pdf} ${PREFIX}/share/doc/krb5/$${i}; \
-		${ECHO_CMD} share/doc/krb5/$${i} >> ${TMPPLIST}; \
-	done
-.endif
-.if ${PORT_OPTIONS:MKRB5_HTML}
-	html_files=`${FIND} ${HTML_DOC_DIR} ! -type d | ${GREP} -v /_sources`
-	html_dirs=`${FIND} ${HTML_DOC_DIR} -type d | ${GREP} -v /_sources`
-	for i in $${html_dirs}; do \
-		${MKDIR} ${PREFIX}/share/doc/krb5/$${i}; \
-	done; \
-	for i in $${html_files}; do \
-		${INSTALL_DATA} $${i} ${PREFIX}/share/doc/krb5/$${i}; \
-		${ECHO_CMD} share/doc/krb5/$${i} >> ${TMPPLIST}; \
-	done
-.endif
-.if ${PORT_OPTIONS:MKRB5_PDF}
-	for i in $${pdf_dirs}; do \
-		${ECHO_CMD} @dir share/doc/krb5/$${i} >> ${TMPPLIST}; \
-	done | ${TAIL} -r >> ${TMPPLIST}
-.endif
-.if ${PORT_OPTIONS:MKRB5_HTML}
-	for i in $${html_dirs}; do \
-		${ECHO_CMD} @dir share/doc/krb5/$${i} >> ${TMPPLIST}; \
-	done | ${TAIL} -r >> ${TMPPLIST}
-.endif
-	${ECHO_CMD} @dir share/doc/krb5 >> ${TMPPLIST}
-
-post-install-LDAP-on:
-	${MKDIR} ${STAGEDIR}${DATADIR}
-	${INSTALL_DATA} ${WRKSRC}/plugins/kdb/ldap/libkdb_ldap/kerberos.schema \
-		${STAGEDIR}${DATADIR}
-	${INSTALL_DATA} ${WRKSRC}/plugins/kdb/ldap/libkdb_ldap/kerberos.ldif \
-		${STAGEDIR}${DATADIR}
-
-.include <bsd.port.post.mk>
diff --git a/security/krb5-119/distinfo b/security/krb5-119/distinfo
deleted file mode 100644
index 18f4b804ed0d..000000000000
--- a/security/krb5-119/distinfo
+++ /dev/null
@@ -1,5 +0,0 @@
-TIMESTAMP = 1668532438
-SHA256 (krb5-1.19.4.tar.gz) = 41f5981c5a4de0a26b3937e679a116cd5b3739641fd253124aac91f7179b54eb
-SIZE (krb5-1.19.4.tar.gz) = 8740154
-SHA256 (2022-001-patch-r119.txt) = e6e50807528cdda07fe8d946b0b417403168ff1e442ed4dbf099f20262c25867
-SIZE (2022-001-patch-r119.txt) = 3536
diff --git a/security/krb5-119/files/kdc.in b/security/krb5-119/files/kdc.in
deleted file mode 100644
index d462d45d47f6..000000000000
--- a/security/krb5-119/files/kdc.in
+++ /dev/null
@@ -1,4 +0,0 @@
-#!/bin/sh -
-
-set -- $(echo "$*" | sed 's/--detach//')
-exec %%PREFIX%%/sbin/krb5kdc "$@"
diff --git a/security/krb5-119/files/kpropd.in b/security/krb5-119/files/kpropd.in
deleted file mode 100644
index d2147af059d7..000000000000
--- a/security/krb5-119/files/kpropd.in
+++ /dev/null
@@ -1,26 +0,0 @@
-#!/bin/sh
-
-# PROVIDE: kpropd
-# REQUIRE: LOGIN
-# KEYWORD: shutdown
-#
-# Add the following lines to /etc/rc.conf.local or /etc/rc.conf
-# to enable this service:
-#
-# kpropd_enable (bool):      Set to NO by default.
-#                            Set it to YES to enable kpropd.
-# kpropd_flags (str):        Set to "" by default.
-
-. /etc/rc.subr
-
-name=kpropd
-rcvar=kpropd_enable
-
-load_rc_config $name
-
-: ${kpropd_enable:="NO"}
-: ${kpropd_flags=""}
-
-command=%%PREFIX%%/sbin/${name}
-
-run_rc_command "$1"
diff --git a/security/krb5-119/files/patch-clients__ksu__Makefile.in b/security/krb5-119/files/patch-clients__ksu__Makefile.in
deleted file mode 100644
index d0201d41d862..000000000000
--- a/security/krb5-119/files/patch-clients__ksu__Makefile.in
+++ /dev/null
@@ -1,18 +0,0 @@
---- clients/ksu/Makefile.in.orig	2014-01-15 16:44:15.000000000 -0800
-+++ clients/ksu/Makefile.in	2014-05-05 20:51:51.925985974 -0700
-@@ -1,6 +1,6 @@
- mydir=clients$(S)ksu
- BUILDTOP=$(REL)..$(S)..
--DEFINES = -DGET_TGT_VIA_PASSWD -DPRINC_LOOK_AHEAD -DCMD_PATH='"/usr/local/sbin /usr/local/bin /sbin /bin /usr/sbin /usr/bin"'
-+DEFINES = -DGET_TGT_VIA_PASSWD -DPRINC_LOOK_AHEAD -DCMD_PATH='"/usr/bin /bin /usr/sbin /sbin"' -DDEBUG
- 
- KSU_LIBS=@KSU_LIBS@
- 
-@@ -30,6 +30,6 @@
- 
- install::
- 	-for f in ksu; do \
--	  $(INSTALL_SETUID) $$f \
-+	  $(INSTALL_PROGRAM) $$f \
- 		$(DESTDIR)$(CLIENT_BINDIR)/`echo $$f|sed '$(transform)'`; \
- 	done
diff --git a/security/krb5-119/files/patch-config__pre.in b/security/krb5-119/files/patch-config__pre.in
deleted file mode 100644
index 5f85e8f1db82..000000000000
--- a/security/krb5-119/files/patch-config__pre.in
+++ /dev/null
@@ -1,27 +0,0 @@
---- config/pre.in.orig	2018-05-03 07:34:47.000000000 -0700
-+++ config/pre.in	2018-07-01 20:36:56.770685000 -0700
-@@ -181,9 +181,9 @@
- INSTALL=@INSTALL@
- INSTALL_STRIP=
- INSTALL_PROGRAM=@INSTALL_PROGRAM@ $(INSTALL_STRIP)
--INSTALL_SCRIPT=@INSTALL_PROGRAM@
-+INSTALL_SCRIPT=@INSTALL_SCRIPT@
- INSTALL_DATA=@INSTALL_DATA@
--INSTALL_SHLIB=@INSTALL_SHLIB@
-+INSTALL_SHLIB=$(INSTALL_LIB)
- INSTALL_SETUID=$(INSTALL) $(INSTALL_STRIP) -m 4755 -o root
- ## This is needed because autoconf will sometimes define @exec_prefix@ to be
- ## ${prefix}.
-@@ -200,10 +200,11 @@
- ADMIN_BINDIR = @sbindir@
- SERVER_BINDIR = @sbindir@
- CLIENT_BINDIR =@bindir@
--PKGCONFIG_DIR = @libdir@/pkgconfig
-+PKGCONFIG_DIR = $(prefix)/libdata/pkgconfig
- ADMIN_MANDIR = $(KRB5MANROOT)/man8
- SERVER_MANDIR = $(KRB5MANROOT)/man8
- CLIENT_MANDIR = $(KRB5MANROOT)/man1
-+SUBR_MANDIR = $(KRB5MANROOT)/man3
- FILE_MANDIR = $(KRB5MANROOT)/man5
- ADMIN_CATDIR = $(KRB5MANROOT)/cat8
- SERVER_CATDIR = $(KRB5MANROOT)/cat8
diff --git a/security/krb5-119/files/patch-config__shlib.conf b/security/krb5-119/files/patch-config__shlib.conf
deleted file mode 100644
index 3697783e47be..000000000000
--- a/security/krb5-119/files/patch-config__shlib.conf
+++ /dev/null
@@ -1,22 +0,0 @@
---- config/shlib.conf.orig	2015-05-08 16:27:02.000000000 -0700
-+++ config/shlib.conf	2015-10-20 21:54:39.834348929 -0700
-@@ -320,14 +320,15 @@
- 			PICFLAGS=-fpic
- 			;;
- 	esac
--	SHLIBVEXT='.so.$(LIBMAJOR)'
--	RPATH_FLAG='-Wl,--enable-new-dtags -Wl,-rpath -Wl,'
-+	SHLIBVEXT='.so.$(LIBMAJOR).$(LIBMINOR)'
-+	SHLIBSEXT='.so.$(LIBMAJOR)'
-+	LDCOMBINE='libtool --tag=CC --mode=link cc -Xcompiler -shared -Wl,-soname=$(LIBPREFIX)$(LIBBASE)$(SHLIBVEXT)'
-+	RPATH_FLAG='-Wl,-rpath -Wl,'
- 	PROG_RPATH_FLAGS='$(RPATH_FLAG)$(PROG_RPATH)'
- 	CC_LINK_SHARED='$(CC) $(PROG_LIBPATH) $(PROG_RPATH_FLAGS) $(CFLAGS) $(LDFLAGS)'
- 	CXX_LINK_SHARED='$(CXX) $(PROG_LIBPATH) $(PROG_RPATH_FLAGS) $(CXXFLAGS) $(LDFLAGS)'
- 	SHLIBEXT=.so
--	LDCOMBINE='ld -Bshareable'
--	SHLIB_RPATH_FLAGS='--enable-new-dtags -rpath $(SHLIB_RDIRS)'
-+	SHLIB_RPATH_FLAGS='-rpath $(SHLIB_RDIRS)'
- 	SHLIB_EXPFLAGS='$(SHLIB_RPATH_FLAGS) $(SHLIB_DIRS) $(SHLIB_EXPLIBS)'
- 	CC_LINK_STATIC='$(CC) $(PROG_LIBPATH) $(CFLAGS) $(LDFLAGS)'
- 	CXX_LINK_STATIC='$(CXX) $(PROG_LIBPATH) $(CXXFLAGS) $(LDFLAGS)'
diff --git a/security/krb5-119/files/patch-configure.ac b/security/krb5-119/files/patch-configure.ac
deleted file mode 100644
index abbae0e771b3..000000000000
--- a/security/krb5-119/files/patch-configure.ac
+++ /dev/null
@@ -1,17 +0,0 @@
---- configure.ac.orig	2023-08-07 11:38:21.000000000 -0700
-+++ configure.ac	2023-08-09 14:49:19.833149000 -0700
-@@ -1356,8 +1356,12 @@
-     AC_DEFINE([HAVE_LIBEDIT], 1, [Define if building with libedit.])
-     AC_MSG_NOTICE([Using libedit for readline support])
-   elif test "x$with_libedit" = xyes; then
--    # We were explicitly asked for libedit and couldn't find it.
--    AC_MSG_ERROR([Could not detect libedit with pkg-config])
-+    AC_MSG_NOTICE([Using libedit in FreeBSD base])
-+    AC_CHECK_LIB([edit], [main], :,
-+               AC_MSG_ERROR([Could not detect libedit]))
-+    AC_DEFINE([HAVE_LIBEDIT], 1, [Define if building with libedit.])
-+    RL_CFLAGS=-DFreeBSD_BASE_EDITLINE
-+    RL_LIBS='-ledit'
-   else
-     AC_MSG_NOTICE([Not using any readline support])
-   fi
diff --git a/security/krb5-119/files/patch-lib-krb5-os-localaddr.c b/security/krb5-119/files/patch-lib-krb5-os-localaddr.c
deleted file mode 100644
index 06b6043f22c9..000000000000
--- a/security/krb5-119/files/patch-lib-krb5-os-localaddr.c
+++ /dev/null
@@ -1,75 +0,0 @@
---- lib/krb5/os/localaddr.c.orig	2009-10-30 20:17:27.000000000 -0700
-+++ lib/krb5/os/localaddr.c	2010-04-19 12:39:56.707090973 -0700
-@@ -175,6 +175,7 @@
- }
- #endif
- 
-+#if 0
- static int
- is_loopback_address(struct sockaddr *sa)
- {
-@@ -191,6 +192,7 @@
-         return 0;
-     }
- }
-+#endif
- 
- #ifdef HAVE_IFADDRS_H
- #include <ifaddrs.h>
-@@ -467,12 +469,14 @@
-             ifp->ifa_flags &= ~IFF_UP;
-             continue;
-         }
-+#if 0
-         if (is_loopback_address(ifp->ifa_addr)) {
-             /* Pretend it's not up, so the second pass will skip
-                it.  */
-             ifp->ifa_flags &= ~IFF_UP;
-             continue;
-         }
-+#endif
-         /* If this address is a duplicate, punt.  */
-         match = 0;
-         for (ifp2 = ifp_head; ifp2 && ifp2 != ifp; ifp2 = ifp2->ifa_next) {
-@@ -601,11 +605,13 @@
-             }
-             /*@=moduncon@*/
- 
-+#if 0
-             /* None of the current callers want loopback addresses.  */
-             if (is_loopback_address((struct sockaddr *)&lifr->lifr_addr)) {
-                 Tprintf (("  loopback\n"));
-                 goto skip;
-             }
-+#endif
-             /* Ignore interfaces that are down.  */
-             if ((lifreq.lifr_flags & IFF_UP) == 0) {
-                 Tprintf (("  down\n"));
-@@ -772,11 +778,13 @@
-             }
-             /*@=moduncon@*/
- 
-+#if 0
-             /* None of the current callers want loopback addresses.  */
-             if (is_loopback_address(&lifr->iflr_addr)) {
-                 Tprintf (("  loopback\n"));
-                 goto skip;
-             }
-+#endif
-             /* Ignore interfaces that are down.  */
-             if ((lifreq.iflr_flags & IFF_UP) == 0) {
-                 Tprintf (("  down\n"));
-@@ -987,11 +995,13 @@
-         }
-         /*@=moduncon@*/
- 
-+#if 0
-         /* None of the current callers want loopback addresses.  */
-         if (is_loopback_address(&ifreq.ifr_addr)) {
-             Tprintf (("  loopback\n"));
-             goto skip;
-         }
-+#endif
-         /* Ignore interfaces that are down.  */
-         if ((ifreq.ifr_flags & IFF_UP) == 0) {
-             Tprintf (("  down\n"));
diff --git a/security/krb5-119/files/patch-lib__gssapi__krb5__import_name.c b/security/krb5-119/files/patch-lib__gssapi__krb5__import_name.c
deleted file mode 100644
index 40f116af2196..000000000000
--- a/security/krb5-119/files/patch-lib__gssapi__krb5__import_name.c
+++ /dev/null
@@ -1,14 +0,0 @@
---- lib/gssapi/krb5/import_name.c.orig	Mon Jul 18 15:12:42 2005
-+++ lib/gssapi/krb5/import_name.c	Tue Nov  8 09:53:58 2005
-@@ -33,6 +33,11 @@
- #endif
- #endif
- 
-+#include <sys/param.h>
-+#if __FreeBSD_version < 500100
-+#include <stdio.h>
-+#endif
-+
- #ifdef HAVE_STRING_H
- #include <string.h>
- #else
diff --git a/security/krb5-119/files/patch-plugins_preauth_pkinit_pkinit__crypto__openssl.c b/security/krb5-119/files/patch-plugins_preauth_pkinit_pkinit__crypto__openssl.c
deleted file mode 100644
index bb8ac5b8d049..000000000000
--- a/security/krb5-119/files/patch-plugins_preauth_pkinit_pkinit__crypto__openssl.c
+++ /dev/null
@@ -1,34 +0,0 @@
---- plugins/preauth/pkinit/pkinit_crypto_openssl.c.orig	2019-01-08 08:02:37.000000000 -0800
-+++ plugins/preauth/pkinit/pkinit_crypto_openssl.c	2019-05-02 12:18:53.494194000 -0700
-@@ -189,7 +189,8 @@
-     (*_x509_pp) = PKCS7_cert_from_signer_info(_p7,_si)
- #endif
- 
--#if OPENSSL_VERSION_NUMBER < 0x10100000L
-+#if (defined(OPENSSL_VERSION_NUMBER) && OPENSSL_VERSION_NUMBER < 0x10100000L) || \
-+     defined(LIBRESSL_VERSION_NUMBER)
- 
- /* 1.1 standardizes constructor and destructor names, renaming
-  * EVP_MD_CTX_{create,destroy} and deprecating ASN1_STRING_data. */
-@@ -249,6 +250,10 @@
- 
- #endif
- 
-+#if defined(LIBRESSL_VERSION_NUMBER) && !defined(static_ASN1_SEQUENCE_END_name)
-+#define static_ASN1_SEQUENCE_END_name	ASN1_SEQUENCE_END_name
-+#endif
-+
- static struct pkcs11_errstrings {
-     short code;
-     char *text;
-@@ -3053,7 +3058,9 @@
-     return retval;
- }
- 
--#if OPENSSL_VERSION_NUMBER >= 0x10100000L
-+#if ((defined(OPENSSL_VERSION_NUMBER) && OPENSSL_VERSION_NUMBER >= 0x10100000L) && \
-+     !defined(LIBRESSL_VERSION_NUMBER)) || \
-+     (defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER >= 0x20900000L)
- 
- /*
-  * We need to decode DomainParameters from RFC 3279 section 2.3.3.  We would
diff --git a/security/krb5-119/files/patch-plugins_preauth_pkinit_pkinit__crypto__openssl.h b/security/krb5-119/files/patch-plugins_preauth_pkinit_pkinit__crypto__openssl.h
deleted file mode 100644
index 0cc2e38a4f59..000000000000
--- a/security/krb5-119/files/patch-plugins_preauth_pkinit_pkinit__crypto__openssl.h
+++ /dev/null
@@ -1,13 +0,0 @@
---- plugins/preauth/pkinit/pkinit_crypto_openssl.h.orig	2018-11-01 23:51:07 UTC
-+++ plugins/preauth/pkinit/pkinit_crypto_openssl.h
-@@ -46,7 +46,9 @@
- #include <openssl/asn1.h>
- #include <openssl/pem.h>
- 
--#if OPENSSL_VERSION_NUMBER >= 0x10100000L
-+#if ((defined(OPENSSL_VERSION_NUMBER) && OPENSSL_VERSION_NUMBER >= 0x10100000L) && \
-+     !defined(LIBRESSL_VERSION_NUMBER)) || \
-+     (defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER >= 0x20900000L)
- #include <openssl/asn1t.h>
- #else
- #include <openssl/asn1_mac.h>
diff --git a/security/krb5-119/files/patch-util_et_Makefile.in b/security/krb5-119/files/patch-util_et_Makefile.in
deleted file mode 100644
index d8c01663506b..000000000000
--- a/security/krb5-119/files/patch-util_et_Makefile.in
+++ /dev/null
@@ -1,17 +0,0 @@
---- util/et/Makefile.in.orig	2018-05-03 07:34:47.000000000 -0700
-+++ util/et/Makefile.in	2018-07-01 20:16:24.159117000 -0700
-@@ -111,12 +111,13 @@
- 	path
- 	$(OUTPRE)test_et$(EXEEXT)
- 
--install-unix: compile_et compile_et.1
-+install-unix: compile_et compile_et.1 com_err.3
- 	$(INSTALL) compile_et $(DESTDIR)$(bindir)/compile_et
- 	test -d $(DESTDIR)$(mydatadir) || mkdir $(DESTDIR)$(mydatadir)
- 	$(INSTALL_DATA) $(srcdir)/et_c.awk $(DESTDIR)$(mydatadir)
- 	$(INSTALL_DATA) $(srcdir)/et_h.awk $(DESTDIR)$(mydatadir)
- 	$(INSTALL_DATA) $(srcdir)/compile_et.1 $(DESTDIR)$(CLIENT_MANDIR)/compile_et.1
-+	$(INSTALL_DATA) $(srcdir)/com_err.3 $(DESTDIR)$(SUBR_MANDIR)/com_err.3
- 
- 
- install-headers: compile_et
diff --git a/security/krb5-119/files/patch-util_ss_listen.c b/security/krb5-119/files/patch-util_ss_listen.c
deleted file mode 100644
index 127784b0e2c0..000000000000
--- a/security/krb5-119/files/patch-util_ss_listen.c
+++ /dev/null
@@ -1,14 +0,0 @@
---- util/ss/listen.c.orig	2023-08-07 11:38:21.000000000 -0700
-+++ util/ss/listen.c	2023-08-09 13:09:30.816661000 -0700
-@@ -15,7 +15,11 @@
- #include <sys/param.h>
- 
- #if defined(HAVE_LIBEDIT)
-+#if defined(FreeBSD_BASE_EDITLINE)
-+#include <edit/readline/readline.h>
-+#else
- #include <editline/readline.h>
-+#endif
- #elif defined(HAVE_READLINE)
- #include <readline/readline.h>
- #include <readline/history.h>
diff --git a/security/krb5-119/pkg-descr b/security/krb5-119/pkg-descr
deleted file mode 100644
index 04d20cac8766..000000000000
--- a/security/krb5-119/pkg-descr
+++ /dev/null
@@ -1,22 +0,0 @@
-Kerberos V5 is an authentication system developed at MIT.
-Abridged from the User Guide:
-       Under Kerberos, a client sends a request for a ticket to the
-   Key Distribution Center (KDC). The KDC creates a ticket-granting
-   ticket (TGT) for the client, encrypts it using the client's
-   password as the key, and sends the encrypted TGT back to the
-   client. The client then attempts to decrypt the TGT, using
-   its password. If the client successfully decrypts the TGT, it
-   keeps the decrypted TGT, which indicates proof of the client's
-   identity. The TGT permits the client to obtain additional tickets,
-   which give permission for specific services.
-       Since Kerberos negotiates authenticated, and optionally encrypted,
-   communications between two points anywhere on the internet, it
-   provides a layer of security that is not dependent on which side of a
-   firewall either client is on.
-       The Kerberos V5 package is designed to be easy to use. Most of the
-   commands are nearly identical to UNIX network programs you are already
-   used to. Kerberos V5 is a single-sign-on system, which means that you
-   have to type your password only once per session, and Kerberos does
-   the authenticating and encrypting transparently.
-
-Jacques Vidrine <n@nectar.com>
diff --git a/security/krb5-119/pkg-plist b/security/krb5-119/pkg-plist
deleted file mode 100644
index 3a936a5c37c5..000000000000
--- a/security/krb5-119/pkg-plist
+++ /dev/null
@@ -1,177 +0,0 @@
-bin/compile_et
-bin/gss-client
-bin/k5srvutil
-bin/kadmin
-bin/kdestroy
-bin/kinit
-bin/klist
-bin/kpasswd
-bin/krb5-config
-@mode 04755
-@owner root
-@group wheel
-bin/ksu
-@mode
-@owner root
-@group wheel
-bin/kswitch
-bin/ktutil
-bin/kvno
-bin/sclient
-bin/sim_client
-bin/uuclient
-include/com_err.h
-include/gssapi.h
-include/gssapi/gssapi.h
-include/gssapi/gssapi_alloc.h
-include/gssapi/gssapi_ext.h
-include/gssapi/gssapi_generic.h
-include/gssapi/gssapi_krb5.h
-include/gssapi/mechglue.h
-include/gssrpc/auth.h
-include/gssrpc/auth_gss.h
-include/gssrpc/auth_gssapi.h
-include/gssrpc/auth_unix.h
-include/gssrpc/clnt.h
-include/gssrpc/netdb.h
-include/gssrpc/pmap_clnt.h
-include/gssrpc/pmap_prot.h
-include/gssrpc/pmap_rmt.h
-include/gssrpc/rename.h
-include/gssrpc/rpc.h
-include/gssrpc/rpc_msg.h
-include/gssrpc/svc.h
-include/gssrpc/svc_auth.h
-include/gssrpc/types.h
-include/gssrpc/xdr.h
-include/krad.h
-include/krb5.h
-include/krb5/ccselect_plugin.h
-include/krb5/clpreauth_plugin.h
-include/krb5/hostrealm_plugin.h
-include/krb5/kadm5_hook_plugin.h
-include/krb5/kdcpolicy_plugin.h
-include/krb5/kdcpreauth_plugin.h
-include/krb5/localauth_plugin.h
-include/krb5/krb5.h
-include/krb5/locate_plugin.h
-include/krb5/plugin.h
-include/krb5/pwqual_plugin.h
-include/kadm5/admin.h
-include/kadm5/chpass_util_strings.h
-include/krb5/kadm5_auth_plugin.h
-include/kadm5/kadm_err.h
-include/kdb.h
-include/krb5/certauth_plugin.h
-include/krb5/preauth_plugin.h
-include/profile.h
-include/verto-module.h
-include/verto.h
-lib/libcom_err.so
-lib/libcom_err.so.3
-lib/libcom_err.so.3.0
-lib/libgssapi_krb5.so
-lib/libgssapi_krb5.so.2
-lib/libgssapi_krb5.so.2.2
-lib/libgssrpc.so
-lib/libgssrpc.so.4
-lib/libgssrpc.so.4.2
-lib/libk5crypto.so
-lib/libk5crypto.so.3
-lib/libk5crypto.so.3.1
-lib/libkadm5clnt.so
-lib/libkadm5clnt_mit.so
-lib/libkadm5clnt_mit.so.12
-lib/libkadm5clnt_mit.so.12.0
-lib/libkadm5srv.so
-lib/libkadm5srv_mit.so
-lib/libkadm5srv_mit.so.12
-lib/libkadm5srv_mit.so.12.0
-lib/libkdb5.so
-lib/libkdb5.so.10
-lib/libkdb5.so.10.0
-lib/libkrb5.so
-lib/libkrb5.so.3
-lib/libkrb5.so.3.3
-lib/libkrb5support.so
-lib/libkrb5support.so.0
-lib/libkrb5support.so.0.1
-lib/krb5/plugins/kdb/db2.so
-%%LMDB%%lib/krb5/plugins/kdb/klmdb.so
-lib/krb5/plugins/tls/k5tls.so
-%%LDAP%%lib/krb5/plugins/kdb/kldap.so
-lib/krb5/plugins/preauth/otp.so
-lib/krb5/plugins/preauth/pkinit.so
-lib/krb5/plugins/preauth/spake.so
-lib/krb5/plugins/preauth/test.so
-%%LDAP%%lib/libkdb_ldap.so
-%%LDAP%%lib/libkdb_ldap.so.1
-%%LDAP%%lib/libkdb_ldap.so.1.0
-lib/libkrad.so
-lib/libkrad.so.0
-lib/libkrad.so.0.0
-lib/libverto.so
-lib/libverto.so.0
-lib/libverto.so.0.0
-libdata/pkgconfig/gssrpc.pc
-libdata/pkgconfig/kadm-client.pc
-libdata/pkgconfig/kadm-server.pc
-libdata/pkgconfig/kdb.pc
-libdata/pkgconfig/krb5-gssapi.pc
-libdata/pkgconfig/krb5.pc
-libdata/pkgconfig/mit-krb5-gssapi.pc
-libdata/pkgconfig/mit-krb5.pc
-share/man/man1/compile_et.1.gz
-share/man/man1/k5srvutil.1.gz
-share/man/man1/kadmin.1.gz
-share/man/man1/kdestroy.1.gz
-share/man/man1/kinit.1.gz
-share/man/man1/klist.1.gz
-share/man/man1/kpasswd.1.gz
-share/man/man1/krb5-config.1.gz
-share/man/man1/ksu.1.gz
-share/man/man1/kswitch.1.gz
-share/man/man1/ktutil.1.gz
-share/man/man1/kvno.1.gz
-share/man/man1/sclient.1.gz
-share/man/man3/com_err.3.gz
-share/man/man5/.k5identity.5.gz
-share/man/man5/.k5login.5.gz
-share/man/man5/k5identity.5.gz
-share/man/man5/k5login.5.gz
-share/man/man5/kadm5.acl.5.gz
-share/man/man5/kdc.conf.5.gz
-share/man/man5/krb5.conf.5.gz
-share/man/man7/kerberos.7.gz
-share/man/man8/kadmin.local.8.gz
-share/man/man8/kadmind.8.gz
-share/man/man8/kdb5_ldap_util.8.gz
-share/man/man8/kdb5_util.8.gz
-share/man/man8/kprop.8.gz
-share/man/man8/kpropd.8.gz
-share/man/man8/kproplog.8.gz
-share/man/man8/krb5kdc.8.gz
-share/man/man8/sserver.8.gz
-sbin/gss-server
-sbin/kadmin.local
-sbin/kadmind
-%%LDAP%%sbin/kdb5_ldap_util
-sbin/kdb5_util
-sbin/kprop
-sbin/kpropd
-sbin/kproplog
-sbin/krb5-send-pr
-sbin/krb5kdc
-sbin/sim_server
-sbin/sserver
-sbin/uuserver
-share/et/et_c.awk
-share/et/et_h.awk
-%%NLS%%share/locale/de/LC_MESSAGES/mit-krb5.mo
-%%NLS%%share/locale/en_US/LC_MESSAGES/mit-krb5.mo
-%%LDAP%%%%DATADIR%%/kerberos.schema
-%%LDAP%%%%DATADIR%%/kerberos.ldif
-@dir lib/krb5/plugins/authdata
-@dir lib/krb5/plugins/libkrb5
-@dir %%KRB5_RUNSTATEDIR%%/krb5kdc
-@dir %%KRB5_LOCALSTATEDIR%%/krb5kdc