libreswan 4.7 for wip

[Andrew Cagney <andrew.cagney%gmail.com@localhost>]

something to get the discussion started

From 7d53dc43d64dcfade3039508bf8ac99cf21b2fc7 Mon Sep 17 00:00:00 2001
From: Andrew Cagney <cagney%gnu.org@localhost>
Date: Tue, 14 Jun 2022 21:33:28 -0400
Subject: [PATCH] libreswan: add libreswan-4.7

---
 libreswan/DESCR                               |  8 ++
 libreswan/Makefile                            | 26 ++++++
 libreswan/PLIST                               | 81 +++++++++++++++++++
 libreswan/distinfo                            |  6 ++
 .../patches/patch-b_mk_defaults_netbsd.mk     | 19 +++++
 5 files changed, 140 insertions(+)
 create mode 100644 libreswan/DESCR
 create mode 100644 libreswan/Makefile
 create mode 100644 libreswan/PLIST
 create mode 100644 libreswan/distinfo
 create mode 100644 libreswan/patches/patch-b_mk_defaults_netbsd.mk

diff --git a/libreswan/DESCR b/libreswan/DESCR
new file mode 100644
index 0000000000..ab3422786e
--- /dev/null
+++ b/libreswan/DESCR
@@ -0,0 +1,8 @@
+Libreswan is an Internet Key Exchange (IKE) implementation for Linux.
+It supports IKEv1 and IKEv2 and has support for most of the extensions
+(RFC + IETF drafts) related to IPsec, including IKEv2, X.509 Digital
+Certificates, NAT Traversal, and many others.  Libreswan uses the native
+Linux XFRM IPsec stack.
+
+Libreswan was forked from Openswan 2.6.38, which was forked from
+FreeS/WAN 2.04. See the CREDITS files for contributor acknowledgments.
diff --git a/libreswan/Makefile b/libreswan/Makefile
new file mode 100644
index 0000000000..f86e3c1cbb
--- /dev/null
+++ b/libreswan/Makefile
@@ -0,0 +1,26 @@
+# $NetBSD$
+
+DISTNAME=	libreswan-4.7
+CATEGORIES=	security
+MASTER_SITES=	https://download.libreswan.org/
+
+MAINTAINER=	pkgsrc-users%NetBSD.org@localhost
+HOMEPAGE=	https://download.libreswan.org/
+# Libreswan ...
+COMMENT=	Internet Key Exchange Daemon for managing IPsec
+LICENSE=	gnu-gpl-v2
+
+USE_TOOLS+=	pkg-config
+USE_TOOLS+=	gmake
+USE_TOOLS+=	flex
+USE_TOOLS+=	bison
+#default is: USE_LANGUAGES+=	c
+
+DEPENDS+=	xmlto-[0-9]*:../../textproc/xmlto
+PATCH_STRIP+= -p1
+
+.include "../../net/unbound/buildlink3.mk"
+.include "../../www/curl/buildlink3.mk"
+.include "../../devel/nss/buildlink3.mk"
+.include "../../net/ldns/buildlink3.mk"
+.include "../../mk/bsd.pkg.mk"
diff --git a/libreswan/PLIST b/libreswan/PLIST
new file mode 100644
index 0000000000..b41a082681
--- /dev/null
+++ b/libreswan/PLIST
@@ -0,0 +1,81 @@
+@comment $NetBSD$
+etc/ipsec.conf
+etc/ipsec.d/policies/block
+etc/ipsec.d/policies/clear
+etc/ipsec.d/policies/clear-or-private
+etc/ipsec.d/policies/portexcludes.conf
+etc/ipsec.d/policies/private
+etc/ipsec.d/policies/private-or-clear
+etc/ipsec.secrets
+etc/logrotate.d/libreswan
+etc/rc.d/pluto
+libexec/ipsec/_import_crl
+libexec/ipsec/_plutorun
+libexec/ipsec/_realsetup
+libexec/ipsec/_secretcensor
+libexec/ipsec/_stackmanager
+libexec/ipsec/_unbound-hook
+libexec/ipsec/_updown
+libexec/ipsec/_updown.bsd
+libexec/ipsec/addconn
+libexec/ipsec/algparse
+libexec/ipsec/asn1check
+libexec/ipsec/auto
+libexec/ipsec/barf
+libexec/ipsec/cavp
+libexec/ipsec/dncheck
+libexec/ipsec/ecdsasigkey
+libexec/ipsec/enumcheck
+libexec/ipsec/hunkcheck
+libexec/ipsec/ipcheck
+libexec/ipsec/jambufcheck
+libexec/ipsec/keyidcheck
+libexec/ipsec/letsencrypt
+libexec/ipsec/look
+libexec/ipsec/newhostkey
+libexec/ipsec/pluto
+libexec/ipsec/readwriteconf
+libexec/ipsec/routecheck
+libexec/ipsec/rsasigkey
+libexec/ipsec/setup
+libexec/ipsec/show
+libexec/ipsec/showhostkey
+libexec/ipsec/timecheck
+libexec/ipsec/vendoridcheck
+libexec/ipsec/verify
+libexec/ipsec/whack
+man/man5/ipsec.conf.5
+man/man5/ipsec.secrets.5
+man/man8/ipsec.8
+man/man8/ipsec__import_crl.8
+man/man8/ipsec__plutorun.8
+man/man8/ipsec__realsetup.8
+man/man8/ipsec__secretcensor.8
+man/man8/ipsec__stackmanager.8
+man/man8/ipsec__unbound-hook.8
+man/man8/ipsec__updown.8
+man/man8/ipsec__updown.bsdkame.8
+man/man8/ipsec_addconn.8
+man/man8/ipsec_auto.8
+man/man8/ipsec_barf.8
+man/man8/ipsec_checknss.8
+man/man8/ipsec_ecdsasigkey.8
+man/man8/ipsec_import.8
+man/man8/ipsec_initnss.8
+man/man8/ipsec_letsencrypt.8
+man/man8/ipsec_look.8
+man/man8/ipsec_newhostkey.8
+man/man8/ipsec_pluto.8
+man/man8/ipsec_readwriteconf.8
+man/man8/ipsec_rsasigkey.8
+man/man8/ipsec_setup.8
+man/man8/ipsec_show.8
+man/man8/ipsec_showhostkey.8
+man/man8/ipsec_vendorid.8
+man/man8/ipsec_verify.8
+man/man8/ipsec_whack.8
+man/man8/pluto.8
+sbin/ipsec
+share/doc/libreswan/ipsec.conf-sample
+share/doc/libreswan/ipsec.secrets-sample
+share/examples/rc.d/pluto
diff --git a/libreswan/distinfo b/libreswan/distinfo
new file mode 100644
index 0000000000..88aab97861
--- /dev/null
+++ b/libreswan/distinfo
@@ -0,0 +1,6 @@
+$NetBSD$
+
+BLAKE2s (libreswan-4.7.tar.gz) = 952887f1381b00a672e05e9baa4d4bb899cd07c4809dc8f365fc06e9791cbd6d
+SHA512 (libreswan-4.7.tar.gz) = aea958be5512e08ea809145021695edd4e7df4487a0f3ba94c4d0165113647195c1c1599cd5fbbbfae8f6a2bebf39d7514a694f86297c29c543b1a63646ca44e
+Size (libreswan-4.7.tar.gz) = 3684167 bytes
+SHA1 (patch-b_mk_defaults_netbsd.mk) = 995194ae66efcaabc9f1d65c4540dcfb8db5ab44
diff --git a/libreswan/patches/patch-b_mk_defaults_netbsd.mk b/libreswan/patches/patch-b_mk_defaults_netbsd.mk
new file mode 100644
index 0000000000..297ae94510
--- /dev/null
+++ b/libreswan/patches/patch-b_mk_defaults_netbsd.mk
@@ -0,0 +1,19 @@
+$NetBSD$
+
+commit 8861abd461ad049f915fb4aad8ac123188f407a7
+Author: Andrew Cagney <cagney%gnu.org@localhost>
+Date:   Tue Jun 14 20:54:55 2022 -0400
+
+    NetBSD: install manual pages in $(PREFIX)/man
+    
+    not share/man
+
+diff --git a/mk/defaults/netbsd.mk b/mk/defaults/netbsd.mk
+index 4c623089f5..d9e3d262f8 100644
+--- a/mk/defaults/netbsd.mk
++++ b/mk/defaults/netbsd.mk
+@@ -33,3 +33,4 @@ FINALRUNDIR=/var/run/pluto
+ FINALSYSCONFDIR=$(PREFIX)/etc
+ FINALNSSDIR=$(PREFIX)/etc/ipsec.d
+ FINALEXAMPECONFDIR=$(PREFIX)/share/examples/libreswan
++FINALMANDIR=$(PREFIX)/man
-- 
2.36.1