Ticket #42728: patch-gnutls-3.3.3-rev1.diff

Portfile

@@ -6 +6 @@
 
 name            gnutls
 version         3.3.3
+revision        1
 set branch      [join [lrange [split ${version} .] 0 1] .]
 categories      devel security
 # yes, some of the libs are GPL only
@@ -43 +44 @@
     eval reinplace {/^#/d} [glob ${worksrcpath}/lib/accelerated/x86/macosx/*.s]
 }
 
+# use autoreconf to update glibtool to correctly handle -std
+
 use_autoreconf  yes
 autoreconf.args -fvi
 
 configure.args  --disable-guile \
                 --disable-silent-rules \
-                --with-p11-kit           
+                --disable-libdane \
+                --enable-local-libopts \
+                --with-p11-kit \
+                --with-system-priority-file="${prefix}/etc/gnutls/default-priorities" \
+                --with-unbound-root-key-file="${prefix}/etc/unbound/root.key"
 
-if {[variant_isset universal]} { 
+variant dane description {Build libdane using unbound libraries} {
+    depends_lib-append      port:unbound
+    configure.args-delete   --disable-libdane
+}
+
+# unbound does not currently install/update ${prefix}/etc/unbound/root.key
+# so user may have to do it manually for DANE support (#43881)
+
+if {[variant_isset dane] && ![file exists ${prefix}/etc/unbound/root.key]} {
+    notes "
+***
+*** WARNING:
+***
+*** The DNSSEC root key file in ${prefix}/etc/unbound/root.key was not found.
+*** This file is needed for the verification of DNSSEC responses.
+*** Use the command: sudo unbound-anchor -a \"${prefix}/etc/unbound/root.key\"
+*** to generate or update it.
+***
+"
+}
+
+if {[variant_isset universal]} {
     set merger_host(x86_64) x86_64-apple-${os.platform}${os.major}
     set merger_host(i386) i686-apple-${os.platform}${os.major}
     set merger_configure_args(x86_64) --build=x86_64-apple-${os.platform}${os.major}