haproxy: update to 1.6.3

[relgames@…]

$ port livecheck haproxy
haproxy seems to have been updated (port version: 1.4.22, new version: 1.6.3)

[mf2k (Frank Schima)]

Thanks. In the future, please Cc the port maintainers (port info --maintainers haproxy), if any.

A comment about the patch. The rmd160 and sha256 checksums need to stay. See the ​guide section about checksums. md5 is considered insecure but can be kept if upstream publishes it.

[relgames@…]

Replying to mf2k@…:

A comment about the patch. The rmd160 and sha256 checksums need to stay. See the ​guide section about checksums. md5 is considered insecure but can be kept if upstream publishes it.

HAproxy download page has only MD5 hashes ​http://www.haproxy.org/download/1.6/src/ Meaning, rmd160 and sha256 will be calculated by me and not taken from the upstream.

If MD5 is insecure, what makes you think I can't be affected? Hashes calculated by me can't be validated by checking upstream download page, you'll need to either trust me or re-calculate hashes yourself. Do you still think I should do it?..

[danielluke (Daniel J. Luke)]

The stronger hashes main function is to ensure that the file that an end-user operates on is the same file as the one the maintainer intended it to operate on.

[aphor (Jeremy McMillan)]

Subsumed by #51492 [haproxy Portfile diff update 1.4.22 --> 1.6.5]