git: b7a71975ead7 - main - security/openvpn-devel: Update to latest commit

From: Vladimir Druzenko <vvd_at_FreeBSD.org>
Date: Sat, 25 Jul 2026 02:01:16 UTC
The branch main has been updated by vvd:

URL: https://cgit.FreeBSD.org/ports/commit/?id=b7a71975ead7afe91139e6bb5650da5dff367223

commit b7a71975ead7afe91139e6bb5650da5dff367223
Author:     Gert Doering <gert@greenie.muc.de>
AuthorDate: 2026-07-25 01:45:31 +0000
Commit:     Vladimir Druzenko <vvd@FreeBSD.org>
CommitDate: 2026-07-25 02:00:50 +0000

    security/openvpn-devel: Update to latest commit
    
    This brings in the upstream development work of the last three months,
    including a number of CVE fixes.
    
    The previous commit erroneously bumped the date string used as the
    version number to "2027".  Fix that, and upgrade EPOCH to make it work.
    
    Some maintenance on the port Makefile itself to address "portlint"
    complaints and upstream changes (--enable-strict configure argument has
    been dropped because the flags are always on now).
    
    - Remove unnecessary GNU_CONFIGURE_MANPREFIX.
    - Improve post-install-EXAMPLES-on.
    
    PR:             296874
    Security:       CVE-2026-11771
    Security:       CVE-2026-12932
    Security:       CVE-2026-12996
    Security:       CVE-2026-13117
    Security:       CVE-2026-13122
    Security:       CVE-2026-13698
    Sponsored by:   UNIS Labs
    Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>
    Co-authored-by: Matthias Andree <mandree@FreeBSD.org>
    MFH:            2026Q3
---
 security/openvpn-devel/Makefile | 28 ++++++++++++++--------------
 security/openvpn-devel/distinfo |  6 +++---
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/security/openvpn-devel/Makefile b/security/openvpn-devel/Makefile
index d4c9b606c168..1a33d141d54c 100644
--- a/security/openvpn-devel/Makefile
+++ b/security/openvpn-devel/Makefile
@@ -1,14 +1,12 @@
 PORTNAME=	openvpn
-DISTVERSION=	g20270422
-PORTREVISION=	0  # leave in even if 0 to avoid accidental PORTEPOCH bumps
-PORTEPOCH=	1
+DISTVERSION=	g20260721
+#PORTREVISION=	0  # leave in even if 0 to avoid accidental PORTEPOCH bumps
+PORTEPOCH=	2
 CATEGORIES=	security net net-vpn
 PKGNAMESUFFIX=	-devel
 
 MAINTAINER=	gert@greenie.muc.de
-# let's use ?= in spite of portlint WARNings because this might become
-# security/openvpn one day which would then have a slave port:
-COMMENT?=	Secure IP/Ethernet tunnel daemon
+COMMENT=	Secure IP/Ethernet tunnel daemon
 WWW=		https://openvpn.net/community/
 
 LICENSE=	GPLv2
@@ -21,16 +19,17 @@ LIB_DEPENDS+=	liblzo2.so:archivers/lzo2
 USES=		autoreconf cpe libtool pkgconfig python:build shebangfix tar:xz
 IGNORE_SSL=	libressl libressl-devel
 USE_GITLAB=	yes
-GL_TAGNAME=	64fae9d82989ede6c92e230c594ab9335c05df8d
+GL_TAGNAME=	4ad3c71ec4bdad706332d0281a3bb3bba0234288
 USE_RC_SUBR=	openvpn
 
-SHEBANG_FILES=	sample/sample-scripts/auth-pam.pl \
-		sample/sample-scripts/totpauth.py sample/sample-scripts/ucn.pl \
+SHEBANG_FILES=	sample/sample-plugins/keying-material-exporter-demo/http-client.py \
+		sample/sample-plugins/keying-material-exporter-demo/http-server.py \
+		sample/sample-scripts/auth-pam.pl \
+		sample/sample-scripts/totpauth.py \
+		sample/sample-scripts/ucn.pl \
 		sample/sample-scripts/verify-cn
 
 GNU_CONFIGURE=			yes
-GNU_CONFIGURE_MANPREFIX=	${PREFIX}/share
-CONFIGURE_ARGS+=		--enable-strict
 # set PLUGIN_LIBDIR so that unqualified plugin paths are found:
 CONFIGURE_ENV+=			PLUGINDIR="${PREFIX}/lib/openvpn/plugins"
 
@@ -149,8 +148,9 @@ post-install-DOCS-on:
 .endfor
 
 post-install-EXAMPLES-on:
-	(cd ${WRKSRC}/sample && ${COPYTREE_SHARE} \* ${STAGEDIR}${EXAMPLESDIR}/)
-	${CHMOD} ${BINMODE} ${STAGEDIR}${EXAMPLESDIR}/sample-scripts/*
-	${RM} ${STAGEDIR}${EXAMPLESDIR}/sample-config-files/*.orig
+	(cd ${WRKSRC}/sample && \
+		${COPYTREE_SHARE} "sample-config-files sample-keys sample-plugins" \
+			${STAGEDIR}${EXAMPLESDIR}/ '! -name "*.orig"' && \
+		 ${COPYTREE_BIN} sample-scripts ${STAGEDIR}${EXAMPLESDIR}/ '! -name "*.orig"')
 
 .include <bsd.port.mk>
diff --git a/security/openvpn-devel/distinfo b/security/openvpn-devel/distinfo
index 391cf9d68d36..98e0fdaf1ae5 100644
--- a/security/openvpn-devel/distinfo
+++ b/security/openvpn-devel/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1776872343
-SHA256 (openvpn-openvpn-64fae9d82989ede6c92e230c594ab9335c05df8d_GL0.tar.gz) = 799aea2ab9d4d42784402e4438a465f86e94f61884b0b54e81ede3e89c2ca08b
-SIZE (openvpn-openvpn-64fae9d82989ede6c92e230c594ab9335c05df8d_GL0.tar.gz) = 1343378
+TIMESTAMP = 1784638473
+SHA256 (openvpn-openvpn-4ad3c71ec4bdad706332d0281a3bb3bba0234288_GL0.tar.gz) = c4476333e7f6e7b928ed49979d1746d2cf4104fae8f2c612556eb62f8feab7d8
+SIZE (openvpn-openvpn-4ad3c71ec4bdad706332d0281a3bb3bba0234288_GL0.tar.gz) = 1352110