Ticket #42728: Portfile-gnutls.2.diff

Portfile

@@ -5 +5 @@
 PortGroup  muniversal 1.0
 
 name            gnutls
-version         3.3.3
+version         3.3.4
 set branch      [join [lrange [split ${version} .] 0 1] .]
 categories      devel security
 # yes, some of the libs are GPL only
@@ -23 +23 @@
 
 master_sites    ftp://ftp.gnutls.org/gcrypt/gnutls/v${branch}/
 
-checksums       md5     e225247ec82513354a6bdc3be6246377 \
-                rmd160  cebd6a17fe9b7ebc8f0f9abb6218c195456ee468 \
-                sha256  8cd8cc7d4dcd4f73e85a6ebfa9463860b671d65f23d57354a6dfe86b7e83a036
+checksums       rmd160  9e61797428035cdaf6e3ac86103ead5cf7f02de7 \
+                sha256  04a53b2bbb936b02cdc62f68144f9706e256cc85cc530b81266a24d80b824357
 
 use_xz          yes
 
@@ -43 +42 @@
     eval reinplace {/^#/d} [glob ${worksrcpath}/lib/accelerated/x86/macosx/*.s]
 }
 
+# use autoreconf to update glibtool to correctly handle -std
 use_autoreconf  yes
 autoreconf.args -fvi
 
 configure.args  --disable-guile \
                 --disable-silent-rules \
-                --with-p11-kit           
+                --disable-libdane \
+                --enable-local-libopts \
+                --with-p11-kit \
+                --with-system-priority-file="${prefix}/etc/gnutls/default-priorities"
+
+variant dane description {Build libdane using unbound libraries} {
+    depends_lib-append      port:unbound
+    configure.args-append   --with-unbound-root-key-file="${prefix}/etc/unbound/root.key" 
+    configure.args-delete   --disable-libdane
+}
+
+# unbound does not currently install/update ${prefix}/etc/unbound/root.key
+# so user may have to do it manually for DANE support (#43881)
+
+if {[variant_isset dane] && ![file exists ${prefix}/etc/unbound/root.key]} {
+    notes "
+***
+*** WARNING:
+***
+*** The DNSSEC root key file in ${prefix}/etc/unbound/root.key was not found.
+*** This file is needed for the verification of DNSSEC responses.
+*** Use the command: sudo unbound-anchor -a \"${prefix}/etc/unbound/root.key\"
+*** to generate or update it.
+***
+"
+}
 
 if {[variant_isset universal]} { 
     set merger_host(x86_64) x86_64-apple-${os.platform}${os.major}