Log message:
net/openntpd: update to 6.8p1

6.8p1 - New release based on OpenBSD 6.8

	* The ntpd daemon now gets and sets the clock in a secure way when booting
	  even when a battery-backed clock is absent.

	* Improvements in DNS resolving and constraints checking, especially during
	  startup. Unreliable NTP peers are removed from the pool and DNS resolving
	  is repeated to add replacements.

	* Improved reliability and security of TLS constraint checking.

	* Improved logging of failure cases.

	* Prevent the case of multiple ntpds running at once by checking presence
	  of the local control socket.

	* TLS certificates are now searched in TLS_CA_CERT_FILE.

	* The default ntpd.conf configuration file now uses 9.9.9.9 and
	  2620:fe::fe, in addition to google.com, when performing time constraint
	  validation.

	* Improved handling unsynched mode when there is no replies from an NTP
	  server, such as when there are network connectivity issues.

	* To build OpenNTPD with time constraint support, libtls from LibreSSL
	  3.2.2 or later are recommended. LibreSSL 3.2.2 and later include a
	  self-contained libtls, which allows OpenNTPD to work with constraints
	  even on systems even where libcrypto and libssl are not from LibreSSL.

6.2p3 - Bug fixes

	* Fixed build on OS X

6.2p2 - Bug fixes

	* Fixed support for 'query from' and clarified usage.

6.2p1 - New release based on OpenBSD 6.2

	* Added option "query from <ip>" to ntpd.conf, to specify a local IP
	  address for outgoing NTP queries.

6.1p1 - New release based on OpenBSD 6.1

	* Quieted warnings about constraint connection retries.

	* Implemented fork+exec for ntpd child processes.

	* Added imsg inter-process reliability fixes.

	* Fixed memory leaks and reduced heap memory usage.

	* Numerous logging improvements and additions.

	* Added macOS 10.12 getentropy support.

	* Fixed arc4random blacklist use native implementations where
	  possible.

Log message:
net: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Not committed (merge conflicts...):

net/radsecproxy/distinfo

The following distfiles could not be fetched (fetched conditionally?):

./net/citrix_ica/distinfo citrix_ica-10.6.115659/en.linuxx86.tar.gz
./net/djbdns/distinfo dnscache-1.05-multiple-ip.patch
./net/djbdns/distinfo djbdns-1.05-test28.diff.xz
./net/djbdns/distinfo djbdns-1.05-ignoreip2.patch
./net/djbdns/distinfo djbdns-1.05-multiip.diff
./net/djbdns/distinfo djbdns-cachestats.patch

Log message:
net: Remove SHA1 hashes for distfiles

Log message:
net/openntpd: make the rc script set the pidfile.

Seems the daemon writes no pid file unless explicitly told where.
Fixes PR 55244. PKGREVISION -> 1.

Log message:
Remove unneeded patch after update to 6.0p1

Log message:
Updated openntpd to 6.0p1.

Changes since OpenNTPD 5.9p1
============================

    * Fixed a link failure on older Linux distributions and a build
      failure on FreeBSD.
    * Set MOD_MAXERROR to avoid unsynced time status when using
      ntp_adjtime.
    * Fixed HTTP Timestamp header parsing to use strptime in a more
      portable fashion.
    * Hardened TLS for ntpd constraints, enabling server name
      verification. Thanks to Luis M. Merino.

Note that HTTPS TLS constraints are currently disabled in pkgsrc pending
evaluation of how best to deal with libressl.

Log message:
Change the service_bundle name to "export" to reduce diffs between the
original manifest.xml file and the output from "svccfg export".

Log message:
Add or fix manpath entries to use the correct path.

Log message:
Update openntpd to 5.9p1, from Paul B. Henson in PR pkg/51092.

Changes since OpenNTPD 5.7p4
============================
* When a single "constraint" is specified, try all returned addresses
  until one succeeds, rather than the first returned address.
* Relaxed the constraint error margin to be proportional to the number
  of NTP peers, avoid constant reconnections when there is a bad NTP
  peer.
* Removed disabled hotplug sensor support.
* Added support for detecting crashes in constraint subprocesses.
* Moved the execution of constraints from the ntp process to the
  parent process, allowing for better privilege separation since the
  ntp process can be further restricted.
* Added pledge(2) support.
* Updated to require LibreSSL 2.3.2 or greater.
* Fixed high CPU usage when the network is down.
* Fixed various memory leaks.
* Switched to RMS for jitter calculations.
* Unified logging functions with other OpenBSD base programs.

OpenNTPD portable-specific changes:

* Added support for syncing time with the Realtime Clock (RTC) on OSes
  that require it.
* CFLAGS is no longer overridden by the build system.
* FreeBSD RTABLE support is disabled
* FreeBSD is no longer linked with -lmd to avoid hash function
  collisions, causing failures in constraint certificate loading.
* Fixed crashes due to __progname being used before initialized.
* Added Solaris 10 compatibility.
* Added --disable-https-constraint build option for explicitly
  disabling constraint support.
* Synced build system files with LibreSSL

Note that HTTPS TLS constraints are currently disabled in pkgsrc pending
evaluation of how best to deal with libressl.

Log message:
Add SHA512 digests for distfiles for net category

Problems found with existing digests:
	Package haproxy distfile haproxy-1.5.14.tar.gz
	159f5beb8fdc6b8059ae51b53dc935d91c0fb51f [recorded]
	da39a3ee5e6b4b0d3255bfef95601890afd80709 [calculated]

Problems found locating distfiles:
	Package bsddip: missing distfile bsddip-1.02.tar.Z
	Package citrix_ica: missing distfile citrix_ica-10.6.115659/en.linuxx86.tar.gz
	Package djbdns: missing distfile djbdns-1.05-test25.diff.bz2
	Package djbdns: missing distfile djbdns-cachestats.patch
	Package djbdns: missing distfile 0002-dnscache-cache-soa-records.patch
	Package gated: missing distfile gated-3-5-11.tar.gz
	Package owncloudclient: missing distfile owncloudclient-2.0.2.tar.xz
	Package poink: missing distfile poink-1.6.tar.gz
	Package ra-rtsp-proxy: missing distfile rtspd-src-1.0.0.0.tar.gz
	Package ucspi-ssl: missing distfile ucspi-ssl-0.70-ucspitls-0.1.patch
	Package waste: missing distfile waste-source.tar.gz

Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden).  All existing
SHA1 digests retained for now as an audit trail.