Log message:
security: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Unfetchable distfiles (fetched conditionally?):
./security/cyrus-sasl/distinfo \ 
cyrus-sasl-dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d.patch.v2

Log message:
security: Remove SHA1 hashes for distfiles

Log message:
keychain: Improve distinfo

Reuse the GitHub framework and stop using plain ${PKGVERSION_NOREV}.zip for
distfile name.

No functional change intended.

Log message:
Import keychain-2.8.5 with the following improvements:
  *  gnupg socket support
  *  better portability

Log message:
Update to keychain-2.8.4:
  Uses id instead of whoami for better portability.
  GPG2 support, support for busybox ps and various optimizations.

Log message:
keychain: follow redirect

Log message:
Put back dependency on bash again, the script uses the "local" keyword.

Bump PKGREVISION.

Log message:
Updated security/keychain to 2.8.3
----------------------------------
* keychain 2.8.3 (24 Jun 2016)
  Summary: fix gpg key addition (Clemens Kaposi)

Log message:
Update security/keychain to 2.8.2.

* keychain 2.8.2 (06 Nov 2015)

  Summary: Support new ssh features, bug fix release.

  Support for new hash algorithms (Ben Boeckel)

  Remove bashisms (Daniel Hertz)

  Various optimizations (Daniel Hahler)

  --timeout option now gets passed to agent, doc fixes (Andrew Bezella, Emil
  Lundberg)

  RPM, Makefile fixes (Mike Frysinger)

* keychain 2.8.1 (29 May 2015)

  Summary: POSIX compatibility and bug fix release.

  Only set PATH to a standard value if PATH is not set. Otherwise, do not
  modify.

  Makefile Cygwin and RPM spec fixes (thanks Luke Bakken and Ricardo Silva)

  Confhost fixes. Deprecate in_path. Use command -v instead.

  Find_pids: Modify "ps" call to work with non-GNU ps. (Bryan Drewery)

  Re-introduce POSIX compatibility (remove shopt.) (vaeth)

* keychain 2.8.0 (21 Mar 2015)

  Support for OpenSSH 6.8 fingerprints.
  Support for GnuPG 2.1.0.

  Handle private keys that are symlinks, even if the associated public key is
  in the target directory rather than alongside the symlink.

  Allow private keys to have extensions, such as foo.priv. When looking for
  matching public keys, look for foo.priv.pub, but also strip extension and
  look for foo.pub if foo.priv.pub doesn't exist.

  Initial support for --list/-l option to list SSH keys.

  Updated docs for fish shell usage.

* keychain 2.7.2_beta1 (07 July 2014)

  Various changes and updates:

  Fixes for fish from Marc Joliet.

  Keychain will default to start only ssh-agent unless GPG is explicitly
  updated using --agents.

  Write ~/.gpg-agent-info when launching gpg-agent - fix from Thomas Spura.

  Add support for injecting agents into systemd (Ben Boeckel)

  Add support for --query option (Ben Boeckel)

  Add --absolute flag, allowing user to set a full path without getting a
  .keychain suffix automatically appended.

  Add --confhost option to scan ~/.ssh/config file to locate private key
  path specified there.

Log message:
Add SHA512 digests for distfiles for security category

Problems found locating distfiles:
	Package f-prot-antivirus6-fs-bin: missing distfile fp-NetBSD.x86.32-fs-6.2.3.tar.gz
	Package f-prot-antivirus6-ws-bin: missing distfile fp-NetBSD.x86.32-ws-6.2.3.tar.gz
	Package libidea: missing distfile libidea-0.8.2b.tar.gz
	Package openssh: missing distfile openssh-7.1p1-hpn-20150822.diff.bz2
	Package uvscan: missing distfile vlp4510e.tar.Z

Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden).  All existing
SHA1 digests retained for now as an audit trail.