Log message:
www: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Not committed (merge conflicts):
www/nghttp2/distinfo

Unfetchable distfiles (almost certainly fetched conditionally...):
./www/nginx-devel/distinfo array-var-nginx-module-0.05.tar.gz
./www/nginx-devel/distinfo echo-nginx-module-0.62.tar.gz
./www/nginx-devel/distinfo encrypted-session-nginx-module-0.08.tar.gz
./www/nginx-devel/distinfo form-input-nginx-module-0.12.tar.gz
./www/nginx-devel/distinfo headers-more-nginx-module-0.33.tar.gz
./www/nginx-devel/distinfo lua-nginx-module-0.10.19.tar.gz
./www/nginx-devel/distinfo naxsi-1.3.tar.gz
./www/nginx-devel/distinfo nginx-dav-ext-module-3.0.0.tar.gz
./www/nginx-devel/distinfo nginx-rtmp-module-1.2.2.tar.gz
./www/nginx-devel/distinfo nginx_http_push_module-1.2.10.tar.gz
./www/nginx-devel/distinfo ngx_cache_purge-2.5.1.tar.gz
./www/nginx-devel/distinfo ngx_devel_kit-0.3.1.tar.gz
./www/nginx-devel/distinfo ngx_http_geoip2_module-3.3.tar.gz
./www/nginx-devel/distinfo njs-0.5.0.tar.gz
./www/nginx-devel/distinfo set-misc-nginx-module-0.32.tar.gz
./www/nginx/distinfo array-var-nginx-module-0.05.tar.gz
./www/nginx/distinfo echo-nginx-module-0.62.tar.gz
./www/nginx/distinfo encrypted-session-nginx-module-0.08.tar.gz
./www/nginx/distinfo form-input-nginx-module-0.12.tar.gz
./www/nginx/distinfo headers-more-nginx-module-0.33.tar.gz
./www/nginx/distinfo lua-nginx-module-0.10.19.tar.gz
./www/nginx/distinfo naxsi-1.3.tar.gz
./www/nginx/distinfo nginx-dav-ext-module-3.0.0.tar.gz
./www/nginx/distinfo nginx-rtmp-module-1.2.2.tar.gz
./www/nginx/distinfo nginx_http_push_module-1.2.10.tar.gz
./www/nginx/distinfo ngx_cache_purge-2.5.1.tar.gz
./www/nginx/distinfo ngx_devel_kit-0.3.1.tar.gz
./www/nginx/distinfo ngx_http_geoip2_module-3.3.tar.gz
./www/nginx/distinfo njs-0.5.0.tar.gz
./www/nginx/distinfo set-misc-nginx-module-0.32.tar.gz

Log message:
www: Remove SHA1 hashes for distfiles

Log message:
www/apache-tomcat85: Update to 8.5.61

Changelog for 8.5.61:
  - Align the behaviour of ServletContext.getRealPath(String path) with the
    recent clarification from the Servlet specification project. If the path
    parameter does not start with / then Tomcat processes the call as if / is
    appended to the beginning of the provided path.
  - Fix a potential file descriptor leak when WebSocket connections are
    attempted and fail.
  - Ensure that the LoadBalancerDrainingValve uses the correct setting for the
    secure attribute for any session cookies it creates.

Changelog for 8.5.60:
  - Statistics are now available (via JMX) for HTTP/2, WebSocket and HTTP/1.1
    upgraded connections
  - Stability improvements for HTTP/2
  - Improvements to error handling in the connection pool used by the JNDI
    Realm

Log message:
www/apache-tomcat85: Update to 8.5.58

Changes for 8.5.59:
  - Refactor the handling of closed HTTP/2 streams to reduce the heap usage
    associated with used streams and to retain information for more streams in
    the priority tree.
  - Deprecate the JDBCRealm.
  - Ensure that none of the methods on a ServletContext instance always fail
    when running under a SecurityManager.

Full changelog is available at:
https://tomcat.apache.org/tomcat-8.5-doc/changelog.html#Tomcat_8.5.59_(markt)

Also CONFLICTS have been adjusted.

Log message:
www/apache-tomcat85: Update to 8.5.58

Changes for 8.5.58:
  - For requests containing the Expect: 100-continue header, optional
    support has been added to delay sending an intermediate 100 status
    response until the servlet reads the request body, allowing the
    servlet the opportunity to respond without asking for the request
    body. Based on a pull request by malaysf.
  - Add support for a read idle timeout and a write idle timeout to the
    WebSocket session via custom properties in the user properties
    instance associated with the session. Based on a pull request by
    sakshamverma.
  - Update the packaged version of the Tomcat Native Library to 1.2.25

Changes for 8.5.57:
  - Improvements to the creation of OSGi manifests.
  - Reduce the memory footprint of closed HTTP/2 streams

Changes for 8.5.56:
  - Add support for ALPN on recent OpenJDK 8 releases.
  - Add support for the CATALINA_OUT_CMD environment variable that
    defines a command to which captured stdout and stderr will be
    redirected. For use with, for example, rotatelogs. Patch provided by
    Harald Dunkel.
  - Be more flexible with respect to the ordering of groups, roles and
    users in the tomcat-users.xml file.

Changes for 8.5.55:
  - Improve the handling of requests that use an expectation. Do not
    disable keep-alive where the response has a non-2xx status code but
    the request body has been fully read.
  - Change default value separator for property replacement to ":-" due
    to possible conflicts. The syntax is now "${name:-default}".
  - Update the packaged version of the Tomcat Native Library to 1.2.24.

For full list of changes see
https://tomcat.apache.org/tomcat-8.5-doc/changelog.html

Log message:
For clarity, use tomcat_start (resp. tomcat_stop) function instead of
calling ${command} directly for start (resp. stop) within rc.d.

Tested on tomcat9; but applicable down to tomcat6.

Bump PKGREVISION.

ok ryo@.

Log message:
apache-tomcat85: Update to 8.5.54

Changelog:
The notable changes compared to 8.5.53 include:

    Add support for default values when using ${...} property replacement in \ 
configuration files. Based on a pull request provided by Bernd Bohmann.
    When configuring an HTTP Connector, warn if the encoding specified for \ 
URIEncoding is not a superset of US-ASCII as required by RFC 7230.
    Replace the system property \ 
org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH with the Connector \ 
attribute encodedSolidusHandling that adds an additional option to pass the %2f \ 
sequence through to the application without decoding it in addition to rejecting \ 
such sequences and decoding such sequences.

The notable changes compared to 8.5.51 include:

    Add new attribute persistAuthentication to both StandardManager and \ 
PersistentManager to support authentication persistence. Patch provided by \ 
Carsten Klein
    A zero length AJP secret will now behave as if it has not been specified.
    Add the TLS request attributes used by IIS to the attributes that an AJP \ 
Connector will always accept.

The notable changes compared to 8.5.50 include:

    AJP defaults changed to listen the loopback address, require a secret and to \ 
be disabled in the sample server.xml file. If you are using the AJP protocol, \ 
please refer to the Migration Guide and update your configuration.
    The JmxRemoteLifecycleListener is now deprecated
    The HTTP Connector attribute rejectIllegalHeaderName is renamed to \ 
rejectIllegalHeader and expanded to include header values as well as names

Log message:
all: migrate several HOMEPAGEs to https

pkglint --only "https instead of http" -r -F

With manual adjustments afterwards since pkglint 19.4.4 fixed a few
indentations in unrelated lines.

This mainly affects projects hosted at SourceForce, as well as
freedesktop.org, CTAN and GNU.