and updating the bundled pcre (also security fixes).
add patches to use arc4random_buf instead of /dev/urandom (which is
typically not available on a normal OpenBSD php installation, with very
bad fallbacks in some cases).
testing of arc4random bits from martijn@, ok robert@
made STREAM_CRYPTO_METHOD_TLS_CLIENT only support TLSv1.0 (no v1.1/v1.2).
This is a commonly used method (by various functions in PHP source itself,
common software like piwik, roundcube, davical, owncloud and others, and
libraries like zendframework, PEAR Net-IMAP/Sieve/SMTP) so it should
support modern TLS versions. ok robert@
which can be used to disable the suhosin extension in the php packages.
We are not going to build this flavor by default because people should
use suhosin by default, but in some corner-cases if someone wants to disable
it, the flavor can be used.
Also move some variables and the sybase_ct subpackage from the Makefiles
to the shared one, there is no need to have the same data in 3 different
Makefiles.
of php-5.5.ini as it looks like the patch was simply copied over from 5.5 when
creating the new port. Also use the ${PV} variable with the 5.5 / 5.6 ports as
well so as to do things in the same manner as done with the 5.3 / 5.4 ports.
Issue noticed by otto@
ok sthen@