curl 8.19.0_2

- Update OPTIONS_DEFAULT:
  - Change from OPENSSL to OPENSSL
  - Remove LIBSSH2 and TLS_SRP (depends on OPENSSL)

ftp/curl uses OpenSSL by default. However, curl 8.18.0 drops OpenSSL 1.x support
which is used in FreeBSD 13 base system. Therefore, we change the defaults to
wolfSSL instead. This commit can be reverted after FreeBSD 13 EoL (expected Apr
30, 2026).

- Remove CURL_DEBUG option

Changes:	https://curl.se/changes.html
Security:	CVE-2025-13034, CVE-2025-14017, CVE-2025-14524, CVE-2025-14819, CVE-2025-15079, CVE-2025-15224, CVE-2026-1965, CVE-2026-3783, CVE-2026-3784, CVE-2026-3805

- build moved from GNU autoconf to CMake
- No MFH as it is a big change/update and new quarterly is coming soon

PR:		293734
Changes:	https://curl.se/changes.html
Security:	CVE-2026-3805
		CVE-2026-3784
		CVE-2026-3783
		CVE-2026-1965
		CVE-2025-15224
		CVE-2025-15079
		CVE-2025-14819
		CVE-2025-14524
		CVE-2025-14017
		CVE-2025-13034
		See https://curl.se/docs/security.html for details
Tested by:	ulassayginim@gmail.com, george@m5p.com,
		freebsd-bugzilla.bugs@kjpetrie.co.uk,
		fabian@wenks.ch, jordan@ostreff.info,
		einar@isnic.is, void@f-m.fm
Approved by: 	ports-secteam (joneum)

Heimdal Kerberos support has been removed in cURL 8.17.0.
The Kerberos in base system will be replaced with MIT.
This option will be re-added when possible.

Reference:	https://www.freebsd.org/status/report-2025-04-2025-06/mit_krb5/
		https://lists.freebsd.org/archives/freebsd-current/2025-June/007867.html

- Remove GSSAPI_HEIMDAL option
- Change OPTIONS_DEFAULT from conditional GSSAPI_BASE to GSSAPI_NONE

Changes:	https://curl.se/changes.html
Security:	CVE-2025-10966

Changes:	https://curl.se/changes.html
Security:	CVE-2025-9086, CVE-2025-10148

Add --with-ca-path=/etc/ssl/certs to CONFIGURE_ARGS so GnuTLS and wolfSSL can
find CA certificates by default.

Remove --with-ca-fallback. It has no effect with GnuTLS and with OpenSSL curl
uses the OpenSSL CA path which should also be /etc/ssl/certs so it is redundant
now.

PR:		288861, 288862

- Adjust default options: enable MQTT and SMB by default

Changes:	https://curl.se/changes.html

Changes:	https://curl.se/changes.html
Security:	CVE-2025-5399

Approved by:	jrm (mentor)
Differential Revision:	https://reviews.freebsd.org/D50742

Changes:	https://curl.se/changes.html
Security:	CVE-2025-4947, CVE-2025-5025

Backport upstream patches 7e0eea7d7b34b81ca02ffb995ebea22c02cb92d2 and
fbdb1e1dbe824a72f41a104fa26e555cb0b6b45a to fix unit tests with ipfs and
alt-svc mode

References:
https://github.com/curl/curl/commit/7e0eea7d7b34b81ca02ffb995ebea22c02cb92d2
https://github.com/curl/curl/commit/fbdb1e1dbe824a72f41a104fa26e555cb0b6b45a

PR:		286233
Approved by:	maintainer timeout, 2+ weeks (including separate mail)

- Use the upstream commit instead of the pull request
- Use = instead of += for PATCHFILES
- Cosmetic change

Approved by:	jrm (mentor), otis (mentor), sunpoet (implicit approval)
Differential Revision:	https://reviews.freebsd.org/D50052
Upstream PR:	https://github.com/curl/curl/issues/16925

Changes:	https://curl.se/changes.html

Changes:	https://curl.se/changes.html

Changes:	https://curl.se/changes.html

- Fix libcurl.pc with GSSAPI_BASE enabled
- Bump PORTREVISION for package change

Do not add heimdal-gssapi to libcurl.pc because we do no provide .pc file base GSSAPI library.

Reported by:	diizzy

Changes:	https://curl.se/changes.html
Security:	CVE-2024-11053

- Bump PORTREVISION for package change

Do not add heimdal-gssapi to libcurl.pc because we do no provide .pc file base GSSAPI library.

- Adjust options:
  - Add IPFS
  - Enable WEBSOCKET by default: It is no longer experimental

Changes:	https://curl.se/changes.html

- Add COMPRESSION group
- Enable BROTLI and ZSTD: Add both compression support
- Enable IDN: libidn2 is already part of the dependencies of libpsl (PSL option)
- Bump PORTREVISION for dependency change

Upstream mentioned that using libuv without debug support enabled is useless.
Therefore, LIBUV option will also enable DEBUG option.

Reported by:	adamw

Changes:	https://curl.se/changes.html

Partially backport upstream commits
70d3a9b6aa69ffdd9435e168463cfabd21e17cd1 and
bef0acaf212a71c782e0b8e8e6c772cc46040356

References:
https://github.com/curl/curl/issues/14923
https://github.com/curl/curl/commit/70d3a9b6aa69ffdd9435e168463cfabd21e17cd1
https://github.com/curl/curl/commit/bef0acaf212a71c782e0b8e8e6c772cc46040356

Approved by:	portmgr (blanket, runtime fix)

Changes:	https://curl.se/changes.html
Security:	CVE-2024-8096

- Bump PORTREVISION for package change

PR:		280653
Obtained from:	https://github.com/curl/curl/commit/3eec5afbd0b6377eca893c392569b2faf094d970

Changes:	https://curl.se/changes.html
Security:	CVE-2024-7264

Changes:	https://curl.se/changes.html
Security:	CVE-2024-6197, CVE-2024-6874

This reverts commit 4a9021c266f4a52b876bd15d3d0d27a72dbeb278.

This reverts commit 710db45d8d10dc6b16f92a7db644a3a99bf482a9.

Reported by:	FreshPorts Sanity Daemon

multimedia/librtmp is removed in 8d01b5458f4660725fcaf562cdbb073debc9b751
RTMP option is removed in ac11b26ab75ddd548c39fe64ccf2e5de66842bd3

Changes:	https://curl.se/changes.html

Remove invalid option as support for librtmp was removed in
8d01b5458f4660725fcaf562cdbb073debc9b751

Approved by:	portmgr (blanket)

Changes:	https://curl.se/changes.html
Security:	CVE-2024-2004, CVE-2024-2398, CVE-2024-2379, CVE-2024-2466

- Update LDAPS_DESC
- Fix CONFIGURE_ARGS
- Clean up patches

USES=autoreconf can be removed after next version update.

ChangeLog:	https://curl.se/changes.html#8_6_0
PR:		276879
Approved by:	maintainer
Exp-run bye:	antoine
MFH:		2024Q1
Security:	02e33cd1-c655-11ee-8613-08002784c58d

Approved by:    portmgr (blanket)