be stricter when requiring gcc 4.4+:
* pkg/48508 refers only SunOS and NetBSD (in fact, only NetBSD 5 and
  Solaris 10 - but I expect at least lower versions come with same
  issues and higher might have improved toolchain)
* check only for x86 architectures (no sse3 on sparc, ppc, arm, mips, ...)
* only require minimum gcc version when gcc is the used compiler - SunPRO,
  clang, pcc ... might behave differently
* hopefully someone picks it up and fix the binutils dependency, if required
fix "do what I mean" for OPSYS check
<jperkin> also indent the .*, so ".  if .." and ".  endif" for the internal ones
Updating package for Perl5 module Module::Pluggable from CPAN in
devel/p5-Module-Pluggable from 4.8 to 5.1

Upstream changes:
2014-01-05 - 5.1
    Add in missing files left out of the MANIFEST due to stupidity (thanks to Petr Pisar)

2013-12-20 - 5.0
    Gain support for @INC hooks and hence for App::FatPacker (thanks to Diab Jerius)

2013-10-22 - 4.9
    Fix the fact that we can't handle single letter package names (thanks sbaynes)
Updated devel/p5-Module-Pluggable to 5.1
Bring package for Perl5 module Encode in sync with core module taking
recent version from CPAN into devel/p5-Encode.

Upstream changes:
$Revision: 2.57 $ $Date: 2014/01/03 04:52:36 $
! encengine.c
  Pulled: sun compiler (maybe others) doesn't like UTF-8 in the source
  https://github.com/dankogai/p5-encode/pull/17
! bin/enc2xs
  Merged RT#91763: POD errors
  https://rt.cpan.org/Ticket/Display.html?id=91763

2.56 2013/12/22 13:40:00
! Encode.pm t/Encode.t
  Merged RT#91569: [PATCH] decode_utf8 and non-PVs
  https://rt.cpan.org/Ticket/Display.html?id=91569

2.55 2013/09/14 07:51:59
! Encode.pm
  Makefile.PL
  Unicode/Unicode.pm
  lib/Encode/Alias.pm
  lib/Encode/CN/HZ.pm
  lib/Encode/Encoder.pm
  lib/Encode/Encoding.pm
  lib/Encode/GSM0338.pm
  lib/Encode/Guess.pm
  lib/Encode/JP/JIS7.pm
  lib/Encode/KR/2022_KR.pm
  lib/Encode/MIME/Header.pm
  lib/Encode/MIME/Header/ISO_2022_JP.pm
  lib/Encode/Unicode/UTF7.pm
  t/Encoder.t
  replaced 'use base' with 'use parent'
    base.pm is an heavy module for what it is used for.
    Fortunately it has a tiny replacement, parent.pm
    that is on CPAN but also in perl core since 5.10.1.
  https://github.com/dankogai/p5-encode/pull/15
Updated textproc/p5-Encode to 2.57
Updating package for Perl5 module Sys::Filesystem from CPAN in
sysutils/p5-Sys-Filesystem from 1.30nb5 to 1.405.

pkgsrc changes:
- remove upstream applied patches
- switch back from Module::Build to ExtUtils::MakeMaker

Upstream changes since 1.30:
1.405 2013-10-28
    - Fix Mswin32 mounted/unmounted support (thanks to Christian "Mithaldu"
      Walde for remote testing support
    - skip format test in case of unmounted device (unmounted devices might
      or might not know in before the fstype)
    - clean up basic tests and BAIL_OUT when unsupported environment
      encountered

1.404 2013-10-26
    - move to Makefile.PL in favour of developer reqs
    - change required perl version to 5.8.1
    - rewrite core routines of Sys::Filesystem
    - don't search for Darwin tools in path, rely on some
      well known paths
    - general, minor code cleanup

1.403 2013-10-23
    - Honor PATH_FSTAB in the environment on a NetBSD system if present
      (Thanks to dholland@NetBSD.org)
    - try improve error handling on Darwin to avoid smoke errors
    - be noisy about where we're running on during tests
    - remove runtime recommends for author tests
    - bump required version of Module::Pluggable to avoid blead whining
    - include p5-toolchain gang recommended way to declare developer
      dependencies
    - use proper indenting for Changes

1.402 2013-09-24
    - remove Makefile.PL passthrough
    - don't prove whether Win32 is supported - we know it (should fix
      RT#88901 - thanks Michiel Beijen)
    - try to improve supported control
    - put Win32::DriveInfo into feature "Win32" (I'd like to get feedback
      whether it helps)

1.401 2013-09-08
    - Fix MacOS X / Darwin without diskutil
    - Changes reformatted as per CPAN::Changes::Spec

1.400 2013-09-03
    - Moving to GitHub for easier contributing
    - Pod typo / encoding fixes (rt#85898, rt#77699), thanks to Slaven
      ReziÄ‡, Andreas J. KÃ¶nig and Gregor Herrmann
    - Fix MacOS X 10.8 (diskutil vs. disktool)
    - Update requirements / recommendations
    - Fix AIX (rt#79188) - thanks to David Lee
    - Fix Solaris debug leftover (rt#72717) - thanks to Kenneth Ã–lwing
    - Fix Tests (rt#62248) - thanks to Daphne Pfister
    - Fix configure_requires (rt#62249) - thanks to Daphne Pfister
Updated sysutils/p5-Sys-Filesystem to 1.405
Updating pkgsrc package for Perl5 module MooX::Cmd from CPAN in
devel/p5-MooX-Cmd from 0.008nb1 to 0.009.

pkgsrc changes:
- adjust dependencies

Upstream changes:
  Change: 0abd26c7a29d6b2d9b225af320891f224194996a
  Author: Diab Jerius <djerius@cpan.org>
  Date : 2014-02-01 22:17:39 +0000

    Apply submitted fix for RT#91481 - without test ..

    but with dist.ini updated ...

  Change: 98feae23ad3c3caa679df82083d6db2daeb63900
  Author: Jens Rehsack <sno@netbsd.org>
  Date : 2014-02-01 22:06:58 +0000

    fix RT#91500 - incorrect execute_return if ...

    The implication was wrong, indeed - but the effort was increadible.
    Testing sucks :P

  Change: 790ba58bc37a7104576c1bf741b98873e4562ae8
  Author: Jens Rehsack <sno@netbsd.org>
  Date : 2014-01-29 07:05:42 +0000

    distinguish between test_cmd and test_cmd_ok

  Change: f3c3dfcb7586a2922702c91bad012acf0031ad9c
  Author: Jens Rehsack <sno@netbsd.org>
  Date : 2014-01-29 07:04:20 +0000

    after chained constructor, we can use getters

    * here: use command_execute_return_method_name getter instead of

    hidden builder call and wasting the result

  Change: 6077f673f240f71bcdcd6e9e3cb09fef1de4ab2f
  Author: Jens Rehsack <sno@netbsd.org>
  Date : 2013-12-02 08:49:48 +0000

    add missing prereqs
Updated devel/p5-MooX-Cmd to 0.009
Updating package for Perl5 module Net::SSLeay in CPAN in
security/p5-Net-SSLeay from 1.55nb1 to 1.58.

Upstream changes:
1.58 2014-01-15
     Always use size_t for strlen() return value, requested by Alexander Bluhm.
     t/external/20_cert_chain.t was missing from dist.
     Version number in META.yml was incorrect
     Improvements to test t/external/20_cert_chain.t to provoke following bug:
     Fixed crash due to SSL_get_peer_cert_chain incorrectly free'ing the chain
     after use.
     Fixed a problem when compiling against openssl where OPENSSL_NO_EC is set.

1.57 2014-01-09
     Fixed remaining problems with test suite: pod coverage and kwalitee tests
     are only enabled with RELEASE_TESTING=1

1.56 2014-01-08
     Fixed a typo in documentation of BEAST Attack, patched by gregor
     herrmann.
     Added LICENSE file copied form OpenSSL distribution to prevent complaints
     from various versions of kwalitee.
     Adjusted license: in META.yml to be 'openssl'
     Adds support for the basic operations necessary to support ECDH for PFS,
     e.g. EC_KEY_new_by_curve_name, EC_KEY_free and SSL_CTX_set_tmp_ecdh.
     Improvements to t/handle/external/50_external.t to handle the case when a
     test connection was not possible. Patched by Alexandr Ciornii.
     Added support for ALPN TLS extension. Patch from Lubomir Rintel. Tested
     with openssl-1.0.2-stable-SNAP-20131205.
     Fix an use-after-free error. Patch from Lubomir Rintel.
     Fixed a problem with  Invalid comparison on OBJ_cmp result in
     t/local/36_verify.t. Contributed by paul.
     Added support for get_peer_cert_chain(). Patch by Markus Benning.
     Fixed a bug that cold cause stack faults: mixed up PUTBACK with SPAGAIN
     in ssleay_RSA_generate_key_cb_invoke()
     a final PUTBACK is needed here. A second issue is also fixed:
     cb->data defaults to &PL_sv_undef but throught the code you do not check
     against &PL_sv_undef, just NULL.
     To avoid passing the 3rd optional arg at all, do not create it. This fixes all the
     cb->data checks and wrong refcounts on &PL_sv_undef. Patched by Reini Urban.
     Deleted support for SSL_get_tlsa_record_byname: it is not included in
     OpenSSL git master.
Updated security/p5-Net-SSLeay to 1.58
Updating package for Perl5 module IO::Socket::SSL from CPAN in
security/p5-IO-Socket-SSL from 1.953 to 1.967.

Upstream changes:
1.967 2014/02/06
- verify the hostname inside a certificate by default with a superset of
  common verification schemes instead of not verifying identity at all.
  For now it will only complain if name verification failed, in the future
  it will fail certificate verification, forcing you to set the expected
  SSL_verifycn_name if you want to accept the certificate.
- new option SSL_fingerprint and new methods get_fingerprint and
  get_fingerprint_bin. Together they can be used to selectively accept
  specific certificates which would otherwise fail verification, like
  self-signed, outdated or from unknown CAs.
  This makes another reason to disable verification obsolete.
- Utils:
  - default RSA key length 2048
  - digest algorithm to sign certificate in CERT_create can be given,
    defaults to SHA-256
  - CERT_create can now issue non-CA selfsigned certificate
  - CERT_create add some more useful constraints to certificate
- spelling fixes, thanks to ville[dot]skytta[at]iki[dot]fi
1.966 2014/01/21
- fixed bug introduced in 1.964 - disabling TLSv1_2 worked no longer with
  specifying !TLSv12, only !TLSv1_2 worked
- fixed leak of session objects in SessionCache, if another session
  replaced an existing session (introduced in 1.965)
1.965 2014/01/16
- new key SSL_session_key to influence how sessions are inserted and looked
  up in the clients session cache. This makes it possible to share sessions
  over different ip:host (like required with some FTPS servers)
- t/core.t - handle case, were default loopback source is not 127.0.0.1, like
  in FreeBSD jails
1.964 2014/01/15
- Disabling TLSv1_1 did not work, because the constant was wrong. Now it gets
  the constants from calling Net::SSLeay::SSL_OP_NO_TLSv1_1 etc
- The new syntax for the protocols is TLSv1_1 instead of TLSv11. This matches
  the syntax from OpenSSL. The old syntax continues to work in SSL_version.
- New functions get_sslversion and get_sslversion_int which get the SSL version
  of the establish session as string or int.
- disable t/io-socket-inet6.t if Acme::Override::INET is installed
1.963 2014/01/13
- fix behavior of stop_SSL: for blocking sockets it now enough to call it
  once, for non-blocking it should be called again as long as EAGAIN and
  SSL_ERROR is set to SSL_WANT_(READ|WRITE).
- don't call blocking if start_SSL failed and downgraded socket has no
  blocking method, thanks to tokuhirom
- documentation enhancements:
  - special section for differences to IO::Socket
  - describe problem with blocking accept on non-blocking socket
  - describe arguments to new_from_fd and make clear, that for upgrading an
    existing IO::Socket start_SSL should be used directly
1.962 2013/11/27
- work around problems with older F5 BIG-IP by offering fewer ciphers on the
  client side by default, so that the client hello stays below 255 byte
1.961 2013/11/26
- IO::Socket::SSL::Utils::CERT_create can now create CA-certificates which
  are not self-signed (by giving issuer_*)
1.960 2013/11/12
only documentation enhancements:
- clarify with text and example code, that within event loops not only
  select/poll should be used, but also pending has to be called.
- better introduction into SSL, at least mention anonymous authentication as
  something you don't want and should take care with the right cipher
- make it more clear, that user better does not change the cipher list, unless
  he really know what he is doing
1.959 2013/11/12
- bugfix test core.t windows only
1.958 2013/11/11
- cleanup: remove workaround for old IO::Socket::INET6 but instead require at
  least version 2.55 which is now 5 years old
- fix t/session.t #RT90240, thanks to  paul[AT]city-fan[DOT]org
1.957 2013/11/11
- fixed t/core.t: test uses cipher_list of HIGH, which includes anonymous
  authorization. With the DH param given by default since 1.956 old versions of
  openssl (like 0.9.8k) used cipher ADH-AES256-SHA (e.g. anonymous
  authorization) instead of AES256-SHA and thus the check for the peer
  certificate failed (because ADH does not exchanges certificates).
  Fixed by explicitly specifying HIGH:!aNULL as cipher
  RT#90221, thanks to  paul[AT]city-fan[DOT]org
- cleaned up tests:
  - remove ssl_settings.req and 02settings.t, because all tests now create a
    simple socket at 127.0.0.1 and thus global settings are no longer needed.
  - some tests did not have use strict(!), fixed it.
  - removed special handling for older Net::SSLeay versions, which are less than
    our minimum requirement
  - some syntax enhancements, removed some SSL_version and SSL_cipher_list
    options where they were not really needed
1.956 2013/11/10
lots of behavior changes for more secure defaults:
- BEHAVIOR CHANGE: make default cipher list more secure, especially
  - no longer support MD5 by default (broken)
  - no longer support anonymous authentication by default (vulnerable to man in
    the middle attacks)
  - prefer ECDHE/DHE ciphers and add necessary ECDH curve and DH keys, so that
    it uses by default forward secrecy, if underlying Net::SSLeay/openssl
    supports it
  - move RC4 at the end, e.g. 3DES is preferred (BEAST attack should hopefully
    been fixed and now RC4 is considered less safe than 3DES)
  - default SSL_honor_cipher_order to 1, e.g. when used as server it tries to
    get the best cipher even if client prefers other ciphers
  PLEASE NOTE that this might break connections with older, less secure
  implementations. In this case revert to 'ALL:!LOW:!EXP:!aNULL' or so.
- BEHAVIOR CHANGE: SSL_cipher_list now gets set on context not SSL object and
  thus gets reused if context gets reused. PLEASE NOTE that using
  SSL_cipher_list together with SSL_reuse_ctx has no longer effect on the
  ciphers of the context.
- rework hostname verification schemes
  - add rfc names as scheme (e.g. 'rfc2818',...)
  - add SIP, SNMP, syslog, netconf, GIST
  - BEHAVIOR CHANGE: fix SMTP - now accept wildcards in CN and subjectAltName
  - BEHAVIOR CHANGE: fix IMAP, POP3, ACAP, NNTP - now accept wildcards in CN
- BEHAVIOR CHANGE: anywhere wildcards like www* now match only 'www1', 'www2'..
  but not 'www'
- anywhere wildcards like x* are no longer applied to IDNA names (which start
  with 'xn--')
- fix crash of Utils::CERT_free
- support TLSv11, TLSv12 as handshake protocols
1.955 2013/10/11
- support for forward secrecy using ECDH, if the Net::SSLeay/openssl version
  supports it.
1.954 2013/9/15
- accept older versions of ExtUtils::MakeMaker and add meta information
  like link to repository only for newer versions.
Updated security/p5-IO-Socket-SSL to 1.967
Updating Perl5 module MooX::Options from CPAN in devel/p5-MooX-Options from
4.002 to 4.008.

Upstream changes:
4.008  2014-02-01 09:49:36 GMT
    * Bug #405 : fix typo in pod (Celogeek San)

4.007  2014-01-17 15:57:22 GMT
    * Bug #403 : fix pod (Grzegorz RoÅ¼niecki)

4.006  2013-12-18 14:31:42 GMT
    * Bug #388 : Short option not properly fixed (fix_argv) (Celogeek San)

4.005  2013-12-16 12:44:02 GMT
   * Bug #383: autosplit should handle all variance of "-" and "_"
	Fix tests (reused vars)

4.004  2013-12-14 13:00:38 GMT
   * Bug #383: autosplit should handle all variance of "-" and "_"
	implement a proper fix_argv method

4.003  2013-12-01 00:40:22 GMT
    * Feature #370 : Add usage, only the usage row with all the long options
      (Celogeek San)
Updated devel/p5-MooX-Options to 4.008