While here allow SRCREVISION to be read everywhere.  The prefetch
script appreciates the additional info so it doesn't have to guess
anymore.  :)

LibreSSL fails after latest update with DTLS1_2 detection not
being considerdate.  GNUTLS seems to be the default now despite
the option still having the "experimental" flag.

This leaves IDS functionality in the core pages, but at least
the build should walk through it without issues now.

This reverts commit bc0b9345.

aux.conf harbours ports that are needed for the build and intermediate
package sets for testing and rebuilding, but that will ultimately be
removed from the sets when they are supposed to be uploaded to the mirror.

We only want the actual versioned package names from now on.

We still have a number of patches to import including HBSD so
we'd bounce a lot of stuff for no apparent reason in obsolete.

Right now we trust the mtree file since we can't guarantee
consistency after unpack.  This way we will be able to warn
on unsigned mtree file or when the signature is wrong meaning
somebody meddled with the mtree file.

Should work for both base and kernel.

PR: https://github.com/opnsense/core/issues/3473

We don't save mc-light because it was only provided per user
request, but we need to keep the flowd for ourselves.  while
here this removes PYTHON and PERL bindings from flowd since
we have a standalone Python reader now.

It was unsafe to be included during an old major iteration,
but now it's safe.

PR: https://github.com/opnsense/ports/issues/76

Lua version used is 5.3.

Rust is 139 Mb download to update sets.  Sets are 500Mb currently
so that adds just shy of 30% download space required and an additional
unpack space of the same amount for major upgrades for absolutely
no benefit.

I guess the requirements come from OPNids so we will find a way,
but that currently is not it because the footprint is too high.  :(

This reverts commit ec7bb2d2.

* Added SNMP make option for FRR 5 and 6
* See: http://docs.frrouting.org/en/latest/snmp.html

os-sunnyvalley: we can enable the build for LibreSSL

does not specifically depend on OpenSSL/LibreSSL for now. The same
holds true for elasticsearch5.