java/bouncycastle15: update 1.55 -> 1.56

port changes:
- upstream updated list of its MASTER_SITES (bouncycastle.gva.es
  is gone, downloads.bouncycastle.org changed to www.bouncycastle.org);
- pkg-descr updated to reflect current features;
- installation of zipped bundled sources made optional, enabled by
  default to match previous behavior.

Some of new version changes:
- a new API for DTLS/TLS and a JSSE provider suitable for Java 5 and later;
- support for RFC 7539 ChaCha20 and Poly1305 has also been added
  and general support for SHA-3 in the PKIX APIs has been improved;

Full details of the release:

PR:		215507
Changes:	https://www.bouncycastle.org/releasenotes.html
Security:       CVE-2016-1000338, CVE-2016-1000339, CVE-2016-1000340,
		CVE-2016-1000341, CVE-2016-1000342, CVE-2016-1000343,
		CVE-2016-1000344, CVE-2016-1000345, CVE-2016-1000346,
		CVE-2016-1000352
Submitted by:	Eugene Grosbein <ports@grosbein.net> (maintainer)

4 files changed, 32 insertions, 19 deletions

diff --git a/java/bouncycastle15/Makefile b/java/bouncycastle15/Makefile
index c0238ca64e48..d55cc1473ab3 100644
--- a/java/bouncycastle15/Makefile
+++ b/java/bouncycastle15/Makefile
@@ -2,11 +2,10 @@
 # $FreeBSD$
 
 PORTNAME=	bouncycastle
-PORTVERSION=	1.55
+PORTVERSION=	1.56
 CATEGORIES=	java security
-MASTER_SITES=	http://downloads.bouncycastle.org/java/ \
-		http://polydistortion.net/bc/download/ \
-		http://bouncycastle.gva.es/download/
+MASTER_SITES=	http://www.bouncycastle.org/download/ \
+		http://polydistortion.net/bc/download/
 PKGNAMESUFFIX=	15
 DISTNAME=	crypto-${DVERSION}
 
@@ -21,7 +20,10 @@ BUILD_DEPENDS=	${JAVALIBDIR}/activation.jar:java/jaf \
 RUN_DEPENDS=	${JAVALIBDIR}/activation.jar:java/jaf \
 		${JAVALIBDIR}/mail.jar:java/javamail
 
-OPTIONS_DEFINE=	DOCS
+OPTIONS_DEFINE=	DOCS ZIPSRC
+OPTIONS_DEFAULT=	ZIPSRC
+OPTIONS_SUB=	yes
+ZIPSRC_DESC=	Install bundled ZIP source files
 CONFLICTS_INSTALL=	bouncycastle-1.4*
 DVERSION=	${PORTVERSION:S/.//}
 NO_ARCH=	yes
@@ -38,23 +40,27 @@ MAKE_ARGS=	-f ant/jdk${JDKNVERSION}+.xml
 ALL_TARGET=	build-provider build zip-src
 
 JARS_SRC=	bcmail bcpkix bcprov bcpg
-JARS_DOCS=	${JARS_SRC} bctest
+JARS_DOCS=	${JARS_SRC} bctest bctls
 JARS=		${JARS_DOCS} bcprov-ext
 
 PORTDOCS=	*
 
+.include <bsd.port.options.mk>
+
 do-install:
-	@${MKDIR} ${STAGEDIR}${DATADIR}
 .for jar in ${JARS}
 	${INSTALL_DATA} ${WRKSRC}/build/artifacts/jdk${JDKMVERSION}/jars/${jar}-jdk${JDKNVERSION}on-${DVERSION}.jar \
 	      ${STAGEDIR}${JAVAJARDIR}/${jar}.jar
 .endfor
+	${INSTALL_DATA} ${WRKSRC}/jars/bcprov-jdk${JDKNVERSION}on-${DVERSION}.jar \
+		${STAGEDIR}${JAVAJARDIR}/bcprov.jar
+.if ${PORT_OPTIONS:MZIPSRC}
+	@${MKDIR} ${STAGEDIR}${DATADIR}
 .for jar in ${JARS_SRC}
 	${INSTALL_DATA} ${WRKSRC}/build/artifacts/jdk${JDKMVERSION}/${jar}-jdk${JDKNVERSION}on-${DVERSION}/src.zip \
 	      ${STAGEDIR}${DATADIR}/${jar}-src.zip
 .endfor
-	${INSTALL_DATA} ${WRKSRC}/jars/bcprov-jdk${JDKNVERSION}on-${DVERSION}.jar \
-		${STAGEDIR}${JAVAJARDIR}/bcprov.jar
+.endif
 
 do-install-DOCS-on:
 	@${MKDIR} ${STAGEDIR}${DOCSDIR}
diff --git a/java/bouncycastle15/distinfo b/java/bouncycastle15/distinfo
index f802f24b8696..13888910b78a 100644
--- a/java/bouncycastle15/distinfo
+++ b/java/bouncycastle15/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1472104749
-SHA256 (crypto-155.tar.gz) = a14fad87697463deda91f84c1eb51d6a4abf26cfc122ee6af832feca3adf85a6
-SIZE (crypto-155.tar.gz) = 117160658
+TIMESTAMP = 1482474725
+SHA256 (crypto-156.tar.gz) = 2c80ae39b8c76d35b959d6d7b4e54176f899e8d3f4a21ce5b3eb69ab47450d37
+SIZE (crypto-156.tar.gz) = 114207297
diff --git a/java/bouncycastle15/pkg-descr b/java/bouncycastle15/pkg-descr
index f8492eebcd66..b330c53b83fc 100644
--- a/java/bouncycastle15/pkg-descr
+++ b/java/bouncycastle15/pkg-descr
@@ -4,14 +4,20 @@ The Bouncy Castle Crypto APIs consist of the following:
 . A provider for the JCE and JCA.
 . A clean room implementation of the JCE 1.2.1.
 . A library for reading and writing encoded ASN.1 objects.
+. Lightweight APIs for TLS (RFC 2246, RFC 4346) and DTLS (RFC 4347).
 . Generators for Version 1 and Version 3 X.509 certificates, Version 2 CRLs,
   and PKCS12 files.
 . Generators for Version 2 X.509 attribute certificates.
-. Generators/Processors for S/MIME and CMS (PKCS7).
+. Generators/Processors for S/MIME and CMS (PKCS7/RFC 3852).
 . Generators/Processors for OCSP (RFC 2560).
-. Generators/Processors for TSP (RFC 3161).
+. Generators/Processors for TSP (RFC 3161 & RFC 5544).
+. Generators/Processors for CMP and CRMF (RFC 4210 & RFC 4211).
 . Generators/Processors for OpenPGP (RFC 2440).
-. A signed jar version suitable for JDK 1.4/1.5 and the Sun JCE.
+. Generators/Processors for Extended Access Control (EAC).
+. Generators/Processors for Data Validation and Certification Server (DVCS) -
+  RFC 3029.
+. Generators/Processors for DNS-based Authentication of Named Entities (DANE).
+. A signed jar version suitable for JDK 1.4-1.8 and the Sun JCE.
 
 It's distributed under a modified X license.
 
diff --git a/java/bouncycastle15/pkg-plist b/java/bouncycastle15/pkg-plist
index 1b31417387fa..7614e306adb1 100644
--- a/java/bouncycastle15/pkg-plist
+++ b/java/bouncycastle15/pkg-plist
@@ -4,7 +4,8 @@
 %%JAVAJARDIR%%/bcprov.jar
 %%JAVAJARDIR%%/bcprov-ext.jar
 %%JAVAJARDIR%%/bctest.jar
-%%DATADIR%%/bcmail-src.zip
-%%DATADIR%%/bcpg-src.zip
-%%DATADIR%%/bcpkix-src.zip
-%%DATADIR%%/bcprov-src.zip
+%%JAVAJARDIR%%/bctls.jar
+%%ZIPSRC%%%%DATADIR%%/bcmail-src.zip
+%%ZIPSRC%%%%DATADIR%%/bcpg-src.zip
+%%ZIPSRC%%%%DATADIR%%/bcpkix-src.zip
+%%ZIPSRC%%%%DATADIR%%/bcprov-src.zip