kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
freebsd-ports/security/ssh/Makefile

136 lines
4 KiB
Makefile
Raw Normal View History

Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
# New ports collection makefile for: ssh
# Date created: 30 Jul 1995
FreeBSD.ORG -> FreeBSD.org Prompted by PR: 13476, 13477 Submitted by: KATO Tsuguru
1999-08-31 08:53:31 +02:00
# Whom: torstenb@FreeBSD.org
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
#
$Id$ -> $FreeBSD$
1999-08-31 03:53:22 +02:00
# $FreeBSD$
Move perl depends under USE_PERL
1996-03-24 00:36:32 +01:00
#
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
Update with the new PORTNAME/PORTVERSION variables
2000-04-09 20:34:06 +02:00
PORTNAME= ssh
Update to version 1.2.33.
2002-06-30 05:57:57 +02:00
PORTVERSION= 1.2.33
Bump PORTREVISION because of lib-dep change (see below). From submitter: - Remove an outdated comment in the Makefile. - Fix MASTER_SITES. - Switch from ancient math/libgmp-freebsd to math/libgmp4, the former hardly compiles on architectures other/newer than i386 and alpha. Tested on i386 and sparc64. Submitted by: marius@alchemy.franken.de
2003-01-11 16:38:34 +01:00
PORTREVISION= 2
Remove redundant/inappropriate CATEGORIES. People need to start reading the Porter's Handbook. :-)
2000-06-02 05:18:54 +02:00
CATEGORIES= security ipv6
Bump PORTREVISION because of lib-dep change (see below). From submitter: - Remove an outdated comment in the Makefile. - Fix MASTER_SITES. - Switch from ancient math/libgmp-freebsd to math/libgmp4, the former hardly compiles on architectures other/newer than i386 and alpha. Tested on i386 and sparc64. Submitted by: marius@alchemy.franken.de
2003-01-11 16:38:34 +01:00
MASTER_SITES= ftp://ftp.ssh.com/pub/ssh/ \
ftp://ftp.nsysu.edu.tw/Unix/Security/ssh/ \
ftp://ftp.cronyx.ru/mirror/ssh/ \
ftp://ftp.univie.ac.at/applications/ssh.com/
Update to version 1.2.33.
2002-06-30 05:57:57 +02:00
Note the reason why this port is still at 1.2.27 (1.2.30 is under the more restrictive SSH2 license), deprecate this port in favour of OpenSSH as a parting shot (still allow people to build by setting an environment variable) and remove myself as maintainer since I don't have any interest in maintaining it. About the only thing this port does which OpenSSH can't do well is Kerberized logins..once that is working properly in OpenSSH I'm planning to nuke the port.
2001-02-06 02:22:25 +01:00
MAINTAINER= ports@FreeBSD.org
De-pkg-comment.
2003-02-20 20:00:52 +01:00
COMMENT= Secure shell client and server (remote login program)
Add torstenb as maintainer.
1995-11-09 06:58:00 +01:00
- add CONFLICTS Submitted by: eikemeier@fillmore-labs.com
2003-10-13 06:03:41 +02:00
CONFLICTS= openssh-* openssh-portable-* openssh-gssapi-* ssh2-3.*
- define NO_LATEST_LINK, even if port is forbiden Noticed by: Ports with duplicate LATEST_LINKS report
2004-04-19 16:12:36 +02:00
NO_LATEST_LINK= YES
Whoa there, boy, that's a mighty big commit y'all have there... Begin autotools sanitization sequence by requiring ports to explicitly specify which version of {libtool,autoconf,automake} they need, erasing the concept of a "system default". For ports-in-waiting: USE_LIBTOOL=YES -> USE_LIBTOOL_VER=13 USE_AUTOCONF=YES -> USE_AUTOCONF_VER=213 USE_AUTOMAKE=YES -> USE_AUTOMAKE_VER=14 Ports attempting to use the old style system after June 1st 2004 will be sorely disappointed.
2004-03-14 07:17:56 +01:00
USE_AUTOCONF_VER= 213
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
GNU_CONFIGURE= YES
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 04:03:30 +02:00
USE_PERL5= YES
Tidy up whitespace.
2004-04-10 19:26:55 +02:00
CONFIGURE_ENV+= PERL=${PERL5}
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
Tidy up whitespace.
2004-04-10 19:26:55 +02:00
CONFIGURE_ARGS+=--with-etcdir=${PREFIX}/etc
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 04:03:30 +02:00
# Uncomment if all your users are in their own group and their homedir
# is writeable by that group. Beware the security implications!
#
Tidy up whitespace.
2004-04-10 19:26:55 +02:00
#CONFIGURE_ARGS+= --enable-group-writeability
Update from ssh-1.2.19 to ssh-1.2.20. All patches applied still, I just regenerated them to fix the line numbers. Also, I added two commented out options in Makefile, one to tell sshd that a group writeable homedir is OK because all users are in their own group, and the other is to allow an unencrypted connection (which is dangerous since it can lead to compromise of keys), but on a secure network it's damn useful for backups etc.
1997-04-25 07:01:06 +02:00
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 04:03:30 +02:00
# Uncomment if you want to allow ssh to emulate an unencrypted rsh connection
# over a secure medium (i.e. allow SSH connections without encryption).
# This is normally dangerous since it can lead to the disclosure of keys
# and passwords.
#
Tidy up whitespace.
2004-04-10 19:26:55 +02:00
#CONFIGURE_ARGS+= --with-none
Update from ssh-1.2.19 to ssh-1.2.20. All patches applied still, I just regenerated them to fix the line numbers. Also, I added two commented out options in Makefile, one to tell sshd that a group writeable homedir is OK because all users are in their own group, and the other is to allow an unencrypted connection (which is dangerous since it can lead to compromise of keys), but on a secure network it's damn useful for backups etc.
1997-04-25 07:01:06 +02:00
If KRB5_HOME is defined, compile ssh with krb5 support.
1998-08-02 00:24:55 +02:00
.if defined(KRB5_HOME) && exists(${KRB5_HOME})
SUID ssh breaks kerberos; disable in the kerberized case. I even like the idea of breaking SUID bit permanently, but I'll leave this up to the maintainer.
1999-08-09 19:12:44 +02:00
CONFIGURE_ARGS+=--with-kerberos5=${KRB5_HOME} --enable-kerberos-tgt-passing \
--disable-suid-ssh
If KRB5_HOME is defined, compile ssh with krb5 support.
1998-08-02 00:24:55 +02:00
.endif
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
# Include support for the SecureID card
# Warning: untested !
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 04:03:30 +02:00
#
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
.if defined(WITH_SECUREID)
Tidy up whitespace.
2004-04-10 19:26:55 +02:00
CONFIGURE_ARGS+= --with-secureid
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
.endif
# Don't use IDEA. IDEA can be freely used for non-commercial use. However,
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 04:03:30 +02:00
# commercial use may require a licence in a number of countries. Since SSH
# itself may not be used for commercial purposes without a license, we
# enable IDEA by default since the user would already be getting himself
# into trouble.
#
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
.if defined(WITHOUT_IDEA)
Tidy up whitespace.
2004-04-10 19:26:55 +02:00
CONFIGURE_ARGS+= --without-idea
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
.endif
Note the reason why this port is still at 1.2.27 (1.2.30 is under the more restrictive SSH2 license), deprecate this port in favour of OpenSSH as a parting shot (still allow people to build by setting an environment variable) and remove myself as maintainer since I don't have any interest in maintaining it. About the only thing this port does which OpenSSH can't do well is Kerberized logins..once that is working properly in OpenSSH I'm planning to nuke the port.
2001-02-06 02:22:25 +01:00
.include <bsd.port.pre.mk>
Fix libgmp breakage on -current.
2002-04-26 08:23:41 +02:00
.if ${OSVERSION} > 500023
Bump PORTREVISION because of lib-dep change (see below). From submitter: - Remove an outdated comment in the Makefile. - Fix MASTER_SITES. - Switch from ancient math/libgmp-freebsd to math/libgmp4, the former hardly compiles on architectures other/newer than i386 and alpha. Tested on i386 and sparc64. Submitted by: marius@alchemy.franken.de
2003-01-11 16:38:34 +01:00
LIB_DEPENDS+= gmp.6:${PORTSDIR}/math/libgmp4
Fix libgmp breakage on -current.
2002-04-26 08:23:41 +02:00
MAKE_ENV+= GMPINCDIR="${LOCALBASE}/include" \
GMPLIBDIR="${LOCALBASE}/lib"
.endif
Note the reason why this port is still at 1.2.27 (1.2.30 is under the more restrictive SSH2 license), deprecate this port in favour of OpenSSH as a parting shot (still allow people to build by setting an environment variable) and remove myself as maintainer since I don't have any interest in maintaining it. About the only thing this port does which OpenSSH can't do well is Kerberized logins..once that is working properly in OpenSSH I'm planning to nuke the port.
2001-02-06 02:22:25 +01:00
.if (${OSVERSION} >= 400016 && !defined(REALLY_WANT_SSH))
Update the wording on IGNORE.
2004-12-20 04:20:31 +01:00
IGNORE= is now deprecated: OpenSSH is a superior version of SSH which has been included in the FreeBSD base system since 4.0-RELEASE. To override this warning set the REALLY_WANT_SSH environment variable and rebuild
Note the reason why this port is still at 1.2.27 (1.2.30 is under the more restrictive SSH2 license), deprecate this port in favour of OpenSSH as a parting shot (still allow people to build by setting an environment variable) and remove myself as maintainer since I don't have any interest in maintaining it. About the only thing this port does which OpenSSH can't do well is Kerberized logins..once that is working properly in OpenSSH I'm planning to nuke the port.
2001-02-06 02:22:25 +01:00
.endif
1.2.22 -> 1.2.25 Somebody needs to go through patch-af to check it, since I'm not sure about some of the stuff. This version fixes a security flaw in previous version.
1998-06-12 09:55:14 +02:00
MAN1= scp1.1 ssh-add1.1 ssh-agent1.1 ssh-keygen1.1 ssh1.1 \
make-ssh-known-hosts1.1
MAN8= sshd1.8
Remove manpages from PLIST and use MLINKS instead of a bunch of ${LN} calls.
1999-07-16 08:09:43 +02:00
MLINKS= make-ssh-known-hosts1.1 make-ssh-known-hosts.1 \
scp1.1 scp.1 \
ssh-add1.1 ssh-add.1 \
ssh-agent1.1 ssh-agent.1 \
ssh-keygen1.1 ssh-keygen.1 \
ssh1.1 ssh.1 \
ssh.1 slogin.1 \
ssh1.1 slogin1.1 \
sshd1.8 sshd.8
Use MAN? macros. CATEGORIES+= -> CATEGORIES.
1996-11-18 12:44:27 +01:00
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
pre-patch:
mv -> ${MV}.
1997-09-11 20:31:52 +02:00
@${MV} -f ${WRKSRC}/make-ssh-known-hosts.pl \
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
${WRKSRC}/make-ssh-known-hosts.pl.in
post-install:
Several fixes/improvements :- - protect the secret RSA etc/ssh_host_key. It is now generated on install (either by pkg_add or make install) if not already present and is not ever added to a package since it's your host's credentials. It should not be removed on pkg_delete, since you are in big trouble if you did this (for example) pkg_delete ssh-1.2.14; pkg_add ssh-1.2.15.tgz. - fix the broken manpage symlink when compressing man pages (slogin.1 has been causing /etc/weekly to generate cron messages) - zlib 1.0.4 is now "blessed" again, the ssh working sources now use this instead of v0.95. The decompression problem was fixed in either 1.0.3 or 1.0.4. Also, the current version of cvs uses zlib 1.0.4 as well.. - perl5.002 -> perl5.003 Reviewed by: torstenb
1996-08-08 15:57:02 +02:00
@if [ ! -f ${PREFIX}/etc/ssh_host_key ]; then \
KATO mega patch - ECHO -> ECHO_MSG For some ports: - pre-fetch -> pre-everything - ECHO -> ECHO_CMD PR: ports/56820-56858 Submitted by: KATO Tsuguru <tkato@prontomail.com>
2003-09-27 03:01:08 +02:00
${ECHO_MSG} "Generating a secret host key..."; \
Don't install the startup script if ssh is being run out of inetd.conf PR: 15691 Submitted by: Roger Marquis <marquis@roble.com>
2000-08-23 11:57:05 +02:00
${PREFIX}/bin/ssh-keygen -f ${PREFIX}/etc/ssh_host_key -N ""; \
fi; \
if [ "`grep ssh /etc/inetd.conf|grep -v ^#ssh`" = "" ]; then \
if [ ! -f ${PREFIX}/etc/rc.d/sshd.sh ]; then \
KATO mega patch - ECHO -> ECHO_MSG For some ports: - pre-fetch -> pre-everything - ECHO -> ECHO_CMD PR: ports/56820-56858 Submitted by: KATO Tsuguru <tkato@prontomail.com>
2003-09-27 03:01:08 +02:00
${ECHO_MSG} "Installing ${PREFIX}/etc/rc.d/sshd.sh startup file."; \
Add better sshd startup scripts; specifically, allow restarting and stopping the server. Martti's submission did not include -h, which I added because if I had added the scripts the way he submitted them, the server wouldn't be started on startup. PR: 10196 Submitted by: Martti Kuparinen <martti.kuparinen@ericsson.com> Reviewed by: kris (partially) No response: maintainers (PR opened February 22, 1999)
2000-04-06 00:21:44 +02:00
${SED} -e 's+!!PREFIX!!+${PREFIX}+g' ${FILESDIR}/sshd.sh \
Don't install the startup script if ssh is being run out of inetd.conf PR: 15691 Submitted by: Roger Marquis <marquis@roble.com>
2000-08-23 11:57:05 +02:00
> ${PREFIX}/etc/rc.d/sshd.sh; \
chmod -> ${CHMOD} chown -> ${CHOWN}
1999-08-22 21:01:07 +02:00
${CHMOD} 751 ${PREFIX}/etc/rc.d/sshd.sh; \
Don't install the startup script if ssh is being run out of inetd.conf PR: 15691 Submitted by: Roger Marquis <marquis@roble.com>
2000-08-23 11:57:05 +02:00
fi; \
Install an sshd.sh startup file.
1996-06-15 19:50:18 +02:00
fi
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
Autopick any wish present even wish4.0 Autopick libwrap.a
1996-01-25 03:08:25 +01:00
# Include tcp-wrapper support (call remote identd)
Tidy up whitespace.
2004-04-10 19:26:55 +02:00
CONFIGURE_ARGS+= --with-libwrap
Autopick any wish present even wish4.0 Autopick libwrap.a
1996-01-25 03:08:25 +01:00
Add IPv6 support to ssh. The IPv6 patch was obtained from the kame repository and has been been writen by KIKUCHI Takahiro <kick@kyoto.wide.ad.jp> Due to the whole mess with different patches it was necessary to include both the IPv6 patch and patch-ssh-1.2.27-bsd.tty.chown in ${PATCHDIR}. Since both patches modify the configure script it was also necessary to rebuild it via autoconf from configure.in. I've decided to use USE_AUTOCONF instead of including the re-build configure script in ${FILESDIR} Obtained from: KAME/WIDE
2000-01-14 20:37:39 +01:00
# Original IPv6 patches were obtained from ftp://ftp.kyoto.wide.ad.jp/IPv6/ssh/
# ssh-1.2.27-IPv6-1.5-patch.gz
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
# We still use WITH_INET6 here and try to support pre 4.0 machines with kame
Checfor OSVERSION _or_ USE_INET6 when deciding if IPv6 support should be added. This is done to support the build on pre 4.0 machines with the KAME IPv6 stack installed. It has been verified to build+work with both 4.0 and 3.4+kame. Org. patch Submitted By: Munechika SUMIKAWA <sumikawa@ebina.hitachi.co.jp>
2000-02-12 20:27:40 +01:00
# IPv6 stack
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
.if ${OSVERSION} >= 400014 || ( ${OSVERSION} < 400014 && defined(WITH_INET6) )
Make buildable on IPv4-only kernel. Specified by: ache Reviewed by: torstenb
2000-02-20 18:30:54 +01:00
CONFIGURE_ARGS+= --enable-ipv6
Add IPv6 support to ssh. The IPv6 patch was obtained from the kame repository and has been been writen by KIKUCHI Takahiro <kick@kyoto.wide.ad.jp> Due to the whole mess with different patches it was necessary to include both the IPv6 patch and patch-ssh-1.2.27-bsd.tty.chown in ${PATCHDIR}. Since both patches modify the configure script it was also necessary to rebuild it via autoconf from configure.in. I've decided to use USE_AUTOCONF instead of including the re-build configure script in ${FILESDIR} Obtained from: KAME/WIDE
2000-01-14 20:37:39 +01:00
.else
CONFIGURE_ARGS+= --disable-ipv6
.endif
If using socks, make sure you find socks library
1996-07-23 01:06:08 +02:00
# Include SOCKS firewall support
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
.if defined(WITH_SOCKS)
Tidy up whitespace.
2004-04-10 19:26:55 +02:00
CONFIGURE_ARGS+= --with-socks="-L${PREFIX}/lib -lsocks5" --with-socks5
If using socks, make sure you find socks library
1996-07-23 01:06:08 +02:00
.endif
Change *_DEPENDS on lang/perl5 to USE_PERL5 so we won't have any dependencies to perl5 in -current. This might cause some unwanted perl5 installations on -stable (if it was originally RUN_DEPENDS, perl5 will now be installed during build too, etc.), but its lifetime is limited anyway.
1999-01-02 01:12:21 +01:00
Correct PLIST for the non-X11 case. (This was OK'ed by the maintainer quite some time ago).
1999-11-06 20:43:18 +01:00
# Include extra files if X11 is installed
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
.if defined(WITH_X11) || (exists(${X11BASE}/lib/libX11.a) \
typo clean up police: \s -> \t
2001-02-14 21:19:44 +01:00
&& !defined(WITHOUT_X11))
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
USE_XLIB= yes
Correct whitespace introduced during PORTNAME conversion and portlint
2000-04-21 10:19:33 +02:00
PLIST:= ${WRKDIR}/PLIST
Correct PLIST for the non-X11 case. (This was OK'ed by the maintainer quite some time ago).
1999-11-06 20:43:18 +01:00
pre-install:
Rename PLIST.X11 to pkg-plist.x11.
2000-10-08 08:03:48 +02:00
@${CAT} ${PKGDIR}/pkg-plist.x11 ${PKGDIR}/pkg-plist > ${PLIST}
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
.else
Tidy up whitespace.
2004-04-10 19:26:55 +02:00
CONFIGURE_ARGS+= --without-x
Correct PLIST for the non-X11 case. (This was OK'ed by the maintainer quite some time ago).
1999-11-06 20:43:18 +01:00
.endif
Change *_DEPENDS on lang/perl5 to USE_PERL5 so we won't have any dependencies to perl5 in -current. This might cause some unwanted perl5 installations on -stable (if it was originally RUN_DEPENDS, perl5 will now be installed during build too, etc.), but its lifetime is limited anyway.
1999-01-02 01:12:21 +01:00
.include <bsd.port.post.mk>
Reference in a new issue Copy permalink