kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
freebsd-ports/security/shibboleth2-sp/Makefile

91 lines
2.4 KiB
Makefile
Raw Normal View History

Convert security to new options framework
2013-04-28 23:02:39 +02:00
# Created by: Janos Mohacsi <janos.mohacsi@bsd.hu>
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
# $FreeBSD$
PORTNAME= shibboleth-sp
Upgrade shibboleth-sp 2.6 and its tool chain
2016-09-11 23:52:17 +02:00
PORTVERSION= 2.6.0
devel/boost-*: update to 1.63.0 Changes: http://www.boost.org/users/history/version_1_63_0.html PR: 215598 Exp-run by: antoine Approved by: office (bapt) MFH: 2017Q1
2017-01-06 09:45:03 +01:00
PORTREVISION= 2
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
CATEGORIES= security www
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
MASTER_SITES= http://shibboleth.net/downloads/service-provider/${PORTVERSION}/
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
MAINTAINER= girgen@FreeBSD.org
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
COMMENT= C++ Shibboleth Service Provider (Internet2) for Apache
Add options for fastcgi and memcached and make odbc and apache optional. Fastcgi allows simple use with NGINX. Memcached is similar to ODBC, in that it offers another option for more persistent session storage than in-memory.
2017-02-02 17:34:10 +01:00
LICENSE= APACHE20
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u. With hat: portmgr Sponsored by: Absolight
2016-04-01 16:25:16 +02:00
BUILD_DEPENDS= boost-libs>=0:devel/boost-libs
Add options for fastcgi and memcached and make odbc and apache optional. Fastcgi allows simple use with NGINX. Memcached is similar to ODBC, in that it offers another option for more persistent session storage than in-memory.
2017-02-02 17:34:10 +01:00
LIB_DEPENDS= libsaml.so:security/opensaml2 \
Upgrade shibboleth-sp 2.6 and its tool chain
2016-09-11 23:52:17 +02:00
libxmltooling-lite.so:devel/xmltooling \
liblog4shib.so:devel/log4shib \
libxerces-c-3.1.so:textproc/xerces-c3 \
libxml-security-c.so:security/apache-xml-security-c
Add build dependency on boost for shibboleth and opensaml. PR: ports/179431
2013-06-09 16:41:24 +02:00
Add options for fastcgi and memcached and make odbc and apache optional. Fastcgi allows simple use with NGINX. Memcached is similar to ODBC, in that it offers another option for more persistent session storage than in-memory.
2017-02-02 17:34:10 +01:00
USES= gmake tar:bzip2 ssl
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
GNU_CONFIGURE= yes
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
MAKE_ENV= NOKEYGEN=YES
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
USE_LDCONFIG= yes
USE_RC_SUBR= shibboleth-sp
- Update to 2.3.1. PR: ports/136034 Submitted by: Steve Wills <steve@mouf.net> Approved by: janos.mohacsi@bsd.hu (maintainer timeout)
2010-01-26 03:35:37 +01:00
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
USERS= shibd
GROUPS= shibd
Shibboleth SP software crashes on well-formed but invalid XML. The Service Provider software contains a code path with an uncaught exception that can be triggered by an unauthenticated attacker by supplying well-formed but schema-invalid XML in the form of SAML metadata or SAML protocol messages. The result is a crash and so causes a denial of service. You must rebuild opensaml and shibboleth with xmltooling-1.5.5 or later. The easiest way to do so is to update the whole chain including shibboleth-2.5.5 an opensaml2.5.5. URL: http://shibboleth.net/community/advisories/secadv_20150721.txt Security: CVE-2015-2684
2015-07-23 15:21:05 +02:00
INSTALL_TARGET= install-strip
Add options for fastcgi and memcached and make odbc and apache optional. Fastcgi allows simple use with NGINX. Memcached is similar to ODBC, in that it offers another option for more persistent session storage than in-memory.
2017-02-02 17:34:10 +01:00
OPTIONS_GROUP= CONNECT SESSION
OPTIONS_GROUP_CONNECT=FASTCGI APACHE
CONNECT_DESC= Webserver modules
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
Add options for fastcgi and memcached and make odbc and apache optional. Fastcgi allows simple use with NGINX. Memcached is similar to ODBC, in that it offers another option for more persistent session storage than in-memory.
2017-02-02 17:34:10 +01:00
OPTIONS_GROUP_SESSION=ODBC MEMCACHED
SESSION_DESC= Optional session storage
OPTIONS_DEFAULT=ODBC APACHE
# Descriptions
ODBC_DESC= ODBC database backend - store sessions in a database
MEMCACHED_DESC= Store sessions in memcached
FASTCGI_DESC= FastCGI protocol support, e.g. for NGINX
APACHE_DESC= Build Apache module
ODBC_CONFIGURE_ENABLE= odbc
ODBC_LIB_DEPENDS= libodbc.so:databases/unixODBC
FASTCGI_CONFIGURE_WITH= fastcgi=${LOCALBASE}
FASTCGI_LIB_DEPENDS= libfcgi++.so:www/fcgi
MEMCACHED_CONFIGURE_WITH= memcached=${LOCALBASE}
MEMCACHED_LIB_DEPENDS= libmemcached.so:databases/libmemcached
OPTIONS_SUB= yes
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
into the fire... last commit didnt't really help, it has to be part of SUB_LIST as well
2014-07-01 16:27:12 +02:00
SUB_LIST+= SH=${SH} WWWGRP=${WWWGRP}
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
PLIST_SUB+= WWWOWN=${WWWOWN} WWWGRP=${WWWGRP}
SUB_LIST+= SHIBD_USER=${USERS}
SUB_LIST+= SHIBD_GROUP=${GROUPS}
PLIST_SUB+= SHIBD_USER=${USERS}
PLIST_SUB+= SHIBD_GROUP=${GROUPS}
- Update to 2.3.1. PR: ports/136034 Submitted by: Steve Wills <steve@mouf.net> Approved by: janos.mohacsi@bsd.hu (maintainer timeout)
2010-01-26 03:35:37 +01:00
CONFIGURE_ARGS+= --localstatedir=/var --with-log4shib=${LOCALBASE}
CONFIGURE_ARGS+= --with-openssl=${OPENSSLBASE} --with-xmltooling=${LOCALBASE}
CONFIGURE_ARGS+= --disable-doxygen-doc
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
Add options for fastcgi and memcached and make odbc and apache optional. Fastcgi allows simple use with NGINX. Memcached is similar to ODBC, in that it offers another option for more persistent session storage than in-memory.
2017-02-02 17:34:10 +01:00
.include <bsd.port.pre.mk>
.if ${PORT_OPTIONS:MAPACHE}
USE_APACHE= 22+
.if "${APACHE_VERSION}" == 22
CONFIGURE_ARGS+=--disable-apache-24 --enable-apache-22 --with-apxs22=${APXS}
PLIST_SUB+= WITH_APACHE_22=""
PLIST_SUB+= WITH_APACHE_24="@comment "
.else
CONFIGURE_ARGS+=--disable-apache-22 --enable-apache-24 --with-apxs24=${APXS}
PLIST_SUB+= WITH_APACHE_22="@comment "
PLIST_SUB+= WITH_APACHE_24=""
.endif
.else
CONFIGURE_ARGS+=--disable-apache-24 --disable-apache-22
PLIST_SUB+= WITH_APACHE_22="@comment "
PLIST_SUB+= WITH_APACHE_24="@comment "
.endif
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
.include <bsd.port.post.mk>
Reference in a new issue Copy permalink