kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
freebsd-ports/security/ssh/Makefile

147 lines
4.4 KiB
Makefile
Raw Normal View History

Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
# New ports collection makefile for: ssh
# Date created: 30 Jul 1995
FreeBSD.ORG -> FreeBSD.org Prompted by PR: 13476, 13477 Submitted by: KATO Tsuguru
1999-08-31 08:53:31 +02:00
# Whom: torstenb@FreeBSD.org
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
#
$Id$ -> $FreeBSD$
1999-08-31 03:53:22 +02:00
# $FreeBSD$
Move perl depends under USE_PERL
1996-03-24 00:36:32 +01:00
#
# Maximal ssh package requires YES values for
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
# WITH_PERL, WITH_TCPWRAP
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
#
Update with the new PORTNAME/PORTVERSION variables
2000-04-09 20:34:06 +02:00
PORTNAME= ssh
Update to version 1.2.33.
2002-06-30 05:57:57 +02:00
PORTVERSION= 1.2.33
Quoting the submitter: ---snip--- - Revert the partially enabled building and usage of the libgmp version shipping with ssh introduced with the upgrade to 1.2.33. For -current depend on math/libgmp-freebsd and use the libgmp in the base system for -stable like this port did before. This fixes compilation on -current and turns of the annoying errors when the configure of the ssh-enclosed libgmp tests the optimisations using the wrong assembler- syntax on 4-stable. The later causes configure to hang on 3-stable. - Don't define 'REALLY_WANT_SSH=1' in the Makefile else the FORBIDDEN for FreeBSD systems shipping with OpenSSH in the base-distribution and not defining 'REALLY_WANT_SSH' is useless. This was also broken with the last commit. Tested on 5.0-current, 4-stable and 3-stable. ---snip--- Submitted by: marius@alchemy.franken.de
2002-10-25 16:43:22 +02:00
PORTREVISION= 1
Remove redundant/inappropriate CATEGORIES. People need to start reading the Porter's Handbook. :-)
2000-06-02 05:18:54 +02:00
CATEGORIES= security ipv6
Update to version 1.2.33.
2002-06-30 05:57:57 +02:00
MASTER_SITES= ftp://ftp.tokyonet.ad.jp/pub/security/ssh/ \
ftp://ftp.tokyonet.ad.jp/pub/security/ssh/old/ \
ftp://ftp.dei.uc.pt/pub/ssh/ \
ftp://ftp.ssh.com/ \
Fennerize MASTER_SITES and replace with a fresh set which a) actually carry the distfile and b) are probably better sorted networkologically for the majority of users. Trim DESCR down to a sane length.
2000-09-22 01:37:29 +02:00
ftp://ftp.nsysu.edu.tw/Unix/Security/ssh/old/ \
Update to version 1.2.28.
2002-06-29 20:13:36 +02:00
ftp://ftp.cronyx.ru/mirror/ssh/old/
Update to version 1.2.33.
2002-06-30 05:57:57 +02:00
Note the reason why this port is still at 1.2.27 (1.2.30 is under the more restrictive SSH2 license), deprecate this port in favour of OpenSSH as a parting shot (still allow people to build by setting an environment variable) and remove myself as maintainer since I don't have any interest in maintaining it. About the only thing this port does which OpenSSH can't do well is Kerberized logins..once that is working properly in OpenSSH I'm planning to nuke the port.
2001-02-06 02:22:25 +01:00
MAINTAINER= ports@FreeBSD.org
Add torstenb as maintainer.
1995-11-09 06:58:00 +01:00
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 04:03:30 +02:00
USE_AUTOCONF= YES
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
GNU_CONFIGURE= YES
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 04:03:30 +02:00
USE_PERL5= YES
CONFIGURE_ENV+= PERL=${PERL5}
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
Um, be careful when you copy stuff around -- change the second CONFIGURE_ARGS defintion to use "+=" so it won't override the first. While I'm here, GNU_CONFIGURE implies --prefix=${PREFIX} so take it out.
1998-10-08 15:11:52 +02:00
CONFIGURE_ARGS+= --with-etcdir=${PREFIX}/etc
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 04:03:30 +02:00
# Uncomment if all your users are in their own group and their homedir
# is writeable by that group. Beware the security implications!
#
Update from ssh-1.2.19 to ssh-1.2.20. All patches applied still, I just regenerated them to fix the line numbers. Also, I added two commented out options in Makefile, one to tell sshd that a group writeable homedir is OK because all users are in their own group, and the other is to allow an unencrypted connection (which is dangerous since it can lead to compromise of keys), but on a secure network it's damn useful for backups etc.
1997-04-25 07:01:06 +02:00
#CONFIGURE_ARGS+= --enable-group-writeability
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 04:03:30 +02:00
# Uncomment if you want to allow ssh to emulate an unencrypted rsh connection
# over a secure medium (i.e. allow SSH connections without encryption).
# This is normally dangerous since it can lead to the disclosure of keys
# and passwords.
#
Update from ssh-1.2.19 to ssh-1.2.20. All patches applied still, I just regenerated them to fix the line numbers. Also, I added two commented out options in Makefile, one to tell sshd that a group writeable homedir is OK because all users are in their own group, and the other is to allow an unencrypted connection (which is dangerous since it can lead to compromise of keys), but on a secure network it's damn useful for backups etc.
1997-04-25 07:01:06 +02:00
#CONFIGURE_ARGS+= --with-none
If KRB5_HOME is defined, compile ssh with krb5 support.
1998-08-02 00:24:55 +02:00
.if defined(KRB5_HOME) && exists(${KRB5_HOME})
SUID ssh breaks kerberos; disable in the kerberized case. I even like the idea of breaking SUID bit permanently, but I'll leave this up to the maintainer.
1999-08-09 19:12:44 +02:00
CONFIGURE_ARGS+=--with-kerberos5=${KRB5_HOME} --enable-kerberos-tgt-passing \
--disable-suid-ssh
If KRB5_HOME is defined, compile ssh with krb5 support.
1998-08-02 00:24:55 +02:00
.endif
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
# Include support for the SecureID card
# Warning: untested !
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 04:03:30 +02:00
#
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
.if defined(WITH_SECUREID)
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
CONFIGURE_ARGS+= --with-secureid
.endif
# Don't use IDEA. IDEA can be freely used for non-commercial use. However,
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 04:03:30 +02:00
# commercial use may require a licence in a number of countries. Since SSH
# itself may not be used for commercial purposes without a license, we
# enable IDEA by default since the user would already be getting himself
# into trouble.
#
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
.if defined(WITHOUT_IDEA)
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
CONFIGURE_ARGS+= --without-idea
.endif
Note the reason why this port is still at 1.2.27 (1.2.30 is under the more restrictive SSH2 license), deprecate this port in favour of OpenSSH as a parting shot (still allow people to build by setting an environment variable) and remove myself as maintainer since I don't have any interest in maintaining it. About the only thing this port does which OpenSSH can't do well is Kerberized logins..once that is working properly in OpenSSH I'm planning to nuke the port.
2001-02-06 02:22:25 +01:00
.include <bsd.port.pre.mk>
Fix libgmp breakage on -current.
2002-04-26 08:23:41 +02:00
.if ${OSVERSION} > 500023
Update to version 1.2.28.
2002-06-29 20:13:36 +02:00
LIB_DEPENDS+= gmp.3:${PORTSDIR}/math/libgmp-freebsd
Fix libgmp breakage on -current.
2002-04-26 08:23:41 +02:00
MAKE_ENV+= GMPINCDIR="${LOCALBASE}/include" \
GMPLIBDIR="${LOCALBASE}/lib"
.endif
Note the reason why this port is still at 1.2.27 (1.2.30 is under the more restrictive SSH2 license), deprecate this port in favour of OpenSSH as a parting shot (still allow people to build by setting an environment variable) and remove myself as maintainer since I don't have any interest in maintaining it. About the only thing this port does which OpenSSH can't do well is Kerberized logins..once that is working properly in OpenSSH I'm planning to nuke the port.
2001-02-06 02:22:25 +01:00
.if (${OSVERSION} >= 400016 && !defined(REALLY_WANT_SSH))
Update to version 1.2.28.
2002-06-29 20:13:36 +02:00
FORBIDDEN= "OpenSSH is a superior version of SSH which has been included in the FreeBSD base system since 4.0-RELEASE. This port is now deprecated. To override this warning set the REALLY_WANT_SSH environment variable and rebuild."
Note the reason why this port is still at 1.2.27 (1.2.30 is under the more restrictive SSH2 license), deprecate this port in favour of OpenSSH as a parting shot (still allow people to build by setting an environment variable) and remove myself as maintainer since I don't have any interest in maintaining it. About the only thing this port does which OpenSSH can't do well is Kerberized logins..once that is working properly in OpenSSH I'm planning to nuke the port.
2001-02-06 02:22:25 +01:00
.endif
1.2.22 -> 1.2.25 Somebody needs to go through patch-af to check it, since I'm not sure about some of the stuff. This version fixes a security flaw in previous version.
1998-06-12 09:55:14 +02:00
MAN1= scp1.1 ssh-add1.1 ssh-agent1.1 ssh-keygen1.1 ssh1.1 \
make-ssh-known-hosts1.1
MAN8= sshd1.8
Remove manpages from PLIST and use MLINKS instead of a bunch of ${LN} calls.
1999-07-16 08:09:43 +02:00
MLINKS= make-ssh-known-hosts1.1 make-ssh-known-hosts.1 \
scp1.1 scp.1 \
ssh-add1.1 ssh-add.1 \
ssh-agent1.1 ssh-agent.1 \
ssh-keygen1.1 ssh-keygen.1 \
ssh1.1 ssh.1 \
ssh.1 slogin.1 \
ssh1.1 slogin1.1 \
sshd1.8 sshd.8
Use MAN? macros. CATEGORIES+= -> CATEGORIES.
1996-11-18 12:44:27 +01:00
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
pre-patch:
mv -> ${MV}.
1997-09-11 20:31:52 +02:00
@${MV} -f ${WRKSRC}/make-ssh-known-hosts.pl \
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
${WRKSRC}/make-ssh-known-hosts.pl.in
post-install:
Several fixes/improvements :- - protect the secret RSA etc/ssh_host_key. It is now generated on install (either by pkg_add or make install) if not already present and is not ever added to a package since it's your host's credentials. It should not be removed on pkg_delete, since you are in big trouble if you did this (for example) pkg_delete ssh-1.2.14; pkg_add ssh-1.2.15.tgz. - fix the broken manpage symlink when compressing man pages (slogin.1 has been causing /etc/weekly to generate cron messages) - zlib 1.0.4 is now "blessed" again, the ssh working sources now use this instead of v0.95. The decompression problem was fixed in either 1.0.3 or 1.0.4. Also, the current version of cvs uses zlib 1.0.4 as well.. - perl5.002 -> perl5.003 Reviewed by: torstenb
1996-08-08 15:57:02 +02:00
@if [ ! -f ${PREFIX}/etc/ssh_host_key ]; then \
Don't install the startup script if ssh is being run out of inetd.conf PR: 15691 Submitted by: Roger Marquis <marquis@roble.com>
2000-08-23 11:57:05 +02:00
${ECHO} "Generating a secret host key..."; \
${PREFIX}/bin/ssh-keygen -f ${PREFIX}/etc/ssh_host_key -N ""; \
fi; \
if [ "`grep ssh /etc/inetd.conf|grep -v ^#ssh`" = "" ]; then \
if [ ! -f ${PREFIX}/etc/rc.d/sshd.sh ]; then \
(1) Add a new MASTER_SITE (2) Reorganize MASTER_SITEs (3) Remove reference to Phil Karn's ssh speedups, it is now distributed as a full source package, and not a patch kit. If we want to use it, we will have to make a new port for it. (4) Use ${ECHO} instead of echo, ${RM} instead of rm, ${LN} instead of ln (5) Use ${FALSE} instead of false (6) Remove multiple blank lines in Makefile (7) Remove trailing blank lines in pkg/DESCR Submitted by: Alex Perel <veers@disturbed.net> (1, 2, 4, 6) Bill Fumerola <billf@FreeBSD.org> (3, 5, 7)
1999-03-13 19:51:11 +01:00
${ECHO} "Installing ${PREFIX}/etc/rc.d/sshd.sh startup file."; \
Add better sshd startup scripts; specifically, allow restarting and stopping the server. Martti's submission did not include -h, which I added because if I had added the scripts the way he submitted them, the server wouldn't be started on startup. PR: 10196 Submitted by: Martti Kuparinen <martti.kuparinen@ericsson.com> Reviewed by: kris (partially) No response: maintainers (PR opened February 22, 1999)
2000-04-06 00:21:44 +02:00
${SED} -e 's+!!PREFIX!!+${PREFIX}+g' ${FILESDIR}/sshd.sh \
Don't install the startup script if ssh is being run out of inetd.conf PR: 15691 Submitted by: Roger Marquis <marquis@roble.com>
2000-08-23 11:57:05 +02:00
> ${PREFIX}/etc/rc.d/sshd.sh; \
chmod -> ${CHMOD} chown -> ${CHOWN}
1999-08-22 21:01:07 +02:00
${CHMOD} 751 ${PREFIX}/etc/rc.d/sshd.sh; \
Don't install the startup script if ssh is being run out of inetd.conf PR: 15691 Submitted by: Roger Marquis <marquis@roble.com>
2000-08-23 11:57:05 +02:00
fi; \
Install an sshd.sh startup file.
1996-06-15 19:50:18 +02:00
fi
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 02:19:27 +01:00
Autopick any wish present even wish4.0 Autopick libwrap.a
1996-01-25 03:08:25 +01:00
# Include tcp-wrapper support (call remote identd)
detect/use -current libwrap
1999-04-03 05:35:50 +02:00
.if exists(/usr/include/tcpd.h)
CONFIGURE_ARGS+= --with-libwrap
.else
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
.if defined(WITH_TCPWRAP) || (exists(${PREFIX}/lib/libwrap.a) \
typo clean up police: \s -> \t
2001-02-14 21:19:44 +01:00
&& !defined(WITHOUT_TCPWRAP))
Understands shared libwrap now
1996-01-25 05:17:28 +01:00
CONFIGURE_ENV+= LDFLAGS=-L${PREFIX}/lib CFLAGS="${CFLAGS} -I${PREFIX}/include"
Autopick any wish present even wish4.0 Autopick libwrap.a
1996-01-25 03:08:25 +01:00
CONFIGURE_ARGS+= --with-libwrap
typo clean up police: \s -> \t
2001-02-14 21:19:44 +01:00
LIB_DEPENDS+= wrap.7:${PORTSDIR}/security/tcp_wrapper
Autopick any wish present even wish4.0 Autopick libwrap.a
1996-01-25 03:08:25 +01:00
.endif
detect/use -current libwrap
1999-04-03 05:35:50 +02:00
.endif
Autopick any wish present even wish4.0 Autopick libwrap.a
1996-01-25 03:08:25 +01:00
Add IPv6 support to ssh. The IPv6 patch was obtained from the kame repository and has been been writen by KIKUCHI Takahiro <kick@kyoto.wide.ad.jp> Due to the whole mess with different patches it was necessary to include both the IPv6 patch and patch-ssh-1.2.27-bsd.tty.chown in ${PATCHDIR}. Since both patches modify the configure script it was also necessary to rebuild it via autoconf from configure.in. I've decided to use USE_AUTOCONF instead of including the re-build configure script in ${FILESDIR} Obtained from: KAME/WIDE
2000-01-14 20:37:39 +01:00
# Original IPv6 patches were obtained from ftp://ftp.kyoto.wide.ad.jp/IPv6/ssh/
# ssh-1.2.27-IPv6-1.5-patch.gz
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
# We still use WITH_INET6 here and try to support pre 4.0 machines with kame
Checfor OSVERSION _or_ USE_INET6 when deciding if IPv6 support should be added. This is done to support the build on pre 4.0 machines with the KAME IPv6 stack installed. It has been verified to build+work with both 4.0 and 3.4+kame. Org. patch Submitted By: Munechika SUMIKAWA <sumikawa@ebina.hitachi.co.jp>
2000-02-12 20:27:40 +01:00
# IPv6 stack
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
.if ${OSVERSION} >= 400014 || ( ${OSVERSION} < 400014 && defined(WITH_INET6) )
Make buildable on IPv4-only kernel. Specified by: ache Reviewed by: torstenb
2000-02-20 18:30:54 +01:00
CONFIGURE_ARGS+= --enable-ipv6
Add IPv6 support to ssh. The IPv6 patch was obtained from the kame repository and has been been writen by KIKUCHI Takahiro <kick@kyoto.wide.ad.jp> Due to the whole mess with different patches it was necessary to include both the IPv6 patch and patch-ssh-1.2.27-bsd.tty.chown in ${PATCHDIR}. Since both patches modify the configure script it was also necessary to rebuild it via autoconf from configure.in. I've decided to use USE_AUTOCONF instead of including the re-build configure script in ${FILESDIR} Obtained from: KAME/WIDE
2000-01-14 20:37:39 +01:00
.else
CONFIGURE_ARGS+= --disable-ipv6
.endif
If using socks, make sure you find socks library
1996-07-23 01:06:08 +02:00
# Include SOCKS firewall support
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
.if defined(WITH_SOCKS)
Make the SOCKS support from USE_SOCKS play nicely with the socks5 port.
1997-12-24 19:46:11 +01:00
CONFIGURE_ARGS+= --with-socks="-L${PREFIX}/lib -lsocks5" --with-socks5
If using socks, make sure you find socks library
1996-07-23 01:06:08 +02:00
.endif
Change *_DEPENDS on lang/perl5 to USE_PERL5 so we won't have any dependencies to perl5 in -current. This might cause some unwanted perl5 installations on -stable (if it was originally RUN_DEPENDS, perl5 will now be installed during build too, etc.), but its lifetime is limited anyway.
1999-01-02 01:12:21 +01:00
Correct PLIST for the non-X11 case. (This was OK'ed by the maintainer quite some time ago).
1999-11-06 20:43:18 +01:00
# Include extra files if X11 is installed
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
.if defined(WITH_X11) || (exists(${X11BASE}/lib/libX11.a) \
typo clean up police: \s -> \t
2001-02-14 21:19:44 +01:00
&& !defined(WITHOUT_X11))
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
USE_XLIB= yes
Correct whitespace introduced during PORTNAME conversion and portlint
2000-04-21 10:19:33 +02:00
PLIST:= ${WRKDIR}/PLIST
Correct PLIST for the non-X11 case. (This was OK'ed by the maintainer quite some time ago).
1999-11-06 20:43:18 +01:00
pre-install:
Rename PLIST.X11 to pkg-plist.x11.
2000-10-08 08:03:48 +02:00
@${CAT} ${PKGDIR}/pkg-plist.x11 ${PKGDIR}/pkg-plist > ${PLIST}
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 02:19:02 +02:00
.else
CONFIGURE_ARGS+= --without-x
Correct PLIST for the non-X11 case. (This was OK'ed by the maintainer quite some time ago).
1999-11-06 20:43:18 +01:00
.endif
Change *_DEPENDS on lang/perl5 to USE_PERL5 so we won't have any dependencies to perl5 in -current. This might cause some unwanted perl5 installations on -stable (if it was originally RUN_DEPENDS, perl5 will now be installed during build too, etc.), but its lifetime is limited anyway.
1999-01-02 01:12:21 +01:00
.include <bsd.port.post.mk>
Reference in a new issue Copy permalink