A patch release of the Service Provider, V3.4.1, is now available. This release fixes a couple of small bugs and adds a warning requested by one of our member organizations in the absence of the redirectLimit setting, which leads to SPs being abused as open redirectors. Notably, this release includes an update to the xmltooling library that hardens the code base against the sorts of attacks reported against the IdP in the recent advisory. The SP is, as far as can be determined, not impacted directly by that vulnerability, but this is a precautionary change. Release notes: https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065335693/ReleaseNotes
35 lines
1 KiB
Makefile
35 lines
1 KiB
Makefile
PORTNAME= xmltooling
|
|
PORTVERSION= 3.2.3
|
|
CATEGORIES= devel security
|
|
MASTER_SITES= http://shibboleth.net/downloads/c++-opensaml/latest/
|
|
|
|
MAINTAINER= girgen@FreeBSD.org
|
|
COMMENT= Low level XML support for SAML
|
|
WWW= https://wiki.shibboleth.net/confluence/display/OpenSAML/XMLTooling-C
|
|
|
|
LICENSE= APACHE20
|
|
|
|
BUILD_DEPENDS= boost-libs>=0:devel/boost-libs
|
|
LIB_DEPENDS= libcurl.so:ftp/curl \
|
|
liblog4shib.so:devel/log4shib \
|
|
libxml-security-c.so:security/apache-xml-security-c
|
|
|
|
GNU_CONFIGURE= yes
|
|
CONFIGURE_ARGS+=--disable-dependency-tracking --disable-doxygen-doc --with-xmlsec
|
|
USES= cpe gmake libtool pkgconfig tar:bzip2 ssl autoreconf
|
|
CPE_VENDOR= ${PORTNAME}_project
|
|
USE_LDCONFIG= yes
|
|
CONFIGURE_ENV+= openssl_LIBS="-L${OPENSSLLIB} -lcrypto" openssl_CFLAGS=-I${OPENSSLBASE}
|
|
|
|
PORTDOCS= *
|
|
|
|
OPTIONS_DEFINE= DOCS
|
|
|
|
post-patch:
|
|
@${REINPLACE_CMD} -e 's,^pkgdocdir.*=.*,pkgdocdir = ${DOCSDIR},' \
|
|
${WRKSRC}/doc/Makefile.am
|
|
|
|
post-patch-DOCS-off:
|
|
@${REINPLACE_CMD} -e '/^SUBDIRS/s,doc ,,' ${WRKSRC}/Makefile.am
|
|
|
|
.include <bsd.port.mk>
|