A regression in the RequestMap feature causing random crashes on some systems was identified, necessitating this patch update. Most uses of this feature tend to be on Windows, so that's the primary platform affected but the bug was generic if the feature were to be used on other systems. It isn't easily exploitable by specific requests, so it's a borderline sort of denial of service risk and the Shibboleth project chose not to do an advisory, and anybody affected won't need much incentive to get the patch anyway.
90 lines
2.4 KiB
Makefile
90 lines
2.4 KiB
Makefile
# Created by: Janos Mohacsi <janos.mohacsi@bsd.hu>
|
|
|
|
PORTNAME= shibboleth-sp
|
|
PORTVERSION= 3.2.3
|
|
CATEGORIES= security www
|
|
MASTER_SITES= http://shibboleth.net/downloads/service-provider/${PORTVERSION}/
|
|
|
|
MAINTAINER= girgen@FreeBSD.org
|
|
COMMENT= C++ Shibboleth Service Provider (Internet2) for Apache
|
|
|
|
LICENSE= APACHE20
|
|
|
|
BUILD_DEPENDS= boost-libs>=0:devel/boost-libs
|
|
LIB_DEPENDS= libsaml.so:security/opensaml \
|
|
liblog4shib.so:devel/log4shib \
|
|
libxerces-c-3.2.so:textproc/xerces-c3 \
|
|
libxml-security-c.so:security/apache-xml-security-c \
|
|
libxmltooling.so:devel/xmltooling \
|
|
libapr-1.so:devel/apr1 \
|
|
libgdbm.so:databases/gdbm \
|
|
libexpat.so:textproc/expat2
|
|
|
|
USES= gmake tar:bzip2 cpe pkgconfig libtool bdb
|
|
GNU_CONFIGURE= yes
|
|
MAKE_ENV= NOKEYGEN=YES
|
|
USE_LDCONFIG= yes
|
|
USE_RC_SUBR= shibboleth-sp
|
|
DOCSDIR= ${PREFIX}/share/doc/shibboleth
|
|
CPE_VENDOR= shibboleth
|
|
|
|
USERS= shibd
|
|
GROUPS= shibd
|
|
|
|
INSTALL_TARGET= install-strip
|
|
|
|
OPTIONS_GROUP= CONNECT SESSION
|
|
OPTIONS_GROUP_CONNECT=FASTCGI APACHE
|
|
CONNECT_DESC= Webserver modules
|
|
|
|
OPTIONS_GROUP_SESSION=ODBC MEMCACHED
|
|
SESSION_DESC= Optional session storage
|
|
|
|
OPTIONS_DEFAULT=ODBC APACHE
|
|
|
|
# Descriptions
|
|
ODBC_DESC= ODBC database backend - store sessions in a database
|
|
MEMCACHED_DESC= Store sessions in memcached
|
|
FASTCGI_DESC= FastCGI protocol support, e.g. for NGINX
|
|
APACHE_DESC= Build Apache module
|
|
|
|
APACHE_USES= apache:2.4+
|
|
|
|
ODBC_CONFIGURE_ENABLE= odbc
|
|
ODBC_LIB_DEPENDS= libodbc.so:databases/unixODBC
|
|
|
|
FASTCGI_CONFIGURE_WITH= fastcgi=${LOCALBASE}
|
|
FASTCGI_LIB_DEPENDS= libfcgi++.so:www/fcgi
|
|
|
|
MEMCACHED_CONFIGURE_WITH= memcached=${LOCALBASE}
|
|
MEMCACHED_LIB_DEPENDS= libmemcached.so:databases/libmemcached
|
|
|
|
OPTIONS_SUB= yes
|
|
|
|
SUB_LIST+= SH=${SH} WWWGRP=${WWWGRP}
|
|
PLIST_SUB+= WWWOWN=${WWWOWN} WWWGRP=${WWWGRP}
|
|
|
|
SUB_LIST+= SHIBD_USER=${USERS}
|
|
SUB_LIST+= SHIBD_GROUP=${GROUPS}
|
|
PLIST_SUB+= SHIBD_USER=${USERS}
|
|
PLIST_SUB+= SHIBD_GROUP=${GROUPS}
|
|
|
|
CONFIGURE_ARGS+=--localstatedir=/var \
|
|
--disable-doxygen-doc --disable-dependency-tracking
|
|
|
|
.include <bsd.port.pre.mk>
|
|
|
|
.if ${PORT_OPTIONS:MAPACHE} && "${APACHE_VERSION}" == 2.4
|
|
CONFIGURE_ARGS+=--disable-apache-22 --enable-apache-24 --with-apxs24=${APXS}
|
|
PLIST_SUB+= WITH_APACHE_24=""
|
|
.else
|
|
CONFIGURE_ARGS+=--disable-apache-24 --disable-apache-22
|
|
PLIST_SUB+= WITH_APACHE_24="@comment "
|
|
.endif
|
|
|
|
post-patch:
|
|
@${REINPLACE_CMD} -e 's,^pkgdocdir.*=.*,pkgdocdir = ${DOCSDIR},' \
|
|
-e 's,^pkgwebdir.*=.*,pkgwebdir = ${DOCSDIR},' \
|
|
${WRKSRC}/doc/Makefile.in ${WRKSRC}/configs/Makefile.in
|
|
|
|
.include <bsd.port.post.mk>
|