d140eabacb
- Bump PORTREVISIOn on dependent ports Some Upgrade Notes: This release fixes a validation failure for nodata with wildcards and emptynonterminals. Fixes OpenSSL Library compability. Fixes correct response for malformed EDNS queries. For crypto in libunbound there is libnettle support. Qname minimisation is implemented. Use qname-minimisation: yes to enable it. This version sends the full query name when an error is found for intermediate names. It should therefore not fail for names on nonconformant servers. It combines well with harden-below-nxdomain: yes because those nxdomains are probed by the qname minimisation, and that will both stop privacy sensitive traffic and reduce nonsense traffic to authority servers. So consider enabling both. In this implementation IPv6 reverse lookups add several labels per increment, because otherwise those lookups would be very slow. [ Reference https://tools.ietf.org/html/draft-ietf-dnsop-qname-minimisation-08 ] More details at <http://unbound.net> PR: 206347 Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> Approved by: maintainer timeout Sponsored by: DK Hostmaster A/S
71 lines
2 KiB
Makefile
71 lines
2 KiB
Makefile
# $FreeBSD$
|
|
|
|
PORTNAME= gnutls
|
|
PORTVERSION= 3.3.17.1
|
|
PORTREVISION= 2
|
|
CATEGORIES= security net
|
|
MASTER_SITES= GNUPG/gnutls/v${PORTVERSION:R:R}
|
|
|
|
MAINTAINER= bdrewery@FreeBSD.org
|
|
COMMENT= GNU Transport Layer Security library
|
|
|
|
LICENSE= GPLv3 LGPL21
|
|
LICENSE_COMB= multi
|
|
LICENSE_FILE_GPLv3= ${WRKSRC}/COPYING
|
|
LICENSE_FILE_LGPL21= ${WRKSRC}/COPYING.LESSER
|
|
|
|
LIB_DEPENDS= libnettle.so:${PORTSDIR}/security/nettle \
|
|
libtasn1.so:${PORTSDIR}/security/libtasn1
|
|
BUILD_DEPENDS+= ${LOCALBASE}/share/certs/ca-root-nss.crt:${PORTSDIR}/security/ca_root_nss
|
|
RUN_DEPENDS+= ${LOCALBASE}/share/certs/ca-root-nss.crt:${PORTSDIR}/security/ca_root_nss
|
|
|
|
USES= cpe gmake iconv libtool makeinfo pathfix pkgconfig tar:xz
|
|
USE_LDCONFIG= yes
|
|
GNU_CONFIGURE= yes
|
|
CONFIGURE_ARGS= --disable-guile \
|
|
--disable-silent-rules \
|
|
--enable-local-libopts
|
|
CPPFLAGS+= -I${LOCALBASE}/include
|
|
LDFLAGS+= -L${LOCALBASE}/lib
|
|
MAKE_ENV= MAKEINFOFLAGS=--no-split
|
|
|
|
CPE_VENDOR= gnu
|
|
|
|
OPTIONS_DEFINE= CRYWRAP EXAMPLES LIBDANE NLS P11KIT TPM ZLIB
|
|
OPTIONS_DEFAULT= CRYWRAP P11KIT TPM ZLIB
|
|
OPTIONS_SUB= yes
|
|
|
|
CRYWRAP_DESC= Enable Crywrap TLS proxy service
|
|
CRYWRAP_LIB_DEPENDS= libidn.so:${PORTSDIR}/dns/libidn
|
|
CRYWRAP_CONFIGURE_ENABLE= crywrap
|
|
|
|
LIBDANE_DESC= DNSSEC support for DANE (danetool --check)
|
|
LIBDANE_LIB_DEPENDS= libunbound.so:${PORTSDIR}/dns/unbound
|
|
LIBDANE_CONFIGURE_ENABLE= libdane
|
|
|
|
NLS_CONFIGURE_ENABLE= nls
|
|
NLS_USES= gettext
|
|
|
|
P11KIT_DESC= PKCS\#11 and p11-kit support
|
|
P11KIT_CONFIGURE_WITH= p11-kit
|
|
P11KIT_LIB_DEPENDS= libp11-kit.so:${PORTSDIR}/security/p11-kit
|
|
|
|
TPM_DESC= TPM (trousers) support
|
|
TPM_CONFIGURE_WITH= tpm
|
|
TPM_LIB_DEPENDS= libtspi.so:${PORTSDIR}/security/trousers
|
|
|
|
ZLIB_CONFIGURE_WITH= zlib
|
|
|
|
INFO= gnutls gnutls-guile
|
|
|
|
post-patch:
|
|
@${RM} ${WRKSRC}/doc/*.info*
|
|
${SED} -i '' -e 's|^+_NORETURN_H|_NORETURN_H|' \
|
|
${WRKSRC}/src/libopts/Makefile.in
|
|
|
|
post-install:
|
|
@${MKDIR} ${STAGEDIR}${EXAMPLESDIR}
|
|
${INSTALL_DATA} ${WRKSRC}/doc/examples/*.[ch] ${STAGEDIR}${EXAMPLESDIR}
|
|
${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/libgnutls*.so.*
|
|
|
|
.include <bsd.port.mk>
|