231 lines
7 KiB
Makefile
231 lines
7 KiB
Makefile
# Created by: dwcjr@inethouston.net
|
|
# $FreeBSD$
|
|
|
|
PORTNAME= openssh
|
|
DISTVERSION= 7.1p1
|
|
PORTREVISION= 1
|
|
PORTEPOCH= 1
|
|
CATEGORIES= security ipv6
|
|
MASTER_SITES= OPENBSD/OpenSSH/portable
|
|
PKGNAMESUFFIX?= -portable
|
|
|
|
MAINTAINER= bdrewery@FreeBSD.org
|
|
COMMENT= The portable version of OpenBSD's OpenSSH
|
|
|
|
#LICENSE= BSD2,BSD3,MIT,public domain,BSD-Style,BEER-WARE,"any purpose with notice intact",ISC-Style
|
|
#LICENSE_FILE= ${WRKSRC}/LICENCE
|
|
|
|
CONFLICTS?= openssh-3.* ssh-1.* ssh2-3.* openssh-portable-devel-*
|
|
|
|
USES= alias
|
|
USE_AUTOTOOLS= autoconf autoheader
|
|
USE_OPENSSL= yes
|
|
GNU_CONFIGURE= yes
|
|
CONFIGURE_ENV= ac_cv_func_strnvis=no
|
|
CONFIGURE_ARGS= --prefix=${PREFIX} --with-md5-passwords \
|
|
--without-zlib-version-check --with-ssl-engine
|
|
ETCOLD= ${PREFIX}/etc
|
|
|
|
OPTIONS_DEFINE= PAM TCP_WRAPPERS LIBEDIT BSM \
|
|
HPN X509 KERB_GSSAPI \
|
|
OVERWRITE_BASE SCTP LDNS NONECIPHER
|
|
OPTIONS_DEFAULT= LIBEDIT PAM TCP_WRAPPERS HPN LDNS
|
|
OPTIONS_RADIO= KERBEROS
|
|
OPTIONS_RADIO_KERBEROS= MIT HEIMDAL HEIMDAL_BASE
|
|
TCP_WRAPPERS_DESC= tcp_wrappers support
|
|
BSM_DESC= OpenBSM Auditing
|
|
KERB_GSSAPI_DESC= Kerberos/GSSAPI patch (req: GSSAPI)
|
|
HPN_DESC= HPN-SSH patch
|
|
LDNS_DESC= SSHFP/LDNS support
|
|
X509_DESC= x509 certificate patch
|
|
SCTP_DESC= SCTP support
|
|
OVERWRITE_BASE_DESC= EOL, No longer supported.
|
|
HEIMDAL_DESC= Heimdal Kerberos (security/heimdal)
|
|
HEIMDAL_BASE_DESC= Heimdal Kerberos (base)
|
|
MIT_DESC= MIT Kerberos (security/krb5)
|
|
NONECIPHER_DESC= NONE Cipher support
|
|
|
|
OPTIONS_SUB= yes
|
|
|
|
TCP_WRAPPERS_EXTRA_PATCHES=${FILESDIR}/extra-patch-tcpwrappers
|
|
|
|
LDNS_CONFIGURE_WITH= ldns
|
|
LDNS_LIB_DEPENDS= libldns.so:${PORTSDIR}/dns/ldns
|
|
LDNS_EXTRA_PATCHES= ${FILESDIR}/extra-patch-ldns
|
|
LDNS_CFLAGS= -I${LOCALBASE}/include
|
|
LDNS_CONFIGURE_ON= --with-ldflags='-L${LOCALBASE}/lib'
|
|
|
|
# http://www.psc.edu/index.php/hpn-ssh
|
|
HPN_CONFIGURE_WITH= hpn
|
|
NONECIPHER_CONFIGURE_WITH= nonecipher
|
|
|
|
# See http://www.roumenpetrov.info/openssh/
|
|
X509_VERSION= 8.5
|
|
X509_PATCH_SITES= http://www.roumenpetrov.info/openssh/x509-${X509_VERSION}/:x509
|
|
X509_PATCHFILES= ${PORTNAME}-7.0p1+x509-${X509_VERSION}.diff.gz:-p1:x509
|
|
|
|
# See https://bugzilla.mindrot.org/show_bug.cgi?id=2016
|
|
# and https://bugzilla.mindrot.org/show_bug.cgi?id=1604
|
|
SCTP_PATCHFILES= ${PORTNAME}-6.8p1-sctp-2573.patch.gz:-p1
|
|
SCTP_CONFIGURE_WITH= sctp
|
|
|
|
MIT_LIB_DEPENDS= libkrb5.so.3:${PORTSDIR}/security/krb5
|
|
HEIMDAL_LIB_DEPENDS= libkrb5.so.26:${PORTSDIR}/security/heimdal
|
|
|
|
PAM_CONFIGURE_WITH= pam
|
|
TCP_WRAPPERS_CONFIGURE_WITH= tcp-wrappers
|
|
|
|
LIBEDIT_CONFIGURE_WITH= libedit
|
|
LIBEDIT_USES= libedit
|
|
BSM_CONFIGURE_ON= --with-audit=bsm
|
|
|
|
ETCDIR?= ${PREFIX}/etc/ssh
|
|
|
|
.include <bsd.port.pre.mk>
|
|
|
|
PATCH_SITES+= http://mirror.shatow.net/freebsd/${PORTNAME}/:DEFAULT,x509,hpn,gsskex
|
|
|
|
# X509 patch includes TCP Wrapper support already
|
|
.if ${PORT_OPTIONS:MX509}
|
|
EXTRA_PATCHES:= ${EXTRA_PATCHES:N${TCP_WRAPPERS_EXTRA_PATCHES}}
|
|
.endif
|
|
|
|
# http://www.psc.edu/index.php/hpn-ssh https://github.com/rapier1/hpn-ssh https://github.com/rapier1/openssh-portable
|
|
.if ${PORT_OPTIONS:MHPN} || ${PORT_OPTIONS:MNONECIPHER}
|
|
PORTDOCS+= HPN-README
|
|
HPN_VERSION= 14v5
|
|
HPN_DISTVERSION= 6.7p1
|
|
#PATCH_SITES+= SOURCEFORGE/hpnssh/HPN-SSH%20${HPN_VERSION}%20${HPN_DISTVERSION}/:hpn
|
|
#PATCHFILES+= ${PORTNAME}-${HPN_DISTVERSION}-hpnssh${HPN_VERSION}.diff.gz:-p1:hpn
|
|
EXTRA_PATCHES+= ${FILESDIR}/extra-patch-hpn:-p2
|
|
.endif
|
|
|
|
# Must add this patch after HPN due to conflicts
|
|
.if ${PORT_OPTIONS:MKERB_GSSAPI}
|
|
# 6.7 patch taken from
|
|
# http://sources.debian.net/data/main/o/openssh/1:6.7p1-3/debian/patches/gssapi.patch
|
|
# which was originally based on 5.7 patch from
|
|
# http://www.sxw.org.uk/computing/patches/
|
|
PATCHFILES+= openssh-6.7p1-gsskex-all-20141021-284f364.patch.gz:-p1:gsskex
|
|
.endif
|
|
|
|
|
|
.if ${OSVERSION} >= 900000
|
|
CONFIGURE_LIBS+= -lutil
|
|
.endif
|
|
|
|
# 900007 is when utmp(5) was removed and utmpx(3) added
|
|
.if ${OSVERSION} >= 900007
|
|
CONFIGURE_ARGS+= --disable-utmp --disable-wtmp --disable-wtmpx --without-lastlog
|
|
.else
|
|
EXTRA_PATCHES+= ${FILESDIR}/extra-patch-sshd-utmp-size
|
|
.endif
|
|
|
|
EXTRA_PATCHES+= ${FILESDIR}/extra-patch-hostkeyalg_plus:-p1
|
|
|
|
# Keep this last
|
|
EXTRA_PATCHES+= ${FILESDIR}/extra-patch-version-addendum
|
|
|
|
.if ${PORT_OPTIONS:MX509}
|
|
BROKEN= Patch does not apply with 7.1
|
|
. if ${PORT_OPTIONS:MHPN} || ${PORT_OPTIONS:MNONECIPHER}
|
|
BROKEN= X509 patch and HPN patch do not apply cleanly together
|
|
. endif
|
|
|
|
. if ${PORT_OPTIONS:MSCTP}
|
|
BROKEN= X509 patch and SCTP patch do not apply cleanly together
|
|
. endif
|
|
|
|
. if ${PORT_OPTIONS:MKERB_GSSAPI}
|
|
BROKEN= X509 patch incompatible with KERB_GSSAPI patch
|
|
. endif
|
|
|
|
.endif
|
|
|
|
. if ${PORT_OPTIONS:MKERB_GSSAPI}
|
|
BROKEN= Does not apply to 6.8
|
|
. endif
|
|
|
|
.if ${PORT_OPTIONS:MHEIMDAL_BASE} && ${PORT_OPTIONS:MKERB_GSSAPI}
|
|
BROKEN= KERB_GSSAPI Requires either MIT or HEMIDAL, does not build with base Heimdal currently
|
|
.endif
|
|
|
|
.if ${PORT_OPTIONS:MHEIMDAL_BASE} && !exists(/usr/lib/libkrb5.so)
|
|
IGNORE= you have selected HEIMDAL_BASE but do not have heimdal installed in base
|
|
.endif
|
|
|
|
.if ${PORT_OPTIONS:MMIT} || ${PORT_OPTIONS:MHEIMDAL} || ${PORT_OPTIONS:MHEIMDAL_BASE}
|
|
. if ${PORT_OPTIONS:MHEIMDAL_BASE}
|
|
CONFIGURE_LIBS+= -lgssapi_krb5
|
|
CONFIGURE_ARGS+= --with-kerberos5=/usr
|
|
. else
|
|
CONFIGURE_ARGS+= --with-kerberos5=${LOCALBASE}
|
|
. endif
|
|
. if ${OPENSSLBASE} == "/usr"
|
|
CONFIGURE_ARGS+= --without-rpath
|
|
LDFLAGS= # empty
|
|
. endif
|
|
.else
|
|
. if ${PORT_OPTIONS:MKERB_GSSAPI}
|
|
IGNORE= KERB_GSSAPI requires one of MIT HEIMDAL or HEIMDAL_BASE
|
|
. endif
|
|
.endif
|
|
|
|
.if ${OPENSSLBASE} != "/usr"
|
|
CONFIGURE_ARGS+= --with-ssl-dir=${OPENSSLBASE}
|
|
.endif
|
|
|
|
EMPTYDIR= /var/empty
|
|
|
|
.if ${PORT_OPTIONS:MOVERWRITE_BASE} || defined(OPENSSH_OVERWRITE_BASE)
|
|
IGNORE= Overwrite base option is no longer supported.
|
|
.endif
|
|
|
|
USE_RC_SUBR= openssh
|
|
|
|
# After all
|
|
CONFIGURE_ARGS+= --sysconfdir=${ETCDIR} --with-privsep-path=${EMPTYDIR}
|
|
.if !empty(CONFIGURE_LIBS)
|
|
CONFIGURE_ARGS+= --with-libs='${CONFIGURE_LIBS}'
|
|
.endif
|
|
|
|
CONFIGURE_ARGS+= --with-xauth=${LOCALBASE}/bin/xauth
|
|
|
|
RC_SCRIPT_NAME= openssh
|
|
VERSION_ADDENDUM_DEFAULT?= ${OPSYS}-${PKGNAME}
|
|
|
|
post-patch:
|
|
@${REINPLACE_CMD} -e 's|-ldes|-lcrypto|g' ${WRKSRC}/configure
|
|
@${REINPLACE_CMD} \
|
|
-e 's|install: \(.*\) host-key check-config|install: \1|g' \
|
|
${WRKSRC}/Makefile.in
|
|
@${REINPLACE_CMD} -e 's|%%PREFIX%%|${LOCALBASE}|' \
|
|
-e 's|%%RC_SCRIPT_NAME%%|${RC_SCRIPT_NAME}|' ${WRKSRC}/sshd.8
|
|
@${REINPLACE_CMD} \
|
|
-e 's|\(VersionAddendum\) none|\1 ${VERSION_ADDENDUM_DEFAULT}|' \
|
|
${WRKSRC}/sshd_config
|
|
@${REINPLACE_CMD} \
|
|
-e 's|%%SSH_VERSION_FREEBSD_PORT%%|${VERSION_ADDENDUM_DEFAULT}|' \
|
|
${WRKSRC}/sshd_config.5
|
|
@${ECHO_CMD} '#define SSH_VERSION_FREEBSD_PORT "${VERSION_ADDENDUM_DEFAULT}"' >> \
|
|
${WRKSRC}/version.h
|
|
|
|
post-install:
|
|
${MV} ${STAGEDIR}${ETCDIR}/ssh_config \
|
|
${STAGEDIR}${ETCDIR}//ssh_config.sample
|
|
${MV} ${STAGEDIR}${ETCDIR}/sshd_config \
|
|
${STAGEDIR}${ETCDIR}/sshd_config.sample
|
|
.if ${PORT_OPTIONS:MHPN} || ${PORT_OPTIONS:MNONECIPHER}
|
|
${MKDIR} ${STAGEDIR}${DOCSDIR}
|
|
${INSTALL_DATA} ${WRKSRC}/HPN-README ${STAGEDIR}${DOCSDIR}
|
|
.endif
|
|
|
|
test: build
|
|
cd ${WRKSRC} && ${SETENV} -i \
|
|
OBJ=${WRKDIR} ${MAKE_ENV} \
|
|
TEST_SHELL=${SH} \
|
|
SUDO="${SUDO}" \
|
|
PATH=${WRKSRC}:${PREFIX}/bin:${PREFIX}/sbin:${PATH} \
|
|
${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} ${MAKE_ARGS} tests
|
|
|
|
.include <bsd.port.post.mk>
|