6ab93ec3c7
- Added EAP dynamic proxy module
- Added EAP Radius proxy authentication
- Added DNSSEC/unbound support
- Added kernel libipsec plugin
- Changed configuration files to install to ${PREFIX}/etc/<filename>.conf.sample
- Convert to new options format
PR: ports/185535
Submitted by: Francois ten Krooden <strongswan@nanoteq.com> (maintainer)
Security: CVE-2013-5018
Security: CVE-2013-6075
Security: CVE-2013-6076
107 lines
3.3 KiB
Makefile
107 lines
3.3 KiB
Makefile
# Created by: Riaan Kruger <riaank@gmail.com>
|
|
# $FreeBSD$
|
|
|
|
PORTNAME= strongswan
|
|
PORTVERSION= 5.1.1
|
|
CATEGORIES= security
|
|
MASTER_SITES= http://download.strongswan.org/ \
|
|
http://download2.strongswan.org/
|
|
|
|
MAINTAINER= strongswan@nanoteq.com
|
|
COMMENT= Open Source IKEv2 IPsec-based VPN solution
|
|
|
|
LIB_DEPENDS= execinfo:${PORTSDIR}/devel/libexecinfo
|
|
|
|
USE_BZIP2= yes
|
|
USE_OPENSSL= yes
|
|
USE_AUTOTOOLS= libtool
|
|
USE_RC_SUBR= strongswan
|
|
GNU_CONFIGURE= yes
|
|
USE_LDCONFIG= yes
|
|
|
|
CONFIGURE_ARGS= --enable-kernel-pfkey \
|
|
--enable-kernel-pfroute \
|
|
--disable-kernel-netlink \
|
|
--disable-tools \
|
|
--disable-scripts \
|
|
--disable-gmp \
|
|
--enable-openssl \
|
|
--enable-eap-identity \
|
|
--enable-eap-md5 \
|
|
--enable-eap-tls \
|
|
--enable-eap-mschapv2 \
|
|
--enable-eap-peap \
|
|
--enable-eap-ttls \
|
|
--enable-md4 \
|
|
--enable-blowfish \
|
|
--enable-addrblock \
|
|
--enable-whitelist \
|
|
--enable-cmd \
|
|
--with-group=wheel \
|
|
--with-lib-prefix=${PREFIX}
|
|
|
|
# Man pages with default install
|
|
MAN5= ipsec.conf.5 ipsec.secrets.5 strongswan.conf.5
|
|
MAN8= ipsec.8 _updown.8 _updown_espmark.8
|
|
|
|
OPTIONS_DEFINE= CURL EAPAKA3GPP2 EAPDYNAMIC EAPRADIUS EAPSIMFILE IKEv1 \
|
|
IPSECKEY KERNELLIBIPSEC LOADTESTER LDAP MYSQL SQLITE \
|
|
TESTVECTOR UNBOUND XAUTH
|
|
OPTIONS_SUB= ${OPTIONS_DEFINE}
|
|
CURL_DESC= Enable CURL to fetch CRL/OCSP
|
|
EAPAKA3GPP2_DESC= Enable EAP AKA with 3gpp2 backend
|
|
EAPDYNAMIC_DESC= Enable EAP dynamic proxy module
|
|
EAPRADIUS_DESC= Enable EAP Radius proxy authentication
|
|
EAPSIMFILE_DESC= Enable EAP SIM with file backend
|
|
IKEv1_DESC= Enable IKEv1 support
|
|
IPSECKEY_DESC= Enable authentication with IPSECKEY resource records with DNSSEC
|
|
KERNELLIBIPSEC_DESC= Enable IPSec userland backend
|
|
LOADTESTER_DESC= Enable load testing plugin
|
|
TESTVECTOR_DESC= Enable crypto test vectors
|
|
UNBOUND_DESC= Enable DNSSEC-enabled resolver
|
|
XAUTH_DESC= Enable XAuth password verification
|
|
|
|
# Extra options
|
|
CURL_CONFIGURE_ON= --enable-curl
|
|
CURL_LIB_DEPENDS= curl:${PORTSDIR}/ftp/curl
|
|
EAPAKA3GPP2_CONFIGURE_ON= --enable-eap-aka --enable-eap-aka-3gpp2
|
|
EAPAKA3GPP2_LIB_DEPENDS=gmp:${PORTSDIR}/math/gmp
|
|
EAPDYNAMIC_CONFIGURE_ON=--enable-eap-dynamic
|
|
EAPRADIUS_CONFIGURE_ON= --enable-eap-radius
|
|
EAPSIMFILE_CONFIGURE_ON=--enable-eap-sim --enable-eap-sim-file
|
|
IKEv1_CONFIGURE_OFF= --disable-ikev1
|
|
IPSECKEY_CONFIGURE_ON= --enable-ipseckey
|
|
KERNELLIBIPSEC_CONFIGURE_ON= --enable-kernel-libipsec
|
|
LOADTESTER_CONFIGURE_ON=--enable-load-tester
|
|
LDAP_CONFIGURE_ON= --enable-ldap
|
|
LDAP_USE= USE_OPENLDAP=yes
|
|
MYSQL_CONFIGURE_ON= --enable-mysql
|
|
MYSQL_USE= USE_MYSQL=yes
|
|
SQLITE_CONFIGURE_ON= --enable-sqlite
|
|
SQLITE_LIB_DEPENDS= sqlite3:${PORTSDIR}/databases/sqlite3
|
|
TESTVECTOR_CONFIGURE_ON=--enable-test-vectors
|
|
UNBOUND_CONFIGURE_ON= --enable-unbound
|
|
UNBOUND_LIB_DEPENDS= unbound:${PORTSDIR}/dns/unbound
|
|
XAUTH_CONFIGURE_ON= --enable-xauth-eap --enable-xauth-generic
|
|
|
|
.include <bsd.port.options.mk>
|
|
|
|
.if ${PORT_OPTIONS:MEAPSIMFILE} || ${PORT_OPTIONS:MEAPAKA3GPP2}
|
|
PLIST_SUB+=SIMAKA=""
|
|
.else
|
|
PLIST_SUB+=SIMAKA="@comment "
|
|
.endif
|
|
|
|
.if ${PORT_OPTIONS:MMYSQL} || ${PORT_OPTIONS:MSQLITE}
|
|
CONFIGURE_ARGS+= --enable-attr-sql --enable-sql
|
|
PLIST_SUB+= SQL=""
|
|
.else
|
|
PLIST_SUB+= SQL="@comment "
|
|
.endif
|
|
|
|
post-install:
|
|
${MKDIR} ${STAGEDIR}${EXAMPLESDIR}
|
|
${MV} ${STAGEDIR}${PREFIX}/etc/strongswan.conf ${STAGEDIR}${EXAMPLESDIR}
|
|
${MV} ${STAGEDIR}${PREFIX}/etc/ipsec.conf ${STAGEDIR}${EXAMPLESDIR}
|
|
|
|
.include <bsd.port.mk>
|