2010-04-15 11:57:47 +02:00
|
|
|
# $NetBSD: Makefile,v 1.70 2010/04/15 09:57:47 tron Exp $
|
2000-04-03 11:25:35 +02:00
|
|
|
|
2010-04-15 11:57:47 +02:00
|
|
|
DISTNAME= stunnel-4.33
|
Update stunnel to 3.9. For NetBSD, if in-tree OpenSSL exists, then the
default certificate directory is now /etc/openssl/certs (matches OpenSSL's
default), but if stunnel uses the pkgsrc OpenSSL, then the default is
${PREFIX}/certs.
Changes from version 3.8 include:
* Updated temporary key generation:
- stunnel is now honoring requested key-lengths correctly,
- temporary key is changed every hour.
* transfer() no longer hangs on some platforms.
Special thanks to Peter Wagemans for the patch.
* Potential security problem with syslog() call fixed.
* use daemon() function instead of daemonize, if available
* added -S flag, allowing you to choose which default verify
sources to use
* relocated service name output logging until after log_open.
(no longer outputs log info to inetd socket, causing bad SSL)
* -V flag now outputs the default values used by stunnel
* Added rigerous PRNG seeding
* PID changes (and related security-fix)
* Man page fixes
* Client SSL Session-IDs now used
* -N flag to specify tcpwrapper service name
* UPGRADE NOTE: this version seriously changes several previous stunnel
default behaviours. There are no longer any default cert file/dirs
compilied into stunnel, you must use the --with-cert-dir and
--with-cert-file configure arguments to set these manually, if desired.
Stunnel does not use the underlying ssl library defaults by default
unless configured with --enable-ssllib-cs. Note that these can always
be enabled at run time with the -A,-a, and -S flags.
Additionally, unless --with-pem-dir is specified at compile time,
stunnel will default to looking for stunnel.pem in the current directory.
2000-12-19 08:03:21 +01:00
|
|
|
CATEGORIES= security
|
2010-04-15 11:57:47 +02:00
|
|
|
MASTER_SITES= ftp://stunnel.mirt.net/stunnel/ \
|
2001-07-19 14:22:17 +02:00
|
|
|
http://www.stunnel.org/download/stunnel/src/
|
2000-04-03 11:25:35 +02:00
|
|
|
|
2006-10-14 13:12:19 +02:00
|
|
|
MAINTAINER= shaun@inerd.com
|
Update stunnel to 3.9. For NetBSD, if in-tree OpenSSL exists, then the
default certificate directory is now /etc/openssl/certs (matches OpenSSL's
default), but if stunnel uses the pkgsrc OpenSSL, then the default is
${PREFIX}/certs.
Changes from version 3.8 include:
* Updated temporary key generation:
- stunnel is now honoring requested key-lengths correctly,
- temporary key is changed every hour.
* transfer() no longer hangs on some platforms.
Special thanks to Peter Wagemans for the patch.
* Potential security problem with syslog() call fixed.
* use daemon() function instead of daemonize, if available
* added -S flag, allowing you to choose which default verify
sources to use
* relocated service name output logging until after log_open.
(no longer outputs log info to inetd socket, causing bad SSL)
* -V flag now outputs the default values used by stunnel
* Added rigerous PRNG seeding
* PID changes (and related security-fix)
* Man page fixes
* Client SSL Session-IDs now used
* -N flag to specify tcpwrapper service name
* UPGRADE NOTE: this version seriously changes several previous stunnel
default behaviours. There are no longer any default cert file/dirs
compilied into stunnel, you must use the --with-cert-dir and
--with-cert-file configure arguments to set these manually, if desired.
Stunnel does not use the underlying ssl library defaults by default
unless configured with --enable-ssllib-cs. Note that these can always
be enabled at run time with the -A,-a, and -S flags.
Additionally, unless --with-pem-dir is specified at compile time,
stunnel will default to looking for stunnel.pem in the current directory.
2000-12-19 08:03:21 +01:00
|
|
|
HOMEPAGE= http://www.stunnel.org/
|
2001-02-17 18:42:09 +01:00
|
|
|
COMMENT= Universal SSL tunnel
|
2009-07-10 13:23:10 +02:00
|
|
|
LICENSE= gnu-gpl-v2
|
2000-04-03 11:25:35 +02:00
|
|
|
|
2008-05-27 13:51:32 +02:00
|
|
|
PKG_DESTDIR_SUPPORT= user-destdir
|
|
|
|
|
|
2009-10-31 00:54:52 +01:00
|
|
|
BUILD_DEFS+= VARBASE
|
2006-10-14 13:12:19 +02:00
|
|
|
USE_LIBTOOL= yes
|
2005-09-28 22:52:18 +02:00
|
|
|
GNU_CONFIGURE= yes
|
2008-10-17 09:31:58 +02:00
|
|
|
CONFIGURE_ARGS+= --localstatedir=${VARBASE}
|
|
|
|
|
CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR}
|
|
|
|
|
CONFIGURE_ARGS+= --with-cert-dir=${SSLCERTS:Q}
|
|
|
|
|
CONFIGURE_ARGS+= --with-pem-dir=${SSLCERTS:Q}
|
|
|
|
|
CONFIGURE_ARGS+= --with-ssl=${SSLBASE:Q}
|
2003-07-29 13:18:38 +02:00
|
|
|
|
2009-10-31 00:54:52 +01:00
|
|
|
STUNNEL_USER?= stunnel
|
|
|
|
|
STUNNEL_GROUP?= stunnel
|
|
|
|
|
PKG_HOME?= ${VARBASE}/chroot/stunnel
|
|
|
|
|
PKG_USERS= ${STUNNEL_USER}:${STUNNEL_GROUP}::Stunnel:${PKG_HOME}
|
|
|
|
|
PKG_GROUPS= ${STUNNEL_GROUP}
|
|
|
|
|
USER_GROUP= ${STUNNEL_USER} ${STUNNEL_GROUP}
|
|
|
|
|
|
2003-07-29 13:18:38 +02:00
|
|
|
PKG_SYSCONFSUBDIR= stunnel
|
2009-10-31 00:54:52 +01:00
|
|
|
PKG_SYSCONFDIR_PERMS= ${USER_GROUP} 0700
|
|
|
|
|
|
|
|
|
|
OWN_DIRS_PERMS= ${PKG_HOME} ${USER_GROUP} 0700
|
|
|
|
|
CONF_FILES_PERMS+= ${PREFIX}/share/examples/stunnel/stunnel.conf-sample \
|
|
|
|
|
${PKG_SYSCONFDIR}/stunnel.conf ${USER_GROUP} 0644
|
2000-04-03 19:37:51 +02:00
|
|
|
|
2004-06-06 16:19:04 +02:00
|
|
|
RCD_SCRIPTS= stunnel
|
2009-10-31 00:54:52 +01:00
|
|
|
|
2006-02-17 08:43:36 +01:00
|
|
|
REPLACE_PERL+= src/stunnel3.in
|
2006-06-16 11:23:22 +02:00
|
|
|
USE_TOOLS+= perl:run
|
2004-06-06 16:19:04 +02:00
|
|
|
|
2009-10-31 00:54:52 +01:00
|
|
|
SUBST_CLASSES+= chroot
|
|
|
|
|
SUBST_MESSAGE.chroot= Fix chroot path
|
|
|
|
|
SUBST_STAGE.chroot= pre-configure
|
|
|
|
|
SUBST_FILES.chroot= tools/stunnel.conf-sample.in
|
|
|
|
|
SUBST_SED.chroot+= -e 's|@prefix@/var/lib|@localstatedir@/chroot|'
|
|
|
|
|
|
|
|
|
|
SUBST_CLASSES+= stunnel
|
|
|
|
|
SUBST_MESSAGE.stunnel= Fix user and group
|
|
|
|
|
SUBST_STAGE.stunnel= post-configure
|
|
|
|
|
SUBST_FILES.stunnel= tools/stunnel.conf-sample
|
|
|
|
|
SUBST_SED.stunnel= -e 's|setuid = nobody|setuid = ${STUNNEL_USER}|'
|
|
|
|
|
SUBST_SED.stunnel+= -e 's|setgid = nogroup|setgid = ${STUNNEL_GROUP}|'
|
|
|
|
|
|
2007-08-11 16:41:36 +02:00
|
|
|
.include "options.mk"
|
2006-10-14 13:12:19 +02:00
|
|
|
|
2004-04-25 05:12:29 +02:00
|
|
|
.include "../../security/openssl/buildlink3.mk"
|
2000-04-03 11:25:35 +02:00
|
|
|
.include "../../mk/bsd.pkg.mk"
|
