kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/mail/qmail/options.mk

114 lines
4.4 KiB
Makefile
Raw Normal View History

Update to notqmail 1.08 (as qmail-1.03nb49). From the changelog: ## Fix bugs - Vulnerabilities we've inherited from qmail 1.03, reported by Qualys. - CVE-2005-1515: fix signedness wraparound in `substdio_{put,bput}()`. - CVE-2005-1514: fix possible signed integer overflow in `commands()`. - CVE-2005-1513: fix integer overflow in `stralloc_readyplus()`. - Fix several other places where variables could overflow. - `qmail-pop3d`: instead of running as root if root authenticates (and being a vector for a dictionary attack on the root password), exit 1 to look just like a failed `checkpassword` login. - `qmail-inject`: do not parse header recipients if `-a` is given. - Correctly detect multiple IP addresses on the same interface. - Remove workaround for ancient DNS servers that do not properly support CNAME. - Fix possible integer overflow in `alloc()`. ## Reduce bug likelihood - Remove `dnscname` and `dnsmxip` programs that were being built but not installed. - Remove `systype` and related platform detection. - Remove unused variable in `maildir.c`. - Reduce variable scope in `tcpto.c`. - Avoid local variables shadowing same-named globals. - Avoid needing `exit.h` in named-pipe bug check. - Add a `test` target and some unit tests, using Check. - Add missing function declarations in `cdbmss.h`, `scan.h`. - Add missing return types to `main()`. - Add `hier.h` for inclusion in `instcheck.c`, `instchown.c`, `instpackage.c`. - Use system headers and types instead of the `HASSHORTSETGROUPS` check. - Use system headers instead of redeclaring `exit()`, `read()`, `write()`, `malloc()`, `free()`, `fork()`, `uint32_t`. - Use C89 function signatures for code we've touched so far. - Automated builds: - TravisCI: move setting `MAKEFLAGS` out of the script and into the matrix. - Add FreeBSD builds with CirrusCI. - Add a GitHub Actions build. ## Other changes - Remove DJB's TODO. - Replace many `pobox.com` URLs. - Acknowledge Erik Sjölund's `qmail-local.c` bugfix that we've inherited from netqmail. - Avoid generating catted manpages by building with `NROFF=true`. - Optionally create a `systemd` service file. - Run an alternate `qmail-remote` by setting `QMAILREMOTE` in `qmail-send`'s environment. ## Intent to remove In the course of developing this release, we found programs that we intend to remove in the next release. We believe none of these remains necessary or useful enough to be worth the cost of maintaining. If you disagree, please let us know! - Remove `qsmhook`, long since replaced by `preline`. - Remove inefficient `maildirwatch`. - Remove obsolete mail client wrappers. - Remove `qmail-pop3d`, since Maildir is well supported by actively maintained POP3 servers.
2020-05-23 22:50:02 +02:00
# $NetBSD: options.mk,v 1.69 2020/05/23 20:50:02 schmonz Exp $
Using bsd.options.mk, add several common build-time options. The complete list: badrcptto bigdns darwin netqmail nullenvsender outgoingip qregex realrcptto smtpauth syncdir tls This obviates the need for a separate netqmail package. As a result, reintegrate Makefile.common into Makefile, and simplify a handful of definitions. If you used the netqmail package, set PKG_OPTIONS.qmail to "netqmail bigdns" to build with the same patches as before. Note that most of these options result in patches being applied, and that any given combination of patches may not apply cleanly. If there's a combination you need that doesn't work, or build options you need that aren't available, let me know. On Darwin, the "darwin" option is set by default, as it's needed in order to build. The patch includes <nameser8_compat.h>, which is present on Panther, but not on older systems. We provide a buildlink stand-in where needed. On Linux, the "netqmail" option is set by default, as with recent glibc it's necessary to #include <errno.h> in order to build. On other platforms, no options are set by default. Bump PKGREVISION.
2004-08-22 02:10:51 +02:00
Update to 1.03nb29. pkgsrc changes: Remove unneeded options: - Unconditionally apply netqmail (which includes a local patch; remove it) - Unconditionally apply bigdns, maildiruniq, outgoingip, rcptcheck, remote - Unconditionally apply the TLS + SMTP AUTH _patch_ (not the options) - Record all applied patches (mandatory and optional) in QMAILPATCHES - Remove badrcptto, qregex, realrcptto, viruscan (moved to rejectutils) Simplify packaging: - Extract a standalone patch <https://schmonz.com/qmail/rejectutils> to repackage the mutually conflicting recipient- and content-checking patches as separate programs, along with wrappers for running checks in sequence - Extract a standalone patch <https://schmonz.com/qmail/destdir> to build to a staging area, as non-root, without hardcoded IDs - Run the destdir patch's `install-destdir` to make or repair the queue and set special file permissions, obviating the need for a dependency on mail/queue-fix and handcrafted SPECIAL_PERMS - While here, run `instcheck` to ensure we've installed just like `make setup check` as root would have - Install INSTALL and SENDMAIL docs under their original names, even on Darwin - Avoid building catpages, since we don't install them, and remove nroff from USE_TOOLS Default-enable more useful options: - "eai" (new) permits UTF-8 almost everywhere in email - "qmail-rejectutils" (new) adds several tools for selectively rejecting messages - "syncdir" forces synchronous link() and related syscalls - "tls" and "sasl", instead of causing patch conflicts, cause the TLS and SMTP AUTH code to be included (!)
2017-07-21 06:07:01 +02:00
PKG_OPTIONS_VAR= PKG_OPTIONS.qmail
Apply the "tai-leapsecs" patch iff the 'tai-system-clock' option is set (off by default). Bump PKGREVISION.
2019-01-17 23:49:12 +01:00
PKG_SUPPORTED_OPTIONS+= eai inet6 pam syncdir tai-system-clock tls
Depend on new enough sysutils/checkpassword{,-pam} such that qmail-run can (by itself depending on pkgtools/pkg_alternatives) expect to find "nbcheckpassword". Remove 'qmail-rejectutils' option, which will become an unconditional dependency in qmail-run. Bump PKGREVISION.
2018-08-01 09:10:27 +02:00
PKG_SUPPORTED_OPTIONS+= qmail-customerror qmail-srs
We've been stuck on a TLS implementation from 2007 because the TLS patch and the AUTH patch conflict, nobody else has published a newer hand-merged combo patch, and as it happens, I'd apparently rather write a pile of new DJB-style C than make myself responsible for hand-merging other people's security-sensitive code every time there's a new TLS patch. Now that we have AUTH without patching (see mail/qmail-acceptutils), the "sasl" option goes away, we're finally on the most recent TLS patch available, and when it's updated it'll be easy for us to keep up. Rebase RCPTCHECK and EAI patches onto netqmail-with-TLS-and-no-AUTH. Bump PKGREVISION.
2018-10-24 15:32:26 +02:00
PKG_SUGGESTED_OPTIONS+= eai syncdir tls
Depend on new enough sysutils/checkpassword{,-pam} such that qmail-run can (by itself depending on pkgtools/pkg_alternatives) expect to find "nbcheckpassword". Remove 'qmail-rejectutils' option, which will become an unconditional dependency in qmail-run. Bump PKGREVISION.
2018-08-01 09:10:27 +02:00
PKG_SUGGESTED_OPTIONS+= qmail-customerror qmail-srs
Packages have no business modifying PKG_DEFAULT_OPTIONS -- it's a user settable variable. Set PKG_SUGGESTED_OPTIONS instead. Also, make use of PKG_OPTIONS_LEGACY_VARS. Reviewed by wiz.
2005-05-31 12:01:36 +02:00
Update to 1.03nb29. pkgsrc changes: Remove unneeded options: - Unconditionally apply netqmail (which includes a local patch; remove it) - Unconditionally apply bigdns, maildiruniq, outgoingip, rcptcheck, remote - Unconditionally apply the TLS + SMTP AUTH _patch_ (not the options) - Record all applied patches (mandatory and optional) in QMAILPATCHES - Remove badrcptto, qregex, realrcptto, viruscan (moved to rejectutils) Simplify packaging: - Extract a standalone patch <https://schmonz.com/qmail/rejectutils> to repackage the mutually conflicting recipient- and content-checking patches as separate programs, along with wrappers for running checks in sequence - Extract a standalone patch <https://schmonz.com/qmail/destdir> to build to a staging area, as non-root, without hardcoded IDs - Run the destdir patch's `install-destdir` to make or repair the queue and set special file permissions, obviating the need for a dependency on mail/queue-fix and handcrafted SPECIAL_PERMS - While here, run `instcheck` to ensure we've installed just like `make setup check` as root would have - Install INSTALL and SENDMAIL docs under their original names, even on Darwin - Avoid building catpages, since we don't install them, and remove nroff from USE_TOOLS Default-enable more useful options: - "eai" (new) permits UTF-8 almost everywhere in email - "qmail-rejectutils" (new) adds several tools for selectively rejecting messages - "syncdir" forces synchronous link() and related syscalls - "tls" and "sasl", instead of causing patch conflicts, cause the TLS and SMTP AUTH code to be included (!)
2017-07-21 06:07:01 +02:00
.include "../../mk/bsd.options.mk"
.if !empty(PKG_OPTIONS:Meai)
. include "../../devel/libidn2/buildlink3.mk"
QMAILPATCHES+= eai:${EAI_PATCH}
Add a new non-optional patch: qmail-spp, a generic plugin interface for qmail-smtpd (tweaked to tolerate the absence of a config file). The RCPTCHECK patch is a logical subset of SPP with a slightly different interface, and conflicts with SPP. Remove RCPTCHECK. Bump PKGREVISION.
2018-11-10 16:29:01 +01:00
EAI_PATCH= netqmail-1.06-tls-20160918-onlyremote-20181107-spp-20181109-smtputf8-20181109.patch
Update to 1.03nb29. pkgsrc changes: Remove unneeded options: - Unconditionally apply netqmail (which includes a local patch; remove it) - Unconditionally apply bigdns, maildiruniq, outgoingip, rcptcheck, remote - Unconditionally apply the TLS + SMTP AUTH _patch_ (not the options) - Record all applied patches (mandatory and optional) in QMAILPATCHES - Remove badrcptto, qregex, realrcptto, viruscan (moved to rejectutils) Simplify packaging: - Extract a standalone patch <https://schmonz.com/qmail/rejectutils> to repackage the mutually conflicting recipient- and content-checking patches as separate programs, along with wrappers for running checks in sequence - Extract a standalone patch <https://schmonz.com/qmail/destdir> to build to a staging area, as non-root, without hardcoded IDs - Run the destdir patch's `install-destdir` to make or repair the queue and set special file permissions, obviating the need for a dependency on mail/queue-fix and handcrafted SPECIAL_PERMS - While here, run `instcheck` to ensure we've installed just like `make setup check` as root would have - Install INSTALL and SENDMAIL docs under their original names, even on Darwin - Avoid building catpages, since we don't install them, and remove nroff from USE_TOOLS Default-enable more useful options: - "eai" (new) permits UTF-8 almost everywhere in email - "qmail-rejectutils" (new) adds several tools for selectively rejecting messages - "syncdir" forces synchronous link() and related syscalls - "tls" and "sasl", instead of causing patch conflicts, cause the TLS and SMTP AUTH code to be included (!)
2017-07-21 06:07:01 +02:00
PATCHFILES+= ${EAI_PATCH}
We've been stuck on a TLS implementation from 2007 because the TLS patch and the AUTH patch conflict, nobody else has published a newer hand-merged combo patch, and as it happens, I'd apparently rather write a pile of new DJB-style C than make myself responsible for hand-merging other people's security-sensitive code every time there's a new TLS patch. Now that we have AUTH without patching (see mail/qmail-acceptutils), the "sasl" option goes away, we're finally on the most recent TLS patch available, and when it's updated it'll be easy for us to keep up. Rebase RCPTCHECK and EAI patches onto netqmail-with-TLS-and-no-AUTH. Bump PKGREVISION.
2018-10-24 15:32:26 +02:00
SITES.${EAI_PATCH}= https://schmonz.com/qmail/eai/
Use CPPFLAGS, not CFLAGS, for consistency with ucspi-tcp6 and djbdns.
2019-06-28 21:18:25 +02:00
CPPFLAGS+= -DEHLO=1
Add qmail-maildiruniq and qmail-rcptcheck options, off by default. Since we no longer stage-install as root, instcheck is noise; skip it. Mollify pkglint. Bump PKGREVISION.
2017-03-23 08:24:48 +01:00
.endif
Add 'inet6' and 'pam' options to control dependencies on ucspi-tcp{6,} and checkpassword{-pam,}. Add dependency on ucspi-ssl to 'tls' option. Bump PKGREVISION.
2018-07-30 01:26:44 +02:00
.if !empty(PKG_OPTIONS:Mpam)
Depend on new enough sysutils/checkpassword{,-pam} such that qmail-run can (by itself depending on pkgtools/pkg_alternatives) expect to find "nbcheckpassword". Remove 'qmail-rejectutils' option, which will become an unconditional dependency in qmail-run. Bump PKGREVISION.
2018-08-01 09:10:27 +02:00
DEPENDS+= checkpassword-pam>=0.99nb1:../../sysutils/checkpassword-pam
Add 'inet6' and 'pam' options to control dependencies on ucspi-tcp{6,} and checkpassword{-pam,}. Add dependency on ucspi-ssl to 'tls' option. Bump PKGREVISION.
2018-07-30 01:26:44 +02:00
.else
Depend on new enough sysutils/checkpassword{,-pam} such that qmail-run can (by itself depending on pkgtools/pkg_alternatives) expect to find "nbcheckpassword". Remove 'qmail-rejectutils' option, which will become an unconditional dependency in qmail-run. Bump PKGREVISION.
2018-08-01 09:10:27 +02:00
DEPENDS+= checkpassword>=0.90nb1:../../sysutils/checkpassword
Add 'inet6' and 'pam' options to control dependencies on ucspi-tcp{6,} and checkpassword{-pam,}. Add dependency on ucspi-ssl to 'tls' option. Bump PKGREVISION.
2018-07-30 01:26:44 +02:00
.endif
Update to 1.03nb32. pkgsrc changes: - Apply the qbiff-utmpx patch to (probably) fix build on FreeBSD - Enable "qmail-srs" by default - Add "qmail-customerror", enabled by default - Move TLS config steps from INSTALL to MESSAGE.tls
2017-08-14 01:42:55 +02:00
.if !empty(PKG_OPTIONS:Mqmail-customerror)
mail: align variable assignments pkglint -Wall -F --only aligned -r No manual corrections.
2019-11-02 17:25:17 +01:00
QMAILPATCHES+= customerror:${CUSTOMERROR_PATCH}
CUSTOMERROR_PATCH= qmail-queue-custom-error-v2.netqmail-1.05.patch
PATCHFILES+= ${CUSTOMERROR_PATCH}
SITES.${CUSTOMERROR_PATCH}= https://notes.sagredo.eu/files/qmail/patches/
PATCH_DIST_STRIP.${CUSTOMERROR_PATCH}= -p1
Update from netqmail 1.06 (2007) to notqmail 1.07 (just released). From the changelog: - code: remove incorrect usage of vfork() - code: detect and prefer utmpx where available - code: removed idedit, install-big. var-qmail packages are no more - portability problem: explicitly initialize strerr_sys and define BIND_8_COMPAT to work around Mac OS X - code: add instchown to set ownership and mode on installed files - code: add instpackage to install without root access - doc: rename INSTALL, SENDMAIL to INSTALL.md, SENDMAIL.md to support building on case-insensitive filesystems - code: lookup uid/gid at runtime - code: use DESTDIR environment variable as root directory in install pkgsrc changes: - If hostname isn't FQDN, config-fast-pkgsrc wouldn't produce a working config, so don't run it; tell user what to do instead - Stage QMAIL_QUEUE_DIR into DESTDIR/tmp, to be more obvious that it's not being packaged up (and is not how a queue gets created at pkg_add time) - Drop custom destdir, qbiffutmpx, and Darwin patches - Rebase TLS-onlyremote, QMAILREMOTE, and SRS patches - Require latest ucspi-ssl and ucspi-tcp6 for IPv4 fixes - Move MESSAGE.tls to README.tls, and remove other MESSAGE* - Set PKG_HOME even for non-default values of QMAIL_ALIAS_USER - Check whether alias/.qmail-foo exist before trying to remove Bump PKGREVISION.
2019-08-20 04:38:04 +02:00
PATCH_DIST_CAT.${CUSTOMERROR_PATCH}= ${SED} -e 's|vfork|fork|g' < ${CUSTOMERROR_PATCH}
Update to 1.03nb32. pkgsrc changes: - Apply the qbiff-utmpx patch to (probably) fix build on FreeBSD - Enable "qmail-srs" by default - Add "qmail-customerror", enabled by default - Move TLS config steps from INSTALL to MESSAGE.tls
2017-08-14 01:42:55 +02:00
.endif
Update to 1.03nb29. pkgsrc changes: Remove unneeded options: - Unconditionally apply netqmail (which includes a local patch; remove it) - Unconditionally apply bigdns, maildiruniq, outgoingip, rcptcheck, remote - Unconditionally apply the TLS + SMTP AUTH _patch_ (not the options) - Record all applied patches (mandatory and optional) in QMAILPATCHES - Remove badrcptto, qregex, realrcptto, viruscan (moved to rejectutils) Simplify packaging: - Extract a standalone patch <https://schmonz.com/qmail/rejectutils> to repackage the mutually conflicting recipient- and content-checking patches as separate programs, along with wrappers for running checks in sequence - Extract a standalone patch <https://schmonz.com/qmail/destdir> to build to a staging area, as non-root, without hardcoded IDs - Run the destdir patch's `install-destdir` to make or repair the queue and set special file permissions, obviating the need for a dependency on mail/queue-fix and handcrafted SPECIAL_PERMS - While here, run `instcheck` to ensure we've installed just like `make setup check` as root would have - Install INSTALL and SENDMAIL docs under their original names, even on Darwin - Avoid building catpages, since we don't install them, and remove nroff from USE_TOOLS Default-enable more useful options: - "eai" (new) permits UTF-8 almost everywhere in email - "qmail-rejectutils" (new) adds several tools for selectively rejecting messages - "syncdir" forces synchronous link() and related syscalls - "tls" and "sasl", instead of causing patch conflicts, cause the TLS and SMTP AUTH code to be included (!)
2017-07-21 06:07:01 +02:00
PLIST_VARS+= srs
.if !empty(PKG_OPTIONS:Mqmail-srs)
We've been stuck on a TLS implementation from 2007 because the TLS patch and the AUTH patch conflict, nobody else has published a newer hand-merged combo patch, and as it happens, I'd apparently rather write a pile of new DJB-style C than make myself responsible for hand-merging other people's security-sensitive code every time there's a new TLS patch. Now that we have AUTH without patching (see mail/qmail-acceptutils), the "sasl" option goes away, we're finally on the most recent TLS patch available, and when it's updated it'll be easy for us to keep up. Rebase RCPTCHECK and EAI patches onto netqmail-with-TLS-and-no-AUTH. Bump PKGREVISION.
2018-10-24 15:32:26 +02:00
PLIST.srs= yes
Update to 1.03nb29. pkgsrc changes: Remove unneeded options: - Unconditionally apply netqmail (which includes a local patch; remove it) - Unconditionally apply bigdns, maildiruniq, outgoingip, rcptcheck, remote - Unconditionally apply the TLS + SMTP AUTH _patch_ (not the options) - Record all applied patches (mandatory and optional) in QMAILPATCHES - Remove badrcptto, qregex, realrcptto, viruscan (moved to rejectutils) Simplify packaging: - Extract a standalone patch <https://schmonz.com/qmail/rejectutils> to repackage the mutually conflicting recipient- and content-checking patches as separate programs, along with wrappers for running checks in sequence - Extract a standalone patch <https://schmonz.com/qmail/destdir> to build to a staging area, as non-root, without hardcoded IDs - Run the destdir patch's `install-destdir` to make or repair the queue and set special file permissions, obviating the need for a dependency on mail/queue-fix and handcrafted SPECIAL_PERMS - While here, run `instcheck` to ensure we've installed just like `make setup check` as root would have - Install INSTALL and SENDMAIL docs under their original names, even on Darwin - Avoid building catpages, since we don't install them, and remove nroff from USE_TOOLS Default-enable more useful options: - "eai" (new) permits UTF-8 almost everywhere in email - "qmail-rejectutils" (new) adds several tools for selectively rejecting messages - "syncdir" forces synchronous link() and related syscalls - "tls" and "sasl", instead of causing patch conflicts, cause the TLS and SMTP AUTH code to be included (!)
2017-07-21 06:07:01 +02:00
. include "../../mail/libsrs2/buildlink3.mk"
QMAILPATCHES+= srs:${SRS_PATCH}
Update from netqmail 1.06 (2007) to notqmail 1.07 (just released). From the changelog: - code: remove incorrect usage of vfork() - code: detect and prefer utmpx where available - code: removed idedit, install-big. var-qmail packages are no more - portability problem: explicitly initialize strerr_sys and define BIND_8_COMPAT to work around Mac OS X - code: add instchown to set ownership and mode on installed files - code: add instpackage to install without root access - doc: rename INSTALL, SENDMAIL to INSTALL.md, SENDMAIL.md to support building on case-insensitive filesystems - code: lookup uid/gid at runtime - code: use DESTDIR environment variable as root directory in install pkgsrc changes: - If hostname isn't FQDN, config-fast-pkgsrc wouldn't produce a working config, so don't run it; tell user what to do instead - Stage QMAIL_QUEUE_DIR into DESTDIR/tmp, to be more obvious that it's not being packaged up (and is not how a queue gets created at pkg_add time) - Drop custom destdir, qbiffutmpx, and Darwin patches - Rebase TLS-onlyremote, QMAILREMOTE, and SRS patches - Require latest ucspi-ssl and ucspi-tcp6 for IPv4 fixes - Move MESSAGE.tls to README.tls, and remove other MESSAGE* - Set PKG_HOME even for non-default values of QMAIL_ALIAS_USER - Check whether alias/.qmail-foo exist before trying to remove Bump PKGREVISION.
2019-08-20 04:38:04 +02:00
SRS_PATCH= notqmail-1.07-tls-20190517-qmailremote-20190819-srs-20190819.patch
Update to 1.03nb29. pkgsrc changes: Remove unneeded options: - Unconditionally apply netqmail (which includes a local patch; remove it) - Unconditionally apply bigdns, maildiruniq, outgoingip, rcptcheck, remote - Unconditionally apply the TLS + SMTP AUTH _patch_ (not the options) - Record all applied patches (mandatory and optional) in QMAILPATCHES - Remove badrcptto, qregex, realrcptto, viruscan (moved to rejectutils) Simplify packaging: - Extract a standalone patch <https://schmonz.com/qmail/rejectutils> to repackage the mutually conflicting recipient- and content-checking patches as separate programs, along with wrappers for running checks in sequence - Extract a standalone patch <https://schmonz.com/qmail/destdir> to build to a staging area, as non-root, without hardcoded IDs - Run the destdir patch's `install-destdir` to make or repair the queue and set special file permissions, obviating the need for a dependency on mail/queue-fix and handcrafted SPECIAL_PERMS - While here, run `instcheck` to ensure we've installed just like `make setup check` as root would have - Install INSTALL and SENDMAIL docs under their original names, even on Darwin - Avoid building catpages, since we don't install them, and remove nroff from USE_TOOLS Default-enable more useful options: - "eai" (new) permits UTF-8 almost everywhere in email - "qmail-rejectutils" (new) adds several tools for selectively rejecting messages - "syncdir" forces synchronous link() and related syscalls - "tls" and "sasl", instead of causing patch conflicts, cause the TLS and SMTP AUTH code to be included (!)
2017-07-21 06:07:01 +02:00
PATCHFILES+= ${SRS_PATCH}
Update from netqmail 1.06 (2007) to notqmail 1.07 (just released). From the changelog: - code: remove incorrect usage of vfork() - code: detect and prefer utmpx where available - code: removed idedit, install-big. var-qmail packages are no more - portability problem: explicitly initialize strerr_sys and define BIND_8_COMPAT to work around Mac OS X - code: add instchown to set ownership and mode on installed files - code: add instpackage to install without root access - doc: rename INSTALL, SENDMAIL to INSTALL.md, SENDMAIL.md to support building on case-insensitive filesystems - code: lookup uid/gid at runtime - code: use DESTDIR environment variable as root directory in install pkgsrc changes: - If hostname isn't FQDN, config-fast-pkgsrc wouldn't produce a working config, so don't run it; tell user what to do instead - Stage QMAIL_QUEUE_DIR into DESTDIR/tmp, to be more obvious that it's not being packaged up (and is not how a queue gets created at pkg_add time) - Drop custom destdir, qbiffutmpx, and Darwin patches - Rebase TLS-onlyremote, QMAILREMOTE, and SRS patches - Require latest ucspi-ssl and ucspi-tcp6 for IPv4 fixes - Move MESSAGE.tls to README.tls, and remove other MESSAGE* - Set PKG_HOME even for non-default values of QMAIL_ALIAS_USER - Check whether alias/.qmail-foo exist before trying to remove Bump PKGREVISION.
2019-08-20 04:38:04 +02:00
SITES.${SRS_PATCH}= https://schmonz.com/qmail/srs/
Update to notqmail 1.08 (as qmail-1.03nb49). From the changelog: ## Fix bugs - Vulnerabilities we've inherited from qmail 1.03, reported by Qualys. - CVE-2005-1515: fix signedness wraparound in `substdio_{put,bput}()`. - CVE-2005-1514: fix possible signed integer overflow in `commands()`. - CVE-2005-1513: fix integer overflow in `stralloc_readyplus()`. - Fix several other places where variables could overflow. - `qmail-pop3d`: instead of running as root if root authenticates (and being a vector for a dictionary attack on the root password), exit 1 to look just like a failed `checkpassword` login. - `qmail-inject`: do not parse header recipients if `-a` is given. - Correctly detect multiple IP addresses on the same interface. - Remove workaround for ancient DNS servers that do not properly support CNAME. - Fix possible integer overflow in `alloc()`. ## Reduce bug likelihood - Remove `dnscname` and `dnsmxip` programs that were being built but not installed. - Remove `systype` and related platform detection. - Remove unused variable in `maildir.c`. - Reduce variable scope in `tcpto.c`. - Avoid local variables shadowing same-named globals. - Avoid needing `exit.h` in named-pipe bug check. - Add a `test` target and some unit tests, using Check. - Add missing function declarations in `cdbmss.h`, `scan.h`. - Add missing return types to `main()`. - Add `hier.h` for inclusion in `instcheck.c`, `instchown.c`, `instpackage.c`. - Use system headers and types instead of the `HASSHORTSETGROUPS` check. - Use system headers instead of redeclaring `exit()`, `read()`, `write()`, `malloc()`, `free()`, `fork()`, `uint32_t`. - Use C89 function signatures for code we've touched so far. - Automated builds: - TravisCI: move setting `MAKEFLAGS` out of the script and into the matrix. - Add FreeBSD builds with CirrusCI. - Add a GitHub Actions build. ## Other changes - Remove DJB's TODO. - Replace many `pobox.com` URLs. - Acknowledge Erik Sjölund's `qmail-local.c` bugfix that we've inherited from netqmail. - Avoid generating catted manpages by building with `NROFF=true`. - Optionally create a `systemd` service file. - Run an alternate `qmail-remote` by setting `QMAILREMOTE` in `qmail-send`'s environment. ## Intent to remove In the course of developing this release, we found programs that we intend to remove in the next release. We believe none of these remains necessary or useful enough to be worth the cost of maintaining. If you disagree, please let us know! - Remove `qsmhook`, long since replaced by `preline`. - Remove inefficient `maildirwatch`. - Remove obsolete mail client wrappers. - Remove `qmail-pop3d`, since Maildir is well supported by actively maintained POP3 servers.
2020-05-23 22:50:02 +02:00
PATCH_DIST_CAT.${SRS_PATCH}= ${SED} -e 's|compile forward.c sig.h readwrite.h exit.h env.h qmail.h substdio.h|compile forward.c sig.h readwrite.h env.h qmail.h substdio.h|g' < ${SRS_PATCH}
Update to 1.03nb29. pkgsrc changes: Remove unneeded options: - Unconditionally apply netqmail (which includes a local patch; remove it) - Unconditionally apply bigdns, maildiruniq, outgoingip, rcptcheck, remote - Unconditionally apply the TLS + SMTP AUTH _patch_ (not the options) - Record all applied patches (mandatory and optional) in QMAILPATCHES - Remove badrcptto, qregex, realrcptto, viruscan (moved to rejectutils) Simplify packaging: - Extract a standalone patch <https://schmonz.com/qmail/rejectutils> to repackage the mutually conflicting recipient- and content-checking patches as separate programs, along with wrappers for running checks in sequence - Extract a standalone patch <https://schmonz.com/qmail/destdir> to build to a staging area, as non-root, without hardcoded IDs - Run the destdir patch's `install-destdir` to make or repair the queue and set special file permissions, obviating the need for a dependency on mail/queue-fix and handcrafted SPECIAL_PERMS - While here, run `instcheck` to ensure we've installed just like `make setup check` as root would have - Install INSTALL and SENDMAIL docs under their original names, even on Darwin - Avoid building catpages, since we don't install them, and remove nroff from USE_TOOLS Default-enable more useful options: - "eai" (new) permits UTF-8 almost everywhere in email - "qmail-rejectutils" (new) adds several tools for selectively rejecting messages - "syncdir" forces synchronous link() and related syscalls - "tls" and "sasl", instead of causing patch conflicts, cause the TLS and SMTP AUTH code to be included (!)
2017-07-21 06:07:01 +02:00
SUBST_CLASSES+= srsinclude
SUBST_STAGE.srsinclude= do-configure
SUBST_FILES.srsinclude= srs.c
SUBST_SED.srsinclude= -e 's|/usr/local/include/srs2.h|srs2.h|'
SUBST_CLASSES+= srsreadme
SUBST_STAGE.srsreadme= do-configure
SUBST_FILES.srsreadme= README.srs
Use SUBST_VARS where applicable.
2017-07-27 04:18:05 +02:00
SUBST_VARS.srsreadme= PKG_SYSCONFDIR
Update to 1.03nb29. pkgsrc changes: Remove unneeded options: - Unconditionally apply netqmail (which includes a local patch; remove it) - Unconditionally apply bigdns, maildiruniq, outgoingip, rcptcheck, remote - Unconditionally apply the TLS + SMTP AUTH _patch_ (not the options) - Record all applied patches (mandatory and optional) in QMAILPATCHES - Remove badrcptto, qregex, realrcptto, viruscan (moved to rejectutils) Simplify packaging: - Extract a standalone patch <https://schmonz.com/qmail/rejectutils> to repackage the mutually conflicting recipient- and content-checking patches as separate programs, along with wrappers for running checks in sequence - Extract a standalone patch <https://schmonz.com/qmail/destdir> to build to a staging area, as non-root, without hardcoded IDs - Run the destdir patch's `install-destdir` to make or repair the queue and set special file permissions, obviating the need for a dependency on mail/queue-fix and handcrafted SPECIAL_PERMS - While here, run `instcheck` to ensure we've installed just like `make setup check` as root would have - Install INSTALL and SENDMAIL docs under their original names, even on Darwin - Avoid building catpages, since we don't install them, and remove nroff from USE_TOOLS Default-enable more useful options: - "eai" (new) permits UTF-8 almost everywhere in email - "qmail-rejectutils" (new) adds several tools for selectively rejecting messages - "syncdir" forces synchronous link() and related syscalls - "tls" and "sasl", instead of causing patch conflicts, cause the TLS and SMTP AUTH code to be included (!)
2017-07-21 06:07:01 +02:00
READMES+= README.srs
Using bsd.options.mk, add several common build-time options. The complete list: badrcptto bigdns darwin netqmail nullenvsender outgoingip qregex realrcptto smtpauth syncdir tls This obviates the need for a separate netqmail package. As a result, reintegrate Makefile.common into Makefile, and simplify a handful of definitions. If you used the netqmail package, set PKG_OPTIONS.qmail to "netqmail bigdns" to build with the same patches as before. Note that most of these options result in patches being applied, and that any given combination of patches may not apply cleanly. If there's a combination you need that doesn't work, or build options you need that aren't available, let me know. On Darwin, the "darwin" option is set by default, as it's needed in order to build. The patch includes <nameser8_compat.h>, which is present on Panther, but not on older systems. We provide a buildlink stand-in where needed. On Linux, the "netqmail" option is set by default, as with recent glibc it's necessary to #include <errno.h> in order to build. On other platforms, no options are set by default. Bump PKGREVISION.
2004-08-22 02:10:51 +02:00
.endif
.if !empty(PKG_OPTIONS:Msyncdir)
. include "../../devel/syncdir/buildlink3.mk"
Update to 1.03nb29. pkgsrc changes: Remove unneeded options: - Unconditionally apply netqmail (which includes a local patch; remove it) - Unconditionally apply bigdns, maildiruniq, outgoingip, rcptcheck, remote - Unconditionally apply the TLS + SMTP AUTH _patch_ (not the options) - Record all applied patches (mandatory and optional) in QMAILPATCHES - Remove badrcptto, qregex, realrcptto, viruscan (moved to rejectutils) Simplify packaging: - Extract a standalone patch <https://schmonz.com/qmail/rejectutils> to repackage the mutually conflicting recipient- and content-checking patches as separate programs, along with wrappers for running checks in sequence - Extract a standalone patch <https://schmonz.com/qmail/destdir> to build to a staging area, as non-root, without hardcoded IDs - Run the destdir patch's `install-destdir` to make or repair the queue and set special file permissions, obviating the need for a dependency on mail/queue-fix and handcrafted SPECIAL_PERMS - While here, run `instcheck` to ensure we've installed just like `make setup check` as root would have - Install INSTALL and SENDMAIL docs under their original names, even on Darwin - Avoid building catpages, since we don't install them, and remove nroff from USE_TOOLS Default-enable more useful options: - "eai" (new) permits UTF-8 almost everywhere in email - "qmail-rejectutils" (new) adds several tools for selectively rejecting messages - "syncdir" forces synchronous link() and related syscalls - "tls" and "sasl", instead of causing patch conflicts, cause the TLS and SMTP AUTH code to be included (!)
2017-07-21 06:07:01 +02:00
SYNCDIR_DISTFILES_cmd= ( cd ../../devel/syncdir && ${MAKE} show-var VARNAME=DISTFILES )
QMAILPATCHES+= syncdir:${SYNCDIR_DISTFILES_cmd:sh}
SUBST_CLASSES+= load
SUBST_STAGE.load= do-configure
SUBST_FILES.load= make-load.sh
SUBST_SED.load= -e '$$s|$$| ${COMPILER_RPATH_FLAG}${BUILDLINK_PREFIX.syncdir}/lib -L${BUILDLINK_PREFIX.syncdir}/lib \-lsyncdir|'
Using bsd.options.mk, add several common build-time options. The complete list: badrcptto bigdns darwin netqmail nullenvsender outgoingip qregex realrcptto smtpauth syncdir tls This obviates the need for a separate netqmail package. As a result, reintegrate Makefile.common into Makefile, and simplify a handful of definitions. If you used the netqmail package, set PKG_OPTIONS.qmail to "netqmail bigdns" to build with the same patches as before. Note that most of these options result in patches being applied, and that any given combination of patches may not apply cleanly. If there's a combination you need that doesn't work, or build options you need that aren't available, let me know. On Darwin, the "darwin" option is set by default, as it's needed in order to build. The patch includes <nameser8_compat.h>, which is present on Panther, but not on older systems. We provide a buildlink stand-in where needed. On Linux, the "netqmail" option is set by default, as with recent glibc it's necessary to #include <errno.h> in order to build. On other platforms, no options are set by default. Bump PKGREVISION.
2004-08-22 02:10:51 +02:00
. if ${OPSYS} == "Darwin"
Update to 1.03nb29. pkgsrc changes: Remove unneeded options: - Unconditionally apply netqmail (which includes a local patch; remove it) - Unconditionally apply bigdns, maildiruniq, outgoingip, rcptcheck, remote - Unconditionally apply the TLS + SMTP AUTH _patch_ (not the options) - Record all applied patches (mandatory and optional) in QMAILPATCHES - Remove badrcptto, qregex, realrcptto, viruscan (moved to rejectutils) Simplify packaging: - Extract a standalone patch <https://schmonz.com/qmail/rejectutils> to repackage the mutually conflicting recipient- and content-checking patches as separate programs, along with wrappers for running checks in sequence - Extract a standalone patch <https://schmonz.com/qmail/destdir> to build to a staging area, as non-root, without hardcoded IDs - Run the destdir patch's `install-destdir` to make or repair the queue and set special file permissions, obviating the need for a dependency on mail/queue-fix and handcrafted SPECIAL_PERMS - While here, run `instcheck` to ensure we've installed just like `make setup check` as root would have - Install INSTALL and SENDMAIL docs under their original names, even on Darwin - Avoid building catpages, since we don't install them, and remove nroff from USE_TOOLS Default-enable more useful options: - "eai" (new) permits UTF-8 almost everywhere in email - "qmail-rejectutils" (new) adds several tools for selectively rejecting messages - "syncdir" forces synchronous link() and related syscalls - "tls" and "sasl", instead of causing patch conflicts, cause the TLS and SMTP AUTH code to be included (!)
2017-07-21 06:07:01 +02:00
SUBST_SED.load+= -e '$$s|$$| -bind_at_load|'
Using bsd.options.mk, add several common build-time options. The complete list: badrcptto bigdns darwin netqmail nullenvsender outgoingip qregex realrcptto smtpauth syncdir tls This obviates the need for a separate netqmail package. As a result, reintegrate Makefile.common into Makefile, and simplify a handful of definitions. If you used the netqmail package, set PKG_OPTIONS.qmail to "netqmail bigdns" to build with the same patches as before. Note that most of these options result in patches being applied, and that any given combination of patches may not apply cleanly. If there's a combination you need that doesn't work, or build options you need that aren't available, let me know. On Darwin, the "darwin" option is set by default, as it's needed in order to build. The patch includes <nameser8_compat.h>, which is present on Panther, but not on older systems. We provide a buildlink stand-in where needed. On Linux, the "netqmail" option is set by default, as with recent glibc it's necessary to #include <errno.h> in order to build. On other platforms, no options are set by default. Bump PKGREVISION.
2004-08-22 02:10:51 +02:00
. endif
Update to 1.03nb29. pkgsrc changes: Remove unneeded options: - Unconditionally apply netqmail (which includes a local patch; remove it) - Unconditionally apply bigdns, maildiruniq, outgoingip, rcptcheck, remote - Unconditionally apply the TLS + SMTP AUTH _patch_ (not the options) - Record all applied patches (mandatory and optional) in QMAILPATCHES - Remove badrcptto, qregex, realrcptto, viruscan (moved to rejectutils) Simplify packaging: - Extract a standalone patch <https://schmonz.com/qmail/rejectutils> to repackage the mutually conflicting recipient- and content-checking patches as separate programs, along with wrappers for running checks in sequence - Extract a standalone patch <https://schmonz.com/qmail/destdir> to build to a staging area, as non-root, without hardcoded IDs - Run the destdir patch's `install-destdir` to make or repair the queue and set special file permissions, obviating the need for a dependency on mail/queue-fix and handcrafted SPECIAL_PERMS - While here, run `instcheck` to ensure we've installed just like `make setup check` as root would have - Install INSTALL and SENDMAIL docs under their original names, even on Darwin - Avoid building catpages, since we don't install them, and remove nroff from USE_TOOLS Default-enable more useful options: - "eai" (new) permits UTF-8 almost everywhere in email - "qmail-rejectutils" (new) adds several tools for selectively rejecting messages - "syncdir" forces synchronous link() and related syscalls - "tls" and "sasl", instead of causing patch conflicts, cause the TLS and SMTP AUTH code to be included (!)
2017-07-21 06:07:01 +02:00
SUBST_MESSAGE.load= Setting linker flags for syncdir.
Using bsd.options.mk, add several common build-time options. The complete list: badrcptto bigdns darwin netqmail nullenvsender outgoingip qregex realrcptto smtpauth syncdir tls This obviates the need for a separate netqmail package. As a result, reintegrate Makefile.common into Makefile, and simplify a handful of definitions. If you used the netqmail package, set PKG_OPTIONS.qmail to "netqmail bigdns" to build with the same patches as before. Note that most of these options result in patches being applied, and that any given combination of patches may not apply cleanly. If there's a combination you need that doesn't work, or build options you need that aren't available, let me know. On Darwin, the "darwin" option is set by default, as it's needed in order to build. The patch includes <nameser8_compat.h>, which is present on Panther, but not on older systems. We provide a buildlink stand-in where needed. On Linux, the "netqmail" option is set by default, as with recent glibc it's necessary to #include <errno.h> in order to build. On other platforms, no options are set by default. Bump PKGREVISION.
2004-08-22 02:10:51 +02:00
.endif
With the "viruscan" option, enable Russ Nelson's patch to SMTP-reject messages with MIME attachments that match certain signatures, as well as Jeremy Kitchen's patch that causes such rejections to be logged. Bump PKGREVISION.
2004-12-21 06:32:56 +01:00
Apply the "tai-leapsecs" patch iff the 'tai-system-clock' option is set (off by default). Bump PKGREVISION.
2019-01-17 23:49:12 +01:00
.if !empty(PKG_OPTIONS:Mtai-system-clock)
mail: align variable assignments pkglint -Wall -F --only aligned -r No manual corrections.
2019-11-02 17:25:17 +01:00
QMAILPATCHES+= taileapsecs:${TAILEAPSECS_PATCH}
TAILEAPSECS_PATCH= netqmail-1.05-TAI-leapsecs.patch
PATCHFILES+= ${TAILEAPSECS_PATCH}
SITES.${TAILEAPSECS_PATCH}= https://su.bze.ro/software/
PATCH_DIST_STRIP.${TAILEAPSECS_PATCH}= -p1
PATCH_DIST_CAT.${TAILEAPSECS_PATCH}= \
Apply the "tai-leapsecs" patch iff the 'tai-system-clock' option is set (off by default). Bump PKGREVISION.
2019-01-17 23:49:12 +01:00
${SED} -e 's|"/etc/leapsecs.dat"|"@PKG_SYSCONFDIR@/leapsecs.dat"|' \
Update to notqmail 1.08 (as qmail-1.03nb49). From the changelog: ## Fix bugs - Vulnerabilities we've inherited from qmail 1.03, reported by Qualys. - CVE-2005-1515: fix signedness wraparound in `substdio_{put,bput}()`. - CVE-2005-1514: fix possible signed integer overflow in `commands()`. - CVE-2005-1513: fix integer overflow in `stralloc_readyplus()`. - Fix several other places where variables could overflow. - `qmail-pop3d`: instead of running as root if root authenticates (and being a vector for a dictionary attack on the root password), exit 1 to look just like a failed `checkpassword` login. - `qmail-inject`: do not parse header recipients if `-a` is given. - Correctly detect multiple IP addresses on the same interface. - Remove workaround for ancient DNS servers that do not properly support CNAME. - Fix possible integer overflow in `alloc()`. ## Reduce bug likelihood - Remove `dnscname` and `dnsmxip` programs that were being built but not installed. - Remove `systype` and related platform detection. - Remove unused variable in `maildir.c`. - Reduce variable scope in `tcpto.c`. - Avoid local variables shadowing same-named globals. - Avoid needing `exit.h` in named-pipe bug check. - Add a `test` target and some unit tests, using Check. - Add missing function declarations in `cdbmss.h`, `scan.h`. - Add missing return types to `main()`. - Add `hier.h` for inclusion in `instcheck.c`, `instchown.c`, `instpackage.c`. - Use system headers and types instead of the `HASSHORTSETGROUPS` check. - Use system headers instead of redeclaring `exit()`, `read()`, `write()`, `malloc()`, `free()`, `fork()`, `uint32_t`. - Use C89 function signatures for code we've touched so far. - Automated builds: - TravisCI: move setting `MAKEFLAGS` out of the script and into the matrix. - Add FreeBSD builds with CirrusCI. - Add a GitHub Actions build. ## Other changes - Remove DJB's TODO. - Replace many `pobox.com` URLs. - Acknowledge Erik Sjölund's `qmail-local.c` bugfix that we've inherited from netqmail. - Avoid generating catted manpages by building with `NROFF=true`. - Optionally create a `systemd` service file. - Run an alternate `qmail-remote` by setting `QMAILREMOTE` in `qmail-send`'s environment. ## Intent to remove In the course of developing this release, we found programs that we intend to remove in the next release. We believe none of these remains necessary or useful enough to be worth the cost of maintaining. If you disagree, please let us know! - Remove `qsmhook`, long since replaced by `preline`. - Remove inefficient `maildirwatch`. - Remove obsolete mail client wrappers. - Remove `qmail-pop3d`, since Maildir is well supported by actively maintained POP3 servers.
2020-05-23 22:50:02 +02:00
-e 's|.*\./tryulong32.*| uid.o: \\\\|' \
-e 's|.*cat uint32.*| compile uid.c uidgid.h subfd.h substdio.h exit.h|' \
-e 's|.*rm -f tryulong32.*| ./compile uid.c|' \
Apply the "tai-leapsecs" patch iff the 'tai-system-clock' option is set (off by default). Bump PKGREVISION.
2019-01-17 23:49:12 +01:00
< ${TAILEAPSECS_PATCH}
mail: align variable assignments pkglint -Wall -F --only aligned -r No manual corrections.
2019-11-02 17:25:17 +01:00
SUBST_CLASSES+= libtai
SUBST_STAGE.libtai= do-configure
SUBST_FILES.libtai= leapsecs_read.c
SUBST_SED.libtai= -e 's|@PKG_SYSCONFDIR@|${PKG_SYSCONFDIR.libtai}|g'
DEPENDS+= libtai>=0.60nb5:../../devel/libtai
Apply the "tai-leapsecs" patch iff the 'tai-system-clock' option is set (off by default). Bump PKGREVISION.
2019-01-17 23:49:12 +01:00
.endif
Update to 1.03nb29. pkgsrc changes: Remove unneeded options: - Unconditionally apply netqmail (which includes a local patch; remove it) - Unconditionally apply bigdns, maildiruniq, outgoingip, rcptcheck, remote - Unconditionally apply the TLS + SMTP AUTH _patch_ (not the options) - Record all applied patches (mandatory and optional) in QMAILPATCHES - Remove badrcptto, qregex, realrcptto, viruscan (moved to rejectutils) Simplify packaging: - Extract a standalone patch <https://schmonz.com/qmail/rejectutils> to repackage the mutually conflicting recipient- and content-checking patches as separate programs, along with wrappers for running checks in sequence - Extract a standalone patch <https://schmonz.com/qmail/destdir> to build to a staging area, as non-root, without hardcoded IDs - Run the destdir patch's `install-destdir` to make or repair the queue and set special file permissions, obviating the need for a dependency on mail/queue-fix and handcrafted SPECIAL_PERMS - While here, run `instcheck` to ensure we've installed just like `make setup check` as root would have - Install INSTALL and SENDMAIL docs under their original names, even on Darwin - Avoid building catpages, since we don't install them, and remove nroff from USE_TOOLS Default-enable more useful options: - "eai" (new) permits UTF-8 almost everywhere in email - "qmail-rejectutils" (new) adds several tools for selectively rejecting messages - "syncdir" forces synchronous link() and related syscalls - "tls" and "sasl", instead of causing patch conflicts, cause the TLS and SMTP AUTH code to be included (!)
2017-07-21 06:07:01 +02:00
PLIST_VARS+= tls
We've been stuck on a TLS implementation from 2007 because the TLS patch and the AUTH patch conflict, nobody else has published a newer hand-merged combo patch, and as it happens, I'd apparently rather write a pile of new DJB-style C than make myself responsible for hand-merging other people's security-sensitive code every time there's a new TLS patch. Now that we have AUTH without patching (see mail/qmail-acceptutils), the "sasl" option goes away, we're finally on the most recent TLS patch available, and when it's updated it'll be easy for us to keep up. Rebase RCPTCHECK and EAI patches onto netqmail-with-TLS-and-no-AUTH. Bump PKGREVISION.
2018-10-24 15:32:26 +02:00
.if !empty(PKG_OPTIONS:Mtls)
PLIST.tls= yes
Update to 1.03nb29. pkgsrc changes: Remove unneeded options: - Unconditionally apply netqmail (which includes a local patch; remove it) - Unconditionally apply bigdns, maildiruniq, outgoingip, rcptcheck, remote - Unconditionally apply the TLS + SMTP AUTH _patch_ (not the options) - Record all applied patches (mandatory and optional) in QMAILPATCHES - Remove badrcptto, qregex, realrcptto, viruscan (moved to rejectutils) Simplify packaging: - Extract a standalone patch <https://schmonz.com/qmail/rejectutils> to repackage the mutually conflicting recipient- and content-checking patches as separate programs, along with wrappers for running checks in sequence - Extract a standalone patch <https://schmonz.com/qmail/destdir> to build to a staging area, as non-root, without hardcoded IDs - Run the destdir patch's `install-destdir` to make or repair the queue and set special file permissions, obviating the need for a dependency on mail/queue-fix and handcrafted SPECIAL_PERMS - While here, run `instcheck` to ensure we've installed just like `make setup check` as root would have - Install INSTALL and SENDMAIL docs under their original names, even on Darwin - Avoid building catpages, since we don't install them, and remove nroff from USE_TOOLS Default-enable more useful options: - "eai" (new) permits UTF-8 almost everywhere in email - "qmail-rejectutils" (new) adds several tools for selectively rejecting messages - "syncdir" forces synchronous link() and related syscalls - "tls" and "sasl", instead of causing patch conflicts, cause the TLS and SMTP AUTH code to be included (!)
2017-07-21 06:07:01 +02:00
. include "../../security/openssl/buildlink3.mk"
Update to tlsonlyremote 20200202 from upstream TLS patch 20200107. Adds client cert authentication with TLS v1.3. Bump PKGREVISION.
2020-02-03 05:51:27 +01:00
CPPFLAGS+= -DTLS=20200107 # NOTE: match what's _in_ the patch
Update to 1.03nb29. pkgsrc changes: Remove unneeded options: - Unconditionally apply netqmail (which includes a local patch; remove it) - Unconditionally apply bigdns, maildiruniq, outgoingip, rcptcheck, remote - Unconditionally apply the TLS + SMTP AUTH _patch_ (not the options) - Record all applied patches (mandatory and optional) in QMAILPATCHES - Remove badrcptto, qregex, realrcptto, viruscan (moved to rejectutils) Simplify packaging: - Extract a standalone patch <https://schmonz.com/qmail/rejectutils> to repackage the mutually conflicting recipient- and content-checking patches as separate programs, along with wrappers for running checks in sequence - Extract a standalone patch <https://schmonz.com/qmail/destdir> to build to a staging area, as non-root, without hardcoded IDs - Run the destdir patch's `install-destdir` to make or repair the queue and set special file permissions, obviating the need for a dependency on mail/queue-fix and handcrafted SPECIAL_PERMS - While here, run `instcheck` to ensure we've installed just like `make setup check` as root would have - Install INSTALL and SENDMAIL docs under their original names, even on Darwin - Avoid building catpages, since we don't install them, and remove nroff from USE_TOOLS Default-enable more useful options: - "eai" (new) permits UTF-8 almost everywhere in email - "qmail-rejectutils" (new) adds several tools for selectively rejecting messages - "syncdir" forces synchronous link() and related syscalls - "tls" and "sasl", instead of causing patch conflicts, cause the TLS and SMTP AUTH code to be included (!)
2017-07-21 06:07:01 +02:00
USE_TOOLS+= openssl
SUBST_CLASSES+= tmprsadh
SUBST_STAGE.tmprsadh= do-configure
SUBST_FILES.tmprsadh= update_tmprsadh.sh
SUBST_SED.tmprsadh= -e 's|^export PATH=.*||'
SUBST_SED.tmprsadh+= -e 's|^openssl |${OPENSSL} |'
Update from netqmail 1.06 (2007) to notqmail 1.07 (just released). From the changelog: - code: remove incorrect usage of vfork() - code: detect and prefer utmpx where available - code: removed idedit, install-big. var-qmail packages are no more - portability problem: explicitly initialize strerr_sys and define BIND_8_COMPAT to work around Mac OS X - code: add instchown to set ownership and mode on installed files - code: add instpackage to install without root access - doc: rename INSTALL, SENDMAIL to INSTALL.md, SENDMAIL.md to support building on case-insensitive filesystems - code: lookup uid/gid at runtime - code: use DESTDIR environment variable as root directory in install pkgsrc changes: - If hostname isn't FQDN, config-fast-pkgsrc wouldn't produce a working config, so don't run it; tell user what to do instead - Stage QMAIL_QUEUE_DIR into DESTDIR/tmp, to be more obvious that it's not being packaged up (and is not how a queue gets created at pkg_add time) - Drop custom destdir, qbiffutmpx, and Darwin patches - Rebase TLS-onlyremote, QMAILREMOTE, and SRS patches - Require latest ucspi-ssl and ucspi-tcp6 for IPv4 fixes - Move MESSAGE.tls to README.tls, and remove other MESSAGE* - Set PKG_HOME even for non-default values of QMAIL_ALIAS_USER - Check whether alias/.qmail-foo exist before trying to remove Bump PKGREVISION.
2019-08-20 04:38:04 +02:00
READMES+= README.tls
SUBST_VARS.paths+= OPENSSL QMAIL_DAEMON_USER QMAIL_QMAIL_GROUP
SUBST_VARS.paths+= OPENSSL SERVERCERT CLIENTCERT
SUBST_SED.paths+= -e 's|@SERVERCERT@|${PKG_SYSCONFDIR:Q}/control/servercert.pem|g'
SUBST_SED.paths+= -e 's|@CLIENTCERT@|${PKG_SYSCONFDIR:Q}/control/clientcert.pem|g'
DEPENDS+= ucspi-ssl>=0.999.10.11nb2:../../net/ucspi-ssl
With the "viruscan" option, enable Russ Nelson's patch to SMTP-reject messages with MIME attachments that match certain signatures, as well as Jeremy Kitchen's patch that causes such rejections to be logged. Bump PKGREVISION.
2004-12-21 06:32:56 +01:00
.else
Update to 1.03nb29. pkgsrc changes: Remove unneeded options: - Unconditionally apply netqmail (which includes a local patch; remove it) - Unconditionally apply bigdns, maildiruniq, outgoingip, rcptcheck, remote - Unconditionally apply the TLS + SMTP AUTH _patch_ (not the options) - Record all applied patches (mandatory and optional) in QMAILPATCHES - Remove badrcptto, qregex, realrcptto, viruscan (moved to rejectutils) Simplify packaging: - Extract a standalone patch <https://schmonz.com/qmail/rejectutils> to repackage the mutually conflicting recipient- and content-checking patches as separate programs, along with wrappers for running checks in sequence - Extract a standalone patch <https://schmonz.com/qmail/destdir> to build to a staging area, as non-root, without hardcoded IDs - Run the destdir patch's `install-destdir` to make or repair the queue and set special file permissions, obviating the need for a dependency on mail/queue-fix and handcrafted SPECIAL_PERMS - While here, run `instcheck` to ensure we've installed just like `make setup check` as root would have - Install INSTALL and SENDMAIL docs under their original names, even on Darwin - Avoid building catpages, since we don't install them, and remove nroff from USE_TOOLS Default-enable more useful options: - "eai" (new) permits UTF-8 almost everywhere in email - "qmail-rejectutils" (new) adds several tools for selectively rejecting messages - "syncdir" forces synchronous link() and related syscalls - "tls" and "sasl", instead of causing patch conflicts, cause the TLS and SMTP AUTH code to be included (!)
2017-07-21 06:07:01 +02:00
BUILDLINK_TRANSFORM+= rm:-lssl
BUILDLINK_TRANSFORM+= rm:-lcrypto
Apply the "tai-leapsecs" patch iff the 'tai-system-clock' option is set (off by default). Bump PKGREVISION.
2019-01-17 23:49:12 +01:00
. if !empty(PKG_OPTIONS:Minet6)
Update from netqmail 1.06 (2007) to notqmail 1.07 (just released). From the changelog: - code: remove incorrect usage of vfork() - code: detect and prefer utmpx where available - code: removed idedit, install-big. var-qmail packages are no more - portability problem: explicitly initialize strerr_sys and define BIND_8_COMPAT to work around Mac OS X - code: add instchown to set ownership and mode on installed files - code: add instpackage to install without root access - doc: rename INSTALL, SENDMAIL to INSTALL.md, SENDMAIL.md to support building on case-insensitive filesystems - code: lookup uid/gid at runtime - code: use DESTDIR environment variable as root directory in install pkgsrc changes: - If hostname isn't FQDN, config-fast-pkgsrc wouldn't produce a working config, so don't run it; tell user what to do instead - Stage QMAIL_QUEUE_DIR into DESTDIR/tmp, to be more obvious that it's not being packaged up (and is not how a queue gets created at pkg_add time) - Drop custom destdir, qbiffutmpx, and Darwin patches - Rebase TLS-onlyremote, QMAILREMOTE, and SRS patches - Require latest ucspi-ssl and ucspi-tcp6 for IPv4 fixes - Move MESSAGE.tls to README.tls, and remove other MESSAGE* - Set PKG_HOME even for non-default values of QMAIL_ALIAS_USER - Check whether alias/.qmail-foo exist before trying to remove Bump PKGREVISION.
2019-08-20 04:38:04 +02:00
DEPENDS+= ucspi-tcp6>=1.10.7nb1:../../net/ucspi-tcp6
Apply the "tai-leapsecs" patch iff the 'tai-system-clock' option is set (off by default). Bump PKGREVISION.
2019-01-17 23:49:12 +01:00
. else
Update from netqmail 1.06 (2007) to notqmail 1.07 (just released). From the changelog: - code: remove incorrect usage of vfork() - code: detect and prefer utmpx where available - code: removed idedit, install-big. var-qmail packages are no more - portability problem: explicitly initialize strerr_sys and define BIND_8_COMPAT to work around Mac OS X - code: add instchown to set ownership and mode on installed files - code: add instpackage to install without root access - doc: rename INSTALL, SENDMAIL to INSTALL.md, SENDMAIL.md to support building on case-insensitive filesystems - code: lookup uid/gid at runtime - code: use DESTDIR environment variable as root directory in install pkgsrc changes: - If hostname isn't FQDN, config-fast-pkgsrc wouldn't produce a working config, so don't run it; tell user what to do instead - Stage QMAIL_QUEUE_DIR into DESTDIR/tmp, to be more obvious that it's not being packaged up (and is not how a queue gets created at pkg_add time) - Drop custom destdir, qbiffutmpx, and Darwin patches - Rebase TLS-onlyremote, QMAILREMOTE, and SRS patches - Require latest ucspi-ssl and ucspi-tcp6 for IPv4 fixes - Move MESSAGE.tls to README.tls, and remove other MESSAGE* - Set PKG_HOME even for non-default values of QMAIL_ALIAS_USER - Check whether alias/.qmail-foo exist before trying to remove Bump PKGREVISION.
2019-08-20 04:38:04 +02:00
DEPENDS+= {ucspi-tcp6>=1.10.7nb1,ucspi-tcp-[0-9]*}:../../net/ucspi-tcp
Apply the "tai-leapsecs" patch iff the 'tai-system-clock' option is set (off by default). Bump PKGREVISION.
2019-01-17 23:49:12 +01:00
. endif
With the "viruscan" option, enable Russ Nelson's patch to SMTP-reject messages with MIME attachments that match certain signatures, as well as Jeremy Kitchen's patch that causes such rejections to be logged. Bump PKGREVISION.
2004-12-21 06:32:56 +01:00
.endif
Reference in a new issue Copy permalink