kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/security/gnupg/options.mk

59 lines
1.4 KiB
Makefile
Raw Normal View History

Renamed the deprecated LICENCE to LICENSE, which has the exactly same meaning.
2007-10-31 13:29:33 +01:00
# $NetBSD: options.mk,v 1.12 2007/10/31 12:29:33 rillig Exp $
Add options.mk file.
2004-12-25 03:54:49 +01:00
PKG_OPTIONS_VAR= PKG_OPTIONS.gnupg
Update to 1.4.3: Noteworthy changes in version 1.4.3 (2006-04-03) ------------------------------------------------ * If available, cURL-based keyserver helpers are built that can retrieve keys using HKP or any protocol that cURL supports (HTTP, HTTPS, FTP, FTPS, etc). If cURL is not available, HKP and HTTP are still supported using a built-in cURL emulator. To force building the old pre-cURL keyserver helpers, use the configure option --enable-old-keyserver-helpers. Note that none of this affects finger or LDAP support, which are unchanged. Note also that a future version of GnuPG will remove the old keyserver helpers altogether. * Implemented Public Key Association (PKA) signature verification. This uses special DNS records and notation data to associate a mail address with an OpenPGP key to prove that mail coming from that address is legitimate without the need for a full trust path to the signing key. * When exporting subkeys, those specified with a key ID or fingerpint and the '!' suffix are now merged into one keyblock. * Added "gpg-zip", a program to create encrypted archives that can interoperate with PGP Zip. * Added support for signing subkey cross-certification "back signatures". Requiring cross-certification to be present is currently off by default, but will be changed to on by default in the future, once more keys use it. A new "cross-certify" command in the --edit-key menu can be used to update signing subkeys to have cross-certification. * The key cleaning options for --import-options and --export-options have been further polished. "import-clean" and "export-clean" replace the older import-clean-sigs/import-clean-uids and export-clean-sigs/export-clean-uids option pairs. * New "minimize" command in the --edit-key menu removes everything that can be removed from a key, rendering it as small as possible. There are corresponding "export-minimal" and "import-minimal" commands for --export-options and --import-options. * New --fetch-keys command to retrieve keys by specifying a URI. This allows direct key retrieval from a web page or other location that can be specified in a URI. Available protocols are HTTP and finger, plus anything that cURL supplies, if built with cURL support. * Files containing several signed messages are not allowed any longer as there is no clean way to report the status of such files back to the caller. To partly revert to the old behaviour the new option --allow-multisig-verification may be used. * The keyserver helpers can now handle keys in either ASCII armor or binary format. * New auto-key-locate option that takes an ordered list of methods to locate a key if it is not available at encryption time (-r or --recipient). Possible methods include "cert" (use DNS CERT as per RFC2538bis, "pka" (use DNS PKA), "ldap" (consult the LDAP server for the domain in question), "keyserver" (use the currently defined keyserver), as well as arbitrary keyserver URIs that will be contacted for the key. * Able to retrieve keys using DNS CERT records as per RFC-2538bis (currently in draft): http://www.josefsson.org/rfc2538bis pkgsrc change: make architecture-specific options really architecture-specific.
2006-04-04 23:16:37 +02:00
PKG_SUPPORTED_OPTIONS= curl idea ldap
.include "../../mk/bsd.prefs.mk"
.if ${MACHINE_ARCH:Mi386}
PKG_SUPPORTED_OPTIONS+= i586-optimized
.endif
.if ${MACHINE_ARCH:Mm68k}
PKG_SUPPORTED_OPTIONS+= m68060-optimized
.endif
Add options.mk file.
2004-12-25 03:54:49 +01:00
.include "../../mk/bsd.options.mk"
.if !empty(PKG_OPTIONS:Mi586-optimized)
# use assembler routines optimized for, and only for!, i586
ONLY_FOR_PLATFORM= *-*-i386
MACHINE_GNU_ARCH= i586
.endif
Update to 1.4.1: Noteworthy changes in version 1.4.1 (2005-03-15) ------------------------------------------------ * New --rfc2440-text option which controls how text is handled in signatures. This is in response to some problems seen with certain PGP/MIME mail clients and GnuPG version 1.4.0. More details about this are available at <http://lists.gnupg.org/pipermail/gnupg-users/2005-January/024408.html>. * New "import-unusable-sigs" and "export-unusable-sigs" tags for --import-options and --export-options. These are off by default, and cause GnuPG to not import or export key signatures that are not usable (e.g. expired signatures). * New experimental HTTP, HTTPS, FTP, and FTPS keyserver helper that uses the cURL library <http://curl.haxx.se> to retrieve keys. This is disabled by default, but may be enabled with the configure option --with-libcurl. Without this option, the existing HTTP code is used for HTTP, and HTTPS, FTP, and FTPS are not supported. [enabled with the "curl" option for the package] * When running a --card-status or --card-edit and a public key is available, missing secret key stubs will be created on the fly. Details of the key are listed too. * The implicit packet dumping in double verbose mode is now sent to stderr and not to stdout. * Added countermeasures against the Mister/Zuccherato CFB attack <http://eprint.iacr.org/2005/033>. * Add new --edit-key command "bkuptocard" to allow restoring a card key from a backup. * The "fetch" command of --card-edit now retrieves the key using the default keyserver if no URL has been stored on the card. * New configure option --enable-noexecstack. Also, gpgkeys_mailto is not installed any longer, dropping the dependency on perl.
2005-03-22 18:50:55 +01:00
.if !empty(PKG_OPTIONS:Mcurl)
.include "../../www/curl/buildlink3.mk"
--with-libcurl is on per default, so revert the logics (no functional change, just more effective because a compile check is skipped)
2006-04-05 12:04:12 +02:00
.else
CONFIGURE_ARGS+= --without-libcurl
Add options.mk file.
2004-12-25 03:54:49 +01:00
.endif
.if !empty(PKG_OPTIONS:Midea)
# use of IDEA as crypto function
Renamed the deprecated LICENCE to LICENSE, which has the exactly same meaning.
2007-10-31 13:29:33 +01:00
LICENSE= idea-license
When using idea option, change license from fee-based-commercial-use to idea-license, and also set RESTRICTED and NO_*_CDROM. (Note that this doesn't change what happens if the idea option is unused.)
2006-08-03 16:49:14 +02:00
RESTRICTED= Commercial distribution is claimed to require a license.
NO_SRC_ON_CDROM= ${RESTRICTED}
pkglint cleanup; update HOMEPAGE/MASTER_SITES. From Sergey Svishchev in private mail.
2007-02-22 20:01:13 +01:00
NO_BIN_ON_CDROM= ${RESTRICTED}
When using idea option, change license from fee-based-commercial-use to idea-license, and also set RESTRICTED and NO_*_CDROM. (Note that this doesn't change what happens if the idea option is unused.)
2006-08-03 16:49:14 +02:00
Add options.mk file.
2004-12-25 03:54:49 +01:00
DISTFILES+= idea.c.gz
Rename "SITES_* to "SITES.*" for file-specific lists of sites from which to fetch the file. This completes the renaming described in revision 1.1799 of bsd.pkg.mk.
2006-07-27 20:48:02 +02:00
SITES.idea.c.gz=ftp://ftp.gnupg.dk/pub/contrib-dk/ \
Add options.mk file.
2004-12-25 03:54:49 +01:00
http://www.gnupg.dk/contrib-dk/
Drop distinction between PKGSRC_USE_TOOLS and USE_TOOLS by making PKGSRC_USE_TOOLS go away. There is now only a single USE_TOOLS variable that specifies all of the tools we need to build/run the package.
2005-07-15 20:27:48 +02:00
USE_TOOLS+= gzcat
Add options.mk file.
2004-12-25 03:54:49 +01:00
pre-configure:
${GZCAT} ${DISTDIR}/idea.c.gz > ${WRKSRC}/cipher/idea.c
.endif
.if !empty(PKG_OPTIONS:Mldap)
The databases/openldap package has been split in -client and -server component packages. Convert LDAP-based applications to depend on openldap-client, and bump PKGREVISION for those that depend on it by default.
2006-05-31 20:22:23 +02:00
.include "../../databases/openldap-client/buildlink3.mk"
Add options.mk file.
2004-12-25 03:54:49 +01:00
PLIST_SUBST+= OPENLDAP=""
.else
CONFIGURE_ARGS+=--disable-ldap
PLIST_SUBST+= OPENLDAP="@comment "
.endif
Update to 1.4.1: Noteworthy changes in version 1.4.1 (2005-03-15) ------------------------------------------------ * New --rfc2440-text option which controls how text is handled in signatures. This is in response to some problems seen with certain PGP/MIME mail clients and GnuPG version 1.4.0. More details about this are available at <http://lists.gnupg.org/pipermail/gnupg-users/2005-January/024408.html>. * New "import-unusable-sigs" and "export-unusable-sigs" tags for --import-options and --export-options. These are off by default, and cause GnuPG to not import or export key signatures that are not usable (e.g. expired signatures). * New experimental HTTP, HTTPS, FTP, and FTPS keyserver helper that uses the cURL library <http://curl.haxx.se> to retrieve keys. This is disabled by default, but may be enabled with the configure option --with-libcurl. Without this option, the existing HTTP code is used for HTTP, and HTTPS, FTP, and FTPS are not supported. [enabled with the "curl" option for the package] * When running a --card-status or --card-edit and a public key is available, missing secret key stubs will be created on the fly. Details of the key are listed too. * The implicit packet dumping in double verbose mode is now sent to stderr and not to stdout. * Added countermeasures against the Mister/Zuccherato CFB attack <http://eprint.iacr.org/2005/033>. * Add new --edit-key command "bkuptocard" to allow restoring a card key from a backup. * The "fetch" command of --card-edit now retrieves the key using the default keyserver if no URL has been stored on the card. * New configure option --enable-noexecstack. Also, gpgkeys_mailto is not installed any longer, dropping the dependency on perl.
2005-03-22 18:50:55 +01:00
.if !empty(PKG_OPTIONS:Mm68060-optimized)
# be more efficient on M68060 machines
Fixed pkglint warnings. The warnings are mostly quoting issues, for example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-12-05 21:49:47 +01:00
CONFIGURE_ENV+= M68060=${M68060:Q}
Update to 1.4.1: Noteworthy changes in version 1.4.1 (2005-03-15) ------------------------------------------------ * New --rfc2440-text option which controls how text is handled in signatures. This is in response to some problems seen with certain PGP/MIME mail clients and GnuPG version 1.4.0. More details about this are available at <http://lists.gnupg.org/pipermail/gnupg-users/2005-January/024408.html>. * New "import-unusable-sigs" and "export-unusable-sigs" tags for --import-options and --export-options. These are off by default, and cause GnuPG to not import or export key signatures that are not usable (e.g. expired signatures). * New experimental HTTP, HTTPS, FTP, and FTPS keyserver helper that uses the cURL library <http://curl.haxx.se> to retrieve keys. This is disabled by default, but may be enabled with the configure option --with-libcurl. Without this option, the existing HTTP code is used for HTTP, and HTTPS, FTP, and FTPS are not supported. [enabled with the "curl" option for the package] * When running a --card-status or --card-edit and a public key is available, missing secret key stubs will be created on the fly. Details of the key are listed too. * The implicit packet dumping in double verbose mode is now sent to stderr and not to stdout. * Added countermeasures against the Mister/Zuccherato CFB attack <http://eprint.iacr.org/2005/033>. * Add new --edit-key command "bkuptocard" to allow restoring a card key from a backup. * The "fetch" command of --card-edit now retrieves the key using the default keyserver if no URL has been stored on the card. * New configure option --enable-noexecstack. Also, gpgkeys_mailto is not installed any longer, dropping the dependency on perl.
2005-03-22 18:50:55 +01:00
CFLAGS+= -m68060
.endif
Reference in a new issue Copy permalink