kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/net/s6-networking/options.mk

43 lines
1.1 KiB
Makefile
Raw Normal View History

Update to 2.4.1.1. From the changelog: - Libraries and binaries don't have the .note.GNU-stack section stripped anymore. Previously, "make strip" would strip that section, which would sometimes (depending on the toolchain) cause binaries to be incorrectly tagged as needing an executable stack. This is not a security issue in itself, but an executable stack makes it easier for an attacker to turn bugs into exploits, so it should be avoided whenever possible. Thanks to Xavier Stonestreet for reporting and finding the cause of the problem. - Link tests are now performed with a regular file as their output, instead of /dev/null, which makes them more portable to old/buggy linkers. Bump default BUILDLINK_API_DEPENDS to match.
2021-04-26 17:05:30 +02:00
# $NetBSD: options.mk,v 1.7 2021/04/26 15:05:30 schmonz Exp $
Add --enable-absolute-paths, as these programs need to invoke each other while often running in freshly cleared environments. Bump PKGREVISION. While here, make TLS (via BearSSL) optional, still on by default.
2020-11-22 12:33:22 +01:00
PKG_OPTIONS_VAR= PKG_OPTIONS.s6-networking
Update to 2.4.0.0. From the changelog: - Can be built against OpenSSL + libretls. - execline is now optional. - s6-tlsc and s6-tlsd rewrite. They're now wrappers around new binaries: s6-tlsc-io and s6-tlsd-io, which establish and run a TLS tunnel over already existing fds. - New functionality: s6-ucspitlsc and s6-ucspitlsd, for an implementation of delayed encryption. pkgsrc changes: - Switch from BearSSL to LibreTLS (atop OpenSSL). - Turn 'execline' option off by default.
2021-01-11 19:31:10 +01:00
PKG_SUPPORTED_OPTIONS+= execline tls
Add --enable-absolute-paths, as these programs need to invoke each other while often running in freshly cleared environments. Bump PKGREVISION. While here, make TLS (via BearSSL) optional, still on by default.
2020-11-22 12:33:22 +01:00
PKG_SUGGESTED_OPTIONS+= tls
.include "../../mk/bsd.options.mk"
Update to 2.4.0.0. From the changelog: - Can be built against OpenSSL + libretls. - execline is now optional. - s6-tlsc and s6-tlsd rewrite. They're now wrappers around new binaries: s6-tlsc-io and s6-tlsd-io, which establish and run a TLS tunnel over already existing fds. - New functionality: s6-ucspitlsc and s6-ucspitlsd, for an implementation of delayed encryption. pkgsrc changes: - Switch from BearSSL to LibreTLS (atop OpenSSL). - Turn 'execline' option off by default.
2021-01-11 19:31:10 +01:00
.if !empty(PKG_OPTIONS:Mexecline)
. include "../../lang/execline/buildlink3.mk"
.else
CONFIGURE_ARGS+= --disable-execline
.endif
Add --enable-absolute-paths, as these programs need to invoke each other while often running in freshly cleared environments. Bump PKGREVISION. While here, make TLS (via BearSSL) optional, still on by default.
2020-11-22 12:33:22 +01:00
PLIST_VARS= tls
.if !empty(PKG_OPTIONS:Mtls)
PLIST.tls= yes
LibreTLS + OpenSSL isn't working well for me yet. Switch back to BearSSL for now, riding recent PKGREVISION bump.
2021-01-22 17:20:38 +01:00
. include "../../security/bearssl/buildlink3.mk"
CONFIGURE_ARGS+= --enable-ssl=bearssl
Update to 2.4.0.0. From the changelog: - Can be built against OpenSSL + libretls. - execline is now optional. - s6-tlsc and s6-tlsd rewrite. They're now wrappers around new binaries: s6-tlsc-io and s6-tlsd-io, which establish and run a TLS tunnel over already existing fds. - New functionality: s6-ucspitlsc and s6-ucspitlsd, for an implementation of delayed encryption. pkgsrc changes: - Switch from BearSSL to LibreTLS (atop OpenSSL). - Turn 'execline' option off by default.
2021-01-11 19:31:10 +01:00
PKG_USERS_VARS+= UCSPI_SSL_USER
PKG_GROUPS_VARS+= UCSPI_SSL_GROUP
PKG_GROUPS+= ${UCSPI_SSL_GROUP}
PKG_USERS+= ${UCSPI_SSL_USER}:${UCSPI_SSL_GROUP}
SUBST_CLASSES+= paths
SUBST_STAGE.paths= pre-configure
SUBST_FILES.paths= s6-pkgsrc-cadir
Also restore the hack to get SSLCERTS defined. Ride previous bump.
2021-01-22 18:16:45 +01:00
SUBST_VARS.paths= SH SETENV SSLCERTS
Update to 2.4.0.0. From the changelog: - Can be built against OpenSSL + libretls. - execline is now optional. - s6-tlsc and s6-tlsd rewrite. They're now wrappers around new binaries: s6-tlsc-io and s6-tlsd-io, which establish and run a TLS tunnel over already existing fds. - New functionality: s6-ucspitlsc and s6-ucspitlsd, for an implementation of delayed encryption. pkgsrc changes: - Switch from BearSSL to LibreTLS (atop OpenSSL). - Turn 'execline' option off by default.
2021-01-11 19:31:10 +01:00
Add manual pages. Bump PKGREVISION.
2021-02-04 10:16:45 +01:00
.PHONY: do-extract-cadir do-install-cadir
post-extract: do-extract-cadir
do-extract-cadir:
Update to 2.4.0.0. From the changelog: - Can be built against OpenSSL + libretls. - execline is now optional. - s6-tlsc and s6-tlsd rewrite. They're now wrappers around new binaries: s6-tlsc-io and s6-tlsd-io, which establish and run a TLS tunnel over already existing fds. - New functionality: s6-ucspitlsc and s6-ucspitlsd, for an implementation of delayed encryption. pkgsrc changes: - Switch from BearSSL to LibreTLS (atop OpenSSL). - Turn 'execline' option off by default.
2021-01-11 19:31:10 +01:00
for f in s6-pkgsrc-cadir; do \
${CP} ${FILESDIR}/$$f.sh ${WRKSRC}/$$f; \
done
Add manual pages. Bump PKGREVISION.
2021-02-04 10:16:45 +01:00
post-install: do-install-cadir
do-install-cadir:
Update to 2.4.0.0. From the changelog: - Can be built against OpenSSL + libretls. - execline is now optional. - s6-tlsc and s6-tlsd rewrite. They're now wrappers around new binaries: s6-tlsc-io and s6-tlsd-io, which establish and run a TLS tunnel over already existing fds. - New functionality: s6-ucspitlsc and s6-ucspitlsd, for an implementation of delayed encryption. pkgsrc changes: - Switch from BearSSL to LibreTLS (atop OpenSSL). - Turn 'execline' option off by default.
2021-01-11 19:31:10 +01:00
for f in s6-pkgsrc-cadir; do \
${INSTALL_SCRIPT} ${WRKSRC}/$$f ${DESTDIR}${PREFIX}/bin/$$f; \
done
Add --enable-absolute-paths, as these programs need to invoke each other while often running in freshly cleared environments. Bump PKGREVISION. While here, make TLS (via BearSSL) optional, still on by default.
2020-11-22 12:33:22 +01:00
.endif
Reference in a new issue Copy permalink