kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/security/spiped/Makefile

37 lines
983 B
Makefile
Raw Normal View History

all: migrate homepages from http to https pkglint -r --network --only "migrate" As a side-effect of migrating the homepages, pkglint also fixed a few indentations in unrelated lines. These and the new homepages have been checked manually.
2020-01-26 18:30:40 +01:00
# $NetBSD: Makefile,v 1.19 2020/01/26 17:32:07 rillig Exp $
Import spiped-1.3.1 as security/spiped. spiped (pronounced "ess-pipe-dee") is a utility for creating symmetrically encrypted and authenticated pipes between socket addresses, so that one may connect to one address (e.g., a UNIX socket on localhost) and transparently have a connection established to another address (e.g., a UNIX socket on a different system). This is similar to 'ssh -L' functionality, but does not use SSH and requires a pre-shared symmetric key. Note that spiped: 1. Requires a strong key file: The file specified via the -k option should have at least 256 bits of entropy. ('dd if=/dev/urandom bs=32 count=1' is your friend.) 2. Does not provide any protection against information leakage via packet timing: Running telnet over spiped will protect a password from being directly read from the network, but will not obscure the typing rhythm. 3. Can significantly increase bandwidth usage for interactive sessions: It sends data in packets of 1024 bytes, and pads smaller messages up to this length, so a 1 byte write could be expanded to 1024 bytes if it cannot be coalesced with adjacent bytes. 4. Uses a symmetric key -- so anyone who can connect to an spiped "server" is also able to impersonate it.
2014-04-18 23:31:26 +02:00
Update spiped to 1.5.0 Changelog: spiped-1.5.0 * Attempt to set the TCP_NODELAY socket option on connections, in order to avoid punishing latencies from TCP nagling.
2015-02-22 15:26:47 +01:00
DISTNAME= spiped-1.5.0
*: Recursive revision bump for openssl 1.1.1.
2020-01-18 22:48:19 +01:00
PKGREVISION= 2
Import spiped-1.3.1 as security/spiped. spiped (pronounced "ess-pipe-dee") is a utility for creating symmetrically encrypted and authenticated pipes between socket addresses, so that one may connect to one address (e.g., a UNIX socket on localhost) and transparently have a connection established to another address (e.g., a UNIX socket on a different system). This is similar to 'ssh -L' functionality, but does not use SSH and requires a pre-shared symmetric key. Note that spiped: 1. Requires a strong key file: The file specified via the -k option should have at least 256 bits of entropy. ('dd if=/dev/urandom bs=32 count=1' is your friend.) 2. Does not provide any protection against information leakage via packet timing: Running telnet over spiped will protect a password from being directly read from the network, but will not obscure the typing rhythm. 3. Can significantly increase bandwidth usage for interactive sessions: It sends data in packets of 1024 bytes, and pads smaller messages up to this length, so a 1 byte write could be expanded to 1024 bytes if it cannot be coalesced with adjacent bytes. 4. Uses a symmetric key -- so anyone who can connect to an spiped "server" is also able to impersonate it.
2014-04-18 23:31:26 +02:00
CATEGORIES= net security
MASTER_SITES= http://www.tarsnap.com/spiped/
EXTRACT_SUFX= .tgz
MAINTAINER= pkgsrc-users@NetBSD.org
all: migrate homepages from http to https pkglint -r --network --only "migrate" As a side-effect of migrating the homepages, pkglint also fixed a few indentations in unrelated lines. These and the new homepages have been checked manually.
2020-01-26 18:30:40 +01:00
HOMEPAGE= https://www.tarsnap.com/spiped/
Import spiped-1.3.1 as security/spiped. spiped (pronounced "ess-pipe-dee") is a utility for creating symmetrically encrypted and authenticated pipes between socket addresses, so that one may connect to one address (e.g., a UNIX socket on localhost) and transparently have a connection established to another address (e.g., a UNIX socket on a different system). This is similar to 'ssh -L' functionality, but does not use SSH and requires a pre-shared symmetric key. Note that spiped: 1. Requires a strong key file: The file specified via the -k option should have at least 256 bits of entropy. ('dd if=/dev/urandom bs=32 count=1' is your friend.) 2. Does not provide any protection against information leakage via packet timing: Running telnet over spiped will protect a password from being directly read from the network, but will not obscure the typing rhythm. 3. Can significantly increase bandwidth usage for interactive sessions: It sends data in packets of 1024 bytes, and pads smaller messages up to this length, so a 1 byte write could be expanded to 1024 bytes if it cannot be coalesced with adjacent bytes. 4. Uses a symmetric key -- so anyone who can connect to an spiped "server" is also able to impersonate it.
2014-04-18 23:31:26 +02:00
COMMENT= Tool for creating symmetrically encrypted and authenticated pipes
LICENSE= 2-clause-bsd
use c99 to fix build on illumos
2015-03-04 17:39:41 +01:00
USE_LANGUAGES= c99
Import spiped-1.3.1 as security/spiped. spiped (pronounced "ess-pipe-dee") is a utility for creating symmetrically encrypted and authenticated pipes between socket addresses, so that one may connect to one address (e.g., a UNIX socket on localhost) and transparently have a connection established to another address (e.g., a UNIX socket on a different system). This is similar to 'ssh -L' functionality, but does not use SSH and requires a pre-shared symmetric key. Note that spiped: 1. Requires a strong key file: The file specified via the -k option should have at least 256 bits of entropy. ('dd if=/dev/urandom bs=32 count=1' is your friend.) 2. Does not provide any protection against information leakage via packet timing: Running telnet over spiped will protect a password from being directly read from the network, but will not obscure the typing rhythm. 3. Can significantly increase bandwidth usage for interactive sessions: It sends data in packets of 1024 bytes, and pads smaller messages up to this length, so a 1 byte write could be expanded to 1024 bytes if it cannot be coalesced with adjacent bytes. 4. Uses a symmetric key -- so anyone who can connect to an spiped "server" is also able to impersonate it.
2014-04-18 23:31:26 +02:00
MAKE_FLAGS+= BINDIR=${DESTDIR}${PREFIX}/bin
Fix build on SunOS and include man pages
2014-04-21 23:58:57 +02:00
MAKE_FLAGS+= MAN1DIR=${DESTDIR}${PREFIX}/${PKGMANDIR}/man1
Import spiped-1.3.1 as security/spiped. spiped (pronounced "ess-pipe-dee") is a utility for creating symmetrically encrypted and authenticated pipes between socket addresses, so that one may connect to one address (e.g., a UNIX socket on localhost) and transparently have a connection established to another address (e.g., a UNIX socket on a different system). This is similar to 'ssh -L' functionality, but does not use SSH and requires a pre-shared symmetric key. Note that spiped: 1. Requires a strong key file: The file specified via the -k option should have at least 256 bits of entropy. ('dd if=/dev/urandom bs=32 count=1' is your friend.) 2. Does not provide any protection against information leakage via packet timing: Running telnet over spiped will protect a password from being directly read from the network, but will not obscure the typing rhythm. 3. Can significantly increase bandwidth usage for interactive sessions: It sends data in packets of 1024 bytes, and pads smaller messages up to this length, so a 1 byte write could be expanded to 1024 bytes if it cannot be coalesced with adjacent bytes. 4. Uses a symmetric key -- so anyone who can connect to an spiped "server" is also able to impersonate it.
2014-04-18 23:31:26 +02:00
Make sure RPATH to libcrypto is added, fixes check-shlibs-elf.
2014-07-24 23:21:09 +02:00
LDADD_EXTRA= ${COMPILER_RPATH_FLAG:Q}${BUILDLINK_PREFIX.openssl}/lib
Ensure OpenSSL libraries can be found.
2015-12-14 10:32:37 +01:00
LDADD_EXTRA+= -L${BUILDLINK_PREFIX.openssl}/lib
Make sure RPATH to libcrypto is added, fixes check-shlibs-elf.
2014-07-24 23:21:09 +02:00
Use OPSYSVARS.
2016-02-26 10:41:05 +01:00
OPSYSVARS+= LDADD_EXTRA
LDADD_EXTRA.SunOS+= -lsocket -lnsl
Fix build on SunOS and include man pages
2014-04-21 23:58:57 +02:00
CFLAGS.SunOS+= -D__EXTENSIONS__
change smf manifest to use startd/duration child, this prevents useless creation of pid files
2014-08-19 00:19:15 +02:00
SMF_METHODS= spiped
Make sure RPATH to libcrypto is added, fixes check-shlibs-elf.
2014-07-24 23:21:09 +02:00
MAKE_ENV+= LDADD_EXTRA="${LDADD_EXTRA}"
fix SMF Manifest installation by not overwriting INSTALLATION_DIRS
2014-06-17 06:03:51 +02:00
INSTALLATION_DIRS+= share/doc/spiped ${PKGMANDIR}/man1
Import spiped-1.3.1 as security/spiped. spiped (pronounced "ess-pipe-dee") is a utility for creating symmetrically encrypted and authenticated pipes between socket addresses, so that one may connect to one address (e.g., a UNIX socket on localhost) and transparently have a connection established to another address (e.g., a UNIX socket on a different system). This is similar to 'ssh -L' functionality, but does not use SSH and requires a pre-shared symmetric key. Note that spiped: 1. Requires a strong key file: The file specified via the -k option should have at least 256 bits of entropy. ('dd if=/dev/urandom bs=32 count=1' is your friend.) 2. Does not provide any protection against information leakage via packet timing: Running telnet over spiped will protect a password from being directly read from the network, but will not obscure the typing rhythm. 3. Can significantly increase bandwidth usage for interactive sessions: It sends data in packets of 1024 bytes, and pads smaller messages up to this length, so a 1 byte write could be expanded to 1024 bytes if it cannot be coalesced with adjacent bytes. 4. Uses a symmetric key -- so anyone who can connect to an spiped "server" is also able to impersonate it.
2014-04-18 23:31:26 +02:00
post-install:
${INSTALL_DATA} ${WRKSRC}/README ${DESTDIR}${PREFIX}/share/doc/spiped
needs openssl as suggested by bulk build
2014-06-13 01:05:28 +02:00
.include "../../security/openssl/buildlink3.mk"
Import spiped-1.3.1 as security/spiped. spiped (pronounced "ess-pipe-dee") is a utility for creating symmetrically encrypted and authenticated pipes between socket addresses, so that one may connect to one address (e.g., a UNIX socket on localhost) and transparently have a connection established to another address (e.g., a UNIX socket on a different system). This is similar to 'ssh -L' functionality, but does not use SSH and requires a pre-shared symmetric key. Note that spiped: 1. Requires a strong key file: The file specified via the -k option should have at least 256 bits of entropy. ('dd if=/dev/urandom bs=32 count=1' is your friend.) 2. Does not provide any protection against information leakage via packet timing: Running telnet over spiped will protect a password from being directly read from the network, but will not obscure the typing rhythm. 3. Can significantly increase bandwidth usage for interactive sessions: It sends data in packets of 1024 bytes, and pads smaller messages up to this length, so a 1 byte write could be expanded to 1024 bytes if it cannot be coalesced with adjacent bytes. 4. Uses a symmetric key -- so anyone who can connect to an spiped "server" is also able to impersonate it.
2014-04-18 23:31:26 +02:00
.include "../../mk/bsd.pkg.mk"
Reference in a new issue Copy permalink