kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/security/ipsec-tools/Makefile

86 lines
3 KiB
Makefile
Raw Normal View History

From Sergey Svishchev <svs@ropnet.ru>: ipsec-tools builds fine on FreeBSD
2009-01-10 18:13:01 +01:00
# $NetBSD: Makefile,v 1.29 2009/01/10 17:13:01 manu Exp $
racoon speaks IKE (ISAKMP/Oakley) key management protocol, to establish IPsec security association with other hosts. This is based on KAME racoon, with some enhancements such as NAT-Traversal (needs a kernel patch), hybrid authentication, ISAKMP mode config, RADIUS support, IKE fragmentation and others. Ipsec-tools' racoon is able to act as a VPN server for the Cisco VPN client using hybrid authentication.
2004-11-09 23:42:20 +01:00
Update to ipsec-tools 0.7.1, fixes CVE-2008-3652 Changes since the 0.6 branch: 0.7.1 - 23 July 2008 o Fixes a memory leak when invalid proposal received o Some fixes in DPD o do not set default gss id if xauth is used o fixed hybrid enabled builds o fixed compilation on FreeBSD8 o cleanup in network port value manipulation o gets ports from SADB_X_EXT_NAT_T_[SD]PORT if present in purge_ipsec_sp i() o Generates a log if cert validation has been disabled by configuration o better handling for pfkey socket read errors o Fixes in yacc / bison stuff o new plog() macro (reduced CPU usage when logging is disabled) o Try to works better with huge SPD/SAD o Corrected modecfg option syntax o Many other various fixes... 0.7 - 09 August 2007 o Xauth with pre-shared key PSK o Xauth with certificates o SHA2 support o pkcs7 support o system accounting (utmp) o Darwin support o configuration can be reloaded o Support for UNIQUE generated policies o Support for semi anonymous sainfos o Support for ph1id to remoteid matching o Plain RSA authentication o Native LDAP support for Xauth and modecfg o Group membership checks for Xauth and sainfo selection o Camellia cipher support o IKE Fragment force option o Modecfg SplitNet attribute support o Modecfg SplitDNS attribute support ( server side ) o Modecfg Default Domain attribute support o Modecfg DNS/WINS server multiple attribute support
2008-08-16 08:55:18 +02:00
DISTNAME= ipsec-tools-0.7.1
racoon speaks IKE (ISAKMP/Oakley) key management protocol, to establish IPsec security association with other hosts. This is based on KAME racoon, with some enhancements such as NAT-Traversal (needs a kernel patch), hybrid authentication, ISAKMP mode config, RADIUS support, IKE fragmentation and others. Ipsec-tools' racoon is able to act as a VPN server for the Cisco VPN client using hybrid authentication.
2004-11-09 23:42:20 +01:00
CATEGORIES= security
Update to ipsec-tools 0.7.1, fixes CVE-2008-3652 Changes since the 0.6 branch: 0.7.1 - 23 July 2008 o Fixes a memory leak when invalid proposal received o Some fixes in DPD o do not set default gss id if xauth is used o fixed hybrid enabled builds o fixed compilation on FreeBSD8 o cleanup in network port value manipulation o gets ports from SADB_X_EXT_NAT_T_[SD]PORT if present in purge_ipsec_sp i() o Generates a log if cert validation has been disabled by configuration o better handling for pfkey socket read errors o Fixes in yacc / bison stuff o new plog() macro (reduced CPU usage when logging is disabled) o Try to works better with huge SPD/SAD o Corrected modecfg option syntax o Many other various fixes... 0.7 - 09 August 2007 o Xauth with pre-shared key PSK o Xauth with certificates o SHA2 support o pkcs7 support o system accounting (utmp) o Darwin support o configuration can be reloaded o Support for UNIQUE generated policies o Support for semi anonymous sainfos o Support for ph1id to remoteid matching o Plain RSA authentication o Native LDAP support for Xauth and modecfg o Group membership checks for Xauth and sainfo selection o Camellia cipher support o IKE Fragment force option o Modecfg SplitNet attribute support o Modecfg SplitDNS attribute support ( server side ) o Modecfg Default Domain attribute support o Modecfg DNS/WINS server multiple attribute support
2008-08-16 08:55:18 +02:00
MASTER_SITES= ${MASTER_SITE_NETBSD:=ipsec-tools/}
Updated ipsec-tools to 0.6b2. Multiple bug fixes, the most important being NAT-T now working with multiple endpoints behind the same NAT.
2005-05-10 14:39:28 +02:00
EXTRACT_SUFX= .tar.bz2
racoon speaks IKE (ISAKMP/Oakley) key management protocol, to establish IPsec security association with other hosts. This is based on KAME racoon, with some enhancements such as NAT-Traversal (needs a kernel patch), hybrid authentication, ISAKMP mode config, RADIUS support, IKE fragmentation and others. Ipsec-tools' racoon is able to act as a VPN server for the Cisco VPN client using hybrid authentication.
2004-11-09 23:42:20 +01:00
MAINTAINER= manu@NetBSD.org
* Fix HOMEPAGE. * No need to use LIBTOOL_OVERRIDE. * Remove unneeded ${EXAMPLESDIR} (??!!) after bl3.mk includes * Remove unneeded BUILD_DEPEND, because this pkg uses bl3 Still libradius is broken...
2004-11-10 09:43:44 +01:00
HOMEPAGE= http://ipsec-tools.sourceforge.net/
Fix casing of IPsec in COMMENT.
2005-06-01 16:35:31 +02:00
COMMENT= IPsec-tools racoon IKE daemon
racoon speaks IKE (ISAKMP/Oakley) key management protocol, to establish IPsec security association with other hosts. This is based on KAME racoon, with some enhancements such as NAT-Traversal (needs a kernel patch), hybrid authentication, ISAKMP mode config, RADIUS support, IKE fragmentation and others. Ipsec-tools' racoon is able to act as a VPN server for the Cisco VPN client using hybrid authentication.
2004-11-09 23:42:20 +01:00
From Sergey Svishchev <svs@ropnet.ru>: ipsec-tools builds fine on FreeBSD
2009-01-10 18:13:01 +01:00
ONLY_FOR_PLATFORM= NetBSD-[3-9].*-* FreeBSD-[5-9].*-* Linux-2.[6-9].*-*
Mark this package as only available on NetBSD 3.0 and newer and Linux 2.6.x and newer.
2005-09-02 19:01:13 +02:00
racoon speaks IKE (ISAKMP/Oakley) key management protocol, to establish IPsec security association with other hosts. This is based on KAME racoon, with some enhancements such as NAT-Traversal (needs a kernel patch), hybrid authentication, ISAKMP mode config, RADIUS support, IKE fragmentation and others. Ipsec-tools' racoon is able to act as a VPN server for the Cisco VPN client using hybrid authentication.
2004-11-09 23:42:20 +01:00
USE_PKGLOCALEDIR= yes
USE_LIBTOOL= yes
GNU_CONFIGURE= yes
Whitespace cleanup, courtesy of pkglint. Patch provided by Sergey Svishchev in private mail.
2007-02-22 20:26:05 +01:00
PKG_OPTIONS_VAR= PKG_OPTIONS.ipsec-tools
Packages have no business modifying PKG_DEFAULT_OPTIONS -- it's a user settable variable. Set PKG_SUGGESTED_OPTIONS instead. Also, make use of PKG_OPTIONS_LEGACY_VARS. Reviewed by wiz.
2005-05-31 12:01:36 +02:00
PKG_SUPPORTED_OPTIONS= radius
PKG_SUGGESTED_OPTIONS= radius
allow radius support to be disabled by moving it to PKG_OPTIONS. no PKGREVISION bump as it is still enabled by default.
2004-11-11 12:49:15 +01:00
.include "../../mk/bsd.options.mk"
.if !empty(PKG_OPTIONS:Mradius)
include libradius/buildlink3.mk only if we're including radius support.
2004-11-11 12:51:12 +01:00
. include "../../net/libradius/buildlink3.mk"
allow radius support to be disabled by moving it to PKG_OPTIONS. no PKGREVISION bump as it is still enabled by default.
2004-11-11 12:49:15 +01:00
CONFIGURE_ARGS+= --with-libradius
add additional libraries required by libradius.
2004-11-11 13:13:24 +01:00
LIBS+= ${BUILDLINK_LDADD.libradius}
allow radius support to be disabled by moving it to PKG_OPTIONS. no PKGREVISION bump as it is still enabled by default.
2004-11-11 12:49:15 +01:00
.endif
Update "ipsec-tools" package to version 0.6.1rc1. Changes since version 0.6b2: - NAT-T fixes for situations where NAT-T is not used - OpenSSL 0.9.8 support - keys are not restricted to OpenSSL default size anymore - PKCS7 support - SHA2 support
2005-08-05 14:04:33 +02:00
.if exists(/usr/include/security/pam_modules.h)
CONFIGURE_ARGS+= --with-libpam
.endif
allow radius support to be disabled by moving it to PKG_OPTIONS. no PKGREVISION bump as it is still enabled by default.
2004-11-11 12:49:15 +01:00
CONFIGURE_ARGS+= --enable-frag --enable-hybrid
Upgrade to ipsec-tools 0.6b1. New features: - PAM support - privilege separation
2005-03-23 17:49:39 +01:00
CONFIGURE_ARGS+= --enable-adminport --enable-dpd
Upgraded ipsec-tools to release version 0.5
2005-02-18 10:53:40 +01:00
CONFIGURE_ARGS+= --enable-natt=kernel
racoon speaks IKE (ISAKMP/Oakley) key management protocol, to establish IPsec security association with other hosts. This is based on KAME racoon, with some enhancements such as NAT-Traversal (needs a kernel patch), hybrid authentication, ISAKMP mode config, RADIUS support, IKE fragmentation and others. Ipsec-tools' racoon is able to act as a VPN server for the Cisco VPN client using hybrid authentication.
2004-11-09 23:42:20 +01:00
Ran "pkglint --autofix", which corrected some of the quoting issues in CONFIGURE_ARGS.
2005-12-06 00:55:01 +01:00
CONFIGURE_ARGS+= --localstatedir=${VARBASE:Q}
Fixed pkglint warnings. The warnings are mostly quoting issues, for example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-12-05 21:49:47 +01:00
PLIST_SUBST+= VARBASE=${VARBASE:Q}
Update "ipsec-tools" package to version 0.6.1rc1. Changes since version 0.6b2: - NAT-T fixes for situations where NAT-T is not used - OpenSSL 0.9.8 support - keys are not restricted to OpenSSL default size anymore - PKCS7 support - SHA2 support
2005-08-05 14:04:33 +02:00
Use PKG_SYSCONFDIR
2005-01-12 16:31:11 +01:00
PKG_SYSCONFSUBDIR= racoon
Ran "pkglint --autofix", which corrected some of the quoting issues in CONFIGURE_ARGS.
2005-12-06 00:55:01 +01:00
CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR:Q}
Use PKG_SYSCONFDIR
2005-01-12 16:31:11 +01:00
racoon speaks IKE (ISAKMP/Oakley) key management protocol, to establish IPsec security association with other hosts. This is based on KAME racoon, with some enhancements such as NAT-Traversal (needs a kernel patch), hybrid authentication, ISAKMP mode config, RADIUS support, IKE fragmentation and others. Ipsec-tools' racoon is able to act as a VPN server for the Cisco VPN client using hybrid authentication.
2004-11-09 23:42:20 +01:00
SAMPLE_DIR= ${WRKSRC}/src/racoon/samples
EXAMPLE_DIR= ${PREFIX}/share/examples/ipsec-tools
* Fix HOMEPAGE. * No need to use LIBTOOL_OVERRIDE. * Remove unneeded ${EXAMPLESDIR} (??!!) after bl3.mk includes * Remove unneeded BUILD_DEPEND, because this pkg uses bl3 Still libradius is broken...
2004-11-10 09:43:44 +01:00
Remove lex and yacc generated files before building: they might not match with the libraries installed on the system.
2004-11-11 11:53:08 +01:00
pre-configure:
Upgrade to ipsec-tools 0.6b1. New features: - PAM support - privilege separation
2005-03-23 17:49:39 +01:00
${RM} -f ${WRKSRC}/src/racoon/cfparse.c
${RM} -f ${WRKSRC}/src/racoon/cftoken.c
Update "ipsec-tools" package to version 0.6.1rc1. Changes since version 0.6b2: - NAT-T fixes for situations where NAT-T is not used - OpenSSL 0.9.8 support - keys are not restricted to OpenSSL default size anymore - PKCS7 support - SHA2 support
2005-08-05 14:04:33 +02:00
.if (${OPSYS} == "NetBSD")
${MKDIR} ${BUILDLINK_DIR}/include/netinet6
${EGREP} -v 'extern.*ipsec_.*_policy' /usr/include/netinet6/ipsec.h \
>${BUILDLINK_DIR}/include/netinet6/ipsec.h
.endif
Remove lex and yacc generated files before building: they might not match with the libraries installed on the system.
2004-11-11 11:53:08 +01:00
racoon speaks IKE (ISAKMP/Oakley) key management protocol, to establish IPsec security association with other hosts. This is based on KAME racoon, with some enhancements such as NAT-Traversal (needs a kernel patch), hybrid authentication, ISAKMP mode config, RADIUS support, IKE fragmentation and others. Ipsec-tools' racoon is able to act as a VPN server for the Cisco VPN client using hybrid authentication.
2004-11-09 23:42:20 +01:00
post-install:
${INSTALL_DATA_DIR} ${EXAMPLE_DIR}
Fix file installation, add missing samples config files
2005-02-20 02:03:30 +01:00
${INSTALL_DATA_DIR} ${EXAMPLE_DIR}/roadwarrior
${INSTALL_DATA_DIR} ${EXAMPLE_DIR}/roadwarrior/client
${INSTALL_DATA_DIR} ${EXAMPLE_DIR}/roadwarrior/server
racoon speaks IKE (ISAKMP/Oakley) key management protocol, to establish IPsec security association with other hosts. This is based on KAME racoon, with some enhancements such as NAT-Traversal (needs a kernel patch), hybrid authentication, ISAKMP mode config, RADIUS support, IKE fragmentation and others. Ipsec-tools' racoon is able to act as a VPN server for the Cisco VPN client using hybrid authentication.
2004-11-09 23:42:20 +01:00
${INSTALL_DATA} ${SAMPLE_DIR}/psk.txt ${EXAMPLE_DIR}
${INSTALL_DATA} ${SAMPLE_DIR}/psk.txt.in ${EXAMPLE_DIR}
${INSTALL_DATA} ${SAMPLE_DIR}/psk.txt.sample ${EXAMPLE_DIR}
${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf ${EXAMPLE_DIR}
${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.in ${EXAMPLE_DIR}
${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.sample ${EXAMPLE_DIR}
${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.sample-gssapi ${EXAMPLE_DIR}
${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.sample-inherit ${EXAMPLE_DIR}
${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.sample-natt ${EXAMPLE_DIR}
${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.sample-plainrsa ${EXAMPLE_DIR}
Fix file installation, add missing samples config files
2005-02-20 02:03:30 +01:00
${INSTALL_DATA} ${SAMPLE_DIR}/roadwarrior/README \
${EXAMPLE_DIR}/roadwarrior
${INSTALL_DATA} ${SAMPLE_DIR}/roadwarrior/client/racoon.conf \
${EXAMPLE_DIR}/roadwarrior/client
${INSTALL_DATA} ${SAMPLE_DIR}/roadwarrior/client/phase1-up.sh \
${EXAMPLE_DIR}/roadwarrior/client
${INSTALL_DATA} ${SAMPLE_DIR}/roadwarrior/client/phase1-down.sh \
${EXAMPLE_DIR}/roadwarrior/client
${INSTALL_DATA} ${SAMPLE_DIR}/roadwarrior/server/racoon.conf \
${EXAMPLE_DIR}/roadwarrior/server
${INSTALL_DATA} ${SAMPLE_DIR}/roadwarrior/server/racoon.conf-radius \
${EXAMPLE_DIR}/roadwarrior/server
racoon speaks IKE (ISAKMP/Oakley) key management protocol, to establish IPsec security association with other hosts. This is based on KAME racoon, with some enhancements such as NAT-Traversal (needs a kernel patch), hybrid authentication, ISAKMP mode config, RADIUS support, IKE fragmentation and others. Ipsec-tools' racoon is able to act as a VPN server for the Cisco VPN client using hybrid authentication.
2004-11-09 23:42:20 +01:00
This package needs openssl bl3.mk... and it needs NAT-T kernel option to build...
2004-11-10 10:11:34 +01:00
.include "../../security/openssl/buildlink3.mk"
* Fix HOMEPAGE. * No need to use LIBTOOL_OVERRIDE. * Remove unneeded ${EXAMPLESDIR} (??!!) after bl3.mk includes * Remove unneeded BUILD_DEPEND, because this pkg uses bl3 Still libradius is broken...
2004-11-10 09:43:44 +01:00
.include "../../mk/bsd.pkg.mk"
Reference in a new issue Copy permalink