Commit graph

50 commits

Author SHA1 Message Date
reed
9c790735db mk/bsd.pkg.install.mk now automatically registers
the RCD_SCRIPTS rc.d script(s) to the PLIST.

This GENERATE_PLIST idea is part of Greg A. Woods'
PR #22954.

This helps when the RC_SCRIPTS are installed to
a different ${RCD_SCRIPTS_EXAMPLEDIR}. (Later,
the default RCD_SCRIPTS_EXAMPLEDIR will be changed
to be more clear that they are the examples.)

These patches also remove the etc/rc.d/ scripts from PLISTs
(of packages that use RCD_SCRIPTS). (This also removes
now unused references from openssh* makefiles. Note that
qmail package has not been changed yet.)

I have been doing automatic PLIST registration for RC_SCRIPTS
for over a year. Not all of these packages have been tested,
but many have been tested and used.

Somethings maybe to do:
- a few packages still manually install the rc.d scripts to
  hard-coded etc/rc.d. These need to be fixed.
- maybe  remove from mk/${OPSYS}.pkg.dist mtree specifications too.
2004-04-23 22:07:52 +00:00
wiz
a661ce60c0 PKGREVISION bump after openssl-security-fix-update to 0.9.6m.
Buildlink files: RECOMMENDED version changed to current version.
2004-03-26 02:27:34 +00:00
bad
88eb08ea76 Get rid of -DNO_RSA in CFLAGS. This causes newer openssl headers to
not include <openssl/rsa.h> from <openssl/x509.h>.  Fixes PR pkg/23901.

While here, apply the patches to properly buildlinkify it for openssl,
which I forgot to pass to agc@ for the last update.
2003-12-30 15:57:53 +00:00
jschauma
fe19bb05b5 PKGREVISION++ after openssl update. 2003-11-12 03:39:39 +00:00
kleink
f870e05a26 Obsoleted in 20030903 (and also distinfo-orphaned); this is now fixed
correctly in the stock distribution.
2003-10-13 19:17:52 +00:00
agc
d1cf13dbac Update to isakmpd version 20030903.
No changelog available, but many bugs fixed, and these sources will
compile with gcc-3.3.1 (well, after I tweaked them).  With thanks to
Christoph Badura for most of this work, I merely did the gcc-3.3.1
patching.
2003-10-10 12:56:18 +00:00
jmc
b74f6c1605 Bump PKGREVISION as DES patches allow this to work on -current again 2003-09-21 08:02:59 +00:00
jmc
79d0da89fe Add some patches so if using openssl >= 0.9.7 the new des API is used 2003-09-21 08:02:21 +00:00
jmmv
4ab51057d8 Convert to the bsd.pkg.install.mk framework by honouring PKG_SYSCONFDIR and
using RCD_SCRIPTS to handle generation and installation of the rc.d script.
Convert the rc.d script to the rc.subr framework too.
Bump PKGREVISION to 1.
2003-07-31 10:38:32 +00:00
grant
ca3be631f2 s/netbsd.org/NetBSD.org/ 2003-07-17 22:50:55 +00:00
jmmv
0916498c1b Place WRKSRC where it belongs, to make pkglint happy; ok'ed by wiz. 2003-03-29 12:40:00 +00:00
dmcmahill
29e312f193 fix some format strings for 64 bit systems so this can build with -Werror 2003-02-08 17:06:26 +00:00
jlam
d7f69e47ce Instead of including bsd.pkg.install.mk directly in a package Makefile,
have it be automatically included by bsd.pkg.mk if USE_PKGINSTALL is set
to "YES".  This enforces the requirement that bsd.pkg.install.mk be
included at the end of a package Makefile.  Idea suggested by Julio M.
Merino Vidal <jmmv at menta.net>.
2003-01-28 22:03:00 +00:00
schmonz
0a1bd5acad Replace IGNORE with PKG_FAIL_REASON or PKG_SKIP_REASON as appropriate. 2002-12-07 02:38:52 +00:00
martti
ce871f4992 Updated isakmpd to 20021118
* bug fixes
2002-11-18 12:07:41 +00:00
wiz
3ab90d3e93 buildlink1 -> buildlink2. 2002-10-25 09:51:51 +00:00
martti
5c6fa7b4a9 Updated isakmpd to 20020830
* OpenBSD 3.1 SA 010: Receiving IKE payloads out of sequence can cause
                      isakmpd(8) to crash.

* A rewrite of the CRL support code, also from <Thomas.Walpuski@gmx.net>.
  Some style mods, and checks added for OpenSSL version 0.9.7 or later.
  Currently CRLs are not supported for earlier versions.
  Manual pages updated.

* Handle configuration lines that end in whitespace or ^M.
  Also avoid a potential memory leak.

* Start for support of IKECFG in SET/ACK mode. Server side only so far.

* Fix keyed HMAC where the key was longer than the blocksize
2002-08-30 07:40:00 +00:00
martti
8ad41b9c82 Added etc/rc.d/isakmpd 2002-04-04 09:46:03 +00:00
martti
bfdb1ddf87 Install a simle startup script (${PREFIX}/etc/rc.d/isakmpd) 2002-04-04 09:42:27 +00:00
martti
66722fd01e Updated isakmpd to 20020403
- Change DH group handling in the pre-generated parts of the
  configuration. Add a -GRP{1,2,5} component to transform and suite
  names to directly specify which group to use. If no group is
  specified, use DH group 2 (MODP_1024). Earlier transforms and suites
  using the MD5 hash defaulted to DH group 1, this is no longer true.
- Unbreak MD5 and SHA1 passphrases in policy check.
- Don't message_dump_raw() bad length messages, i.e too short.
- Fix a couple of snprintf length bugs.
- Compile without warnings for older/newer OpenSSL.
2002-04-03 12:31:56 +00:00
martti
47f409dbca Updated isakmpd to 20020203.
Changes:

* bug fixes
2002-02-03 15:11:53 +00:00
martti
5556935c2a Upgrade to latest OpenBSD source tree.
- str[n]{cpy,cat} -> strl{cpy,cat}, sprintf -> snprintf
- strftime format fixes
- Don't hang waiting for select() with SIGTERM + no active SA
- Add UI option 'R' to trigger isakmpd reinit (same as SIGHUP)
...

http://www.openbsd.org/cgi-bin/cvsweb/src/sbin/isakmpd/
2002-01-04 11:10:49 +00:00
zuntum
c72c1cf5f9 Move pkg/ files into package's toplevel directory 2001-11-01 00:57:41 +00:00
martti
7e162e0138 This is a new version taken from OpenBSD just before their next release.
Exact list of changes is unknown (you might take a look at OpenBSD's
log entries at http://www.openbsd.org/cgi-bin/cvsweb/src/sbin/isakmpd/)
2001-10-22 05:51:25 +00:00
itojun
049819ce3f upgrade to 20010611.
key changes since 20010403:
- be more picky about isakmpd.policy permission
- debug: dump decoded IKE packets in pcap(3) format
- cert improvements
- RFC2367 compliance
- bug fixes: correct SA refcnt, memory alloc and doc fixes
2001-06-11 11:23:20 +00:00
dmcmahill
a199ce3a15 fix types on 64-bit systems. 2001-05-12 00:04:44 +00:00
agc
a35e3d707c Move to sha1 digests, add distfile sizes. 2001-04-19 15:40:29 +00:00
agc
2d6b6a009c + move the distfile digest/checksum value from files/md5 to distinfo
+ move the patch digest/checksum values from files/patch-sum to distinfo
2001-04-17 11:43:32 +00:00
itojun
41b34a2982 no need to link libgmp. 2001-04-05 23:29:42 +00:00
itojun
5ed7394884 stability; do not free memory region twice.
openbsd sbin/isakmpd/x509.c 1.46 -> 1.47
2001-04-04 03:45:14 +00:00
itojun
589915baa7 upgrade to latest openbsd tree.
(isakmpd-20010403.tar.gz is placed into ftp.netbsd.org LOCAL_PORTS directory).

major changes from source-changes@openbsd mailing list:

use the hash algorithm found in original certificate for the signature
after it has been patched. from angelos@

For the GETSPI PFKEY message, use the sequence number from the ACQUIRE
message.

Make DES a feature, so isakmpd can compile on Linux (most of the fixed
by newsham@lava.net)

x509 verified to work on NetBSD now
2001-04-03 13:06:27 +00:00
wiz
cdfd00e857 regen 2001-02-24 17:55:00 +00:00
itojun
62c9a1f8a8 fix installation path. (forgot to cvs add) 2001-02-24 00:34:30 +00:00
wiz
a87738b456 Update to new COMMENT style: COMMENT var in Makefile instead of pkg/COMMENT. 2001-02-17 17:42:09 +00:00
wiz
73857919e1 regen 2001-02-15 13:34:57 +00:00
itojun
20af426594 use code checked out on 20010214 from openbsd repository.
too many changes to mention, so pls look at http://www.openbsd.org/plus.html
2001-02-14 13:27:32 +00:00
kim
d07320dcfc BSD-style Makefiles require special handling of manual pages. 2000-11-25 23:51:17 +00:00
itojun
251169058f regen with new patch 2000-10-04 16:37:13 +00:00
itojun
2de4d4425f make it buildable on alpha (need string.h) 2000-10-04 16:36:58 +00:00
fredb
49e9db95e1 Update to 2000-09-15 snapshot, to let this build on NetBSD-1.5, and remove
BROKEN variable. Unfortunately, no ChangeLog is available.

Patch system dependent make goo to use 'SSLBASE', mirroring it's use in
bsd.pkg.mk, rather than obsolete 'PATENTEDOPENSSLSRC'. Also, replace hard-
coded "/usr/pkg", replacing it with ${LOCALBASE}. Finally, set 'LOCALBASE'
and 'SSLBASE' conditionally within the package, for convenience.
2000-09-25 04:00:15 +00:00
fredb
0c6b58570c Reorganize crypto handling, as discussed on tech-pkg. Remove all
RESTRICTED= variables that were predicated on former U.S. export
regulations. Add CRYPTO=, as necessary, so it's still possible to
exclude all crypto packages from a build by setting MKCRYPTO=no
(but "lintpkgsrc -R" will no longer catch them).

Specifically,

- - All packages which set USE_SSL just lose their RESTRICTED
    variable, since MKCRYPTO responds to USE_SSL directly.
- - realplayer7 and ns-flash keep their RESTRICTED, which is based
    on license terms, but also gain the CRYPTO variable.
- - srp-client is now marked broken, since the distfile is evidently
    no longer available. On this, we're no worse off than before.
    [We haven't been mirroring the distfile, or testing the build!]
- - isakmpd gets CRYPTO for RESTRICTED, but remains broken.
- - crack loses all restrictions, as it does not evidently empower
    a user to utilize strong encryption (working definition: ability
    to encode a message that requires a secret key plus big number
    arithmetic to decode).
2000-09-09 19:40:14 +00:00
wiz
0deee9df22 move BROKEN line so that pkglint is a lot happier about it 2000-09-03 13:12:52 +00:00
wiz
807a59de84 add RCS Id 2000-09-03 13:12:27 +00:00
hubertf
e75965c6ba Update IGNORE-messages for recent changes: add ${PKGNAME} where
appropriate.
2000-08-21 21:01:29 +00:00
hubertf
402899809a Replace MIRROR_DISTFILES and NO_CDROM with the more descriptive and
more fine-grained NO_{BIN,SRC}_ON_{FTP,CDROM} definitions.

MIRROR_DISTFILES and NO_CDROM are now dead.
2000-08-18 22:46:29 +00:00
itojun
503afb0540 add RESTRICTED (crypto) and IGNORE (broken by PF_KEY API change) 2000-06-12 11:26:25 +00:00
itojun
440d75724a make it work with openssl-0.9.5a.
cope with PATENTEDOPENSSLSRC environment (mk.conf needs to be set)
2000-04-27 14:55:54 +00:00
thorpej
26ad50d3ee If PATENTEDOPENSSLSRC is present in the build environment, then
assume that a full (i.e. "with RSA") OpenSSL installation already
exists on the system (and thus a dependency on ../security/openssl
is not needed).
2000-04-25 19:10:10 +00:00
itojun
b03c489c21 check if the system is IPsec ready NetBSD system. 2000-04-12 15:09:49 +00:00
itojun
306da9f099 pkgsrc for OpenBSD isakmpd (based on ftp.appli.se snapshot 2000/2/20).
if you are tired of using racoon, you may want to try it.
(may not work as expected due to PF_KEY differences)

---
This is isakmpd, a BSD-licensed ISAKMP/Oakley (a.k.a. IKE)
implementation.  It's written by Niklas Hallqvist and Niels Provos,
funded by Ericsson Radio Systems AB.  Currently it is work in
progress, although it can be used for real setups.  There are
releases, but this distribution is not a release and is not named with
ordinary version numbers.  When you got the source, hopefully the
archive was named with a date which reflects when it was created.
These archives are also known as snapshots and will be created at
irregular intervals and put up on ftp.gsnig.net and ftp.appli.se in
/pub/isakmpd.  From Nov 14, 1998 isakmpd is also available in the
OpenBSD main source tree under src/sbin/isakmpd, though slightly
modified because I don't want to carry support files for other OSes in
that distribution.  Look at http://www.openbsd.org/ for details on how
to get OpenBSD source.
2000-03-27 16:04:12 +00:00