9fca7358bd
While here bl3ify. Changes since previously packaged version (3.2.5): 2003-12-03 Sami J. Lehtinen <sjl@ssh.com> * ssh-3.2.9.1. * non-commercial: removed cert hash compat stuff, which broke compilation. 2003-09-26 Sami J. Lehtinen <sjl@ssh.com> * ssh-3.2.9. * ssh2,sshd2: (by Patrick Irwin): Critical security fix: fixed several bugs in ASN.1 decoding functionality, which were caused by invalid assumptions on the format of input BER data. Certificates malformed in certain ways could cause a crash or buffer overflow. No known exploits at this time, but you are strongly advised to upgrade. Admins unwilling or unable to upgrade need to disable certificates, but this may not be enough for "hostbased" authentication. "publickey" auth should be safe even with the old version with certificates disabled. Clients are probably vulnerable against malicious servers in the initial key exchange regardless of configuration. Users of noncommercial version are not affected by this vulnerability. 2003-09-25 Sami J. Lehtinen <sjl@ssh.com> * sshd2, ssh2: Implemented DisableVersionFallback, with which you can disable fallback compatibility code for older, or otherwise incompatible versions of software. Don't disable unless you know what you're doing. See sshd2_config(5) for details. For really paranoid people (using this option will probably hurt usability somewhat, especially in environments where multiple versions of SSH are used from different vendors). * sshd2, ssh2: Implemented Cert.RSA.Compat.HashScheme. Older SSH Secure Shell clients and servers used hashes in an incoherent manner (sometimes MD5, sometimes SHA-1). With this option, you can set what hash is used. See sshd2_config(5) for details. * Previous: ssh-3.2.8. 2003-08-07 Tomi Salo <ttsalo@ssh.com> * Added a new general configuration option, MaxCRLSize. This sets the maximum size for CRLs and CA certs used in validating received certificates. (The size is the total size of all CRLs and certs, not the maximum individual size.) 2003-06-11 Sami J. Lehtinen <sjl@ssh.com> * ssh-3.2.7. * ssh-signer2: Fixed a bug, which caused the application to intermittently call fatal because the read() operation was interrupted by a signal (SIGCHLD). 2003-06-04 Sami J. Lehtinen <sjl@ssh.com> * ssh-3.2.6. * SecurID certified binaries, no code changes.
99 lines
2.7 KiB
Text
99 lines
2.7 KiB
Text
# $NetBSD: Makefile.common,v 1.7 2004/03/12 16:40:08 seb Exp $
|
|
#
|
|
|
|
DISTNAME= ssh-3.2.9.1
|
|
CATEGORIES= security
|
|
MASTER_SITES= ftp://ftp.ssh.com/pub/ssh/
|
|
|
|
MAINTAINER= seb@NetBSD.org
|
|
HOMEPAGE= http://www.ssh.com
|
|
|
|
CONFLICTS+= openssh-[0-9]* ssh6-[0-9]* ssh-[0-9]* sftp-[0-9]*
|
|
CONFLICTS+= openssh+gssapi-[0-9]*
|
|
|
|
USE_BUILDLINK3= YES
|
|
USE_PKGINSTALL= YES
|
|
GNU_CONFIGURE= YES
|
|
|
|
BUILD_DEFS+= USE_INET6
|
|
|
|
CRYPTO= YES
|
|
PKG_SYSCONFSUBDIR= ssh2
|
|
|
|
DISTINFO_FILE= ${.CURDIR}/../../security/ssh2/distinfo
|
|
PATCHDIR= ${.CURDIR}/../../security/ssh2/patches
|
|
FILESDIR= ${.CURDIR}/../../security/ssh2/files
|
|
PLIST_SRC= ${.CURDIR}/../../security/ssh2/PLIST
|
|
|
|
.if defined(USE_X11)
|
|
PLIST_SUBST+= X11_SUPPORT=
|
|
.else
|
|
PLIST_SUBST= X11_SUPPORT='@comment '
|
|
.endif
|
|
|
|
.include "../../mk/bsd.prefs.mk"
|
|
|
|
.if (${OPSYS:M*BSD} == "") && (${OPSYS} != "Linux")
|
|
LICENSE= no-commercial-use
|
|
.endif
|
|
|
|
.if ${OPSYS} == "NetBSD" && ${MACHINE_ARCH} == "sparc64"
|
|
# Later we may want to put an upper version bound on OS_VERSION or on
|
|
# gcc version for this.
|
|
CONFIGURE_ARGS+= --disable-compiler-optimizations
|
|
.endif
|
|
|
|
SSH_PID_DIR= /var/run # default directory for PID files
|
|
.if ${OPSYS} == "SunOS" && !empty(OS_VERSION:M5.[012345678])
|
|
SSH_PID_DIR.SunOS= /etc # Older Solaris doesn't have a /var/run
|
|
.endif
|
|
|
|
.if defined(SSH_PID_DIR.${OPSYS})
|
|
SSH_PID_DIR= ${SSH_PID_DIR.${OPSYS}}
|
|
.endif
|
|
|
|
CONFIGURE_ARGS+= --without-daemonpam --without-clientpam
|
|
CONFIGURE_ARGS+= --without-ssh-agent1-compat
|
|
CONFIGURE_ARGS+= --without-ssh1-compat
|
|
CONFIGURE_ARGS+= --with-libwrap=${BUILDLINK_PREFIX.tcp-wrappers}
|
|
CONFIGURE_ARGS+= --with-pid-dir=${SSH_PID_DIR}
|
|
|
|
# Setting FOREIGN_ETCDIR to PKG_SYSCONFBASEDIR may seem stupid
|
|
# if PKG_SYSCONFDIR.${PKG_SYSCONFVAR} is set but it does no harm...
|
|
#
|
|
CONFIGURE_ARGS+= --with-foreign-etcdir=${PKG_SYSCONFBASEDIR}
|
|
CONFIGURE_ARGS+= --with-etcdir=${PKG_SYSCONFDIR}
|
|
|
|
MAKE_ENV+= PKGBASE=${PKGBASE}
|
|
|
|
RCD_SCRIPTS= ssh2_secure_shell
|
|
|
|
EGDIR= ${PREFIX}/share/examples/${PKGBASE}
|
|
EGFILES= ext_authorization_example.sh \
|
|
kbdint_plugin_example.sh
|
|
|
|
CONFS= sshd2_config ssh2_config ssh_dummy_shell.out
|
|
CONF_FILES= # empty
|
|
.for FILE in ${CONFS}
|
|
CONF_FILES+= ${EGDIR}/${FILE} ${PKG_SYSCONFDIR}/${FILE}
|
|
.endfor
|
|
FILES_SUBST= SSH_PID_DIR=${SSH_PID_DIR}
|
|
|
|
OWN_DIRS= ${PKG_SYSCONFDIR}/knownhosts
|
|
OWN_DIRS+= ${PKG_SYSCONFDIR}/hostkeys
|
|
|
|
DOCS= CHANGES FAQ HOWTO.anonymous.sftp INSTALL LICENSE \
|
|
NEWS README REGEX-SYNTAX SSH2.QUICKSTART \
|
|
RFC.authorization_program_protocol \
|
|
RFC.kbdint_plugin_protocol
|
|
INSTALLATION_DIRS+= share/doc/${PKGBASE}
|
|
|
|
post-install:
|
|
.for FILE in ${DOCS}
|
|
${INSTALL_DATA} ${WRKSRC}/${FILE} ${PREFIX}/share/doc/${PKGBASE}
|
|
.endfor
|
|
.for FILE in ${EGFILES}
|
|
${INSTALL_DATA} ${WRKSRC}/${FILE} ${EGDIR}
|
|
.endfor
|
|
|
|
.include "../../security/tcp_wrappers/buildlink3.mk"
|