ae64bfc327
Major changes in 1.14.6 (2017-09-25)
This is a bug fix release.
Fix a KDC denial of service vulnerability caused by unset status strings [CVE-2017-11368]
Preserve GSS contexts on init/accept failure [CVE-2017-11462]
Fix kadm5 setkey operation with LDAP KDB module
Use a ten-second timeout after successful connection for HTTPS KDC requests, as we do for TCP requests
Fix client null dereference when KDC offers encrypted challenge without FAST
84 lines
2.4 KiB
Makefile
84 lines
2.4 KiB
Makefile
# $NetBSD: Makefile,v 1.95 2017/10/10 21:22:53 tez Exp $
|
|
|
|
DISTNAME= krb5-1.14.6
|
|
PKGNAME= mit-${DISTNAME}
|
|
CATEGORIES= security
|
|
MASTER_SITES= http://web.mit.edu/kerberos/dist/krb5/${PKGVERSION_NOREV:R}/
|
|
EXTRACT_SUFX= .tar.gz
|
|
DISTFILES= ${DISTNAME}${EXTRACT_SUFX}
|
|
|
|
#PATCH_SITES= http://web.mit.edu/kerberos/advisories/
|
|
#PATCHFILES= 2014-001-patch.txt
|
|
|
|
MAINTAINER= tez@NetBSD.org
|
|
HOMEPAGE= http://web.mit.edu/kerberos/
|
|
COMMENT= MIT Kerberos 5 authentication system
|
|
|
|
MAKE_JOBS_SAFE= no
|
|
|
|
WRKSRC= ${WRKDIR}/${DISTNAME}/src
|
|
|
|
BUILD_TARGET= generate-files-mac all
|
|
|
|
.include "../../mk/bsd.prefs.mk"
|
|
|
|
CONFLICTS+= heimdal-[0-9]*
|
|
CONFLICTS+= kth-krb4-[0-9]*
|
|
|
|
USE_LANGUAGES= c c++
|
|
USE_LIBTOOL= yes
|
|
USE_TOOLS+= autoconf gzip m4 perl yacc msgfmt
|
|
GNU_CONFIGURE= yes
|
|
|
|
# The actual KDC databases are stored in ${MIT_KRB5_STATEDIR}/krb5kdc.
|
|
MIT_KRB5_STATEDIR?= ${VARBASE}
|
|
FILES_SUBST+= MIT_KRB5_STATEDIR=${MIT_KRB5_STATEDIR}
|
|
|
|
BUILD_DEFS+= VARBASE
|
|
|
|
CONFIGURE_ARGS+= --localstatedir=${MIT_KRB5_STATEDIR}
|
|
CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR}
|
|
CONFIGURE_ARGS+= --enable-shared
|
|
CONFIGURE_ARGS+= --enable-dns-for-realm
|
|
CONFIGURE_ARGS+= --enable-kdc-replay-cache
|
|
CONFIGURE_ARGS+= --disable-thread-support
|
|
CONFIGURE_ARGS+= --without-tcl
|
|
CONFIGURE_ARGS+= --enable-pkgsrc-libtool
|
|
CONFIGURE_ARGS+= --without-system-verto
|
|
CONFIGURE_ARGS+= --disable-aesni
|
|
CONFIGURE_ENV+= BUILDLINK_PREFIX_OPENSSL=${BUILDLINK_PREFIX.openssl:Q}
|
|
CONFIGURE_ENV+= DEFKTNAME=FILE:${PKG_SYSCONFDIR}/krb5.keytab
|
|
MAKE_ENV+= ROOT_USER=${ROOT_USER}
|
|
LIBS.SunOS= -lrt
|
|
|
|
PATCH_DIST_ARGS= -d ${WRKSRC} -p2
|
|
|
|
INFO_FILES= YES
|
|
|
|
OWN_DIRS_PERMS= ${MIT_KRB5_STATEDIR}/krb5kdc \
|
|
${REAL_ROOT_USER} ${REAL_ROOT_GROUP} 0700
|
|
RCD_SCRIPTS= kadmind kdc
|
|
|
|
INSTALLATION_DIRS= bin include/gssapi include/gssrpc ${PKGINFODIR} \
|
|
${PKGMANDIR}/man1 ${PKGMANDIR}/man5 \
|
|
${PKGMANDIR}/man8 sbin share/examples/krb5 \
|
|
share/et share/examples/rc.d share/gnats \
|
|
lib/krb5/plugins/kdb lib/krb5/plugins/preauth \
|
|
lib/krb5/plugins/tls include/krb5 include/kadm5 \
|
|
lib/pkgconfig
|
|
|
|
pre-configure:
|
|
@${ECHO} "=> Generating configure"; \
|
|
cd ${WRKSRC}; autoconf -I ${WRKSRC} -f;
|
|
|
|
post-install:
|
|
@${ECHO} "=> Installing info files"; \
|
|
cd ${WRKDIR}/${DISTNAME}/doc; \
|
|
for f in *.info *.info-[0-9]*; do \
|
|
${TEST} ! -f "$$f" || \
|
|
${INSTALL_MAN} "$$f" ${DESTDIR}${PREFIX}/${PKGINFODIR}; \
|
|
done
|
|
|
|
BUILDLINK_API_DEPENDS.openssl+= openssl>=1.0.1
|
|
.include "../../security/openssl/buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|