e722363d91
also added a netbsd-specific build option (changes) 2013.58 - Thursday 18 April 2013 - Fix building with Zlib disabled, thanks to Hans Harder and cuma@freetz - Use % as a separator for ports, fixes scp in multihop mode, from Hans Harder - Reject logins for other users when running as non-root, from Hans Harder - Disable client immediate authentication request by default, it prevents passwordless logins from working 2013.57 - Monday 15 April 2013 - Decreased connection setup time particularly with high latency connections, the number of round trips has been reduced for both client and server. CPU time hasn't been changed. - Client will send an initial key exchange guess to save a round trip. Dropbear implements an extension kexguess2@matt.ucc.asn.au to allow the first packet guess to succeed in wider circumstances than the standard behaviour. When communicating with other implementations the standard behaviour is used. - Client side: when public key or password authentication with $DROPBEAR_PASSWORD is used an initial authentication request will be sent immediately rather than querying the list of available methods. This behaviour is enabled by CLI_IMMEDIATE_AUTH option (on by default), please let the Dropbear author know if it causes any interoperability problems. - Implement client escape characters ~. (terminate session) and ~^Z (background session) - Server will more reliably clean up utmp when connection is closed, reported by Mattias Walstr<C3><B6>m - Don't crash if /dev/urandom isn't writable (RHEL5), thanks to Scott Case - Add "-y -y" client option to skip host key checking, thanks to Hans Harder - scp didn't work properly on systems using vfork(), thanks to Frank Van Uffelen - Added IUTF8 terminal mode support (Linux and Mac OS). Not standardised yet though probably will be soon - Some verbose DROPBEAR_TRACE output is now hidden unless $DROPBEAR_TRACE2 enviroment variable is set - Fix using asymmetric MAC algorithms (broke in ) - Renamed configure.in to configure.ac to quieten autoconf, from Mike Frysinger 2013.56 - Thursday 21 March 2013 - Allow specifying cipher (-c) and MAC (-m) lists for dbclient - Allow using 'none' cipher or MAC (off by default, use options.h). Encryption is used during authentication then disabled, similar to OpenSSH HPN mode - Allow a user in immediately if the account has a blank password and blank passwords are enabled - Include a few extra sources of entropy from /proc on Linux, hash private keys as well. Dropbear will also write gathered entropy back into /dev/urandom - Added hmac-sha2-256 and hmac-sha2-512 support (off by default, use options.h) - Don't sent bad address "localhost" for -R forward connections, reported by Denis Bider - Add "-B" runtime option to allow blank passwords - Allow using IPv6 bracket notation for addresses in server "-p" option, from Ben Jencks - A few improvements for Android from Reimar D<C3><B6>ffinger - Fix memory leak for TCP forwarded connections to hosts that timed out, reported by Norbert Bencz<C3><BA>r. Appears to be a very long-standing bug. - Fix "make clean" for out of tree builds - Fix compilation when ENABLE_{SVR,CLI}_AGENTFWD are unset
73 lines
2.2 KiB
Makefile
73 lines
2.2 KiB
Makefile
# $NetBSD: Makefile,v 1.28 2013/09/14 03:40:01 mspo Exp $
|
|
|
|
DISTNAME= dropbear-2013.58
|
|
CATEGORIES= security
|
|
MASTER_SITES= http://matt.ucc.asn.au/dropbear/releases/
|
|
|
|
MAINTAINER= snj@NetBSD.org
|
|
HOMEPAGE= http://matt.ucc.asn.au/dropbear/dropbear.html
|
|
COMMENT= Small SSH2 server and client, aimed at embedded market
|
|
|
|
GNU_CONFIGURE= yes
|
|
USE_TOOLS+= gmake
|
|
EXTRACT_SUFX= .tar.bz2
|
|
|
|
CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR:Q}
|
|
|
|
PKG_OPTIONS_VAR= PKG_OPTIONS.dropbear
|
|
PKG_SUPPORTED_OPTIONS= pam
|
|
.include "../../mk/bsd.options.mk"
|
|
|
|
.if !empty(PKG_OPTIONS:Mpam)
|
|
. include "../../mk/pam.buildlink3.mk"
|
|
CONFIGURE_ARGS+= --enable-pam
|
|
SUBST_CLASSES+= pam
|
|
SUBST_MESSAGE.pam= Enabling PAM in options.h
|
|
SUBST_STAGE.pam= post-patch
|
|
SUBST_FILES.pam= options.h
|
|
SUBST_SED.pam= -e "s/ENABLE_SVR_PASSWORD_AUTH/ENABLE_SVR_PAM_AUTH/"
|
|
.endif
|
|
|
|
MAKEFLAGS+= ROOT_USER=${ROOT_USER:Q} ROOT_GROUP=${ROOT_GROUP:Q}
|
|
|
|
OWN_DIRS+= ${PKG_SYSCONFDIR}/dropbear
|
|
|
|
SUBST_CLASSES+= config
|
|
SUBST_MESSAGE.config= Fixing path to config directory.
|
|
SUBST_STAGE.config= post-build
|
|
SUBST_FILES.config= dropbear.8 dropbearkey.8
|
|
SUBST_SED.config= -e "s,/etc/dropbear/,"${PKG_SYSCONFDIR:Q}"/dropbear/,g"
|
|
|
|
# used by dbscp
|
|
CPPFLAGS+= -D_PATH_SSH_PROGRAM="\"${PREFIX}/bin/dbclient\""
|
|
|
|
# XXX use base xauth if present, otherwise _ass_ume pkgsrc. better than nothing
|
|
.if exists(${X11BASE}/bin/xauth)
|
|
CPPFLAGS+=-DXAUTH_COMMAND="\"${X11BASE}/bin/xauth\""
|
|
.else
|
|
CPPFLAGS+=-DXAUTH_COMMAND="\"${X11PREFIX}/bin/xauth\""
|
|
.endif
|
|
|
|
.if ${OPSYS} == "NetBSD"
|
|
CFLAGS+= -DHAVE_NETINET_IN_SYSTM_H
|
|
.endif
|
|
|
|
INSTALLATION_DIRS= share/doc/dropbear ${PKGMANDIR}/man1 ${PKGMANDIR}/man8
|
|
|
|
BUILD_TARGET= all scp
|
|
|
|
post-install:
|
|
${INSTALL_MAN} ${WRKSRC}/dbclient.1 \
|
|
${DESTDIR}/${PREFIX}/${PKGMANDIR}/man1
|
|
${INSTALL_MAN} ${WRKSRC}/dropbear.8 \
|
|
${DESTDIR}/${PREFIX}/${PKGMANDIR}/man8
|
|
${INSTALL_MAN} ${WRKSRC}/dropbearkey.8 \
|
|
${DESTDIR}/${PREFIX}/${PKGMANDIR}/man8
|
|
${INSTALL_DATA} ${WRKSRC}/README \
|
|
${DESTDIR}/${PREFIX}/share/doc/dropbear
|
|
${INSTALL_PROGRAM} ${WRKSRC}/scp ${DESTDIR}/${PREFIX}/bin/dbscp
|
|
|
|
.include "../../devel/zlib/buildlink3.mk"
|
|
.include "../../math/ltm/buildlink3.mk"
|
|
.include "../../security/libtomcrypt/buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|