212cbcbac7
* Version 2.6.4 (released 2009-02-06) ** libgnutls: Accept chains where intermediary certs are trusted. Before GnuTLS needed to validate the entire chain back to a self-signed certificate. GnuTLS will now stop looking when it has found an intermediary trusted certificate. The new behaviour is useful when chains, for example, contains a top-level CA, an intermediary CA signed using RSA-MD5, and an end-entity certificate. To avoid chain validation errors due to the RSA-MD5 cert, you can explicitly add the intermediary RSA-MD5 cert to your trusted certs. The signature on trusted certificates are not checked, so the chain has a chance to validate correctly. Reported by "Douglas E. Engert" <deengert@anl.gov> in <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3351>. ** libgnutls: result_size in gnutls_hex_encode now holds the size of the result. Report by John Brooks <special@dereferenced.net>. ** libgnutls: gnutls_handshake when sending client hello during a rehandshake, will not offer a version number larger than the current. Reported by Tristan Hill <stan@saticed.me.uk>. ** libgnutls: Permit V1 Certificate Authorities properly. Before they were mistakenly rejected even though GNUTLS_VERIFY_ALLOW_ANY_X509_V1_CA_CRT and/or GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT were supplied. Reported by "Douglas E. Engert" <deengert@anl.gov> in <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3351>. ** libgnutls: deprecate X.509 validation chains using MD5 and MD2 signatures. This is a bugfix -- the previous attempt to do this from internal x509 certificate verification procedures did not return the correct value for certificates using a weak hash. Reported by Daniel Kahn Gillmor <dkg@fifthhorseman.net> in <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3332>, debugged and patch by Tomas Mraz <tmraz@redhat.com> and Daniel Kahn Gillmor <dkg@fifthhorseman.net>. ** libgnutls: Fix compile error with Sun CC. Reported by Jeff Cai <jeff.cai@sun.com> in <https://savannah.gnu.org/support/?106549>.
59 lines
1.8 KiB
Makefile
59 lines
1.8 KiB
Makefile
# $NetBSD: Makefile,v 1.77 2009/02/21 13:45:31 wiz Exp $
|
|
|
|
DISTNAME= gnutls-2.6.4
|
|
CATEGORIES= security devel
|
|
MASTER_SITES= ftp://ftp.gnutls.org/pub/gnutls/ \
|
|
http://www.mirrors.wiretapped.net/security/network-security/gnutls/ \
|
|
ftp://ftp.mirrors.wiretapped.net/pub/security/network-security/gnutls/ \
|
|
${MASTER_SITE_GNU:=gnutls/}
|
|
EXTRACT_SUFX= .tar.bz2
|
|
|
|
MAINTAINER= pkgsrc-users@NetBSD.org
|
|
HOMEPAGE= http://www.gnutls.org/
|
|
COMMENT= GNU Transport Layer Security library
|
|
#LICENSE= gnu-gpl-v2 gnu-lgpl-v2.1
|
|
|
|
PKG_INSTALLATION_TYPES= overwrite pkgviews
|
|
PKG_DESTDIR_SUPPORT= user-destdir
|
|
|
|
USE_LANGUAGES= c c++
|
|
USE_LIBTOOL= yes
|
|
USE_PKGLOCALEDIR= yes
|
|
USE_TOOLS+= gmake
|
|
GNU_CONFIGURE= yes
|
|
TEST_TARGET= check
|
|
INFO_FILES= yes
|
|
|
|
PKGCONFIG_OVERRIDE= lib/gnutls.pc.in
|
|
PKGCONFIG_OVERRIDE+= libextra/gnutls-extra.pc.in
|
|
|
|
BUILDLINK_API_DEPENDS.opencdk+= opencdk>=0.6.5
|
|
BUILDLINK_API_DEPENDS.libtasn1+= libtasn1>=0.3.4
|
|
BUILDLINK_API_DEPENDS.libgcrypt+= libgcrypt>=1.2.4
|
|
|
|
MAKE_ENV+= RM=${RM:Q}
|
|
MAKE_ENV+= TZ=UTC
|
|
|
|
DOCDIR= ${PREFIX}/share/doc/gnutls
|
|
EGDIR= ${PREFIX}/share/examples/gnutls
|
|
|
|
.include "../../mk/bsd.prefs.mk"
|
|
|
|
INSTALLATION_DIRS= ${DOCDIR} ${EGDIR} include/gnutls
|
|
|
|
post-install:
|
|
${INSTALL_DATA} ${WRKSRC}/doc/TODO ${DESTDIR}${DOCDIR}
|
|
${INSTALL_DATA} ${WRKSRC}/doc/gnutls.ps ${DESTDIR}${DOCDIR}
|
|
cd ${WRKSRC}/doc/examples && ${INSTALL_DATA} *.c ${DESTDIR}${EGDIR}
|
|
|
|
.include "../../archivers/lzo/buildlink3.mk"
|
|
.include "../../converters/libiconv/buildlink3.mk"
|
|
.include "../../devel/gettext-lib/buildlink3.mk"
|
|
.include "../../devel/libcfg+/buildlink3.mk"
|
|
.include "../../devel/zlib/buildlink3.mk"
|
|
.include "../../security/libgcrypt/buildlink3.mk"
|
|
.include "../../security/libtasn1/buildlink3.mk"
|
|
.include "../../security/opencdk/buildlink3.mk"
|
|
# guile is useful for selftests, but bindings should be separate pkgs
|
|
#.include "../../lang/guile/buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|