74fc0bd990
New in 2.1.28
build:
configure - Restore LIBS after checking gss_inquire_sec_context_by_oid
makemd5.c - Fix potential out of bound writes
fix build with –disable-shared –enable-static
Dozens of fixes for Windows specific builds
Fix cross platform builds with SPNEGO
Do not try to build broken java subtree
Fix build error with –enable-auth-sasldb
common:
plugin_common.c:
Ensure size is always checked if called repeatedly (#617)
documentation:
Fixed generation of saslauthd(8) man page
Fixed installation of saslauthd(8) and testsaslauthd(8) man pages (#373)
Updates for additional SCRAM mechanisms
Fix sasl_decode64 and sasl_encode64 man pages
Tons of fixes for Sphinx
include:
sasl.h:
Allow up to 16 bits for security flags
lib:
checkpw.c:
Skip one call to strcat
Disable auxprop-hashed (#374)
client.c:
Use proper length for fully qualified domain names
common.c:
CVE-2019-19906 Fix off by one error (#587)
external.c:
fix EXTERNAL with non-terminated input (#689)
saslutil.c:
fix index_64 to be a signed char (#619)
plugins:
gssapi.c:
Emit debug log only in case of errors
ntlm.c:
Fail compile if MD4 is not available (#632)
sql.c:
Finish reading residual return data (#639)
CVE-2022-24407 Escape password for SQL insert/update commands.
sasldb:
db_gdbm.c:
fix gdbm_errno overlay from gdbm_close
DIGEST-MD5 plugin:
Prevent double free of RC4 context
Use OpenSSL RC4 implementation if available
SCRAM plugin:
Return BADAUTH on incorrect password (#545)
Add -224, -384, -512 (#552)
Remove SCRAM_HASH_SIZE
Add function to return SCRAM auth method name
Allocate enough memory in scam_setpass()
Add function to sort SCRAM methods by hash strength
Update windows build for newer SCRAM options
saslauthd:
auth_httpform.c:
Avoid signed overflow with non-ascii characters (#576)
auth_krb5.c:
support setting an explicit auth_krb5 server name
support setting an explicit servername with Heimdal
unify the MIT and Heimdal auth_krb5 implementations
Remove call to krbtf
auth_rimap.c:
provide native memmem implementation if missing
lak.c:
Allow LDAP_OPT_X_TLS_REQUIRE_CERT to be 0 (no certificate verification)
lak.h:
Increase supported DN length to 4096 (#626)
104 lines
3.1 KiB
Text
104 lines
3.1 KiB
Text
# $NetBSD: Makefile.common,v 1.34 2022/02/24 11:00:03 wiz Exp $
|
|
#
|
|
# used by security/cyrus-sasl/Makefile
|
|
# used by security/cy2-anonymous/Makefile
|
|
# used by security/cy2-crammd5/Makefile
|
|
# used by security/cy2-digestmd5/Makefile
|
|
# used by security/cy2-gssapi/Makefile
|
|
# used by security/cy2-ldapdb/Makefile
|
|
# used by security/cy2-login/Makefile
|
|
# used by security/cy2-ntlm/Makefile
|
|
# used by security/cy2-otp/Makefile
|
|
# used by security/cy2-plain/Makefile
|
|
# used by security/cy2-scram/Makefile
|
|
# used by security/cy2-sql/Makefile
|
|
# used by security/cyrus-saslauthd/Makefile
|
|
#
|
|
# This Makefile fragment should be included _below_ any SASL_PLUGIN
|
|
# definition and _above_ any CONFIGURE_ARGS definitions.
|
|
|
|
DISTNAME= cyrus-sasl-2.1.28
|
|
CATEGORIES= security
|
|
MASTER_SITES+= ${MASTER_SITE_GITHUB:=cyrusimap/}
|
|
GITHUB_RELEASE= ${DISTNAME}
|
|
|
|
MAINTAINER= pkgsrc-users@NetBSD.org
|
|
HOMEPAGE= https://www.cyrusimap.org/sasl/
|
|
LICENSE= original-bsd # CMU version
|
|
|
|
DISTINFO_FILE= ${.CURDIR}/../../security/cyrus-sasl/distinfo
|
|
PATCHDIR= ${.CURDIR}/../../security/cyrus-sasl/patches
|
|
|
|
PKG_SYSCONFSUBDIR= sasl2
|
|
|
|
.include "../../mk/bsd.prefs.mk"
|
|
|
|
.if defined(SASL_PLUGIN) && !empty(SASL_PLUGIN:M[yY][eE][sS])
|
|
BUILDLINK_ABI_DEPENDS.cyrus-sasl+= \
|
|
cyrus-sasl>=${PKGVERSION_NOREV}
|
|
. include "../../security/cyrus-sasl/buildlink3.mk"
|
|
CPPFLAGS+= -I${BUILDLINK_PREFIX.cyrus-sasl}/include/sasl
|
|
.endif
|
|
|
|
GNU_CONFIGURE= yes
|
|
MAKE_JOBS_SAFE= no
|
|
USE_TOOLS+= gmake
|
|
TOOLS_BROKEN+= perl
|
|
|
|
USE_LIBTOOL= yes
|
|
|
|
DOCDIR= ${PREFIX}/share/doc/cyrus-sasl
|
|
PLUGINDIR= ${PREFIX}/lib/sasl2
|
|
|
|
CONFIGURE_ARGS+= --with-configdir=${PKG_SYSCONFDIR}
|
|
CONFIGURE_ARGS+= --with-plugindir=${PLUGINDIR:Q}
|
|
CONFIGURE_ARGS+= --disable-java
|
|
|
|
CONFIGURE_ARGS.Darwin+= --disable-macos-framework
|
|
|
|
.if ${OPSYS} == "SunOS"
|
|
CONFIGURE_ARGS+= --with-ipctype=doors
|
|
.endif
|
|
|
|
# Authentication mechanisms
|
|
CONFIGURE_ARGS+= --disable-anon # ANONYMOUS
|
|
CONFIGURE_ARGS+= --disable-checkapop # CHECKAPOP
|
|
CONFIGURE_ARGS+= --disable-cram # CRAM-MD5
|
|
CONFIGURE_ARGS+= --disable-scram # SCRAM
|
|
CONFIGURE_ARGS+= --disable-digest # DIGEST-MD5
|
|
CONFIGURE_ARGS+= --disable-gssapi # GSSAPI
|
|
CONFIGURE_ARGS+= --disable-krb4 # KERBEROS_V4
|
|
CONFIGURE_ARGS+= --disable-ldapdb # LDAP
|
|
CONFIGURE_ARGS+= --disable-login # LOGIN
|
|
CONFIGURE_ARGS+= --disable-ntlm # NTLM
|
|
CONFIGURE_ARGS+= --disable-otp # OTP
|
|
CONFIGURE_ARGS+= --disable-passdss # PASSDSS
|
|
CONFIGURE_ARGS+= --disable-plain # PLAIN
|
|
CONFIGURE_ARGS+= --disable-sql # SQL
|
|
CONFIGURE_ARGS+= --disable-srp # SRP
|
|
CONFIGURE_ARGS+= --disable-srp-setpass
|
|
CONFIGURE_ARGS+= --with-dblib=none
|
|
CONFIGURE_ARGS+= --without-openssl
|
|
CONFIGURE_ARGS+= --without-pam
|
|
CONFIGURE_ARGS+= --without-saslauthd
|
|
|
|
PKGCONFIG_OVERRIDE+= libsasl2.pc.in
|
|
|
|
pre-build:
|
|
cd ${WRKSRC}/common && ${BUILD_MAKE_CMD} all
|
|
|
|
# Left here as reference for patch makers...
|
|
# clean up a bit to help package maintainer produce patch files
|
|
#
|
|
#USE_TOOLS+= automake
|
|
#
|
|
#post-extract:
|
|
# ${_PKG_SILENT}${_PKG_DEBUG} \
|
|
# ${FIND} ${WRKSRC} -type f -name "*.orig" -print | ${XARGS} ${RM} -f
|
|
#
|
|
#pre-configure:
|
|
# cd ${WRKSRC}; \
|
|
# aclocal -I cmulocal -I config; \
|
|
# autoheader; \
|
|
# automake -a --gnu -i ; \
|
|
# autoconf
|