655fbf8432
doesn't conflict with openssh. Changes since 0.50: 0.52 - Wed 12 November 2008 - Add "netcat-alike" option (-B) to dbclient, allowing Dropbear to tunnel standard input/output to a TCP port-forwarded remote host. - Add "proxy command" support to dbclient, to allow using a spawned process for IO rather than a direct TCP connection. eg dbclient remotehost is equivalent to dbclient -J 'nc remotehost 22' remotehost (the hostname is still provided purely for looking up saved host keys) - Combine netcat-alike and proxy support to allow "multihop" connections, with comma-separated host syntax. Allows running dbclient user1@host1,user2@host2,user3@host3 to end up at host3 via the other two, using SSH TCP forwarding. It's a bit like onion-routing. All connections are established from the local machine. The comma-separated syntax can also be used for scp/rsync, eg rsync -a -e dbclient m@gateway,m2@host,martello:/home/matt/ ~/backup/ to bounce through a few hosts. - Add -I "idle timeout" option (contributed by Farrell Aultman) - Allow restrictions on authorized_keys logins such as restricting commands to be run etc. This is a subset of those allowed by OpenSSH, doesn't yet allow restricting source host. - Use vfork() for scp on uClinux - Default to PATH=/usr/bin:/bin for shells. - Report errors if -R forwarding fails - Add counter mode cipher support, which avoids some security problems with the standard CBC mode. - Support zlib@openssh.com delayed compression for client/server. It can be required for the Dropbear server with the '-Z' option. This is useful for security as it avoids exposing the server to attacks on zlib by unauthenticated remote users, though requires client side support. - options.h has been split into options.h (user-changable) and sysoptions.h (less commonly changed) - Support "dbclient -s sftp" to specify a subsystem - Fix a bug in replies to channel requests that could be triggered by recent versions of PuTTY 0.51 - Thu 27 March 2008 - Make a copy of password fields rather erroneously relying on getwpnam() to be safe to call multiple times - If $SSH_ASKPASS_ALWAYS environment variable is set (and $SSH_ASKPASS is as well) always use that program, ignoring isatty() and $DISPLAY - Wait until a process exits before the server closes a connection, so that an exit code can be sent. This fixes problems with exit codes not being returned, which could cause scp to fail.
68 lines
2 KiB
Makefile
68 lines
2 KiB
Makefile
# $NetBSD: Makefile,v 1.24 2009/08/26 21:10:11 snj Exp $
|
|
|
|
DISTNAME= dropbear-0.52
|
|
CATEGORIES= security
|
|
MASTER_SITES= http://matt.ucc.asn.au/dropbear/releases/
|
|
|
|
MAINTAINER= snj@NetBSD.org
|
|
HOMEPAGE= http://matt.ucc.asn.au/dropbear/dropbear.html
|
|
COMMENT= Small SSH2 server and client, aimed at embedded market
|
|
|
|
GNU_CONFIGURE= yes
|
|
USE_TOOLS+= gmake
|
|
|
|
PKG_DESTDIR_SUPPORT= user-destdir
|
|
|
|
CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR:Q}
|
|
|
|
PKG_OPTIONS_VAR= PKG_OPTIONS.dropbear
|
|
PKG_SUPPORTED_OPTIONS= pam
|
|
.include "../../mk/bsd.options.mk"
|
|
|
|
.if !empty(PKG_OPTIONS:Mpam)
|
|
. include "../../mk/pam.buildlink3.mk"
|
|
CONFIGURE_ARGS+= --enable-pam
|
|
SUBST_CLASSES+= pam
|
|
SUBST_MESSAGE.pam= Enabling PAM in options.h
|
|
SUBST_STAGE.pam= post-patch
|
|
SUBST_FILES.pam= options.h
|
|
SUBST_SED.pam= -e "s/ENABLE_SVR_PASSWORD_AUTH/ENABLE_SVR_PAM_AUTH/"
|
|
.endif
|
|
|
|
MAKEFLAGS+= ROOT_USER=${ROOT_USER:Q} ROOT_GROUP=${ROOT_GROUP:Q}
|
|
|
|
OWN_DIRS+= ${PKG_SYSCONFDIR}/dropbear
|
|
|
|
SUBST_CLASSES+= config
|
|
SUBST_MESSAGE.config= Fixing path to config directory.
|
|
SUBST_STAGE.config= post-build
|
|
SUBST_FILES.config= dropbear.8 dropbearkey.8
|
|
SUBST_SED.config= -e "s,/etc/dropbear/,"${PKG_SYSCONFDIR:Q}"/dropbear/,g"
|
|
|
|
# used by dbscp
|
|
CPPFLAGS+= -D_PATH_SSH_PROGRAM="\"${PREFIX}/bin/dbclient\""
|
|
|
|
# XXX use base xauth if present, otherwise _ass_ume pkgsrc. better than nothing
|
|
.if exists(${X11BASE}/bin/xauth)
|
|
CPPFLAGS+=-DXAUTH_COMMAND="\"${X11BASE}/bin/xauth\""
|
|
.else
|
|
CPPFLAGS+=-DXAUTH_COMMAND="\"${X11PREFIX}/bin/xauth\""
|
|
.endif
|
|
|
|
INSTALLATION_DIRS= share/doc/dropbear ${PKGMANDIR}/man1 ${PKGMANDIR}/man8
|
|
|
|
BUILD_TARGET= all scp
|
|
|
|
post-install:
|
|
${INSTALL_MAN} ${WRKSRC}/dbclient.1 \
|
|
${DESTDIR}/${PREFIX}/${PKGMANDIR}/man1
|
|
${INSTALL_MAN} ${WRKSRC}/dropbear.8 \
|
|
${DESTDIR}/${PREFIX}/${PKGMANDIR}/man8
|
|
${INSTALL_MAN} ${WRKSRC}/dropbearkey.8 \
|
|
${DESTDIR}/${PREFIX}/${PKGMANDIR}/man8
|
|
${INSTALL_DATA} ${WRKSRC}/README \
|
|
${DESTDIR}/${PREFIX}/share/doc/dropbear
|
|
${INSTALL_PROGRAM} ${WRKSRC}/scp ${DESTDIR}/${PREFIX}/bin/dbscp
|
|
|
|
.include "../../devel/zlib/buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|