a743d901b9
Not sure of 3.6.11.1's specific changes - possibly fixing an incorrectly generated tarball? These changes from apply: * Version 3.6.11 (released 2019-12-01) ** libgnutls: Use KERN_ARND for the system random number generator on NetBSD. This syscall provides an endless stream of random numbers from the kernel's ChaCha20-based random number generator, without blocking or requiring an open file descriptor. ** libgnutls: Corrected issue with TLS 1.2 session ticket handling as client during resumption (#841). ** libgnutls: gnutls_base64_decode2() succeeds decoding the empty string to the empty string. This is a behavioral change of the API but it conforms to the RFC4648 expectations (#834). ** libgnutls: Fixed AES-CFB8 implementation, when input is shorter than the block size. Fix backported from nettle. ** certtool: CRL distribution points will be set in CA certificates even when non self-signed (#765). ** gnutls-cli/serv: added raw public-key handling capabilities (RFC7250). Key material can be set via the --rawpkkeyfile and --rawpkfile flags. ** API and ABI modifications: No changes since last version.
95 lines
3.3 KiB
Makefile
95 lines
3.3 KiB
Makefile
# $NetBSD: Makefile,v 1.204 2019/12/06 14:00:08 nia Exp $
|
|
|
|
DISTNAME= gnutls-3.6.11.1
|
|
CATEGORIES= security devel
|
|
MASTER_SITES= https://www.gnupg.org/ftp/gcrypt/gnutls/v3.6/
|
|
EXTRACT_SUFX= .tar.xz
|
|
|
|
MAINTAINER= pkgsrc-users@NetBSD.org
|
|
HOMEPAGE= https://www.gnutls.org/
|
|
COMMENT= Transport Layer Security library
|
|
LICENSE= gnu-gpl-v3 AND gnu-lgpl-v2.1
|
|
|
|
DEPENDS+= mozilla-rootcerts-[0-9]*:../../security/mozilla-rootcerts
|
|
|
|
PLIST_SRC= PLIST
|
|
|
|
USE_LANGUAGES= c c++
|
|
USE_LIBTOOL= yes
|
|
USE_TOOLS+= gmake gsed perl pkg-config bash
|
|
USE_TOOLS+= msgfmt msgmerge xgettext
|
|
GNU_CONFIGURE= yes
|
|
# this library duplicates (and conflicts with) openssl
|
|
CONFIGURE_ARGS+= --disable-openssl-compatibility
|
|
CONFIGURE_ARGS+= --disable-guile
|
|
CONFIGURE_ARGS+= --disable-libdane
|
|
CONFIGURE_ARGS+= --without-idn
|
|
CONFIGURE_ARGS+= --without-tpm
|
|
CONFIGURE_ARGS+= --disable-valgrind-tests
|
|
CONFIGURE_ARGS+= --with-default-trust-store-file=${PREFIX}/share/mozilla-rootcerts/cacert.pem
|
|
CONFIGURE_ARGS+= --with-libintl-prefix=${BUILDLINK_PREFIX.gettext}
|
|
CONFIGURE_ARGS+= --enable-local-libopts
|
|
# Assembler support is broken for SunOS in 3.2.9.
|
|
CONFIGURE_ARGS.SunOS+= --disable-hardware-acceleration
|
|
CONFIGURE_ARGS.FreeBSD+= ac_cv_type_max_align_t=yes
|
|
|
|
.include "options.mk"
|
|
|
|
TEST_TARGET= check
|
|
|
|
INFO_FILES= yes
|
|
|
|
REPLACE_BASH+= tests/cert-tests/certtool
|
|
REPLACE_BASH+= tests/danetool.sh
|
|
REPLACE_BASH+= tests/fastopen.sh
|
|
REPLACE_BASH+= tests/gnutls-cli-debug.sh
|
|
REPLACE_BASH+= tests/ocsp-tests/ocsp-must-staple-connection
|
|
REPLACE_BASH+= tests/ocsp-tests/ocsp-tls-connection
|
|
REPLACE_BASH+= tests/starttls.sh
|
|
REPLACE_BASH+= tests/suite/cbc-record-check.sh
|
|
REPLACE_BASH+= tests/suite/testcompat-main-openssl
|
|
REPLACE_BASH+= tests/suite/testcompat-main-polarssl
|
|
REPLACE_BASH+= tests/cert-tests/pkcs12-utf8
|
|
|
|
REPLACE_PERL+= doc/scripts/gdoc doc/scripts/sort2.pl
|
|
|
|
PKGCONFIG_OVERRIDE= lib/gnutls.pc.in
|
|
PKGCONFIG_OVERRIDE+= libdane/gnutls-dane.pc.in
|
|
|
|
MAKE_ENV+= RM=${RM:Q}
|
|
MAKE_ENV+= TZ=UTC
|
|
|
|
SUBST_CLASSES+= shell
|
|
SUBST_SED.shell+= -e 's,define POSIX_SHELL .*,define POSIX_SHELL "'${TOOLS_PATH.bash}'",'
|
|
SUBST_STAGE.shell= post-configure
|
|
SUBST_FILES.shell+= config.h
|
|
SUBST_MESSAGE.shell= Fixing path to bash.
|
|
|
|
EGDIR= ${PREFIX}/share/examples/gnutls
|
|
|
|
INSTALLATION_DIRS= ${EGDIR} include/gnutls
|
|
|
|
post-install:
|
|
cd ${WRKSRC}/doc/examples && ${INSTALL_DATA} *.c ${DESTDIR}${EGDIR}
|
|
|
|
.include "../../archivers/lzo/buildlink3.mk"
|
|
.include "../../converters/libiconv/buildlink3.mk"
|
|
.include "../../devel/gettext-lib/buildlink3.mk"
|
|
BUILDLINK_API_DEPENDS.gmp+= gmp>=5.0
|
|
.include "../../devel/gmp/buildlink3.mk"
|
|
.include "../../devel/libcfg+/buildlink3.mk"
|
|
# Avoid creating a fake zlib.pc, because if it does
|
|
# gnutls will add a Requires.private for it in its .pc file
|
|
CHECK_BUILTIN.zlib:=yes
|
|
.include "../../devel/zlib/buildlink3.mk"
|
|
# guile is useful for selftests, but bindings should be separate pkgs
|
|
#.include "../../lang/guile20/buildlink3.mk"
|
|
BUILDLINK_API_DEPENDS.libtasn1+= libtasn1>=4.9
|
|
.include "../../security/libtasn1/buildlink3.mk"
|
|
BUILDLINK_API_DEPENDS.nettle+= nettle>=3.4.1
|
|
.include "../../security/nettle/buildlink3.mk"
|
|
BUILDLINK_API_DEPENDS.p11-kit+= p11-kit>=0.23.1
|
|
.include "../../security/p11-kit/buildlink3.mk"
|
|
.include "../../textproc/libunistring/buildlink3.mk"
|
|
.include "../../mk/readline.buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|