cpet/freebsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1078626db3
freebsd-ports/security/openssh/Makefile

103 lines
2.8 KiB
Makefile
Raw Normal View History

Say hello to OpenSSH! It's more secure, has a better license, and is actively maintained by members of the OpenBSD project.
1999-11-08 01:20:54 -05:00
# New ports collection makefile for: OpenSSH
# Date created: 7 October 1999
# Whom: green
#
# $FreeBSD$
#
Update with the new PORTNAME/PORTVERSION variables
2000-04-09 14:34:06 -04:00
PORTNAME= OpenSSH
Update to OpenSSH 2.1.0. They _FINALLY_ have distfiles, so now the CVS is not needed for the port. Big thanks to Issei-san for doing the majority of the work necessary for this upgrade! Submitted by: Issei Suzuki <issei@jp.FreeBSD.org>
2000-05-13 13:11:01 -04:00
PORTVERSION= 2.1.0
CATEGORIES= security net
MASTER_SITES= ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/ \
ftp://ftp.usa.openbsd.org/pub/OpenBSD/OpenSSH/ \
ftp://ftp1.se.openbsd.org/pub/OpenBSD/OpenSSH/
DISTNAME= openssh-2.1.0
EXTRACT_SUFX= .tgz
Say hello to OpenSSH! It's more secure, has a better license, and is actively maintained by members of the OpenBSD project.
1999-11-08 01:20:54 -05:00
MAINTAINER= green@FreeBSD.org
Clean things up by using the new knob for OpenSSL usage. Submitted by: kris
2000-02-12 18:55:48 -05:00
USE_OPENSSL= RSA
Say hello to OpenSSH! It's more secure, has a better license, and is actively maintained by members of the OpenBSD project.
1999-11-08 01:20:54 -05:00
Lots of OpenSSH changes, let's see if I remember them all. 1. Makefile cleanups, pkg/DESCR original comment (obrien) 2. sshd.sh and automatic host key generation when installed (Christian Weisgerber <naddy@unix-ag.uni-kl.de>) 3. Completely redone downloading procedure: * CVS is used to download the source (${CVS_CMD} defaults to cvs -z3) * MD5 checksums and a specific ${CVS_DATE} are used to get a specific source tree and verify it; ${CVS_DATE} and checksums can easily be rolled forward once tested. * Source is checked out to distfiles like other ports, and is only updated when ${CVS_DATE} changes. Rebuilding the port doesn't require another cvs co. Enjoy! Reviewed mostly by: obrien
1999-11-13 00:55:42 -05:00
.include <bsd.port.pre.mk>
Clean things up by using the new knob for OpenSSL usage. Submitted by: kris
2000-02-12 18:55:48 -05:00
CRYPTOLIBS= -L${OPENSSLLIB} -lcrypto
.if defined(OPENSSL_RSAREF)
CRYPTOLIBS+= -lRSAglue -L${LOCALBASE}/lib -lrsaref
Tell the user that they're doing something wrong when USA_RESIDENT is not set.
2000-02-10 07:23:49 -05:00
.endif
Lots of OpenSSH changes, let's see if I remember them all. 1. Makefile cleanups, pkg/DESCR original comment (obrien) 2. sshd.sh and automatic host key generation when installed (Christian Weisgerber <naddy@unix-ag.uni-kl.de>) 3. Completely redone downloading procedure: * CVS is used to download the source (${CVS_CMD} defaults to cvs -z3) * MD5 checksums and a specific ${CVS_DATE} are used to get a specific source tree and verify it; ${CVS_DATE} and checksums can easily be rolled forward once tested. * Source is checked out to distfiles like other ports, and is only updated when ${CVS_DATE} changes. Rebuilding the port doesn't require another cvs co. Enjoy! Reviewed mostly by: obrien
1999-11-13 00:55:42 -05:00
# Here, MANDIR is concetenated to DESTDIR which all forms the man install dir...
Change a MAKE_ENV= to MAKE_ENV+=. This may fix problems people on -STABLE are reporting.
2000-02-15 23:52:59 -05:00
MAKE_ENV+= DESTDIR=${PREFIX} MANDIR=/man/man CRYPTOLIBS="${CRYPTOLIBS}"
- remove me from another MAINTAINER - add 'ipv6' on CATEGORIES - use ${OSVERSION} instead of ${USE_INET6} for checking getaddrinfo() existence. - fix broken ${ECHO_MSG} - avoid duplicate copying rcmd.c
2000-01-18 06:18:25 -05:00
.if ${OSVERSION} < 400014
MAKE_ENV+= COMPAT_GETADDRINFO=yes
the condition for USE_INET6 setting was opposite.
2000-02-01 12:04:02 -05:00
.else
Simplify IPv6 checking. Suggested by: green
2000-02-08 22:28:48 -05:00
MAKE_ENV+= INET6FLAGS=-DINET6
- remove me from another MAINTAINER - add 'ipv6' on CATEGORIES - use ${OSVERSION} instead of ${USE_INET6} for checking getaddrinfo() existence. - fix broken ${ECHO_MSG} - avoid duplicate copying rcmd.c
2000-01-18 06:18:25 -05:00
.endif
Quite a bit of change to OpenSSH made: Add "/usr/local/bin" to _PATH_STDPATH (makes scp work inbound, for instance.) Fetch OpenSSH from OpenBSD's src tree. This uses a script and ftp(1). Add strlcpy.c to ssh/lib, so this port should build on 3.X now. Make TCP_WRAPPERS conditional on /usr/include/tcpd.h like the PR, so it should build on older RELEASEs without TCP Wrappers. The PR is still open because I am taking more from it. PR: ports/14653
1999-11-11 09:33:23 -05:00
.if !exists(/usr/include/tcpd.h)
Enable TCP wrapper support (conditionalized to turn off if tcpd.h is nonexistant). Also, add the Makefile hooks for AFS, Kerberos, and S/Key.
1999-11-15 01:18:46 -05:00
MAKE_ENV+= TCP_WRAPPERS=no
.endif
.if defined(AFS) && ${AFS} == YES
MAKE_ENV+= AFS=yes
.endif
.if defined(KERBEROS) && ${KERBEROS} == YES
MAKE_ENV+= KERBEROS=yes
.endif
Add the PAM SSH RSA key authentication module. For example, you can add, "login auth sufficient pam_ssh.so" to your /etc/pam.conf, and users with a ~/.ssh/identity can login(1) with their SSH key :) PR: 15158 Submitted by: Andrew J. Korty <ajk@waterspout.com> Reviewed by: obrien
1999-11-29 02:09:45 -05:00
.if exists(/usr/include/security/pam_modules.h)
PAM?= yes
.else
PAM= no
.endif
MAKE_ENV+= PAM=${PAM}
Enable TCP wrapper support (conditionalized to turn off if tcpd.h is nonexistant). Also, add the Makefile hooks for AFS, Kerberos, and S/Key.
1999-11-15 01:18:46 -05:00
.if defined(SKEY) && ${SKEY} == YES
MAKE_ENV+= SKEY=yes
Quite a bit of change to OpenSSH made: Add "/usr/local/bin" to _PATH_STDPATH (makes scp work inbound, for instance.) Fetch OpenSSH from OpenBSD's src tree. This uses a script and ftp(1). Add strlcpy.c to ssh/lib, so this port should build on 3.X now. Make TCP_WRAPPERS conditional on /usr/include/tcpd.h like the PR, so it should build on older RELEASEs without TCP Wrappers. The PR is still open because I am taking more from it. PR: ports/14653
1999-11-11 09:33:23 -05:00
.endif
Say hello to OpenSSH! It's more secure, has a better license, and is actively maintained by members of the OpenBSD project.
1999-11-08 01:20:54 -05:00
WRKSRC= ${WRKDIR}/ssh
Update to OpenSSH 2.1.0. They _FINALLY_ have distfiles, so now the CVS is not needed for the port. Big thanks to Issei-san for doing the majority of the work necessary for this upgrade! Submitted by: Issei Suzuki <issei@jp.FreeBSD.org>
2000-05-13 13:11:01 -04:00
post-extract:
Update the CVS_DATE. This brings in support for TIS authentication, obsoleting a couple patches (it's the same code, though, except for additions). This also brings in KNFization of everything (please hold the cheering down :) and made me reroll all my patches. My patches have been almost entirely rewritten. The places are the same, but the code's rewritten. It fits with the style (KNF) now, and looks better. I've also added strlcat.c to the build, which, just like strlcpy.c, is necessary for compatibility with older libcs. After strlcat() snuck into the OpenSSH code recently, this would prevent OpenSSH from building on (e.g.) FreeBSD 3.2. Adding it to ssh/lib/ makes it work yet again :)
1999-11-23 22:36:23 -05:00
@${CP} ${FILESDIR}/strlcat.c ${FILESDIR}/strlcpy.c ${WRKSRC}/lib/
Update to OpenSSH 2.1.0. They _FINALLY_ have distfiles, so now the CVS is not needed for the port. Big thanks to Issei-san for doing the majority of the work necessary for this upgrade! Submitted by: Issei Suzuki <issei@jp.FreeBSD.org>
2000-05-13 13:11:01 -04:00
@${CP} ${FILESDIR}/sshd.sh ${WRKSRC}/
- remove me from another MAINTAINER - add 'ipv6' on CATEGORIES - use ${OSVERSION} instead of ${USE_INET6} for checking getaddrinfo() existence. - fix broken ${ECHO_MSG} - avoid duplicate copying rcmd.c
2000-01-18 06:18:25 -05:00
.if ${OSVERSION} < 400014
Update to a more current OpenSSH, including... IPv6 support!! Thank you very much, Sumikawa san. Submitted by: Munechika SUMIKAWA <sumikawa@ebina.hitachi.co.jp>
2000-01-13 18:22:17 -05:00
@${CP} ${FILESDIR}/getaddrinfo.c ${FILESDIR}/name6.c ${WRKSRC}/lib/
@${CP} ${FILESDIR}/bindresvport.c ${FILESDIR}/rcmd.c ${WRKSRC}/lib/
- remove me from another MAINTAINER - add 'ipv6' on CATEGORIES - use ${OSVERSION} instead of ${USE_INET6} for checking getaddrinfo() existence. - fix broken ${ECHO_MSG} - avoid duplicate copying rcmd.c
2000-01-18 06:18:25 -05:00
@${CP} ${FILESDIR}/getnameinfo.c ${WRKSRC}/lib/
Update to a more current OpenSSH, including... IPv6 support!! Thank you very much, Sumikawa san. Submitted by: Munechika SUMIKAWA <sumikawa@ebina.hitachi.co.jp>
2000-01-13 18:22:17 -05:00
@${CP} ${FILESDIR}/netdb.h ${WRKSRC}/
.endif
Add the PAM SSH RSA key authentication module. For example, you can add, "login auth sufficient pam_ssh.so" to your /etc/pam.conf, and users with a ~/.ssh/identity can login(1) with their SSH key :) PR: 15158 Submitted by: Andrew J. Korty <ajk@waterspout.com> Reviewed by: obrien
1999-11-29 02:09:45 -05:00
@${MKDIR} ${WRKSRC}/pam_ssh
@${CP} ${FILESDIR}/pam_ssh_Makefile ${WRKSRC}/pam_ssh/Makefile
@${CP} ${FILESDIR}/pam_ssh.c ${WRKSRC}/pam_ssh/
Quite a bit of change to OpenSSH made: Add "/usr/local/bin" to _PATH_STDPATH (makes scp work inbound, for instance.) Fetch OpenSSH from OpenBSD's src tree. This uses a script and ftp(1). Add strlcpy.c to ssh/lib, so this port should build on 3.X now. Make TCP_WRAPPERS conditional on /usr/include/tcpd.h like the PR, so it should build on older RELEASEs without TCP Wrappers. The PR is still open because I am taking more from it. PR: ports/14653
1999-11-11 09:33:23 -05:00
Lots of OpenSSH changes, let's see if I remember them all. 1. Makefile cleanups, pkg/DESCR original comment (obrien) 2. sshd.sh and automatic host key generation when installed (Christian Weisgerber <naddy@unix-ag.uni-kl.de>) 3. Completely redone downloading procedure: * CVS is used to download the source (${CVS_CMD} defaults to cvs -z3) * MD5 checksums and a specific ${CVS_DATE} are used to get a specific source tree and verify it; ${CVS_DATE} and checksums can easily be rolled forward once tested. * Source is checked out to distfiles like other ports, and is only updated when ${CVS_DATE} changes. Rebuilding the port doesn't require another cvs co. Enjoy! Reviewed mostly by: obrien
1999-11-13 00:55:42 -05:00
post-patch:
Update to OpenSSH 2.1.0. They _FINALLY_ have distfiles, so now the CVS is not needed for the port. Big thanks to Issei-san for doing the majority of the work necessary for this upgrade! Submitted by: Issei Suzuki <issei@jp.FreeBSD.org>
2000-05-13 13:11:01 -04:00
@${PERL} -pi -e 's:__PREFIX__:${PREFIX}:g' ${WRKSRC}/ssh.h \
${WRKSRC}/sshd_config ${WRKSRC}/pam_ssh/pam_ssh.c \
${WRKSRC}/sshd.sh
Lots of OpenSSH changes, let's see if I remember them all. 1. Makefile cleanups, pkg/DESCR original comment (obrien) 2. sshd.sh and automatic host key generation when installed (Christian Weisgerber <naddy@unix-ag.uni-kl.de>) 3. Completely redone downloading procedure: * CVS is used to download the source (${CVS_CMD} defaults to cvs -z3) * MD5 checksums and a specific ${CVS_DATE} are used to get a specific source tree and verify it; ${CVS_DATE} and checksums can easily be rolled forward once tested. * Source is checked out to distfiles like other ports, and is only updated when ${CVS_DATE} changes. Rebuilding the port doesn't require another cvs co. Enjoy! Reviewed mostly by: obrien
1999-11-13 00:55:42 -05:00
Add the PAM SSH RSA key authentication module. For example, you can add, "login auth sufficient pam_ssh.so" to your /etc/pam.conf, and users with a ~/.ssh/identity can login(1) with their SSH key :) PR: 15158 Submitted by: Andrew J. Korty <ajk@waterspout.com> Reviewed by: obrien
1999-11-29 02:09:45 -05:00
.if ${PAM} == yes
PLIST= ${WRKDIR}/PLIST
do-configure:
@${CP} ${PKGDIR}/PLIST ${PLIST}
@${ECHO} "@cwd /usr" >> ${PLIST}
@${ECHO} "lib/pam_ssh.so" >> ${PLIST}
.endif
Change around sshd.sh for the last time.
1999-11-19 22:42:05 -05:00
post-install:
Clean up some shell scripting and replace it with proper Makefile syntax. Run ssh-keygen for ssh_host_key on port install, not just package install.
1999-11-22 17:45:47 -05:00
.if !exists(${PREFIX}/etc/ssh_host_key)
Update to OpenSSH 2.1.0. They _FINALLY_ have distfiles, so now the CVS is not needed for the port. Big thanks to Issei-san for doing the majority of the work necessary for this upgrade! Submitted by: Issei Suzuki <issei@jp.FreeBSD.org>
2000-05-13 13:11:01 -04:00
@${ECHO_MSG} ">> Generating an RSA secret host key."
Correct ssh-keygen usage. Submitted by: Larry Baird <lab@gta.com>
1999-11-22 22:04:05 -05:00
${PREFIX}/bin/ssh-keygen -N "" -f ${PREFIX}/etc/ssh_host_key
Clean up some shell scripting and replace it with proper Makefile syntax. Run ssh-keygen for ssh_host_key on port install, not just package install.
1999-11-22 17:45:47 -05:00
.endif
Update to OpenSSH 2.1.0. They _FINALLY_ have distfiles, so now the CVS is not needed for the port. Big thanks to Issei-san for doing the majority of the work necessary for this upgrade! Submitted by: Issei Suzuki <issei@jp.FreeBSD.org>
2000-05-13 13:11:01 -04:00
.if !exists(${PREFIX}/etc/ssh_host_dsa_key)
@${ECHO_MSG} ">> Generating a DSA secret host key."
${PREFIX}/bin/ssh-keygen -d -N "" -f ${PREFIX}/etc/ssh_host_dsa_key
.endif
Change around sshd.sh for the last time.
1999-11-19 22:42:05 -05:00
.if !exists(${PREFIX}/etc/rc.d/sshd.sh)
Update to OpenSSH 2.1.0. They _FINALLY_ have distfiles, so now the CVS is not needed for the port. Big thanks to Issei-san for doing the majority of the work necessary for this upgrade! Submitted by: Issei Suzuki <issei@jp.FreeBSD.org>
2000-05-13 13:11:01 -04:00
@${NSTALL_SCRIPT} ${WRKSRC}/sshd.sh ${PREFIX}/etc/rc.d/
Change around sshd.sh for the last time.
1999-11-19 22:42:05 -05:00
.endif
Clean up some shell scripting and replace it with proper Makefile syntax. Run ssh-keygen for ssh_host_key on port install, not just package install.
1999-11-22 17:45:47 -05:00
.if !exists(${PREFIX}/etc/ssh_config) && !exists(${PREFIX}/etc/sshd_config)
@cd ${WRKSRC}; \
${MAKE} DESTDIR=${PREFIX} distribution
.else
@${ECHO_MSG} ">> ${PREFIX}/etc/ssh{,d}_config exists, not being replaced!"
@${ECHO_MSG} ">> If this is left over from another version of SSH, you will"
@${ECHO_MSG} ">> need to update it to work with OpenSSH."
.endif
Lots of OpenSSH changes, let's see if I remember them all. 1. Makefile cleanups, pkg/DESCR original comment (obrien) 2. sshd.sh and automatic host key generation when installed (Christian Weisgerber <naddy@unix-ag.uni-kl.de>) 3. Completely redone downloading procedure: * CVS is used to download the source (${CVS_CMD} defaults to cvs -z3) * MD5 checksums and a specific ${CVS_DATE} are used to get a specific source tree and verify it; ${CVS_DATE} and checksums can easily be rolled forward once tested. * Source is checked out to distfiles like other ports, and is only updated when ${CVS_DATE} changes. Rebuilding the port doesn't require another cvs co. Enjoy! Reviewed mostly by: obrien
1999-11-13 00:55:42 -05:00
Don't include bsd.port.pre.mk twice. This usually is caused by first including bsd.port.pre.mk and then later including bsd.port.mk (the latter of which of course should be bsd.port.post.mk).
2000-01-07 11:40:17 -05:00
.include <bsd.port.post.mk>
Reference in New Issue Copy Permalink