security/pam_ocra: Fix SSL handling especially wrt FreeBSD 9

The SSL flags were moved to show unconditionally as they are always
correct.  The WITH_OPENSSL_PORT=yes variable was replaced with an
SSL version check so that the port is marked broken if built on
FreeBSD 9 with the base OpenSSL libary selected.  This fixes other
values of SSL_DEFAULT on all platforms.

Approved by:	SSL blanket
This commit is contained in:
John Marino 2016-09-11 04:20:19 +00:00
parent d449471940
commit 303901a9cb
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=421788

View File

@ -10,25 +10,23 @@ COMMENT= RFC6287 (OCRA) PAM module
LICENSE= BSD2CLAUSE
USES= uidfix
USE_OPENSSL= yes
USES= ssl uidfix
USE_GITHUB= yes
GH_ACCOUNT= sg2342
CFLAGS+= -I${OPENSSLINC}
LDFLAGS+= -L${OPENSSLLIB}
PLIST_FILES= lib/pam_ocra.so \
lib/pam_ocra.so.0 \
sbin/ocra_tool \
man/man8/pam_ocra.8.gz \
man/man8/ocra_tool.8.gz
.include <bsd.port.options.mk>
.include <bsd.port.pre.mk>
.if ${OSVERSION} < 1000015
WITH_OPENSSL_PORT= yes
CFLAGS+= -I${OPENSSLINC}
LDFLAGS+= -L${OPENSSLLIB}
.if ${SSL_DEFAULT} == base
BROKEN_FreeBSD_9= does not build with 9.x base OpenSSL
.endif
.include <bsd.port.mk>
.include <bsd.port.post.mk>