c49050564f
krb5-118 was desupported by MIT when krb5-120 was released. CVE-2022-42898 now requires its accelerated removal from the tree. It is now flagged IGNORE until its removal on Nov 30, 2022. MFH: 2022Q4 Security: CVE-2022-42898
151 lines
4.6 KiB
Makefile
151 lines
4.6 KiB
Makefile
PORTNAME= krb5
|
|
PORTVERSION= 1.18.5
|
|
CATEGORIES= security
|
|
MASTER_SITES= http://web.mit.edu/kerberos/dist/${PORTNAME}/${PORTVERSION:C/^[0-9]*\.[0-9]*/&X/:C/X\.[0-9]*$//:C/X//}/
|
|
.if !defined(MASTERDIR)
|
|
PKGNAMESUFFIX= -118
|
|
.endif
|
|
|
|
DEPECATED= Desupported by MIT following 1.20
|
|
EXPIRY= 2022-11-30
|
|
IGNORE= Affected by CVE-2022-42898: integer overflow vulnerabilities in PAC parsing
|
|
|
|
PATCH_SITES= http://web.mit.edu/kerberos/advisories/
|
|
PATCH_DIST_STRIP= -p2
|
|
|
|
MAINTAINER= cy@FreeBSD.org
|
|
COMMENT= MIT implementation of RFC 4120 network authentication service
|
|
WWW= https://web.mit.edu/kerberos/
|
|
|
|
LICENSE= MIT
|
|
|
|
CONFLICTS= heimdal krb5 krb5-119 krb5-120
|
|
CONFLICTS_BUILD= boringssl
|
|
|
|
KERBEROSV_URL= http://web.mit.edu/kerberos/
|
|
USES= compiler:c++11-lang cpe gmake gettext-runtime \
|
|
gssapi:bootstrap,mit libtool:build localbase \
|
|
perl5 pkgconfig ssl
|
|
USE_CSTD= gnu99
|
|
USE_LDCONFIG= yes
|
|
USE_PERL5= build
|
|
GNU_CONFIGURE= yes
|
|
CONFIGURE_ARGS?= --enable-shared --without-system-verto \
|
|
--disable-rpath --localstatedir="${PREFIX}/var" \
|
|
--runstatedir="${PREFIX}/var/run"
|
|
CONFIGURE_ENV= INSTALL="${INSTALL}" INSTALL_LIB="${INSTALL_LIB}" YACC="${YACC}"
|
|
MAKE_ARGS= INSTALL="${INSTALL}" INSTALL_LIB="${INSTALL_LIB}"
|
|
|
|
CPE_VENDOR= mit
|
|
CPE_VERSION= 5-${PORTVERSION}
|
|
CPE_PRODUCT= kerberos
|
|
|
|
OPTIONS_DEFINE= EXAMPLES NLS KRB5_PDF KRB5_HTML DNS_FOR_REALM LDAP LMDB
|
|
OPTIONS_DEFAULT= KRB5_PDF KRB5_HTML READLINE
|
|
OPTIONS_RADIO= CMD_LINE_EDITING
|
|
OPTIONS_RADIO_CMD_LINE_EDITING= READLINE LIBEDIT
|
|
CMD_LINE_EDITING_DESC= Command line editing for kadmin and ktutil
|
|
KRB5_PDF_DESC= Install krb5 PDF documentation
|
|
KRB5_HTML_DESC= Install krb5 HTML documentation
|
|
DNS_FOR_REALM_DESC= Enable DNS lookups for Kerberos realm names
|
|
DNS_FOR_REALM_CONFIGURE_ENABLE= dns-for-realm
|
|
LDAP= Enable LDAP support
|
|
LDAP_USE= OPENLDAP=yes
|
|
LDAP_CONFIGURE_WITH= ldap
|
|
LMDB_DESC= OpenLDAP Lightning Memory-Mapped Database support
|
|
LMDB_CONFIGURE_WITH= lmdb
|
|
LMDB_LIB_DEPENDS= liblmdb.so:databases/lmdb
|
|
LMDB_IMPLIES= LDAP
|
|
NLS_USES= gettext
|
|
READLINE_USES= readline
|
|
READLINE_CONFIGURE_WITH=readline
|
|
LIBEDIT_USES= libedit
|
|
LIBEDIT_CONFIGURE_WITH= libedit
|
|
|
|
.if defined(KRB5_HOME)
|
|
PREFIX= ${KRB5_HOME}
|
|
.endif
|
|
CPPFLAGS+= -I${OPENSSLINC}
|
|
LDFLAGS+= -L${OPENSSLLIB}
|
|
|
|
USE_RC_SUBR= kpropd
|
|
OPTIONS_SUB= yes
|
|
WRKSRC_SUBDIR= src
|
|
PORTEXAMPLES= kdc.conf krb5.conf services.append
|
|
|
|
.include <bsd.port.options.mk>
|
|
|
|
# Fix up -Wl,-rpath in LDFLAGS
|
|
.if !empty(KRB5_HOME)
|
|
_RPATH= ${KRB5_HOME}/lib:
|
|
.else
|
|
_RPATH= ${LOCALBASE}/lib:
|
|
.endif
|
|
.if !empty(LDFLAGS:M-Wl,-rpath,*)
|
|
.for F in ${LDFLAGS:M-Wl,-rpath,*}
|
|
LDFLAGS:= -Wl,-rpath,${_RPATH}${F:S/-Wl,-rpath,//} \
|
|
${LDFLAGS:N-Wl,-rpath,*}
|
|
.endfor
|
|
.endif
|
|
|
|
.if defined(KRB5_HOME) && ${KRB5_HOME} != ${LOCALBASE}
|
|
BROKEN= LIB_DEPENDS when using KRB5_HOME is broken
|
|
.endif
|
|
|
|
.if defined(PROGRAM_TRANSFORM_NAME) && ${PROGRAM_TRANSFORM_NAME} != ""
|
|
CONFIGURE_ARGS+= --program-transform-name="${PROGRAM_TRANSFORM_NAME}"
|
|
.endif
|
|
|
|
HTML_DOC_DIR= ${WRKDIR}/${PORTNAME}-${PORTVERSION}/doc/html
|
|
PDF_DOC_DIR= ${WRKDIR}/${PORTNAME}-${PORTVERSION}/doc/pdf
|
|
|
|
.include <bsd.port.pre.mk>
|
|
|
|
post-install:
|
|
@${MKDIR} ${STAGEDIR}${PREFIX}/share/doc/krb5
|
|
@${SED} "s|%%PREFIX%%|${PREFIX}|" ${FILESDIR}/kdc.in > ${STAGEDIR}${PREFIX}/sbin/kdc; \
|
|
${CHMOD} +x ${STAGEDIR}${PREFIX}/sbin/kdc
|
|
# html documentation
|
|
.if ${PORT_OPTIONS:MKRB5_PDF}
|
|
pdf_files=`${FIND} ${PDF_DOC_DIR} ! -type d`
|
|
pdf_dirs=`${FIND} ${PDF_DOC_DIR} -type d`
|
|
for i in $${pdf_dirs}; do \
|
|
${MKDIR} ${STAGEDIR}${PREFIX}/share/doc/krb5/$${i}; \
|
|
done; \
|
|
for i in $${pdf_files}; do \
|
|
${INSTALL_DATA} $${pdf} ${PREFIX}/share/doc/krb5/$${i}; \
|
|
${ECHO_CMD} share/doc/krb5/$${i} >> ${TMPPLIST}; \
|
|
done
|
|
.endif
|
|
.if ${PORT_OPTIONS:MKRB5_HTML}
|
|
html_files=`${FIND} ${HTML_DOC_DIR} ! -type d | ${GREP} -v /_sources`
|
|
html_dirs=`${FIND} ${HTML_DOC_DIR} -type d | ${GREP} -v /_sources`
|
|
for i in $${html_dirs}; do \
|
|
${MKDIR} ${PREFIX}/share/doc/krb5/$${i}; \
|
|
done; \
|
|
for i in $${html_files}; do \
|
|
${INSTALL_DATA} $${i} ${PREFIX}/share/doc/krb5/$${i}; \
|
|
${ECHO_CMD} share/doc/krb5/$${i} >> ${TMPPLIST}; \
|
|
done
|
|
.endif
|
|
.if ${PORT_OPTIONS:MKRB5_PDF}
|
|
for i in $${pdf_dirs}; do \
|
|
${ECHO_CMD} @dir share/doc/krb5/$${i} >> ${TMPPLIST}; \
|
|
done | ${TAIL} -r >> ${TMPPLIST}
|
|
.endif
|
|
.if ${PORT_OPTIONS:MKRB5_HTML}
|
|
for i in $${html_dirs}; do \
|
|
${ECHO_CMD} @dir share/doc/krb5/$${i} >> ${TMPPLIST}; \
|
|
done | ${TAIL} -r >> ${TMPPLIST}
|
|
.endif
|
|
${ECHO_CMD} @dir share/doc/krb5 >> ${TMPPLIST}
|
|
|
|
post-install-LDAP-on:
|
|
${MKDIR} ${STAGEDIR}${DATADIR}
|
|
${INSTALL_DATA} ${WRKSRC}/plugins/kdb/ldap/libkdb_ldap/kerberos.schema \
|
|
${STAGEDIR}${DATADIR}
|
|
${INSTALL_DATA} ${WRKSRC}/plugins/kdb/ldap/libkdb_ldap/kerberos.ldif \
|
|
${STAGEDIR}${DATADIR}
|
|
|
|
.include <bsd.port.post.mk>
|