openbsd-ports/security/stunnel/Makefile

# $OpenBSD: Makefile,v 1.72 2014/03/24 21:44:09 dcoppa Exp $

COMMENT=	SSL encryption wrapper for standard network daemons

DISTNAME=	stunnel-5.00
REVISION=	0
CATEGORIES=	security

MAINTAINER=	Gleydson Soares <gsoares@openbsd.org>

# GPLv2+ with OpenSSL exemption
PERMIT_PACKAGE_CDROM=	Yes

WANTLIB += c crypto pthread ssl util z

HOMEPAGE=	http://www.stunnel.org/

# Origin server: https://www.stunnel.org/downloads/archive/5.x/
# Doesn't currently work with ftp(1) ssl support.
MASTER_SITES=	http://ftp.nluug.nl/pub/networking/stunnel/archive/5.x/ \
		http://mirror.bit.nl/stunnel/archive/5.x/ \
		ftp://ftp.stunnel.org/stunnel/archive/5.x/

SEPARATE_BUILD=		Yes
CONFIGURE_STYLE=	gnu
CONFIGURE_ARGS+=	${CONFIGURE_SHARED} \
			--with-ssl=/usr \
			--with-threads=fork \
			--disable-libwrap
MODGNU_CONFIG_GUESS_DIRS=${WRKSRC}/auto
NO_TEST=		Yes
USE_GMAKE=		Yes
USE_GROFF =		Yes

do-install:
	${INSTALL_PROGRAM} ${WRKBUILD}/src/stunnel ${PREFIX}/sbin
	${INSTALL_MAN} ${WRKSRC}/doc/stunnel.8 ${PREFIX}/man/man8
	${INSTALL_DATA_DIR} ${PREFIX}/share/examples/stunnel
	${INSTALL_DATA} ${WRKBUILD}/tools/stunnel.conf-sample \
		${PREFIX}/share/examples/stunnel

.include <bsd.port.mk>
Disable libwrap support. Ok gsoares@ (maintainer) 2014-03-24 21:44:09 +00:00			`# $OpenBSD: Makefile,v 1.72 2014/03/24 21:44:09 dcoppa Exp $`
move COMMENT into Makefile & touch NEED_VERSION 2001-03-24 19:55:27 +00:00
Remove surrounding quotes in NO_REGRESS/COMMENT/PERMIT_ From Darrin Chandler 2007-09-15 23:29:57 +00:00			`COMMENT= SSL encryption wrapper for standard network daemons`
SSL encryption wrapper for standard network daemons 1999-12-05 18:25:54 +00:00
SECURITY update to stunnel 5.00, fixes an issue similar to libssh and postgresql where a forked child process doesn't correctly reset RNG state. See CVE-2014-0016, http://www.openwall.com/lists/oss-security/2014/03/05/1 ok gsoares@ Note from upstream release notes: "stunnel 5.00 disables some features previously enabled by default. Users should review whether the new defaults are appropriate for their particular deployments." These changes include: FIPS mode, pid file generation and libwrap disabled by default, and the default cipher list has been updated to "HIGH:MEDIUM:+3DES:+DH:!aNULL:!SSLv2". 2014-03-17 13:03:11 +00:00			`DISTNAME= stunnel-5.00`
Disable libwrap support. Ok gsoares@ (maintainer) 2014-03-24 21:44:09 +00:00			`REVISION= 0`
SSL encryption wrapper for standard network daemons 1999-12-05 18:25:54 +00:00			`CATEGORIES= security`

- update to 2.54 - take maintainership OK sthen@ (former maintainer) 2012-10-20 15:37:40 +00:00			`MAINTAINER= Gleydson Soares <gsoares@openbsd.org>`
Sanitize some @unexec/@extraunexec calls to rm: move them up in the PLIST and delete everything under the @sample'd directory instead of the directory itself to prevent a warning from pkg_delete(1) trying to remove a non existing directory and to help preventing left-over files and directories. 2011-05-11 08:24:40 +00:00
update to stunnel 4.43, ok jakob@, reads good to william@ - take maintainer, suggested by jakob - pid is now created inside the chroot jail, note you may want to set "pid = /stunnel.pid" in config. 2011-09-15 00:42:21 +00:00			`# GPLv2+ with OpenSSL exemption`
remove fake add comment to PLIST CONFIGURE_STYLE cleanup 2000-06-20 19:36:24 +00:00			`PERMIT_PACKAGE_CDROM= Yes`
update to stunnel 4.43, ok jakob@, reads good to william@ - take maintainer, suggested by jakob - pid is now created inside the chroot jail, note you may want to set "pid = /stunnel.pid" in config. 2011-09-15 00:42:21 +00:00
Disable libwrap support. Ok gsoares@ (maintainer) 2014-03-24 21:44:09 +00:00			`WANTLIB += c crypto pthread ssl util z`
Update to v3.8 Add licensing 2000-03-05 22:55:44 +00:00
update to v4.05 add chroot/privdrop from Michael Schubert 2004-02-16 12:33:18 +00:00			`HOMEPAGE= http://www.stunnel.org/`
Update to v3.8 Add licensing 2000-03-05 22:55:44 +00:00
SECURITY update to stunnel 5.00, fixes an issue similar to libssh and postgresql where a forked child process doesn't correctly reset RNG state. See CVE-2014-0016, http://www.openwall.com/lists/oss-security/2014/03/05/1 ok gsoares@ Note from upstream release notes: "stunnel 5.00 disables some features previously enabled by default. Users should review whether the new defaults are appropriate for their particular deployments." These changes include: FIPS mode, pid file generation and libwrap disabled by default, and the default cipher list has been updated to "HIGH:MEDIUM:+3DES:+DH:!aNULL:!SSLv2". 2014-03-17 13:03:11 +00:00			`# Origin server: https://www.stunnel.org/downloads/archive/5.x/`
			`# Doesn't currently work with ftp(1) ssl support.`
			`MASTER_SITES= http://ftp.nluug.nl/pub/networking/stunnel/archive/5.x/ \`
			`http://mirror.bit.nl/stunnel/archive/5.x/ \`
			`ftp://ftp.stunnel.org/stunnel/archive/5.x/`
SSL encryption wrapper for standard network daemons 1999-12-05 18:25:54 +00:00
Change SEPARATE_BUILD=(concurrent\|simple) to Yes; bsd.port.mk doesn't make a distinction between these. ok aja@ dcoppa@ 2012-03-29 13:38:12 +00:00			`SEPARATE_BUILD= Yes`
remove fake add comment to PLIST CONFIGURE_STYLE cleanup 2000-06-20 19:36:24 +00:00			`CONFIGURE_STYLE= gnu`
Garbage collect the /dev/arandom patches. from Brad ok landry@ sthen@ 2012-03-08 12:13:00 +00:00			`CONFIGURE_ARGS+= ${CONFIGURE_SHARED} \`
upgrade to stunnel v4.03. summary of new features: - new user interface (config file) - single daemon can listen on multiple ports - delayed DNS lookup added - configurable timeouts - chroot support - private key file for a certificate can be kept in a separate file 2002-10-30 11:10:35 +00:00			`--with-ssl=/usr \`
Disable libwrap support. Ok gsoares@ (maintainer) 2014-03-24 21:44:09 +00:00			`--with-threads=fork \`
			`--disable-libwrap`
fix up MODGNU_CONFIG_GUESS_DIRS 2004-08-04 14:51:31 +00:00			`MODGNU_CONFIG_GUESS_DIRS=${WRKSRC}/auto`
PERMIT_* / REGRESS->TEST sweep 2013-03-11 11:35:43 +00:00			`NO_TEST= Yes`
stunnel 4.06 2004-12-27 08:24:44 +00:00			`USE_GMAKE= Yes`
new depends 2010-11-20 17:22:40 +00:00			`USE_GROFF = Yes`
Update to v3.8 Add licensing 2000-03-05 22:55:44 +00:00
SSL encryption wrapper for standard network daemons 1999-12-05 18:25:54 +00:00			`do-install:`
upgrade to stunnel v4.03. summary of new features: - new user interface (config file) - single daemon can listen on multiple ports - delayed DNS lookup added - configurable timeouts - chroot support - private key file for a certificate can be kept in a separate file 2002-10-30 11:10:35 +00:00			`${INSTALL_PROGRAM} ${WRKBUILD}/src/stunnel ${PREFIX}/sbin`
stunnel 4.06 2004-12-27 08:24:44 +00:00			`${INSTALL_MAN} ${WRKSRC}/doc/stunnel.8 ${PREFIX}/man/man8`
forgotten share subdir; nikolay sturm 2002-10-31 18:02:36 +00:00			`${INSTALL_DATA_DIR} ${PREFIX}/share/examples/stunnel`
upgrade to stunnel v4.03. summary of new features: - new user interface (config file) - single daemon can listen on multiple ports - delayed DNS lookup added - configurable timeouts - chroot support - private key file for a certificate can be kept in a separate file 2002-10-30 11:10:35 +00:00			`${INSTALL_DATA} ${WRKBUILD}/tools/stunnel.conf-sample \`
forgotten share subdir; nikolay sturm 2002-10-31 18:02:36 +00:00			`${PREFIX}/share/examples/stunnel`
SSL encryption wrapper for standard network daemons 1999-12-05 18:25:54 +00:00
			`.include <bsd.port.mk>`