openbsd-ports/www/squid/Makefile

# $OpenBSD: Makefile,v 1.83 2006/11/13 02:11:39 brad Exp $

COMMENT=	"WWW and FTP proxy cache and accelerator"

DISTNAME=	squid-2.6.STABLE5
CATEGORIES=	www
MASTER_SITES=	${HOMEPAGE}Versions/v2/2.6/
DIST_SUBDIR=	squid

HOMEPAGE=	http://www.squid-cache.org/

MAINTAINER=	Brad Smith <brad@openbsd.org>

# GPL
PERMIT_PACKAGE_CDROM=	Yes
PERMIT_PACKAGE_FTP=	Yes
PERMIT_DISTFILES_CDROM=	Yes
PERMIT_DISTFILES_FTP=	Yes
WANTLIB=		c crypto m ssl

SQUIDDIR?=	/var/squid
SUBST_VARS=	SQUIDDIR

FLAVORS=	transparent snmp
FLAVOR?=

.include <bsd.own.mk>

USE_GCC3?= No

# optimization workaround for gcc 2.95
.if ${USE_GCC3:L} == "no"
PATCH_LIST=     patch-* gcc-*
.endif

SEPARATE_BUILD=	concurrent
AUTOCONF_VERSION= 2.59
CONFIGURE_STYLE= autoconf
MODGNU_CONFIG_GUESS_DIRS=${WRKSRC}/cfgaux
CONFIGURE_ARGS+=--datadir="${PREFIX}/share/squid" \
		--enable-auth="basic digest" \
		--enable-arp-acl \
		--enable-basic-auth-helpers="NCSA YP" \
		--enable-digest-auth-helpers="password" \
		--enable-external-acl-helpers="ip_user unix_group" \
		--enable-removal-policies="lru heap" \
		--enable-ssl \
		--enable-storeio="ufs diskd null" \
		--localstatedir="${SQUIDDIR}"

.if ${FLAVOR:L:Mtransparent}
CONFIGURE_ARGS+=--enable-pf-transparent
.endif

.if${FLAVOR:L:Msnmp}
CONFIGURE_ARGS+=--enable-snmp
.endif

post-install:
	@chown -R ${SHAREOWN}:${SHAREGRP} ${PREFIX}/share/examples/squid
	@find ${PREFIX}/share/examples/squid/errors \
		-name '*.orig' -print0 | xargs -0 rm -f

.include <bsd.port.mk>
upgrade to 2.6.STABLE5 2006-11-13 02:11:39 +00:00			`# $OpenBSD: Makefile,v 1.83 2006/11/13 02:11:39 brad Exp $`
www: integrate COMMENT, bump NEED_VERSION. 2001-05-06 04:22:45 +00:00
			`COMMENT= "WWW and FTP proxy cache and accelerator"`
squid port from d@openbsd.org 1998-09-14 01:36:52 +00:00
upgrade to 2.6.STABLE5 2006-11-13 02:11:39 +00:00			`DISTNAME= squid-2.6.STABLE5`
squid port from d@openbsd.org 1998-09-14 01:36:52 +00:00			`CATEGORIES= www`
upgrade to 2.6.STABLE4 Squid 2.6 supports kqueue and hw accelerated SSL via OpenSSL, as well as many other improvements. 2006-10-03 05:00:49 +00:00			`MASTER_SITES= ${HOMEPAGE}Versions/v2/2.6/`
- bump NEED_VERSION - fix MASTER_SITES URLs, squid.nlanr.net -> www.squid-cache.org - use DIST_SUBDIR - YES -> Yes - remove unnecessary CONFIGURE_ARGS option - remove STRIP variable since INSTALL_PROGRAM has used INSTALL_STRIP for awhile now, better fix coming soon 2000-03-30 21:59:26 +00:00			`DIST_SUBDIR= squid`
squid port from d@openbsd.org 1998-09-14 01:36:52 +00:00
correct HOMEPAGE URL 2000-06-10 06:27:25 +00:00			`HOMEPAGE= http://www.squid-cache.org/`

add name to MAINTAINER 2000-09-24 07:03:59 +00:00			`MAINTAINER= Brad Smith <brad@openbsd.org>`
squid port from d@openbsd.org 1998-09-14 01:36:52 +00:00
upgrade to Squid 2.5.STABLE3 throw in the SSL gatewaying support, this is not enabled by default. 2003-07-07 17:44:43 +00:00			`# GPL`
- bump NEED_VERSION - fix MASTER_SITES URLs, squid.nlanr.net -> www.squid-cache.org - use DIST_SUBDIR - YES -> Yes - remove unnecessary CONFIGURE_ARGS option - remove STRIP variable since INSTALL_PROGRAM has used INSTALL_STRIP for awhile now, better fix coming soon 2000-03-30 21:59:26 +00:00			`PERMIT_PACKAGE_CDROM= Yes`
			`PERMIT_PACKAGE_FTP= Yes`
			`PERMIT_DISTFILES_CDROM= Yes`
			`PERMIT_DISTFILES_FTP= Yes`
- Kill DEINSTALL - Replace INSTALL with @samples, @execs, etc. - Add WANTLIB marker - Bump PKGNAME 2004-12-07 19:33:33 +00:00			`WANTLIB= c crypto m ssl`
gpl licenses 2000-02-12 08:02:07 +00:00
upgrade to Squid 2.5.PRE4 - The port now runs as uid/gid of nobody:nobody instead of www:www - This needs some testing, especially the transparent proxy support for PF 2002-02-20 01:17:03 +00:00			`SQUIDDIR?= /var/squid`
			`SUBST_VARS= SQUIDDIR`
add 3 distribution patches; squid-2.2.stable5-newlines_in_auth.patch After decoding the base64 encoded "user:password" pair given by the client, squid doesn't strip out any '\n' found in the resulting string. Given such a string, any external authenticator will receive two lines instead of one, and most probably send two results. Now, any subsequent authentification exchange will have its answer shifted by one. Therefore, a malicious user can gain access to sites they should not have access to. squid-2.2.stable5-ipcache_negative.patch The IP cache immediately removes entries that should be negatively cached. This appears to be due to some changes made for retrying failed connections. squid-2.2.stable5-no_cache.patch A missing no_cache list is treated the same as no_cache deny all. 1999-12-09 19:48:17 +00:00
- add 2 more distribution patches - add snmp FLAVOR from Joel CARNAT <joel at carnat dot net> - add some auth types and auth/acl helpers - add NTLM auth SMB patch even though the default port does NOT compile this support in 2004-06-11 08:00:35 +00:00			`FLAVORS= transparent snmp`
upgrade to Squid 2.5.PRE4 - The port now runs as uid/gid of nobody:nobody instead of www:www - This needs some testing, especially the transparent proxy support for PF 2002-02-20 01:17:03 +00:00			`FLAVOR?=`
add heap FLAVOR, enables alternate cache object replacement algorithms. -- Requested by: J Shoemaker <shoemaker@softhome.net> 2001-01-17 02:38:20 +00:00
- add some distribution patches. From: Robert Nagy <thuglife at bsd dot hu> - only apply optimization workaround for gcc if using 2.95 2004-04-13 00:40:47 +00:00			`.include <bsd.own.mk>`

			`USE_GCC3?= No`

			`# optimization workaround for gcc 2.95`
			`.if ${USE_GCC3:L} == "no"`
			`PATCH_LIST= patch-* gcc-*`
			`.endif`

enable SEPARATE_BUILD 2002-03-16 18:18:30 +00:00			`SEPARATE_BUILD= concurrent`
upgrade to 2.6.STABLE4 Squid 2.6 supports kqueue and hw accelerated SSL via OpenSSL, as well as many other improvements. 2006-10-03 05:00:49 +00:00			`AUTOCONF_VERSION= 2.59`
upgrade to Squid 2.5.PRE4 - The port now runs as uid/gid of nobody:nobody instead of www:www - This needs some testing, especially the transparent proxy support for PF 2002-02-20 01:17:03 +00:00			`CONFIGURE_STYLE= autoconf`
fix up MODGNU_CONFIG_GUESS_DIRS 2004-08-04 16:12:14 +00:00			`MODGNU_CONFIG_GUESS_DIRS=${WRKSRC}/cfgaux`
- add 2 more distribution patches - add snmp FLAVOR from Joel CARNAT <joel at carnat dot net> - add some auth types and auth/acl helpers - add NTLM auth SMB patch even though the default port does NOT compile this support in 2004-06-11 08:00:35 +00:00			`CONFIGURE_ARGS+=--datadir="${PREFIX}/share/squid" \`
			`--enable-auth="basic digest" \`
upgrade to 2.6.STABLE4 Squid 2.6 supports kqueue and hw accelerated SSL via OpenSSL, as well as many other improvements. 2006-10-03 05:00:49 +00:00			`--enable-arp-acl \`
- add 2 more distribution patches - add snmp FLAVOR from Joel CARNAT <joel at carnat dot net> - add some auth types and auth/acl helpers - add NTLM auth SMB patch even though the default port does NOT compile this support in 2004-06-11 08:00:35 +00:00			`--enable-basic-auth-helpers="NCSA YP" \`
			`--enable-digest-auth-helpers="password" \`
			`--enable-external-acl-helpers="ip_user unix_group" \`
			`--enable-removal-policies="lru heap" \`
upgrade to Squid 2.5.STABLE3 throw in the SSL gatewaying support, this is not enabled by default. 2003-07-07 17:44:43 +00:00			`--enable-ssl \`
upgrade to 2.6.STABLE4 Squid 2.6 supports kqueue and hw accelerated SSL via OpenSSL, as well as many other improvements. 2006-10-03 05:00:49 +00:00			`--enable-storeio="ufs diskd null" \`
enable SEPARATE_BUILD 2002-03-16 18:18:30 +00:00			`--localstatedir="${SQUIDDIR}"`

upgrade to Squid 2.5.PRE4 - The port now runs as uid/gid of nobody:nobody instead of www:www - This needs some testing, especially the transparent proxy support for PF 2002-02-20 01:17:03 +00:00			`.if ${FLAVOR:L:Mtransparent}`
- add 2 more distribution patches - add snmp FLAVOR from Joel CARNAT <joel at carnat dot net> - add some auth types and auth/acl helpers - add NTLM auth SMB patch even though the default port does NOT compile this support in 2004-06-11 08:00:35 +00:00			`CONFIGURE_ARGS+=--enable-pf-transparent`
			`.endif`

			`.if${FLAVOR:L:Msnmp}`
			`CONFIGURE_ARGS+=--enable-snmp`
upgrade to Squid 2.5.PRE4 - The port now runs as uid/gid of nobody:nobody instead of www:www - This needs some testing, especially the transparent proxy support for PF 2002-02-20 01:17:03 +00:00			`.endif`

			`post-install:`
upgrade to Squid 2.5.PRE6 - PF patches integrated 2002-04-17 18:03:21 +00:00			`@chown -R ${SHAREOWN}:${SHAREGRP} ${PREFIX}/share/examples/squid`
add 29 of the latest distribution patches. 2004-02-16 10:21:20 +00:00			`@find ${PREFIX}/share/examples/squid/errors \`
			`-name '*.orig' -print0 \| xargs -0 rm -f`
squid port from d@openbsd.org 1998-09-14 01:36:52 +00:00
			`.include <bsd.port.mk>`