openbsd-ports/security/stunnel/Makefile

# $OpenBSD: Makefile,v 1.90 2018/01/11 19:27:09 rpe Exp $

COMMENT=	SSL encryption wrapper for standard network daemons

DISTNAME=	stunnel-5.44
CATEGORIES=	security
REVISION=	0

MAINTAINER=	Gleydson Soares <gsoares@openbsd.org>

# GPLv2+ with OpenSSL exemption
PERMIT_PACKAGE_CDROM=	Yes

WANTLIB += c crypto pthread ssl util

HOMEPAGE=	http://www.stunnel.org/

MASTER_SITES=	https://www.stunnel.org/downloads/archive/5.x/ \
		http://ftp.nluug.nl/pub/networking/stunnel/archive/5.x/ \
		http://mirror.bit.nl/stunnel/archive/5.x/ \
		ftp://ftp.stunnel.org/stunnel/archive/5.x/

SEPARATE_BUILD=		Yes
CONFIGURE_STYLE=	gnu
CONFIGURE_ARGS+=	--with-ssl=/usr \
			--disable-libwrap
MODGNU_CONFIG_GUESS_DIRS=${WRKSRC}/auto
NO_TEST=		Yes
USE_GMAKE=		Yes

pre-configure:
	${SUBST_CMD} ${WRKSRC}/src/stunnel3.in
	${SUBST_CMD} ${WRKSRC}/tools/stunnel.conf-sample.in

do-install:
	${INSTALL_PROGRAM} ${WRKBUILD}/src/stunnel ${PREFIX}/sbin
	${INSTALL_SCRIPT} ${WRKBUILD}/src/stunnel3 ${PREFIX}/sbin
	${INSTALL_MAN} ${WRKBUILD}/doc/stunnel.8 ${PREFIX}/man/man8
	${INSTALL_DATA_DIR} ${PREFIX}/share/examples/stunnel
	${INSTALL_DATA} ${WRKSRC}/tools/stunnel.conf-sample.in \
		${PREFIX}/share/examples/stunnel/stunnel.conf-sample

.include <bsd.port.mk>
Change the shebang line from /bin/sh to /bin/ksh in all ports rc.d daemon scripts and bump subpackages that contain the *.rc scripts. discussed with and OK aja@ OK tb 2018-01-11 19:27:01 +00:00			`# $OpenBSD: Makefile,v 1.90 2018/01/11 19:27:09 rpe Exp $`
move COMMENT into Makefile & touch NEED_VERSION 2001-03-24 19:55:27 +00:00
Remove surrounding quotes in NO_REGRESS/COMMENT/PERMIT_ From Darrin Chandler 2007-09-15 23:29:57 +00:00			`COMMENT= SSL encryption wrapper for standard network daemons`
SSL encryption wrapper for standard network daemons 1999-12-05 18:25:54 +00:00
update to 5.44 2017-12-01 00:08:44 +00:00			`DISTNAME= stunnel-5.44`
SSL encryption wrapper for standard network daemons 1999-12-05 18:25:54 +00:00			`CATEGORIES= security`
Change the shebang line from /bin/sh to /bin/ksh in all ports rc.d daemon scripts and bump subpackages that contain the *.rc scripts. discussed with and OK aja@ OK tb 2018-01-11 19:27:01 +00:00			`REVISION= 0`
SSL encryption wrapper for standard network daemons 1999-12-05 18:25:54 +00:00
- update to 2.54 - take maintainership OK sthen@ (former maintainer) 2012-10-20 15:37:40 +00:00			`MAINTAINER= Gleydson Soares <gsoares@openbsd.org>`
Sanitize some @unexec/@extraunexec calls to rm: move them up in the PLIST and delete everything under the @sample'd directory instead of the directory itself to prevent a warning from pkg_delete(1) trying to remove a non existing directory and to help preventing left-over files and directories. 2011-05-11 08:24:40 +00:00
update to stunnel 4.43, ok jakob@, reads good to william@ - take maintainer, suggested by jakob - pid is now created inside the chroot jail, note you may want to set "pid = /stunnel.pid" in config. 2011-09-15 00:42:21 +00:00			`# GPLv2+ with OpenSSL exemption`
remove fake add comment to PLIST CONFIGURE_STYLE cleanup 2000-06-20 19:36:24 +00:00			`PERMIT_PACKAGE_CDROM= Yes`
update to stunnel 4.43, ok jakob@, reads good to william@ - take maintainer, suggested by jakob - pid is now created inside the chroot jail, note you may want to set "pid = /stunnel.pid" in config. 2011-09-15 00:42:21 +00:00
update to 5.37 OK benoit@ 2016-11-09 23:14:31 +00:00			`WANTLIB += c crypto pthread ssl util`
Update to v3.8 Add licensing 2000-03-05 22:55:44 +00:00
update to v4.05 add chroot/privdrop from Michael Schubert 2004-02-16 12:33:18 +00:00			`HOMEPAGE= http://www.stunnel.org/`
Update to v3.8 Add licensing 2000-03-05 22:55:44 +00:00
Update mirrors, as this comment no longer applies. 2015-06-15 07:02:52 +00:00			`MASTER_SITES= https://www.stunnel.org/downloads/archive/5.x/ \`
			`http://ftp.nluug.nl/pub/networking/stunnel/archive/5.x/ \`
SECURITY update to stunnel 5.00, fixes an issue similar to libssh and postgresql where a forked child process doesn't correctly reset RNG state. See CVE-2014-0016, http://www.openwall.com/lists/oss-security/2014/03/05/1 ok gsoares@ Note from upstream release notes: "stunnel 5.00 disables some features previously enabled by default. Users should review whether the new defaults are appropriate for their particular deployments." These changes include: FIPS mode, pid file generation and libwrap disabled by default, and the default cipher list has been updated to "HIGH:MEDIUM:+3DES:+DH:!aNULL:!SSLv2". 2014-03-17 13:03:11 +00:00			`http://mirror.bit.nl/stunnel/archive/5.x/ \`
			`ftp://ftp.stunnel.org/stunnel/archive/5.x/`
SSL encryption wrapper for standard network daemons 1999-12-05 18:25:54 +00:00
Change SEPARATE_BUILD=(concurrent\|simple) to Yes; bsd.port.mk doesn't make a distinction between these. ok aja@ dcoppa@ 2012-03-29 13:38:12 +00:00			`SEPARATE_BUILD= Yes`
remove fake add comment to PLIST CONFIGURE_STYLE cleanup 2000-06-20 19:36:24 +00:00			`CONFIGURE_STYLE= gnu`
garbage collect CONFIGURE_SHARED 2016-03-11 20:28:21 +00:00			`CONFIGURE_ARGS+= --with-ssl=/usr \`
Disable libwrap support. Ok gsoares@ (maintainer) 2014-03-24 21:44:09 +00:00			`--disable-libwrap`
fix up MODGNU_CONFIG_GUESS_DIRS 2004-08-04 14:51:31 +00:00			`MODGNU_CONFIG_GUESS_DIRS=${WRKSRC}/auto`
PERMIT_* / REGRESS->TEST sweep 2013-03-11 11:35:43 +00:00			`NO_TEST= Yes`
stunnel 4.06 2004-12-27 08:24:44 +00:00			`USE_GMAKE= Yes`
Update to v3.8 Add licensing 2000-03-05 22:55:44 +00:00
- update to 3.19; - switch threading model to pthread since that it is the default process model in stunnel; - fix stunnel.pem path in pkg/MESSAGE; - add patches to make it build with libressl; - fix some hardcoding paths in tools/stunnel.conf-sample.in. Tweaks and Feedback: jca@ yasuoka@ jasper@ brad@ and Markus Lude, thanks ! tested by yasuoka@ and Markus Lude on @sparc64(markus's tests against 3.18 version, but no many changes to 3.19, assuming that should work too...)... full changelog at: https://www.stunnel.org/sdf_ChangeLog.html 2015-06-25 14:44:30 +00:00			`pre-configure:`
* empty log message * 2015-10-14 02:05:06 +00:00			`${SUBST_CMD} ${WRKSRC}/src/stunnel3.in`
- update to 3.19; - switch threading model to pthread since that it is the default process model in stunnel; - fix stunnel.pem path in pkg/MESSAGE; - add patches to make it build with libressl; - fix some hardcoding paths in tools/stunnel.conf-sample.in. Tweaks and Feedback: jca@ yasuoka@ jasper@ brad@ and Markus Lude, thanks ! tested by yasuoka@ and Markus Lude on @sparc64(markus's tests against 3.18 version, but no many changes to 3.19, assuming that should work too...)... full changelog at: https://www.stunnel.org/sdf_ChangeLog.html 2015-06-25 14:44:30 +00:00			`${SUBST_CMD} ${WRKSRC}/tools/stunnel.conf-sample.in`

SSL encryption wrapper for standard network daemons 1999-12-05 18:25:54 +00:00			`do-install:`
upgrade to stunnel v4.03. summary of new features: - new user interface (config file) - single daemon can listen on multiple ports - delayed DNS lookup added - configurable timeouts - chroot support - private key file for a certificate can be kept in a separate file 2002-10-30 11:10:35 +00:00			`${INSTALL_PROGRAM} ${WRKBUILD}/src/stunnel ${PREFIX}/sbin`
* empty log message * 2015-10-14 02:05:06 +00:00			`${INSTALL_SCRIPT} ${WRKBUILD}/src/stunnel3 ${PREFIX}/sbin`
- update to 3.19; - switch threading model to pthread since that it is the default process model in stunnel; - fix stunnel.pem path in pkg/MESSAGE; - add patches to make it build with libressl; - fix some hardcoding paths in tools/stunnel.conf-sample.in. Tweaks and Feedback: jca@ yasuoka@ jasper@ brad@ and Markus Lude, thanks ! tested by yasuoka@ and Markus Lude on @sparc64(markus's tests against 3.18 version, but no many changes to 3.19, assuming that should work too...)... full changelog at: https://www.stunnel.org/sdf_ChangeLog.html 2015-06-25 14:44:30 +00:00			`${INSTALL_MAN} ${WRKBUILD}/doc/stunnel.8 ${PREFIX}/man/man8`
forgotten share subdir; nikolay sturm 2002-10-31 18:02:36 +00:00			`${INSTALL_DATA_DIR} ${PREFIX}/share/examples/stunnel`
- update to 3.19; - switch threading model to pthread since that it is the default process model in stunnel; - fix stunnel.pem path in pkg/MESSAGE; - add patches to make it build with libressl; - fix some hardcoding paths in tools/stunnel.conf-sample.in. Tweaks and Feedback: jca@ yasuoka@ jasper@ brad@ and Markus Lude, thanks ! tested by yasuoka@ and Markus Lude on @sparc64(markus's tests against 3.18 version, but no many changes to 3.19, assuming that should work too...)... full changelog at: https://www.stunnel.org/sdf_ChangeLog.html 2015-06-25 14:44:30 +00:00			`${INSTALL_DATA} ${WRKSRC}/tools/stunnel.conf-sample.in \`
			`${PREFIX}/share/examples/stunnel/stunnel.conf-sample`
SSL encryption wrapper for standard network daemons 1999-12-05 18:25:54 +00:00
			`.include <bsd.port.mk>`