openbsd-ports/security/gnupg/Makefile

# $OpenBSD: Makefile,v 1.104 2016/11/04 11:35:20 sthen Exp $

COMMENT=	GNU privacy guard - a free PGP replacement

DISTNAME=	gnupg-1.4.21
REVISION=	1
CATEGORIES=	security

# restrict, not compatible with gnupg-2.
PKGSPEC =	gnupg-<2

MASTER_SITES=	${MASTER_SITE_GNUPG:=gnupg/}

HOMEPAGE=	http://www.gnupg.org/

MAINTAINER=	Jeremie Courreges-Anglas <jca@wxcvbn.org>

# GPLv3
PERMIT_PACKAGE_CDROM=	Yes

WANTLIB += bz2 c crypto curl iconv intl nghttp2 readline ssl
WANTLIB += termcap z

LIB_DEPENDS=	archivers/bzip2 \
		devel/gettext \
		net/curl

CONFIGURE_STYLE= gnu
MODGNU_CONFIG_GUESS_DIRS=${WRKSRC}/scripts
CONFIGURE_ARGS+= --disable-gnupg-iconv
CONFIGURE_ENV=	CPPFLAGS="-I${LOCALBASE}/include" \
		LDFLAGS="-L${LOCALBASE}/lib"
MAKE_FLAGS=	LIBINTL="-L${LOCALBASE}/lib -lintl -liconv" \
		LIBICONV="-L${LOCALBASE}/lib -liconv"

FLAVORS=	card ldap
FLAVOR?=

.if ${FLAVOR:Mcard}
LIB_DEPENDS+=		devel/libusb-compat
WANTLIB +=		usb pthread
.else
CONFIGURE_ARGS+=	--disable-card-support --without-libusb
.endif

.if ${FLAVOR:Mldap}
CONFIGURE_ARGS+=	--enable-ldap
LIB_DEPENDS+=		databases/openldap
WANTLIB +=		ldap>=8
.else
CONFIGURE_ARGS+=	--disable-ldap
.endif


GNUPGDOCFILES=	README AUTHORS COPYING THANKS TODO BUGS \
		doc/DETAILS doc/FAQ doc/OpenPGP doc/HACKING

.if ${MACHINE_ARCH} == "hppa"
pre-configure:
	# mpi/hppa1.1/udiv-qrnnd.S is not PIE-safe
	mv ${WRKSRC}/mpi/hppa/udiv-qrnnd.S ${WRKSRC}/mpi/hppa1.1/
.endif

post-install:
	${INSTALL_DATA_DIR} ${PREFIX}/share/doc/gnupg
	cd ${WRKSRC}; ${INSTALL_DATA} ${GNUPGDOCFILES} \
		${PREFIX}/share/doc/gnupg

.include <bsd.port.mk>
sync WANTLIB (and in one case, add gettext to LIB_DEPENDS) in dependent ports now that internationalised domain name support has been removed from net/curl 2016-11-04 11:35:18 +00:00			`# $OpenBSD: Makefile,v 1.104 2016/11/04 11:35:20 sthen Exp $`
kill pkg/COMMENT 2001-03-23 16:30:16 +00:00
Remove surrounding quotes in NO_REGRESS/COMMENT/PERMIT_ From Darrin Chandler 2007-09-15 23:29:57 +00:00			`COMMENT= GNU privacy guard - a free PGP replacement`
add gnupg port; markus.friedl@informatik.uni-erlangen.de - GNU privacy guard - a free PGP replacement. 1999-04-23 03:16:05 +00:00
SECURITY update to gnupg-1.4.21 CVE-2016-6313: * Fix critical security bug in the RNG [CVE-2016-6313]. An attacker who obtains 580 bytes from the standard RNG can trivially predict the next 20 bytes of output. Problem detected by Felix Dörre and Vladimir Klebanov, KIT. Main behavior changes: - CAST5 -> AES for symmetric encryption - MD5 sigs rejected by default ok danj@ 2016-08-26 08:27:48 +00:00			`DISTNAME= gnupg-1.4.21`
sync WANTLIB (and in one case, add gettext to LIB_DEPENDS) in dependent ports now that internationalised domain name support has been removed from net/curl 2016-11-04 11:35:18 +00:00			`REVISION= 1`
add gnupg port; markus.friedl@informatik.uni-erlangen.de - GNU privacy guard - a free PGP replacement. 1999-04-23 03:16:05 +00:00			`CATEGORIES= security`
Security fix: Add workaround for GnuPG's ElGamal signing keys bug. URL: http://lists.gnupg.org/pipermail/gnupg-announce/2003q4/000276.html 2003-12-13 03:22:16 +00:00
use PKGSPEC, every dependent port uses this 2010-11-26 07:50:07 +00:00			`# restrict, not compatible with gnupg-2.`
			`PKGSPEC = gnupg-<2`

rename MASTER_SITES_GNUPG to MASTER_SITE_GNUPG, like all the others 2016-10-01 13:56:26 +00:00			`MASTER_SITES= ${MASTER_SITE_GNUPG:=gnupg/}`
add new MASTER_SITES for idea flavor 2001-07-12 16:07:17 +00:00
- add HOMEPAGE - GNU_CONFIGURE -> CONFIGURE_STYLE - remove license type - mkdir -> ${INSTALL_DATA_DIR} - add @comment with RCS id to PLIST 2000-06-29 06:06:31 +00:00			`HOMEPAGE= http://www.gnupg.org/`

Update to gnupg-1.4.18 and take maintainership. * fix regression in --recv-key {multiple keys} * cap the sizes for automatic key generation While here, delete unneeded do-test target. "looks ok" sthen@, ok daniel@ 2015-01-04 22:12:55 +00:00			`MAINTAINER= Jeremie Courreges-Anglas <jca@wxcvbn.org>`

Update to gnupg-1.4.8. (GPLv3 now) ok steven@ 2008-01-30 20:18:09 +00:00			`# GPLv3`
Fake. Leave gnu-make along for now, it suspiciously looks like an OpenBSD make bug. 2000-03-11 02:54:18 +00:00			`PERMIT_PACKAGE_CDROM= Yes`
gpl licenses 2000-02-12 08:02:07 +00:00
sync WANTLIB (and in one case, add gettext to LIB_DEPENDS) in dependent ports now that internationalised domain name support has been removed from net/curl 2016-11-04 11:35:18 +00:00			`WANTLIB += bz2 c crypto curl iconv intl nghttp2 readline ssl`
Drop the gettext module from gnupg.org ports 2016-09-28 19:33:37 +00:00			`WANTLIB += termcap z`

new depends 2010-11-20 17:22:40 +00:00			`LIB_DEPENDS= archivers/bzip2 \`
Drop the gettext module from gnupg.org ports 2016-09-28 19:33:37 +00:00			`devel/gettext \`
new depends 2010-11-20 17:22:40 +00:00			`net/curl`
update to gnupg-1.0.7; thx Nikolay Sturm * use 'as' of new binutils on non elf-toolchain archs see http://lists.gnupg.org/pipermail/gnupg-announce/2002q2/000251.html for a list of changes 2002-07-05 07:13:00 +00:00
SECURITY update to gnupg-1.4.15, fixes CVE-2013-4402 (infinite recursion parsing compressed packets) and includes the patch we had for CVE-2013-4242 (Yarom/Falkner flush+reload side-channel attack on RSA secret keys already had a patch). Input from and ok sthen@ 2013-11-16 20:29:00 +00:00			`CONFIGURE_STYLE= gnu`
fix up MODGNU_CONFIG_GUESS_DIRS 2004-08-04 14:51:31 +00:00			`MODGNU_CONFIG_GUESS_DIRS=${WRKSRC}/scripts`
- Update to gnupg-1.4.3 - Add ldap FLAVOR - Describe the FLAVORs in pkg/DESCR ok steven@ 2006-04-12 09:55:24 +00:00			`CONFIGURE_ARGS+= --disable-gnupg-iconv`
upgrade to gnupg 1.2.2 A bug was discovered in the key validation code. This bug causes keys with more than one user ID to give all user IDs on the key the amount of validity given to the most-valid key. http://marc.theaimsgroup.com/?l=bugtraq&m=105215110111174&w=2 -- MAINTAINER ok 2003-05-27 14:54:43 +00:00			`CONFIGURE_ENV= CPPFLAGS="-I${LOCALBASE}/include" \`
			`LDFLAGS="-L${LOCALBASE}/lib"`
- Add bzip2 to dependency list (from Okan Demirmen <okan@demirmen.com>) - Fix libintl/libiconv linking - Don't include bundled libintl headers - Update WANTLIB marker - Bump PKGNAME help & go ahead espie@ 2005-02-19 12:10:03 +00:00			`MAKE_FLAGS= LIBINTL="-L${LOCALBASE}/lib -lintl -liconv" \`
			`LIBICONV="-L${LOCALBASE}/lib -liconv"`
add gnupg port; markus.friedl@informatik.uni-erlangen.de - GNU privacy guard - a free PGP replacement. 1999-04-23 03:16:05 +00:00
The American/European/Japanese patents on IDEA have expired. Remove the flavor and just include it by default. ok zinke@ 2012-07-12 16:32:47 +00:00			`FLAVORS= card ldap`
re-add IDEA flavor; ok sturm@ 2003-06-03 10:21:33 +00:00			`FLAVOR?=`

Don't use ${FLAVOR:L}, we only support lower-case flavours now. OK ajacoutot@ espie@ 2013-02-09 14:49:50 +00:00			`.if ${FLAVOR:Mcard}`
Unbreak the "card" FLAVOR after the libusb->libusb-compat switch, spotted by naddy@ (thanks). 2011-11-13 22:39:50 +00:00			`LIB_DEPENDS+= devel/libusb-compat`
			`WANTLIB += usb pthread`
update to GnuPG 1.4, new FLAVOR "card" to support usb card readers initial version from Chris K. Young <cky at pobox.com>, adapted to -current by Alec Berryman <alec at thened.net> ok maintainer reinhard@ 2005-01-29 19:27:18 +00:00			`.else`
minor dependency nits (make sure we don't pick libusb, and readline now pulls in termcap and not ncurses) 2005-04-09 12:43:08 +00:00			`CONFIGURE_ARGS+= --disable-card-support --without-libusb`
update to GnuPG 1.4, new FLAVOR "card" to support usb card readers initial version from Chris K. Young <cky at pobox.com>, adapted to -current by Alec Berryman <alec at thened.net> ok maintainer reinhard@ 2005-01-29 19:27:18 +00:00			`.endif`

Don't use ${FLAVOR:L}, we only support lower-case flavours now. OK ajacoutot@ espie@ 2013-02-09 14:49:50 +00:00			`.if ${FLAVOR:Mldap}`
- Update to gnupg-1.4.3 - Add ldap FLAVOR - Describe the FLAVORs in pkg/DESCR ok steven@ 2006-04-12 09:55:24 +00:00			`CONFIGURE_ARGS+= --enable-ldap`
new depends 2010-11-20 17:22:40 +00:00			`LIB_DEPENDS+= databases/openldap`
			`WANTLIB += ldap>=8`
- Update to gnupg-1.4.3 - Add ldap FLAVOR - Describe the FLAVORs in pkg/DESCR ok steven@ 2006-04-12 09:55:24 +00:00			`.else`
			`CONFIGURE_ARGS+= --disable-ldap`
			`.endif`

update to GnuPG 1.4, new FLAVOR "card" to support usb card readers initial version from Chris K. Young <cky at pobox.com>, adapted to -current by Alec Berryman <alec at thened.net> ok maintainer reinhard@ 2005-01-29 19:27:18 +00:00
fixup Makefile 2001-03-05 18:54:06 +00:00			`GNUPGDOCFILES= README AUTHORS COPYING THANKS TODO BUGS \`
Bugfixes update to 1.4.11 ok benoit@ 2010-10-25 12:57:13 +00:00			`doc/DETAILS doc/FAQ doc/OpenPGP doc/HACKING`
fixup Makefile 2001-03-05 18:54:06 +00:00
Fix on hppa, broken since the PIE switch. mpi/hppa1.1/udiv-qrnnd.S is not PIE-safe, let's use mpi/hppa/udiv-qrnnd.S instead. with kettenis@ 2012-12-11 21:12:36 +00:00			`.if ${MACHINE_ARCH} == "hppa"`
			`pre-configure:`
			`# mpi/hppa1.1/udiv-qrnnd.S is not PIE-safe`
			`mv ${WRKSRC}/mpi/hppa/udiv-qrnnd.S ${WRKSRC}/mpi/hppa1.1/`
			`.endif`

add gnupg port; markus.friedl@informatik.uni-erlangen.de - GNU privacy guard - a free PGP replacement. 1999-04-23 03:16:05 +00:00			`post-install:`
fixup Makefile 2001-03-05 18:54:06 +00:00			`${INSTALL_DATA_DIR} ${PREFIX}/share/doc/gnupg`
			`cd ${WRKSRC}; ${INSTALL_DATA} ${GNUPGDOCFILES} \`
			`${PREFIX}/share/doc/gnupg`
add gnupg port; markus.friedl@informatik.uni-erlangen.de - GNU privacy guard - a free PGP replacement. 1999-04-23 03:16:05 +00:00
			`.include <bsd.port.mk>`