openbsd-ports/net/curl/Makefile

# $OpenBSD: Makefile,v 1.132 2018/01/27 00:10:59 naddy Exp $

COMMENT=	get files from FTP, Gopher, HTTP or HTTPS servers

DISTNAME=	curl-7.58.0
SHARED_LIBS=	curl                 25.14    # 9.0
CATEGORIES=	net
HOMEPAGE=	https://curl.haxx.se/

MAINTAINER=	Christian Weisgerber <naddy@openbsd.org>

# MIT
PERMIT_PACKAGE_CDROM=	Yes

MASTER_SITES=	https://curl.haxx.se/download/
EXTRACT_SUFX=	.tar.xz

LIB_DEPENDS=	www/nghttp2
WANTLIB=	c crypto pthread nghttp2 ssl z

SEPARATE_BUILD=	Yes
CONFIGURE_STYLE=gnu
# Beware of circular dependency curl -> brotli -> cmake -> curl
CONFIGURE_ARGS=	--with-ca-bundle=/etc/ssl/cert.pem \
		--without-brotli \
		--without-libidn2 \
		--without-libpsl \
		--without-libssh \
		--without-libssh2
CONFIGURE_ENV=	ac_cv_path_NROFF="/usr/bin/mandoc -Tascii"

# speed up some time-consuming configure tests
CONFIGURE_ENV+= \
    curl_cv_func_select_args="int,fd_set *,struct timeval *,int" \
    curl_cv_func_recv_args="int,void *,size_t,int,ssize_t" \
    curl_cv_func_send_args="int,const void *,size_t,int,ssize_t" \
    curl_cv_func_getnameinfo_args="const struct sockaddr *,socklen_t,size_t,int"

# Note:
# use ulimit -p 256 for test

.include <bsd.port.mk>
Security update to 7.58.0. Fixes: CVE-2018-1000005: HTTP/2 trailer out-of-bounds read CVE-2018-1000007: HTTP authentication leak in redirects 2018-01-27 00:10:59 +00:00			`# $OpenBSD: Makefile,v 1.132 2018/01/27 00:10:59 naddy Exp $`
add curl port; Markus Friedl <markus.friedl@informatik.uni-erlangen.de> 1999-03-27 07:18:57 +00:00
Remove surrounding quotes in COMMENT/PERMIT_/BROKEN/ERRORS Add $OpenBSD$ to p5-SNMP-Info/Makefile (ok kili@, simon@) 2007-09-15 22:36:51 +00:00			`COMMENT= get files from FTP, Gopher, HTTP or HTTPS servers`
upgrade to Curl 7.7 -- From: Pete Fritchman <petef@databits.net> 2001-03-30 18:40:59 +00:00
Security update to 7.58.0. Fixes: CVE-2018-1000005: HTTP/2 trailer out-of-bounds read CVE-2018-1000007: HTTP authentication leak in redirects 2018-01-27 00:10:59 +00:00			`DISTNAME= curl-7.58.0`
			`SHARED_LIBS= curl 25.14 # 9.0`
add curl port; Markus Friedl <markus.friedl@informatik.uni-erlangen.de> 1999-03-27 07:18:57 +00:00			`CATEGORIES= net`
update HOMEPAGE and MASTER_SITES 2016-02-27 21:55:51 +00:00			`HOMEPAGE= https://curl.haxx.se/`
upgrade to Curl 6.5 2000-03-14 22:38:19 +00:00
maintenance update to 7.14.0 and take maintainer 2005-05-26 23:13:28 +00:00			`MAINTAINER= Christian Weisgerber <naddy@openbsd.org>`
add curl port; Markus Friedl <markus.friedl@informatik.uni-erlangen.de> 1999-03-27 07:18:57 +00:00
upgrade to cURL 7.10.2 2002-11-24 03:40:08 +00:00			`# MIT`
upgrade to Curl 6.5 2000-03-14 22:38:19 +00:00			`PERMIT_PACKAGE_CDROM= Yes`

Security update to 7.58.0. Fixes: CVE-2018-1000005: HTTP/2 trailer out-of-bounds read CVE-2018-1000007: HTTP authentication leak in redirects 2018-01-27 00:10:59 +00:00			`MASTER_SITES= https://curl.haxx.se/download/`
Security update to 7.55.0: * file: output the correct buffer to the user (CVE-2017-1000099) * tftp: reject file name lengths that don't fit (CVE-2017-1000100) * glob: do not parse after a strtoul() overflow range (CVE-2017-1000101) 2017-08-10 19:46:26 +00:00			`EXTRACT_SUFX= .tar.xz`
Security update to 7.38.0. Fixes CVE-2014-3613 (libcurl cookie leak with IP address as domain) CVE-2014-3620 (libcurl cookie leak for TLDs) Also switch to .lzma distfile. 2014-09-11 18:00:45 +00:00
Security update to 7.51.0. CVE-2016-8615: cookie injection for other servers CVE-2016-8616: case insensitive password comparison CVE-2016-8617: OOB write via unchecked multiplication CVE-2016-8618: double-free in curl_maprintf CVE-2016-8619: double-free in krb5 code CVE-2016-8620: glob parser write/read out of bounds CVE-2016-8621: curl_getdate read out of bounds CVE-2016-8622: URL unescape heap overflow via integer truncation CVE-2016-8623: Use-after-free via shared cookies CVE-2016-8624: invalid URL parsing with '#' CVE-2016-8625: IDNA 2003 makes curl use wrong host Note that this drops support for internationalized domain names. ok sthen@ 2016-11-04 11:33:33 +00:00			`LIB_DEPENDS= www/nghttp2`
Update to 7.55.1. Note that this enables the multithreaded resolver by default and now links with pthread. 2017-08-31 19:34:16 +00:00			`WANTLIB= c crypto pthread nghttp2 ssl z`
SECURITY: Update to 7.15.0. libcurl's NTLM function could overflow a stack-based buffer if given a too long user name or domain name. CAN-2005-3185. 2005-10-16 15:31:39 +00:00
Update to 7.32.0. No revolutionary changes; see http://curl.haxx.se/changes.html for the details. 2013-10-09 17:25:39 +00:00			`SEPARATE_BUILD= Yes`
maintenance update to 7.14.0 and take maintainer 2005-05-26 23:13:28 +00:00			`CONFIGURE_STYLE=gnu`
Security update to 7.57.0. Fixes: CVE-2017-8816: NTLM buffer overflow via integer overflow CVE-2017-8817: FTP wildcard out of bounds read CVE-2017-8818: SSL out of buffer access 2017-12-01 21:02:23 +00:00			`# Beware of circular dependency curl -> brotli -> cmake -> curl`
garbage collect CONFIGURE_SHARED 2016-03-11 20:28:21 +00:00			`CONFIGURE_ARGS= --with-ca-bundle=/etc/ssl/cert.pem \`
Security update to 7.57.0. Fixes: CVE-2017-8816: NTLM buffer overflow via integer overflow CVE-2017-8817: FTP wildcard out of bounds read CVE-2017-8818: SSL out of buffer access 2017-12-01 21:02:23 +00:00			`--without-brotli \`
SECURITY update to 7.53.1: CVE-2017-2629: make SSL_VERIFYSTATUS work again Also numerous other bug fixes. 2017-02-24 21:08:28 +00:00			`--without-libidn2 \`
Update to 7.47.0. Fixes CVE-2016-0755: NTLM credentials not-checked for proxy connection re-use 2016-01-29 23:52:24 +00:00			`--without-libpsl \`
Security update to 7.58.0. Fixes: CVE-2018-1000005: HTTP/2 trailer out-of-bounds read CVE-2018-1000007: HTTP authentication leak in redirects 2018-01-27 00:10:59 +00:00			`--without-libssh \`
- update to 7.16.2 - enable IDN support 2007-05-13 17:08:25 +00:00			`--without-libssh2`
Usually, ports Makefiles should not explicitly call mandoc or groff but leave the formatting to pkg_create(1) if needed. In the special cases where they do need to call mandoc (for example, like in this case, to include a formatted manual into a binary program) they should pass the -Tascii option to avoid depending on the user's locale, since mandoc -Tlocale will soon be the default. In this case, it isn't strictly needed because the upstream Makefile uses "env LC_ALL=C" when calling groff/mandoc. But let's avoid the fragility of depending on that, and let's avoid setting a bad example. No package change, no bump. ok naddy@ (MAINTAINER) 2014-11-30 16:44:04 +00:00			`CONFIGURE_ENV= ac_cv_path_NROFF="/usr/bin/mandoc -Tascii"`
add curl port; Markus Friedl <markus.friedl@informatik.uni-erlangen.de> 1999-03-27 07:18:57 +00:00
Speed up some time-consuming configure tests. ok naddy 2011-12-10 17:28:13 +00:00			`# speed up some time-consuming configure tests`
routine update to 7.46.0 2016-01-01 22:17:05 +00:00			`CONFIGURE_ENV+= \`
			`curl_cv_func_select_args="int,fd_set ,struct timeval ,int" \`
			`curl_cv_func_recv_args="int,void *,size_t,int,ssize_t" \`
			`curl_cv_func_send_args="int,const void *,size_t,int,ssize_t" \`
			`curl_cv_func_getnameinfo_args="const struct sockaddr *,socklen_t,size_t,int"`
Speed up some time-consuming configure tests. ok naddy 2011-12-10 17:28:13 +00:00
keep up with upstream and update to 7.21.1; remove dead mirrors 2010-09-19 16:30:26 +00:00			`# Note:`
PERMIT_* / REGRESS->TEST sweep 2013-03-11 11:35:43 +00:00			`# use ulimit -p 256 for test`
keep up with upstream and update to 7.21.1; remove dead mirrors 2010-09-19 16:30:26 +00:00
add curl port; Markus Friedl <markus.friedl@informatik.uni-erlangen.de> 1999-03-27 07:18:57 +00:00			`.include <bsd.port.mk>`