add silc-server port;

--
silc-server (silcd) is the server for the SILC protocol.

SILC (Secure Internet Live Conferencing) is a protocol which provides
secure conferencing services in the Internet over insecure channel.

From: Jolan Luff <jolan@cryptonomicon.org>
This commit is contained in:
brad 2002-12-16 03:40:02 +00:00
parent 5b191deaf4
commit b1917787cd
13 changed files with 571 additions and 0 deletions

55
net/silc-server/Makefile Normal file
View File

@ -0,0 +1,55 @@
# $OpenBSD: Makefile,v 1.1.1.1 2002/12/16 03:40:02 brad Exp $
COMMENT= "Secure Live Internet Conferencing (SILC) server"
DISTNAME= silc-server-0.9.10.1
CATEGORIES= net
HOMEPAGE= http://www.silcnet.org/
MAINTAINER= Jolan Luff <jolan@cryptonomicon.org>
# GPL
PERMIT_PACKAGE_CDROM= Yes
PERMIT_PACKAGE_FTP= Yes
PERMIT_DISTFILES_CDROM= Yes
PERMIT_DISTFILES_FTP= Yes
MASTER_SITES= http://ftp.silcnet.org/server/sources/ \
ftp://ftp.silcnet.org/silc/server/sources/ \
http://www.planetmirror.com/pub/silcnet/server/sources/ \
ftp://ftp.au.silcnet.org/pub/silcnet/server/sources/ \
http://munitions.vipul.net/software/mirrors/silc/server/sources/ \
ftp://ftp.no.silcnet.org/pub/silc/server/sources/ \
http://the.wiretapped.net/security/network-security/silc/server/sources/ \
ftp://ftp.wiretapped.net/pub/security/network-security/silc/server/sources/
MODULES= iconv
# XXX workaround gcc bugs on sparc64
.if ${MACHINE_ARCH:Msparc64}
PATCH_LIST= gcc-* patch-*
.endif
CONFIGURE_STYLE= gnu
MODGNU_CONFIG_GUESS_DIRS= ${WRKSRC} ${WRKSRC}/lib/silcmath/mpi
CONFIGURE_ARGS= \
--enable-ipv6 \
--without-irssi \
--with-docdir=${PREFIX}/share/doc/silcd \
--with-etcdir=${SYSCONFDIR}/silcd \
--with-logsdir=/var/log/silcd \
--with-simdir=${PREFIX}/lib \
--with-silcd-config-file=${SYSCONFDIR}/silcd/silcd.conf \
--with-silcd-pid-file=/var/run/silcd.pid
.if ${MACHINE_ARCH} != "i386"
CONFIGURE_ARGS+= --disable-asm
.endif
post-install:
${INSTALL_DATA_DIR} ${PREFIX}/share/examples/silcd
mv -f ${PREFIX}/share/doc/silcd/examples/* \
${PREFIX}/share/examples/silcd
rm -rf ${PREFIX}/share/doc/silcd/examples
.include <bsd.port.mk>

3
net/silc-server/distinfo Normal file
View File

@ -0,0 +1,3 @@
MD5 (silc-server-0.9.10.1.tar.gz) = c9f38a023efba5147edc73ed33496855
RMD160 (silc-server-0.9.10.1.tar.gz) = b799b7f26156a8daf17f9df97f089a927fa7c7a4
SHA1 (silc-server-0.9.10.1.tar.gz) = c9da5fb9b9b2e515e9e4854771b337cacd11922c

View File

@ -0,0 +1,13 @@
$OpenBSD: gcc-patch-lib_silccrypt_Makefile_in,v 1.1.1.1 2002/12/16 03:40:02 brad Exp $
--- lib/silccrypt/Makefile.in.orig Sat May 18 01:40:59 2002
+++ lib/silccrypt/Makefile.in Tue May 21 20:07:34 2002
@@ -290,6 +290,9 @@ mostlyclean-compile:
distclean-compile:
-rm -f *.tab.c
+sha1.o:
+ $(COMPILE) -O0 -c `test -f $< || echo '$(srcdir)/'`$<
+
.c.o:
$(COMPILE) -c `test -f $< || echo '$(srcdir)/'`$<

View File

@ -0,0 +1,13 @@
$OpenBSD: gcc-patch-lib_silcsim_Makefile_in,v 1.1.1.1 2002/12/16 03:40:02 brad Exp $
--- lib/silcsim/Makefile.in.orig Sat Sep 7 14:04:47 2002
+++ lib/silcsim/Makefile.in Sat Oct 5 07:59:27 2002
@@ -440,6 +440,9 @@ uninstall-am: uninstall-includeHEADERS u
@SILC_SIM_TRUE@all: $(SIM_CIPHER_OBJS) $(SIM_HASH_OBJS)
+sha1.o:
+ $(LTCOMPILE) -O0 -c $(srcdir)/../silccrypt/$*.c
+
$(SIM_CIPHER_OBJS): ../silccrypt/libsilccrypt.a
$(LTCOMPILE) -c $(srcdir)/../silccrypt/$*.c
$(LIBTOOL) --mode=link $(LINK) -rpath $(silc_modulesdir) -o lib$*.la $*.lo

View File

@ -0,0 +1,59 @@
$OpenBSD: patch-Makefile_in,v 1.1.1.1 2002/12/16 03:40:02 brad Exp $
--- Makefile.in.orig Thu Dec 5 15:44:04 2002
+++ Makefile.in Sat Dec 14 21:37:10 2002
@@ -707,20 +707,12 @@ install-dirs-client: install-dirs
-mkdir -p $(mandir)/man1
install-dirs-server: install-dirs
- -mkdir -p $(logsdir)
-mkdir -p $(mandir)/man5
-mkdir -p $(mandir)/man8
doc-install:
- -$(INSTALL_DATA) $(srcdir)/doc/CodingStyle $(docdir)/
-$(INSTALL_DATA) $(srcdir)/doc/FAQ $(docdir)/
- -$(INSTALL_DATA) $(srcdir)/doc/*.txt $(docdir)/
- -$(INSTALL_DATA) $(srcdir)/COPYING $(docdir)/
- -$(INSTALL_DATA) $(srcdir)/CHANGES $(docdir)/
- -$(INSTALL_DATA) $(srcdir)/CREDITS $(docdir)/
- -$(INSTALL_DATA) $(srcdir)/README* $(docdir)/
- -$(INSTALL_DATA) $(srcdir)/INSTALL $(docdir)/
- -$(INSTALL_DATA) $(srcdir)/TODO $(docdir)/
+ -$(INSTALL_DATA) $(srcdir)/README $(docdir)/
doc-install-client: doc-install
$(INSTALL_DATA) $(srcdir)/irssi/silc.conf $(docdir)/example_silc.conf
@@ -729,13 +721,8 @@ doc-install-client: doc-install
fi
doc-install-server: doc-install
- -$(INSTALL_DATA) $(srcdir)/doc/example_silcd.conf $(docdir)/
- -@if test -f $(srcdir)/doc/silcd.8 ; then \
- $(INSTALL_DATA) $(srcdir)/doc/silcd.8 $(mandir)/man8; \
- fi
- -@if test -f $(srcdir)/doc/silcd.conf.5 ; then \
- $(INSTALL_DATA) $(srcdir)/doc/silcd.conf.5 $(mandir)/man5; \
- fi
+ -$(INSTALL_DATA) $(srcdir)/doc/example_silcd.conf $(docdir)/examples/silcd.conf
+ -$(INSTALL_DATA) $(srcdir)/doc/silcalgs.conf $(docdir)/examples/
etc-install-client:
-@if test '!' -d $(srcdir)/irssi ; then \
@@ -766,7 +753,7 @@ toolkit-install:
examples-install:
-mkdir -p $(docdir)/examples/
-$(INSTALL_DATA) $(srcdir)/doc/examples/README $(docdir)/examples/
- -$(INSTALL_DATA) $(srcdir)/doc/examples/silc* $(docdir)/examples/
+ -$(INSTALL_DATA) $(srcdir)/doc/examples/*.conf $(docdir)/examples/
generate-server-key:
-@if test '!' -f $(etcdir)/silcd.pub ; then \
@@ -775,7 +762,7 @@ generate-server-key:
@SILC_DIST_CLIENT_TRUE@install-data-hook: install-dirs-client sim-install doc-install-client etc-install-client
@SILC_DIST_CLIENT_FALSE@@SILC_DIST_TOOLKIT_TRUE@install-data-hook: install-dirs-client install-dirs-server sim-install doc-install-client doc-install-server toolkit-install examples-install etc-install-client etc-install-server generate-server-key
-@SILC_DIST_CLIENT_FALSE@@SILC_DIST_TOOLKIT_FALSE@install-data-hook: install-dirs-server sim-install doc-install-server examples-install etc-install-server generate-server-key
+@SILC_DIST_CLIENT_FALSE@@SILC_DIST_TOOLKIT_FALSE@install-data-hook: examples-install doc-install-server
# Tell versions [3.59,3.63) of GNU make to not export all variables.
# Otherwise a system limit (for SysV at least) may be exceeded.
.NOEXPORT:

View File

@ -0,0 +1,124 @@
$OpenBSD: patch-doc_example_silcd_conf_in,v 1.1.1.1 2002/12/16 03:40:02 brad Exp $
--- doc/example_silcd.conf.in.orig Sat Nov 30 08:09:21 2002
+++ doc/example_silcd.conf.in Sat Dec 14 19:45:12 2002
@@ -35,7 +35,7 @@ General {
# This is the default path where to search modules. If omitted
# built-in modules will be used. Built-in modules will also be
# used if a module file cannot be located.
- module_path = "@MODULESDIR@";
+ module_path = "";
# If both passphrase and public key authentication is set for a
# connection the public key authentication is the preferred one
@@ -166,14 +166,14 @@ ServerInfo {
#
# Server name (FQDN)
#
- hostname = "lassi.kuo.fi.ssh.com";
+ hostname = "localhost";
#
# Primary listener. Specify the IP address and the port to bind
# the server.
#
Primary {
- ip = "10.2.1.6";
+ ip = "127.0.0.1";
port = 706;
};
@@ -193,24 +193,24 @@ ServerInfo {
#
# Geographic location
#
- Location = "Kuopio, Finland";
+ Location = "Earth";
#
# Full admin name
#
- Admin = "Foo T. Bar";
+ Admin = "Admin";
#
# Admin's email address
#
- AdminEmail = "foo-admin@bar.com";
+ AdminEmail = "root@127.0.0.1";
#
# Run SILC server as specific user and group. The server must be
# initially run as root.
#
- User = "nobody";
- Group = "nobody";
+ User = "silcd";
+ Group = "silcd";
#
# Public and private keys
@@ -435,10 +435,10 @@ Client {
# required.
#
Admin {
- Host = "10.2.1.199";
- User = "priikone";
- Nick = "pekka";
- Passphrase = "verysecret";
+ Host = "127.0.0.1";
+ User = "admin";
+ Nick = "admin";
+ Passphrase = "admin";
# PublicKey = "/path/to/the/public.pub";
};
@@ -460,13 +460,13 @@ Admin {
# to true. For normal connections set it false. If it is set to true then
# your server will be backup router.
#
-ServerConnection {
- Host = "10.2.1.7";
- Passphrase = "verysecret";
- #PublicKey = "/path/to/the/public.pub";
- Params = "normal";
- Backup = false;
-};
+#ServerConnection {
+# Host = "10.2.1.7";
+# Passphrase = "verysecret";
+# #PublicKey = "/path/to/the/public.pub";
+# Params = "normal";
+# Backup = false;
+#};
#
# Configured router connections
@@ -496,17 +496,17 @@ ServerConnection {
# backup router is in our cell then set the "BackupLocal" option to true.
# If the backup router is in other cell then set it to false.
#
-RouterConnection {
- Host = "10.2.1.100";
- Port = 706;
- Passphrase = "verysecret";
- #PublicKey = "/path/to/the/public.pub";
- Params = "normal";
- Initiator = true;
- #BackupHost = "10.2.1.6";
- #BackupPort = 706;
- #BackupLocal = true;
-};
+#RouterConnection {
+# Host = "10.2.1.100";
+# Port = 706;
+# Passphrase = "verysecret";
+# #PublicKey = "/path/to/the/public.pub";
+# Params = "normal";
+# Initiator = true;
+# #BackupHost = "10.2.1.6";
+# #BackupPort = 706;
+# #BackupLocal = true;
+#};
#
# Denied connections

View File

@ -0,0 +1,11 @@
$OpenBSD: patch-lib_Makefile_in,v 1.1.1.1 2002/12/16 03:40:02 brad Exp $
--- lib/Makefile.in.orig Fri Dec 6 13:20:38 2002
+++ lib/Makefile.in Sun Dec 15 16:40:03 2002
@@ -482,7 +482,6 @@ install-data-am:
install-exec-am:
@$(NORMAL_INSTALL)
- $(MAKE) $(AM_MAKEFLAGS) install-exec-hook
install-info: install-info-recursive

View File

@ -0,0 +1,109 @@
$OpenBSD: patch-lib_silcmath_mpi_mpi_x86_s,v 1.1.1.1 2002/12/16 03:40:02 brad Exp $
--- lib/silcmath/mpi/mpi_x86.s.orig Fri Apr 5 10:54:43 2002
+++ lib/silcmath/mpi/mpi_x86.s Mon Aug 26 02:22:29 2002
@@ -56,9 +56,9 @@
# edx:
# esi: a ptr
# edi: c ptr
-.globl s_mpv_mul_d
-.type s_mpv_mul_d,@function
-s_mpv_mul_d:
+.globl _s_mpv_mul_d
+.type _s_mpv_mul_d,@function
+_s_mpv_mul_d:
push %ebp
mov %esp,%ebp
sub $28,%esp
@@ -115,9 +115,9 @@ s_mpv_mul_d:
# edx:
# esi: a ptr
# edi: c ptr
-.globl s_mpv_mul_d_add
-.type s_mpv_mul_d_add,@function
-s_mpv_mul_d_add:
+.globl _s_mpv_mul_d_add
+.type _s_mpv_mul_d_add,@function
+_s_mpv_mul_d_add:
push %ebp
mov %esp,%ebp
sub $28,%esp
@@ -177,9 +177,9 @@ s_mpv_mul_d_add:
# edx:
# esi: a ptr
# edi: c ptr
-.globl s_mpv_mul_d_add_prop
-.type s_mpv_mul_d_add_prop,@function
-s_mpv_mul_d_add_prop:
+.globl _s_mpv_mul_d_add_prop
+.type _s_mpv_mul_d_add_prop,@function
+_s_mpv_mul_d_add_prop:
push %ebp
mov %esp,%ebp
sub $28,%esp
@@ -247,9 +247,9 @@ s_mpv_mul_d_add_prop:
# esi: a ptr
# edi: c ptr
-.globl s_mpv_sqr_add_prop
-.type s_mpv_sqr_add_prop,@function
-s_mpv_sqr_add_prop:
+.globl _s_mpv_sqr_add_prop
+.type _s_mpv_sqr_add_prop,@function
+_s_mpv_sqr_add_prop:
push %ebp
mov %esp,%ebp
sub $12,%esp
@@ -260,10 +260,10 @@ s_mpv_sqr_add_prop:
mov 12(%ebp),%ecx # a_len
mov 16(%ebp),%edi # edi = ps
cmp $0,%ecx
- je 11f # jump if a_len == 0
+ je eleven # jump if a_len == 0
cld
mov 8(%ebp),%esi # esi = pa
-10:
+ten:
lodsl # %eax = [ds:si]; si += 4;
mull %eax
@@ -279,20 +279,20 @@ s_mpv_sqr_add_prop:
adc $0,%ebx
stosl # [es:di] = %eax; di += 4;
dec %ecx # --a_len
- jnz 10b # jmp if a_len != 0
-11:
+ jnz ten # jmp if a_len != 0
+eleven:
cmp $0,%ebx # is carry zero?
- jz 14f
+ jz fourteen
mov 0(%edi),%eax # add in current word from *c
add %ebx,%eax
stosl # [es:edi] = ax; edi += 4;
- jnc 14f
-12:
+ jnc fourteen
+twelve:
mov 0(%edi),%eax # add in current word from *c
adc $0,%eax
stosl # [es:edi] = ax; edi += 4;
- jc 12b
-14:
+ jc twelve
+fourteen:
pop %ebx
pop %esi
pop %edi
@@ -323,9 +323,9 @@ s_mpv_sqr_add_prop:
# edi: c ptr
#
-.globl s_mpv_div_2dx1d
-.type s_mpv_div_2dx1d,@function
-s_mpv_div_2dx1d:
+.globl _s_mpv_div_2dx1d
+.type _s_mpv_div_2dx1d,@function
+_s_mpv_div_2dx1d:
push %ebx
mov 8(%esp),%edx
mov 12(%esp),%eax

View File

@ -0,0 +1,31 @@
#!/bin/sh
# $OpenBSD: DEINSTALL,v 1.1.1.1 2002/12/16 03:40:02 brad Exp $
#
# silc-server de-installation
set -e
PATH=/bin:/usr/bin:/sbin:/usr/sbin
PREFIX=${PKG_PREFIX:-/usr/local}
CONFIG_DIR=${SYSCONFDIR}/silcd
LOG_DIR=/var/log/silcd
SILCDUSER=silcd
SILCDGROUP=silcd
if [ -d $CONFIG_DIR ]; then
echo
echo "+---------------"
echo "| To completely deinstall the $1 package you need to perform"
echo "| these steps as root:"
echo "|"
echo "| userdel $SILCDUSER"
echo "| groupdel $SILCDGROUP"
echo "| rm -rf $LOG_DIR"
echo "| rm -rf $CONFIG_DIR"
echo "|"
echo "| Do not do this if you plan on re-installing $1"
echo "| at some future time."
echo "+---------------"
echo
fi
exit 0

27
net/silc-server/pkg/DESCR Normal file
View File

@ -0,0 +1,27 @@
silc-server (silcd) is the server for the SILC protocol.
SILC (Secure Internet Live Conferencing) is a protocol which provides
secure conferencing services in the Internet over insecure channel.
SILC superficially resembles IRC, although they are very different
internally. SILC is much more than just about `encrypting the traffic'.
That is easy enough to do with IRC and SSL hybrids, but even then the
entire network cannot be secured, only part of it.
SILC provides security services, such as sending private messages entirely
secure; noone can see the message except you and the real receiver of the
message. SILC also provides same functionality for channels; noone except
those clients joined to the channel may see the messages destined to the
channel. Communication between client and server is also secured with
session keys and all commands, authentication data (such as passwords etc.)
and other traffic is entirely secured. The entire network, and all parts of
it, is secured.
SILC has secure key exchange protocol that is used to create the session keys
for each connection. SILC also provides strong authentication based on either
passwords or public key authentication. All authentication data is always
encrypted in the SILC network. Each connection has their own session keys,
all channels have channel specific keys, and all private messages can be
secured with private message specific keys.
WWW: ${HOMEPAGE}

View File

@ -0,0 +1,92 @@
#!/bin/sh
# $OpenBSD: INSTALL,v 1.1.1.1 2002/12/16 03:40:02 brad Exp $
#
# Pre/post-installation setup of silc-server
PATH=/bin:/usr/bin:/sbin:/usr/sbin
PREFIX=${PKG_PREFIX:-/usr/local}
CONFIG_DIR=${SYSCONFDIR}/silcd
LOG_DIR=/var/log/silcd
SAMPLE_CONFIG_DIR=$PREFIX/share/examples/silcd
SILCDUSER=silcd
SILCDGROUP=silcd
do_usergroup_install()
{
# Create silc-server user and group
groupinfo -e $SILCDGROUP
if [ $? -eq 0 ]; then
echo "===> Using $SILCDGROUP group for silc-server"
else
echo "===> Creating $SILCDGROUP group for silc-server"
groupadd $SILCDGROUP
fi
userinfo -e $SILCDUSER
if [ $? -eq 0 ]; then
echo "===> Using $SILCDUSER user for silc-server"
else
echo "===> Creating $SILCDUSER user for silc-server"
useradd -g $SILCDGROUP -d /nonexistent -L daemon -c ' Silc-server Account' -s /sbin/nologin $SILCDUSER
fi
}
do_notice()
{
echo
echo "+---------------"
echo "| The existing silcd configuration files in $CONFIG_DIR,"
echo "| have NOT been changed. You may want to compare them to the"
echo "| current sample files in $SAMPLE_CONFIG_DIR,"
echo "| and update your configuration as needed."
echo "+---------------"
echo
}
do_install()
{
install -d -o silcd -g silcd -m 700 $CONFIG_DIR
install -d -o silcd -g silcd -m 700 $LOG_DIR
cp $SAMPLE_CONFIG_DIR/silcd.conf $CONFIG_DIR/silcd.conf
cp $SAMPLE_CONFIG_DIR/silcalgs.conf $CONFIG_DIR/silcalgs.conf
chown -R silcd:silcd $CONFIG_DIR
chmod 600 $CONFIG_DIR/*.conf
echo
echo "+---------------"
echo "|"
echo "| The $1 configuration files have been installed into"
echo "| $CONFIG_DIR. Please view these files and change the configuration"
echo "| to meet your needs."
echo "|"
echo "+---------------"
echo
}
# verify proper execution
#
if [ $# -ne 2 ]; then
echo "usage: $0 distname { PRE-INSTALL | POST-INSTALL }" >&2
exit 1
fi
# Verify/process the command
#
case $2 in
PRE-INSTALL)
do_usergroup_install
;;
POST-INSTALL)
if [ ! -d $CONFIG_DIR ]; then
do_install $1
elif [ ! -f $CONFIG_DIR/silcd.conf ]; then
do_install $1
else
do_notice $1
fi
;;
*)
echo "usage: $0 distname { PRE-INSTALL | POST-INSTALL }" >&2
exit 1
;;
esac
exit 0

View File

@ -0,0 +1,21 @@
Configuring silc-server for OpenBSD
-----------------------------------
- configuration files are in ${SYSCONFDIR}/silcd
- documentation is installed in ${PREFIX}/share/doc/silcd
- sample configuration files are in ${PREFIX}/share/examples/silcd
As silcd uses the IANA-assigned privileged port of 706, it is highly
recommended to take advantage of the installed silcd user and group.
If you have not already done so, you will need to generate a keypair:
# silcd -C ${SYSCONFDIR}/silcd
# chown silcd:silcd ${SYSCONFDIR}/silcd/silcd.{pub,prv}
Additionally, you may wish to start silcd at system start-up
via the /etc/rc.local script:
if [ -x ${PREFIX}/sbin/silcd ]; then
echo -n ' silcd'; ${PREFIX}/sbin/silcd
fi

13
net/silc-server/pkg/PLIST Normal file
View File

@ -0,0 +1,13 @@
@comment $OpenBSD: PLIST,v 1.1.1.1 2002/12/16 03:40:02 brad Exp $
sbin/silcd
share/doc/silcd/FAQ
share/doc/silcd/README
share/examples/silcd/README
share/examples/silcd/cell_backup.conf
share/examples/silcd/cell_router.conf
share/examples/silcd/cell_server1.conf
share/examples/silcd/cell_server2.conf
share/examples/silcd/silcalgs.conf
share/examples/silcd/silcd.conf
@dirrm share/examples/silcd
@dirrm share/doc/silcd