openbsd-ports/security/gnupg/Makefile
reinhard 36bdf033ff SECURITY UPDATE (Klima-Rosa attack)
patch from:
Florian Weimer <Florian.Weimer@RUS.UNI-STUTTGART.DE>
# http://cert.uni-stuttgart.de/files/fw/gnupg-klima-rosa.diff
# http://cert.uni-stuttgart.de/files/fw/gnupg-klima-rosa.diff.asc

It introduces additional consistency checks, as suggested by the
authors of the paper.  The checks are slightly different, but they
make the two additional attacks infeasible, I think.  In the future,
it might be a good idea to add a check the generated signature for
validity, this will detect bugs in the MPI implementation which could
result in a revealed secret key, too.


ok markus@
2001-03-23 13:10:20 +00:00

60 lines
1.8 KiB
Makefile

# $OpenBSD: Makefile,v 1.26 2001/03/23 13:10:20 reinhard Exp $
DISTNAME= gnupg-1.0.4
PKGNAME= ${DISTNAME}p2
CATEGORIES= security
NEED_VERSION= 1.363
MASTER_SITES= ftp://ftp.gnupg.org/pub/gcrypt/gnupg/ \
ftp://ftp.progsoc.uts.edu.au/pub/gnupg/gnupg/ \
ftp://openbsd.rug.ac.be/pub/gcrypt/gnupg/ \
ftp://sunsite.auc.dk/pub/security/gcrypt/gnupg/ \
ftp://ftp.linux.it/pub/mirrors/gnupg/gnupg/ \
ftp://pgp.iijlab.net/pub/gnupg/gnupg/ \
ftp://ring.aist.go.jp/pub/net/gnupg/gnupg/ \
ftp://sunsite.icm.edu.pl/pub/security/gcrypt/gnupg/ \
ftp://ftp.stacken.kth.se/pub/crypto/gnupg/gnupg/ \
ftp://ftp.net.lut.ac.uk/gcrypt/gnupg/ \
ftp://gd.tuwien.ac.at/privacy/gnupg/gnupg/
MASTER_SITES0= ftp://ftp.gnupg.org/pub/gcrypt/contrib/
DISTFILES= gnupg-1.0.4.tar.gz
EXTRACT_ONLY= gnupg-1.0.4.tar.gz
HOMEPAGE= http://www.gnupg.org/
MAINTAINER= Markus Friedl <markus@openbsd.org>
PERMIT_PACKAGE_CDROM= Yes
PERMIT_PACKAGE_FTP= Yes
PERMIT_DISTFILES_CDROM= Yes
PERMIT_DISTFILES_FTP= Yes
CONFIGURE_STYLE= gnu
CONFIGURE_ARGS= --with-included-gettext
FLAVORS= idea
FLAVOR?=
.if ${FLAVOR:L} == "idea"
PERMIT_PACKAGE_CDROM= "a patented algorithm"
PERMIT_PACKAGE_FTP= "a patented algorithm"
PERMIT_DISTFILES_CDROM= "a patented algorithm"
PERMIT_DISTFILES_FTP= "a patented algorithm"
# NB: idea.c is found in ${MASTER_SITES0}
DISTFILES+= idea.c
PATCH_LIST+= ${FILESDIR}/patch-cipher_Makefile_am
PATCH_LIST+= ${FILESDIR}/patch-cipher_Makefile_in
SED_PLIST+= -e 's,^!%%idea%%,lib/gnupg/idea,'
pre-patch:
@cp ${DISTDIR}/idea.c ${WRKSRC}/cipher
.endif
GNUPGDOCFILES= README AUTHORS COPYING THANKS TODO BUGS \
doc/DETAILS doc/FAQ doc/OpenPGP doc/HACKING doc/faq.html
post-install:
${INSTALL_DATA_DIR} ${PREFIX}/share/doc/gnupg
cd ${WRKSRC}; ${INSTALL_DATA} ${GNUPGDOCFILES} \
${PREFIX}/share/doc/gnupg
.include <bsd.port.mk>