f3cf746bb3
upgrade to 1.0.20; Mr. Hornik has discovered error in X.509 certificate chain verification procedure in GnuTLS library. The certificate chain should be verified from last root certificate to the first certificate. Otherwise a lot of unauthorized CPU processing can be forced to check certificate signatures signed with arbitrary RSA/DSA keys chosen by attacker.; ok maintainer
44 lines
1.2 KiB
Makefile
44 lines
1.2 KiB
Makefile
# $OpenBSD: Makefile,v 1.6 2004/09/22 08:06:40 robert Exp $
|
|
|
|
COMMENT= "GNU Transport Layer Security library"
|
|
|
|
VERSION= 1.0.20
|
|
DISTNAME= gnutls-${VERSION}
|
|
CATEGORIES= security
|
|
|
|
HOMEPAGE= http://www.gnutls.org/
|
|
MAINTAINER= Jim Geovedi <jim@corebsd.or.id>
|
|
|
|
# LGPL
|
|
PERMIT_PACKAGE_CDROM= Yes
|
|
PERMIT_PACKAGE_FTP= Yes
|
|
PERMIT_DISTFILES_CDROM= Yes
|
|
PERMIT_DISTFILES_FTP= Yes
|
|
|
|
MASTER_SITES= ftp://ftp.gnupg.org/gcrypt/gnutls/ \
|
|
ftp://gd.tuwien.ac.at/privacy/gnupg/gnutls/ \
|
|
http://sunsite.dk/pub/security/gcrypt/gnutls/ \
|
|
http://ftp.linux.it/pub/mirrors/gnupg/gnutls/
|
|
|
|
MODULES= converters/libiconv
|
|
LIB_DEPENDS= gcrypt.12::security/libgcrypt \
|
|
opencdk.8::security/opencdk \
|
|
lzo::archivers/lzo
|
|
|
|
CONFIGURE_STYLE= gnu
|
|
CONFIGURE_ARGS+= ${CONFIGURE_SHARED} \
|
|
--with-included-libtasn1 \
|
|
--with-included-libcfg \
|
|
--with-included-lzo
|
|
CONFIGURE_ENV= CPPFLAGS="-I${LOCALBASE}/include" \
|
|
LDFLAGS="-L${LOCALBASE}/lib"
|
|
|
|
post-install:
|
|
${INSTALL_DATA_DIR} ${PREFIX}/share/doc/gnutls
|
|
${INSTALL_DATA_DIR} ${PREFIX}/share/examples/gnutls
|
|
${INSTALL_DATA} ${WRKSRC}/README ${PREFIX}/share/doc/gnutls
|
|
${INSTALL_DATA} ${WRKSRC}/doc/examples/*.c \
|
|
${PREFIX}/share/examples/gnutls
|
|
|
|
.include <bsd.port.mk>
|