c429595b71
ok brad (maintainer) * CVE-2019-3814: If imap/pop3/managesieve/submission client has trusted certificate with missing username field (ssl_cert_username_field), under some configurations Dovecot mistakenly trusts the username provided via authentication instead of failing. * ssl_cert_username_field setting was ignored with external SMTP AUTH, because none of the MTAs (Postfix, Exim) currently send the cert_username field. This may have allowed users with trusted certificate to specify any username in the authentication. This bug didn't affect Dovecot's Submission service.
111 lines
3.0 KiB
Makefile
111 lines
3.0 KiB
Makefile
# $OpenBSD: Makefile,v 1.271 2019/02/08 13:34:40 sthen Exp $
|
|
|
|
COMMENT-server= compact IMAP/POP3 server
|
|
COMMENT-ldap= LDAP authentication / dictionary support for Dovecot
|
|
COMMENT-mysql= MySQL authentication / dictionary support for Dovecot
|
|
COMMENT-postgresql= PostgreSQL authentication / dictionary support for Dovecot
|
|
|
|
V_MAJOR= 2.3
|
|
V_DOVECOT= 2.3.4.1
|
|
|
|
DISTNAME= dovecot-${V_DOVECOT}
|
|
PKGNAME= dovecot-${V_DOVECOT}
|
|
PKGNAME-server= dovecot-${V_DOVECOT}
|
|
PKGSPEC-server= dovecot-=${V_DOVECOT}
|
|
PKGNAME-ldap= dovecot-ldap-${V_DOVECOT}
|
|
PKGNAME-mysql= dovecot-mysql-${V_DOVECOT}
|
|
PKGNAME-postgresql= dovecot-postgresql-${V_DOVECOT}
|
|
CATEGORIES= mail
|
|
MASTER_SITES= ${HOMEPAGE}releases/${V_MAJOR}/
|
|
|
|
SHARED_LIBS= dovecot-compression 1.0 \
|
|
dovecot-dsync 1.0 \
|
|
dovecot-fts 1.0 \
|
|
dovecot-lda 3.0 \
|
|
dovecot-ldap 1.0 \
|
|
dovecot-login 3.0 \
|
|
dovecot-sql 3.0 \
|
|
dovecot-storage 3.0 \
|
|
dovecot 3.0
|
|
|
|
HOMEPAGE= https://dovecot.org/
|
|
|
|
MAINTAINER= Brad Smith <brad@comstyle.com>
|
|
|
|
# LGPLv2.1 and MIT
|
|
PERMIT_PACKAGE_CDROM= Yes
|
|
|
|
WANTLIB-server= bz2 c crypto expat iconv lz4 lzma m pthread sqlite3 ssl z sodium
|
|
WANTLIB-ldap= crypto iconv lber ldap sasl2 ssl lib/dovecot/dovecot
|
|
WANTLIB-mysql= crypto m lib/mysql/mysqlclient pthread ssl z
|
|
WANTLIB-postgresql= pq
|
|
|
|
LIB_DEPENDS+= archivers/bzip2 \
|
|
archivers/lz4 \
|
|
archivers/xz \
|
|
converters/libiconv \
|
|
databases/sqlite3 \
|
|
security/libsodium
|
|
LIB_DEPENDS-ldap= ${BASE_PKGPATH} \
|
|
databases/openldap
|
|
LIB_DEPENDS-mysql= databases/mariadb
|
|
RUN_DEPENDS-mysql= ${BASE_PKGPATH}
|
|
LIB_DEPENDS-postgresql= databases/postgresql
|
|
RUN_DEPENDS-postgresql= ${BASE_PKGPATH}
|
|
|
|
CONFIGURE_STYLE= gnu
|
|
# XXX linking test-ssl-iostream fails with base libtool; problem is probably
|
|
# in Dovecot's Makefile as it does still warn with GNU libtool.
|
|
USE_LIBTOOL= gnu
|
|
CONFIGURE_ARGS= --with-rundir=/var/dovecot \
|
|
--with-sql=plugin \
|
|
--with-sqlite \
|
|
--with-statedir=/var/dovecot \
|
|
--without-icu \
|
|
--without-nss \
|
|
--without-pam \
|
|
--without-shadow \
|
|
--with-solr \
|
|
--without-stemmer \
|
|
--without-textcat \
|
|
--without-vpopmail
|
|
CONFIGURE_ENV= CPPFLAGS="-I${LOCALBASE}/include" \
|
|
LDFLAGS="-L${LOCALBASE}/lib"
|
|
|
|
PSEUDO_FLAVORS= no_db no_ldap no_mysql no_postgresql
|
|
FLAVOR?=
|
|
.if ${FLAVOR:Mno_db}
|
|
FLAVOR+= no_ldap no_mysql no_postgresql
|
|
.endif
|
|
|
|
MULTI_PACKAGES= -server -ldap -mysql -postgresql
|
|
SUBPACKAGE?= -server
|
|
|
|
.include <bsd.port.arch.mk>
|
|
|
|
.if ${BUILD_PACKAGES:M-ldap}
|
|
CONFIGURE_ARGS+=--with-ldap=plugin
|
|
.endif
|
|
|
|
.if ${BUILD_PACKAGES:M-mysql}
|
|
CONFIGURE_ARGS+=--with-mysql
|
|
.endif
|
|
|
|
.if ${BUILD_PACKAGES:M-postgresql}
|
|
CONFIGURE_ARGS+=--with-pgsql
|
|
.endif
|
|
|
|
pre-build:
|
|
@${SUBST_CMD} ${WRKSRC}/doc/example-config/conf.d/10-mail.conf
|
|
|
|
post-install:
|
|
${INSTALL_DATA} ${WRKSRC}/doc/dovecot-openssl.cnf \
|
|
${PREFIX}/share/examples/dovecot
|
|
${INSTALL_SCRIPT} ${WRKSRC}/doc/mkcert.sh \
|
|
${PREFIX}/sbin/dovecot-mkcert.sh
|
|
@rm ${PREFIX}/share/doc/dovecot/{dovecot-openssl.cnf,mkcert.sh}
|
|
@find ${PREFIX}/lib/dovecot -name '*.a' -print | xargs rm
|
|
@find ${PREFIX}/lib/dovecot -name '*.la' -print | xargs rm
|
|
|
|
.include <bsd.port.mk>
|