1995-10-07 01:19:27 +00:00
|
|
|
# New ports collection makefile for: ssh
|
1999-06-15 20:14:04 +00:00
|
|
|
# Version required: 1.2.*
|
1995-10-07 01:19:27 +00:00
|
|
|
# Date created: 30 Jul 1995
|
1999-08-31 06:53:31 +00:00
|
|
|
# Whom: torstenb@FreeBSD.org
|
1995-10-07 01:19:27 +00:00
|
|
|
#
|
1999-08-31 01:53:22 +00:00
|
|
|
# $FreeBSD$
|
1996-03-23 23:36:32 +00:00
|
|
|
#
|
|
|
|
# Maximal ssh package requires YES values for
|
2000-02-12 19:27:40 +00:00
|
|
|
# USE_PERL, USE_TCPWRAP
|
1995-10-07 01:19:27 +00:00
|
|
|
#
|
|
|
|
|
1999-06-15 20:14:04 +00:00
|
|
|
DISTNAME= ssh-1.2.27
|
2000-02-20 17:30:54 +00:00
|
|
|
CATEGORIES= security net ipv6
|
1999-07-07 15:36:40 +00:00
|
|
|
MASTER_SITES= ftp://ftp.cs.hut.fi/pub/ssh/
|
1995-10-07 01:19:27 +00:00
|
|
|
|
1999-08-31 06:53:31 +00:00
|
|
|
MAINTAINER= torstenb@FreeBSD.org
|
1995-11-09 05:58:00 +00:00
|
|
|
|
2000-01-14 19:37:39 +00:00
|
|
|
USE_AUTOCONF= YES # unfortunately... see comments in patch-xa for details
|
|
|
|
|
1996-06-07 04:33:33 +00:00
|
|
|
# You can set USA_RESIDENT appropriately in /etc/make.conf if this bugs you..
|
|
|
|
|
1995-10-07 01:19:27 +00:00
|
|
|
.if defined(USA_RESIDENT) && ${USA_RESIDENT} == YES
|
(1) Add a new MASTER_SITE
(2) Reorganize MASTER_SITEs
(3) Remove reference to Phil Karn's ssh speedups, it is now distributed
as a full source package, and not a patch kit. If we want to use it,
we will have to make a new port for it.
(4) Use ${ECHO} instead of echo, ${RM} instead of rm, ${LN} instead of ln
(5) Use ${FALSE} instead of false
(6) Remove multiple blank lines in Makefile
(7) Remove trailing blank lines in pkg/DESCR
Submitted by: Alex Perel <veers@disturbed.net> (1, 2, 4, 6)
Bill Fumerola <billf@FreeBSD.org> (3, 5, 7)
1999-03-13 18:51:11 +00:00
|
|
|
MASTER_SITES+= \
|
|
|
|
ftp://ftp.replay.com/pub/replay/crypto/SSH/ \
|
1995-10-07 01:19:27 +00:00
|
|
|
ftp://nic.funet.fi/pub/crypt/mirrors/ftp.dsi.unimi.it/applied-crypto/ \
|
|
|
|
ftp://rzsun2.informatik.uni-hamburg.de/pub/virus/crypt/ripem/ \
|
1997-11-10 22:04:42 +00:00
|
|
|
ftp://idea.sec.dsi.unimi.it/pub/security/crypt/math/ \
|
1995-10-07 01:19:27 +00:00
|
|
|
ftp://ftp.univie.ac.at/security/crypt/cryptography/asymmetric/rsa/ \
|
|
|
|
ftp://isdec.vc.cvut.cz/pub/security/unimi/crypt/applied-crypto/
|
1998-10-08 06:16:18 +00:00
|
|
|
|
|
|
|
CONFIGURE_ARGS+= --with-rsaref
|
1998-10-08 06:17:56 +00:00
|
|
|
LIB_DEPENDS+= rsaref.2:${PORTSDIR}/security/rsaref
|
|
|
|
BUILD_DEPENDS+= /nonexistent:${PORTSDIR}/security/rsaref:extract
|
1995-10-07 01:19:27 +00:00
|
|
|
.endif
|
1998-10-08 06:16:18 +00:00
|
|
|
|
1996-04-17 01:07:04 +00:00
|
|
|
RESTRICTED= "Crypto; export-controlled"
|
1995-10-07 01:19:27 +00:00
|
|
|
IS_INTERACTIVE= YES
|
|
|
|
|
|
|
|
GNU_CONFIGURE= YES
|
|
|
|
|
1998-10-08 13:11:52 +00:00
|
|
|
CONFIGURE_ARGS+= --with-etcdir=${PREFIX}/etc
|
1995-10-07 01:19:27 +00:00
|
|
|
|
1997-04-25 05:01:06 +00:00
|
|
|
#Uncomment if all your users are in their own group and their homedir
|
|
|
|
#is writeable by that group. Beware the security implications!
|
|
|
|
#CONFIGURE_ARGS+= --enable-group-writeability
|
|
|
|
|
|
|
|
#Uncomment if you want to allow ssh to emulate an unencrypted rsh connection
|
|
|
|
#over a secure medium. This is normally dangerous since it can lead to the
|
|
|
|
#disclosure keys and passwords.
|
|
|
|
#CONFIGURE_ARGS+= --with-none
|
|
|
|
|
1998-08-01 22:24:55 +00:00
|
|
|
.if defined(KRB5_HOME) && exists(${KRB5_HOME})
|
1999-08-09 17:12:44 +00:00
|
|
|
CONFIGURE_ARGS+=--with-kerberos5=${KRB5_HOME} --enable-kerberos-tgt-passing \
|
|
|
|
--disable-suid-ssh
|
1998-08-01 22:24:55 +00:00
|
|
|
.endif
|
|
|
|
|
1995-10-07 01:19:27 +00:00
|
|
|
# Include support for the SecureID card
|
|
|
|
# Warning: untested !
|
|
|
|
.if defined(USE_SECUREID) && ${USE_SECUREID} == YES
|
|
|
|
CONFIGURE_ARGS+= --with-secureid
|
|
|
|
.endif
|
|
|
|
|
|
|
|
# Don't use IDEA. IDEA can be freely used for non-commercial use. However,
|
1997-07-01 02:39:26 +00:00
|
|
|
# commercial use may require a licence in a number of countries
|
1995-10-07 01:19:27 +00:00
|
|
|
# Warning: untested !
|
|
|
|
.if defined(DONT_USE_IDEA) && ${DONT_USE_IDEA} == YES
|
|
|
|
CONFIGURE_ARGS+= --without-idea
|
|
|
|
.endif
|
|
|
|
|
1998-10-30 06:15:18 +00:00
|
|
|
.if !exists(${X11BASE}/bin/xauth)
|
|
|
|
CONFIGURE_ARGS+= --without-x
|
|
|
|
.endif
|
|
|
|
|
1998-06-12 07:55:14 +00:00
|
|
|
MAN1= scp1.1 ssh-add1.1 ssh-agent1.1 ssh-keygen1.1 ssh1.1 \
|
|
|
|
make-ssh-known-hosts1.1
|
|
|
|
MAN8= sshd1.8
|
1999-07-16 06:09:43 +00:00
|
|
|
MLINKS= make-ssh-known-hosts1.1 make-ssh-known-hosts.1 \
|
|
|
|
scp1.1 scp.1 \
|
|
|
|
ssh-add1.1 ssh-add.1 \
|
|
|
|
ssh-agent1.1 ssh-agent.1 \
|
|
|
|
ssh-keygen1.1 ssh-keygen.1 \
|
|
|
|
ssh1.1 ssh.1 \
|
|
|
|
ssh.1 slogin.1 \
|
|
|
|
ssh1.1 slogin1.1 \
|
|
|
|
sshd1.8 sshd.8
|
1996-11-18 11:44:27 +00:00
|
|
|
|
1995-10-07 01:19:27 +00:00
|
|
|
pre-patch:
|
1997-09-11 18:31:52 +00:00
|
|
|
@${MV} -f ${WRKSRC}/make-ssh-known-hosts.pl \
|
1995-10-07 01:19:27 +00:00
|
|
|
${WRKSRC}/make-ssh-known-hosts.pl.in
|
|
|
|
|
|
|
|
fetch-depends:
|
|
|
|
.if !defined(USA_RESIDENT) || ${USA_RESIDENT} != YES && ${USA_RESIDENT} != NO
|
(1) Add a new MASTER_SITE
(2) Reorganize MASTER_SITEs
(3) Remove reference to Phil Karn's ssh speedups, it is now distributed
as a full source package, and not a patch kit. If we want to use it,
we will have to make a new port for it.
(4) Use ${ECHO} instead of echo, ${RM} instead of rm, ${LN} instead of ln
(5) Use ${FALSE} instead of false
(6) Remove multiple blank lines in Makefile
(7) Remove trailing blank lines in pkg/DESCR
Submitted by: Alex Perel <veers@disturbed.net> (1, 2, 4, 6)
Bill Fumerola <billf@FreeBSD.org> (3, 5, 7)
1999-03-13 18:51:11 +00:00
|
|
|
@ ${ECHO}
|
|
|
|
@ ${ECHO} You must set the variable USA_RESIDENT to YES if you are a
|
|
|
|
@ ${ECHO} United States resident, otherwise NO.
|
|
|
|
@ ${ECHO} If you are a US resident then this port must also fetch
|
|
|
|
@ ${ECHO} the RSAREF2 library from sources abroad \(RSA Inc. holds a
|
|
|
|
@ ${ECHO} patent on RSA and public key crypto in general in the United
|
|
|
|
@ ${ECHO} States so using RSA implementations other than RSAREF there
|
|
|
|
@ ${ECHO} may violate US patent law\).
|
|
|
|
@ ${FALSE}
|
1995-10-07 01:19:27 +00:00
|
|
|
.endif
|
|
|
|
|
|
|
|
post-install:
|
1996-08-08 13:57:02 +00:00
|
|
|
@if [ ! -f ${PREFIX}/etc/ssh_host_key ]; then \
|
(1) Add a new MASTER_SITE
(2) Reorganize MASTER_SITEs
(3) Remove reference to Phil Karn's ssh speedups, it is now distributed
as a full source package, and not a patch kit. If we want to use it,
we will have to make a new port for it.
(4) Use ${ECHO} instead of echo, ${RM} instead of rm, ${LN} instead of ln
(5) Use ${FALSE} instead of false
(6) Remove multiple blank lines in Makefile
(7) Remove trailing blank lines in pkg/DESCR
Submitted by: Alex Perel <veers@disturbed.net> (1, 2, 4, 6)
Bill Fumerola <billf@FreeBSD.org> (3, 5, 7)
1999-03-13 18:51:11 +00:00
|
|
|
${ECHO} "Generating a secret host key..."; \
|
1996-08-08 13:57:02 +00:00
|
|
|
${PREFIX}/bin/ssh-keygen -f ${PREFIX}/etc/ssh_host_key -N ""; \
|
|
|
|
fi
|
1996-06-15 17:50:18 +00:00
|
|
|
@if [ ! -f ${PREFIX}/etc/rc.d/sshd.sh ]; then \
|
(1) Add a new MASTER_SITE
(2) Reorganize MASTER_SITEs
(3) Remove reference to Phil Karn's ssh speedups, it is now distributed
as a full source package, and not a patch kit. If we want to use it,
we will have to make a new port for it.
(4) Use ${ECHO} instead of echo, ${RM} instead of rm, ${LN} instead of ln
(5) Use ${FALSE} instead of false
(6) Remove multiple blank lines in Makefile
(7) Remove trailing blank lines in pkg/DESCR
Submitted by: Alex Perel <veers@disturbed.net> (1, 2, 4, 6)
Bill Fumerola <billf@FreeBSD.org> (3, 5, 7)
1999-03-13 18:51:11 +00:00
|
|
|
${ECHO} "Installing ${PREFIX}/etc/rc.d/sshd.sh startup file."; \
|
|
|
|
${ECHO} "#!/bin/sh" > ${PREFIX}/etc/rc.d/sshd.sh; \
|
|
|
|
${ECHO} "[ -x ${PREFIX}/sbin/sshd ] && ${PREFIX}/sbin/sshd && ${ECHO} -n ' sshd'" >> ${PREFIX}/etc/rc.d/sshd.sh; \
|
1999-08-22 19:01:07 +00:00
|
|
|
${CHMOD} 751 ${PREFIX}/etc/rc.d/sshd.sh; \
|
1996-06-15 17:50:18 +00:00
|
|
|
fi
|
1995-10-07 01:19:27 +00:00
|
|
|
|
1999-01-02 00:12:21 +00:00
|
|
|
.include <bsd.port.pre.mk>
|
1996-01-25 02:08:25 +00:00
|
|
|
|
1996-03-24 23:04:17 +00:00
|
|
|
.if defined(USE_PERL) && ${USE_PERL} == YES || \
|
1998-09-15 21:31:59 +00:00
|
|
|
exists(${PERL5}) && (!defined(USE_PERL) || ${USE_PERL} != NO)
|
1999-01-02 00:12:21 +00:00
|
|
|
USE_PERL5= yes
|
1998-09-15 21:31:59 +00:00
|
|
|
CONFIGURE_ENV+= PERL=${PERL5}
|
1996-03-23 23:36:32 +00:00
|
|
|
.else
|
|
|
|
CONFIGURE_ENV+= PERL=/replace_it_with_PERL_path
|
|
|
|
.endif
|
|
|
|
|
1996-01-25 02:08:25 +00:00
|
|
|
# Include tcp-wrapper support (call remote identd)
|
1999-04-03 03:35:50 +00:00
|
|
|
.if exists(/usr/include/tcpd.h)
|
|
|
|
CONFIGURE_ARGS+= --with-libwrap
|
|
|
|
.else
|
1996-01-25 02:08:25 +00:00
|
|
|
.if defined(USE_TCPWRAP) && ${USE_TCPWRAP} == YES || \
|
|
|
|
exists(${PREFIX}/lib/libwrap.a) && \
|
|
|
|
(!defined(USE_TCPWRAP) || ${USE_TCPWRAP} != NO)
|
1996-01-25 04:17:28 +00:00
|
|
|
CONFIGURE_ENV+= LDFLAGS=-L${PREFIX}/lib CFLAGS="${CFLAGS} -I${PREFIX}/include"
|
1996-01-25 02:08:25 +00:00
|
|
|
CONFIGURE_ARGS+= --with-libwrap
|
1998-09-17 10:53:31 +00:00
|
|
|
LIB_DEPENDS+= wrap.7:${PORTSDIR}/security/tcp_wrapper
|
1996-01-25 02:08:25 +00:00
|
|
|
.endif
|
1999-04-03 03:35:50 +00:00
|
|
|
.endif
|
1996-01-25 02:08:25 +00:00
|
|
|
|
2000-01-14 19:37:39 +00:00
|
|
|
# Original IPv6 patches were obtained from ftp://ftp.kyoto.wide.ad.jp/IPv6/ssh/
|
|
|
|
# ssh-1.2.27-IPv6-1.5-patch.gz
|
2000-02-12 19:27:40 +00:00
|
|
|
# We still use USE_INET6 here and try to support pre 4.0 machines with kame
|
|
|
|
# IPv6 stack
|
|
|
|
.if ${OSVERSION} >= 400014 || ( ${OSVERSION} < 400014 && defined(USE_INET6) )
|
2000-02-20 17:30:54 +00:00
|
|
|
CONFIGURE_ARGS+= --enable-ipv6
|
2000-01-14 19:37:39 +00:00
|
|
|
.else
|
|
|
|
CONFIGURE_ARGS+= --disable-ipv6
|
|
|
|
.endif
|
|
|
|
|
1996-07-22 23:06:08 +00:00
|
|
|
# Include SOCKS firewall support
|
|
|
|
.if defined(USE_SOCKS) && ${USE_SOCKS} == YES
|
1997-12-24 18:46:11 +00:00
|
|
|
CONFIGURE_ARGS+= --with-socks="-L${PREFIX}/lib -lsocks5" --with-socks5
|
1996-07-22 23:06:08 +00:00
|
|
|
.endif
|
1999-01-02 00:12:21 +00:00
|
|
|
|
1999-11-06 19:43:18 +00:00
|
|
|
# Include extra files if X11 is installed
|
|
|
|
.if exists(${X11BASE}/lib/libX11.a)
|
|
|
|
PLIST:= ${WRKDIR}/PLIST
|
|
|
|
pre-install:
|
|
|
|
@${CAT} ${PKGDIR}/PLIST.X11 > ${PLIST}
|
|
|
|
@${CAT} ${PKGDIR}/PLIST >> ${PLIST}
|
|
|
|
.endif
|
|
|
|
|
1999-01-02 00:12:21 +00:00
|
|
|
.include <bsd.port.post.mk>
|