mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-10-31 21:57:12 +00:00
Code Issues Releases Activity
b9517a0cd0
freebsd-ports/security/openssl-beta/Makefile

106 lines
3.7 KiB
Makefile
Raw Normal View History

Bring this port up to openssl-0.9.1c after a repository copy from SSLeay. OpenSSL is a successor of SSLeay (see http://www.openssl.org/). This port uses almost the same files as SSLeay. So they can't be installed both. - make the port ${PREFIX} clean - reorganize PLIST (list links as normal files, which makes the PLIST shorter and easier to maintain) - reference ${PREFIX}/etc/ssleay.cnf only (there was a reference to ${PREFIX}/lib/ssleay.cnf somewhere) - some other minor portlint changes
1999-01-09 12:55:50 +00:00
# New ports collection makefile for: OpenSSL
# Date created: Sun Jan 3 19:36:27 CET 1999
Upgrade to 0.9.4.
1999-08-09 18:48:15 +00:00
# Whom: Dirk Froemberg <dirk@FreeBSD.org>
At long last! This is Eric Young's SSL library. The DES routines are not part of this build as they are part of mainstram FreeBSD. Please will a certificates expert check out the certificates location.
1996-03-03 21:32:35 +00:00
#
$Id$ -> $FreeBSD$
1999-08-31 01:53:22 +00:00
# $FreeBSD$
Add a line only contains a # after the $Id$ line.
1998-08-21 22:04:29 +00:00
#
At long last! This is Eric Young's SSL library. The DES routines are not part of this build as they are part of mainstram FreeBSD. Please will a certificates expert check out the certificates location.
1996-03-03 21:32:35 +00:00
Update with the new PORTNAME/PORTVERSION variables
2000-04-09 18:34:06 +00:00
PORTNAME= openssl
Correct whitespace introduced during PORTNAME conversion and portlint
2000-04-21 08:19:33 +00:00
PORTVERSION= 0.9.5a
Build and install shared libraries libcrypto.so.1 and libssl.so.1, too. Submitted by: Issei Suzuki <issei@jp.freebsd.org>
1999-11-07 22:19:49 +00:00
CATEGORIES= security devel
Upgrade to 0.9.2b. According to the OpenSSL-core-team you are strongly encouraged to upgrade any old version. The new version has a lot of bug fixes. - ${PREFIX}/bin/ssleay was renamed to ${PREFIX}/bin/openssl and ${PREFIX}/etc/ssleay.cnf to ${PREFIX}/lib/openssl.cnf - there are no links from e. g. ${PREFIX}/bin/md5 to ${PREFIX}/bin/ssleay any longer, instead you have to call "openssl md5" now - replaced HAS_CONFIGURE, CONFIGURE_SCRIPT and CONFIGURE_ENV with a do-configure target and changed the indention level - some perl scripts need perl5 now, so set USE_PERL5 and replace perl with ${PERL5} where neccessary. - honour ${CFLAGS}
1999-03-26 08:42:49 +00:00
MASTER_SITES= http://www.openssl.org/source/ \
ftp://ftp.openssl.org/source/ \
ftp://ftp.sunet.se/pub/security/tools/net/openssl/source/ \
ftp://ftp.cert.dfn.de/pub/tools/net/openssl/source/
Add more DISTSITES. The single one listed only allowed 10 simulanious anon connections -- not enough for the demands of the Awesome FreeBSD Ports Collection(tm).
1998-10-26 05:52:02 +00:00
Upgrade to 0.9.4.
1999-08-09 18:48:15 +00:00
MAINTAINER= dirk@FreeBSD.org
Set ONLY_FOR_ARCHS to i386. Apply openssl-0.9.1c-bnrec.patch via PATCHFILES: "DESCRIPTION: The Big Number (BN) library in OpenSSL 0.9.1c has some problems when dealing with very large numbers. Because mostly all other OpenSSL sub-libraries (including the RSA library) are based on BN, this can cause failures when doing certificate verification and performing other SSL functions. These BN bugs are already fixed for OpenSSL 0.9.2. But for OpenSSL 0.9.1c the easiest workaround to fix the subtle problems is to apply the above patch which mainly disables the broken Montgomery multiplication algorithm inside BN."
1999-03-06 11:36:23 +00:00
Check against ${OSVERSION} instead of the existence of the library files whether openssl should be build or not.
2000-01-28 22:05:15 +00:00
.include <bsd.port.pre.mk>
.if ${OSVERSION} >= 400014
Check wheather OpenSSL is installed in the base system already and skip openssl port if so. (I. e. check the existence of /usr/bin/openssl, /usr/lib/libcrypto.so and /usr/lib/libssl.so. If they exist set FORBIDDEN.)
1999-12-30 11:13:37 +00:00
FORBIDDEN= "OpenSSL is already in the base system"
.endif
Disable shared libraries for a.out systems in order to make it build on such systems. (I know we aren't supporting a.out systems any more, but this was requested by some people. And the change is trivial.) Tested by: nate
2000-04-25 22:16:24 +00:00
.if ${PORTOBJFORMAT} == "aout"
NOSHARED= yes
.endif
Check wheather OpenSSL is installed in the base system already and skip openssl port if so. (I. e. check the existence of /usr/bin/openssl, /usr/lib/libcrypto.so and /usr/lib/libssl.so. If they exist set FORBIDDEN.)
1999-12-30 11:13:37 +00:00
Upgrade to 0.9.2b. According to the OpenSSL-core-team you are strongly encouraged to upgrade any old version. The new version has a lot of bug fixes. - ${PREFIX}/bin/ssleay was renamed to ${PREFIX}/bin/openssl and ${PREFIX}/etc/ssleay.cnf to ${PREFIX}/lib/openssl.cnf - there are no links from e. g. ${PREFIX}/bin/md5 to ${PREFIX}/bin/ssleay any longer, instead you have to call "openssl md5" now - replaced HAS_CONFIGURE, CONFIGURE_SCRIPT and CONFIGURE_ENV with a do-configure target and changed the indention level - some perl scripts need perl5 now, so set USE_PERL5 and replace perl with ${PERL5} where neccessary. - honour ${CFLAGS}
1999-03-26 08:42:49 +00:00
RESTRICTED= "Cryptography"
USE_PERL5= yes
Disable shared libraries for a.out systems in order to make it build on such systems. (I know we aren't supporting a.out systems any more, but this was requested by some people. And the change is trivial.) Tested by: nate
2000-04-25 22:16:24 +00:00
.if defined(NOSHARED)
PLIST= ${PKGDIR}/PLIST.noshared
.else
Build and install shared libraries libcrypto.so.1 and libssl.so.1, too. Submitted by: Issei Suzuki <issei@jp.freebsd.org>
1999-11-07 22:19:49 +00:00
ALL_TARGET= freebsd-shared all
SHLIBVER= 1
MAKE_ENV+= SHLIBVER=${SHLIBVER}
Disable shared libraries for a.out systems in order to make it build on such systems. (I know we aren't supporting a.out systems any more, but this was requested by some people. And the change is trivial.) Tested by: nate
2000-04-25 22:16:24 +00:00
.endif
SSLeay version 0.6.2. This implementation has been built with Our ((actually its own but in our source tree) DES library and our MD{45}. You will need to link your SSL code with -ldes and -lmd. Are you happy now, Torsten? ;-)
1996-07-29 19:57:58 +00:00
Upgrade to 0.9.5a.
2000-04-16 12:24:45 +00:00
MANPREFIX= ${PREFIX}/openssl
MAN1= CA.pl.1 asn1parse.1 ca.1 ciphers.1 crl.1 crl2pkcs7.1 dgst.1 \
dhparam.1 dsa.1 dsaparam.1 enc.1 gendsa.1 genrsa.1 nseq.1 \
openssl.1 passwd.1 pkcs12.1 pkcs7.1 pkcs8.1 rand.1 req.1 \
rsa.1 s_client.1 s_server.1 sess_id.1 smime.1 speed.1 \
spkac.1 verify.1 version.1 x509.1
MAN3= BN_CTX_new.3 BN_CTX_start.3 BN_add.3 BN_add_word.3 \
BN_bn2bin.3 BN_cmp.3 BN_copy.3 BN_generate_prime.3 \
BN_mod_inverse.3 BN_mod_mul_montgomery.3 \
BN_mod_mul_reciprocal.3 BN_new.3 BN_num_bytes.3 BN_rand.3 \
BN_set_bit.3 BN_zero.3 CRYPTO_set_ex_data.3 \
DH_generate_key.3 DH_generate_parameters.3 \
DH_get_ex_new_index.3 DH_new.3 DH_set_method.3 DH_size.3 \
DSA_SIG_new.3 DSA_do_sign.3 DSA_dup_DH.3 DSA_generate_key.3 \
DSA_generate_parameters.3 DSA_get_ex_new_index.3 DSA_new.3 \
DSA_set_method.3 DSA_sign.3 DSA_size.3 ERR_GET_LIB.3 \
ERR_clear_error.3 ERR_error_string.3 ERR_get_error.3 \
ERR_load_crypto_strings.3 ERR_load_strings.3 \
ERR_print_errors.3 ERR_put_error.3 ERR_remove_state.3 \
EVP_DigestInit.3 EVP_EncryptInit.3 EVP_OpenInit.3 \
EVP_SealInit.3 EVP_SignInit.3 EVP_VerifyInit.3 \
OPENSSL_VERSION_NUMBER.3 OpenSSL_add_all_algorithms.3 \
RAND_add.3 RAND_bytes.3 RAND_cleanup.3 RAND_egd.3 \
RAND_load_file.3 RAND_set_rand_method.3 RSA_blinding_on.3 \
RSA_check_key.3 RSA_generate_key.3 RSA_get_ex_new_index.3 \
RSA_new.3 RSA_padding_add_PKCS1_type_1.3 RSA_print.3 \
RSA_private_encrypt.3 RSA_public_encrypt.3 RSA_set_method.3 \
RSA_sign.3 RSA_sign_ASN1_OCTET_STRING.3 RSA_size.3 \
SSL_get_error.3 blowfish.3 bn.3 bn_internal.3 buffer.3 \
crypto.3 d2i_DHparams.3 d2i_RSAPublicKey.3 des.3 dh.3 dsa.3 \
err.3 hmac.3 lh_stats.3 lhash.3 md5.3 mdc2.3 rand.3 rc4.3 \
ripemd.3 rsa.3 sha.3 ssl.3 threads.3
MAN5= config.5
MAN7= des_modes.7
Update to v 0.8.1. New algorithms (Blowfish &c) added. SSLv3 added. Thanks to: Richard Seaman <Dick@tar.com>
1997-08-15 15:32:11 +00:00
.if !defined(USA_RESIDENT) || ${USA_RESIDENT} != YES && ${USA_RESIDENT} != NO
pre-fetch:
Bring this port up to openssl-0.9.1c after a repository copy from SSLeay. OpenSSL is a successor of SSLeay (see http://www.openssl.org/). This port uses almost the same files as SSLeay. So they can't be installed both. - make the port ${PREFIX} clean - reorganize PLIST (list links as normal files, which makes the PLIST shorter and easier to maintain) - reference ${PREFIX}/etc/ssleay.cnf only (there was a reference to ${PREFIX}/lib/ssleay.cnf somewhere) - some other minor portlint changes
1999-01-09 12:55:50 +00:00
@${ECHO} ""
@${ECHO} "You must set variable USA_RESIDENT to YES, if you are USA resident"
Set ONLY_FOR_ARCHS to i386. Apply openssl-0.9.1c-bnrec.patch via PATCHFILES: "DESCRIPTION: The Big Number (BN) library in OpenSSL 0.9.1c has some problems when dealing with very large numbers. Because mostly all other OpenSSL sub-libraries (including the RSA library) are based on BN, this can cause failures when doing certificate verification and performing other SSL functions. These BN bugs are already fixed for OpenSSL 0.9.2. But for OpenSSL 0.9.1c the easiest workaround to fix the subtle problems is to apply the above patch which mainly disables the broken Montgomery multiplication algorithm inside BN."
1999-03-06 11:36:23 +00:00
@${ECHO} "or to NO, if you aren't USA resident to build this package."
Make it clear(er) that RSAREF is a port that must be installed, not, perhaps, some piece of the base system (a-la crypto). I wrote "rsaref port" instead of "security/rsaref" since on the remote chance that rsaref switches categories, I don't want the message to become wrong.
1999-08-18 00:02:55 +00:00
@${ECHO} "You must also have installed rsaref port if you are USA resident."
Bring this port up to openssl-0.9.1c after a repository copy from SSLeay. OpenSSL is a successor of SSLeay (see http://www.openssl.org/). This port uses almost the same files as SSLeay. So they can't be installed both. - make the port ${PREFIX} clean - reorganize PLIST (list links as normal files, which makes the PLIST shorter and easier to maintain) - reference ${PREFIX}/etc/ssleay.cnf only (there was a reference to ${PREFIX}/lib/ssleay.cnf somewhere) - some other minor portlint changes
1999-01-09 12:55:50 +00:00
@${FALSE}
Update to v 0.8.1. New algorithms (Blowfish &c) added. SSLv3 added. Thanks to: Richard Seaman <Dick@tar.com>
1997-08-15 15:32:11 +00:00
.elif defined(USA_RESIDENT)
Don't use rsaref if I_HAVE_AN_RSA_LICENSE is defined. Requested by: Garrett Wollman <wollman@FreeBSD.ORG>: "If you have an RSA license, you DON'T want to use rsaref -- it's slow as hell. The only reason you would want to use rsaref is: 1) You are in the US. 2) The patent hasn't expired yet (600-someodd days and counting). 3) You wouldn't have the right to use RSA otherwise."
1999-01-12 23:18:59 +00:00
.if ${USA_RESIDENT} == YES && !defined(I_HAVE_AN_RSA_LICENSE)
Upgrade to 0.9.2b. According to the OpenSSL-core-team you are strongly encouraged to upgrade any old version. The new version has a lot of bug fixes. - ${PREFIX}/bin/ssleay was renamed to ${PREFIX}/bin/openssl and ${PREFIX}/etc/ssleay.cnf to ${PREFIX}/lib/openssl.cnf - there are no links from e. g. ${PREFIX}/bin/md5 to ${PREFIX}/bin/ssleay any longer, instead you have to call "openssl md5" now - replaced HAS_CONFIGURE, CONFIGURE_SCRIPT and CONFIGURE_ENV with a do-configure target and changed the indention level - some perl scripts need perl5 now, so set USE_PERL5 and replace perl with ${PERL5} where neccessary. - honour ${CFLAGS}
1999-03-26 08:42:49 +00:00
LIB_DEPENDS= rsaref.2:${PORTSDIR}/security/rsaref
Upgrade to OpenSSL 0.9.3: - some changes of the directory layout: e. g. ${PREFIX}/lib/openssl.cnf -> ${PREFIX}/openssl/openssl.cnf
1999-06-02 07:30:52 +00:00
RSAREF= rsaref
Update to v 0.8.1. New algorithms (Blowfish &c) added. SSLv3 added. Thanks to: Richard Seaman <Dick@tar.com>
1997-08-15 15:32:11 +00:00
.endif
.endif
Install SSLeay docs into ${PREFIX}/share/doc/SSLeay/... Submitted by: Igor Vinokurov <igor@ibank.ru> (on ports list)
1996-12-03 11:32:53 +00:00
Upgrade to 0.9.2b. According to the OpenSSL-core-team you are strongly encouraged to upgrade any old version. The new version has a lot of bug fixes. - ${PREFIX}/bin/ssleay was renamed to ${PREFIX}/bin/openssl and ${PREFIX}/etc/ssleay.cnf to ${PREFIX}/lib/openssl.cnf - there are no links from e. g. ${PREFIX}/bin/md5 to ${PREFIX}/bin/ssleay any longer, instead you have to call "openssl md5" now - replaced HAS_CONFIGURE, CONFIGURE_SCRIPT and CONFIGURE_ENV with a do-configure target and changed the indention level - some perl scripts need perl5 now, so set USE_PERL5 and replace perl with ${PERL5} where neccessary. - honour ${CFLAGS}
1999-03-26 08:42:49 +00:00
do-configure:
@cd ${WRKSRC} \
Upgrade to OpenSSL 0.9.3: - some changes of the directory layout: e. g. ${PREFIX}/lib/openssl.cnf -> ${PREFIX}/openssl/openssl.cnf
1999-06-02 07:30:52 +00:00
&& ${SETENV} CC="${CC}" CFLAGS="${CFLAGS}" PERL="${PERL}" \
./config --prefix=${PREFIX} --openssldir=${PREFIX}/openssl \
${RSAREF} -L${PREFIX}/lib
Upgrade to 0.9.2b. According to the OpenSSL-core-team you are strongly encouraged to upgrade any old version. The new version has a lot of bug fixes. - ${PREFIX}/bin/ssleay was renamed to ${PREFIX}/bin/openssl and ${PREFIX}/etc/ssleay.cnf to ${PREFIX}/lib/openssl.cnf - there are no links from e. g. ${PREFIX}/bin/md5 to ${PREFIX}/bin/ssleay any longer, instead you have to call "openssl md5" now - replaced HAS_CONFIGURE, CONFIGURE_SCRIPT and CONFIGURE_ENV with a do-configure target and changed the indention level - some perl scripts need perl5 now, so set USE_PERL5 and replace perl with ${PERL5} where neccessary. - honour ${CFLAGS}
1999-03-26 08:42:49 +00:00
Install SSLeay docs into ${PREFIX}/share/doc/SSLeay/... Submitted by: Igor Vinokurov <igor@ibank.ru> (on ports list)
1996-12-03 11:32:53 +00:00
post-install:
Disable shared libraries for a.out systems in order to make it build on such systems. (I know we aren't supporting a.out systems any more, but this was requested by some people. And the change is trivial.) Tested by: nate
2000-04-25 22:16:24 +00:00
.if !defined(NOSHARED)
Build and install shared libraries libcrypto.so.1 and libssl.so.1, too. Submitted by: Issei Suzuki <issei@jp.freebsd.org>
1999-11-07 22:19:49 +00:00
.for i in libcrypto libssl
@${INSTALL_DATA} ${WRKSRC}/$i.so.${SHLIBVER} ${PREFIX}/lib
Upgrade to 0.9.5a.
2000-04-16 12:24:45 +00:00
@${LN} -sf $i.so.${SHLIBVER} ${PREFIX}/lib/$i.so
Build and install shared libraries libcrypto.so.1 and libssl.so.1, too. Submitted by: Issei Suzuki <issei@jp.freebsd.org>
1999-11-07 22:19:49 +00:00
.endfor
@${SETENV} OBJFORMAT=${PORTOBJFORMAT} ${LDCONFIG} -m ${PREFIX}/lib
Disable shared libraries for a.out systems in order to make it build on such systems. (I know we aren't supporting a.out systems any more, but this was requested by some people. And the change is trivial.) Tested by: nate
2000-04-25 22:16:24 +00:00
.endif
Install SSLeay docs into ${PREFIX}/share/doc/SSLeay/... Submitted by: Igor Vinokurov <igor@ibank.ru> (on ports list)
1996-12-03 11:32:53 +00:00
.if !defined(NOPORTDOCS)
Bring this port up to openssl-0.9.1c after a repository copy from SSLeay. OpenSSL is a successor of SSLeay (see http://www.openssl.org/). This port uses almost the same files as SSLeay. So they can't be installed both. - make the port ${PREFIX} clean - reorganize PLIST (list links as normal files, which makes the PLIST shorter and easier to maintain) - reference ${PREFIX}/etc/ssleay.cnf only (there was a reference to ${PREFIX}/lib/ssleay.cnf somewhere) - some other minor portlint changes
1999-01-09 12:55:50 +00:00
@${MKDIR} ${PREFIX}/share/doc/openssl
Upgrade to 0.9.5a.
2000-04-16 12:24:45 +00:00
@${INSTALL_DATA} ${WRKSRC}/doc/openssl.txt ${PREFIX}/share/doc/openssl
Install SSLeay docs into ${PREFIX}/share/doc/SSLeay/... Submitted by: Igor Vinokurov <igor@ibank.ru> (on ports list)
1996-12-03 11:32:53 +00:00
.endif
Don't use ${PREFIX} in pkg/MESSAGE but /usr/local and substitute /usr/local accordingly via Makefile. Submitted by: Bill Fumerola <billf@FreeBSD.org>
1999-09-17 19:16:59 +00:00
@${SED} -e 's#/usr/local#${PREFIX}#g' ${PKGDIR}/MESSAGE
Install SSLeay docs into ${PREFIX}/share/doc/SSLeay/... Submitted by: Igor Vinokurov <igor@ibank.ru> (on ports list)
1996-12-03 11:32:53 +00:00
Check against ${OSVERSION} instead of the existence of the library files whether openssl should be build or not.
2000-01-28 22:05:15 +00:00
.include <bsd.port.post.mk>
Reference in New Issue Copy Permalink