mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-11-04 22:33:27 +00:00
Code Issues Releases Activity
f5507f4941
freebsd-ports/security/ssh/Makefile

142 lines
4.1 KiB
Makefile
Raw Normal View History

Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 01:19:27 +00:00
# New ports collection makefile for: ssh
# Date created: 30 Jul 1995
FreeBSD.ORG -> FreeBSD.org Prompted by PR: 13476, 13477 Submitted by: KATO Tsuguru
1999-08-31 06:53:31 +00:00
# Whom: torstenb@FreeBSD.org
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 01:19:27 +00:00
#
$Id$ -> $FreeBSD$
1999-08-31 01:53:22 +00:00
# $FreeBSD$
Move perl depends under USE_PERL
1996-03-23 23:36:32 +00:00
#
# Maximal ssh package requires YES values for
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 00:19:02 +00:00
# WITH_PERL, WITH_TCPWRAP
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 01:19:27 +00:00
#
Update with the new PORTNAME/PORTVERSION variables
2000-04-09 18:34:06 +00:00
PORTNAME= ssh
Correct whitespace introduced during PORTNAME conversion and portlint
2000-04-21 08:19:33 +00:00
PORTVERSION= 1.2.27
Remove dependency on rsaref, comment out RESTRICTED line (but leave it there for reference in case we replace these with a CRYPTO variable), and bump PORTREVISION.
2000-09-17 08:45:12 +00:00
PORTREVISION= 1
Remove redundant/inappropriate CATEGORIES. People need to start reading the Porter's Handbook. :-)
2000-06-02 03:18:54 +00:00
CATEGORIES= security ipv6
Fennerize MASTER_SITES and replace with a fresh set which a) actually carry the distfile and b) are probably better sorted networkologically for the majority of users. Trim DESCR down to a sane length.
2000-09-21 23:37:29 +00:00
MASTER_SITES= ftp://ftp.cs.engr.uky.edu/cs/software/ \
ftp://ftp.cs.umn.edu/dept/users/rybski/ \
ftp://ftp.net.ohio-state.edu/disk/d/security/ssh/ \
ftp://ftp.cronyx.ru/.w2/mirror/ssh/old/ \
ftp://ftp.nsysu.edu.tw/Unix/Security/ssh/old/ \
ftp://ftp.tokyonet.ad.jp/.da0/security/ssh/old/ \
Freshen MASTER_SITEs
2000-04-24 08:19:36 +00:00
ftp://ftp.comp.hkbu.edu.hk/.6/unix/ \
Fennerize MASTER_SITES and replace with a fresh set which a) actually carry the distfile and b) are probably better sorted networkologically for the majority of users. Trim DESCR down to a sane length.
2000-09-21 23:37:29 +00:00
ftp://ftp.dei.uc.pt/.disk2/Crypto/SSH/old/
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 01:19:27 +00:00
Take over maintainership of this port since the previous maintainer is too busy to keep up with it. Approved by: asami
2000-04-21 09:19:54 +00:00
MAINTAINER= kris@FreeBSD.org
Add torstenb as maintainer.
1995-11-09 05:58:00 +00:00
Remove dependency on rsaref, comment out RESTRICTED line (but leave it there for reference in case we replace these with a CRYPTO variable), and bump PORTREVISION.
2000-09-17 08:45:12 +00:00
#RESTRICTED= "Crypto: export-controlled"
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 01:19:27 +00:00
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 02:03:30 +00:00
USE_AUTOCONF= YES
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 01:19:27 +00:00
GNU_CONFIGURE= YES
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 02:03:30 +00:00
USE_PERL5= YES
CONFIGURE_ENV+= PERL=${PERL5}
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 01:19:27 +00:00
Um, be careful when you copy stuff around -- change the second CONFIGURE_ARGS defintion to use "+=" so it won't override the first. While I'm here, GNU_CONFIGURE implies --prefix=${PREFIX} so take it out.
1998-10-08 13:11:52 +00:00
CONFIGURE_ARGS+= --with-etcdir=${PREFIX}/etc
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 01:19:27 +00:00
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 02:03:30 +00:00
# Uncomment if all your users are in their own group and their homedir
# is writeable by that group. Beware the security implications!
#
Update from ssh-1.2.19 to ssh-1.2.20. All patches applied still, I just regenerated them to fix the line numbers. Also, I added two commented out options in Makefile, one to tell sshd that a group writeable homedir is OK because all users are in their own group, and the other is to allow an unencrypted connection (which is dangerous since it can lead to compromise of keys), but on a secure network it's damn useful for backups etc.
1997-04-25 05:01:06 +00:00
#CONFIGURE_ARGS+= --enable-group-writeability
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 02:03:30 +00:00
# Uncomment if you want to allow ssh to emulate an unencrypted rsh connection
# over a secure medium (i.e. allow SSH connections without encryption).
# This is normally dangerous since it can lead to the disclosure of keys
# and passwords.
#
Update from ssh-1.2.19 to ssh-1.2.20. All patches applied still, I just regenerated them to fix the line numbers. Also, I added two commented out options in Makefile, one to tell sshd that a group writeable homedir is OK because all users are in their own group, and the other is to allow an unencrypted connection (which is dangerous since it can lead to compromise of keys), but on a secure network it's damn useful for backups etc.
1997-04-25 05:01:06 +00:00
#CONFIGURE_ARGS+= --with-none
If KRB5_HOME is defined, compile ssh with krb5 support.
1998-08-01 22:24:55 +00:00
.if defined(KRB5_HOME) && exists(${KRB5_HOME})
SUID ssh breaks kerberos; disable in the kerberized case. I even like the idea of breaking SUID bit permanently, but I'll leave this up to the maintainer.
1999-08-09 17:12:44 +00:00
CONFIGURE_ARGS+=--with-kerberos5=${KRB5_HOME} --enable-kerberos-tgt-passing \
--disable-suid-ssh
If KRB5_HOME is defined, compile ssh with krb5 support.
1998-08-01 22:24:55 +00:00
.endif
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 01:19:27 +00:00
# Include support for the SecureID card
# Warning: untested !
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 02:03:30 +00:00
#
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 00:19:02 +00:00
.if defined(WITH_SECUREID)
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 01:19:27 +00:00
CONFIGURE_ARGS+= --with-secureid
.endif
# Don't use IDEA. IDEA can be freely used for non-commercial use. However,
Style cleanup of the makefile. Add USE_PERL5 by default.
2000-04-24 02:03:30 +00:00
# commercial use may require a licence in a number of countries. Since SSH
# itself may not be used for commercial purposes without a license, we
# enable IDEA by default since the user would already be getting himself
# into trouble.
#
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 00:19:02 +00:00
.if defined(WITHOUT_IDEA)
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 01:19:27 +00:00
CONFIGURE_ARGS+= --without-idea
.endif
1.2.22 -> 1.2.25 Somebody needs to go through patch-af to check it, since I'm not sure about some of the stuff. This version fixes a security flaw in previous version.
1998-06-12 07:55:14 +00:00
MAN1= scp1.1 ssh-add1.1 ssh-agent1.1 ssh-keygen1.1 ssh1.1 \
make-ssh-known-hosts1.1
MAN8= sshd1.8
Remove manpages from PLIST and use MLINKS instead of a bunch of ${LN} calls.
1999-07-16 06:09:43 +00:00
MLINKS= make-ssh-known-hosts1.1 make-ssh-known-hosts.1 \
scp1.1 scp.1 \
ssh-add1.1 ssh-add.1 \
ssh-agent1.1 ssh-agent.1 \
ssh-keygen1.1 ssh-keygen.1 \
ssh1.1 ssh.1 \
ssh.1 slogin.1 \
ssh1.1 slogin1.1 \
sshd1.8 sshd.8
Use MAN? macros. CATEGORIES+= -> CATEGORIES.
1996-11-18 11:44:27 +00:00
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 01:19:27 +00:00
pre-patch:
mv -> ${MV}.
1997-09-11 18:31:52 +00:00
@${MV} -f ${WRKSRC}/make-ssh-known-hosts.pl \
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 01:19:27 +00:00
${WRKSRC}/make-ssh-known-hosts.pl.in
post-install:
Several fixes/improvements :- - protect the secret RSA etc/ssh_host_key. It is now generated on install (either by pkg_add or make install) if not already present and is not ever added to a package since it's your host's credentials. It should not be removed on pkg_delete, since you are in big trouble if you did this (for example) pkg_delete ssh-1.2.14; pkg_add ssh-1.2.15.tgz. - fix the broken manpage symlink when compressing man pages (slogin.1 has been causing /etc/weekly to generate cron messages) - zlib 1.0.4 is now "blessed" again, the ssh working sources now use this instead of v0.95. The decompression problem was fixed in either 1.0.3 or 1.0.4. Also, the current version of cvs uses zlib 1.0.4 as well.. - perl5.002 -> perl5.003 Reviewed by: torstenb
1996-08-08 13:57:02 +00:00
@if [ ! -f ${PREFIX}/etc/ssh_host_key ]; then \
Don't install the startup script if ssh is being run out of inetd.conf PR: 15691 Submitted by: Roger Marquis <marquis@roble.com>
2000-08-23 09:57:05 +00:00
${ECHO} "Generating a secret host key..."; \
${PREFIX}/bin/ssh-keygen -f ${PREFIX}/etc/ssh_host_key -N ""; \
fi; \
if [ "`grep ssh /etc/inetd.conf|grep -v ^#ssh`" = "" ]; then \
if [ ! -f ${PREFIX}/etc/rc.d/sshd.sh ]; then \
(1) Add a new MASTER_SITE (2) Reorganize MASTER_SITEs (3) Remove reference to Phil Karn's ssh speedups, it is now distributed as a full source package, and not a patch kit. If we want to use it, we will have to make a new port for it. (4) Use ${ECHO} instead of echo, ${RM} instead of rm, ${LN} instead of ln (5) Use ${FALSE} instead of false (6) Remove multiple blank lines in Makefile (7) Remove trailing blank lines in pkg/DESCR Submitted by: Alex Perel <veers@disturbed.net> (1, 2, 4, 6) Bill Fumerola <billf@FreeBSD.org> (3, 5, 7)
1999-03-13 18:51:11 +00:00
${ECHO} "Installing ${PREFIX}/etc/rc.d/sshd.sh startup file."; \
Add better sshd startup scripts; specifically, allow restarting and stopping the server. Martti's submission did not include -h, which I added because if I had added the scripts the way he submitted them, the server wouldn't be started on startup. PR: 10196 Submitted by: Martti Kuparinen <martti.kuparinen@ericsson.com> Reviewed by: kris (partially) No response: maintainers (PR opened February 22, 1999)
2000-04-05 22:21:44 +00:00
${SED} -e 's+!!PREFIX!!+${PREFIX}+g' ${FILESDIR}/sshd.sh \
Don't install the startup script if ssh is being run out of inetd.conf PR: 15691 Submitted by: Roger Marquis <marquis@roble.com>
2000-08-23 09:57:05 +00:00
> ${PREFIX}/etc/rc.d/sshd.sh; \
chmod -> ${CHMOD} chown -> ${CHOWN}
1999-08-22 19:01:07 +00:00
${CHMOD} 751 ${PREFIX}/etc/rc.d/sshd.sh; \
Don't install the startup script if ssh is being run out of inetd.conf PR: 15691 Submitted by: Roger Marquis <marquis@roble.com>
2000-08-23 09:57:05 +00:00
fi; \
Install an sshd.sh startup file.
1996-06-15 17:50:18 +00:00
fi
Ssh is a secure rlogin/rsh/rcp replacement with strong authentication (.rhosts together with RSA based host authentication, and pure RSA authentication) and improved privacy (all communications are automatically and transparently encrypted).
1995-10-07 01:19:27 +00:00
Change *_DEPENDS on lang/perl5 to USE_PERL5 so we won't have any dependencies to perl5 in -current. This might cause some unwanted perl5 installations on -stable (if it was originally RUN_DEPENDS, perl5 will now be installed during build too, etc.), but its lifetime is limited anyway.
1999-01-02 00:12:21 +00:00
.include <bsd.port.pre.mk>
Autopick any wish present even wish4.0 Autopick libwrap.a
1996-01-25 02:08:25 +00:00
# Include tcp-wrapper support (call remote identd)
detect/use -current libwrap
1999-04-03 03:35:50 +00:00
.if exists(/usr/include/tcpd.h)
CONFIGURE_ARGS+= --with-libwrap
.else
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 00:19:02 +00:00
.if defined(WITH_TCPWRAP) || (exists(${PREFIX}/lib/libwrap.a) \
&& !defined(WITHOUT_TCPWRAP))
Understands shared libwrap now
1996-01-25 04:17:28 +00:00
CONFIGURE_ENV+= LDFLAGS=-L${PREFIX}/lib CFLAGS="${CFLAGS} -I${PREFIX}/include"
Autopick any wish present even wish4.0 Autopick libwrap.a
1996-01-25 02:08:25 +00:00
CONFIGURE_ARGS+= --with-libwrap
tcp_wrapper is now converted to ELF. While I'm here, fix smail Makefile: libwrap is a shared library so it should be LIB_DEPENDS, and delete some spaces and tab-only lines.
1998-09-17 10:53:31 +00:00
LIB_DEPENDS+= wrap.7:${PORTSDIR}/security/tcp_wrapper
Autopick any wish present even wish4.0 Autopick libwrap.a
1996-01-25 02:08:25 +00:00
.endif
detect/use -current libwrap
1999-04-03 03:35:50 +00:00
.endif
Autopick any wish present even wish4.0 Autopick libwrap.a
1996-01-25 02:08:25 +00:00
Add IPv6 support to ssh. The IPv6 patch was obtained from the kame repository and has been been writen by KIKUCHI Takahiro <kick@kyoto.wide.ad.jp> Due to the whole mess with different patches it was necessary to include both the IPv6 patch and patch-ssh-1.2.27-bsd.tty.chown in ${PATCHDIR}. Since both patches modify the configure script it was also necessary to rebuild it via autoconf from configure.in. I've decided to use USE_AUTOCONF instead of including the re-build configure script in ${FILESDIR} Obtained from: KAME/WIDE
2000-01-14 19:37:39 +00:00
# Original IPv6 patches were obtained from ftp://ftp.kyoto.wide.ad.jp/IPv6/ssh/
# ssh-1.2.27-IPv6-1.5-patch.gz
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 00:19:02 +00:00
# We still use WITH_INET6 here and try to support pre 4.0 machines with kame
Checfor OSVERSION _or_ USE_INET6 when deciding if IPv6 support should be added. This is done to support the build on pre 4.0 machines with the KAME IPv6 stack installed. It has been verified to build+work with both 4.0 and 3.4+kame. Org. patch Submitted By: Munechika SUMIKAWA <sumikawa@ebina.hitachi.co.jp>
2000-02-12 19:27:40 +00:00
# IPv6 stack
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 00:19:02 +00:00
.if ${OSVERSION} >= 400014 || ( ${OSVERSION} < 400014 && defined(WITH_INET6) )
Make buildable on IPv4-only kernel. Specified by: ache Reviewed by: torstenb
2000-02-20 17:30:54 +00:00
CONFIGURE_ARGS+= --enable-ipv6
Add IPv6 support to ssh. The IPv6 patch was obtained from the kame repository and has been been writen by KIKUCHI Takahiro <kick@kyoto.wide.ad.jp> Due to the whole mess with different patches it was necessary to include both the IPv6 patch and patch-ssh-1.2.27-bsd.tty.chown in ${PATCHDIR}. Since both patches modify the configure script it was also necessary to rebuild it via autoconf from configure.in. I've decided to use USE_AUTOCONF instead of including the re-build configure script in ${FILESDIR} Obtained from: KAME/WIDE
2000-01-14 19:37:39 +00:00
.else
CONFIGURE_ARGS+= --disable-ipv6
.endif
If using socks, make sure you find socks library
1996-07-22 23:06:08 +00:00
# Include SOCKS firewall support
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 00:19:02 +00:00
.if defined(WITH_SOCKS)
Make the SOCKS support from USE_SOCKS play nicely with the socks5 port.
1997-12-24 18:46:11 +00:00
CONFIGURE_ARGS+= --with-socks="-L${PREFIX}/lib -lsocks5" --with-socks5
If using socks, make sure you find socks library
1996-07-22 23:06:08 +00:00
.endif
Change *_DEPENDS on lang/perl5 to USE_PERL5 so we won't have any dependencies to perl5 in -current. This might cause some unwanted perl5 installations on -stable (if it was originally RUN_DEPENDS, perl5 will now be installed during build too, etc.), but its lifetime is limited anyway.
1999-01-02 00:12:21 +00:00
Correct PLIST for the non-X11 case. (This was OK'ed by the maintainer quite some time ago).
1999-11-06 19:43:18 +00:00
# Include extra files if X11 is installed
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 00:19:02 +00:00
.if defined(WITH_X11) || (exists(${X11BASE}/lib/libX11.a) \
&& !defined(WITHOUT_X11))
USE_XLIB= yes
Correct whitespace introduced during PORTNAME conversion and portlint
2000-04-21 08:19:33 +00:00
PLIST:= ${WRKDIR}/PLIST
Correct PLIST for the non-X11 case. (This was OK'ed by the maintainer quite some time ago).
1999-11-06 19:43:18 +00:00
pre-install:
@${CAT} ${PKGDIR}/PLIST.X11 > ${PLIST}
@${CAT} ${PKGDIR}/PLIST >> ${PLIST}
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO. Begin the process of reserving these prefixes for user defined options. No comment by: ports
2000-04-17 00:19:02 +00:00
.else
CONFIGURE_ARGS+= --without-x
Correct PLIST for the non-X11 case. (This was OK'ed by the maintainer quite some time ago).
1999-11-06 19:43:18 +00:00
.endif
Change *_DEPENDS on lang/perl5 to USE_PERL5 so we won't have any dependencies to perl5 in -current. This might cause some unwanted perl5 installations on -stable (if it was originally RUN_DEPENDS, perl5 will now be installed during build too, etc.), but its lifetime is limited anyway.
1999-01-02 00:12:21 +00:00
.include <bsd.port.post.mk>
Reference in New Issue Copy Permalink