1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-11-14 23:46:10 +00:00
freebsd-ports/security/ssh/Makefile
Bill Fumerola c42cc3ec22 (1) Add a new MASTER_SITE
(2) Reorganize MASTER_SITEs
(3) Remove reference to Phil Karn's ssh speedups, it is now distributed
    as a full source package, and not a patch kit. If we want to use it,
    we will have to make a new port for it.
(4) Use ${ECHO} instead of echo, ${RM} instead of rm, ${LN} instead of ln
(5) Use ${FALSE} instead of false
(6) Remove multiple blank lines in Makefile
(7) Remove trailing blank lines in pkg/DESCR

Submitted by:	 Alex Perel <veers@disturbed.net> (1, 2, 4, 6)
		 Bill Fumerola <billf@FreeBSD.org> (3, 5, 7)
1999-03-13 18:51:11 +00:00

144 lines
4.8 KiB
Makefile

# New ports collection makefile for: ssh
# Version required: 1.2.25
# Date created: 30 Jul 1995
# Whom: torstenb@FreeBSD.ORG
#
# $Id: Makefile,v 1.72 1999/01/02 00:12:20 asami Exp $
#
# Maximal ssh package requires YES values for
# USE_PERL, USE_TCPWRAP
#
DISTNAME= ssh-1.2.26
CATEGORIES= security net
MASTER_SITES= ftp://ftp.funet.fi/pub/unix/security/login/ssh/
MAINTAINER= torstenb@FreeBSD.ORG
# You can set USA_RESIDENT appropriately in /etc/make.conf if this bugs you..
.if defined(USA_RESIDENT) && ${USA_RESIDENT} == YES
MASTER_SITES+= \
ftp://ftp.replay.com/pub/replay/crypto/SSH/ \
ftp://nic.funet.fi/pub/crypt/mirrors/ftp.dsi.unimi.it/applied-crypto/ \
ftp://rzsun2.informatik.uni-hamburg.de/pub/virus/crypt/ripem/ \
ftp://idea.sec.dsi.unimi.it/pub/security/crypt/math/ \
ftp://ftp.univie.ac.at/security/crypt/cryptography/asymmetric/rsa/ \
ftp://isdec.vc.cvut.cz/pub/security/unimi/crypt/applied-crypto/
CONFIGURE_ARGS+= --with-rsaref
LIB_DEPENDS+= rsaref.2:${PORTSDIR}/security/rsaref
BUILD_DEPENDS+= /nonexistent:${PORTSDIR}/security/rsaref:extract
.endif
RESTRICTED= "Crypto; export-controlled"
IS_INTERACTIVE= YES
GNU_CONFIGURE= YES
CONFIGURE_ARGS+= --with-etcdir=${PREFIX}/etc
#Uncomment if all your users are in their own group and their homedir
#is writeable by that group. Beware the security implications!
#CONFIGURE_ARGS+= --enable-group-writeability
#Uncomment if you want to allow ssh to emulate an unencrypted rsh connection
#over a secure medium. This is normally dangerous since it can lead to the
#disclosure keys and passwords.
#CONFIGURE_ARGS+= --with-none
.if defined(KRB5_HOME) && exists(${KRB5_HOME})
CONFIGURE_ARGS+=--with-kerberos5=${KRB5_HOME} --enable-kerberos-tgt-passing
.endif
# Include support for the SecureID card
# Warning: untested !
.if defined(USE_SECUREID) && ${USE_SECUREID} == YES
CONFIGURE_ARGS+= --with-secureid
.endif
# Don't use IDEA. IDEA can be freely used for non-commercial use. However,
# commercial use may require a licence in a number of countries
# Warning: untested !
.if defined(DONT_USE_IDEA) && ${DONT_USE_IDEA} == YES
CONFIGURE_ARGS+= --without-idea
.endif
.if !exists(${X11BASE}/bin/xauth)
CONFIGURE_ARGS+= --without-x
.endif
MAN1= scp1.1 ssh-add1.1 ssh-agent1.1 ssh-keygen1.1 ssh1.1 \
make-ssh-known-hosts1.1
MAN8= sshd1.8
pre-patch:
@${MV} -f ${WRKSRC}/make-ssh-known-hosts.pl \
${WRKSRC}/make-ssh-known-hosts.pl.in
fetch-depends:
.if !defined(USA_RESIDENT) || ${USA_RESIDENT} != YES && ${USA_RESIDENT} != NO
@ ${ECHO}
@ ${ECHO} You must set the variable USA_RESIDENT to YES if you are a
@ ${ECHO} United States resident, otherwise NO.
@ ${ECHO} If you are a US resident then this port must also fetch
@ ${ECHO} the RSAREF2 library from sources abroad \(RSA Inc. holds a
@ ${ECHO} patent on RSA and public key crypto in general in the United
@ ${ECHO} States so using RSA implementations other than RSAREF there
@ ${ECHO} may violate US patent law\).
@ ${FALSE}
.endif
post-install:
@if [ ! -f ${PREFIX}/etc/ssh_host_key ]; then \
${ECHO} "Generating a secret host key..."; \
${PREFIX}/bin/ssh-keygen -f ${PREFIX}/etc/ssh_host_key -N ""; \
fi
.if !defined(NOMANCOMPRESS)
for file in make-ssh-known-hosts scp ssh-add ssh-agent \
ssh-keygen ssh; do \
${RM} -f ${PREFIX}/man/man1/$${file}.1; \
${LN} -sf $${file}1.1.gz ${PREFIX}/man/man1/$${file}.1.gz; \
done
${RM} -f ${PREFIX}/man/man1/slogin.1
${RM} -f ${PREFIX}/man/man1/slogin1.1
${RM} -f ${PREFIX}/man/man8/sshd.8
${LN} -sf ssh.1.gz ${PREFIX}/man/man1/slogin.1.gz
${LN} -sf ssh1.1.gz ${PREFIX}/man/man1/slogin1.1.gz
${LN} -sf sshd1.8.gz ${PREFIX}/man/man8/sshd.8.gz
.else
${ECHO} Warning---some manpages not installed. See port Makefile
.endif
@if [ ! -f ${PREFIX}/etc/rc.d/sshd.sh ]; then \
${ECHO} "Installing ${PREFIX}/etc/rc.d/sshd.sh startup file."; \
${ECHO} "#!/bin/sh" > ${PREFIX}/etc/rc.d/sshd.sh; \
${ECHO} "[ -x ${PREFIX}/sbin/sshd ] && ${PREFIX}/sbin/sshd && ${ECHO} -n ' sshd'" >> ${PREFIX}/etc/rc.d/sshd.sh; \
/bin/chmod 751 ${PREFIX}/etc/rc.d/sshd.sh; \
fi
.include <bsd.port.pre.mk>
.if defined(USE_PERL) && ${USE_PERL} == YES || \
exists(${PERL5}) && (!defined(USE_PERL) || ${USE_PERL} != NO)
USE_PERL5= yes
CONFIGURE_ENV+= PERL=${PERL5}
.else
CONFIGURE_ENV+= PERL=/replace_it_with_PERL_path
.endif
# Include tcp-wrapper support (call remote identd)
.if defined(USE_TCPWRAP) && ${USE_TCPWRAP} == YES || \
exists(${PREFIX}/lib/libwrap.a) && \
(!defined(USE_TCPWRAP) || ${USE_TCPWRAP} != NO)
CONFIGURE_ENV+= LDFLAGS=-L${PREFIX}/lib CFLAGS="${CFLAGS} -I${PREFIX}/include"
CONFIGURE_ARGS+= --with-libwrap
LIB_DEPENDS+= wrap.7:${PORTSDIR}/security/tcp_wrapper
.endif
# Include SOCKS firewall support
.if defined(USE_SOCKS) && ${USE_SOCKS} == YES
CONFIGURE_ARGS+= --with-socks="-L${PREFIX}/lib -lsocks5" --with-socks5
.endif
.include <bsd.port.post.mk>