Annotation of pkgsrc/security/openssh/Makefile, Revision 1.232
1.232 ! joerg 1: # $NetBSD: Makefile,v 1.231 2015/07/04 08:07:28 wiz Exp $
1.1 christos 2:
1.218 taca 3: DISTNAME= openssh-6.6p1
4: PKGNAME= openssh-6.6.1
1.230 wiz 5: PKGREVISION= 7
1.1 christos 6: CATEGORIES= security
1.227 jperkin 7: MASTER_SITES= ${MASTER_SITE_OPENBSD:=OpenSSH/portable/}
1.1 christos 8:
1.165 jlam 9: MAINTAINER= pkgsrc-users@NetBSD.org
1.6 wiz 10: HOMEPAGE= http://www.openssh.com/
1.39 wiz 11: COMMENT= Open Source Secure shell client and server (remote login program)
1.46 wennmach 12:
1.56 jlam 13: CONFLICTS= sftp-[0-9]*
1.140 grant 14: CONFLICTS+= ssh-[0-9]* ssh6-[0-9]*
15: CONFLICTS+= ssh2-[0-9]* ssh2-nox11-[0-9]*
1.103 jwise 16: CONFLICTS+= openssh+gssapi-[0-9]*
1.149 wiz 17: CONFLICTS+= lsh>2.0
1.1 christos 18:
1.217 jperkin 19: USE_GCC_RUNTIME= yes
1.152 jlam 20: USE_TOOLS+= perl
1.8 fredb 21:
1.28 fredb 22: CRYPTO= yes
23:
1.99 jmmv 24: # retain the following line, for IPv6-ready pkgsrc webpage
1.183 jlam 25: BUILD_DEFS+= IPV6_READY
1.1 christos 26:
1.180 jlam 27: PKG_GROUPS_VARS+= OPENSSH_GROUP
28: PKG_USERS_VARS+= OPENSSH_USER
29: BUILD_DEFS+= OPENSSH_CHROOT
1.172 taca 30: BUILD_DEFS+= VARBASE
31:
1.61 jlam 32: INSTALL_TARGET= install-nokeys
1.147 tv 33:
1.150 reed 34: .include "options.mk"
35:
1.231 wiz 36: .if ${OPSYS} == "Darwin"
37: # fixes: dyld: Symbol not found: _allow_severity
38: CONFIGURE_ARGS+= --disable-strip
39: .endif
40:
1.147 tv 41: .if ${OPSYS} == "Interix"
42:
1.154 reed 43: # OpenSSH on Interix has some important caveats
1.147 tv 44: MESSAGE_SRC= ${.CURDIR}/MESSAGE.Interix
1.198 obache 45: BUILDLINK_PASSTHRU_DIRS+= /usr/local/lib/bind
1.147 tv 46: CONFIGURE_ENV+= ac_cv_func_openpty=no
47: CONFIGURE_ENV+= ac_cv_type_struct_timespec=yes
1.175 tv 48: CPPFLAGS+= -DIOV_MAX=16 # default is INT_MAX, way too large
1.198 obache 49: .if exists(/usr/local/include/bind/resolv.h)
1.147 tv 50: CPPFLAGS+= -I/usr/local/include/bind
1.198 obache 51: BUILDLINK_PASSTHRU_DIRS+= /usr/local/include/bind
52: .elif exists(/usr/local/bind/include/resolv.h)
53: CPPFLAGS+= -I/usr/local/bind/include
54: BUILDLINK_PASSTHRU_DIRS+= /usr/local/bind/include
55: .endif
1.147 tv 56: LDFLAGS+= -L/usr/local/lib/bind
57: LIBS+= -lbind -ldb -lcrypt
58:
59: .else # not Interix
60:
1.177 wiz 61: PKG_GROUPS= ${OPENSSH_GROUP}
1.167 jlam 62: PKG_USERS= ${OPENSSH_USER}:${OPENSSH_GROUP}
63:
64: PKG_GECOS.${OPENSSH_USER}= sshd privsep pseudo-user
65: PKG_HOME.${OPENSSH_USER}= ${OPENSSH_CHROOT}
1.89 grant 66:
1.147 tv 67: .endif
68:
1.145 xtraeme 69: SSH_PID_DIR= ${VARBASE}/run # default directory for PID files
1.35 wiz 70:
1.76 jlam 71: PKG_SYSCONFSUBDIR= ssh
1.82 jlam 72:
1.18 jlam 73: GNU_CONFIGURE= yes
1.122 xtraeme 74: CONFIGURE_ARGS+= --with-mantype=man
1.162 rillig 75: CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR:Q}
76: CONFIGURE_ARGS+= --with-pid-dir=${SSH_PID_DIR:Q}
77: CONFIGURE_ARGS+= --with-ssl-dir=${SSLBASE:Q}
1.88 jlam 78: CONFIGURE_ARGS+= --with-tcp-wrappers=${BUILDLINK_PREFIX.tcp_wrappers}
1.147 tv 79:
80: .if ${OPSYS} != "Interix"
1.162 rillig 81: CONFIGURE_ARGS+= --with-privsep-path=${OPENSSH_CHROOT:Q}
82: CONFIGURE_ARGS+= --with-privsep-user=${OPENSSH_USER:Q}
1.147 tv 83: .endif
1.112 jschauma 84:
1.160 grant 85: # pkgsrc already enforces a "secure" version of zlib via dependencies,
86: # so skip this bogus version check.
87: CONFIGURE_ARGS+= --without-zlib-version-check
88:
1.119 grant 89: # the openssh configure script finds and uses ${LD} if defined and
90: # defaults to ${CC} if not. we override LD here, since running the
91: # linker directly results in undefined symbols for obvious reasons.
92: #
1.121 jlam 93: CONFIGURE_ENV+= LD=${CC:Q}
1.114 grant 94:
1.133 jlam 95: # Enable S/Key support on NetBSD, Darwin, and Solaris.
96: .if (${OPSYS} == "NetBSD") || (${OPSYS} == "Darwin") || (${OPSYS} == "SunOS")
1.126 wiz 97: . include "../../security/skey/buildlink3.mk"
1.88 jlam 98: CONFIGURE_ARGS+= --with-skey=${BUILDLINK_PREFIX.skey}
99: .else
100: CONFIGURE_ARGS+= --without-skey
1.85 grant 101: .endif
1.54 kim 102:
1.201 taca 103: .if (${OPSYS} == "NetBSD")
104: . if exists(/usr/include/utmpx.h)
1.129 markd 105: # if we have utmpx et al do not try to use login()
106: CONFIGURE_ARGS+= --disable-libutil
1.201 taca 107: . endif
108: #
109: # NetBSD current after 2011/03/12 has incompatible strnvis(3) and
110: # prior version don't have it. So, disable use of strnvis(3) now.
111: #
112: CONFIGURE_ENV+= ac_cv_func_strnvis=no
1.129 markd 113: .endif
1.201 taca 114:
1.132 jlam 115: .if (${OPSYS} == "SunOS") && (${OS_VERSION} == "5.8" || ${OS_VERSION} == "5.9")
1.128 markd 116: CONFIGURE_ARGS+= --disable-utmp --disable-wtmp
117: .endif
1.136 xtraeme 118: .if ${OPSYS} == "Linux"
119: CONFIGURE_ARGS+= --enable-md5-password
120: .endif
1.128 markd 121:
1.232 ! joerg 122: # The ssh-askpass program is in ${X11BASE}/bin or ${PREFIX}/bin depending
1.27 jlam 123: # on if it's part of the X11 distribution, or if it's installed from pkgsrc
1.61 jlam 124: # (security/ssh-askpass).
1.21 jlam 125: #
1.27 jlam 126: .if exists(${X11BASE}/bin/ssh-askpass)
1.61 jlam 127: ASKPASS_PROGRAM= ${X11BASE}/bin/ssh-askpass
1.27 jlam 128: .else
1.232 ! joerg 129: ASKPASS_PROGRAM= ${PREFIX}/bin/ssh-askpass
1.27 jlam 130: .endif
1.161 rillig 131: CONFIGURE_ENV+= ASKPASS_PROGRAM=${ASKPASS_PROGRAM:Q}
132: MAKE_ENV+= ASKPASS_PROGRAM=${ASKPASS_PROGRAM:Q}
1.12 itojun 133:
1.144 grant 134: # do the same for xauth
135: .if exists(${X11BASE}/bin/xauth)
136: CONFIGURE_ARGS+= --with-xauth=${X11BASE}/bin/xauth
137: .else
1.232 ! joerg 138: CONFIGURE_ARGS+= --with-xauth=${PREFIX}/bin/xauth
1.144 grant 139: .endif
140:
1.155 jlam 141: CONFS= ssh_config sshd_config moduli
1.52 tron 142:
1.218 taca 143: PLIST_VARS+= prng
144:
1.61 jlam 145: .if exists(/dev/urandom)
1.139 reed 146: . if ${OPSYS} == "NetBSD"
1.61 jlam 147: MESSAGE_SRC+= ${.CURDIR}/MESSAGE.urandom
1.139 reed 148: . endif
1.61 jlam 149: .else
150: CONFIGURE_ARGS+= --without-random
151: CONFS+= ssh_prng_cmds
1.218 taca 152: PLIST.prng= yes
1.34 tron 153: .endif
1.54 kim 154:
1.61 jlam 155: EGDIR= ${PREFIX}/share/examples/${PKGBASE}
156: CONF_FILES= # empty
1.172 taca 157: .for f in ${CONFS}
158: CONF_FILES+= ${EGDIR}/${f} ${PKG_SYSCONFDIR}/${f}
1.61 jlam 159: .endfor
1.89 grant 160: OWN_DIRS= ${OPENSSH_CHROOT}
1.61 jlam 161: RCD_SCRIPTS= sshd
1.202 taca 162: RCD_SCRIPT_SRC.sshd= ${WRKDIR}/sshd.sh
1.216 jperkin 163: SMF_METHODS= sshd
1.61 jlam 164:
1.161 rillig 165: FILES_SUBST+= SSH_PID_DIR=${SSH_PID_DIR:Q}
1.107 jlam 166:
1.172 taca 167: SUBST_CLASSES+= patch
168: SUBST_STAGE.patch= pre-configure
169: SUBST_FILES.patch= session.c
170: SUBST_SED.patch= -e '/channel_input_port_forward_request/s/0/ROOTUID/'
171: SUBST_MESSAGE.patch= More patch a file.
172:
1.132 jlam 173: .include "../../devel/zlib/buildlink3.mk"
174: .include "../../security/openssl/buildlink3.mk"
175: .include "../../security/tcp_wrappers/buildlink3.mk"
176:
1.202 taca 177: #
178: # type of key "ecdsa" isn't always supported depends on OpenSSL.
179: #
180: post-configure:
181: if ${EGREP} -q '^\#define[ ]+OPENSSL_HAS_ECC' \
182: ${WRKSRC}/config.h; then \
183: ${SED} -e '/HAVE_ECDSA/s/.*//' \
184: ${FILESDIR}/sshd.sh > ${WRKDIR}/sshd.sh; \
185: else \
186: ${SED} -e '/HAVE_ECDSA_START/,/HAVE_ECDSA_STOP/d' \
187: ${FILESDIR}/sshd.sh > ${WRKDIR}/sshd.sh; \
188: fi
189:
1.5 hubertf 190: post-install:
1.188 tnn 191: ${INSTALL_DATA_DIR} ${DESTDIR}${EGDIR}
1.155 jlam 192: cd ${WRKSRC}; for file in ${CONFS}; do \
1.188 tnn 193: ${INSTALL_DATA} $${file}.out ${DESTDIR}${EGDIR}/$${file}; \
1.52 tron 194: done
1.157 reed 195: .if !empty(PKG_OPTIONS:Mpam) && ${OPSYS} == "Linux"
1.188 tnn 196: ${INSTALL_DATA} ${WRKSRC}/contrib/sshd.pam.generic \
197: ${DESTDIR}${EGDIR}/sshd.pam
1.138 reed 198: .endif
1.1 christos 199:
200: .include "../../mk/bsd.pkg.mk"
CVSweb <webmaster@jp.NetBSD.org>
![[BACK]](/icons/back.gif){kind=icon}
Return to Makefile CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / security / openssh