Lines 1-158
Link Here
|
1 |
# Created by: Riaan Kruger <riaank@gmail.com> |
1 |
# Created by: Riaan Kruger <riaank@gmail.com> |
2 |
# $FreeBSD$ |
2 |
# $FreeBSD$ |
3 |
|
3 |
|
4 |
PORTNAME= strongswan |
4 |
PORTNAME= strongswan |
5 |
PORTVERSION= 5.8.2 |
5 |
PORTVERSION= 5.8.2 |
6 |
PORTREVISION= 1 |
6 |
PORTREVISION= 1 |
7 |
CATEGORIES= security net-vpn |
7 |
CATEGORIES= security net-vpn |
8 |
MASTER_SITES= http://download.strongswan.org/ \ |
8 |
MASTER_SITES= http://download.strongswan.org/ \ |
9 |
http://download2.strongswan.org/ |
9 |
http://download2.strongswan.org/ |
10 |
|
10 |
|
11 |
MAINTAINER= strongswan@nanoteq.com |
11 |
MAINTAINER= strongswan@nanoteq.com |
12 |
COMMENT= Open Source IKEv2 IPsec-based VPN solution |
12 |
COMMENT= Open Source IKEv2 IPsec-based VPN solution |
13 |
|
13 |
|
14 |
LICENSE= GPLv2 |
14 |
LICENSE= GPLv2 |
15 |
LICENSE_FILE= ${WRKSRC}/LICENSE |
15 |
LICENSE_FILE= ${WRKSRC}/LICENSE |
16 |
|
16 |
|
17 |
USES= cpe libtool:keepla pkgconfig tar:bzip2 ssl |
17 |
USES= cpe libtool:keepla pkgconfig tar:bzip2 ssl |
18 |
USE_RC_SUBR= strongswan |
18 |
USE_RC_SUBR= strongswan |
19 |
USE_LDCONFIG= ${PREFIX}/lib/ipsec |
19 |
USE_LDCONFIG= ${PREFIX}/lib/ipsec |
20 |
|
20 |
|
21 |
GNU_CONFIGURE= yes |
21 |
GNU_CONFIGURE= yes |
22 |
INSTALL_TARGET= install-strip |
22 |
INSTALL_TARGET= install-strip |
23 |
|
23 |
|
24 |
CONFIGURE_ARGS= --enable-kernel-pfkey \ |
24 |
CONFIGURE_ARGS= --enable-kernel-pfkey \ |
25 |
--enable-kernel-pfroute \ |
25 |
--enable-kernel-pfroute \ |
26 |
--disable-kernel-netlink \ |
26 |
--disable-kernel-netlink \ |
27 |
--disable-scripts \ |
27 |
--disable-scripts \ |
28 |
--disable-gmp \ |
28 |
--disable-gmp \ |
29 |
--enable-openssl \ |
29 |
--enable-openssl \ |
30 |
--enable-eap-identity \ |
30 |
--enable-eap-identity \ |
31 |
--enable-eap-md5 \ |
31 |
--enable-eap-md5 \ |
32 |
--enable-eap-tls \ |
32 |
--enable-eap-tls \ |
33 |
--enable-eap-mschapv2 \ |
33 |
--enable-eap-mschapv2 \ |
34 |
--enable-eap-peap \ |
34 |
--enable-eap-peap \ |
35 |
--enable-eap-ttls \ |
35 |
--enable-eap-ttls \ |
36 |
--enable-md4 \ |
36 |
--enable-md4 \ |
37 |
--enable-blowfish \ |
37 |
--enable-blowfish \ |
38 |
--enable-addrblock \ |
38 |
--enable-addrblock \ |
39 |
--enable-whitelist \ |
39 |
--enable-whitelist \ |
40 |
--enable-cmd \ |
40 |
--enable-cmd \ |
41 |
--with-group=wheel \ |
41 |
--with-group=wheel \ |
42 |
--with-lib-prefix=${PREFIX} |
42 |
--with-lib-prefix=${PREFIX} |
43 |
|
43 |
|
44 |
OPTIONS_DEFINE= CURL EAPAKA3GPP2 EAPDYNAMIC EAPRADIUS EAPSIMFILE GCM IKEV1 \ |
44 |
OPTIONS_DEFINE= CURL EAPAKA3GPP2 EAPDYNAMIC EAPRADIUS EAPSIMFILE GCM IKEV1 \ |
45 |
IPSECKEY KERNELLIBIPSEC LOADTESTER LDAP MEDIATION MYSQL PKI \ |
45 |
IPSECKEY KERNELLIBIPSEC LOADTESTER LDAP MEDIATION MYSQL PKI \ |
46 |
PKCS11 SCEP SMP SQLITE SWANCTL TESTVECTOR TPM UNBOUND UNITY \ |
46 |
PKCS11 PYTHON SCEP SMP SQLITE SWANCTL TESTVECTOR TPM UNBOUND UNITY \ |
47 |
VICI XAUTH |
47 |
VICI XAUTH |
48 |
OPTIONS_DEFINE_i386= VIA |
48 |
OPTIONS_DEFINE_i386= VIA |
49 |
OPTIONS_DEFAULT= BUILTIN CURL IKEV1 PKI SWANCTL VICI |
49 |
OPTIONS_DEFAULT= BUILTIN CURL IKEV1 PKI SWANCTL VICI |
50 |
OPTIONS_SINGLE= PRINTF_HOOKS |
50 |
OPTIONS_SINGLE= PRINTF_HOOKS |
51 |
OPTIONS_SINGLE_PRINTF_HOOKS= BUILTIN LIBC VSTR |
51 |
OPTIONS_SINGLE_PRINTF_HOOKS= BUILTIN LIBC VSTR |
52 |
OPTIONS_SUB= yes |
52 |
OPTIONS_SUB= yes |
53 |
|
53 |
|
54 |
# Description of options |
54 |
# Description of options |
55 |
BUILTIN_DESC= Use builtin printf hooks |
55 |
BUILTIN_DESC= Use builtin printf hooks |
56 |
CURL_DESC= Enable CURL to fetch CRL/OCSP |
56 |
CURL_DESC= Enable CURL to fetch CRL/OCSP |
57 |
EAPAKA3GPP2_DESC= Enable EAP AKA with 3gpp2 backend |
57 |
EAPAKA3GPP2_DESC= Enable EAP AKA with 3gpp2 backend |
58 |
EAPDYNAMIC_DESC= Enable EAP dynamic proxy module |
58 |
EAPDYNAMIC_DESC= Enable EAP dynamic proxy module |
59 |
EAPRADIUS_DESC= Enable EAP Radius proxy authentication |
59 |
EAPRADIUS_DESC= Enable EAP Radius proxy authentication |
60 |
EAPSIMFILE_DESC= Enable EAP SIM with file backend |
60 |
EAPSIMFILE_DESC= Enable EAP SIM with file backend |
61 |
GCM_DESC= Enable GCM AEAD wrapper crypto plugin |
61 |
GCM_DESC= Enable GCM AEAD wrapper crypto plugin |
62 |
IKEV1_DESC= Enable IKEv1 support |
62 |
IKEV1_DESC= Enable IKEv1 support |
63 |
IPSECKEY_DESC= Enable authentication with IPSECKEY resource records with DNSSEC |
63 |
IPSECKEY_DESC= Enable authentication with IPSECKEY resource records with DNSSEC |
64 |
KERNELLIBIPSEC_DESC= Enable IPSec userland backend |
64 |
KERNELLIBIPSEC_DESC= Enable IPSec userland backend |
65 |
LIBC_DESC= Use libc printf hooks |
65 |
LIBC_DESC= Use libc printf hooks |
66 |
LOADTESTER_DESC= Enable load testing plugin |
66 |
LOADTESTER_DESC= Enable load testing plugin |
67 |
MEDIATION_DESC= Enable IKEv2 Mediation Extension |
67 |
MEDIATION_DESC= Enable IKEv2 Mediation Extension |
68 |
PKCS11_DESC= Enable PKCS11 token support |
68 |
PKCS11_DESC= Enable PKCS11 token support |
69 |
PKI_DESC= Enable PKI tools |
69 |
PKI_DESC= Enable PKI tools |
|
|
70 |
PYTHON_DESC= Python vici protocol plugin |
70 |
SCEP_DESC= Enable Simple Certificate Enrollment Protocol |
71 |
SCEP_DESC= Enable Simple Certificate Enrollment Protocol |
71 |
SMP_DESC= Enable XML-based management protocol (DEPRECATED) |
72 |
SMP_DESC= Enable XML-based management protocol (DEPRECATED) |
72 |
SWANCTL_DESC= Install swanctl (requires VICI) |
73 |
SWANCTL_DESC= Install swanctl (requires VICI) |
73 |
TESTVECTOR_DESC= Enable crypto test vectors |
74 |
TESTVECTOR_DESC= Enable crypto test vectors |
74 |
TPM_DESC= Enable TPM plugin |
75 |
TPM_DESC= Enable TPM plugin |
75 |
UNBOUND_DESC= Enable DNSSEC-enabled resolver |
76 |
UNBOUND_DESC= Enable DNSSEC-enabled resolver |
76 |
UNITY_DESC= Enable Cisco Unity extension plugin |
77 |
UNITY_DESC= Enable Cisco Unity extension plugin |
77 |
VIA_DESC= Enable VIA Padlock support |
78 |
VIA_DESC= Enable VIA Padlock support |
78 |
VICI_DESC= Enable VICI management protocol |
79 |
VICI_DESC= Enable VICI management protocol |
79 |
VSTR_DESC= Use devel/vstr printf hooks |
80 |
VSTR_DESC= Use devel/vstr printf hooks |
80 |
XAUTH_DESC= Enable XAuth password verification |
81 |
XAUTH_DESC= Enable XAuth password verification |
81 |
|
82 |
|
82 |
# Extra options |
83 |
# Extra options |
83 |
BUILTIN_CONFIGURE_ON= --with-printf-hooks=builtin |
84 |
BUILTIN_CONFIGURE_ON= --with-printf-hooks=builtin |
84 |
CURL_CONFIGURE_ON= --enable-curl |
85 |
CURL_CONFIGURE_ON= --enable-curl |
85 |
CURL_LIB_DEPENDS= libcurl.so:ftp/curl |
86 |
CURL_LIB_DEPENDS= libcurl.so:ftp/curl |
86 |
EAPAKA3GPP2_CONFIGURE_ON= --enable-eap-aka --enable-eap-aka-3gpp2 |
87 |
EAPAKA3GPP2_CONFIGURE_ON= --enable-eap-aka --enable-eap-aka-3gpp2 |
87 |
EAPAKA3GPP2_LIB_DEPENDS=libgmp.so:math/gmp |
88 |
EAPAKA3GPP2_LIB_DEPENDS=libgmp.so:math/gmp |
88 |
EAPDYNAMIC_CONFIGURE_ON=--enable-eap-dynamic |
89 |
EAPDYNAMIC_CONFIGURE_ON=--enable-eap-dynamic |
89 |
EAPRADIUS_CONFIGURE_ON= --enable-eap-radius |
90 |
EAPRADIUS_CONFIGURE_ON= --enable-eap-radius |
90 |
EAPSIMFILE_CONFIGURE_ON=--enable-eap-sim --enable-eap-sim-file |
91 |
EAPSIMFILE_CONFIGURE_ON=--enable-eap-sim --enable-eap-sim-file |
91 |
GCM_CONFIGURE_ON= --enable-gcm |
92 |
GCM_CONFIGURE_ON= --enable-gcm |
92 |
IKEV1_CONFIGURE_OFF= --disable-ikev1 |
93 |
IKEV1_CONFIGURE_OFF= --disable-ikev1 |
93 |
IPSECKEY_CONFIGURE_ON= --enable-ipseckey |
94 |
IPSECKEY_CONFIGURE_ON= --enable-ipseckey |
94 |
KERNELLIBIPSEC_CONFIGURE_ON= --enable-kernel-libipsec |
95 |
KERNELLIBIPSEC_CONFIGURE_ON= --enable-kernel-libipsec |
95 |
LDAP_CONFIGURE_ON= --enable-ldap |
96 |
LDAP_CONFIGURE_ON= --enable-ldap |
96 |
LDAP_USE= OPENLDAP=yes |
97 |
LDAP_USE= OPENLDAP=yes |
97 |
LIBC_CONFIGURE_ON= --with-printf-hooks=glibc |
98 |
LIBC_CONFIGURE_ON= --with-printf-hooks=glibc |
98 |
LOADTESTER_CONFIGURE_ON=--enable-load-tester |
99 |
LOADTESTER_CONFIGURE_ON=--enable-load-tester |
99 |
MEDIATION_CONFIGURE_ON= --enable-mediation |
100 |
MEDIATION_CONFIGURE_ON= --enable-mediation |
100 |
MYSQL_CONFIGURE_ON= --enable-mysql |
101 |
MYSQL_CONFIGURE_ON= --enable-mysql |
101 |
MYSQL_USES= mysql |
102 |
MYSQL_USES= mysql |
102 |
PKCS11_CONFIGURE_ON= --enable-pkcs11 |
103 |
PKCS11_CONFIGURE_ON= --enable-pkcs11 |
103 |
PKI_CONFIGURE_OFF= --disable-pki |
104 |
PKI_CONFIGURE_OFF= --disable-pki |
|
|
105 |
PYTHON_IMPLIES= VICI |
106 |
PYTHON_RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}vici>0:security/py-vici@${PY_FLAVOR} |
107 |
PYTHON_USES= python |
104 |
SCEP_CONFIGURE_OFF= --disable-scepclient |
108 |
SCEP_CONFIGURE_OFF= --disable-scepclient |
105 |
SMP_CONFIGURE_ON= --enable-smp |
109 |
SMP_CONFIGURE_ON= --enable-smp |
106 |
SMP_LIB_DEPENDS= libxml2.so:textproc/libxml2 |
110 |
SMP_LIB_DEPENDS= libxml2.so:textproc/libxml2 |
107 |
SQLITE_CONFIGURE_ON= --enable-sqlite |
111 |
SQLITE_CONFIGURE_ON= --enable-sqlite |
108 |
SQLITE_LIB_DEPENDS= libsqlite3.so:databases/sqlite3 |
112 |
SQLITE_LIB_DEPENDS= libsqlite3.so:databases/sqlite3 |
109 |
SWANCTL_CONFIGURE_ON= --enable-swanctl |
113 |
SWANCTL_CONFIGURE_ON= --enable-swanctl |
110 |
SWANCTL_IMPLIES= VICI |
114 |
SWANCTL_IMPLIES= VICI |
111 |
TESTVECTOR_CONFIGURE_ON=--enable-test-vectors |
115 |
TESTVECTOR_CONFIGURE_ON=--enable-test-vectors |
112 |
TPM_CONFIGURE_ON= --enable-tpm |
116 |
TPM_CONFIGURE_ON= --enable-tpm |
113 |
UNBOUND_CONFIGURE_ON= --enable-unbound |
117 |
UNBOUND_CONFIGURE_ON= --enable-unbound |
114 |
UNBOUND_LIB_DEPENDS= libunbound.so:dns/unbound \ |
118 |
UNBOUND_LIB_DEPENDS= libunbound.so:dns/unbound \ |
115 |
libldns.so:dns/ldns |
119 |
libldns.so:dns/ldns |
116 |
UNITY_CONFIGURE_ON= --enable-unity |
120 |
UNITY_CONFIGURE_ON= --enable-unity |
117 |
VIA_CONFIGURE_ON= --enable-padlock |
121 |
VIA_CONFIGURE_ON= --enable-padlock |
118 |
VICI_CONFIGURE_ON= --enable-vici |
122 |
VICI_CONFIGURE_ON= --enable-vici |
119 |
VSTR_CONFIGURE_ON= --with-printf-hooks=vstr |
123 |
VSTR_CONFIGURE_ON= --with-printf-hooks=vstr |
120 |
VSTR_LIB_DEPENDS= libvstr.so:devel/vstr |
124 |
VSTR_LIB_DEPENDS= libvstr.so:devel/vstr |
121 |
XAUTH_CONFIGURE_ON= --enable-xauth-eap \ |
125 |
XAUTH_CONFIGURE_ON= --enable-xauth-eap \ |
122 |
--enable-xauth-generic \ |
126 |
--enable-xauth-generic \ |
123 |
--enable-xauth-pam |
127 |
--enable-xauth-pam |
124 |
|
128 |
|
125 |
.include <bsd.port.options.mk> |
129 |
.include <bsd.port.options.mk> |
126 |
|
130 |
|
127 |
.if ${PORT_OPTIONS:MEAPSIMFILE} || ${PORT_OPTIONS:MEAPAKA3GPP2} |
131 |
.if ${PORT_OPTIONS:MEAPSIMFILE} || ${PORT_OPTIONS:MEAPAKA3GPP2} |
128 |
PLIST_SUB+= SIMAKA="" |
132 |
PLIST_SUB+= SIMAKA="" |
129 |
.else |
133 |
.else |
130 |
PLIST_SUB+= SIMAKA="@comment " |
134 |
PLIST_SUB+= SIMAKA="@comment " |
131 |
.endif |
135 |
.endif |
132 |
|
136 |
|
133 |
.if ${PORT_OPTIONS:MMYSQL} || ${PORT_OPTIONS:MSQLITE} |
137 |
.if ${PORT_OPTIONS:MMYSQL} || ${PORT_OPTIONS:MSQLITE} |
134 |
CONFIGURE_ARGS+= --enable-attr-sql --enable-sql |
138 |
CONFIGURE_ARGS+= --enable-attr-sql --enable-sql |
135 |
PLIST_SUB+= SQL="" |
139 |
PLIST_SUB+= SQL="" |
136 |
.else |
140 |
.else |
137 |
PLIST_SUB+= SQL="@comment " |
141 |
PLIST_SUB+= SQL="@comment " |
138 |
.endif |
142 |
.endif |
139 |
|
143 |
|
140 |
.if ${PORT_OPTIONS:MIKEV1} || ${PORT_OPTIONS:MXAUTH} |
144 |
.if ${PORT_OPTIONS:MIKEV1} || ${PORT_OPTIONS:MXAUTH} |
141 |
PLIST_SUB+= XAUTHGEN="" |
145 |
PLIST_SUB+= XAUTHGEN="" |
142 |
.else |
146 |
.else |
143 |
PLIST_SUB+= XAUTHGEN="@comment " |
147 |
PLIST_SUB+= XAUTHGEN="@comment " |
144 |
.endif |
148 |
.endif |
145 |
|
149 |
|
146 |
# Hack to disable VIA in plist of unsupported architectures |
150 |
# Hack to disable VIA in plist of unsupported architectures |
147 |
.if ! ${OPTIONS_DEFINE:MVIA} |
151 |
.if ! ${OPTIONS_DEFINE:MVIA} |
148 |
PLIST_SUB+= VIA="@comment " |
152 |
PLIST_SUB+= VIA="@comment " |
149 |
.else |
153 |
.else |
150 |
.endif |
154 |
.endif |
151 |
|
155 |
|
152 |
post-install: |
156 |
post-install: |
153 |
.if ${PORT_OPTIONS:MVICI} |
157 |
.if ${PORT_OPTIONS:MVICI} |
154 |
${INSTALL_DATA} ${WRKSRC}/src/libcharon/plugins/vici/libvici.h \ |
158 |
${INSTALL_DATA} ${WRKSRC}/src/libcharon/plugins/vici/libvici.h \ |
155 |
${STAGEDIR}${PREFIX}/include |
159 |
${STAGEDIR}${PREFIX}/include |
156 |
.endif |
160 |
.endif |
157 |
|
161 |
|
158 |
.include <bsd.port.mk> |
162 |
.include <bsd.port.mk> |