SUBDIR += wzdftpd

# Created by: Roman Bogorodskiy

PORTNAME=	wzdftpd

PORTVERSION=	0.8.3

PORTREVISION=	8

CATEGORIES=	ftp

MASTER_SITES=	SF/${PORTNAME}/${PORTNAME}-sources/${PORTNAME}-${PORTVERSION:R}

MAINTAINER=	fuz@fuz.su

COMMENT=	Modular FTP server configurable online using SITE commands

LICENSE=	GPLv2+

LICENSE_FILE=	${WRKSRC}/COPYING

USES=		autoreconf gettext-tools libtool localbase pkgconfig

GNU_CONFIGURE=	yes

CONFIGURE_ARGS=	--sysconfdir=${ETCDIR} --without-pam --disable-bonjour

INSTALL_TARGET=	install-strip

USE_LDCONFIG=	yes

USE_RC_SUBR=	wzdftpd

OPTIONS_DEFINE=	AVAHI ICONV IPV6 MYSQL PERL PGSQL SQLITE TCL DOCS

OPTIONS_RADIO=	TLS

OPTIONS_RADIO_TLS=	GNUTLS OPENSSL

OPTIONS_DEFAULT=	AVAHI GNUTLS ICONV IPV6 PERL SQLITE

OPTIONS_SUB=	yes

ICONV_CONFIGURE_ON=	${ICONV_CONFIGURE_ARG}

ICONV_CONFIGURE_OFF=	--disable-utf8

ICONV_USES=		iconv

TCL_CONFIGURE_ON=	--with-tcl=${TCL_LIBDIR}

TCL_CONFIGURE_OFF=	--without-tcl

TCL_USES=		tcl

OPENSSL_CONFIGURE_ENABLE=	openssl

OPENSSL_USES=		ssl

OPENSSL_BROKEN=		Does not build with option OPENSSL, use GNUTLS instead:\

			wzd_tls.c:300:42: error: use of undeclared identifier 'STACK'

GNUTLS_CONFIGURE_ENABLE=	gnutls

GNUTLS_LIB_DEPENDS=		libgnutls.so:security/gnutls

IPV6_CONFIGURE_ENABLE=	ipv6

PERL_CONFIGURE_ENABLE=	perl

PERL_USES=		perl5

MYSQL_CONFIGURE_ENABLE=	mysql

MYSQL_USES=		mysql

PGSQL_CONFIGURE_ON=	--with-pgsql=${LOCALBASE}

PGSQL_CONFIGURE_OFF=	--disable-pgsql

PGSQL_USES=		pgsql

SQLITE_CONFIGURE_ENABLE=	sqlite3

SQLITE_USES=			sqlite:3

AVAHI_CONFIGURE_ON=	--with-zeroconf --enable-avahi

AVAHI_LIB_DEPENDS=	libdbus-1.so:devel/dbus \

			libavahi-core.so:net/avahi-app

post-patch:

	@${TOUCH} ${WRKSRC}/config.rpath

	@${ECHO_CMD} "ACLOCAL_AMFLAGS= -I ac-helpers" >> ${WRKSRC}/Makefile.am

	@${REINPLACE_CMD} -e \

		'/LDFLAGS/s|@PTHREAD_CFLAGS@|@LTLIBICONV@|' \

		${WRKSRC}/libwzd-core/Makefile.am

	@${REINPLACE_CMD} -e \

		's|INSTALLDIRS=vendor|INSTALLPRIVLIB=$${prefix}/lib| ; \

		 /MAKE/s| install| pure_install|' \

		${WRKSRC}/libwzd-perl/Makefile.am

.for i in backends modules

	@${FIND} ${WRKSRC}/${i} -name "Makefile.am" | ${XARGS} \

		${REINPLACE_CMD} -e \

		'/^libdir/s|$${pkgdatadir}|$${prefix}/lib/wzdftpd|'

.endfor

	@${FIND} ${WRKSRC} -name "*_tls.c" | ${XARGS} ${REINPLACE_CMD} -e \

		'/<gcrypt.h>/d ; \

		 /gcry_control/d' \

post-install:

	${INSTALL_DATA} ${WRKSRC}/*.pc ${STAGEDIR}${PREFIX}/libdata/pkgconfig

post-install-DOCS-on:

	@${MKDIR} ${STAGEDIR}${DOCSDIR}

.for i in AUTHORS ChangeLog NEWS Permissions.ReadMeFirst README \

	TLS.ReadMeFirst UPGRADING wzd_tls.cnf

	${INSTALL_DATA} ${WRKSRC}/${i} ${STAGEDIR}${DOCSDIR}

.endfor

.include <bsd.port.mk>

SHA256 (wzdftpd-0.8.3.tar.gz) = 14b958739bfe8f2c9e665b036ea627f7830332a43a32000feb1b6e632c18ec5d

SIZE (wzdftpd-0.8.3.tar.gz) = 850981

--- ac-helpers/tls.m4.orig	2004-10-26 11:14:48 UTC

+++ ac-helpers/tls.m4

@@ -22,7 +22,7 @@ AC_DEFUN([WZD_TLS],

   )

 if test "$gnutls" = "yes"; then

-AM_PATH_LIBGNUTLS(0.9.8,wzd_have_gnutls=yes)

+PKG_CHECK_MODULES(LIBGNUTLS, [gnutls], [wzd_have_gnutls=yes], [wzd_have_gnutls=no])

 fi

 # openssl is checked only if gnutls was not found or disabled

--- libwzd-core/wzd_tls.c.orig	2007-10-25 17:25:33 UTC

+++ libwzd-core/wzd_tls.c

@@ -946,19 +946,13 @@ int tls_exit(void)

 static gnutls_session initialize_tls_session(gnutls_connection_end con_end)

 {

-  /* Allow connections to servers that have OpenPGP keys as well.

-   */

-  const int cert_type_priority[3] = { GNUTLS_CRT_X509, GNUTLS_CRT_OPENPGP, 0 };

-

   gnutls_session session;

   gnutls_init(&session, con_end);

-  /* avoid calling all the priority functions, since the defaults

-   * are adequate.

+  /* Allow connections to servers that have OpenPGP keys as well.

    */

-  gnutls_set_default_priority(session);

-  gnutls_certificate_type_set_priority(session, cert_type_priority);

+  gnutls_priority_set_direct(session, "NORMAL:+CTYPE-OPENPGP", NULL);

   gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, x509_cred);

@@ -1001,27 +995,6 @@ int tls_auth (const char *type, wzd_cont

   }

   /** \todo XXX parse TLS cipher names */

-  {

-    /** Note that the priority is set on the client. The server does not use

-     * the algorithm's priority except for disabling algorithms that were not

-     * specified.

-     */

-    const int cipherPriority[] =

-    {

-      GNUTLS_CIPHER_ARCFOUR_128,

-      GNUTLS_CIPHER_3DES_CBC,

-      GNUTLS_CIPHER_AES_128_CBC,

-      GNUTLS_CIPHER_AES_256_CBC,

-      GNUTLS_CIPHER_ARCFOUR_40,

-#if ( (LIBGNUTLS_VERSION_MAJOR > 1) || (LIBGNUTLS_VERSION_MINOR >= 3) )

-      GNUTLS_CIPHER_RC2_40_CBC,

-      GNUTLS_CIPHER_DES_CBC,

-#endif

-      0

-    };

-

-    gnutls_cipher_set_priority(session, cipherPriority);

-  }

   /* ensure socket is non-blocking */

 #if defined(_MSC_VER) || (defined(__CYGWIN__) && defined(WINSOCK_SUPPORT))

--- modules/sfv/libwzd_sfv_main.h.orig	2021-06-25 21:46:48 UTC

+++ modules/sfv/libwzd_sfv_main.h

@@ -15,7 +15,7 @@ typedef struct {

   double size_total;

 } wzd_release_stats;

-wzd_sfv_config SfvConfig; /*Our main SFV config */

+extern wzd_sfv_config SfvConfig; /*Our main SFV config */

 char * create_filepath(const char *dir, const char * file);

#!/bin/sh

# Start or stop wzdftpd

# PROVIDE: wzdftpd

# REQUIRE: DAEMON

# BEFORE: LOGIN

# KEYWORD: shutdown

#

# Add the following lines to /etc/rc.conf to enable wzdftpd

# wzdftpd_enable="YES"

# wzdftpd_flags="<set as needed>"

wzdftpd_enable=${wzdftpd_enable:-"NO"}		# Enable wzdftpd

. /etc/rc.subr

name="wzdftpd"

rcvar=wzdftpd_enable

command="%%PREFIX%%/sbin/${name}"

required_files="%%PREFIX%%/etc/wzdftpd/wzd.cfg"

load_rc_config $name

run_rc_command "$1"

wzdftpd is a ftp server designed to be modular and entirely configurable online

using SITE commands.

wzdftpd offers the following features:

- Simple configuration file, supporting inclusions

- Online administration, using SITE commands

- Backends to store users/groups in different structures

- Modules: internal, using shared librairies, or external

  (scripts/applications)

- Users are virtual: you do not need to create users in system

- SSL/TLS support

- Server is designed to run as a non-privileged user to enforce security

- Server can detect ip changes (dynamic ips) and set ip and passive ip

  accordingly

- Cross devices operations (copy/move) (though can be slow)

- Logging support (compatible with the wu-ftpd standard)

- Designed for high performances: coded with C, multithreaded

WWW: https://sourceforge.net/projects/wzdftpd/