Attachment #254962 for bug #282444




You should get into the habit of checking this file for changes each time
you update your ports collection, before attempting any port upgrades.

20241104:
  AFFECTS: users of mail/fetchmail
  AUTHOR: chalpin@cs.wisc.edu

  OPIE and RPA have been made optional because both have significant security
  problems. OPIE support was not provided by the port on 14.x until the update
  to 6.5.0, when it was briefly re-activated. Because of its security flaws, it
  has now been disabled by default on both 13.x and 14.x.

  RPA is currently enabled by default, but this will change in a future update.

20241019:
  AFFECTS: users of security/libressl
  AUTHOR: brnrd@FreeBSD.org





# the added PYTHON=: suppresses python builds,
# see ../../mail/fetchmailconf/ for the configuration tool
CONFIGURE_ARGS=	--enable-SDPS \
		--enable-RPA \
		--enable-SDPS \
		--without-hesiod \
		PYTHON=:


		README.SSL-SERVER design-notes.html esrs-design-notes.html \
		fetchmail-FAQ.html fetchmail-features.html todo.html

OPTIONS_DEFINE=		OPIE RPA DOCS NLS
OPTIONS_DEFAULT=	GSSAPI_BASE OPENSSL RPA
OPTIONS_SINGLE=		GSSAPI TLS
OPTIONS_SINGLE_GSSAPI=	GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE
OPTIONS_SINGLE_TLS=	OPENSSL WOLFSSL

OPTIONS_SUB=	yes

OPIE_CONFIGURE_ON=		--enable-opie
OPIE_DESC=			Build with OPIE support (deprecated - weak/broken cryptography)

RPA_CONFIGURE_ON=		--enable-RPA
RPA_DESC=			Build with RPA support (deprecated - weak/broken cryptography)

GSSAPI_BASE_USES=		gssapi
GSSAPI_BASE_CONFIGURE_ON=	${GSSAPI_CONFIGURE_ARGS} \
				--with-gssapi=${GSSAPIBASEDIR}


.include <bsd.port.pre.mk>

.if ${PORT_OPTIONS:MOPIE} && ${MASTERDIR} == ${.CURDIR} && ${OPSYS} == FreeBSD
. if ${OSVERSION} >= 1400072
LIB_DEPENDS+=	libopie.so:security/opie	# moved to port (from base in 13.X)
CPPFLAGS+=	-I${LOCALBASE}/include
. endif
.endif


Return to bug 282444

Lines 27-35 GNU_CONFIGURE_MANPREFIX=${PREFIX}/share Link Here

(-)b/mail/fetchmail/Makefile (-6 / +11 lines)
27		27
28	# the added PYTHON=: suppresses python builds,	28	# the added PYTHON=: suppresses python builds,
29	# see ../../mail/fetchmailconf/ for the configuration tool	29	# see ../../mail/fetchmailconf/ for the configuration tool
30	CONFIGURE_ARGS= --enable-opie \	30	CONFIGURE_ARGS= --enable-SDPS \
31	--enable-RPA \
32	--enable-SDPS \
33	--without-hesiod \	31	--without-hesiod \
34	PYTHON=:	32	PYTHON=:
35		33
Lines 45-58 PORTDOCS= FAQ FEATURES NEWS NOTES OLDNEWS README README.SSL \ Link Here
45	README.SSL-SERVER design-notes.html esrs-design-notes.html \	43	README.SSL-SERVER design-notes.html esrs-design-notes.html \
46	fetchmail-FAQ.html fetchmail-features.html todo.html	44	fetchmail-FAQ.html fetchmail-features.html todo.html
47		45
48	OPTIONS_DEFINE= DOCS NLS	46	OPTIONS_DEFINE= OPIE RPA DOCS NLS
49	OPTIONS_DEFAULT= GSSAPI_BASE OPENSSL	47	OPTIONS_DEFAULT= GSSAPI_BASE OPENSSL RPA
50	OPTIONS_SINGLE= GSSAPI TLS	48	OPTIONS_SINGLE= GSSAPI TLS
51	OPTIONS_SINGLE_GSSAPI= GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE	49	OPTIONS_SINGLE_GSSAPI= GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE
52	OPTIONS_SINGLE_TLS= OPENSSL WOLFSSL	50	OPTIONS_SINGLE_TLS= OPENSSL WOLFSSL
53		51
54	OPTIONS_SUB= yes	52	OPTIONS_SUB= yes
55		53
		54	OPIE_CONFIGURE_ON= --enable-opie
		55	OPIE_DESC= Build with OPIE support (deprecated - weak/broken cryptography)
		56
		57	RPA_CONFIGURE_ON= --enable-RPA
		58	RPA_DESC= Build with RPA support (deprecated - weak/broken cryptography)
		59
56	GSSAPI_BASE_USES= gssapi	60	GSSAPI_BASE_USES= gssapi
57	GSSAPI_BASE_CONFIGURE_ON= ${GSSAPI_CONFIGURE_ARGS} \	61	GSSAPI_BASE_CONFIGURE_ON= ${GSSAPI_CONFIGURE_ARGS} \
58	--with-gssapi=${GSSAPIBASEDIR}	62	--with-gssapi=${GSSAPIBASEDIR}
Lines 101-109 post-install-DOCS-on: Link Here
101		105
102	.include <bsd.port.pre.mk>	106	.include <bsd.port.pre.mk>
103		107
104	.if ${MASTERDIR} == ${.CURDIR} && ${OPSYS} == FreeBSD	108	.if ${PORT_OPTIONS:MOPIE} && ${MASTERDIR} == ${.CURDIR} && ${OPSYS} == FreeBSD
105	. if ${OSVERSION} >= 1400072	109	. if ${OSVERSION} >= 1400072
106	LIB_DEPENDS+= libopie.so:security/opie # moved to port (from base in 13.X)	110	LIB_DEPENDS+= libopie.so:security/opie # moved to port (from base in 13.X)
		111	CPPFLAGS+= -I${LOCALBASE}/include
107	. endif	112	. endif
108	.endif	113	.endif
109		114

Lines 5-10 they are unavoidable. Link Here

(-)b/UPDATING (+11 lines)
5	You should get into the habit of checking this file for changes each time	5	You should get into the habit of checking this file for changes each time
6	you update your ports collection, before attempting any port upgrades.	6	you update your ports collection, before attempting any port upgrades.
7		7
		8	20241104:
		9	AFFECTS: users of mail/fetchmail
		10	AUTHOR: chalpin@cs.wisc.edu
		11
		12	OPIE and RPA have been made optional because both have significant security
		13	problems. OPIE support was not provided by the port on 14.x until the update
		14	to 6.5.0, when it was briefly re-activated. Because of its security flaws, it
		15	has now been disabled by default on both 13.x and 14.x.
		16
		17	RPA is currently enabled by default, but this will change in a future update.
		18
8	20241019:	19	20241019:
9	AFFECTS: users of security/libressl	20	AFFECTS: users of security/libressl
10	AUTHOR: brnrd@FreeBSD.org	21	AUTHOR: brnrd@FreeBSD.org