View | Details | Raw Unified | Return to bug 243254 | Differences between
and this patch

Collapse All | Expand All

(-)security/strongswan/Makefile (-1 / +5 lines)
Lines 1-158 Link Here
1
# Created by: Riaan Kruger <riaank@gmail.com>
1
# Created by: Riaan Kruger <riaank@gmail.com>
2
# $FreeBSD$
2
# $FreeBSD$
3
3
4
PORTNAME=	strongswan
4
PORTNAME=	strongswan
5
PORTVERSION=	5.8.2
5
PORTVERSION=	5.8.2
6
PORTREVISION=	1
6
PORTREVISION=	1
7
CATEGORIES=	security net-vpn
7
CATEGORIES=	security net-vpn
8
MASTER_SITES=	http://download.strongswan.org/ \
8
MASTER_SITES=	http://download.strongswan.org/ \
9
		http://download2.strongswan.org/
9
		http://download2.strongswan.org/
10
10
11
MAINTAINER=	strongswan@nanoteq.com
11
MAINTAINER=	strongswan@nanoteq.com
12
COMMENT=	Open Source IKEv2 IPsec-based VPN solution
12
COMMENT=	Open Source IKEv2 IPsec-based VPN solution
13
13
14
LICENSE=	GPLv2
14
LICENSE=	GPLv2
15
LICENSE_FILE=	${WRKSRC}/LICENSE
15
LICENSE_FILE=	${WRKSRC}/LICENSE
16
16
17
USES=		cpe libtool:keepla pkgconfig tar:bzip2 ssl
17
USES=		cpe libtool:keepla pkgconfig tar:bzip2 ssl
18
USE_RC_SUBR=	strongswan
18
USE_RC_SUBR=	strongswan
19
USE_LDCONFIG=	${PREFIX}/lib/ipsec
19
USE_LDCONFIG=	${PREFIX}/lib/ipsec
20
20
21
GNU_CONFIGURE=	yes
21
GNU_CONFIGURE=	yes
22
INSTALL_TARGET=	install-strip
22
INSTALL_TARGET=	install-strip
23
23
24
CONFIGURE_ARGS=	--enable-kernel-pfkey \
24
CONFIGURE_ARGS=	--enable-kernel-pfkey \
25
		--enable-kernel-pfroute  \
25
		--enable-kernel-pfroute  \
26
		--disable-kernel-netlink  \
26
		--disable-kernel-netlink  \
27
		--disable-scripts  \
27
		--disable-scripts  \
28
		--disable-gmp \
28
		--disable-gmp \
29
		--enable-openssl \
29
		--enable-openssl \
30
		--enable-eap-identity \
30
		--enable-eap-identity \
31
		--enable-eap-md5 \
31
		--enable-eap-md5 \
32
		--enable-eap-tls \
32
		--enable-eap-tls \
33
		--enable-eap-mschapv2 \
33
		--enable-eap-mschapv2 \
34
		--enable-eap-peap \
34
		--enable-eap-peap \
35
		--enable-eap-ttls \
35
		--enable-eap-ttls \
36
		--enable-md4 \
36
		--enable-md4 \
37
		--enable-blowfish \
37
		--enable-blowfish \
38
		--enable-addrblock \
38
		--enable-addrblock \
39
		--enable-whitelist \
39
		--enable-whitelist \
40
		--enable-cmd \
40
		--enable-cmd \
41
		--with-group=wheel  \
41
		--with-group=wheel  \
42
		--with-lib-prefix=${PREFIX}
42
		--with-lib-prefix=${PREFIX}
43
43
44
OPTIONS_DEFINE=	CURL EAPAKA3GPP2 EAPDYNAMIC EAPRADIUS EAPSIMFILE GCM IKEV1 \
44
OPTIONS_DEFINE=	CURL EAPAKA3GPP2 EAPDYNAMIC EAPRADIUS EAPSIMFILE GCM IKEV1 \
45
		IPSECKEY KERNELLIBIPSEC LOADTESTER LDAP MEDIATION MYSQL PKI \
45
		IPSECKEY KERNELLIBIPSEC LOADTESTER LDAP MEDIATION MYSQL PKI \
46
		PKCS11 SCEP SMP SQLITE SWANCTL TESTVECTOR TPM UNBOUND UNITY \
46
		PKCS11 PYVICI SCEP SMP SQLITE SWANCTL TESTVECTOR TPM UNBOUND UNITY \
47
		VICI XAUTH
47
		VICI XAUTH
48
OPTIONS_DEFINE_i386=	VIA
48
OPTIONS_DEFINE_i386=	VIA
49
OPTIONS_DEFAULT=	BUILTIN CURL IKEV1 PKI SWANCTL VICI
49
OPTIONS_DEFAULT=	BUILTIN CURL IKEV1 PKI SWANCTL VICI
50
OPTIONS_SINGLE=	PRINTF_HOOKS
50
OPTIONS_SINGLE=	PRINTF_HOOKS
51
OPTIONS_SINGLE_PRINTF_HOOKS=	BUILTIN LIBC VSTR
51
OPTIONS_SINGLE_PRINTF_HOOKS=	BUILTIN LIBC VSTR
52
OPTIONS_SUB=	yes
52
OPTIONS_SUB=	yes
53
53
54
# Description of options
54
# Description of options
55
BUILTIN_DESC=	Use builtin printf hooks
55
BUILTIN_DESC=	Use builtin printf hooks
56
CURL_DESC=	Enable CURL to fetch CRL/OCSP
56
CURL_DESC=	Enable CURL to fetch CRL/OCSP
57
EAPAKA3GPP2_DESC=	Enable EAP AKA with 3gpp2 backend
57
EAPAKA3GPP2_DESC=	Enable EAP AKA with 3gpp2 backend
58
EAPDYNAMIC_DESC=	Enable EAP dynamic proxy module
58
EAPDYNAMIC_DESC=	Enable EAP dynamic proxy module
59
EAPRADIUS_DESC=		Enable EAP Radius proxy authentication
59
EAPRADIUS_DESC=		Enable EAP Radius proxy authentication
60
EAPSIMFILE_DESC=	Enable EAP SIM with file backend
60
EAPSIMFILE_DESC=	Enable EAP SIM with file backend
61
GCM_DESC=		Enable GCM AEAD wrapper crypto plugin
61
GCM_DESC=		Enable GCM AEAD wrapper crypto plugin
62
IKEV1_DESC=	Enable IKEv1 support
62
IKEV1_DESC=	Enable IKEv1 support
63
IPSECKEY_DESC=	Enable authentication with IPSECKEY resource records with DNSSEC
63
IPSECKEY_DESC=	Enable authentication with IPSECKEY resource records with DNSSEC
64
KERNELLIBIPSEC_DESC=	Enable IPSec userland backend
64
KERNELLIBIPSEC_DESC=	Enable IPSec userland backend
65
LIBC_DESC=	Use libc printf hooks
65
LIBC_DESC=	Use libc printf hooks
66
LOADTESTER_DESC=	Enable load testing plugin
66
LOADTESTER_DESC=	Enable load testing plugin
67
MEDIATION_DESC=		Enable IKEv2 Mediation Extension
67
MEDIATION_DESC=		Enable IKEv2 Mediation Extension
68
PKCS11_DESC=	Enable PKCS11 token support
68
PKCS11_DESC=	Enable PKCS11 token support
69
PKI_DESC=	Enable PKI tools
69
PKI_DESC=	Enable PKI tools
70
PYVICI_DESC=	Install the python vici module to script the charon daemon
70
SCEP_DESC=	Enable Simple Certificate Enrollment Protocol
71
SCEP_DESC=	Enable Simple Certificate Enrollment Protocol
71
SMP_DESC=	Enable XML-based management protocol (DEPRECATED)
72
SMP_DESC=	Enable XML-based management protocol (DEPRECATED)
72
SWANCTL_DESC=	Install swanctl (requires VICI)
73
SWANCTL_DESC=	Install swanctl (requires VICI)
73
TESTVECTOR_DESC=	Enable crypto test vectors
74
TESTVECTOR_DESC=	Enable crypto test vectors
74
TPM_DESC=	Enable TPM plugin
75
TPM_DESC=	Enable TPM plugin
75
UNBOUND_DESC=	Enable DNSSEC-enabled resolver
76
UNBOUND_DESC=	Enable DNSSEC-enabled resolver
76
UNITY_DESC=	Enable Cisco Unity extension plugin
77
UNITY_DESC=	Enable Cisco Unity extension plugin
77
VIA_DESC=	Enable VIA Padlock support
78
VIA_DESC=	Enable VIA Padlock support
78
VICI_DESC=	Enable VICI management protocol
79
VICI_DESC=	Enable VICI management protocol
79
VSTR_DESC=	Use devel/vstr printf hooks
80
VSTR_DESC=	Use devel/vstr printf hooks
80
XAUTH_DESC=	Enable XAuth password verification
81
XAUTH_DESC=	Enable XAuth password verification
81
82
82
# Extra options
83
# Extra options
83
BUILTIN_CONFIGURE_ON=	--with-printf-hooks=builtin
84
BUILTIN_CONFIGURE_ON=	--with-printf-hooks=builtin
84
CURL_CONFIGURE_ON=	--enable-curl
85
CURL_CONFIGURE_ON=	--enable-curl
85
CURL_LIB_DEPENDS=	libcurl.so:ftp/curl
86
CURL_LIB_DEPENDS=	libcurl.so:ftp/curl
86
EAPAKA3GPP2_CONFIGURE_ON=	--enable-eap-aka --enable-eap-aka-3gpp2
87
EAPAKA3GPP2_CONFIGURE_ON=	--enable-eap-aka --enable-eap-aka-3gpp2
87
EAPAKA3GPP2_LIB_DEPENDS=libgmp.so:math/gmp
88
EAPAKA3GPP2_LIB_DEPENDS=libgmp.so:math/gmp
88
EAPDYNAMIC_CONFIGURE_ON=--enable-eap-dynamic
89
EAPDYNAMIC_CONFIGURE_ON=--enable-eap-dynamic
89
EAPRADIUS_CONFIGURE_ON=	--enable-eap-radius
90
EAPRADIUS_CONFIGURE_ON=	--enable-eap-radius
90
EAPSIMFILE_CONFIGURE_ON=--enable-eap-sim --enable-eap-sim-file
91
EAPSIMFILE_CONFIGURE_ON=--enable-eap-sim --enable-eap-sim-file
91
GCM_CONFIGURE_ON=	--enable-gcm
92
GCM_CONFIGURE_ON=	--enable-gcm
92
IKEV1_CONFIGURE_OFF=	--disable-ikev1
93
IKEV1_CONFIGURE_OFF=	--disable-ikev1
93
IPSECKEY_CONFIGURE_ON=	--enable-ipseckey
94
IPSECKEY_CONFIGURE_ON=	--enable-ipseckey
94
KERNELLIBIPSEC_CONFIGURE_ON=	--enable-kernel-libipsec
95
KERNELLIBIPSEC_CONFIGURE_ON=	--enable-kernel-libipsec
95
LDAP_CONFIGURE_ON=	--enable-ldap
96
LDAP_CONFIGURE_ON=	--enable-ldap
96
LDAP_USE=		OPENLDAP=yes
97
LDAP_USE=		OPENLDAP=yes
97
LIBC_CONFIGURE_ON=	--with-printf-hooks=glibc
98
LIBC_CONFIGURE_ON=	--with-printf-hooks=glibc
98
LOADTESTER_CONFIGURE_ON=--enable-load-tester
99
LOADTESTER_CONFIGURE_ON=--enable-load-tester
99
MEDIATION_CONFIGURE_ON=	--enable-mediation
100
MEDIATION_CONFIGURE_ON=	--enable-mediation
100
MYSQL_CONFIGURE_ON=	--enable-mysql
101
MYSQL_CONFIGURE_ON=	--enable-mysql
101
MYSQL_USES=		mysql
102
MYSQL_USES=		mysql
102
PKCS11_CONFIGURE_ON=	--enable-pkcs11
103
PKCS11_CONFIGURE_ON=	--enable-pkcs11
103
PKI_CONFIGURE_OFF=	--disable-pki
104
PKI_CONFIGURE_OFF=	--disable-pki
105
PYVICI_IMPLIES=		VICI
106
PYVICI_RUN_DEPENDS=	${PYTHON_PKGNAMEPREFIX}vici>0:security/py-vici@${PY_FLAVOR}
107
PYVICI_USES=		python
104
SCEP_CONFIGURE_OFF=	--disable-scepclient
108
SCEP_CONFIGURE_OFF=	--disable-scepclient
105
SMP_CONFIGURE_ON=	--enable-smp
109
SMP_CONFIGURE_ON=	--enable-smp
106
SMP_LIB_DEPENDS=	libxml2.so:textproc/libxml2
110
SMP_LIB_DEPENDS=	libxml2.so:textproc/libxml2
107
SQLITE_CONFIGURE_ON=	--enable-sqlite
111
SQLITE_CONFIGURE_ON=	--enable-sqlite
108
SQLITE_LIB_DEPENDS=	libsqlite3.so:databases/sqlite3
112
SQLITE_LIB_DEPENDS=	libsqlite3.so:databases/sqlite3
109
SWANCTL_CONFIGURE_ON=	--enable-swanctl
113
SWANCTL_CONFIGURE_ON=	--enable-swanctl
110
SWANCTL_IMPLIES=	VICI
114
SWANCTL_IMPLIES=	VICI
111
TESTVECTOR_CONFIGURE_ON=--enable-test-vectors
115
TESTVECTOR_CONFIGURE_ON=--enable-test-vectors
112
TPM_CONFIGURE_ON=	--enable-tpm
116
TPM_CONFIGURE_ON=	--enable-tpm
113
UNBOUND_CONFIGURE_ON=	--enable-unbound
117
UNBOUND_CONFIGURE_ON=	--enable-unbound
114
UNBOUND_LIB_DEPENDS=	libunbound.so:dns/unbound \
118
UNBOUND_LIB_DEPENDS=	libunbound.so:dns/unbound \
115
			libldns.so:dns/ldns
119
			libldns.so:dns/ldns
116
UNITY_CONFIGURE_ON=	--enable-unity
120
UNITY_CONFIGURE_ON=	--enable-unity
117
VIA_CONFIGURE_ON=	--enable-padlock
121
VIA_CONFIGURE_ON=	--enable-padlock
118
VICI_CONFIGURE_ON=	--enable-vici
122
VICI_CONFIGURE_ON=	--enable-vici
119
VSTR_CONFIGURE_ON=	--with-printf-hooks=vstr
123
VSTR_CONFIGURE_ON=	--with-printf-hooks=vstr
120
VSTR_LIB_DEPENDS=	libvstr.so:devel/vstr
124
VSTR_LIB_DEPENDS=	libvstr.so:devel/vstr
121
XAUTH_CONFIGURE_ON=	--enable-xauth-eap \
125
XAUTH_CONFIGURE_ON=	--enable-xauth-eap \
122
			--enable-xauth-generic \
126
			--enable-xauth-generic \
123
			--enable-xauth-pam
127
			--enable-xauth-pam
124
128
125
.include <bsd.port.options.mk>
129
.include <bsd.port.options.mk>
126
130
127
.if ${PORT_OPTIONS:MEAPSIMFILE} || ${PORT_OPTIONS:MEAPAKA3GPP2}
131
.if ${PORT_OPTIONS:MEAPSIMFILE} || ${PORT_OPTIONS:MEAPAKA3GPP2}
128
PLIST_SUB+=	SIMAKA=""
132
PLIST_SUB+=	SIMAKA=""
129
.else
133
.else
130
PLIST_SUB+=	SIMAKA="@comment "
134
PLIST_SUB+=	SIMAKA="@comment "
131
.endif
135
.endif
132
136
133
.if ${PORT_OPTIONS:MMYSQL} || ${PORT_OPTIONS:MSQLITE}
137
.if ${PORT_OPTIONS:MMYSQL} || ${PORT_OPTIONS:MSQLITE}
134
CONFIGURE_ARGS+=	--enable-attr-sql --enable-sql
138
CONFIGURE_ARGS+=	--enable-attr-sql --enable-sql
135
PLIST_SUB+=	SQL=""
139
PLIST_SUB+=	SQL=""
136
.else
140
.else
137
PLIST_SUB+=	SQL="@comment "
141
PLIST_SUB+=	SQL="@comment "
138
.endif
142
.endif
139
143
140
.if ${PORT_OPTIONS:MIKEV1} || ${PORT_OPTIONS:MXAUTH}
144
.if ${PORT_OPTIONS:MIKEV1} || ${PORT_OPTIONS:MXAUTH}
141
PLIST_SUB+=	XAUTHGEN=""
145
PLIST_SUB+=	XAUTHGEN=""
142
.else
146
.else
143
PLIST_SUB+=	XAUTHGEN="@comment "
147
PLIST_SUB+=	XAUTHGEN="@comment "
144
.endif
148
.endif
145
149
146
# Hack to disable VIA in plist of unsupported architectures
150
# Hack to disable VIA in plist of unsupported architectures
147
.if ! ${OPTIONS_DEFINE:MVIA}
151
.if ! ${OPTIONS_DEFINE:MVIA}
148
PLIST_SUB+=	VIA="@comment "
152
PLIST_SUB+=	VIA="@comment "
149
.else
153
.else
150
.endif
154
.endif
151
155
152
post-install:
156
post-install:
153
.if ${PORT_OPTIONS:MVICI}
157
.if ${PORT_OPTIONS:MVICI}
154
	${INSTALL_DATA} ${WRKSRC}/src/libcharon/plugins/vici/libvici.h \
158
	${INSTALL_DATA} ${WRKSRC}/src/libcharon/plugins/vici/libvici.h \
155
		${STAGEDIR}${PREFIX}/include
159
		${STAGEDIR}${PREFIX}/include
156
.endif
160
.endif
157
161
158
.include <bsd.port.mk>
162
.include <bsd.port.mk>

Return to bug 243254