ce0249b815
FreeBSD 15.0 got some incompatible changes to the header /usr/include/netipsec/ipsec.h breaking build of this legacy code due to added "const". Fix it providing some patches that do not change the behavior. While here, suppress some warnings that pollute build log using modern Clang. This fixes build, so PORTREVISION not bumped.
110 lines
3.3 KiB
Makefile
110 lines
3.3 KiB
Makefile
PORTNAME= ipsec-tools
|
|
PORTVERSION= 0.8.2
|
|
PORTREVISION= 13
|
|
CATEGORIES= security
|
|
MASTER_SITES= SF
|
|
|
|
MAINTAINER= eugen@FreeBSD.org
|
|
COMMENT= KAME racoon IKE daemon, ipsec-tools version
|
|
WWW= http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/
|
|
|
|
LICENSE= BSD3CLAUSE
|
|
|
|
USES= compiler cpe libtool tar:bzip2 ssl
|
|
|
|
CONFLICTS= racoon
|
|
INSTALL_TARGET= install-strip
|
|
USE_RC_SUBR= racoon
|
|
GNU_CONFIGURE= yes
|
|
GNU_CONFIGURE_MANPREFIX=${PREFIX}/share
|
|
USE_LDCONFIG= yes
|
|
CONFIGURE_ARGS= --enable-shared --sysconfdir=${PREFIX}/etc/racoon \
|
|
--localstatedir=${STATEDIR:S/\/racoon//}
|
|
|
|
STATEDIR= /var/db/racoon
|
|
SUB_LIST+= STATEDIR=${STATEDIR} REQUIREMOD=${REQUIREMOD}
|
|
PLIST_SUB+= STATEDIR=${STATEDIR}
|
|
|
|
OPTIONS_DEFINE= IPV6 ADMINPORT STATS DPD NATT FRAG HYBRID PAM \
|
|
RADIUS LDAP GSSAPI SAUNSPEC RC5 IDEA DOCS EXAMPLES WCPSKEY
|
|
OPTIONS_DEFAULT= ADMINPORT DPD NATT FRAG HYBRID WCPSKEY
|
|
|
|
ADMINPORT_DESC= Enable Admin port
|
|
STATS_DESC= Statistics logging function
|
|
DPD_DESC= Dead Peer Detection
|
|
NATT_DESC= NAT-Traversal
|
|
FRAG_DESC= IKE fragmentation payload support
|
|
HYBRID_DESC= Hybrid, Xauth and Mode-cfg support
|
|
SAUNSPEC_DESC= Unspecified SA mode
|
|
RC5_DESC= RC5 encryption (patented)
|
|
IDEA_DESC= IDEA encryption (patented)
|
|
PAM_DESC= PAM authentication (Xauth server)
|
|
RADIUS_DESC= Radius authentication (Xauth server)
|
|
LDAP_DESC= LDAP authentication (Xauth server)
|
|
WCPSKEY_DESC= Allow wildcard matching for pre-shared keys
|
|
|
|
PORTDOCS= *
|
|
PORTEXAMPLES= *
|
|
|
|
IPV6_CONFIGURE_ENABLE= ipv6
|
|
ADMINPORT_CONFIGURE_ENABLE=adminport
|
|
STATS_CONFIGURE_ENABLE= stats
|
|
DPD_CONFIGURE_ENABLE= dpd
|
|
NATT_CONFIGURE_ON= --enable-natt=yes --enable-natt-versions=rfc
|
|
NATT_CONFIGURE_OFF= --disable-natt
|
|
FRAG_CONFIGURE_ENABLE= frag
|
|
HYBRID_CONFIGURE_ENABLE=hybrid
|
|
PAM_CONFIGURE_WITH= libpam
|
|
GSSAPI_USES= iconv
|
|
GSSAPI_CFLAGS= -I${LOCALBASE}/include
|
|
GSSAPI_LDFLAGS= -L${LOCALBASE}/lib
|
|
GSSAPI_CONFIGURE_ENABLE=gssapi
|
|
RADIUS_CONFIGURE_WITH= libradius
|
|
LDAP_USES= ldap
|
|
LDAP_CONFIGURE_ON= --with-libldap=${LOCALBASE}
|
|
LDAP_CONFIGURE_OFF= --without-libldap
|
|
SAUNSPEC_CONFIGURE_ENABLE= samode-unspec
|
|
RC5_CONFIGURE_ENABLE= rc5
|
|
IDEA_CONFIGURE_ENABLE= idea
|
|
NATT_EXTRA_PATCHES= ${FILESDIR}/natt.diff
|
|
WCPSKEY_EXTRA_PATCHES= ${FILESDIR}/wildcard-psk.diff ${FILESDIR}/wildcard-psk-oakley.c.diff
|
|
|
|
.include <bsd.port.pre.mk>
|
|
|
|
.if ${COMPILER_TYPE} == clang && ${COMPILER_VERSION} >= 190
|
|
CFLAGS+= -Wno-deprecated-declarations -Wno-deprecated-non-prototype \
|
|
-Wno-incompatible-pointer-types-discards-qualifiers
|
|
.endif
|
|
|
|
.if ${OPSYS} == FreeBSD
|
|
REQUIREMOD?= ipsec
|
|
.endif
|
|
|
|
post-patch:
|
|
@${REINPLACE_CMD} -e "s/-Werror//g ; s/-R$$libdir/-Wl,-rpath=$$libdir/g" ${WRKSRC}/configure
|
|
|
|
post-install:
|
|
@${MKDIR} ${STAGEDIR}/${PREFIX}/etc/racoon
|
|
@if [ -z `/sbin/sysctl -a | ${GREP} -q ipsec && ${ECHO_CMD} ipsec` ]; then \
|
|
${ECHO_MSG} "WARNING: IPsec feature is disabled on this host"; \
|
|
${ECHO_MSG} " You must build the kernel if you want to run racoon on the host"; \
|
|
fi ;
|
|
|
|
post-install-EXAMPLES-on:
|
|
@${MKDIR} ${STAGEDIR}/${EXAMPLESDIR}
|
|
@${RM} ${WRKSRC}/src/racoon/samples/*.in
|
|
@${CP} -r ${WRKSRC}/src/racoon/samples/* ${STAGEDIR}/${EXAMPLESDIR}
|
|
|
|
post-install-DOCS-on:
|
|
@${MKDIR} ${STAGEDIR}/${DOCSDIR}
|
|
${INSTALL_DATA} ${WRKSRC}/src/racoon/doc/* ${STAGEDIR}/${DOCSDIR}
|
|
|
|
.if ${OPSYS} == FreeBSD
|
|
. if ${SSL_DEFAULT} != openssl111
|
|
EXTRA_PATCHES+= ${FILESDIR}/extra-patch-ipsec-tools
|
|
PLIST_FILES+= include/racoon/openssl_compat.h
|
|
. endif
|
|
.endif
|
|
|
|
.include <bsd.port.post.mk>
|