206 lines
6.6 KiB
Makefile
206 lines
6.6 KiB
Makefile
PORTNAME= openssl
|
|
DISTVERSION= 3.6.0
|
|
CATEGORIES= security devel
|
|
PKGNAMESUFFIX= 36
|
|
MASTER_SITES= https://github.com/openssl/openssl/releases/download/${DISTNAME}/
|
|
|
|
MAINTAINER= brnrd@FreeBSD.org
|
|
COMMENT= TLSv1.3 capable SSL and crypto library
|
|
WWW= https://www.openssl.org/
|
|
|
|
LICENSE= APACHE20
|
|
LICENSE_FILE= ${WRKSRC}/LICENSE.txt
|
|
|
|
CONFLICTS_INSTALL= boringssl libressl libressl-devel openssl openssl111 openssl3[1234] openssl*-quictls
|
|
|
|
HAS_CONFIGURE= yes
|
|
CONFIGURE_SCRIPT= config
|
|
CONFIGURE_ENV= PERL="${PERL}"
|
|
CONFIGURE_ARGS= --openssldir=${OPENSSLDIR} \
|
|
--prefix=${PREFIX}
|
|
|
|
USES= cpe perl5
|
|
USE_PERL5= build
|
|
TEST_TARGET= test
|
|
|
|
LDFLAGS_i386= -Wl,-znotext
|
|
|
|
MAKE_ARGS+= WHOLE_ARCHIVE_FLAG=--whole-archive CNF_LDFLAGS="${LDFLAGS}"
|
|
MAKE_ENV+= LIBRPATH="${PREFIX}/lib" GREP_OPTIONS=
|
|
|
|
OPTIONS_GROUP= CIPHERS COMPRESSION HASHES MODULES OPTIMIZE PQC \
|
|
PROTOCOLS
|
|
OPTIONS_GROUP_CIPHERS= ARIA DES GOST IDEA SM4 RC2 RC4 RC5 TLS-DEPRECATED-EC \
|
|
WEAK-SSL-CIPHERS
|
|
OPTIONS_GROUP_COMPRESSION= BROTLI ZLIB ZSTD
|
|
OPTIONS_GROUP_HASHES= MD2 MD4 MDC2 RMD160 SM2 SM3
|
|
OPTIONS_GROUP_OPTIMIZE= ASM SSE2 THREADS THREADPOOL
|
|
OPTIONS_GROUP_PQC= ML-DSA ML-KEM SLH-DSA
|
|
OPTIONS_GROUP_MODULES= FIPS LEGACY
|
|
OPTIONS_DEFINE_i386= I386
|
|
OPTIONS_GROUP_PROTOCOLS=NEXTPROTONEG QUIC SCTP SSL3 TLS1 TLS1_1 TLS1_2
|
|
|
|
OPTIONS_DEFINE= ASYNC CT FIPS-JITTER KTLS MAN3 RFC3779 SHARED
|
|
|
|
OPTIONS_DEFAULT=ASM ASYNC CT DES EC FIPS GOST KTLS MAN3 MD4 ML-DSA ML-KEM \
|
|
NEXTPROTONEG QUIC RFC3779 RC2 RC4 RMD160 SCTP SHARED SLH-DSA \
|
|
SSE2 THREADPOOL THREADS TLS1 TLS1_1 TLS1_2
|
|
|
|
OPTIONS_GROUP_OPTIMIZE_amd64= EC
|
|
|
|
.if ${MACHINE_ARCH} == "amd64"
|
|
OPTIONS_GROUP_OPTIMIZE+= EC
|
|
.elif ${MACHINE_ARCH} == "mips64el"
|
|
OPTIONS_GROUP_OPTIMIZE+= EC
|
|
.endif
|
|
|
|
OPTIONS_SUB= yes
|
|
|
|
ARIA_DESC= ARIA (South Korean standard)
|
|
ASM_DESC= Assembler code
|
|
ASYNC_DESC= Asynchronous mode
|
|
CIPHERS_DESC= Block Cipher Support
|
|
COMPRESSION_DESC= Compression Support
|
|
CT_DESC= Certificate Transparency Support
|
|
DES_DESC= (Triple) Data Encryption Standard
|
|
EC_DESC= Optimize NIST elliptic curves
|
|
FIPS_DESC= Build FIPS provider (Note: NOT yet FIPS validated)
|
|
FIPS-JITTER_DESC= Use JITTER seed source in FIPS provider
|
|
GOST_DESC= GOST (Russian standard)
|
|
HASHES_DESC= Hash Function Support
|
|
I386_DESC= i386 (instead of i486+)
|
|
IDEA_DESC= International Data Encryption Algorithm
|
|
KTLS_DESC= Use in-kernel TLS (FreeBSD >13)
|
|
LEGACY_DESC= Older algorithms
|
|
MAN3_DESC= Install API manpages (section 3, 7)
|
|
MD2_DESC= MD2 (obsolete) (requires LEGACY)
|
|
MD4_DESC= MD4 (unsafe)
|
|
MDC2_DESC= MDC-2 (patented, requires DES)
|
|
ML-DSA_DESC= ML-DSA CRYSTALS-Dilithium Digital Signature Algorithm
|
|
ML-KEM_DESC= ML-KEM Kyber Key Encapsulation Method
|
|
MODULES_DESC= Provider modules
|
|
NEXTPROTONEG_DESC= Next Protocol Negotiation (SPDY)
|
|
OPTIMIZE_DESC= Optimizations
|
|
PQC_DESC= Post-Quantum Cryptography
|
|
PROTOCOLS_DESC= Protocol Support
|
|
QUIC_DESC= HTTP/3
|
|
RC2_DESC= RC2 (unsafe)
|
|
RC4_DESC= RC4 (unsafe)
|
|
RC5_DESC= RC5 (patented)
|
|
RMD160_DESC= RIPEMD-160
|
|
RFC3779_DESC= RFC3779 support (BGP)
|
|
SCTP_DESC= SCTP (Stream Control Transmission)
|
|
SHARED_DESC= Build shared libraries
|
|
SLH-DSA_DESC= SLH-DSA Sphinx+ Digital Signature Algorithm
|
|
SM2_DESC= SM2 Elliptic Curve DH (Chinese standard)
|
|
SM3_DESC= SM3 256bit (Chinese standard)
|
|
SM4_DESC= SM4 128bit (Chinese standard)
|
|
SSE2_DESC= Runtime SSE2 detection
|
|
SSL3_DESC= SSLv3 (unsafe)
|
|
TLS-DEPRECATED-EC_DESC= Deprecated elliptic curve groups in TLS (unsafe)
|
|
TLS1_DESC= TLSv1.0 (requires TLS1_1, TLS1_2)
|
|
TLS1_1_DESC= TLSv1.1 (requires TLS1_2)
|
|
TLS1_2_DESC= TLSv1.2
|
|
THREADPOOL_DESC=Thread Pooling support
|
|
WEAK-SSL-CIPHERS_DESC= Weak cipher support (unsafe)
|
|
|
|
# Upstream default disabled options
|
|
.for _option in brotli fips fips-jitter md2 ktls rc5 sctp ssl3 weak-ssl-ciphers zlib zstd
|
|
${_option:tu}_CONFIGURE_ON= enable-${_option}
|
|
.endfor
|
|
|
|
# Upstream default enabled options
|
|
.for _option in aria asm async ct des gost idea md4 mdc2 ml-kem ml-dsa \
|
|
legacy nextprotoneg quic rc2 rc4 rfc3779 rmd160 shared slh-dsa \
|
|
sm2 sm3 sm4 sse2 threads tls-deprecated-ec tls1 tls1_1 tls1_2
|
|
${_option:tu}_CONFIGURE_OFF= no-${_option}
|
|
.endfor
|
|
|
|
FIPS-JITTER_IMPLIES= FIPS
|
|
MD2_IMPLIES= LEGACY
|
|
MDC2_IMPLIES= DES
|
|
TLS1_IMPLIES= TLS1_1
|
|
TLS1_1_IMPLIES= TLS1_2
|
|
|
|
BROTLI_CFLAGS= -I${PREFIX}/include
|
|
BROTLI_CONFIGURE_ON= enable-brotli-dynamic
|
|
BROTLI_LIB_DEPENDS= libbrotlicommon.so:archivers/brotli
|
|
EC_CONFIGURE_ON= enable-ec_nistp_64_gcc_128
|
|
FIPS_VARS= shlibs+=lib/ossl-modules/fips.so
|
|
I386_CONFIGURE_ON= 386
|
|
FIPS-JITTER_CFLAGS= -I${PREFIX}/include
|
|
FIPS-JITTER_LDFLAGS= -L${PREFIX}/lib
|
|
FIPS-JITTER_BUILD_DEPENDS= ${LOCALBASE}/lib/libjitterentropy.a:devel/libjitterentropy
|
|
LEGACY_VARS= shlibs+=lib/ossl-modules/legacy.so
|
|
MAN3_EXTRA_PATCHES_OFF= ${FILESDIR}/extra-patch-util_find-doc-nits
|
|
SHARED_MAKE_ENV= SHLIBVER=${OPENSSL_SHLIBVER}
|
|
SHARED_PLIST_SUB= SHLIBVER=${OPENSSL_SHLIBVER}
|
|
SHARED_USE= ldconfig=yes
|
|
SHARED_VARS= shlibs+="lib/libcrypto.so.${OPENSSL_SHLIBVER} \
|
|
lib/libssl.so.${OPENSSL_SHLIBVER} \
|
|
lib/engines-${OPENSSL_SHLIBVER}/capi.so \
|
|
lib/engines-${OPENSSL_SHLIBVER}/devcrypto.so \
|
|
lib/engines-${OPENSSL_SHLIBVER}/padlock.so"
|
|
SSL3_CONFIGURE_ON= enable-ssl3 enable-ssl3-method
|
|
THREADPOOL_CONFIGURE_OFF= no-thread-pool
|
|
ZLIB_CONFIGURE_ON= zlib-dynamic
|
|
ZSTD_CFLAGS= -I${PREFIX}/include
|
|
ZSTD_CONFIGURE_ON= enable-zstd-dynamic
|
|
ZSTD_LIB_DEPENDS= libzstd.so:archivers/zstd
|
|
|
|
SHLIBS= lib/engines-${OPENSSL_SHLIBVER}/loader_attic.so
|
|
|
|
PORTSCOUT= limit:^${DISTVERSION:R:S/./\./g}\.
|
|
|
|
.include <bsd.port.options.mk>
|
|
|
|
.if ${ARCH} == powerpc64
|
|
CONFIGURE_ARGS+= BSD-ppc64
|
|
.elif ${ARCH} == powerpc64le
|
|
CONFIGURE_ARGS+= BSD-ppc64le
|
|
.elif ${ARCH} == riscv64
|
|
CONFIGURE_ARGS+= BSD-riscv64
|
|
.endif
|
|
|
|
.include <bsd.port.pre.mk>
|
|
.if ${PREFIX} == /usr
|
|
IGNORE= the OpenSSL port can not be installed over the base version
|
|
.endif
|
|
|
|
OPENSSLDIR?= ${PREFIX}/openssl
|
|
PLIST_SUB+= OPENSSLDIR=${OPENSSLDIR:S=^${PREFIX}/==}
|
|
|
|
.include "version.mk"
|
|
|
|
post-patch:
|
|
${REINPLACE_CMD} -Ee 's|^(build\|install)_docs: .*|\1_docs: \1_man_docs|' \
|
|
${WRKSRC}/Configurations/unix-Makefile.tmpl
|
|
${REINPLACE_CMD} 's|SHLIB_VERSION=3|SHLIB_VERSION=${OPENSSL_SHLIBVER}|' \
|
|
${WRKSRC}/VERSION.dat
|
|
|
|
post-configure:
|
|
( cd ${WRKSRC} ; ${PERL} configdata.pm --dump )
|
|
|
|
post-configure-MAN3-off:
|
|
${REINPLACE_CMD} \
|
|
-e 's|^build_man_docs:.*|build_man_docs: $$(MANDOCS1) $$(MANDOCS5)|' \
|
|
-e 's|dummy $$(MANDOCS[37]); do |dummy; do |' \
|
|
${WRKSRC}/Makefile
|
|
|
|
post-install-SHARED-on:
|
|
.for i in ${SHLIBS}
|
|
-@${STRIP_CMD} ${STAGEDIR}${PREFIX}/$i
|
|
.endfor
|
|
|
|
post-install-SHARED-off:
|
|
${RMDIR} ${STAGEDIR}${PREFIX}/lib/engines-12
|
|
|
|
post-install:
|
|
${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/openssl
|
|
|
|
post-install-MAN3-on:
|
|
( cd ${STAGEDIR}/${PREFIX} ; find share/man/man3 -not -type d ; \
|
|
find share/man/man7 -not -type d ) | sed 's/$$/.gz/' >> ${TMPPLIST}
|
|
|
|
.include <bsd.port.post.mk>
|