b7f05445c0
It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)
170 lines
5.1 KiB
Makefile
170 lines
5.1 KiB
Makefile
PORTNAME= openssl
|
|
PORTVERSION= 1.1.1q
|
|
PORTEPOCH= 1
|
|
CATEGORIES= security devel
|
|
MASTER_SITES= https://www.openssl.org/source/ \
|
|
ftp://ftp.cert.dfn.de/pub/tools/net/openssl/source/
|
|
|
|
MAINTAINER= brnrd@FreeBSD.org
|
|
COMMENT= TLSv1.3 capable SSL and crypto library
|
|
WWW= https://www.openssl.org/
|
|
|
|
LICENSE= OpenSSL
|
|
LICENSE_FILE= ${WRKSRC}/LICENSE
|
|
|
|
CONFLICTS_INSTALL= boringssl libressl libressl-devel openssl-devel openssl-quictls
|
|
|
|
HAS_CONFIGURE= yes
|
|
CONFIGURE_SCRIPT= config
|
|
CONFIGURE_ENV= PERL="${PERL}"
|
|
CONFIGURE_ARGS= --openssldir=${OPENSSLDIR} \
|
|
--prefix=${PREFIX}
|
|
|
|
USES= cpe perl5
|
|
USE_PERL5= build
|
|
TEST_TARGET= test
|
|
|
|
LDFLAGS_i386= -Wl,-znotext
|
|
|
|
MAKE_ARGS+= WHOLE_ARCHIVE_FLAG=--whole-archive CNF_LDFLAGS="${LDFLAGS}"
|
|
MAKE_ENV+= LIBRPATH="${PREFIX}/lib" GREP_OPTIONS=
|
|
|
|
OPTIONS_GROUP= CIPHERS HASHES OPTIMIZE PROTOCOLS
|
|
OPTIONS_GROUP_CIPHERS= ARIA DES GOST IDEA SM4 RC2 RC4 RC5 WEAK-SSL-CIPHERS
|
|
OPTIONS_GROUP_HASHES= MD2 MD4 MDC2 RMD160 SM2 SM3
|
|
OPTIONS_GROUP_OPTIMIZE= ASM SSE2 THREADS
|
|
OPTIONS_DEFINE_i386= I386
|
|
OPTIONS_GROUP_PROTOCOLS=NEXTPROTONEG SCTP SSL3 TLS1 TLS1_1 TLS1_2
|
|
|
|
OPTIONS_DEFINE= ASYNC CRYPTODEV CT KTLS MAN3 RFC3779 SHARED ZLIB
|
|
|
|
OPTIONS_DEFAULT=ASM ASYNC CT GOST DES EC KTLS MAN3 MD4 NEXTPROTONEG RC2 \
|
|
RC4 RMD160 SCTP SHARED SSE2 THREADS TLS1 TLS1_1 TLS1_2
|
|
|
|
OPTIONS_EXCLUDE=${${OSVERSION} < 1300042:?KTLS:} \
|
|
${${OSVERSION} > 1300000:?CRYPTODEV:}
|
|
|
|
OPTIONS_GROUP_OPTIMIZE_amd64= EC
|
|
|
|
.if ${MACHINE_ARCH} == "amd64"
|
|
OPTIONS_GROUP_OPTIMIZE+= EC
|
|
.elif ${MACHINE_ARCH} == "mips64el"
|
|
OPTIONS_GROUP_OPTIMIZE+= EC
|
|
.endif
|
|
|
|
OPTIONS_SUB= yes
|
|
|
|
ARIA_DESC= ARIA (South Korean standard)
|
|
ASM_DESC= Assembler code
|
|
ASYNC_DESC= Asynchronous mode
|
|
CIPHERS_DESC= Block Cipher Support
|
|
CRYPTODEV_DESC= /dev/crypto support
|
|
CT_DESC= Certificate Transparency Support
|
|
DES_DESC= (Triple) Data Encryption Standard
|
|
EC_DESC= Optimize NIST elliptic curves
|
|
GOST_DESC= GOST (Russian standard)
|
|
HASHES_DESC= Hash Function Support
|
|
I386_DESC= i386 (instead of i486+)
|
|
IDEA_DESC= International Data Encryption Algorithm
|
|
KTLS_DESC= Kernel TLS offload
|
|
MAN3_DESC= Install API manpages (section 3, 7)
|
|
MD2_DESC= MD2 (obsolete)
|
|
MD4_DESC= MD4 (unsafe)
|
|
MDC2_DESC= MDC-2 (patented, requires DES)
|
|
NEXTPROTONEG_DESC= Next Protocol Negotiation (SPDY)
|
|
OPTIMIZE_DESC= Optimizations
|
|
PROTOCOLS_DESC= Protocol Support
|
|
RC2_DESC= RC2 (unsafe)
|
|
RC4_DESC= RC4 (unsafe)
|
|
RC5_DESC= RC5 (patented)
|
|
RMD160_DESC= RIPEMD-160
|
|
RFC3779_DESC= RFC3779 support (BGP)
|
|
SCTP_DESC= SCTP (Stream Control Transmission)
|
|
SHARED_DESC= Build shared libraries
|
|
SM2_DESC= SM2 Elliptic Curve DH (Chinese standard)
|
|
SM3_DESC= SM3 256bit (Chinese standard)
|
|
SM4_DESC= SM4 128bit (Chinese standard)
|
|
SSE2_DESC= Runtime SSE2 detection
|
|
SSL3_DESC= SSLv3 (unsafe)
|
|
TLS1_DESC= TLSv1.0 (requires TLS1_1, TLS1_2)
|
|
TLS1_1_DESC= TLSv1.1 (requires TLS1_2)
|
|
TLS1_2_DESC= TLSv1.2
|
|
WEAK-SSL-CIPHERS_DESC= Weak cipher support (unsafe)
|
|
|
|
# Upstream default disabled options
|
|
.for _option in ktls md2 rc5 sctp ssl3 zlib weak-ssl-ciphers
|
|
${_option:tu}_CONFIGURE_ON= enable-${_option}
|
|
.endfor
|
|
|
|
# Upstream default enabled options
|
|
.for _option in aria asm async ct des gost idea md4 mdc2 nextprotoneg rc2 rc4 \
|
|
rfc3779 rmd160 shared sm2 sm3 sm4 sse2 threads tls1 tls1_1 tls1_2
|
|
${_option:tu}_CONFIGURE_OFF= no-${_option}
|
|
.endfor
|
|
|
|
MDC2_IMPLIES= DES
|
|
TLS1_IMPLIES= TLS1_1
|
|
TLS1_1_IMPLIES= TLS1_2
|
|
|
|
EC_CONFIGURE_ON= enable-ec_nistp_64_gcc_128
|
|
I386_CONFIGURE_ON= 386
|
|
KTLS_EXTRA_PATCHES= ${FILESDIR}/extra-patch-ktls
|
|
MAN3_EXTRA_PATCHES_OFF= ${FILESDIR}/extra-patch-util_process__docs.pl
|
|
SHARED_MAKE_ENV= SHLIBVER=${OPENSSL_SHLIBVER}
|
|
SHARED_PLIST_SUB= SHLIBVER=${OPENSSL_SHLIBVER}
|
|
SHARED_USE= ldconfig=yes
|
|
SSL3_CONFIGURE_ON+= enable-ssl3-method
|
|
ZLIB_CONFIGURE_ON= zlib-dynamic
|
|
|
|
.include <bsd.port.pre.mk>
|
|
.if ${PREFIX} == /usr
|
|
IGNORE= the OpenSSL port can not be installed over the base version
|
|
.endif
|
|
|
|
.if ${OPSYS} == FreeBSD && ${OSVERSION} < 1300000 && !${PORT_OPTIONS:MCRYPTODEV}
|
|
CONFIGURE_ARGS+= no-devcryptoeng
|
|
.endif
|
|
|
|
OPENSSLDIR?= ${PREFIX}/openssl
|
|
PLIST_SUB+= OPENSSLDIR=${OPENSSLDIR:S=^${PREFIX}/==}
|
|
|
|
.include "version.mk"
|
|
|
|
.if ${PORT_OPTIONS:MASM}
|
|
BROKEN_sparc64= option ASM generates illegal instructions
|
|
.endif
|
|
|
|
post-patch:
|
|
${REINPLACE_CMD} \
|
|
-e 's|^MANDIR=.*$$|MANDIR=$$(INSTALLTOP)/man|' \
|
|
-e 's| install_html_docs$$||' \
|
|
-e 's|$$(LIBDIR)/pkgconfig|libdata/pkgconfig|g' \
|
|
${WRKSRC}/Configurations/unix-Makefile.tmpl
|
|
${REINPLACE_CMD} -e 's|\^GNU ld|GNU|' ${WRKSRC}/Configurations/shared-info.pl
|
|
|
|
post-configure:
|
|
${REINPLACE_CMD} \
|
|
-e 's|SHLIB_VERSION_NUMBER=1.1|SHLIB_VERSION_NUMBER=${OPENSSL_SHLIBVER}|' \
|
|
${WRKSRC}/Makefile
|
|
${REINPLACE_CMD} \
|
|
-e 's|SHLIB_VERSION_NUMBER "1.1"|SHLIB_VERSION_NUMBER "${OPENSSL_SHLIBVER}"|' \
|
|
${WRKSRC}/include/openssl/opensslv.h
|
|
|
|
post-install-SHARED-on:
|
|
.for i in libcrypto libssl
|
|
${INSTALL_LIB} ${WRKSRC}/$i.so.${OPENSSL_SHLIBVER} ${STAGEDIR}${PREFIX}/lib
|
|
${LN} -sf $i.so.${OPENSSL_SHLIBVER} ${STAGEDIR}${PREFIX}/lib/$i.so
|
|
.endfor
|
|
.for i in capi padlock
|
|
${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/engines-1.1/${i}.so
|
|
.endfor
|
|
|
|
post-install:
|
|
${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/openssl
|
|
|
|
post-install-MAN3-on:
|
|
( cd ${STAGEDIR}/${PREFIX} ; ${FIND} man/man3 man/man7 -not -type d ) | \
|
|
${SED} 's/$$/.gz/' >>${TMPPLIST}
|
|
|
|
.include <bsd.port.post.mk>
|