From 1e07ff6e43ada82964be5e1b8dcbe6da56f1b692 Mon Sep 17 00:00:00 2001 From: dinoex Date: Sun, 17 Feb 2002 15:00:25 +0000 Subject: Add option to support patches: OpenSSH supports Kerberos v5 authentication, but this is not enabled in the portable version. A patch is available to correct this deficiency for those wishing to use this port with Kerberos. In addition, a patch is also available from Simon Wilkinson to implement the GSS-API key-exchange mechanism for SSHv2, which is currently being standardized. Use of this mechanism with Kerberos v5 obviates the need for manual management of host keys, a considerable improvement for large Kerberos sites. PR: 34363 Submitted by: wollman@hergotha.lcs.mit.edu --- security/hpn-ssh/Makefile | 24 ++++++++++++++++++++++++ security/hpn-ssh/distinfo | 2 ++ security/openssh-portable/Makefile | 24 ++++++++++++++++++++++++ security/openssh-portable/distinfo | 2 ++ 4 files changed, 52 insertions(+) (limited to 'security') diff --git a/security/hpn-ssh/Makefile b/security/hpn-ssh/Makefile index ead7b3a3db01..8d6fe1acf548 100644 --- a/security/hpn-ssh/Makefile +++ b/security/hpn-ssh/Makefile @@ -48,6 +48,30 @@ CONFIGURE_ARGS+= --mandir=${MANPREFIX}/man \ EXTRA_PATCHES+= ${FILESDIR}/batch.patch .endif +.if defined(KRB5_HOME) +MASTER_SITES+= ${PATCH_SITES} +DISTFILES= ${EXTRACT_ONLY} ${PORTNAME}-${PORTVERSION}-gssapi.patch +EXTRACT_ONLY= ${PORTNAME}-${PORTVERSION}${EXTRACT_SUFX} +PATCH_SITES= http://www.sxw.org.uk/computing/patches/ +PATCHFILES= ${PORTNAME}-${PORTVERSION}-krb5.patch +BUILD_DEPENDS= autoconf:${PORTSDIR}/devel/autoconf +# USE_AUTOCONF_VER= 252 # broken +CONFIGURE_ARGS+= --with-kerberos5=${KRB5_HOME} +AUTOCONF= autoconf +AUTOHEADER= autoheader + +post-patch: + @${ECHO_MSG} Applying extra patch for GSS-API key-exchange... + @${PATCH} ${PATCH_DIST_ARGS:S/-p0/-p1/} \ + < ${DISTDIR}/${PORTNAME}-${PORTVERSION}-gssapi.patch + +pre-configure: + @${ECHO_MSG} !!!! Warning this option uses autoconf/autoheader !!! + (cd ${CONFIGURE_WRKSRC} && ${SETENV} ${AUTOCONF_ENV} ${AUTOCONF} \ + ${AUTOCONF_ARGS}) + (cd ${CONFIGURE_WRKSRC} && ${SETENV} ${AUTOCONF_ENV} ${AUTOHEADER}) +.endif + post-install: @${CAT} ${PKGMESSAGE} diff --git a/security/hpn-ssh/distinfo b/security/hpn-ssh/distinfo index 6bfa94872b46..4f636c0ddd6d 100644 --- a/security/hpn-ssh/distinfo +++ b/security/hpn-ssh/distinfo @@ -1 +1,3 @@ MD5 (openssh-3.0.2p1.tar.gz) = 2fa62bf878862cb47a7515c35afe35b6 +MD5 (openssh-3.0.2p1-gssapi.patch) = 66ce171ac4b09603c7069cea198d2090 +MD5 (openssh-3.0.2p1-krb5.patch) = c6fe5622607b3137fa22741897cbd5db diff --git a/security/openssh-portable/Makefile b/security/openssh-portable/Makefile index ead7b3a3db01..8d6fe1acf548 100644 --- a/security/openssh-portable/Makefile +++ b/security/openssh-portable/Makefile @@ -48,6 +48,30 @@ CONFIGURE_ARGS+= --mandir=${MANPREFIX}/man \ EXTRA_PATCHES+= ${FILESDIR}/batch.patch .endif +.if defined(KRB5_HOME) +MASTER_SITES+= ${PATCH_SITES} +DISTFILES= ${EXTRACT_ONLY} ${PORTNAME}-${PORTVERSION}-gssapi.patch +EXTRACT_ONLY= ${PORTNAME}-${PORTVERSION}${EXTRACT_SUFX} +PATCH_SITES= http://www.sxw.org.uk/computing/patches/ +PATCHFILES= ${PORTNAME}-${PORTVERSION}-krb5.patch +BUILD_DEPENDS= autoconf:${PORTSDIR}/devel/autoconf +# USE_AUTOCONF_VER= 252 # broken +CONFIGURE_ARGS+= --with-kerberos5=${KRB5_HOME} +AUTOCONF= autoconf +AUTOHEADER= autoheader + +post-patch: + @${ECHO_MSG} Applying extra patch for GSS-API key-exchange... + @${PATCH} ${PATCH_DIST_ARGS:S/-p0/-p1/} \ + < ${DISTDIR}/${PORTNAME}-${PORTVERSION}-gssapi.patch + +pre-configure: + @${ECHO_MSG} !!!! Warning this option uses autoconf/autoheader !!! + (cd ${CONFIGURE_WRKSRC} && ${SETENV} ${AUTOCONF_ENV} ${AUTOCONF} \ + ${AUTOCONF_ARGS}) + (cd ${CONFIGURE_WRKSRC} && ${SETENV} ${AUTOCONF_ENV} ${AUTOHEADER}) +.endif + post-install: @${CAT} ${PKGMESSAGE} diff --git a/security/openssh-portable/distinfo b/security/openssh-portable/distinfo index 6bfa94872b46..4f636c0ddd6d 100644 --- a/security/openssh-portable/distinfo +++ b/security/openssh-portable/distinfo @@ -1 +1,3 @@ MD5 (openssh-3.0.2p1.tar.gz) = 2fa62bf878862cb47a7515c35afe35b6 +MD5 (openssh-3.0.2p1-gssapi.patch) = 66ce171ac4b09603c7069cea198d2090 +MD5 (openssh-3.0.2p1-krb5.patch) = c6fe5622607b3137fa22741897cbd5db -- cgit