aboutsummaryrefslogtreecommitdiffstats
path: root/Mk/bsd.openssl.mk
blob: 0d8d2df2e4000d7ab0502502c771569e263c9e28 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
# makefile for use of:  OpenSSH
# Date created:     31 May 2002
# Whom:         dinoex
#
# $FreeBSD: /tmp/pcvs/ports/Mk/bsd.openssl.mk,v 1.5 2003-05-07 20:08:00 dinoex Exp $
#
# this substitutes USE_OPENSSL=yes
# just include this makefile after bsd.ports.pre.mk
#
# the user/port can now set this options in the makefiles.
#
# WITH_OPENSSL_BASE=yes - Use the version in the base system.
# WITH_OPENSSL_PORT=yes - Use the port, even if base if up to date
# WITH_OPENSSL_BETA=yes - Use a snapshot of recent openssl
#
# Overrideable defaults:
#
# OPENSSL_SHLIBVER= 3
# OPENSSL_PORT=     security/openssl
#
# The makefile sets this variables:
# OPENSSLBASE       - "/usr" or ${LOCALBASE}
# OPENSSLDIR        - path to openssl
# OPENSSLLIB        - path to the libs
# OPENSSLINC        - path to the matching includes
#
# MAKE_ENV      - extended with the variables above
# LIB_DEPENDS       - are added if needed

# honor obsolete options for a bit
.if defined(USE_OPENSSL_BASE) && !defined(WITH_OPENSSL_BASE)
WITH_OPENSSL_BASE=yes
.endif
.if defined(USE_OPENSSL_PORT) && !defined(WITH_OPENSSL_PORT)
WITH_OPENSSL_PORT=yes
.endif

#   if no preference was set, check for an up to date base version
#   but give an installed port preference over it.
.if !defined(WITH_OPENSSL_BASE) && \
    !defined(WITH_OPENSSL_BETA) && \
    !defined(WITH_OPENSSL_PORT) && \
    !exists(${LOCALBASE}/lib/libcrypto.so) && \
    exists(/usr/include/openssl/opensslv.h)
#   Security: version in base must be 0.9.7a
OPENSSLVER!=    ${AWK} '/OPENSSL_VERSION_NUMBER/ { print $$3 }' \
        /usr/include/openssl/opensslv.h
.if ${OPENSSLVER} == 0x0090701fL || ${OPENSSLVER} == 0x0090702fL
WITH_OPENSSL_BASE=yes
.endif
.endif

.if defined(WITH_OPENSSL_BASE)
OPENSSLBASE=        /usr
OPENSSLDIR=     /etc/ssl

.if !exists(/usr/lib/libcrypto.so)
.BEGIN:
    @${ECHO_CMD} "This port requires the OpenSSL library, which is part of"
    @${ECHO_CMD} "the FreeBSD crypto distribution but not installed on your"
    @${ECHO_CMD} "machine. Please see the \"OpenSSL\" section in the handbook"
    @${ECHO_CMD} "(at \"http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/openssl.html\", for instance)"
    @${ECHO_CMD} "for instructions on how to obtain and install the FreeBSD"
    @${ECHO_CMD} "OpenSSL distribution."
    @${FALSE}
.endif
.if exists(${LOCALBASE}/lib/libcrypto.so)
.BEGIN:
    @${ECHO_CMD} "This port wants the OpenSSL library from the FreeBSD"
    @${ECHO_CMD} "base system. You can't build against it, while a newer"
    @${ECHO_CMD} "Version is installed by a port."
    @${ECHO_CMD} "Please deinstall the port or undefine WITH_OPENSSL_BASE."
    @${FALSE}
.endif

# OpenSSL in the base system may not include IDEA for patent licensing reasons.
.if defined(MAKE_IDEA) && !defined(OPENSSL_IDEA)
OPENSSL_IDEA=       ${MAKE_IDEA}
.else
OPENSSL_IDEA?=      NO
.endif

.if ${OPENSSL_IDEA} == "NO"
# XXX This is a hack to work around the fact that /etc/make.conf clobbers
#     our CFLAGS. It might not be enough for all future ports.
.if defined(HAS_CONFIGURE)
CFLAGS+=        -DNO_IDEA
.else
OPENSSL_CFLAGS+=    -DNO_IDEA
.endif
MAKE_ARGS+=     OPENSSL_CFLAGS="${OPENSSL_CFLAGS}"
.endif
CFLAGS+=        -Wl,-rpath,/usr/lib:${LOCALBASE}/lib
OPENSSL_LDFLAGS+=   -rpath=/usr/lib:${LOCALBASE}/lib

.else

OPENSSLBASE=        ${LOCALBASE}
.if defined(WITH_OPENSSL_BETA)
OPENSSL_SHLIBVER?=  4
OPENSSL_PORT?=      security/openssl-beta
.else
OPENSSL_SHLIBVER?=  3
OPENSSL_PORT?=      security/openssl
.endif
OPENSSLDIR=     ${OPENSSLBASE}/openssl
LIB_DEPENDS+=       crypto.${OPENSSL_SHLIBVER}:${PORTSDIR}/${OPENSSL_PORT}
CFLAGS+=        -Wl,-rpath,${LOCALBASE}/lib
OPENSSL_LDFLAGS+=   -rpath=${LOCALBASE}/lib

.endif

OPENSSLLIB=     ${OPENSSLBASE}/lib
OPENSSLINC=     ${OPENSSLBASE}/include
MAKE_ENV+=      OPENSSLLIB=${OPENSSLLIB} OPENSSLINC=${OPENSSLINC} \
            OPENSSLBASE=${OPENSSLBASE} OPENSSLDIR=${OPENSSLDIR}

.if defined(LDFLAGS) && !empty(LDFLAGS)
LDFLAGS+=${OPENSSL_LDFLAGS}
.else
LDFLAGS=${OPENSSL_LDFLAGS}
.endif

### crypto
#RESTRICTED=        "Contains cryptography."