path: root/www/squid25/Makefile

# New ports collection makefile for:    squid24
# Date created:     Tue Mar 27 14:56:08 CEST 2001
# Whom:         Adrian Chadd <adrian@FreeBSD.org>
#
# $FreeBSD$
#
# Tunables not (yet) configurable via 'make config':
# SQUID_{U,G}ID
#   Which user/group squid should run as (default: squid/squid).
#   The user and group will be created if they do not already exist using
#   a uid:gid of 100:100.
#   NOTE: before version 2.5.4_6, these settings defaulted to
#   nobody/nogroup.
#   If you wish to keep these settings, please define SQUID_UID=nobody and
#   SQUID_GID=nogroup in your make environment before you start the update.
#   NOTE2:
#   Before version 2.5.4_11 the numerical id chosen for SQUID_UID (and
#   SQUID_GID respectively) was the first free id greater than or equal 3128.
#   If you wish to move your squid user to id 100:100, run "make changeuser",
#   please see the changeuser target's definition for further information.
# SQUID_LANGUAGES
#   A list of languages for which error page files should be installed
#   (default: all)
#
#   E.g. use `make SQUID_LANGUAGES="English French"' if you want to
#   install the files for these languages only.
#   Use `make -VSQUID_LANGUAGES' or scroll down to this variable's
#   definition to see which values are valid.
#
# SQUID_DEFAULT_LANG
#   If you define SQUID_LANGUAGES, select which language should be the default
#   one (this variable defaults to English). This setting can be overwritten
#   with squid.conf's error_directory directive.
#
# SQUID_CONFIGURE_ARGS
#   Additional configuration options.
#
#   To enable them, use e.g
#   `make SQUID_CONFIGURE_ARGS="--enable-dlmalloc --enable-truncate" install'
#
#   The list below may be incomplete, please see the configure script
#   in the squid source distribution for the complete list of additional
#   options.
#   Note that you probably do not need to worry about these options in most
#   cases, they are included in case you want to experiment with them.
#
#    --enable-dlmalloc
#     Compile and use the malloc package from Doug Lea
#    --enable-gnuregex
#     Compile and use the supplied GNUregex routines instead of BSD regex.
#    --enable-xmalloc-statistics
#     Show malloc statistics in status page
#    --enable-time-hack
#     Optimize time updates to one per second rather than calling gettimeofday()
#    --enable-cachemgr-hostname=some.hostname
#     Set an explicit hostname in cachemgr.cgi
#    --enable-truncate
#     Use truncate() rather than unlink()
#    --disable-unlinkd
#     Do not use "unlinkd"
#    --with-aufs-threads=N_THREADS
#     Tune the number of worker threads for the aufs object
#    --with-coss-membuf-size
#     COSS membuf size (default: 1048576 bytes)
#
#    This option does not work on FreeBSD at the moment:
#
#    --enable-ipf-transparent
#     Enable Transparent Proxy support for IP-Filter systems (incl 3.0)
#     (IPFilter headers are not currently installed to the base system,
#     PRs ports/60700 and misc/44148 describe the problem; see
#     http://www.squid-cache.org/Doc/FAQ/FAQ-17.html for information
#     about how to do transparent proxying with ipfw)

PORTNAME=   squid
PORTVERSION=    2.5.7
PORTREVISION=   8
CATEGORIES= www
MASTER_SITES=   \
        ftp://ftp.squid-cache.org/pub/%SUBDIR%/ \
        ftp://ftp.unimelb.edu.au/pub/cwis/servers/unix/squid/%SUBDIR%/ \
        ftp://sunsite.auc.dk/pub/infosystems/squid/%SUBDIR%/ \
        ftp://ftp.leo.org/pub/comp/general/infosys/www/servers/squid/%SUBDIR%/ \
        ${MASTER_SITE_RINGSERVER:S,%SUBDIR%,net/www/squid/&,}
MASTER_SITE_SUBDIR= squid-2/STABLE
DISTNAME=   squid-2.5.STABLE7
DIST_SUBDIR=    squid2.5

PATCH_SITES=    http://www.squid-cache.org/Versions/v2/2.5/bugs/
PATCHFILES= squid-2.5.STABLE7-half_closed_POST.patch \
        squid-2.5.STABLE7-LDAP_version_documentation.patch \
        squid-2.5.STABLE7_req_resp_header.patch \
        squid-2.5.STABLE7-helper_shutdown.patch \
        squid-2.5.STABLE7-blank_response.patch \
        squid-2.5.STABLE7-dothost.patch \
        squid-2.5.STABLE7-httpd_accel_vport.patch \
        squid-2.5.STABLE7-cachemgr_vmobjects.patch \
        squid-2.5.STABLE7-empty_acls.patch \
        squid-2.5.STABLE7-close_other.patch \
        squid-2.5.STABLE7-fakeauth_auth.patch \
        squid-2.5.STABLE7-gopher_html_parsing.patch \
        squid-2.5.STABLE7-wccp_denial_of_service.patch \
        squid-2.5.STABLE7-dns_memleak.patch \
        squid-2.5.STABLE7-fqdn_truncated.patch \
        squid-2.5.STABLE7-ldap_spaces.patch \
        squid-2.5.STABLE7-ftp_datachannel.patch \
        squid-2.5.STABLE7-short_icons_urls.patch \
        squid-2.5.STABLE7-response_splitting.patch
PATCH_DIST_STRIP=   -p1

MAINTAINER= tmseck@netcologne.de
COMMENT=    The successful WWW proxy cache and accelerator

CONFLICTS=  squid-2.[^5]*
GNU_CONFIGURE=  yes
USE_BZIP2=  yes
USE_PERL5=  yes
USE_REINPLACE=  yes

SQUID_UID?= squid
SQUID_GID?= squid

MAN8=       squid.8
docs=       QUICKSTART README RELEASENOTES.html doc/debug-sections.txt
.if !defined(NOPORTDOCS)
PORTDOCS=   ${docs:T}
.endif

OPTIONS=    SQUID_LDAP_AUTH "Install LDAP authentication helpers" off \
        SQUID_DELAY_POOLS "Enable delay pools" off \
        SQUID_SNMP "Enable SNMP support" off \
        SQUID_CARP "Enable CARP support" off \
        SQUID_SSL "Enable SSL support for reverse proxies" off \
        SQUID_PINGER "Install the icmp helper" off \
        SQUID_DNS_HELPER "Use the old 'dnsserver' helper" off \
        SQUID_HTCP "Enable HTCP support" off \
        SQUID_VIA_DB "Enable forward/via database" off \
        SQUID_CACHE_DIGESTS "Enable cache digests" off \
        SQUID_WCCP "Enable Web Cache Coordination Protocol" on \
        SQUID_UNDERSCORES "Allow underscores in hostnames" on \
        SQUID_CHECK_HOSTNAME "Do hostname checking" on \
        SQUID_STRICT_HTTP "Be strictly HTTP compliant" off \
        SQUID_IDENT "Enable ident (RFC 931) lookups" on \
        SQUID_USERAGENT_LOG "Enable User-Agent-header logging" off \
        SQUID_ARP_ACL "Enable ACLs based on ethernet address" off \
        SQUID_PF "Enable transp. proxy support using PF" off \
        SQUID_FOLLOW_XFF "Follow X-Forwarded-For headers" off \
        SQUID_AUFS "Enable the aufs storage scheme" off \
        SQUID_COSS "Enable the COSS storage scheme" off \
        SQUID_STACKTRACES "Create backtraces on fatal errors" off \
        SQUID_RCNG "Install an rcNG startup script" on

PLIST_FILES=    etc/rc.d/squid.sh etc/squid/mib.txt etc/squid/mime.conf.default \
        etc/squid/msntauth.conf.default etc/squid/squid.conf.default \
        sbin/RunAccel sbin/RunCache sbin/squidclient sbin/squid

icon_files= anthony-binhex.gif anthony-bomb.gif anthony-box.gif \
        anthony-box2.gif anthony-c.gif anthony-compressed.gif \
        anthony-dir.gif anthony-dirup.gif anthony-dvi.gif \
        anthony-f.gif anthony-image.gif anthony-image2.gif \
        anthony-layout.gif anthony-link.gif anthony-movie.gif \
        anthony-pdf.gif anthony-portal.gif anthony-ps.gif \
        anthony-quill.gif anthony-script.gif anthony-sound.gif \
        anthony-tar.gif anthony-tex.gif anthony-text.gif \
        anthony-unknown.gif anthony-xbm.gif anthony-xpm.gif

error_files=    ERR_ACCESS_DENIED ERR_CACHE_ACCESS_DENIED \
        ERR_CACHE_MGR_ACCESS_DENIED ERR_CANNOT_FORWARD \
        ERR_CONNECT_FAIL ERR_DNS_FAIL ERR_FORWARDING_DENIED \
        ERR_FTP_DISABLED ERR_FTP_FAILURE ERR_FTP_FORBIDDEN \
        ERR_FTP_NOT_FOUND ERR_FTP_PUT_CREATED \
        ERR_FTP_PUT_ERROR ERR_FTP_PUT_MODIFIED \
        ERR_FTP_UNAVAILABLE ERR_INVALID_REQ ERR_INVALID_URL \
        ERR_LIFETIME_EXP ERR_NO_RELAY ERR_ONLY_IF_CACHED_MISS \
        ERR_READ_ERROR ERR_READ_TIMEOUT ERR_SHUTTING_DOWN \
        ERR_SOCKET_FAILURE ERR_TOO_BIG ERR_UNSUP_REQ \
        ERR_URN_RESOLVE ERR_WRITE_ERROR ERR_ZERO_SIZE_OBJECT

libexec=    cachemgr.cgi digest_pw_auth diskd dnsserver ip_user_check \
        squid_ldap_auth squid_ldap_group msnt_auth ncsa_auth ntlm_auth \
        pam_auth pinger smb_auth smb_auth.sh squid_unix_group \
        unlinkd wb_auth wb_group wb_ntlmauth wbinfo_group.pl

CONFIGURE_ARGS= --bindir=${PREFIX}/sbin  --sysconfdir=${PREFIX}/etc/squid \
        --datadir=${PREFIX}/etc/squid \
        --libexecdir=${PREFIX}/libexec/squid \
        --localstatedir=${PREFIX}/squid \
        --enable-removal-policies="lru heap"

.include <bsd.port.pre.mk>

# Authentication methods and modules:

basic_auth= NCSA PAM MSNT SMB winbind
external_acl=   ip_user unix_group wbinfo_group winbind_group
MAN8+=      pam_auth.8 squid_unix_group.8
.if defined(WITH_SQUID_LDAP_AUTH)
USE_OPENLDAP=   yes
CFLAGS+=    -I${LOCALBASE}/include
LDFLAGS+=   -L${LOCALBASE}/lib
MAN8+=      squid_ldap_auth.8 squid_ldap_group.8
basic_auth+=    LDAP
external_acl+=  ldap_group
.endif
.if !defined(NO_NIS)
basic_auth+=    YP
libexec+=   yp_auth
.endif
CONFIGURE_ARGS+=    --enable-auth="basic ntlm digest" \
            --enable-basic-auth-helpers="${basic_auth}" \
            --enable-digest-auth-helpers="password" \
            --enable-external-acl-helpers="${external_acl}" \
            --enable-ntlm-auth-helpers="SMB winbind"

# Selection of storage schemes:

storage_schemes=    ufs diskd null
.if defined(WITH_SQUID_AUFS)
storage_schemes+=   aufs
# Nil aufs threads is default, set any other value via SQUID_CONFIGURE_ARGS
CONFIGURE_ARGS+=    --enable-async-io \
            --with-pthreads
CFLAGS+=    ${PTHREAD_CFLAGS}
.endif
.if defined(WITH_SQUID_COSS)
storage_schemes+=   coss
CONFIGURE_ARGS+=    --with-aio
.endif
CONFIGURE_ARGS+=    --enable-storeio="${storage_schemes}"

# Other options set via 'make config':

.if defined(WITH_SQUID_DELAY_POOLS)
CONFIGURE_ARGS+=    --enable-delay-pools
.endif
.if defined(WITH_SQUID_SNMP)
CONFIGURE_ARGS+=    --enable-snmp
.endif
.if defined(WITH_SQUID_CARP)
CONFIGURE_ARGS+=    --enable-carp
.endif
.if defined(WITH_SQUID_SSL)
# we need to .include bsd.openssl.mk manually here because USE_OPENSSL only
# works when it is defined before bsd.port{.pre}.mk is .included and this is
# not possible when using OPTIONS
.include "${PORTSDIR}/Mk/bsd.openssl.mk"
CONFIGURE_ARGS+=    --enable-ssl \
            --with-openssl="${OPENSSLBASE}"
CFLAGS+=    -I${OPENSSLINC}
LDFLAGS+=   -I${LOCALBASE}/lib
.endif
.if defined(WITH_SQUID_PINGER)
CONFIGURE_ARGS+=    --enable-icmp
.endif
.if defined(WITH_SQUID_DNS_HELPER)
CONFIGURE_ARGS+=    --disable-internal-dns
.endif
.if defined(WITH_SQUID_HTCP)
CONFIGURE_ARGS+=    --enable-htcp
.endif
.if defined(WITH_SQUID_VIA_DB)
CONFIGURE_ARGS+=    --enable-forw-via-db
.endif
.if defined(WITH_SQUID_CACHE_DIGESTS)
CONFIGURE_ARGS+=    --enable-cache-digests
.endif
.if defined(WITHOUT_SQUID_WCCP)
CONFIGURE_ARGS+=    --disable-wccp
.endif
.if !defined(WITHOUT_SQUID_UNDERSCORES)
CONFIGURE_ARGS+=    --enable-underscores
.endif
.if defined(WITHOUT_SQUID_CHECK_HOSTNAME)
CONFIGURE_ARGS+=    --disable-hostname-checks
.endif
.if defined(WITH_SQUID_STRICT_HTTP)
CONFIGURE_ARGS+=    --disable-http-violations
.endif
.if defined(WITHOUT_SQUID_IDENT)
CONFIGURE_ARGS+=    --disable-ident-lookups
.endif
.if defined(WITH_SQUID_USERAGENT_LOG)
CONFIGURE_ARGS+=    --enable-useragent-log
.endif
.if defined(WITH_SQUID_ARP_ACL)
CONFIGURE_ARGS+=    --enable-arp-acl
.endif
.if defined(WITH_SQUID_PF)
CONFIGURE_ARGS+=    --enable-pf-transparent
.if ${OSVERSION} < 502106
pf_includedir=  ${LOCALBASE}/include/pf
BUILD_DEPENDS+= ${pf_includedir}/net/pfvar.h:${PORTSDIR}/security/pf
CFLAGS+=    -I${pf_includedir}
EXTRA_PATCHES+= ${WRKDIR}/pf_from_ports.patch
.endif
.endif
.if defined(WITH_SQUID_FOLLOW_XFF)
EXTRA_PATCHES+=     ${PATCHDIR}/follow_xff-2.5.patch \
            ${PATCHDIR}/follow_xff-configure.patch
CONFIGURE_ARGS+=    --enable-follow-x-forwarded-for
.endif
.if defined(WITH_SQUID_STACKTRACES)
CONFIGURE_ARGS+=    --enable-stacktraces
STRIP=          ""
.endif
.if !defined(WITHOUT_SQUID_RCNG)
USE_RC_SUBR=    yes
rc_del=     rcold
rc_state=   rcng
.else
rc_del=     rcng
rc_state=   rcold
.endif

# Languages:
#
# If you do not define SQUID_LANGUAGES yourself, all available language files
# will be installed; the default language will be English.

SQUID_LANGUAGES?=   \
    Bulgarian Catalan Czech Danish Dutch English Estonian Finnish      \
    French German Hebrew Hungarian Italian Japanese Korean Lithuanian  \
    Polish Portuguese Romanian Russian-1251 Russian-koi8-r Serbian     \
    Simplify_Chinese Slovak Spanish Swedish Traditional_Chinese Turkish
SQUID_DEFAULT_LANG?=    English
CONFIGURE_ARGS+=    --enable-err-languages="${SQUID_LANGUAGES}" \
            --enable-default-err-language=${SQUID_DEFAULT_LANG}

# Finally, add additional user specified configuration options:
CONFIGURE_ARGS+=    ${SQUID_CONFIGURE_ARGS}

CONFIGURE_ENV+=     CFLAGS="${CFLAGS}" \
            LDFLAGS="${LDFLAGS}"

pre-patch:
# Check whether we need to create the extra patch that makes pf(4)
# visible to squid's configure script:
.if defined(pf_includedir)
    @${SED} -e 's|%%PF_INCLUDEDIR%%|${pf_includedir}|g' \
        -e 's|%%PF_AC_INCLUDEPATH%%|${pf_includedir:S,/,_,g}|g' \
        ${PATCHDIR}/pf_from_ports.patch.in >${WRKDIR}/pf_from_ports.patch
.endif

post-patch:
    @${REINPLACE_CMD} -e 's|-lpthread|${PTHREAD_LIBS}|g' ${WRKSRC}/configure
    @${REINPLACE_CMD} -e 's|/etc|${PREFIX}/etc|g' ${WRKSRC}/doc/squid.8
    @${REINPLACE_CMD} -e 's|%%SQUID_UID%%|${SQUID_UID}|g' \
        -e 's|%%SQUID_GID%%|${SQUID_GID}|g' ${WRKSRC}/src/cf.data.pre

pre-install:
# Prevent installation of .orig files by deleting them.
    @${FIND} ${WRKSRC} -name '*.bak' -delete
    @${FIND} ${WRKSRC} -name '*.orig' -delete
# create an rcOld/rcNG squid.sh:
    @${SED} -e 's|%%PREFIX%%|${PREFIX}|g' \
        -e 's|%%SQUID_UID%%|${SQUID_UID}|g' \
        -e 's|%%RC_SUBR%%|${RC_SUBR}|g' \
        -e '/--begin ${rc_del}/,/--end ${rc_del}/d' \
        -e '/--.*${rc_state}/d' ${FILESDIR}/squid.sh \
        >${WRKDIR}/squid.sh

pre-su-install:
    @${SETENV} squid_user=${SQUID_UID} squid_group=${SQUID_GID} \
        PKG_PREFIX=${PREFIX} ${SH} ${PKGINSTALL} ${PKGNAME} PRE-INSTALL

post-install:
.if defined(WITH_SQUID_PINGER)
    ${CHMOD} 4510 ${PREFIX}/libexec/squid/pinger; \
    ${CHGRP} ${SQUID_GID} ${PREFIX}/libexec/squid/pinger
.endif
    ${INSTALL_SCRIPT} ${WRKDIR}/squid.sh ${PREFIX}/etc/rc.d
.if !defined(NOPORTDOCS)
    @${MKDIR} ${DOCSDIR}
    cd ${WRKSRC} && ${INSTALL_DATA} ${docs} ${DOCSDIR}
.endif
    @${SETENV} PKG_PREFIX=${PREFIX} \
        ${SH} ${PKGINSTALL} ${PKGNAME} POST-INSTALL
# Create package list:
    @for f in ${libexec}; do \
        ${TEST} -f ${PREFIX}/libexec/squid/$${f} && \
        ${ECHO_CMD} "libexec/squid/$${f}" >>${TMPPLIST} || ${TRUE} ; \
    done
    @${ECHO_CMD} "@unexec rmdir %D/libexec/squid 2>/dev/null || true" \
        >>${TMPPLIST}
    @for f in ${icon_files}; do \
        ${ECHO_CMD} "etc/squid/icons/$${f}" >>${TMPPLIST}; \
    done
    @${ECHO_CMD} "@unexec rmdir %D/etc/squid/icons 2>/dev/null || true" \
        >>${TMPPLIST}
    @for d in ${SQUID_LANGUAGES}; do \
        for f in ${error_files}; do \
        ${ECHO_CMD} "etc/squid/errors/$${d}/$${f}" >>${TMPPLIST} ; \
        done; \
        ${ECHO_CMD} "@unexec rmdir %D/etc/squid/errors/$${d} 2>/dev/null || true" \
        >>${TMPPLIST}; \
    done
    @${ECHO_CMD} "@unexec rmdir %D/etc/squid/errors 2>/dev/null || true" \
        >>${TMPPLIST}

changeuser:
# Recover from the problem that earlier versions of this port created the
# squid pseudo-user with an id greater than 999 which is not allowed in
# FreeBSD's ports system. The port now uses id 100:100.
# NOTE:
# This target assumes that SQUID_GID is the primary group of SQUID_UID. If you
# have a different setup, do not run this target!
.if ${SQUID_UID:L} == nobody
    @${ECHO_CMD} "'nobody' is a system user, you do not need to execute"; \
    ${ECHO_CMD} "this target!"
    ${FALSE}
.endif
    @if [ `${ID} -u` -ne 0 ]; \
    then ${ECHO_CMD} "Sorry, you must be root to use this target."; ${FALSE}; fi; \
    current_uid=`id -u ${SQUID_UID}`; \
    current_gid=`pw groupshow ${SQUID_GID}|cut -f 3 -d :`; \
    ${ECHO_CMD} "I will remove this user:"; \
    ${ID} -P $${current_uid}; \
    ${ECHO_CMD} "and this group:"; \
    pw groupshow ${SQUID_GID}; \
    ${ECHO_CMD} "I will then re-create them with a user and group id of 100."; \
    ${ECHO_CMD} "Then all files and directories under ${PREFIX} and /var that"; \
    ${ECHO_CMD} "are owned by uid $${current_uid} will be chown(1)'ed."; \
    ${ECHO_CMD} "After that, all files and directories that were accessible"; \
    ${ECHO_CMD} "by group $${current_gid} will chgrp(1)'ed respectively."; \
    ${ECHO_CMD} "Note that this assumes group '${SQUID_GID}' to be the primary"; \
    ${ECHO_CMD} "group of user '${SQUID_UID}'. If you have a different setup"; \
    ${ECHO_CMD} "please abort this target now."; \
    read -p "Press RETURN to continue or CTRL-C to abort:" dummy ; \
    ${ECHO_CMD} "OK, here we go:"; \
    ${ECHO_CMD} "deleting user $${current_uid} and his primary group..."; \
    pw userdel -u $${current_uid}; \
    ${ECHO_CMD} "adding user ${SQUID_UID} with id 100..."; \
    pw groupadd -n ${SQUID_GID} -g 100; \
    pw useradd -n ${SQUID_UID} -u 100 -c "squid caching-proxy pseudo user" \
        -d ${PREFIX}/squid -s /sbin/nologin -h - ; \
    ${ECHO_CMD} "chown(1)'ing everything under ${PREFIX} from $${current_uid} to 100..."; \
    ${FIND} -H ${PREFIX} -user $${current_uid} -exec ${CHOWN} 100 {} \; ; \
    ${ECHO_CMD} "chgrp(1)'ing everything under ${PREFIX} from $${current_gid} to 100..."; \
    ${FIND} -H ${PREFIX} -group $${current_gid} -exec ${CHOWN} :100 {} \; ; \
    ${ECHO_CMD} "chown(1)'ing everything under /var from $${current_uid} to 100..."; \
    ${FIND} -H /var -user $${current_uid} -exec ${CHOWN} 100 {} \; ; \
    ${ECHO_CMD} "chgrp(1)'ing everything under /var from $${current_gid} to 100..."; \
    ${FIND} -H /var -group $${current_gid} -exec ${CHOWN} :100 {} \; ; \
    ${ECHO_CMD} "Finished."

.include <bsd.port.post.mk>