blob: 9885e30d13c9e3f6189ea87b13847fa3d3035988 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
|
# New ports collection makefile for: ipsec-tools
# Date created: 20 dec 2004
# Whom: vanhu
#
# $FreeBSD$
# TODO: - libipsec issue ?
# - cleanup...
# - SYSCONFDIR
# - $LOCALBASE/sbin/setkey Vs /usr/sbin/setkey
PORTNAME= ipsec-tools
PORTVERSION= 0.8.0
CATEGORIES= security
MASTER_SITES= SF
MAINTAINER= vanhu@netasq.com
COMMENT= KAME racoon IKE daemon, ipsec-tools version
CONFLICTS= racoon-[0-9]*
USE_RC_SUBR= racoon.sh
USE_OPENSSL= yes
USE_BZIP2= yes
USE_AUTOTOOLS= libtool
GNU_CONFIGURE= yes
USE_LDCONFIG= yes
CONFIGURE_ARGS= --enable-shared --sysconfdir=${PREFIX}/etc/racoon \
--localstatedir=${STATEDIR:S/\/racoon//} \
--with-pkgversion=freebsd-${PORTVERSION}
STATEDIR= /var/db/racoon
SUB_LIST+= STATEDIR=${STATEDIR}
PLIST_SUB+= STATEDIR=${STATEDIR}
OPTIONS= DEBUG "enable Debug support" on \
IPV6 "enable IPV6 support" on \
ADMINPORT "enable Admin port" off \
STATS "enable Statistics logging function" off \
DPD "enable Dead Peer Detection" on \
NATT "enable NAT-Traversal (kernel-patch required)" on \
NATTF "require NAT-Traversal (fail without kernel-patch)" off \
FRAG "enable IKE fragmentation payload support" on \
HYBRID "enable Hybrid, Xauth and Mode-cfg support" on \
PAM "enable PAM authentication (Xauth server)" off \
RADIUS "enable Radius authentication (Xauth server)" off \
LDAP "enable LDAP authentication (Xauth server)" off \
GSSAPI "enable GSS-API authentication" off \
SAUNSPEC "enable Unspecified SA mode" off \
RC5 "enable RC5 encryption (patented)" off \
IDEA "enable IDEA encryption (patented)" off
MAN3= ipsec_set_policy.3 ipsec_strerror.3
MAN5= racoon.conf.5
MAN8= racoon.8 racoonctl.8 setkey.8 plainrsa-gen.8
PORTDOCS= *
.include <bsd.port.pre.mk>
.if ${OSVERSION} < 900007
EXTRA_PATCHES=files/patch8-utmp.diff
.endif
.ifdef(WITH_DEBUG)
CONFIGURE_ARGS+= --enable-debug
.else
CONFIGURE_ARGS+= --disable-debug
.endif
.ifdef(WITH_IPV6)
CONFIGURE_ARGS+= --enable-ipv6
.else
CONFIGURE_ARGS+= --disable-ipv6
.endif
.ifdef(WITH_ADMINPORT)
CONFIGURE_ARGS+= --enable-adminport
.else
CONFIGURE_ARGS+= --disable-adminport
.endif
.ifdef(WITH_STATS)
CONFIGURE_ARGS+= --enable-stats
.else
CONFIGURE_ARGS+= --disable-stats
.endif
.ifdef(WITH_DPD)
CONFIGURE_ARGS+= --enable-dpd
.else
CONFIGURE_ARGS+= --disable-dpd
.endif
.ifdef(WITH_NATT)
. ifdef(WITH_NATTF)
CONFIGURE_ARGS+= --enable-natt=yes
. else
CONFIGURE_ARGS+= --enable-natt=kernel
. endif
.else
CONFIGURE_ARGS+= --disable-natt
.endif
.ifdef(WITH_FRAG)
CONFIGURE_ARGS+= --enable-frag
.else
CONFIGURE_ARGS+= --disable-frag
.endif
.ifdef(WITH_HYBRID)
CONFIGURE_ARGS+= --enable-hybrid
.else
CONFIGURE_ARGS+= --disable-hybrid
.endif
.ifdef(WITH_PAM)
CONFIGURE_ARGS+= --with-libpam
.else
CONFIGURE_ARGS+= --without-libpam
.endif
.ifdef(WITH_GSSAPI)
USE_ICONV= yes
CFLAGS+= -I${LOCALBASE}/include
LDFLAGS+= -L${LOCALBASE}/lib
CONFIGURE_ARGS+= --enable-gssapi
.else
CONFIGURE_ARGS+= --disable-gssapi
.endif
.ifdef(WITH_RADIUS)
CONFIGURE_ARGS+= --with-libradius
.else
CONFIGURE_ARGS+= --without-libradius
.endif
.ifdef(WITH_LDAP)
USE_OPENLDAP= YES
CONFIGURE_ARGS+= --with-libldap=${LOCALBASE}
.else
CONFIGURE_ARGS+= --without-libldap
.endif
.ifdef(WITH_SAUNSPEC)
CONFIGURE_ARGS+= --enable-samode-unspec
.else
CONFIGURE_ARGS+= --disable-samode-unspec
.endif
.ifdef(WITH_RC5)
CONFIGURE_ARGS+= --enable-rc5
.else
CONFIGURE_ARGS+= --disable-rc5
.endif
.ifdef(WITH_IDEA)
CONFIGURE_ARGS+= --enable-idea
.else
CONFIGURE_ARGS+= --disable-idea
.endif
.if ${OSVERSION} < 800000
.ifdef(WITH_NATT)
pre-configure:
@${ECHO_MSG} "===> -------------------------------------------------------------------------"
@${ECHO_MSG} "===> ATTENTION: You need a kernel patch to enable NAT-Traversal functionality!"
@${ECHO_MSG} "===> latest known patch for FreeBSD 7 is available here:"
@${ECHO_MSG} "===> http://people.freebsd.org/~bz/20110123-01-stable7-natt.diff"
@${ECHO_MSG} "===> You might possibly have to do some steps manually if it fails to apply."
@${ECHO_MSG} "===> -------------------------------------------------------------------------"
@sleep 3
.endif
.endif
post-install:
@if [ -z `/sbin/sysctl -a | ${GREP} -q ipsec && ${ECHO_CMD} ipsec` ]; then \
${ECHO_MSG} "WARNING: IPsec feature is disabled on this host"; \
${ECHO_MSG} " You must build the kernel if you want to run racoon on the host"; \
fi ;
@${MKDIR} ${EXAMPLESDIR}
@${RM} -f ${WRKSRC}/src/racoon/samples/*.in
@${CP} -r ${WRKSRC}/src/racoon/samples/* ${EXAMPLESDIR}
.if !defined(NOPORTDOCS)
@${MKDIR} ${DOCSDIR}
@${INSTALL_DATA} ${WRKSRC}/src/racoon/doc/* ${DOCSDIR}
.endif
.include <bsd.port.post.mk>
|
