stunnel fails to build

tech-lists tech-lists at zyxst.net
Thu Jul 21 16:07:46 UTC 2016


On 07/21/16 11:09, Walter Schwarzenfeld wrote:
> Try:
> remove  --with-ssl="${OPENSSLBASE}"
> from the Makefile
> and add
> to USES= ssl

Unfortunately, this didn't work. Here's my amended Makefile:

# Created by: Martti Kuparinen <martti.kuparinen at ericsson.com>
# $FreeBSD: head/security/stunnel/Makefile 418695 2016-07-18 11:38:46Z zi $

PORTNAME=       stunnel
PORTVERSION=    5.35
PORTEPOCH=      1
CATEGORIES=     security
MASTER_SITES=   https://www.stunnel.org/downloads/%SUBDIR%/ \
                https://www.stunnel.org/downloads/beta/ \
                http://mirrors.zerg.biz/stunnel/%SUBDIR%/ \
                http://mirrors.go-part.com/stunnel/%SUBDIR%/ \
                http://ftp.nluug.nl/pub/networking/stunnel/%SUBDIR%/ \
                ftp://ftp.nluug.nl/pub/networking/stunnel/%SUBDIR%/ \
                http://ftp.nluug.nl/pub/networking/stunnel/%SUBDIR%/ \
                ftp://ftp.surfnet.nl/pub/networking/stunnel/%SUBDIR%/ \
                http://ftp.surfnet.nl/pub/networking/stunnel/%SUBDIR%/ \
                ftp://stunnel.mirt.net/stunnel/%SUBDIR%/ \
                http://www.namesdir.com/mirrors/stunnel/%SUBDIR%/ \
                http://stunnel.cybermirror.org/%SUBDIR%/ \
                http://mirrors.zerg.biz/stunnel/%SUBDIR%/ \
                http://mirrors.rit.edu/zi/

MAINTAINER=     zi at FreeBSD.org
COMMENT=        SSL encryption wrapper for standard network daemons

# FIXME: IMHO, there really ought to be a GPL-2+ option or some such.
LICENSE=        GPLv2 GPLv3
LICENSE_COMB=   dual

USES=           cpe libtool perl5 shebangfix ssl
USE_PERL5=      build
USE_LDCONFIG=   yes
USE_OPENSSL=    yes
USE_RC_SUBR=    stunnel

GNU_CONFIGURE=  yes
CONFIGURE_ARGS= --localstatedir=/var/tmp --enable-static --disable-systemd
SHEBANG_FILES=  src/stunnel3.in

OPTIONS_DEFINE=                 DOCS EXAMPLES FIPS IPV6 LIBWRAP
OPTIONS_SINGLE=                 THREAD
OPTIONS_SINGLE_THREAD=          FORK PTHREAD UCONTEXT

OPTIONS_DEFAULT=                PTHREAD

FIPS_CONFIGURE_ENABLE=          fips
IPV6_CONFIGURE_ENABLE=          ipv6
LIBWRAP_CONFIGURE_ENABLE=       libwrap

FIPS_DESC=                      Enable OpenSSL FIPS mode
FORK_DESC=                      Use the fork(3) threading model
PTHREAD_DESC=                   Use the pthread(3) threading model
UCONTEXT_DESC=                  Use the ucontext(3) threading model

STUNNEL_USER?=  stunnel
STUNNEL_GROUP?= stunnel

USERS=          ${STUNNEL_USER}
GROUPS=         ${STUNNEL_GROUP}

.include <bsd.port.options.mk>

.if ${PORT_OPTIONS:MLIBWRAP}
LDFLAGS+=               -lwrap
.endif

.if ${PORT_OPTIONS:MUCONTEXT}
CONFIGURE_ARGS+=--with-threads=ucontext
LDFLAGS+=       -lpthread
.elif ${PORT_OPTIONS:MFORK}
CONFIGURE_ARGS+=--with-threads=fork
.else
CONFIGURE_ARGS+=--with-threads=pthread
LDFLAGS+=       -lpthread
.endif

.include <bsd.port.pre.mk>

.if ${PORT_OPTIONS:MFIPS} && ${SSL_DEFAULT} == libressl
IGNORE=         LibreSSL does not support FIPS standard
.endif

.if ${SSL_DEFAULT} == libressl
NO_PACKAGE=     The stunnel license restricts distribution when linked
to non-OpenSSL non-base SSL-libraries
.endif

post-patch:
# place files under /var/tmp so that this can be run by an unprivileged
# user stunnel and group stunnel
        @${REINPLACE_CMD} -E -e
's|\@prefix\@/var/lib/stunnel/|/var/tmp/stunnel|; \
                s|nobody|stunnel|;s|nogroup|stunnel|' \
                ${WRKSRC}/tools/stunnel.conf-sample.in
        @${REINPLACE_CMD} -E -e
's|\$$\(prefix\)/var/run/stunnel/stunnel.pid|$$(localstatedir)/stunnel.pid|'
\
                ${WRKSRC}/src/Makefile.in
        @${FIND} ${WRKSRC} -type f -name Makefile.in | ${XARGS}
${REINPLACE_CMD} -E -e 's,@(ACLOCAL|AUTO(MAKE|CONF|HEADER))@,/usr/bin/true,'
        @${REINPLACE_CMD} -E -e 's|install-confDATA
install-data-local|install-confDATA|g' \
                ${WRKSRC}/tools/Makefile.in
.if empty(PORT_OPTIONS:MDOCS)
        @${REINPLACE_CMD} -E -e 's/ install-docDATA/ /'
${WRKSRC}/Makefile.in
        @${REINPLACE_CMD} -E -e '/install-data-am/s,install-docDATA,,'
${WRKSRC}/doc/Makefile.in
.endif
.if empty(PORT_OPTIONS:MEXAMPLES)
        @${REINPLACE_CMD} -E -e 's/([^n])install-examplesDATA/\1/' \
                ${WRKSRC}/tools/Makefile.in
.else
        @${REINPLACE_CMD} -E -e
's|\$$\(docdir\)/examples|${EXAMPLESDIR}|g' ${WRKSRC}/tools/Makefile.in
.endif

post-build:
        @${STRIP_CMD} ${WRKSRC}/src/.libs/libstunnel.so

cert:
        @${ECHO} ""
        @${ECHO}
"**************************************************************************"
        @${ECHO} "The new certificate will be saved into
${ETCDIR}/stunnel.pem"
        @${ECHO}
"**************************************************************************"
        @${ECHO} ""
        @(cd ${WRKSRC}/tools/; make install-data-local)

.include <bsd.port.post.mk>

-- 
J.


More information about the freebsd-ports mailing list