[people/amarx/ipfire-3.x.git] / pkgs / core / openssl / openssl.nm

###############################################################################
#                                                                             #
# IPFire.org - A linux based firewall                                         #
# Copyright (C) 2007, 2008 Michael Tremer & Christian Schmidt                 #
#                                                                             #
# This program is free software: you can redistribute it and/or modify        #
# it under the terms of the GNU General Public License as published by        #
# the Free Software Foundation, either version 3 of the License, or           #
# (at your option) any later version.                                         #
#                                                                             #
# This program is distributed in the hope that it will be useful,             #
# but WITHOUT ANY WARRANTY; without even the implied warranty of              #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
# GNU General Public License for more details.                                #
#                                                                             #
# You should have received a copy of the GNU General Public License           #
# along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
#                                                                             #
###############################################################################

###############################################################################
# Definitions
###############################################################################

include $(PKGROOT)/Include

PKG_NAME       = openssl
PKG_VER        = 0.9.8k
PKG_REL        = 0

PKG_MAINTAINER =
PKG_GROUP      = System/Libraries
PKG_URL        = http://www.openssl.org/
PKG_LICENSE    = OpenSSL
PKG_SUMMARY    = A general purpose cryptography library with TLS implementation. 

PKG_BUILD_DEPS+= perl

define PKG_DESCRIPTION
	The OpenSSL toolkit provides support for secure communications between \
	machines. OpenSSL includes a certificate management tool and shared \
	libraries which provide various cryptographic algorithms and protocols.
endef

PKG_TARBALL    = $(THISAPP).tar.gz

PKG_PATCHES   += $(THISAPP)-fix_manpages-1.patch
PKG_PATCHES   += $(THISAPP)-enginesdir.patch
PKG_PATCHES   += $(THISAPP)-no-rpath.patch

ifneq "$(MACHINE)" "i686"
	SSL_ARCH = no-asm 386 # 386 implies no-sse2
endif

# These arches do support sse2.
#ifneq "$(TARGET)" "via-c7"
#ifneq "$(TARGET)" "atom"
#ifneq "$(TARGET)" "core2duo"
#	SSL_ARCH += no-sse2
#endif
#endif
#endif

###############################################################################
# Installation Details
###############################################################################

define STAGE_PREPARE_CMDS
	cd $(DIR_APP) && sed -i -e 's/-O3 -fomit-frame-pointer/$(CFLAGS)/' Configure

	cd $(DIR_APP) && sed -e 's/__OpenBSD__/__linux__/' -e 's/arandom/urandom/' \
				-i.orig crypto/rand/randfile.c

	cd $(DIR_APP) && sed 's/__OpenBSD__/__linux__/' -i.orig crypto/uid.c
	cd $(DIR_APP) && sed -e 's/__OpenBSD__/__linux__/' -i crypto/rand/rand_unix.c

	cd $(DIR_APP) && find crypto/ -name Makefile -exec \
		sed 's/^ASFLAGS=/&-Wa,--noexecstack /' -i.orig {} \;
endef

define STAGE_BUILD
	cd $(DIR_APP) && \
		./Configure \
			--prefix=/usr \
			--openssldir=/etc/pki/tls \
			--enginesdir=/usr/lib/openssl/engines \
			linux-elf $(SSL_ARCH) \
			shared \
			zlib-dynamic \
			enable-camellia \
			enable-seed \
			enable-tlsext \
			enable-rfc3779 \
			no-idea \
			no-mdc2 \
			no-rc5 \
			no-ec \
			no-ecdh \
			no-ecdsa \
			-DSSL_FORBID_ENULL

	# Build.
	cd $(DIR_APP) && make all build-shared #$(PARALLELISMFLAGS)

	# Generate hashes for the included certs.
	cd $(DIR_APP) && make rehash build-shared
endef

define STAGE_INSTALL
	cd $(DIR_APP) && make install build-shared INSTALL_PREFIX=$(BUILDROOT)

	-mkdir -pv $(BUILDROOT)/usr/lib/openssl
	mv -v $(BUILDROOT)/usr/lib/engines $(BUILDROOT)/usr/lib/openssl

	-mkdir -pv $(BUILDROOT)/etc/pki/CA/private
	chmod -v 700 -R $(BUILDROOT)/etc/pki/CA

	-mkdir -pv $(BUILDROOT)/etc/pki/tls
	install -m 0644 $(DIR_SOURCE)/openssl.cnf $(BUILDROOT)/etc/pki/tls
	cd $(DIR_APP) && cp -v -r certs $(BUILDROOT)/etc/pki/tls
endef
Commit	Line	Data
93c1e71e MT	1	###############################################################################
	2	# #
	3	# IPFire.org - A linux based firewall #
	4	# Copyright (C) 2007, 2008 Michael Tremer & Christian Schmidt #
	5	# #
	6	# This program is free software: you can redistribute it and/or modify #
	7	# it under the terms of the GNU General Public License as published by #
	8	# the Free Software Foundation, either version 3 of the License, or #
	9	# (at your option) any later version. #
	10	# #
	11	# This program is distributed in the hope that it will be useful, #
	12	# but WITHOUT ANY WARRANTY; without even the implied warranty of #
	13	# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
	14	# GNU General Public License for more details. #
	15	# #
	16	# You should have received a copy of the GNU General Public License #
	17	# along with this program. If not, see <http://www.gnu.org/licenses/>. #
	18	# #
	19	###############################################################################
	20
	21	###############################################################################
	22	# Definitions
	23	###############################################################################
	24
	25	include $(PKGROOT)/Include
	26
	27	PKG_NAME = openssl
	28	PKG_VER = 0.9.8k
	29	PKG_REL = 0
	30
	31	PKG_MAINTAINER =
	32	PKG_GROUP = System/Libraries
	33	PKG_URL = http://www.openssl.org/
	34	PKG_LICENSE = OpenSSL
	35	PKG_SUMMARY = A general purpose cryptography library with TLS implementation.
	36
	37	PKG_BUILD_DEPS+= perl
	38
	39	define PKG_DESCRIPTION
	40	The OpenSSL toolkit provides support for secure communications between \
	41	machines. OpenSSL includes a certificate management tool and shared \
	42	libraries which provide various cryptographic algorithms and protocols.
	43	endef
	44
	45	PKG_TARBALL = $(THISAPP).tar.gz
	46
	47	PKG_PATCHES += $(THISAPP)-fix_manpages-1.patch
	48	PKG_PATCHES += $(THISAPP)-enginesdir.patch
	49	PKG_PATCHES += $(THISAPP)-no-rpath.patch
	50
	51	ifneq "$(MACHINE)" "i686"
	52	SSL_ARCH = no-asm 386 # 386 implies no-sse2
	53	endif
	54
	55	# These arches do support sse2.
	56	#ifneq "$(TARGET)" "via-c7"
	57	#ifneq "$(TARGET)" "atom"
	58	#ifneq "$(TARGET)" "core2duo"
	59	# SSL_ARCH += no-sse2
	60	#endif
	61	#endif
	62	#endif
	63
	64	###############################################################################
65	# Installation Details
66	###############################################################################
67
68	define STAGE_PREPARE_CMDS
69	cd $(DIR_APP) && sed -i -e 's/-O3 -fomit-frame-pointer/$(CFLAGS)/' Configure
70
71	cd $(DIR_APP) && sed -e 's/__OpenBSD__/__linux__/' -e 's/arandom/urandom/' \
72	-i.orig crypto/rand/randfile.c
73
74	cd $(DIR_APP) && sed 's/__OpenBSD__/__linux__/' -i.orig crypto/uid.c
75	cd $(DIR_APP) && sed -e 's/__OpenBSD__/__linux__/' -i crypto/rand/rand_unix.c
76
77	cd $(DIR_APP) && find crypto/ -name Makefile -exec \
78	sed 's/^ASFLAGS=/&-Wa,--noexecstack /' -i.orig {} \;
79	endef
80
81	define STAGE_BUILD
82	cd $(DIR_APP) && \
83	./Configure \
84	--prefix=/usr \
85	--openssldir=/etc/pki/tls \
86	--enginesdir=/usr/lib/openssl/engines \
87	linux-elf $(SSL_ARCH) \
88	shared \
89	zlib-dynamic \
90	enable-camellia \
91	enable-seed \
92	enable-tlsext \
93	enable-rfc3779 \
94	no-idea \
95	no-mdc2 \
96	no-rc5 \
97	no-ec \
98	no-ecdh \
99	no-ecdsa \
100	-DSSL_FORBID_ENULL
101
102	# Build.
103	cd $(DIR_APP) && make all build-shared #$(PARALLELISMFLAGS)
104
105	# Generate hashes for the included certs.
106	cd $(DIR_APP) && make rehash build-shared
107	endef
108
109	define STAGE_INSTALL
110	cd $(DIR_APP) && make install build-shared INSTALL_PREFIX=$(BUILDROOT)
111
112	-mkdir -pv $(BUILDROOT)/usr/lib/openssl
113	mv -v $(BUILDROOT)/usr/lib/engines $(BUILDROOT)/usr/lib/openssl
114
115	-mkdir -pv $(BUILDROOT)/etc/pki/CA/private
116	chmod -v 700 -R $(BUILDROOT)/etc/pki/CA
117
118	-mkdir -pv $(BUILDROOT)/etc/pki/tls
119	install -m 0644 $(DIR_SOURCE)/openssl.cnf $(BUILDROOT)/etc/pki/tls
120	cd $(DIR_APP) && cp -v -r certs $(BUILDROOT)/etc/pki/tls
121	endef
122