Gentoo Archives: gentoo-commits

From: "Mike Frysinger (vapier)" <vapier@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] gentoo-x86 commit in net-misc/openssh: ChangeLog openssh-4.7_p1-r2.ebuild
Date: Sat, 29 Sep 2007 08:31:29
Message-Id: E1IbX9o-0007Lc-Dz@stork.gentoo.org
1 vapier 07/09/29 07:54:36
2
3 Modified: ChangeLog
4 Added: openssh-4.7_p1-r2.ebuild
5 Log:
6 Enable ssl-engine support #194163 by Nikhil Sethi and add GSSAPI/DNS patch #165444 by Alex Iribarren.
7 (Portage version: 2.1.3.9)
8
9 Revision Changes Path
10 1.268 net-misc/openssh/ChangeLog
11
12 file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-misc/openssh/ChangeLog?rev=1.268&view=markup
13 plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-misc/openssh/ChangeLog?rev=1.268&content-type=text/plain
14 diff : http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-misc/openssh/ChangeLog?r1=1.267&r2=1.268
15
16 Index: ChangeLog
17 ===================================================================
18 RCS file: /var/cvsroot/gentoo-x86/net-misc/openssh/ChangeLog,v
19 retrieving revision 1.267
20 retrieving revision 1.268
21 diff -u -r1.267 -r1.268
22 --- ChangeLog 27 Sep 2007 04:48:53 -0000 1.267
23 +++ ChangeLog 29 Sep 2007 07:54:35 -0000 1.268
24 @@ -1,6 +1,13 @@
25 # ChangeLog for net-misc/openssh
26 # Copyright 1999-2007 Gentoo Foundation; Distributed under the GPL v2
27 -# $Header: /var/cvsroot/gentoo-x86/net-misc/openssh/ChangeLog,v 1.267 2007/09/27 04:48:53 kumba Exp $
28 +# $Header: /var/cvsroot/gentoo-x86/net-misc/openssh/ChangeLog,v 1.268 2007/09/29 07:54:35 vapier Exp $
29 +
30 +*openssh-4.7_p1-r2 (29 Sep 2007)
31 +
32 + 29 Sep 2007; Mike Frysinger <vapier@g.o>
33 + +files/openssh-4.7_p1-GSSAPI-dns.patch, +openssh-4.7_p1-r2.ebuild:
34 + Enable ssl-engine support #194163 by Nikhil Sethi and add GSSAPI/DNS patch
35 + #165444 by Alex Iribarren.
36
37 27 Sep 2007; Joshua Kinard <kumba@g.o> openssh-4.7_p1-r1.ebuild:
38 Stable on mips, per #191321.
39
40
41
42 1.1 net-misc/openssh/openssh-4.7_p1-r2.ebuild
43
44 file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-misc/openssh/openssh-4.7_p1-r2.ebuild?rev=1.1&view=markup
45 plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-misc/openssh/openssh-4.7_p1-r2.ebuild?rev=1.1&content-type=text/plain
46
47 Index: openssh-4.7_p1-r2.ebuild
48 ===================================================================
49 # Copyright 1999-2007 Gentoo Foundation
50 # Distributed under the terms of the GNU General Public License v2
51 # $Header: /var/cvsroot/gentoo-x86/net-misc/openssh/openssh-4.7_p1-r2.ebuild,v 1.1 2007/09/29 07:54:35 vapier Exp $
52
53 inherit eutils flag-o-matic ccc multilib autotools pam
54
55 # Make it more portable between straight releases
56 # and _p? releases.
57 PARCH=${P/_/}
58
59 X509_PATCH="${PARCH}+x509-6.0.1.diff.gz"
60 LDAP_PATCH="${PARCH/openssh-4.7/openssh-lpk-4.6}-0.3.9.patch"
61 HPN_PATCH="${PARCH}-hpn12v18.diff.gz"
62
63 DESCRIPTION="Port of OpenBSD's free SSH release"
64 HOMEPAGE="http://www.openssh.com/"
65 SRC_URI="mirror://openbsd/OpenSSH/portable/${PARCH}.tar.gz
66 ldap? ( http://dev.inversepath.com/openssh-lpk/${LDAP_PATCH} )
67 X509? ( http://roumenpetrov.info/openssh/x509-6.0.1/${X509_PATCH} )
68 hpn? ( http://www.psc.edu/networking/projects/hpn-ssh/${HPN_PATCH} )"
69
70 LICENSE="as-is"
71 SLOT="0"
72 KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~sparc-fbsd ~x86 ~x86-fbsd"
73 IUSE="static pam tcpd kerberos skey selinux chroot X509 ldap smartcard hpn libedit X"
74 RESTRICT="mirror" #193401
75
76 RDEPEND="pam? ( virtual/pam )
77 kerberos? ( virtual/krb5 )
78 selinux? ( >=sys-libs/libselinux-1.28 )
79 skey? ( >=app-admin/skey-1.1.5-r1 )
80 ldap? ( net-nds/openldap )
81 libedit? ( dev-libs/libedit )
82 >=dev-libs/openssl-0.9.6d
83 >=sys-libs/zlib-1.2.3
84 smartcard? ( dev-libs/opensc )
85 tcpd? ( >=sys-apps/tcp-wrappers-7.6 )
86 X? ( x11-apps/xauth )
87 userland_GNU? ( sys-apps/shadow )"
88 DEPEND="${RDEPEND}
89 dev-util/pkgconfig
90 virtual/os-headers
91 sys-devel/autoconf"
92 PROVIDE="virtual/ssh"
93
94 S=${WORKDIR}/${PARCH}
95
96 pkg_setup() {
97 # this sucks, but i'd rather have people unable to `emerge -u openssh`
98 # than not be able to log in to their server any more
99 maybe_fail() { [[ -z ${!2} ]] && use ${1} && echo ${1} ; }
100 local fail="
101 $(maybe_fail X509 X509_PATCH)
102 $(maybe_fail ldap LDAP_PATCH)
103 "
104 fail=$(echo ${fail})
105 if [[ -n ${fail} ]] ; then
106 eerror "Sorry, but this version does not yet support features"
107 eerror "that you requested: ${fail}"
108 eerror "Please mask ${PF} for now and check back later:"
109 eerror " # echo '=${CATEGORY}/${PF}' >> /etc/portage/package.mask"
110 die "booooo"
111 fi
112 }
113
114 src_unpack() {
115 unpack ${PARCH}.tar.gz
116 cd "${S}"
117
118 sed -i \
119 -e '/_PATH_XAUTH/s:/usr/X11R6/bin/xauth:/usr/bin/xauth:' \
120 pathnames.h || die
121
122 use X509 && epatch "${DISTDIR}"/${X509_PATCH} "${FILESDIR}"/${PN}-4.4_p1-x509-hpn-glue.patch
123 use chroot && epatch "${FILESDIR}"/openssh-4.3_p1-chroot.patch
124 use smartcard && epatch "${FILESDIR}"/openssh-3.9_p1-opensc.patch
125 if ! use X509 ; then
126 if [[ -n ${LDAP_PATCH} ]] && use ldap ; then
127 epatch "${DISTDIR}"/${LDAP_PATCH} "${FILESDIR}"/${PN}-4.4_p1-ldap-hpn-glue.patch
128 fi
129 elif use ldap ; then
130 ewarn "Sorry, X509 and ldap don't get along, disabling ldap"
131 fi
132 [[ -n ${HPN_PATCH} ]] && use hpn && epatch "${DISTDIR}"/${HPN_PATCH}
133 epatch "${FILESDIR}"/${P}-GSSAPI-dns.patch #165444
134
135 sed -i "s:-lcrypto:$(pkg-config --libs openssl):" configure{,.ac} || die
136
137 eautoreconf
138 }
139
140 src_compile() {
141 addwrite /dev/ptmx
142 addpredict /etc/skey/skeykeys #skey configure code triggers this
143
144 local myconf=""
145 if use static ; then
146 append-ldflags -static
147 use pam && ewarn "Disabling pam support becuse of static flag"
148 myconf="${myconf} --without-pam"
149 else
150 myconf="${myconf} $(use_with pam)"
151 fi
152
153 econf \
154 --with-ldflags="${LDFLAGS}" \
155 --disable-strip \
156 --sysconfdir=/etc/ssh \
157 --libexecdir=/usr/$(get_libdir)/misc \
158 --datadir=/usr/share/openssh \
159 --disable-suid-ssh \
160 --with-privsep-path=/var/empty \
161 --with-privsep-user=sshd \
162 --with-md5-passwords \
163 --with-ssl-engine \
164 $(use_with ldap) \
165 $(use_with libedit) \
166 $(use_with kerberos kerberos5 /usr) \
167 $(use_with tcpd tcp-wrappers) \
168 $(use_with selinux) \
169 $(use_with skey) \
170 $(use_with smartcard opensc) \
171 ${myconf} \
172 || die "bad configure"
173 emake || die "compile problem"
174 }
175
176 src_install() {
177 emake install-nokeys DESTDIR="${D}" || die
178 fperms 600 /etc/ssh/sshd_config
179 dobin contrib/ssh-copy-id
180 newinitd "${FILESDIR}"/sshd.rc6 sshd
181 newconfd "${FILESDIR}"/sshd.confd sshd
182 keepdir /var/empty
183
184 newpamd "${FILESDIR}"/sshd.pam_include.1 sshd
185 use pam \
186 && dosed "/^#UsePAM /s:.*:UsePAM yes:" /etc/ssh/sshd_config \
187 && dosed "/^#PasswordAuthentication /s:.*:PasswordAuthentication no:" /etc/ssh/sshd_config
188
189 doman contrib/ssh-copy-id.1
190 dodoc ChangeLog CREDITS OVERVIEW README* TODO sshd_config
191
192 diropts -m 0700
193 dodir /etc/skel/.ssh
194 }
195
196 pkg_postinst() {
197 enewgroup sshd 22
198 enewuser sshd 22 -1 /var/empty sshd
199
200 # help fix broken perms caused by older ebuilds.
201 # can probably cut this after the next stage release.
202 chmod u+x "${ROOT}"/etc/skel/.ssh >& /dev/null
203
204 ewarn "Remember to merge your config files in /etc/ssh/ and then"
205 ewarn "restart sshd: '/etc/init.d/sshd restart'."
206 if use pam ; then
207 echo
208 ewarn "Please be aware users need a valid shell in /etc/passwd"
209 ewarn "in order to be allowed to login."
210 fi
211 }
212
213
214
215 --
216 gentoo-commits@g.o mailing list