opnsense-src/secure/usr.bin/ssh-agent/Makefile

# $FreeBSD$

.include <src.opts.mk>
.include "${SRCTOP}/secure/ssh.mk"

PROG=	ssh-agent
SRCS=	ssh-agent.c
PACKAGE=	ssh

LIBADD=	ssh

.if ${MK_LDNS} != "no"
CFLAGS+=	-DHAVE_LDNS=1
#DPADD+=	${LIBLDNS}
#LDADD+=	-lldns
.endif

.if defined(LOCALBASE)
CFLAGS+= -DDEFAULT_PKCS11_WHITELIST='"/usr/lib*/*,${LOCALBASE}/lib*/*"'
.endif

LIBADD+=	crypto

.include <bsd.prog.mk>

.PATH:	${SSHDIR}
Add the OpenSSH userland-building Makefiles. 2000-02-24 12:00:55 -05:00			`# $FreeBSD$`

Use src.opts.mk in preference to bsd.own.mk except where we need stuff from the latter. 2014-05-06 00:22:01 -04:00			`.include <src.opts.mk>`
ssh: move common Makefile boilerplate to a new ssh.mk This moves SSHDIR and ssh_namespace.h handling to a common location, and will simplify future work such as adding U2F support (D32509). Reviewed by: kevans MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D32808 2021-11-02 14:48:33 -04:00			`.include "${SRCTOP}/secure/ssh.mk"`
Clean up the OpenSSH build. It is now possible to build most components as static binaries, if desired. The one exception is sshd, which runs into trouble due to libpam.a's includion of pam_ssh. Make OpenSSH use LDNS if available. This allows it to verify signed SSHFP records. Approved by: re (blanket) 2013-09-10 18:26:11 -04:00
Add the OpenSSH userland-building Makefiles. 2000-02-24 12:00:55 -05:00			`PROG= ssh-agent`
Upgrade to OpenSSH 5.3p1. 2009-10-01 13:12:52 -04:00			`SRCS= ssh-agent.c`
Move ssh into a dedicated package Flag config files as "to be merged on upgrade" 2015-03-05 15:25:09 -05:00			`PACKAGE= ssh`
Add the OpenSSH userland-building Makefiles. 2000-02-24 12:00:55 -05:00
Convert to LIBADD Reduce overlinking 2014-11-25 16:18:18 -05:00			`LIBADD= ssh`
Add the OpenSSH userland-building Makefiles. 2000-02-24 12:00:55 -05:00
Clean up the OpenSSH build. It is now possible to build most components as static binaries, if desired. The one exception is sshd, which runs into trouble due to libpam.a's includion of pam_ssh. Make OpenSSH use LDNS if available. This allows it to verify signed SSHFP records. Approved by: re (blanket) 2013-09-10 18:26:11 -04:00			`.if ${MK_LDNS} != "no"`
			`CFLAGS+= -DHAVE_LDNS=1`
			`#DPADD+= ${LIBLDNS}`
			`#LDADD+= -lldns`
			`.endif`

Replace literal uses of /usr/local in C sources with _PATH_LOCALBASE Literal references to /usr/local exist in a large number of files in the FreeBSD base system. Many are in contributed software, in configuration files, or in the documentation, but 19 uses have been identified in C source files or headers outside the contrib and sys/contrib directories. This commit makes it possible to set _PATH_LOCALBASE in paths.h to use a different prefix for locally installed software. In order to avoid changes to openssh source files, LOCALBASE is passed to the build via Makefiles under src/secure. While _PATH_LOCALBASE could have been used here, there is precedent in the construction of the path used to a xauth program which depends on the LOCALBASE value passed on the compiler command line to select a non-default directory. This could be changed in a later commit to make the openssh build consistently use _PATH_LOCALBASE. It is considered out-of-scope for this commit. Reviewed by: imp MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D26942 2020-10-27 07:29:11 -04:00			`.if defined(LOCALBASE)`
			`CFLAGS+= -DDEFAULT_PKCS11_WHITELIST='"/usr/lib/,${LOCALBASE}/lib/"'`
			`.endif`

Reduce overlinking The framework now ensure by itself that pthread is added to the link chain as the last component if linked to kerberos hence avoid with out any explicit addition prevent issue like CVE-2014-8475 2014-11-25 17:25:13 -05:00			`LIBADD+= crypto`
Clean up the OpenSSH build. It is now possible to build most components as static binaries, if desired. The one exception is sshd, which runs into trouble due to libpam.a's includion of pam_ssh. Make OpenSSH use LDNS if available. This allows it to verify signed SSHFP records. Approved by: re (blanket) 2013-09-10 18:26:11 -04:00
secure/ build fixes: - TELNETOBJDIR is gone. `buildworld' already installs libtelnet.a in ${WORLDTMP}/usr/lib, and we have LIBRARY_PATH pointing there. - SSHDIR (formerly SSHSRC) is now shared between all SSH modules. New LIBSSH is introduced for libssh.a (an internal static lib). Previously, build without prior `obj' was broken; SSH modules always looked for libssh.a in ${.OBJDIR}. Also, the dependancies on the libssh.a were missing. - libtelnet/ did not install the crypto version of telnet.h into /usr/include/arpa. - Removed BINOWN, BINMODE, BINDIR and SRCS with default values. Reviewed by: markm - MAN[1-9] -> MAN. 2001-03-26 09:53:33 -05:00			`.include <bsd.prog.mk>`
Add the OpenSSH userland-building Makefiles. 2000-02-24 12:00:55 -05:00
secure/ build fixes: - TELNETOBJDIR is gone. `buildworld' already installs libtelnet.a in ${WORLDTMP}/usr/lib, and we have LIBRARY_PATH pointing there. - SSHDIR (formerly SSHSRC) is now shared between all SSH modules. New LIBSSH is introduced for libssh.a (an internal static lib). Previously, build without prior `obj' was broken; SSH modules always looked for libssh.a in ${.OBJDIR}. Also, the dependancies on the libssh.a were missing. - libtelnet/ did not install the crypto version of telnet.h into /usr/include/arpa. - Removed BINOWN, BINMODE, BINDIR and SRCS with default values. Reviewed by: markm - MAN[1-9] -> MAN. 2001-03-26 09:53:33 -05:00			`.PATH: ${SSHDIR}`