source: trunk/dports/devel/openssl/Portfile @ 120682

Last change on this file since 120682 was 120682, checked in by cal@…, 3 years ago

openssl: update to 1.0.1h, maintainer override due to security implications, remove dovecot2 revbump instruction

Update to fix CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, and CVE-2014-3470.
Remove dovecot2 revbump instruction because only a single user seems to have been affected by the issue – I couln't reproduce.

  • Property svn:eol-style set to native
  • Property svn:keywords set to Id
File size: 3.2 KB
Line 
1# $Id: Portfile 120682 2014-06-05 16:41:12Z cal@macports.org $
2
3PortSystem 1.0
4PortGroup  muniversal 1.0
5
6name                openssl
7version             1.0.1h
8epoch               1
9
10# At least the following ports statically link OpenSSL and need to be revbumped
11# for every update of OpenSSL:
12#  - ...
13# Although they dynamically link OpenSSL, at least the following ports need to
14# be revbumped for every update of OpenSSL:
15#  - freeradius
16# These lists aren't exhaustive. Feel free to add more entries as you find them.
17
18platforms           darwin
19categories          devel security
20maintainers         mww
21homepage            http://www.openssl.org/
22license             OpenSSL SSLeay
23description         OpenSSL SSL/TLS cryptography library
24
25long_description \
26    The OpenSSL Project is a collaborative effort to develop a robust, \
27    commercial-grade, full-featured, and Open Source toolkit implementing \
28    the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security \
29    (TLS v1) protocols as well as a full-strength general purpose \
30    cryptography library.
31
32master_sites        http://www.openssl.org/source/
33checksums           md5     8d6d684a9430d5cc98a62a5d8fbda8cf \
34                    sha1    b2239599c8bf8f7fc48590a55205c26abe560bf8 \
35                    rmd160  aeb1e0f41074d499d5411510fd645455730ed05e \
36                    sha256  9d1c8a9836aa63e2c6adb684186cbd4371c9e9dcc01d6e3bb447abf2d4d3d093
37
38depends_lib         port:zlib
39
40patchfiles          patch-Makefile.org.diff patch-crypto-Makefile.diff \
41                    patch-bn_internal.pod.diff patch-Configure.diff
42
43post-patch {
44    # Ensure that the correct compiler is used
45    reinplace "s|cc:|${configure.cc}:|" ${worksrcpath}/Configure
46    # use SDK if necessary
47    if {${configure.sdkroot} != ""} {
48        reinplace "s|\\(-arch \[_a-zA-Z0-9\]*\\)|\\1 -isysroot ${configure.sdkroot}|" ${worksrcpath}/Configure
49    }
50}
51
52configure.cmd       ./Configure
53configure.args      -L${prefix}/lib --openssldir=${prefix}/etc/openssl zlib no-krb5 shared
54configure.ccache    no
55
56use_parallel_build  no
57
58destroot.destdir    INSTALL_PREFIX=${destroot}
59destroot.args       MANDIR=${prefix}/share/man MANSUFFIX=ssl
60
61test.run            yes
62test.dir            ${worksrcpath}/test
63test.target         alltests
64
65livecheck.type      regex
66livecheck.url       ${master_sites}
67livecheck.regex     ${name}-(\[0-9.\]+\[a-z\]?)\\.tar\\.gz
68
69variant rfc3779 description {enable RFC 3779: X.509 Extensions for IP Addresses and AS Identifiers} {
70    configure.args-append    enable-rfc3779
71}
72
73# code for universal build
74array set merger_configure_args {
75    ppc    darwin-ppc-cc
76    i386   darwin-i386-cc
77    ppc64  darwin64-ppc-cc
78    x86_64 darwin64-x86_64-cc
79}
80
81if { [variant_isset universal] } {
82    set merger_arch_compiler "no"
83
84    configure.universal_args-delete --disable-dependency-tracking
85
86    pre-destroot {
87        global merger_dont_diff
88        if { [llength ${universal_archs_to_use}] > 2 } {
89            lappend merger_dont_diff ${prefix}/include/openssl/opensslconf.h
90        }
91    }
92
93    # Do not set --host.
94    array set merger_host {
95        ppc    ""
96        i386   ""
97        ppc64  ""
98        x86_64 ""
99    }
100} elseif {[info exists merger_configure_args($build_arch)]} {
101    configure.args-append   $merger_configure_args($build_arch)
102}
103
Note: See TracBrowser for help on using the repository browser.