diff options
| author | Dirk Meyer <dinoex@FreeBSD.org> | 2005-07-28 05:08:45 +0000 |
|---|---|---|
| committer | Dirk Meyer <dinoex@FreeBSD.org> | 2005-07-28 05:08:45 +0000 |
| commit | 3227fb2e983d750365cfccf5f13f461f76047eea (patch) | |
| tree | fb79269b78927c24e90c43b32612f655b32f1776 /Mk/bsd.openssl.mk | |
| parent | 3bc6dc7c2128cea0ad1e1997f1c78e2545e34e52 (diff) | |
| download | ports-3227fb2e983d750365cfccf5f13f461f76047eea.tar.gz ports-3227fb2e983d750365cfccf5f13f461f76047eea.zip | |
Notes
Diffstat (limited to 'Mk/bsd.openssl.mk')
| -rw-r--r-- | Mk/bsd.openssl.mk | 16 |
1 files changed, 2 insertions, 14 deletions
diff --git a/Mk/bsd.openssl.mk b/Mk/bsd.openssl.mk index 6e1a2be64258..f5eff7a73c48 100644 --- a/Mk/bsd.openssl.mk +++ b/Mk/bsd.openssl.mk @@ -2,7 +2,7 @@ # Date created: 31 May 2002 # Whom: dinoex # -# $FreeBSD: /tmp/pcvs/ports/Mk/bsd.openssl.mk,v 1.21 2005-04-15 04:35:37 dinoex Exp $ +# $FreeBSD: /tmp/pcvs/ports/Mk/bsd.openssl.mk,v 1.22 2005-07-28 05:08:45 dinoex Exp $ # # Use of 'USE_OPENSSL=yes' includes this Makefile after bsd.ports.pre.mk # @@ -42,27 +42,15 @@ WITH_OPENSSL_BASE=yes WITH_OPENSSL_PORT=yes .endif -# if no preference was set, check for an up to date base version +# if no preference was set, check for an installed base version # but give an installed port preference over it. .if !defined(WITH_OPENSSL_BASE) && \ !defined(WITH_OPENSSL_BETA) && \ !defined(WITH_OPENSSL_PORT) && \ !exists(${LOCALBASE}/lib/libcrypto.so) && \ exists(/usr/include/openssl/opensslv.h) -# Security: version in base must be 0.9.7d or have fixes -# http://www.freebsd.org/cgi/cvsweb.cgi/src/crypto/openssl/crypto/opensslv.h -OPENSSLVER!= ${AWK} '/OPENSSL_VERSION_TEXT/ { sub(/-fips/, ""); print $$4; exit }' \ - /usr/include/openssl/opensslv.h -# check for safe versions in the base -.if ${OPENSSLVER} != "0.9.7a-p1" && ${OPENSSLVER} != "0.9.7c-p1" && ${OPENSSLVER} != "0.9.7d" && ${OPENSSLVER} != "0.9.7e" && ${OPENSSLVER} != "0.9.7f" && ${OPENSSLVER} != "0.9.7g" -check-depends:: - @${ECHO_CMD} "Dependency warning: used OpenSSL version contains known vulnerabilities" - @${ECHO_CMD} "Please update or define either WITH_OPENSSL_BASE or WITH_OPENSSL_PORT" - @${FALSE} -.else WITH_OPENSSL_BASE=yes .endif -.endif .if defined(WITH_OPENSSL_BASE) OPENSSLBASE= /usr |