forked from Lainports/opnsense-ports
77 lines
2.1 KiB
Makefile
77 lines
2.1 KiB
Makefile
# Created by: Bernard Spil <brnrd@FreeBSD.org>
|
|
# $FreeBSD$
|
|
|
|
PORTNAME= acme-client
|
|
PORTVERSION= 0.1.16
|
|
PORTREVISION= 4
|
|
DISTVERSIONPREFIX= portable-
|
|
CATEGORIES= security
|
|
MASTER_SITES= https://kristaps.bsd.lv/${PORTNAME}/snapshots/ \
|
|
LOCAL/brnrd
|
|
|
|
MAINTAINER= brnrd@FreeBSD.org
|
|
COMMENT= Native C client for Let's Encrypt, designed for security
|
|
|
|
LICENSE= ISCL
|
|
|
|
RUN_DEPENDS= ${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
|
|
|
|
USES= gmake tar:tgz ssl
|
|
|
|
USE_HARDENING= safestack
|
|
|
|
MAKEFILE= GNUmakefile
|
|
MAKE_ENV= PREFIX=${STAGEDIR}/${PREFIX}
|
|
|
|
CFLAGS+= -DNOBODY_USER=\\\"${ACME_USER}\\\"
|
|
|
|
WWWDIR= ${PREFIX}/www/acme
|
|
|
|
SAMPLE_FILES= acme-client.sh.sample deploy.sh.sample
|
|
SUB_FILES= 000.acme-client.sh pkg-message ${SAMPLE_FILES}
|
|
SUB_LIST= PORTNAME=${PORTNAME}
|
|
|
|
PERIODIC_DIRS= etc/periodic/weekly
|
|
PERIODIC_FILES= 000.acme-client.sh
|
|
|
|
ACME_USER?= _acme
|
|
|
|
USERS= ${ACME_USER}
|
|
GROUPS= ${ACME_USER}
|
|
|
|
post-patch:
|
|
${REINPLACE_CMD} -e "s|/etc/|${PREFIX}/etc/|g" \
|
|
-e "s|/var/www/acme|${WWWDIR}|" \
|
|
${WRKSRC}/main.c ${WRKSRC}/acme-client.1
|
|
|
|
post-install:
|
|
${MKDIR} ${STAGEDIR}${PREFIX}/${PERIODIC_DIRS}
|
|
${INSTALL_SCRIPT} ${WRKDIR}/${PERIODIC_FILES} ${STAGEDIR}${PREFIX}/${PERIODIC_DIRS}/${PERIODIC_FILES}
|
|
${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/acme-client
|
|
. for d in etc/ssl/acme etc/ssl/acme/private \
|
|
etc/acme www/acme
|
|
${MKDIR} ${STAGEDIR}${PREFIX}/${d}
|
|
. endfor
|
|
. for d in ${SAMPLE_FILES}
|
|
${INSTALL_SCRIPT} ${WRKDIR}/${d} ${STAGEDIR}${PREFIX}/etc/acme/${d}
|
|
. endfor
|
|
|
|
.include <bsd.port.pre.mk>
|
|
|
|
# Requires libtls from LibreSSL
|
|
.if ${SSL_DEFAULT:Mlibressl*}
|
|
CPPFLAGS+= -I${OPENSSLINC}
|
|
LDFLAGS+= -L${OPENSSLLIB}
|
|
.else # SSL_DEFAULT
|
|
BUILD_DEPENDS+= ${NONEXISTENT}:security/libressl:stage
|
|
CPPFLAGS+= -I${WRKDIR}/libressl/include
|
|
LDFLAGS+= -lpthread -L${WRKDIR}/libressl/lib
|
|
|
|
# Don't use COPYTREE_SHARE here as it hard links files, and the original files
|
|
# are owned by root, which creates problems of its own.
|
|
pre-configure:
|
|
@cd `${MAKE} -V STAGEDIR -C ${PORTSDIR}/security/libressl`${PREFIX} \
|
|
&& ${FIND} -E . ! -name *.so\* | ${CPIO} -dump ${WRKDIR}/libressl >/dev/null 2>&1
|
|
.endif # SSL_DEFAULT
|
|
|
|
.include <bsd.port.post.mk>
|