openwrt/package/network/services/dropbear/Makefile

#
# Copyright (C) 2006-2012 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#

include $(TOPDIR)/rules.mk

PKG_NAME:=dropbear
PKG_VERSION:=2012.55
PKG_RELEASE:=2

PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
PKG_SOURCE_URL:= \
	http://matt.ucc.asn.au/dropbear/releases/ \
	http://www.mirrors.wiretapped.net/security/cryptography/apps/ssh/dropbear/
PKG_MD5SUM:=8c784baec3054cdb1bb4bfa792c87812

PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE libtomcrypt/LICENSE libtommath/LICENSE

PKG_BUILD_PARALLEL:=1

include $(INCLUDE_DIR)/package.mk

define Package/dropbear/Default
  URL:=http://matt.ucc.asn.au/dropbear/
endef

define Package/dropbear
  $(call Package/dropbear/Default)
  SECTION:=net
  CATEGORY:=Base system
  TITLE:=Small SSH2 client/server
endef

define Package/dropbear/description
 A small SSH2 server/client designed for small memory environments.
endef

define Package/dropbear/conffiles
/etc/dropbear/dropbear_rsa_host_key
/etc/dropbear/dropbear_dss_host_key 
/etc/config/dropbear 
endef

define Package/dropbearconvert
  $(call Package/dropbear/Default)
  SECTION:=utils
  CATEGORY:=Utilities
  TITLE:=Utility for converting SSH keys
endef

CONFIGURE_ARGS += \
	--with-shared \
	--disable-pam \
	--enable-openpty \
	--enable-syslog \
	$(if $(CONFIG_SHADOW_PASSWORDS),,--disable-shadow) \
	--disable-lastlog \
	--disable-utmp \
	--disable-utmpx \
	--disable-wtmp \
	--disable-wtmpx \
	--disable-loginfunc \
	--disable-pututline \
	--disable-pututxline \
	--disable-zlib \
	--enable-bundled-libtom

TARGET_CFLAGS += -DARGTYPE=3 -ffunction-sections -fdata-sections
TARGET_LDFLAGS += -Wl,--gc-sections

define Build/Compile
	+$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
		$(TARGET_CONFIGURE_OPTS) \
		PROGRAMS="dropbear dbclient dropbearkey scp" \
		MULTI=1 SCPPROGRESS=1
	+$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
		$(TARGET_CONFIGURE_OPTS) \
		PROGRAMS="dropbearconvert"
endef

define Package/dropbear/install
	$(INSTALL_DIR) $(1)/usr/sbin
	$(INSTALL_BIN) $(PKG_BUILD_DIR)/dropbearmulti $(1)/usr/sbin/dropbear
	$(INSTALL_DIR) $(1)/usr/bin
	ln -sf ../sbin/dropbear $(1)/usr/bin/scp
	ln -sf ../sbin/dropbear $(1)/usr/bin/ssh
	ln -sf ../sbin/dropbear $(1)/usr/bin/dbclient
	ln -sf ../sbin/dropbear $(1)/usr/bin/dropbearkey
	$(INSTALL_DIR) $(1)/etc/config
	$(INSTALL_DATA) ./files/dropbear.config $(1)/etc/config/dropbear
	$(INSTALL_DIR) $(1)/etc/init.d
	$(INSTALL_BIN) ./files/dropbear.init $(1)/etc/init.d/dropbear
	$(INSTALL_DIR) $(1)/usr/lib/opkg/info
	$(INSTALL_DIR) $(1)/etc/dropbear
	touch $(1)/etc/dropbear/dropbear_rsa_host_key
	touch $(1)/etc/dropbear/dropbear_dss_host_key
endef

define Package/dropbearconvert/install
	$(INSTALL_DIR) $(1)/usr/bin
	$(INSTALL_BIN) $(PKG_BUILD_DIR)/dropbearconvert $(1)/usr/bin/dropbearconvert
endef

$(eval $(call BuildPackage,dropbear))
$(eval $(call BuildPackage,dropbearconvert))
dropbear: upgrade to 0.51 - 160-tty_close merged upstream - patches refreshed SVN-Revision: 11913 2008-07-24 05:24:52 +00:00			`#`
dropbear: patch possible use after free by authenticated remote users with active command restrictions (CVE-2012-0920) SVN-Revision: 30714 2012-02-25 12:40:46 +00:00			`# Copyright (C) 2006-2012 OpenWrt.org`
credit where credit is due SVN-Revision: 4091 2006-06-27 00:35:46 +00:00			`#`
			`# This is free software, licensed under the GNU General Public License v2.`
			`# See /LICENSE for more information.`
			`#`
add md5sums SVN-Revision: 405 2005-03-21 08:12:49 +00:00
bring up to date with nbd's br2_test20.tar.bz2 SVN-Revision: 308 2005-03-06 03:53:29 +00:00			`include $(TOPDIR)/rules.mk`

Uniformize package Makefile SVN-Revision: 647 2005-04-14 07:08:14 +00:00			`PKG_NAME:=dropbear`
dropbear: update to 2012.55 and refresh patches Upstream has a few code cleanups, more eagerly burns sensitive memory and includes the fix for CVE-2012-0920. Full changelog: https://matt.ucc.asn.au/dropbear/CHANGES Local changes: - Removed PKG_MULTI which is no longer in options.h (even before 2011.54) - Merged DO_HOST_LOOKUP into 120-openwrt_options.patch - Removed LD from make opts (now included in TARGET_CONFIGURE_OPTS) - Removed 400-CVE-2012-0920.patch which is included in 2012.55 Signed-off-by: Catalin Patulea <cat@vv.carleton.ca> Signed-off-by: Florian Fainelli <florian@openwrt.org> SVN-Revision: 34496 2012-12-04 16:40:17 +00:00			`PKG_VERSION:=2012.55`
dropbear: patch possible use after free by authenticated remote users with active command restrictions (CVE-2012-0920) SVN-Revision: 30714 2012-02-25 12:40:46 +00:00			`PKG_RELEASE:=2`
add md5sums SVN-Revision: 405 2005-03-21 08:12:49 +00:00
package/dropbear: update to 2011.54 SVN-Revision: 29330 2011-11-25 00:53:19 +00:00			`PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2`
dropbear: upgrade to 0.51 - 160-tty_close merged upstream - patches refreshed SVN-Revision: 11913 2008-07-24 05:24:52 +00:00			`PKG_SOURCE_URL:= \`
invert the mirror orders seems the first one seems to be offline right now SVN-Revision: 14466 2009-02-10 17:14:18 +00:00			`http://matt.ucc.asn.au/dropbear/releases/ \`
			`http://www.mirrors.wiretapped.net/security/cryptography/apps/ssh/dropbear/`
dropbear: update to 2012.55 and refresh patches Upstream has a few code cleanups, more eagerly burns sensitive memory and includes the fix for CVE-2012-0920. Full changelog: https://matt.ucc.asn.au/dropbear/CHANGES Local changes: - Removed PKG_MULTI which is no longer in options.h (even before 2011.54) - Merged DO_HOST_LOOKUP into 120-openwrt_options.patch - Removed LD from make opts (now included in TARGET_CONFIGURE_OPTS) - Removed 400-CVE-2012-0920.patch which is included in 2012.55 Signed-off-by: Catalin Patulea <cat@vv.carleton.ca> Signed-off-by: Florian Fainelli <florian@openwrt.org> SVN-Revision: 34496 2012-12-04 16:40:17 +00:00			`PKG_MD5SUM:=8c784baec3054cdb1bb4bfa792c87812`
bring up to date with nbd's br2_test20.tar.bz2 SVN-Revision: 308 2005-03-06 03:53:29 +00:00
licensing: Add licensing metadata to many packages Two new variables are introduces to many packages, namely PKG_LICENSE and PKG_LICENSE_FILES - there may be more than one license applied to packages, and these are listed in the PKG_LICENSE variable and separated by spaces. All relevant license files are also added to the PKG_LICENSE_FILES variable, also space separated. The licensing metadata is put into the bin/<platform>/packages/Packages file for later parsing. A script for that is on it's way! SVN-Revision: 33861 2012-10-19 15:34:28 +00:00			`PKG_LICENSE:=MIT`
			`PKG_LICENSE_FILES:=LICENSE libtomcrypt/LICENSE libtommath/LICENSE`

From: Joseph Roback <openwrt-devel@roback.cc> 26 Makefile patches for enabling parallel builds. Tested on Linux (8-core) and Darwin (12-core), individually and from clean build_root. The first set is from trunk, the second is from feeds/packages. Signed-off-by: Joe Roback <joe@roback.cc> SVN-Revision: 22965 2010-09-07 10:00:34 +00:00			`PKG_BUILD_PARALLEL:=1`

add INCLUDE_DIR variable for $(TOPDIR)/include SVN-Revision: 4033 2006-06-21 02:32:39 +00:00			`include $(INCLUDE_DIR)/package.mk`
bring up to date with nbd's br2_test20.tar.bz2 SVN-Revision: 308 2005-03-06 03:53:29 +00:00
standardize Makefile, change section from base to net for dropbear and utils for dropbearconvert SVN-Revision: 4834 2006-09-23 17:41:58 +00:00			`define Package/dropbear/Default`
			`URL:=http://matt.ucc.asn.au/dropbear/`
			`endef`

Convert packages to new template SVN-Revision: 3752 2006-05-10 19:06:22 +00:00			`define Package/dropbear`
standardize Makefile, change section from base to net for dropbear and utils for dropbearconvert SVN-Revision: 4834 2006-09-23 17:41:58 +00:00			`$(call Package/dropbear/Default)`
			`SECTION:=net`
			`CATEGORY:=Base system`
			`TITLE:=Small SSH2 client/server`
move package description to a separate definition, remove it when DESCRIPTION=TITLE SVN-Revision: 8659 2007-09-07 08:34:51 +00:00			`endef`

			`define Package/dropbear/description`
			`A small SSH2 server/client designed for small memory environments.`
Convert packages to new template SVN-Revision: 3752 2006-05-10 19:06:22 +00:00			`endef`
Uniformize package Makefile SVN-Revision: 647 2005-04-14 07:08:14 +00:00
add dropkey ssh keys and config files to the conffiles section (#2014) SVN-Revision: 14399 2009-02-03 22:28:16 +00:00			`define Package/dropbear/conffiles`
			`/etc/dropbear/dropbear_rsa_host_key`
			`/etc/dropbear/dropbear_dss_host_key`
			`/etc/config/dropbear`
			`endef`

Convert packages to new template SVN-Revision: 3752 2006-05-10 19:06:22 +00:00			`define Package/dropbearconvert`
standardize Makefile, change section from base to net for dropbear and utils for dropbearconvert SVN-Revision: 4834 2006-09-23 17:41:58 +00:00			`$(call Package/dropbear/Default)`
			`SECTION:=utils`
			`CATEGORY:=Utilities`
			`TITLE:=Utility for converting SSH keys`
Convert packages to new template SVN-Revision: 3752 2006-05-10 19:06:22 +00:00			`endef`

various configure related cleanups SVN-Revision: 6372 2007-02-25 23:34:57 +00:00			`CONFIGURE_ARGS += \`
			`--with-shared \`
			`--disable-pam \`
			`--enable-openpty \`
			`--enable-syslog \`
Allow dropbear to use shadow passwords, and correct base-files generation of /etc/shadow SVN-Revision: 12809 2008-09-30 00:56:55 +00:00			`$(if $(CONFIG_SHADOW_PASSWORDS),,--disable-shadow) \`
various configure related cleanups SVN-Revision: 6372 2007-02-25 23:34:57 +00:00			`--disable-lastlog \`
			`--disable-utmp \`
			`--disable-utmpx \`
			`--disable-wtmp \`
			`--disable-wtmpx \`
			`--disable-loginfunc \`
			`--disable-pututline \`
			`--disable-pututxline \`
upgrade to 0.53.1 SVN-Revision: 25830 2011-03-02 14:20:51 +00:00			`--disable-zlib \`
			`--enable-bundled-libtom`
various configure related cleanups SVN-Revision: 6372 2007-02-25 23:34:57 +00:00
dropbear: use -ffunction-sections, -fdata-sections and --gc-sections, saves 19k uncompressed SVN-Revision: 25826 2011-03-02 12:47:52 +00:00			`TARGET_CFLAGS += -DARGTYPE=3 -ffunction-sections -fdata-sections`
			`TARGET_LDFLAGS += -Wl,--gc-sections`
dropbear: compile out libtomcrypt assertion messages, saves some more space SVN-Revision: 25526 2011-02-13 16:54:44 +00:00
fix typo SVN-Revision: 3762 2006-05-11 17:33:51 +00:00			`define Build/Compile`
build: add the + token to any commands that can pass through the jobserver, fixes parallel build on some systems SVN-Revision: 33523 2012-09-23 09:50:01 +00:00			`+$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \`
more cleanup (make sure to pass TARGET_PATH and not just TARGET_CC) SVN-Revision: 4432 2006-08-04 05:30:27 +00:00			`$(TARGET_CONFIGURE_OPTS) \`
disable dropbear zlib support and split off dropbearconvert to save flash space SVN-Revision: 3085 2006-01-31 13:33:25 +00:00			`PROGRAMS="dropbear dbclient dropbearkey scp" \`
Uniformize package Makefile SVN-Revision: 647 2005-04-14 07:08:14 +00:00			`MULTI=1 SCPPROGRESS=1`
build: add the + token to any commands that can pass through the jobserver, fixes parallel build on some systems SVN-Revision: 33523 2012-09-23 09:50:01 +00:00			`+$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \`
more cleanup (make sure to pass TARGET_PATH and not just TARGET_CC) SVN-Revision: 4432 2006-08-04 05:30:27 +00:00			`$(TARGET_CONFIGURE_OPTS) \`
disable dropbear zlib support and split off dropbearconvert to save flash space SVN-Revision: 3085 2006-01-31 13:33:25 +00:00			`PROGRAMS="dropbearconvert"`
Convert packages to new template SVN-Revision: 3752 2006-05-10 19:06:22 +00:00			`endef`
dropbear: upgrade to 0.51 - 160-tty_close merged upstream - patches refreshed SVN-Revision: 11913 2008-07-24 05:24:52 +00:00
Convert packages to new template SVN-Revision: 3752 2006-05-10 19:06:22 +00:00			`define Package/dropbear/install`
replace lots of manual install commands with INSTALL_* variables SVN-Revision: 5624 2006-11-23 00:29:07 +00:00			`$(INSTALL_DIR) $(1)/usr/sbin`
Upgrade dropbear to 0.50 (#2201) SVN-Revision: 8400 2007-08-11 21:53:15 +00:00			`$(INSTALL_BIN) $(PKG_BUILD_DIR)/dropbearmulti $(1)/usr/sbin/dropbear`
replace lots of manual install commands with INSTALL_* variables SVN-Revision: 5624 2006-11-23 00:29:07 +00:00			`$(INSTALL_DIR) $(1)/usr/bin`
replace $(IDIR_*) with $(1) SVN-Revision: 3759 2006-05-11 16:00:43 +00:00			`ln -sf ../sbin/dropbear $(1)/usr/bin/scp`
			`ln -sf ../sbin/dropbear $(1)/usr/bin/ssh`
			`ln -sf ../sbin/dropbear $(1)/usr/bin/dbclient`
			`ln -sf ../sbin/dropbear $(1)/usr/bin/dropbearkey`
replace lots of manual install commands with INSTALL_* variables SVN-Revision: 5624 2006-11-23 00:29:07 +00:00			`$(INSTALL_DIR) $(1)/etc/config`
/etc/config/* should use INSTALL_DATA SVN-Revision: 5976 2007-01-04 16:51:41 +00:00			`$(INSTALL_DATA) ./files/dropbear.config $(1)/etc/config/dropbear`
replace lots of manual install commands with INSTALL_* variables SVN-Revision: 5624 2006-11-23 00:29:07 +00:00			`$(INSTALL_DIR) $(1)/etc/init.d`
			`$(INSTALL_BIN) ./files/dropbear.init $(1)/etc/init.d/dropbear`
make opkg the default package manager, disable busybox ipkg from building by default SVN-Revision: 12319 2008-08-16 06:35:14 +00:00			`$(INSTALL_DIR) $(1)/usr/lib/opkg/info`
add dropkey ssh keys and config files to the conffiles section (#2014) SVN-Revision: 14399 2009-02-03 22:28:16 +00:00			`$(INSTALL_DIR) $(1)/etc/dropbear`
			`touch $(1)/etc/dropbear/dropbear_rsa_host_key`
			`touch $(1)/etc/dropbear/dropbear_dss_host_key`
Convert packages to new template SVN-Revision: 3752 2006-05-10 19:06:22 +00:00			`endef`

			`define Package/dropbearconvert/install`
replace lots of manual install commands with INSTALL_* variables SVN-Revision: 5624 2006-11-23 00:29:07 +00:00			`$(INSTALL_DIR) $(1)/usr/bin`
Upgrade dropbear to 0.50 (#2201) SVN-Revision: 8400 2007-08-11 21:53:15 +00:00			`$(INSTALL_BIN) $(PKG_BUILD_DIR)/dropbearconvert $(1)/usr/bin/dropbearconvert`
Convert packages to new template SVN-Revision: 3752 2006-05-10 19:06:22 +00:00			`endef`

			`$(eval $(call BuildPackage,dropbear))`
			`$(eval $(call BuildPackage,dropbearconvert))`