homebrew-core/Formula/openssh.rb

105 lines
3.6 KiB
Ruby

class Openssh < Formula
desc "OpenBSD freely-licensed SSH connectivity tools"
homepage "https://www.openssh.com/"
url "https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-8.8p1.tar.gz"
mirror "https://mirror.vdms.io/pub/OpenBSD/OpenSSH/portable/openssh-8.8p1.tar.gz"
version "8.8p1"
sha256 "4590890ea9bb9ace4f71ae331785a3a5823232435161960ed5fc86588f331fe9"
license "SSH-OpenSSH"
revision 2
livecheck do
url "https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/"
regex(/href=.*?openssh[._-]v?(\d+(?:\.\d+)+(?:p\d+)?)\.t/i)
end
bottle do
sha256 arm64_monterey: "3a50d8f5d6bd03010f6d89e11954bfa8dc88823dc8eacc6b0e94b567773605c5"
sha256 arm64_big_sur: "44d83024beb93c0d5c77105960327a265a92507a4a6207593f812ada8d9ee0ca"
sha256 monterey: "60463ed37e4903ecfa47c37b9bf75735a97dc706ba202d9fa1b6afdd138599db"
sha256 big_sur: "fb85274c9ec3ad16a158933d4fa5b180be70bf4dfc6f38807917c3936dd61103"
sha256 catalina: "7036fbc5d3334a23bd2222f1956e0358cb3974c4624967fd152a5ca01079f6fb"
sha256 x86_64_linux: "048e4a9a1a440e759e79055294316b7a61e0cf3a94a1749927300ce0e4360c48"
end
# Please don't resubmit the keychain patch option. It will never be accepted.
# https://archive.is/hSB6d#10%25
depends_on "pkg-config" => :build
depends_on "ldns"
depends_on "libfido2"
depends_on "openssl@1.1"
uses_from_macos "lsof" => :test
uses_from_macos "krb5"
uses_from_macos "libedit"
uses_from_macos "zlib"
on_macos do
# Both these patches are applied by Apple.
patch do
url "https://raw.githubusercontent.com/Homebrew/patches/1860b0a745f1fe726900974845d1b0dd3c3398d6/openssh/patch-sandbox-darwin.c-apple-sandbox-named-external.diff"
sha256 "d886b98f99fd27e3157b02b5b57f3fb49f43fd33806195970d4567f12be66e71"
end
patch do
url "https://raw.githubusercontent.com/Homebrew/patches/d8b2d8c2612fd251ac6de17bf0cc5174c3aab94c/openssh/patch-sshd.c-apple-sandbox-named-external.diff"
sha256 "3505c58bf1e584c8af92d916fe5f3f1899a6b15cc64a00ddece1dc0874b2f78f"
end
end
on_linux do
depends_on "linux-pam"
end
resource "com.openssh.sshd.sb" do
url "https://opensource.apple.com/source/OpenSSH/OpenSSH-240.40.1/com.openssh.sshd.sb"
sha256 "a273f86360ea5da3910cfa4c118be931d10904267605cdd4b2055ced3a829774"
end
def install
if OS.mac?
ENV.append "CPPFLAGS", "-D__APPLE_SANDBOX_NAMED_EXTERNAL__"
# Ensure sandbox profile prefix is correct.
# We introduce this issue with patching, it's not an upstream bug.
inreplace "sandbox-darwin.c", "@PREFIX@/share/openssh", etc/"ssh"
end
args = %W[
--prefix=#{prefix}
--sysconfdir=#{etc}/ssh
--with-ldns
--with-libedit
--with-kerberos5
--with-pam
--with-ssl-dir=#{Formula["openssl@1.1"].opt_prefix}
--with-security-key-builtin
]
args << "--with-privsep-path=#{var}/lib/sshd" if OS.linux?
system "./configure", *args
system "make"
ENV.deparallelize
system "make", "install"
# This was removed by upstream with very little announcement and has
# potential to break scripts, so recreate it for now.
# Debian have done the same thing.
bin.install_symlink bin/"ssh" => "slogin"
buildpath.install resource("com.openssh.sshd.sb")
(etc/"ssh").install "com.openssh.sshd.sb" => "org.openssh.sshd.sb"
end
test do
assert_match "OpenSSH_", shell_output("#{bin}/ssh -V 2>&1")
port = free_port
fork { exec sbin/"sshd", "-D", "-p", port.to_s }
sleep 2
assert_match "sshd", shell_output("lsof -i :#{port}")
end
end