1PORTNAME=	ipsec-tools
2PORTVERSION=	0.8.2
3PORTREVISION=	1
4CATEGORIES=	security
5MASTER_SITES=	SF
6
7MAINTAINER=	ports@MidnightBSD.org
8COMMENT=	KAME racoon IKE daemon, ipsec-tools version
9WWW=		https://ipsec-tools.sourceforge.net/
10
11LICENSE=	bsd3
12
13CONFLICTS=	racoon-[0-9]*
14
15USE_RC_SUBR=	racoon
16
17INSTALL_TARGET=	install-strip
18
19USES=		cpe libtool tar:bzip2 ssl
20GNU_CONFIGURE=	yes
21USE_LDCONFIG=	yes
22CONFIGURE_ARGS=	--enable-shared --sysconfdir=${PREFIX}/etc/racoon \
23		--localstatedir=${STATEDIR:S/\/racoon//} \
24		--with-pkgversion=midnightbsd-${PORTVERSION}
25
26STATEDIR=	/var/db/racoon
27SUB_LIST+=	STATEDIR=${STATEDIR} REQUIREMOD=${REQUIREMOD}
28PLIST_SUB+=	STATEDIR=${STATEDIR}
29
30OPTIONS_DEFINE=	IPV6 ADMINPORT STATS DPD NATT NATTF FRAG HYBRID PAM \
31		RADIUS LDAP GSSAPI SAUNSPEC RC5 IDEA DOCS EXAMPLES WCPSKEY
32OPTIONS_DEFAULT=	DPD NATT FRAG HYBRID
33
34ADMINPORT_DESC=	Enable Admin port
35STATS_DESC=	Statistics logging function
36DPD_DESC=	Dead Peer Detection
37NATT_DESC=	NAT-Traversal (kernel-patch required)
38FRAG_DESC=	IKE fragmentation payload support
39HYBRID_DESC=	Hybrid, Xauth and Mode-cfg support
40SAUNSPEC_DESC=	Unspecified SA mode
41RC5_DESC=	RC5 encryption (patented)
42IDEA_DESC=	IDEA encryption (patented)
43PAM_DESC=	PAM authentication (Xauth server)
44RADIUS_DESC=	Radius authentication (Xauth server)
45LDAP_DESC=	LDAP authentication (Xauth server)
46WCPSKEY_DESC=	Allow wildcard matching for pre-shared keys
47
48PORTDOCS=	*
49PORTEXAMPLES=	*
50
51IPV6_CONFIGURE_ENABLE=	ipv6
52ADMINPORT_CONFIGURE_ENABLE=adminport
53STATS_CONFIGURE_ENABLE=	stats
54DPD_CONFIGURE_ENABLE=	dpd
55NATT_CONFIGURE_ON=	--enable-natt=yes --enable-natt-versions=rfc
56NATT_CONFIGURE_OFF=	--disable-natt
57FRAG_CONFIGURE_ENABLE=	frag
58HYBRID_CONFIGURE_ENABLE=hybrid
59PAM_CONFIGURE_WITH=	libpam
60GSSAPI_USES=		iconv
61GSSAPI_CFLAGS=		-I${LOCALBASE}/include
62GSSAPI_LDFLAGS=		-L${LOCALBASE}/lib
63GSSAPI_CONFIGURE_ENABLE=gssapi
64RADIUS_CONFIGURE_WITH=	libradius
65LDAP_USES=		ldap
66LDAP_CONFIGURE_ON=	--with-libldap=${LOCALBASE}
67LDAP_CONFIGURE_OFF=	--without-libldap
68SAUNSPEC_CONFIGURE_ENABLE=	samode-unspec
69RC5_CONFIGURE_ENABLE=		rc5
70IDEA_CONFIGURE_ENABLE=		idea
71NATT_EXTRA_PATCHES=		${FILESDIR}/natt.diff
72WCPSKEY_EXTRA_PATCHES=	${FILESDIR}/wildcard-psk.diff ${FILESDIR}/wildcard-psk-oakley.c.diff
73
74.include <bsd.port.pre.mk>
75
76REQUIREMOD?=	ipsec
77
78post-patch:
79	@${REINPLACE_CMD} -e "s/-Werror//g ; s/-R$$libdir/-Wl,-rpath=$$libdir/g" ${WRKSRC}/configure
80
81post-install:
82	@${MKDIR} ${PREFIX}/etc/racoon
83	@if [ -z `/sbin/sysctl -a | ${GREP} -q ipsec && ${ECHO_CMD} ipsec` ]; then \
84	    ${ECHO_MSG} "WARNING: IPsec feature is disabled on this host"; \
85	    ${ECHO_MSG} "         You must build the kernel if you want to run racoon on the host"; \
86	fi ;
87	@${MKDIR} ${EXAMPLESDIR}
88	@${RM} -f ${WRKSRC}/src/racoon/samples/*.in
89	@${CP} -r ${WRKSRC}/src/racoon/samples/* ${EXAMPLESDIR}
90	@${MKDIR} ${DOCSDIR}
91	${INSTALL_DATA} ${WRKSRC}/src/racoon/doc/* ${DOCSDIR}
92
93.  if ${SSL_DEFAULT} != openssl
94EXTRA_PATCHES+=	${FILESDIR}/extra-patch-ipsec-tools
95PLIST_FILES+=	include/racoon/openssl_compat.h
96.  endif
97
98.include <bsd.port.post.mk>
99