summaryrefslogtreecommitdiff
path: root/net/openvpn
diff options
context:
space:
mode:
authorspz <spz@pkgsrc.org>2009-09-21 12:33:31 +0000
committerspz <spz@pkgsrc.org>2009-09-21 12:33:31 +0000
commitc965eb6bf8032bd8cf996b9838982442e273a76b (patch)
treeb6a18794a7bc1b258b13be22f8262d7f248f4e13 /net/openvpn
parentc33f25501a71d32c229b577ddc91579dad63d706 (diff)
downloadpkgsrc-c965eb6bf8032bd8cf996b9838982442e273a76b.tar.gz
add an option to openvpn to enable using certificates on USB sticks
or cards (etc) that are using the PKCS11 protocol
Diffstat (limited to 'net/openvpn')
-rw-r--r--net/openvpn/Makefile8
-rw-r--r--net/openvpn/options.mk16
2 files changed, 20 insertions, 4 deletions
diff --git a/net/openvpn/Makefile b/net/openvpn/Makefile
index 067d0a0c651..f72f2877850 100644
--- a/net/openvpn/Makefile
+++ b/net/openvpn/Makefile
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.29 2009/05/19 08:59:27 wiz Exp $
+# $NetBSD: Makefile,v 1.30 2009/09/21 12:33:31 spz Exp $
#
DISTNAME= openvpn-2.1_rc13
@@ -59,9 +59,8 @@ SUBST_CLASSES+= pkitool
SUBST_STAGE.pkitool= post-build
SUBST_MESSAGE.pkitool= Fixing up default paths to grep & openssl in pkitool.
SUBST_FILES.pkitool= easy-rsa/2.0/pkitool
-SUBST_SED.pkitool= \
- -e "s|\\(GREP\\)=.*|\\1=\""${GREP:Q}"\"|" \
- -e "s|\\(OPENSSL\\)=.*|\\1=\""${SSLBASE:Q}/bin/openssl"\"|"
+SUBST_SED.pkitool= -e "s|\\(GREP\\)=.*|\\1=\""${GREP:Q}"\"|"
+SUBST_SED.pkitool+= -e "s|\\(OPENSSL\\)=.*|\\1=\""${SSLBASE:Q}/bin/openssl"\"|"
post-install:
cd ${WRKSRC:Q}/easy-rsa/2.0; for file in [a-zR]*; do \
@@ -82,4 +81,5 @@ post-install:
${INSTALL_DATA} $$file ${DESTDIR}${EGDIR:Q}/keys; \
done
+.include "options.mk"
.include "../../mk/bsd.pkg.mk"
diff --git a/net/openvpn/options.mk b/net/openvpn/options.mk
new file mode 100644
index 00000000000..2fe596bc77a
--- /dev/null
+++ b/net/openvpn/options.mk
@@ -0,0 +1,16 @@
+# $NetBSD: options.mk,v 1.1 2009/09/21 12:33:31 spz Exp $
+
+PKG_OPTIONS_VAR= PKG_OPTIONS.openvpn
+PKG_SUPPORTED_OPTIONS= pkcs11
+PKG_SUGGESTED_OPTIONS=
+
+.include "../../mk/bsd.options.mk"
+
+# include support for certificates on a stick (or card)
+
+.if !empty(PKG_OPTIONS:Mpkcs11)
+.include "../../security/pkcs11-helper/buildlink3.mk"
+.else
+# it would pick it up halfways when installed, and fail building
+CONFIGURE_ARGS+= --disable-pkcs11
+.endif