A new pkg for the stunnel program, a tool to wrap existing servers

into SSL connections.

8 files changed, 104 insertions, 0 deletions

diff --git a/security/stunnel/Makefile b/security/stunnel/Makefile
new file mode 100644
index 00000000000..7c2e68c6a6f
--- /dev/null
+++ b/security/stunnel/Makefile
@@ -0,0 +1,26 @@
+# $NetBSD: Makefile,v 1.1.1.1 2000/04/03 09:25:35 martin Exp $
+#
+
+DISTNAME=	stunnel-3.8
+CATEGORIES=	security
+MASTER_SITES=	http://mike.daewoo.com.pl/computer/stunnel/
+
+MAINTAINER=	martin@NetBSD.ORG
+HOMEPAGE=	http://mike.daewoo.com.pl/computer/stunnel
+
+BUILD_DEPENDS+=	${LOCALBASE}/bin/autoconf:../../devel/autoconf
+
+.if exists(/usr/include/openssl/ssl.h)
+OPENSSL_DIR=    /usr
+.else
+OPENSSL_DIR=    ${LOCALBASE}
+DEPENDS+=       openssl>=0.9.4:../openssl
+.endif
+
+GNU_CONFIGURE=	YES
+CONFIGURE_ARGS+=-with-ssl=${OPENSSL_DIR}
+
+pre-configure:
+	(cd ${WRKSRC}; autoreconf)
+
+.include "../../mk/bsd.pkg.mk"
diff --git a/security/stunnel/files/md5 b/security/stunnel/files/md5
new file mode 100644
index 00000000000..4e1b2c949c7
--- /dev/null
+++ b/security/stunnel/files/md5
@@ -0,0 +1,3 @@
+$NetBSD: md5,v 1.1.1.1 2000/04/03 09:25:36 martin Exp $
+
+MD5 (stunnel-3.8.tar.gz) = f84f3698b50f7028c94340e546acaa01
diff --git a/security/stunnel/files/patch-sum b/security/stunnel/files/patch-sum
new file mode 100644
index 00000000000..5d0698e12cd
--- /dev/null
+++ b/security/stunnel/files/patch-sum
@@ -0,0 +1,4 @@
+$NetBSD: patch-sum,v 1.1.1.1 2000/04/03 09:25:36 martin Exp $
+
+MD5 (patch-aa) = 9fac7061e2e3a645b7a2458cae12d06e
+MD5 (patch-ab) = 739bcb19d7735fdc10e51ca71b6f735c
diff --git a/security/stunnel/patches/patch-aa b/security/stunnel/patches/patch-aa
new file mode 100644
index 00000000000..5e20525d3c4
--- /dev/null
+++ b/security/stunnel/patches/patch-aa
@@ -0,0 +1,32 @@
+$NetBSD: patch-aa,v 1.1.1.1 2000/04/03 09:25:36 martin Exp $
+
+--- configure.old	Thu Feb 24 12:28:45 2000
++++ configure	Sat Apr  1 19:39:10 2000
+@@ -935,19 +935,17 @@
+ 
+ 
+ checkssldir() { :
+-    if test -d "$1/certs"; then
+-        if test -f "$1/include/openssl/ssl.h"; then
+-            cat >> confdefs.h <<\EOF
++    if test -f "$1/include/openssl/ssl.h"; then
++        cat >> confdefs.h <<\EOF
+ #define HAVE_OPENSSL 1
+ EOF
+ 
+-            ssldir="$1"
+-            return 0
+-        fi
+-        if test -f "$1/include/ssl.h"; then
+-            ssldir="$1"
+-            return 0
+-        fi
++        ssldir="$1"
++        return 0
++    fi
++    if test -f "$1/include/ssl.h"; then
++        ssldir="$1"
++        return 0
+     fi
+     return 1
+ }
diff --git a/security/stunnel/patches/patch-ab b/security/stunnel/patches/patch-ab
new file mode 100644
index 00000000000..b71b9852ae3
--- /dev/null
+++ b/security/stunnel/patches/patch-ab
@@ -0,0 +1,25 @@
+$NetBSD: patch-ab,v 1.1.1.1 2000/04/03 09:25:36 martin Exp $
+
+--- configure.in.orig	Sun Apr  2 11:13:49 2000
++++ configure.in	Sun Apr  2 11:13:55 2000
+@@ -88,8 +88,9 @@
+ LIBS="-lwrap $saved_LIBS"
+ AC_TRY_LINK([int hosts_access(); int allow_severity, deny_severity;],
+ [hosts_access()],
+-[AC_MSG_RESULT(yes); AC_DEFINE(HAVE_LIBWRAP)],
+-[AC_MSG_RESULT(no)]; LIBS="$saved_LIBS")
++[AC_MSG_RESULT(yes); AC_DEFINE(HAVE_LIBWRAP) wrap_LIB="-lwrap"],
++[AC_MSG_RESULT(no)])
++LIBS="$saved_LIBS"
+ 
+ dnl Add SSL includes and libraries
+ CFLAGS="$CFLAGS -I$ssldir/include"
+@@ -122,6 +123,8 @@
+ 
+ dnl Checks for library functions.
+ AC_CHECK_FUNCS(getopt snprintf vsnprintf openpty _getpty)
++
++LIBS="$LIBS $wrap_LIB"
+ 
+ AC_OUTPUT(Makefile stunnel.8)
+ 
diff --git a/security/stunnel/pkg/COMMENT b/security/stunnel/pkg/COMMENT
new file mode 100644
index 00000000000..48926c3ec85
--- /dev/null
+++ b/security/stunnel/pkg/COMMENT
@@ -0,0 +1 @@
+Universal SSL tunnel
diff --git a/security/stunnel/pkg/DESCR b/security/stunnel/pkg/DESCR
new file mode 100644
index 00000000000..6729fe0ccd6
--- /dev/null
+++ b/security/stunnel/pkg/DESCR
@@ -0,0 +1,7 @@
+The stunnel program is designed to work as SSL encryption wrapper between
+remote client and local (inetd-startable) or remote server. The concept is
+that having non-SSL aware daemons running on your system you can easily setup
+them to communicate with clients over secure SSL channel.
+
+stunnel can be used to add SSL functionality to commonly used inetd  daemons
+like POP-2, POP-3 and IMAP servers without any changes in the programs code.
diff --git a/security/stunnel/pkg/PLIST b/security/stunnel/pkg/PLIST
new file mode 100644
index 00000000000..cc35b9a1d02
--- /dev/null
+++ b/security/stunnel/pkg/PLIST
@@ -0,0 +1,6 @@
+@comment $NetBSD: PLIST,v 1.1.1.1 2000/04/03 09:25:36 martin Exp $
+sbin/stunnel
+lib/stunnel.so
+man/man8/stunnel.8
+certs/stunnel.pem
+@dirrm var/stunnel