summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--mk/bsd.pkg.mk13
-rw-r--r--mk/mk.conf.example7
2 files changed, 18 insertions, 2 deletions
diff --git a/mk/bsd.pkg.mk b/mk/bsd.pkg.mk
index 24528bbafa7..3e5d59cf4ea 100644
--- a/mk/bsd.pkg.mk
+++ b/mk/bsd.pkg.mk
@@ -1,4 +1,4 @@
-# $NetBSD: bsd.pkg.mk,v 1.566 2000/09/07 15:26:52 fredb Exp $
+# $NetBSD: bsd.pkg.mk,v 1.567 2000/09/09 18:45:16 fredb Exp $
#
# This file is in the public domain.
#
@@ -20,6 +20,9 @@
##### Include any preferences, if not already included, and common definitions
.include "../../mk/bsd.prefs.mk"
+##### Build crypto packages by default.
+MKCRYPTO?= yes
+
##### Some overrides of defaults below on a per-OS basis.
.if (${OPSYS} == "NetBSD")
LOCALBASE?= ${DESTDIR}/usr/pkg
@@ -967,6 +970,9 @@ ACCEPTABLE_LICENSES= ${ACCEPTABLE_LICENCES}
# Don't build a package if it's restricted and we don't want to
# get into that.
#
+# Don't build any package that utilizes strong cryptography, for
+# when the law of the land forbids it.
+#
# Don't attempt to build packages against X if we don't have X.
#
# Don't build a package if it's broken.
@@ -991,6 +997,11 @@ IGNORE+= "${PKGNAME} may not be placed in source form on a CDROM:" \
IGNORE+= "${PKGNAME} is restricted:" \
" "${RESTRICTED:Q}
.endif
+.if !(${MKCRYPTO} == "YES" || ${MKCRYPTO} == yes)
+. if (defined(CRYPTO) || defined(USE_SSL))
+IGNORE+= "${PKGNAME} may not be built, because it utilizes strong cryptography"
+. endif
+.endif
.if ((defined(USE_IMAKE) || defined(USE_MOTIF) || \
defined(USE_X11BASE) || defined(USE_X11)) && \
!exists(${X11BASE}))
diff --git a/mk/mk.conf.example b/mk/mk.conf.example
index a86df992404..0a1090a1a3f 100644
--- a/mk/mk.conf.example
+++ b/mk/mk.conf.example
@@ -1,4 +1,4 @@
-# $NetBSD: mk.conf.example,v 1.153 2000/09/09 16:34:44 veego Exp $
+# $NetBSD: mk.conf.example,v 1.154 2000/09/09 18:45:16 fredb Exp $
#
# Sample /etc/mk.conf file, which can be used to set specific values
@@ -30,6 +30,11 @@
# Possible: defined, not defined
# Default: not defined
+#MKCRYPTO= no
+# If not YES or yes, don't fetch, build or install crypto packages.
+# Possible: not defined, no
+# Default: yes
+
#OBJMACHINE=
# use machine-specific object directories, e.g. work.i386, work.sparc
# Possible: defined, not defined