From 34a628dda421257dc71e6024172837ef6d116f57 Mon Sep 17 00:00:00 2001
From: fredb <fredb@pkgsrc.org>
Date: Sat, 9 Sep 2000 18:45:16 +0000
Subject: Add a new mechanism for handling "crypto" packages, as discussed on
 tech-pkg. Setting either USE_SSL or CRYPTO in the package's Makefile will
 permit the package to build or not, depending on the setting of MKCRYPTO (set
 to yes by default).

---
 mk/bsd.pkg.mk      | 13 ++++++++++++-
 mk/mk.conf.example |  7 ++++++-
 2 files changed, 18 insertions(+), 2 deletions(-)

(limited to 'mk')

diff --git a/mk/bsd.pkg.mk b/mk/bsd.pkg.mk
index 24528bbafa7..3e5d59cf4ea 100644
--- a/mk/bsd.pkg.mk
+++ b/mk/bsd.pkg.mk
@@ -1,4 +1,4 @@
-#	$NetBSD: bsd.pkg.mk,v 1.566 2000/09/07 15:26:52 fredb Exp $
+#	$NetBSD: bsd.pkg.mk,v 1.567 2000/09/09 18:45:16 fredb Exp $
 #
 # This file is in the public domain.
 #
@@ -20,6 +20,9 @@
 ##### Include any preferences, if not already included, and common definitions
 .include "../../mk/bsd.prefs.mk"
 
+##### Build crypto packages by default.
+MKCRYPTO?=		yes
+
 ##### Some overrides of defaults below on a per-OS basis.
 .if (${OPSYS} == "NetBSD")
 LOCALBASE?=		${DESTDIR}/usr/pkg
@@ -967,6 +970,9 @@ ACCEPTABLE_LICENSES=	${ACCEPTABLE_LICENCES}
 # Don't build a package if it's restricted and we don't want to
 # get into that.
 #
+# Don't build any package that utilizes strong cryptography, for
+# when the law of the land forbids it.
+#
 # Don't attempt to build packages against X if we don't have X.
 #
 # Don't build a package if it's broken.
@@ -991,6 +997,11 @@ IGNORE+= "${PKGNAME} may not be placed in source form on a CDROM:" \
 IGNORE+= "${PKGNAME} is restricted:" \
 	 "    "${RESTRICTED:Q}
 .endif
+.if !(${MKCRYPTO} == "YES" || ${MKCRYPTO} == yes)
+.  if (defined(CRYPTO) || defined(USE_SSL))
+IGNORE+= "${PKGNAME} may not be built, because it utilizes strong cryptography"
+.  endif
+.endif
 .if ((defined(USE_IMAKE) || defined(USE_MOTIF) || \
 	defined(USE_X11BASE) || defined(USE_X11)) && \
        !exists(${X11BASE}))
diff --git a/mk/mk.conf.example b/mk/mk.conf.example
index a86df992404..0a1090a1a3f 100644
--- a/mk/mk.conf.example
+++ b/mk/mk.conf.example
@@ -1,4 +1,4 @@
-# $NetBSD: mk.conf.example,v 1.153 2000/09/09 16:34:44 veego Exp $
+# $NetBSD: mk.conf.example,v 1.154 2000/09/09 18:45:16 fredb Exp $
 #
 
 # Sample /etc/mk.conf file, which can be used to set specific values
@@ -30,6 +30,11 @@
 # Possible: defined, not defined
 # Default: not defined
 
+#MKCRYPTO= no
+# If not YES or yes, don't fetch, build or install crypto packages.
+# Possible: not defined, no
+# Default: yes
+
 #OBJMACHINE=
 # use machine-specific object directories, e.g.  work.i386, work.sparc
 # Possible: defined, not defined
-- 
cgit v1.2.3