openssh: Unregister the KEXINIT handler after message has been
[feed/packages.git] / net / openssh / Makefile
1 #
2 # Copyright (C) 2006-2014 OpenWrt.org
3 #
4 # This is free software, licensed under the GNU General Public License v2.
5 # See /LICENSE for more information.
6 #
7
8 include $(TOPDIR)/rules.mk
9
10 PKG_NAME:=openssh
11 PKG_VERSION:=7.3p1
12 PKG_RELEASE:=3
13
14 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
15 PKG_SOURCE_URL:=http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/ \
16 http://ftp.belnet.be/pub/OpenBSD/OpenSSH/portable/
17 PKG_MD5SUM:=dfadd9f035d38ce5d58a3bf130b86d08
18
19 PKG_LICENSE:=BSD ISC
20 PKG_LICENSE_FILES:=LICENCE
21
22
23 PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)
24
25 PKG_BUILD_DEPENDS:=libopenssl
26
27 include $(INCLUDE_DIR)/package.mk
28
29 define Package/openssh/Default
30 SECTION:=net
31 CATEGORY:=Network
32 DEPENDS:=+libopenssl +zlib
33 TITLE:=OpenSSH
34 MAINTAINER:=Peter Wagner <tripolar@gmx.at>
35 URL:=http://www.openssh.com/
36 SUBMENU:=SSH
37 VARIANT:=without-pam
38 endef
39
40 define Package/openssh-moduli
41 $(call Package/openssh/Default)
42 DEPENDS+= +openssh-keygen
43 TITLE+= moduli file
44 endef
45
46 define Package/openssh-moduli/description
47 OpenSSH server moduli file.
48 endef
49
50 define Package/openssh-client
51 $(call Package/openssh/Default)
52 TITLE+= client
53 endef
54
55 define Package/openssh-client/description
56 OpenSSH client.
57 endef
58
59 define Package/openssh-client/conffiles
60 /etc/ssh/ssh_config
61 endef
62
63 define Package/openssh-client-utils
64 $(call Package/openssh/Default)
65 DEPENDS+= +openssh-client +openssh-keygen
66 TITLE+= client utilities
67 endef
68
69 define Package/openssh-client-utils/description
70 OpenSSH client utilities.
71 endef
72
73 define Package/openssh-keygen
74 $(call Package/openssh/Default)
75 TITLE+= keygen
76 endef
77
78 define Package/openssh-keygen/description
79 OpenSSH keygen.
80 endef
81
82 define Package/openssh-server
83 $(call Package/openssh/Default)
84 DEPENDS+= +openssh-keygen
85 TITLE+= server
86 USERID:=sshd=22:sshd=22
87 endef
88
89 define Package/openssh-server/description
90 OpenSSH server.
91 endef
92
93 define Package/openssh-server/conffiles
94 /etc/ssh/sshd_config
95 endef
96
97 define Package/openssh-server-pam
98 $(call Package/openssh/Default)
99 DEPENDS+= +libpthread +openssh-keygen +libpam
100 TITLE+= server (with PAM support)
101 VARIANT:=with-pam
102 USERID:=sshd=22:sshd=22
103 endef
104
105 define Package/openssh-server-pam/description
106 OpenSSH server (with PAM support).
107 endef
108
109 define Package/openssh-server-pam/conffiles
110 /etc/pam.d/sshd
111 /etc/security/access-sshd-local.conf
112 /etc/ssh/sshd_config
113 endef
114
115 define Package/openssh-sftp-client
116 $(call Package/openssh/Default)
117 TITLE+= SFTP client
118 endef
119
120 define Package/openssh-sftp-client/description
121 OpenSSH SFTP client.
122 endef
123
124 define Package/openssh-sftp-server
125 $(call Package/openssh/Default)
126 TITLE+= SFTP server
127 # Strip dependencies to avoid pulling in OpenSSL etc.
128 DEPENDS:=
129 endef
130
131 define Package/openssh-sftp-server/description
132 OpenSSH SFTP server.
133 endef
134
135 define Package/openssh-sftp-avahi-service
136 $(call Package/openssh/Default)
137 TITLE+= (SFTP Avahi service)
138 DEPENDS:=+openssh-sftp-server +avahi-daemon
139 endef
140
141 define Package/openssh-sftp-avahi-service/description
142 This package contains the service definition for announcing
143 SFTP support via mDNS/DNS-SD.
144 endef
145
146 define Package/openssh-sftp-avahi-service/conffiles
147 /etc/avahi/services/sftp-ssh.service
148 endef
149
150 CONFIGURE_ARGS+= \
151 $(DISABLE_NLS) \
152 --sysconfdir=/etc/ssh \
153 --with-privsep-user=sshd \
154 --with-privsep-path=/var/empty \
155 --enable-shared \
156 --disable-static \
157 --disable-debug \
158 --disable-strip \
159 --disable-etc-default-login \
160 --disable-lastlog \
161 --disable-utmp \
162 --disable-utmpx \
163 --disable-wtmp \
164 --disable-wtmpx \
165 --without-bsd-auth \
166 --without-kerberos5 \
167 --without-x
168
169 ifeq ($(BUILD_VARIANT),with-pam)
170 CONFIGURE_ARGS += \
171 --with-pam
172 else
173 CONFIGURE_ARGS += \
174 --without-pam
175 endif
176
177 ifeq ($(CONFIG_OPENSSL_ENGINE),y)
178 CONFIGURE_ARGS+= \
179 --with-ssl-engine
180 endif
181
182 ifneq ($(CONFIG_SSP_SUPPORT),y)
183 CONFIGURE_ARGS += \
184 --without-stackprotect
185 endif
186
187 CONFIGURE_VARS += LD="$(TARGET_CC)"
188
189 ifeq ($(BUILD_VARIANT),with-pam)
190 TARGET_LDFLAGS += -lpthread
191 endif
192
193 define Build/Compile
194 $(MAKE) -C $(PKG_BUILD_DIR) \
195 DESTDIR="$(PKG_INSTALL_DIR)" \
196 LIBS="" \
197 sftp-server
198 $(MAKE) -C $(PKG_BUILD_DIR) \
199 DESTDIR="$(PKG_INSTALL_DIR)" \
200 STRIP_OPT="" \
201 all install
202 endef
203
204 define Package/openssh-client/preinst
205 #!/bin/sh
206 if [ -L $${IPKG_INSTROOT}/usr/bin/ssh ] && [ -L $${IPKG_INSTROOT}/usr/bin/scp ]; then
207 rm -f $${IPKG_INSTROOT}/usr/bin/ssh $${IPKG_INSTROOT}/usr/bin/scp;
208 fi
209 exit 0
210 endef
211
212 define Package/openssh-client/postrm
213 #!/bin/sh
214 rm -f $${IPKG_INSTROOT}/usr/bin/ssh $${IPKG_INSTROOT}/usr/bin/scp;
215 if [ -x $${IPKG_INSTROOT}/usr/sbin/dropbear ] ; then
216 ln -s /usr/sbin/dropbear $${IPKG_INSTROOT}/usr/bin/ssh;
217 ln -s /usr/sbin/dropbear $${IPKG_INSTROOT}/usr/bin/scp;
218 fi
219 exit 0
220 endef
221
222 define Package/openssh-moduli/install
223 $(INSTALL_DIR) $(1)/etc/ssh
224 $(INSTALL_DATA) $(PKG_INSTALL_DIR)/etc/ssh/moduli $(1)/etc/ssh/
225 endef
226
227 define Package/openssh-client/install
228 $(INSTALL_DIR) $(1)/etc/ssh
229 chmod 0700 $(1)/etc/ssh
230 $(CP) $(PKG_INSTALL_DIR)/etc/ssh/ssh_config $(1)/etc/ssh/
231 $(INSTALL_DIR) $(1)/usr/bin
232 $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/ssh $(1)/usr/bin/
233 $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/scp $(1)/usr/bin/
234 endef
235
236 define Package/openssh-client-utils/install
237 $(INSTALL_DIR) $(1)/usr/bin
238 $(INSTALL_BIN) $(foreach bin,add agent keyscan keysign,$(PKG_BUILD_DIR)/ssh-$(bin)) $(1)/usr/bin/
239 endef
240
241 define Package/openssh-keygen/install
242 $(INSTALL_DIR) $(1)/usr/bin
243 $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/ssh-keygen $(1)/usr/bin/
244 endef
245
246 define Package/openssh-server/install
247 $(INSTALL_DIR) $(1)/etc/ssh
248 chmod 0700 $(1)/etc/ssh
249 $(INSTALL_DATA) $(PKG_INSTALL_DIR)/etc/ssh/sshd_config $(1)/etc/ssh/
250 $(INSTALL_DIR) $(1)/etc/init.d
251 $(INSTALL_BIN) ./files/sshd.init $(1)/etc/init.d/sshd
252 $(INSTALL_DIR) $(1)/usr/sbin
253 $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/sshd $(1)/usr/sbin/
254 endef
255
256 define Package/openssh-server-pam/install
257 $(call Package/openssh-server/install,$(1))
258 sed -i 's,#PasswordAuthentication yes,PasswordAuthentication no,g' $(1)/etc/ssh/sshd_config
259 sed -i 's,#UsePAM no,UsePAM yes,g' $(1)/etc/ssh/sshd_config
260 $(INSTALL_DIR) $(1)/etc/pam.d
261 $(INSTALL_DATA) ./files/sshd.pam $(1)/etc/pam.d/sshd
262 $(INSTALL_DIR) $(1)/etc/security
263 $(INSTALL_DATA) ./files/sshd.pam-access $(1)/etc/security/access-sshd-local.conf
264 endef
265
266 define Package/openssh-sftp-client/install
267 $(INSTALL_DIR) $(1)/usr/bin
268 $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/sftp $(1)/usr/bin/
269 endef
270
271 define Package/openssh-sftp-server/install
272 $(INSTALL_DIR) $(1)/usr/lib
273 $(CP) $(PKG_INSTALL_DIR)/usr/lib/sftp-server $(1)/usr/lib/
274 $(INSTALL_DIR) $(1)/usr/libexec
275 ln -sf ../lib/sftp-server $(1)/usr/libexec/sftp-server
276 endef
277
278 define Package/openssh-sftp-avahi-service/install
279 $(INSTALL_DIR) $(1)/etc/avahi/services
280 $(INSTALL_DATA) ./files/sftp-ssh.service $(1)/etc/avahi/services/
281 endef
282
283 $(eval $(call BuildPackage,openssh-client))
284 $(eval $(call BuildPackage,openssh-moduli))
285 $(eval $(call BuildPackage,openssh-client-utils))
286 $(eval $(call BuildPackage,openssh-keygen))
287 $(eval $(call BuildPackage,openssh-server))
288 $(eval $(call BuildPackage,openssh-server-pam))
289 $(eval $(call BuildPackage,openssh-sftp-client))
290 $(eval $(call BuildPackage,openssh-sftp-server))
291 $(eval $(call BuildPackage,openssh-sftp-avahi-service))