dropbear: allow disabling support for scp
[openwrt/staging/jow.git] / package / network / services / dropbear / Makefile
1 #
2 # Copyright (C) 2006-2016 OpenWrt.org
3 #
4 # This is free software, licensed under the GNU General Public License v2.
5 # See /LICENSE for more information.
6 #
7
8 include $(TOPDIR)/rules.mk
9
10 PKG_NAME:=dropbear
11 PKG_VERSION:=2020.80
12 PKG_RELEASE:=2
13
14 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
15 PKG_SOURCE_URL:= \
16 http://matt.ucc.asn.au/dropbear/releases/ \
17 https://dropbear.nl/mirror/releases/
18 PKG_HASH:=d927941b91f2da150b2033f1a88b6a47999bf0afb1493a73e9216cffdb5d7949
19
20 PKG_LICENSE:=MIT
21 PKG_LICENSE_FILES:=LICENSE libtomcrypt/LICENSE libtommath/LICENSE
22 PKG_CPE_ID:=cpe:/a:matt_johnston:dropbear_ssh_server
23
24 PKG_BUILD_PARALLEL:=1
25 PKG_ASLR_PIE_REGULAR:=1
26 PKG_USE_MIPS16:=0
27 PKG_FIXUP:=autoreconf
28
29 PKG_CONFIG_DEPENDS:= \
30 CONFIG_TARGET_INIT_PATH CONFIG_DROPBEAR_ECC CONFIG_DROPBEAR_ECC_FULL \
31 CONFIG_DROPBEAR_CURVE25519 CONFIG_DROPBEAR_ZLIB \
32 CONFIG_DROPBEAR_ED25519 CONFIG_DROPBEAR_CHACHA20POLY1305 \
33 CONFIG_DROPBEAR_UTMP CONFIG_DROPBEAR_PUTUTLINE \
34 CONFIG_DROPBEAR_DBCLIENT CONFIG_DROPBEAR_SCP
35
36 include $(INCLUDE_DIR)/package.mk
37
38 ifneq ($(DUMP),1)
39 STAMP_CONFIGURED:=$(strip $(STAMP_CONFIGURED))_$(shell echo $(CONFIG_TARGET_INIT_PATH) | mkhash md5)
40 endif
41
42 define Package/dropbear/Default
43 URL:=http://matt.ucc.asn.au/dropbear/
44 endef
45
46 define Package/dropbear/config
47 source "$(SOURCE)/Config.in"
48 endef
49
50 define Package/dropbear
51 $(call Package/dropbear/Default)
52 SECTION:=net
53 CATEGORY:=Base system
54 TITLE:=Small SSH2 client/server
55 DEPENDS:= +DROPBEAR_ZLIB:zlib
56 ALTERNATIVES:=
57 $(if $(CONFIG_DROPBEAR_SCP),ALTERNATIVES+= \
58 100:/usr/bin/scp:/usr/sbin/dropbear,)
59 $(if $(CONFIG_DROPBEAR_DBCLIENT),ALTERNATIVES+= \
60 100:/usr/bin/ssh:/usr/sbin/dropbear,)
61
62 endef
63
64 define Package/dropbear/description
65 A small SSH2 server/client designed for small memory environments.
66 endef
67
68 define Package/dropbear/conffiles
69 $(if $(CONFIG_DROPBEAR_ED25519),/etc/dropbear/dropbear_ed25519_host_key)
70 $(if $(CONFIG_DROPBEAR_ECC),/etc/dropbear/dropbear_ecdsa_host_key)
71 /etc/dropbear/dropbear_rsa_host_key
72 /etc/config/dropbear
73 endef
74
75 define Package/dropbearconvert
76 $(call Package/dropbear/Default)
77 SECTION:=utils
78 CATEGORY:=Utilities
79 TITLE:=Utility for converting SSH keys
80 DEPENDS:= +DROPBEAR_ZLIB:zlib
81 endef
82
83 CONFIGURE_ARGS += \
84 --disable-pam \
85 --enable-openpty \
86 --enable-syslog \
87 --disable-lastlog \
88 --disable-utmpx \
89 $(if $(CONFIG_DROPBEAR_UTMP),,--disable-utmp) \
90 --disable-wtmp \
91 --disable-wtmpx \
92 --disable-loginfunc \
93 $(if $(CONFIG_DROPBEAR_PUTUTLINE),,--disable-pututline) \
94 --disable-pututxline \
95 $(if $(CONFIG_DROPBEAR_ZLIB),,--disable-zlib) \
96 --enable-bundled-libtom
97
98 TARGET_CFLAGS += -DARGTYPE=3 -ffunction-sections -fdata-sections -flto
99 TARGET_LDFLAGS += -Wl,--gc-sections -flto=jobserver
100
101 define Build/Configure
102 : > $(PKG_BUILD_DIR)/localoptions.h
103
104 $(Build/Configure/Default)
105
106 echo '#define DEFAULT_PATH "$(TARGET_INIT_PATH)"' >> \
107 $(PKG_BUILD_DIR)/localoptions.h
108
109 echo '#define DROPBEAR_CURVE25519 $(if $(CONFIG_DROPBEAR_CURVE25519),1,0)' >> \
110 $(PKG_BUILD_DIR)/localoptions.h
111
112 for OPTION in DROPBEAR_ECDSA DROPBEAR_ECDH; do \
113 echo "#define $$$$OPTION $(if $(CONFIG_DROPBEAR_ECC),1,0)" >> \
114 $(PKG_BUILD_DIR)/localoptions.h; \
115 done
116
117 echo '#define DROPBEAR_ED25519 $(if $(CONFIG_DROPBEAR_ED25519),1,0)' >> \
118 $(PKG_BUILD_DIR)/localoptions.h
119
120 echo '#define DROPBEAR_CHACHA20POLY1305 $(if $(CONFIG_DROPBEAR_CHACHA20POLY1305),1,0)' >> \
121 $(PKG_BUILD_DIR)/localoptions.h
122
123 # remove protocol idented software version number
124 $(ESED) 's,^(#define LOCAL_IDENT) .*$$$$,\1 "SSH-2.0-dropbear",g' \
125 $(PKG_BUILD_DIR)/sysoptions.h
126
127 # disable legacy/unsafe methods and unused functionality
128 for OPTION in INETD_MODE DROPBEAR_CLI_NETCAT \
129 DROPBEAR_DSS DROPBEAR_USE_PASSWORD_ENV DO_MOTD ; do \
130 echo "#define $$$$OPTION 0" >> \
131 $(PKG_BUILD_DIR)/localoptions.h; \
132 done
133
134 # enable nistp384 and nistp521 only if full ECC support was requested
135 for OPTION in DROPBEAR_ECC_384 DROPBEAR_ECC_521; do \
136 $(ESED) 's,^(#define '$$$$OPTION') .*$$$$,\1 $(if $(CONFIG_DROPBEAR_ECC_FULL),1,0),g' \
137 $(PKG_BUILD_DIR)/sysoptions.h; \
138 done
139
140 # Enforce rebuild of svr-chansession.c
141 rm -f $(PKG_BUILD_DIR)/svr-chansession.o
142
143 # Rebuild them on config change
144 +$(MAKE) -C $(PKG_BUILD_DIR)/libtomcrypt clean
145 +$(MAKE) -C $(PKG_BUILD_DIR)/libtommath clean
146 endef
147
148 define Build/Compile
149 +$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
150 $(TARGET_CONFIGURE_OPTS) \
151 PROGRAMS="dropbear $(if $(CONFIG_DROPBEAR_DBCLIENT),dbclient,) dropbearkey $(if $(CONFIG_DROPBEAR_SCP),scp,)" \
152 MULTI=1 SCPPROGRESS=1
153 +$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
154 $(TARGET_CONFIGURE_OPTS) \
155 PROGRAMS="dropbearconvert"
156 endef
157
158 define Package/dropbear/install
159 $(INSTALL_DIR) $(1)/usr/sbin
160 $(INSTALL_BIN) $(PKG_BUILD_DIR)/dropbearmulti $(1)/usr/sbin/dropbear
161 $(INSTALL_DIR) $(1)/usr/bin
162 $(if $(CONFIG_DROPBEAR_DBCLIENT),$(LN) ../sbin/dropbear $(1)/usr/bin/dbclient,)
163 $(LN) ../sbin/dropbear $(1)/usr/bin/dropbearkey
164 $(INSTALL_DIR) $(1)/etc/config
165 $(INSTALL_CONF) ./files/dropbear.config $(1)/etc/config/dropbear
166 $(INSTALL_DIR) $(1)/etc/init.d
167 $(INSTALL_BIN) ./files/dropbear.init $(1)/etc/init.d/dropbear
168 $(INSTALL_DIR) $(1)/usr/lib/opkg/info
169 $(INSTALL_DIR) $(1)/etc/dropbear
170 $(INSTALL_DIR) $(1)/lib/preinit
171 $(INSTALL_DATA) ./files/dropbear.failsafe $(1)/lib/preinit/99_10_failsafe_dropbear
172 $(if $(CONFIG_DROPBEAR_ED25519),touch $(1)/etc/dropbear/dropbear_ed25519_host_key)
173 $(if $(CONFIG_DROPBEAR_ECC),touch $(1)/etc/dropbear/dropbear_ecdsa_host_key)
174 touch $(1)/etc/dropbear/dropbear_rsa_host_key
175 endef
176
177 define Package/dropbearconvert/install
178 $(INSTALL_DIR) $(1)/usr/bin
179 $(INSTALL_BIN) $(PKG_BUILD_DIR)/dropbearconvert $(1)/usr/bin/dropbearconvert
180 endef
181
182 $(eval $(call BuildPackage,dropbear))
183 $(eval $(call BuildPackage,dropbearconvert))