svn commit: r310340 - in head: . security/easy-rsa security/openvpn

Sun Jan 13 21:35:07 UTC 2013

Author: mandree
Date: Sun Jan 13 21:35:06 2013
New Revision: 310340
URL: http://svnweb.freebsd.org/changeset/ports/310340

Log:
  Add a new security/easy-rsa package that contains the bits that got
  split out of OpenVPN prior to the current 2.3.0 release, and make that
  security/openvpn RUN_DEPENDS on it. Also update UPDATING record.

Added:
  head/security/easy-rsa/
  head/security/easy-rsa/Makefile   (contents, props changed)
  head/security/easy-rsa/distinfo   (contents, props changed)
  head/security/easy-rsa/pkg-descr   (contents, props changed)
  head/security/easy-rsa/pkg-plist   (contents, props changed)
Modified:
  head/UPDATING
  head/security/openvpn/Makefile

Modified: head/UPDATING
==============================================================================

--- head/UPDATING	Sun Jan 13 21:29:57 2013	(r310339)
+++ head/UPDATING	Sun Jan 13 21:35:06 2013	(r310340)
@@ -5,12 +5,14 @@ they are unavoidable.
 You should get into the habit of checking this file for changes each time
 you update your ports collection, before attempting any port upgrades.
 
-20130111:
+20130113:
   AFFECTS: users of security/openvpn*
   AUTHOR: mandree at FreeBSD.org
 
   security/openvpn has been upgraded to the IPv6-capable v2.3.0.
-  This upgrade removes easy-rsa, and changes installed file layout a bit.
+  This upgrade moves easy-rsa into a separate package in
+  security/easy-rsa that is pre-selected as default run-time dependency,
+  and changes installed file layout a bit.
 
   security/openvpn22 retains the prior OpenVPN 2.2.2 version.
   If you want to continue using this version, use one of these commands:

Added: head/security/easy-rsa/Makefile
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/security/easy-rsa/Makefile	Sun Jan 13 21:35:06 2013	(r310340)
@@ -0,0 +1,18 @@
+# $FreeBSD$
+
+PORTNAME=	easy-rsa
+DISTVERSION=	2.2.0_master
+CATEGORIES=	security net-mgmt
+MASTER_SITES=	http://swupdate.openvpn.net/community/releases/ \
+		http://build.openvpn.net/downloads/releases/
+
+# Eric F. Crist <ecrist at secure-computing.net> does not require my
+# approval for changes to this package. -- mandree at FreeBSD.org
+MAINTAINER=	mandree at FreeBSD.org
+COMMENT=	A small RSA key management package based on openssl
+
+LICENSE=	GPLv2
+
+GNU_CONFIGURE=	yes
+
+.include <bsd.port.mk>

Added: head/security/easy-rsa/distinfo
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/security/easy-rsa/distinfo	Sun Jan 13 21:35:06 2013	(r310340)
@@ -0,0 +1,2 @@
+SHA256 (easy-rsa-2.2.0_master.tar.gz) = d23ddc3a764b40d03ada76f387c92ae4dcf4f5266da54c2bae130325b05eebe2
+SIZE (easy-rsa-2.2.0_master.tar.gz) = 80460

Added: head/security/easy-rsa/pkg-descr
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/security/easy-rsa/pkg-descr	Sun Jan 13 21:35:06 2013	(r310340)
@@ -0,0 +1,7 @@
+Easy-RSA is a small RSA key management package, based on the openssl
+command line tool, that can be found in the easy-rsa subdirectory of the
+OpenVPN distribution.  While this tool is primary concerned with key
+management for the SSL VPN application space, it can also be used for
+building web certificates.
+
+WWW: https://community.openvpn.net/openvpn/wiki/GettingEasyRsa

Added: head/security/easy-rsa/pkg-plist
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/security/easy-rsa/pkg-plist	Sun Jan 13 21:35:06 2013	(r310340)
@@ -0,0 +1,25 @@
+%%DOCSDIR%%/README-2.0
+%%DOCSDIR%%/COPYRIGHT.GPL
+%%DOCSDIR%%/COPYING
+share/easy-rsa/build-ca
+share/easy-rsa/vars
+share/easy-rsa/sign-req
+share/easy-rsa/revoke-full
+share/easy-rsa/pkitool
+share/easy-rsa/openssl-1.0.0.cnf
+share/easy-rsa/openssl-0.9.8.cnf
+share/easy-rsa/openssl-0.9.6.cnf
+share/easy-rsa/list-crl
+share/easy-rsa/inherit-inter
+share/easy-rsa/clean-all
+share/easy-rsa/build-req-pass
+share/easy-rsa/build-req
+share/easy-rsa/build-key-server
+share/easy-rsa/build-key-pkcs12
+share/easy-rsa/build-key-pass
+share/easy-rsa/build-key
+share/easy-rsa/build-inter
+share/easy-rsa/build-dh
+share/easy-rsa/whichopensslcnf
+ at dirrm share/easy-rsa
+ at dirrm %%DOCSDIR%%

Modified: head/security/openvpn/Makefile
==============================================================================
--- head/security/openvpn/Makefile	Sun Jan 13 21:29:57 2013	(r310339)
+++ head/security/openvpn/Makefile	Sun Jan 13 21:35:06 2013	(r310340)
@@ -3,11 +3,10 @@
 
 PORTNAME=	openvpn
 DISTVERSION=	2.3.0
+PORTREVISION=	1
 CATEGORIES=	security net
-# MASTER_SITES points to hosts in distinct data centers,
-# so just one MASTER_SITES entry should be OK.
 MASTER_SITES=	http://swupdate.openvpn.net/community/releases/ \
-		${MASTER_SITE_LOCAL:S,$,mandree/,}
+		http://build.openvpn.net/downloads/releases/
 
 MAINTAINER=	mandree at FreeBSD.org
 COMMENT=	Secure IP/Ethernet tunnel daemon
@@ -24,9 +23,11 @@ CPPFLAGS+=	-I${LOCALBASE}/include
 LDFLAGS+=	-L${LOCALBASE}/lib
 
 # PolarSSL missing: OpenVPN does not currently compile with PolarSSL 1.2.0+
-OPTIONS_DEFINE=		PW_SAVE PKCS11
+OPTIONS_DEFINE=		PW_SAVE PKCS11 EASYRSA
+OPTIONS_DEFAULT=	EASYRSA
 PW_SAVE_DESC=	Interactive passwords may be read from a file
 PKCS11_DESC=	Use security/pkcs11-helper
+EASYRSA_DESC=	Install security/easy-rsa RSA helper package
 
 .include <bsd.port.options.mk>
 
@@ -36,6 +37,10 @@ INSTALL_TARGET=	install
 INSTALL_TARGET=	install-exec install-man
 .endif
 
+.if ${PORT_OPTIONS:MEASYRSA}
+RUN_DEPENDS+=	easy-rsa>=0:${PORTSDIR}/security/easy-rsa
+.endif
+
 INSTALL_TARGET+=	mandir=${MANPREFIX}/man
 MAN8=		openvpn.8
 
