LILiK
/
openwrt-packages-dist
5
0
Fork 0
Code Issues 0 Pull Requests 0 Projects 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
9418 Commits
1 Branch
46 MiB
Tree: eede1a6d48
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'eede1a6d48'
${ noResults }
openwrt-packages-dist/net/stunnel/Makefile

86 lines
2.3 KiB
Raw Normal View History

stunnel: Bring it back at v5.10 From: Michael Haas <haas@computerlinguist.org> * init script no longer creates certificates (consider client mode as use case) * patches/010_fix_getnameinfo.patch: Fix getnameinfo signature * patches/011_disable_ssp_linking.patch: Disable -fstack-protector as it is not always available in OpenWRT * old patches (in oldpackages) no longer necessary * remove libwrap dependency * remove libpthread dependency * respect CONFIG_IPV6 * init script uses procd * sample stunnel.conf runs in client mode - prevents start failure, does not require cert Possible enhancement: automatically generate certificate as done in uhttpd. However, as client mode is a possible use case, I'd rather not. Additionally, stunnel may use several certs with user-defined locations and we can't easily set a cert location via command-line args. The package is based on https://sites.google.com/site/twisteroidambassador/openwrt/stunnel Signed-off-by: Michael Haas <haas@computerlinguist.org>
10 years ago
​
​
​
​
​
​
​
​
​
net/stunnel: Update to 5.44 Update stunnel to 5.44 * Disable FIPS Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
7 years ago
net/stunnel: add enabled config option Add an enabled option for the service section, so you could keep your configuration in place without apply this section on startup or service reload. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
7 years ago
stunnel: Bring it back at v5.10 From: Michael Haas <haas@computerlinguist.org> * init script no longer creates certificates (consider client mode as use case) * patches/010_fix_getnameinfo.patch: Fix getnameinfo signature * patches/011_disable_ssp_linking.patch: Disable -fstack-protector as it is not always available in OpenWRT * old patches (in oldpackages) no longer necessary * remove libwrap dependency * remove libpthread dependency * respect CONFIG_IPV6 * init script uses procd * sample stunnel.conf runs in client mode - prevents start failure, does not require cert Possible enhancement: automatically generate certificate as done in uhttpd. However, as client mode is a possible use case, I'd rather not. Additionally, stunnel may use several certs with user-defined locations and we can't easily set a cert location via command-line args. The package is based on https://sites.google.com/site/twisteroidambassador/openwrt/stunnel Signed-off-by: Michael Haas <haas@computerlinguist.org>
10 years ago
​
net/stunnel: add enabled config option Add an enabled option for the service section, so you could keep your configuration in place without apply this section on startup or service reload. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
7 years ago
​
stunnel: Bring it back at v5.10 From: Michael Haas <haas@computerlinguist.org> * init script no longer creates certificates (consider client mode as use case) * patches/010_fix_getnameinfo.patch: Fix getnameinfo signature * patches/011_disable_ssp_linking.patch: Disable -fstack-protector as it is not always available in OpenWRT * old patches (in oldpackages) no longer necessary * remove libwrap dependency * remove libpthread dependency * respect CONFIG_IPV6 * init script uses procd * sample stunnel.conf runs in client mode - prevents start failure, does not require cert Possible enhancement: automatically generate certificate as done in uhttpd. However, as client mode is a possible use case, I'd rather not. Additionally, stunnel may use several certs with user-defined locations and we can't easily set a cert location via command-line args. The package is based on https://sites.google.com/site/twisteroidambassador/openwrt/stunnel Signed-off-by: Michael Haas <haas@computerlinguist.org>
10 years ago
​
stunnel: Update to 5.36, use pthreads and SSP. Updates stunnel to 5.36, changes it from using forking to pthreads and enables SSP linking. Also changes maintainer to myself. Regarding pthreads vs forking, http://blog.haproxy.com/2011/09/16/benchmarking_ssl_performance/ SSP is short for Stack Smashing Protector and you can read about it here: http://wiki.osdev.org/Stack_Smashing_Protector Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
8 years ago
​
net/stunnel: Update to 5.41 Update stunnel to 5.41 Add main site as last resort mirror Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
8 years ago
​
stunnel: Bring it back at v5.10 From: Michael Haas <haas@computerlinguist.org> * init script no longer creates certificates (consider client mode as use case) * patches/010_fix_getnameinfo.patch: Fix getnameinfo signature * patches/011_disable_ssp_linking.patch: Disable -fstack-protector as it is not always available in OpenWRT * old patches (in oldpackages) no longer necessary * remove libwrap dependency * remove libpthread dependency * respect CONFIG_IPV6 * init script uses procd * sample stunnel.conf runs in client mode - prevents start failure, does not require cert Possible enhancement: automatically generate certificate as done in uhttpd. However, as client mode is a possible use case, I'd rather not. Additionally, stunnel may use several certs with user-defined locations and we can't easily set a cert location via command-line args. The package is based on https://sites.google.com/site/twisteroidambassador/openwrt/stunnel Signed-off-by: Michael Haas <haas@computerlinguist.org>
10 years ago
net/stunnel: Update to 5.44 Update stunnel to 5.44 * Disable FIPS Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
7 years ago
stunnel: Bring it back at v5.10 From: Michael Haas <haas@computerlinguist.org> * init script no longer creates certificates (consider client mode as use case) * patches/010_fix_getnameinfo.patch: Fix getnameinfo signature * patches/011_disable_ssp_linking.patch: Disable -fstack-protector as it is not always available in OpenWRT * old patches (in oldpackages) no longer necessary * remove libwrap dependency * remove libpthread dependency * respect CONFIG_IPV6 * init script uses procd * sample stunnel.conf runs in client mode - prevents start failure, does not require cert Possible enhancement: automatically generate certificate as done in uhttpd. However, as client mode is a possible use case, I'd rather not. Additionally, stunnel may use several certs with user-defined locations and we can't easily set a cert location via command-line args. The package is based on https://sites.google.com/site/twisteroidambassador/openwrt/stunnel Signed-off-by: Michael Haas <haas@computerlinguist.org>
10 years ago
​
net/stunnel: Update to 5.44 Update stunnel to 5.44 * Disable FIPS Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
7 years ago
stunnel: Bring it back at v5.10 From: Michael Haas <haas@computerlinguist.org> * init script no longer creates certificates (consider client mode as use case) * patches/010_fix_getnameinfo.patch: Fix getnameinfo signature * patches/011_disable_ssp_linking.patch: Disable -fstack-protector as it is not always available in OpenWRT * old patches (in oldpackages) no longer necessary * remove libwrap dependency * remove libpthread dependency * respect CONFIG_IPV6 * init script uses procd * sample stunnel.conf runs in client mode - prevents start failure, does not require cert Possible enhancement: automatically generate certificate as done in uhttpd. However, as client mode is a possible use case, I'd rather not. Additionally, stunnel may use several certs with user-defined locations and we can't easily set a cert location via command-line args. The package is based on https://sites.google.com/site/twisteroidambassador/openwrt/stunnel Signed-off-by: Michael Haas <haas@computerlinguist.org>
10 years ago
​
​
​
​
​
​
stunnel: Update to 5.36, use pthreads and SSP. Updates stunnel to 5.36, changes it from using forking to pthreads and enables SSP linking. Also changes maintainer to myself. Regarding pthreads vs forking, http://blog.haproxy.com/2011/09/16/benchmarking_ssl_performance/ SSP is short for Stack Smashing Protector and you can read about it here: http://wiki.osdev.org/Stack_Smashing_Protector Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
8 years ago
stunnel: Bring it back at v5.10 From: Michael Haas <haas@computerlinguist.org> * init script no longer creates certificates (consider client mode as use case) * patches/010_fix_getnameinfo.patch: Fix getnameinfo signature * patches/011_disable_ssp_linking.patch: Disable -fstack-protector as it is not always available in OpenWRT * old patches (in oldpackages) no longer necessary * remove libwrap dependency * remove libpthread dependency * respect CONFIG_IPV6 * init script uses procd * sample stunnel.conf runs in client mode - prevents start failure, does not require cert Possible enhancement: automatically generate certificate as done in uhttpd. However, as client mode is a possible use case, I'd rather not. Additionally, stunnel may use several certs with user-defined locations and we can't easily set a cert location via command-line args. The package is based on https://sites.google.com/site/twisteroidambassador/openwrt/stunnel Signed-off-by: Michael Haas <haas@computerlinguist.org>
10 years ago
​
​
​
​
​
​
​
​
​
​
​
​
​
net/stunnel: add uci config support Add uci config support. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
7 years ago
stunnel: Bring it back at v5.10 From: Michael Haas <haas@computerlinguist.org> * init script no longer creates certificates (consider client mode as use case) * patches/010_fix_getnameinfo.patch: Fix getnameinfo signature * patches/011_disable_ssp_linking.patch: Disable -fstack-protector as it is not always available in OpenWRT * old patches (in oldpackages) no longer necessary * remove libwrap dependency * remove libpthread dependency * respect CONFIG_IPV6 * init script uses procd * sample stunnel.conf runs in client mode - prevents start failure, does not require cert Possible enhancement: automatically generate certificate as done in uhttpd. However, as client mode is a possible use case, I'd rather not. Additionally, stunnel may use several certs with user-defined locations and we can't easily set a cert location via command-line args. The package is based on https://sites.google.com/site/twisteroidambassador/openwrt/stunnel Signed-off-by: Michael Haas <haas@computerlinguist.org>
10 years ago
​
​
​
​
stunnel: Update to 5.36, use pthreads and SSP. Updates stunnel to 5.36, changes it from using forking to pthreads and enables SSP linking. Also changes maintainer to myself. Regarding pthreads vs forking, http://blog.haproxy.com/2011/09/16/benchmarking_ssl_performance/ SSP is short for Stack Smashing Protector and you can read about it here: http://wiki.osdev.org/Stack_Smashing_Protector Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
8 years ago
stunnel: Bring it back at v5.10 From: Michael Haas <haas@computerlinguist.org> * init script no longer creates certificates (consider client mode as use case) * patches/010_fix_getnameinfo.patch: Fix getnameinfo signature * patches/011_disable_ssp_linking.patch: Disable -fstack-protector as it is not always available in OpenWRT * old patches (in oldpackages) no longer necessary * remove libwrap dependency * remove libpthread dependency * respect CONFIG_IPV6 * init script uses procd * sample stunnel.conf runs in client mode - prevents start failure, does not require cert Possible enhancement: automatically generate certificate as done in uhttpd. However, as client mode is a possible use case, I'd rather not. Additionally, stunnel may use several certs with user-defined locations and we can't easily set a cert location via command-line args. The package is based on https://sites.google.com/site/twisteroidambassador/openwrt/stunnel Signed-off-by: Michael Haas <haas@computerlinguist.org>
10 years ago
​
net/stunnel: Update to 5.44 Update stunnel to 5.44 * Disable FIPS Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
7 years ago
​
stunnel: Bring it back at v5.10 From: Michael Haas <haas@computerlinguist.org> * init script no longer creates certificates (consider client mode as use case) * patches/010_fix_getnameinfo.patch: Fix getnameinfo signature * patches/011_disable_ssp_linking.patch: Disable -fstack-protector as it is not always available in OpenWRT * old patches (in oldpackages) no longer necessary * remove libwrap dependency * remove libpthread dependency * respect CONFIG_IPV6 * init script uses procd * sample stunnel.conf runs in client mode - prevents start failure, does not require cert Possible enhancement: automatically generate certificate as done in uhttpd. However, as client mode is a possible use case, I'd rather not. Additionally, stunnel may use several certs with user-defined locations and we can't easily set a cert location via command-line args. The package is based on https://sites.google.com/site/twisteroidambassador/openwrt/stunnel Signed-off-by: Michael Haas <haas@computerlinguist.org>
10 years ago
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
net/stunnel: add uci config support Add uci config support. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
7 years ago
​
stunnel: Bring it back at v5.10 From: Michael Haas <haas@computerlinguist.org> * init script no longer creates certificates (consider client mode as use case) * patches/010_fix_getnameinfo.patch: Fix getnameinfo signature * patches/011_disable_ssp_linking.patch: Disable -fstack-protector as it is not always available in OpenWRT * old patches (in oldpackages) no longer necessary * remove libwrap dependency * remove libpthread dependency * respect CONFIG_IPV6 * init script uses procd * sample stunnel.conf runs in client mode - prevents start failure, does not require cert Possible enhancement: automatically generate certificate as done in uhttpd. However, as client mode is a possible use case, I'd rather not. Additionally, stunnel may use several certs with user-defined locations and we can't easily set a cert location via command-line args. The package is based on https://sites.google.com/site/twisteroidambassador/openwrt/stunnel Signed-off-by: Michael Haas <haas@computerlinguist.org>
10 years ago
​
​
 
  1. #

  2. # Copyright (C) 2006-2014 OpenWrt.org

  3. #

  4. # This is free software, licensed under the GNU General Public License v2.

  5. # See /LICENSE for more information.

  6. #

  7. 

  8. include $(TOPDIR)/rules.mk
  9. 

  10. PKG_NAME:=stunnel
  11. PKG_VERSION:=5.44
  12. PKG_RELEASE:=3
  13. 

  14. PKG_LICENSE:=GPL-2.0+
  15. PKG_MAINTAINER:=Daniel Engberg <daniel.engberg.lists@pyret.net> \

  16. 		Florian Eckert <fe@dev.tdt.de>
  17. PKG_LICENSE_FILES:=COPYING COPYRIGHT.GPL
  18. 

  19. PKG_SOURCE_URL:= \

  20. 	http://ftp.nluug.nl/pub/networking/stunnel/ \

  21. 	http://www.usenix.org.uk/mirrors/stunnel/ \

  22. 	https://www.stunnel.org/downloads/
  23. PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
  24. PKG_HASH:=990a325dbb47d77d88772dd02fbbd27d91b1fea3ece76c9ff4461eca93f12299
  25. 

  26. PKG_FIXUP:=autoreconf
  27. PKG_FIXUP:=patch-libtool
  28. PKG_INSTALL:=1
  29. 

  30. include $(INCLUDE_DIR)/package.mk
  31. 

  32. define Package/stunnel
  33.   SECTION:=net
  34.   CATEGORY:=Network
  35.   DEPENDS:=+libopenssl +zlib +libpthread
  36.   TITLE:=SSL TCP Wrapper
  37.   URL:=http://www.stunnel.org/
  38. endef
  39. 

  40. define Package/stunnel/description
  41. 	Stunnel is a program that allows you to encrypt arbitrary TCP
  42. 	connections inside SSL (Secure Sockets Layer) available on both Unix
  43. 	and Windows. Stunnel can allow you to secure non-SSL aware daemons and
  44. 	protocols (like POP, IMAP, LDAP, etc) by having Stunnel provide the
  45. 	encryption, requiring no changes to the daemon's code.
  46. endef
  47. 

  48. define Package/stunnel/conffiles
  49. /etc/stunnel/stunnel.conf
  50. /etc/config/stunnel
  51. endef
  52. 

  53. 

  54. CONFIGURE_ARGS+= \

  55. 	--with-random=/dev/urandom \

  56. 	--with-threads=pthread \

  57. 	--with-ssl=$(STAGING_DIR)/usr \

  58. 	--disable-libwrap \

  59. 	--disable-systemd \

  60. 	--disable-fips
  61. 

  62. ifeq ($(CONFIG_IPV6),n)
  63. CONFIGURE_ARGS+= \

  64. 	--disable-ipv6
  65. endif
  66. 

  67. define Build/Compile
  68. 	mkdir -p $(PKG_INSTALL_DIR)/etc/stunnel
  69. 	echo '#dummy' > $(PKG_INSTALL_DIR)/etc/stunnel/stunnel.pem
  70. 	$(call Build/Compile/Default)
  71. endef
  72. 

  73. define Package/stunnel/install
  74. 	$(INSTALL_DIR) $(1)/usr/bin
  75. 	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/stunnel $(1)/usr/bin/
  76. 	$(INSTALL_DIR) $(1)/usr/lib/stunnel
  77. 	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/stunnel/libstunnel.so $(1)/usr/lib/stunnel/
  78. 	$(INSTALL_DIR) $(1)/etc/stunnel
  79. 	$(INSTALL_CONF) ./files/stunnel.conf $(1)/etc/stunnel/stunnel.conf
  80. 	$(INSTALL_DIR) $(1)/etc/init.d
  81. 	$(INSTALL_BIN) ./files/stunnel.init $(1)/etc/init.d/stunnel
  82. 	$(INSTALL_DIR) $(1)/etc/config
  83. 	$(INSTALL_CONF) ./files/stunnel.uci $(1)/etc/config/stunnel
  84. endef
  85. 

  86. $(eval $(call BuildPackage,stunnel))