From owner-svn-ports-all@freebsd.org Mon Sep 14 20:34:29 2020 Return-Path: Delivered-To: svn-ports-all@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 830D13E2046; Mon, 14 Sep 2020 20:34:29 +0000 (UTC) (envelope-from lwhsu@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Bqyl80K4Yz4KQZ; Mon, 14 Sep 2020 20:34:27 +0000 (UTC) (envelope-from lwhsu@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 965EC1CAD6; Mon, 14 Sep 2020 20:34:27 +0000 (UTC) (envelope-from lwhsu@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id 08EKYRMi016244; Mon, 14 Sep 2020 20:34:27 GMT (envelope-from lwhsu@FreeBSD.org) Received: (from lwhsu@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id 08EKYQAl016238; Mon, 14 Sep 2020 20:34:26 GMT (envelope-from lwhsu@FreeBSD.org) Message-Id: <202009142034.08EKYQAl016238@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: lwhsu set sender to lwhsu@FreeBSD.org using -f From: Li-Wen Hsu Date: Mon, 14 Sep 2020 20:34:26 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r548683 - in head/security: . pam_pkcs11 pam_pkcs11/files X-SVN-Group: ports-head X-SVN-Commit-Author: lwhsu X-SVN-Commit-Paths: in head/security: . pam_pkcs11 pam_pkcs11/files X-SVN-Commit-Revision: 548683 X-SVN-Commit-Repository: ports MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Sep 2020 20:34:29 -0000 Author: lwhsu Date: Mon Sep 14 20:34:26 2020 New Revision: 548683 URL: https://svnweb.freebsd.org/changeset/ports/548683 Log: Add security/pam_pkcs11, PAM module using crypto tokens for auth Submitted by: Ka Ho Ng Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D26419 Added: head/security/pam_pkcs11/ head/security/pam_pkcs11/Makefile (contents, props changed) head/security/pam_pkcs11/distinfo (contents, props changed) head/security/pam_pkcs11/files/ head/security/pam_pkcs11/files/pkg-message.in (contents, props changed) head/security/pam_pkcs11/pkg-descr (contents, props changed) head/security/pam_pkcs11/pkg-plist (contents, props changed) Modified: head/security/Makefile Modified: head/security/Makefile ============================================================================== --- head/security/Makefile Mon Sep 14 20:34:21 2020 (r548682) +++ head/security/Makefile Mon Sep 14 20:34:26 2020 (r548683) @@ -720,6 +720,7 @@ SUBDIR += pam_mkhomedir SUBDIR += pam_ocra SUBDIR += pam_p11 + SUBDIR += pam_pkcs11 SUBDIR += pam_pwdfile SUBDIR += pam_require SUBDIR += pam_script Added: head/security/pam_pkcs11/Makefile ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/security/pam_pkcs11/Makefile Mon Sep 14 20:34:26 2020 (r548683) @@ -0,0 +1,100 @@ +# Created by: Ka Ho Ng +# $FreeBSD$ + +PORTNAME= pam_pkcs11 +PORTVERSION= 0.6.11 +CATEGORIES= security + +MAINTAINER= khng300@gmail.com +COMMENT= PAM module using crypto tokens for auth + +LICENSE= LGPL21 + +RUN_DEPENDS= bash:shells/bash + +USES= autoreconf gmake libtool pkgconfig shebangfix + +USE_GITHUB= yes +GH_ACCOUNT= OpenSC +GH_TAGNAME= ${PORTNAME}-${PORTVERSION} + +GNU_CONFIGURE= yes + +CONFIGURE_ARGS= --with-confdir=${ETCDIR} +CONFIGURE_ENV= OPENSSL_CFLAGS="-I${OPENSSLINC}" \ + OPENSSL_LIBS="-L${OPENSSLLIB} -lcrypto" + +SHEBANG_FILES= tools/pkcs11_make_hash_link + +SUB_FILES= pkg-message + +OPTIONS_DEFINE= CURL DEBUG DOCS LDAP NLS NSS PCSC SSL +OPTIONS_DEFAULT= PCSC SSL +OPTIONS_SUB= yes + +CURL_LIB_DEPENDS= libcurl.so:ftp/curl +CURL_CONFIGURE_WITH= curl + +LDAP_USE= OPENLDAP=yes +LDAP_CONFIGURE_WITH= ldap + +# Users can only choose either NSS or SSL +NSS_DESC= Enable Mozilla's NSS support +NSS_CONFIGURE_WITH= nss +NSS_LIB_DEPENDS= libnss3.so:security/nss \ + libnspr4.so:devel/nspr +NSS_PREVENTS= SSL + +PCSC_DESC= Enable PC/SC support +PCSC_LIB_DEPENDS= libpcsclite.so:devel/pcsc-lite +PCSC_CONFIGURE_WITH= pcsclite + +SSL_USES= ssl + +NLS_CONFIGURE_ENABLE= nls +NLS_USES= gettext + +DOCS_CONFIGURE_ENABLE= doc + +PORTDOCS= * + +PAM_PKCS11_EXAMPLEDOCS= \ + etc/card_eventmgr.conf.example \ + etc/digest_mapping.example \ + etc/mail_mapping.example \ + etc/pam.d_login.example.in \ + etc/pam_pkcs11.conf.example.in \ + etc/pkcs11_eventmgr.conf.example \ + etc/subject_mapping.example + +.include + +.if ! ${PORT_OPTIONS:MDEBUG} +INSTALL_TARGET= install-strip +.else +CONFIGURE_ARGS+= --with-debug=yes +.endif + +.if ${PORT_OPTIONS:MDOCS} +BUILD_DEPENDS+= xsltproc:textproc/libxslt \ + ${LOCALBASE}/share/xsl/docbook/html/docbook.xsl:textproc/docbook-xsl +CONFIGURE_ENV+= XSLTPROC="${LOCALBASE}/bin/xsltproc" +CONFIGURE_ARGS+=--with-xsl-stylesheetsdir=${LOCALBASE}/share/xsl/docbook +.else +CONFIGURE_ENV+= XSLTPROC="${FALSE}" +CONFIGURE_ARGS+=--without-xsl-stylesheetsdir +.endif + +post-patch: +.for f in ${PAM_PKCS11_EXAMPLEDOCS} + @${REINPLACE_CMD} -e 's|/etc/${PORTNAME}|${ETCDIR}|g' \ + -e 's|file:///etc/${PORTNAME}/|file://${ETCDIR}/|g' \ + -e 's|/usr/lib|${PREFIX}/lib|g' \ + -e 's|/usr/share|${PREFIX}/share|g' \ + ${WRKSRC}/${f} +.endfor + +pre-configure: + @(cd ${WRKSRC} && ./bootstrap) + +.include Added: head/security/pam_pkcs11/distinfo ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/security/pam_pkcs11/distinfo Mon Sep 14 20:34:26 2020 (r548683) @@ -0,0 +1,3 @@ +TIMESTAMP = 1599929612 +SHA256 (OpenSC-pam_pkcs11-0.6.11-pam_pkcs11-0.6.11_GH0.tar.gz) = 6674ec488757ce6dc6768ebdb215d3b92897702517f182decfb222d03a98461b +SIZE (OpenSC-pam_pkcs11-0.6.11-pam_pkcs11-0.6.11_GH0.tar.gz) = 271552 Added: head/security/pam_pkcs11/files/pkg-message.in ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/security/pam_pkcs11/files/pkg-message.in Mon Sep 14 20:34:26 2020 (r548683) @@ -0,0 +1,8 @@ +[ +{ type: install + message: <