1 # Buildsheet autogenerated by ravenadm tool -- Do not edit.
7 SDESC[standard]= SSL/TLS offloading and load-balancing proxy
8 HOMEPAGE= https://www.stunnel.org/
12 SITES[main]= https://www.stunnel.org/downloads/archive/5.x/
13 DISTFILE[1]= stunnel-5.67.tar.gz:main
15 SPKGS[standard]= complete
20 OPTIONS_AVAILABLE= none
21 OPTIONS_STANDARD= none
25 USERGROUP_SPKG= primary
27 USES= cpe libtool perl:build shebangfix ssl:openssl10
29 LICENSE= GPLv2+:primary
30 LICENSE_TERMS= primary:{{WRKSRC}}/COPYING.md
31 LICENSE_FILE= GPLv2+:stock
34 FPC_EQUIVALENT= security/stunnel
35 SHEBANG_FILES= src/stunnel3.in
38 CONFIGURE_ARGS= --localstatedir=/var/tmp
41 --with-ssl="{{OPENSSLBASE}}"
42 --with-threads=pthread
46 INSTALL_TARGET= install-strip
47 RC_SUBR= stunnel:primary
52 # place files under /var/tmp so that this can be run by an unprivileged
53 # user stunnel and group stunnel
54 ${REINPLACE_CMD} -E -e 's|\@prefix\@/var/lib/stunnel/|/var/tmp/stunnel|; \
55 s|nobody|stunnel|;s|nogroup|stunnel|;s|;include |include |' \
56 ${WRKSRC}/tools/stunnel.conf-sample.in
57 ${REINPLACE_CMD} -E -e 's|\$$\(prefix\)/var/run/stunnel/stunnel.pid|$$(localstatedir)/stunnel.pid|' \
58 ${WRKSRC}/src/Makefile.in
59 ${FIND} ${WRKSRC} -type f -name Makefile.in | ${XARGS} \
61 -e 's,@(ACLOCAL|AUTO(MAKE|CONF|HEADER))@,/usr/bin/true,' \
62 -e 's,(COPYING|COPYRIGHT)[.]md,,g'
63 ${REINPLACE_CMD} -E -e \
64 's|install-confDATA install-data-local|install-confDATA|g' \
65 ${WRKSRC}/tools/Makefile.in
66 # don't add stack-protector
67 ${REINPLACE_CMD} -e 's|-fstack-protector||' ${WRKSRC}/configure
69 ${REINPLACE_CMD} -E -e 's|\$$\(docdir\)/examples|${STD_EXAMPLESDIR}|g' \
70 ${WRKSRC}/tools/Makefile.in
73 ${MKDIR} ${STAGEDIR}${PREFIX}/etc/stunnel/conf.d/
74 ${INSTALL_DATA} ${FILESDIR}/pid.conf \
75 ${STAGEDIR}${PREFIX}/etc/stunnel/conf.d/00-pid.conf
77 [FILE:440:descriptions/desc.primary]
78 The stunnel program is designed to work as SSL encryption wrapper between
79 remote client and local (inetd-startable) or remote server. The concept is
80 that having non-SSL aware daemons running on your system you can easily
81 setup them to communicate with clients over secure SSL channel.
83 stunnel can be used to add SSL functionality to commonly used inetd
84 daemons like POP-2, POP-3 and IMAP servers without any changes in the
89 3086939ee6407516c59b0ba3fbf555338f9d52f459bcab6337c0f00e91ea8456 881256 stunnel-5.67.tar.gz
92 [FILE:176:manifests/plist.primary]
96 etc/stunnel/stunnel.conf-sample
97 etc/stunnel/conf.d/00-pid.conf
106 [FILE:171:manifests/plist.docs]
122 [FILE:160:manifests/plist.examples]
123 share/examples/stunnel/
136 [FILE:571:patches/patch-configure.ac]
137 --- configure.ac.orig 2022-09-15 20:13:24 UTC
139 @@ -98,13 +98,6 @@ if test "$GCC" = yes; then
140 AX_APPEND_COMPILE_FLAGS([-Wno-long-long])
141 AX_APPEND_COMPILE_FLAGS([-Wno-deprecated-declarations])
142 AX_APPEND_COMPILE_FLAGS([-fPIE])
144 - avr-*.* | powerpc-*-aix* | rl78-*.* | visium-*.*)
147 - AX_APPEND_COMPILE_FLAGS([-fstack-protector])
150 AX_APPEND_LINK_FLAGS([-fPIE -pie])
151 AX_APPEND_LINK_FLAGS([-Wl,-z,relro])
152 AX_APPEND_LINK_FLAGS([-Wl,-z,now])
155 [FILE:27:files/pid.conf]
156 pid = /var/run/stunnel.pid
159 [FILE:912:files/stunnel.in]
163 # REQUIRE: NETWORKING SERVERS
168 # Add some of the following variables to /etc/rc.conf to configure stunnel:
169 # stunnel_enable (bool): Set to "NO" by default.
170 # Set it to "YES" to enable stunnel.
171 # stunnel_config (str): Default "%%ETCDIR%%/stunnel.conf"
172 # Set it to the full path to the config file
173 # that stunnel will use during the automated
175 # stunnel_pidfile (str): Default "%%PREFIX%%/var/stunnel/stunnel.pid"
176 # Set it to the value of 'pid' in
177 # the stunnel.conf file.
187 : ${stunnel_enable="NO"}
188 : ${stunnel_config="%%ETCDIR%%/${name}.conf"}
189 : ${stunnel_pidfile="/var/run/${name}.pid"}
191 command="%%PREFIX%%/bin/stunnel"
192 command_args=${stunnel_config}
193 pidfile=${stunnel_pidfile}
195 required_files="${stunnel_config}"