forked from gentoo/gentoo
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
www-misc/shellinabox: turn openssl into a hard dependency and remove …
…ssl USE flag. dev-libs/openssl:0= previously was an optional dependency available through a USE flag but it turns out shellinabox cannot be compiled with SSL support disabled. let's remove the "ssl" USE flag and turn dev-libs/openssl into a hard dependency. Gentoo-Bug: https://bugs.gentoo.org/607528 Package-Manager: portage-2.3.3
- Loading branch information
Showing
1 changed file
with
108 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,108 @@ | ||
# Copyright 1999-2017 Gentoo Foundation | ||
# Distributed under the terms of the GNU General Public License v2 | ||
# $Id$ | ||
|
||
EAPI=5 | ||
|
||
AUTOTOOLS_AUTORECONF="yes" | ||
AUTOTOOLS_IN_SOURCE_BUILD="yes" | ||
|
||
inherit user autotools-utils systemd | ||
|
||
DESCRIPTION="Export command line tools to a web based terminal emulator" | ||
HOMEPAGE="https://github.com/shellinabox/shellinabox" | ||
SRC_URI="https://github.com/${PN}/${PN}/archive/v${PV}.zip -> ${P}.zip" | ||
|
||
LICENSE="GPL-2" | ||
SLOT="0" | ||
KEYWORDS="~amd64 ~ppc ~ppc64 ~x86" | ||
IUSE="+pam" | ||
|
||
DEPEND=" | ||
dev-libs/openssl:0= | ||
pam? ( virtual/pam )" | ||
|
||
SIAB_CERT_DIR="/etc/shellinabox/cert" | ||
SIAB_SSL_BASH="${SIAB_CERT_DIR}/gen_ssl_cert.bash" | ||
SIAB_DAEMON="${PN}d" | ||
|
||
shellinbox_gen_ssl_setup() { | ||
read -r -d '' SIAB_SSL_SETUP << EOF | ||
cd ${SIAB_CERT_DIR} | ||
openssl genrsa -des3 -out server.key 1024 | ||
openssl req -new -key server.key -out server.csr | ||
cp server.key server.key.org | ||
openssl rsa -in server.key.org -out server.key | ||
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt | ||
cat server.crt server.key > certificate.pem | ||
EOF | ||
} | ||
|
||
pkg_setup() { | ||
enewgroup "${SIAB_DAEMON}" | ||
enewuser "${SIAB_DAEMON}" -1 -1 -1 "${SIAB_DAEMON}" | ||
} | ||
|
||
src_configure() { | ||
local myeconf=( | ||
--disable-runtime-loading | ||
--enable-ssl | ||
) | ||
|
||
econf \ | ||
$(use_enable pam) \ | ||
"${myeconf}" | ||
} | ||
|
||
src_install() { | ||
emake DESTDIR="${D}" install | ||
|
||
# make installs the binary in bin... | ||
rm -rf "${D}/usr/bin" || die | ||
|
||
# ... whereas it should put it in sbin. | ||
dosbin "${SIAB_DAEMON}" | ||
|
||
# Install init+conf files. | ||
newinitd "${FILESDIR}/${SIAB_DAEMON}.init" "${SIAB_DAEMON}" | ||
newconfd "${FILESDIR}/${SIAB_DAEMON}.conf" "${SIAB_DAEMON}" | ||
|
||
# Install systemd unit files | ||
systemd_dounit "${FILESDIR}"/shellinaboxd.service | ||
|
||
# Install CSS files. | ||
insinto "/usr/share/${PN}-resources" | ||
doins -r "${PN}"/*.css | ||
|
||
# Create directory where SSL certificates will be generated. | ||
dodir "${SIAB_CERT_DIR}" | ||
fowners "${SIAB_DAEMON}:${SIAB_DAEMON}" "${SIAB_CERT_DIR}" | ||
|
||
# Generate set up variable. | ||
shellinbox_gen_ssl_setup | ||
|
||
# Dump it in a bash script. | ||
echo "#!/usr/bin/env bash" > "${D}/${SIAB_SSL_BASH}" || die | ||
echo "${SIAB_SSL_SETUP}" >> "${D}/${SIAB_SSL_BASH}" || die | ||
chmod +x "${D}/${SIAB_SSL_BASH}" || die | ||
} | ||
|
||
pkg_postinst() { | ||
ewarn | ||
ewarn "The default configuration exposes a login shell" | ||
ewarn "with SSL disabled on the localhost interface only." | ||
ewarn | ||
|
||
shellinbox_gen_ssl_setup | ||
|
||
einfo | ||
einfo "To generate self-signed SSL certificates" | ||
einfo "please read the procedure explained here:" | ||
einfo "https://code.google.com/p/shellinabox/issues/detail?id=59#c15" | ||
einfo | ||
einfo "${SIAB_SSL_SETUP}" | ||
einfo | ||
einfo "This walkthrough has been written in ${SIAB_SSL_BASH} for your convenience." | ||
einfo "Make sure to execute this script." | ||
einfo | ||
} |