mirror of
https://github.com/opnsense/src.git
synced 2026-02-12 23:36:07 -05:00
The framework now ensure by itself that pthread is added to the link chain as the last component if linked to kerberos hence avoid with out any explicit addition prevent issue like CVE-2014-8475
61 lines
1.8 KiB
Makefile
61 lines
1.8 KiB
Makefile
# $FreeBSD$
|
|
|
|
.include <src.opts.mk>
|
|
|
|
LIB= ssh
|
|
PRIVATELIB= true
|
|
SHLIB_MAJOR= 5
|
|
SRCS= authfd.c authfile.c bufaux.c bufbn.c buffer.c \
|
|
canohost.c channels.c cipher.c cipher-aes.c \
|
|
cipher-bf1.c cipher-ctr.c cipher-3des1.c cleanup.c \
|
|
compat.c compress.c crc32.c deattack.c fatal.c hostfile.c \
|
|
log.c match.c md-sha256.c moduli.c nchan.c packet.c \
|
|
readpass.c rsa.c ttymodes.c xmalloc.c addrmatch.c \
|
|
atomicio.c key.c dispatch.c kex.c mac.c uidswap.c uuencode.c misc.c \
|
|
monitor_fdpass.c rijndael.c ssh-dss.c ssh-ecdsa.c ssh-rsa.c dh.c \
|
|
kexdh.c kexgex.c kexdhc.c kexgexc.c bufec.c kexecdh.c kexecdhc.c \
|
|
msg.c progressmeter.c dns.c entropy.c umac.c umac128.c \
|
|
ssh-pkcs11.c krl.c smult_curve25519_ref.c \
|
|
kexc25519.c kexc25519c.c poly1305.c chacha.c cipher-chachapoly.c \
|
|
ssh-ed25519.c digest-openssl.c hmac.c \
|
|
sc25519.c ge25519.c fe25519.c ed25519.c verify.c hash.c blocks.c
|
|
|
|
# gss-genr.c should be in $SRCS but causes linking problems, so it is
|
|
# compiled directly into sshd instead.
|
|
|
|
# Portability layer
|
|
SRCS+= bcrypt_pbkdf.c blowfish.c bsd-misc.c explicit_bzero.c fmt_scaled.c \
|
|
glob.c openssl-compat.c port-tun.c strtonum.c timingsafe_bcmp.c \
|
|
vis.c xcrypt.c xmmap.c
|
|
|
|
.if ${MK_LDNS} == "no"
|
|
SRCS+= getrrsetbyname.c
|
|
.else
|
|
LDNSDIR= ${.CURDIR}/../../../contrib/ldns
|
|
CFLAGS+= -DHAVE_LDNS=1 -I${LDNSDIR}
|
|
SRCS+= getrrsetbyname-ldns.c
|
|
LIBADD+= ldns
|
|
.endif
|
|
|
|
CFLAGS+= -I${SSHDIR} -include ssh_namespace.h
|
|
|
|
.if ${MK_KERBEROS_SUPPORT} != "no"
|
|
CFLAGS+= -include krb5_config.h
|
|
.endif
|
|
|
|
.if ${MK_OPENSSH_NONE_CIPHER} != "no"
|
|
CFLAGS+= -DNONE_CIPHER_ENABLED
|
|
.endif
|
|
|
|
NO_LINT=
|
|
|
|
LIBADD+= crypto crypt z
|
|
|
|
.include <bsd.lib.mk>
|
|
|
|
.PATH: ${SSHDIR} ${SSHDIR}/openbsd-compat
|
|
|
|
${OBJS} ${POBJS} ${SOBJS}: ssh_namespace.h
|
|
.if ${MK_KERBEROS_SUPPORT} != "no"
|
|
${OBJS} ${POBJS} ${SOBJS}: krb5_config.h
|
|
.endif
|