Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
packages/net/openvpn-easy-rsa/Makefile

95 lines
2.9 KiB
Makefile
Raw Permalink Normal View History

openvpn-easy-rsa: import from base Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-01 20:36:27 +00:00
#
# Copyright (C) 2010-2013 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=openvpn-easy-rsa
openvpn-easy-rsa: update to 3.1.3 Version 3.0.9 of EasyRSA introduces OpenSSL 3 (3.0.3) support. For other changes, see: - https://github.com/OpenVPN/easy-rsa/releases/tag/v3.0.9 - https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.0 - https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.1 - https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.2 - https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.3 Closes #21142 Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2023-05-23 21:03:26 +00:00
PKG_VERSION:=3.1.3
PKG_RELEASE:=1
openvpn-easy-rsa: bump to 3.0.8 New easyrsa will look for missing vars and x509-types where easyrsa is located (following symlink). /usr/bin/easyrsa is now a link to /usr/lib/easyrsa/easyrsa and /usr/lib/easyrsa/{vars,x509-types} a link to /etc/easyrsa/{vars,x509-types}. This keeps the same previous OpenWrt easyrsa behavior which tries to use $PWD/pki and /etc/easyrsa/{vars,x509-types}, but without patching it. Easyrsa can also use env vars to set pki root path (instead of /usr/lib/easyrsa), pki path (instead of $PWD/pki) and vars path. Those variables are commented in /etc/profile.d/50-openvpn-easy-rsa.sh as an example of how to make easyrsa run independent of $PWD. That scriptlet also sets $EASYRSA_TEMP_DIR from $EASYRSA_PKI/tmp to /tmp in order to avoid writing to persistent media (normally flash). However, as a profile scriptlet, it will only be used after session is restarted. The "build" tgz was replaced by the "source" tar. "build" version has a different file structure, making any patch backports too complex. I'm also putting myself as maintainer. Closes openwrt/openwrt#2926, since it moved to openwrt/packages. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-12-07 21:00:37 +00:00
PKG_SOURCE_URL:=https://codeload.github.com/OpenVPN/easy-rsa/tar.gz/v$(PKG_VERSION)?
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
openvpn-easy-rsa: update to 3.1.3 Version 3.0.9 of EasyRSA introduces OpenSSL 3 (3.0.3) support. For other changes, see: - https://github.com/OpenVPN/easy-rsa/releases/tag/v3.0.9 - https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.0 - https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.1 - https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.2 - https://github.com/OpenVPN/easy-rsa/releases/tag/v3.1.3 Closes #21142 Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2023-05-23 21:03:26 +00:00
PKG_HASH:=f2967aa598cb603dd20791002e767d0ce58e300b04c9cff1b6d6b14fedae6a80
openvpn-easy-rsa: bump to 3.0.8 New easyrsa will look for missing vars and x509-types where easyrsa is located (following symlink). /usr/bin/easyrsa is now a link to /usr/lib/easyrsa/easyrsa and /usr/lib/easyrsa/{vars,x509-types} a link to /etc/easyrsa/{vars,x509-types}. This keeps the same previous OpenWrt easyrsa behavior which tries to use $PWD/pki and /etc/easyrsa/{vars,x509-types}, but without patching it. Easyrsa can also use env vars to set pki root path (instead of /usr/lib/easyrsa), pki path (instead of $PWD/pki) and vars path. Those variables are commented in /etc/profile.d/50-openvpn-easy-rsa.sh as an example of how to make easyrsa run independent of $PWD. That scriptlet also sets $EASYRSA_TEMP_DIR from $EASYRSA_PKI/tmp to /tmp in order to avoid writing to persistent media (normally flash). However, as a profile scriptlet, it will only be used after session is restarted. The "build" tgz was replaced by the "source" tar. "build" version has a different file structure, making any patch backports too complex. I'm also putting myself as maintainer. Closes openwrt/openwrt#2926, since it moved to openwrt/packages. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-12-07 21:00:37 +00:00
# For git snapshots
#PKG_SOURCE_PROTO:=git
#PKG_RELEASE=0git$(PKG_SOURCE_DATE)
#PKG_SOURCE_URL:=https://github.com/OpenVPN/easy-rsa.git
#PKG_SOURCE_DATE:=2020-03-30
#PKG_SOURCE_VERSION:=945c9359f6ae3796df21e2986e49489718e0d5f8
#PKG_MIRROR_HASH:=
openvpn-easy-rsa: import from base Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-01 20:36:27 +00:00
PKG_LICENSE:=GPL-2.0
openvpn-easy-rsa: bump to 3.0.8 New easyrsa will look for missing vars and x509-types where easyrsa is located (following symlink). /usr/bin/easyrsa is now a link to /usr/lib/easyrsa/easyrsa and /usr/lib/easyrsa/{vars,x509-types} a link to /etc/easyrsa/{vars,x509-types}. This keeps the same previous OpenWrt easyrsa behavior which tries to use $PWD/pki and /etc/easyrsa/{vars,x509-types}, but without patching it. Easyrsa can also use env vars to set pki root path (instead of /usr/lib/easyrsa), pki path (instead of $PWD/pki) and vars path. Those variables are commented in /etc/profile.d/50-openvpn-easy-rsa.sh as an example of how to make easyrsa run independent of $PWD. That scriptlet also sets $EASYRSA_TEMP_DIR from $EASYRSA_PKI/tmp to /tmp in order to avoid writing to persistent media (normally flash). However, as a profile scriptlet, it will only be used after session is restarted. The "build" tgz was replaced by the "source" tar. "build" version has a different file structure, making any patch backports too complex. I'm also putting myself as maintainer. Closes openwrt/openwrt#2926, since it moved to openwrt/packages. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-12-07 21:00:37 +00:00
PKG_MAINTAINER:=Luiz Angelo Daros de Luca <luizluca@gmail.com>
PKG_BUILD_DIR:=$(BUILD_DIR)/easy-rsa-$(PKG_VERSION)
openvpn-easy-rsa: import from base Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-01 20:36:27 +00:00
include $(INCLUDE_DIR)/package.mk
define Package/openvpn-easy-rsa
TITLE:=CLI utility to build and manage a PKI CA.
SECTION:=net
CATEGORY:=Network
URL:=http://openvpn.net
SUBMENU:=VPN
DEPENDS:=+openssl-util
openvpn-easy-rsa: bump to 3.0.8 New easyrsa will look for missing vars and x509-types where easyrsa is located (following symlink). /usr/bin/easyrsa is now a link to /usr/lib/easyrsa/easyrsa and /usr/lib/easyrsa/{vars,x509-types} a link to /etc/easyrsa/{vars,x509-types}. This keeps the same previous OpenWrt easyrsa behavior which tries to use $PWD/pki and /etc/easyrsa/{vars,x509-types}, but without patching it. Easyrsa can also use env vars to set pki root path (instead of /usr/lib/easyrsa), pki path (instead of $PWD/pki) and vars path. Those variables are commented in /etc/profile.d/50-openvpn-easy-rsa.sh as an example of how to make easyrsa run independent of $PWD. That scriptlet also sets $EASYRSA_TEMP_DIR from $EASYRSA_PKI/tmp to /tmp in order to avoid writing to persistent media (normally flash). However, as a profile scriptlet, it will only be used after session is restarted. The "build" tgz was replaced by the "source" tar. "build" version has a different file structure, making any patch backports too complex. I'm also putting myself as maintainer. Closes openwrt/openwrt#2926, since it moved to openwrt/packages. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-12-07 21:00:37 +00:00
PKGARCH:=all
openvpn-easy-rsa: import from base Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-01 20:36:27 +00:00
endef
define Package/openvpn-easy-rsa/conffiles
/etc/easy-rsa/vars
/etc/easy-rsa/openssl-1.0.cnf
/etc/easy-rsa/openssl-easyrsa.cnf
openvpn-easy-rsa: add missing configfile /etc/profile.d/50-openvpn-easy-rsa.sh was not listed as configfile and changes were lost during upgrades. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2021-04-12 21:09:52 +00:00
/etc/profile.d/50-$(PKG_NAME).sh
openvpn-easy-rsa: import from base Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-01 20:36:27 +00:00
endef
define Build/Configure
endef
define Build/Compile
openvpn-easy-rsa: bump to 3.0.8 New easyrsa will look for missing vars and x509-types where easyrsa is located (following symlink). /usr/bin/easyrsa is now a link to /usr/lib/easyrsa/easyrsa and /usr/lib/easyrsa/{vars,x509-types} a link to /etc/easyrsa/{vars,x509-types}. This keeps the same previous OpenWrt easyrsa behavior which tries to use $PWD/pki and /etc/easyrsa/{vars,x509-types}, but without patching it. Easyrsa can also use env vars to set pki root path (instead of /usr/lib/easyrsa), pki path (instead of $PWD/pki) and vars path. Those variables are commented in /etc/profile.d/50-openvpn-easy-rsa.sh as an example of how to make easyrsa run independent of $PWD. That scriptlet also sets $EASYRSA_TEMP_DIR from $EASYRSA_PKI/tmp to /tmp in order to avoid writing to persistent media (normally flash). However, as a profile scriptlet, it will only be used after session is restarted. The "build" tgz was replaced by the "source" tar. "build" version has a different file structure, making any patch backports too complex. I'm also putting myself as maintainer. Closes openwrt/openwrt#2926, since it moved to openwrt/packages. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-12-07 21:00:37 +00:00
cd $(PKG_BUILD_DIR); \
$(PKG_BUILD_DIR)/build/build-dist.sh \
--no-windows \
--no-compress \
--dist-clean \
--version=$(PKG_VERSION)
openvpn-easy-rsa: import from base Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-01 20:36:27 +00:00
endef
define Package/openvpn-easy-rsa/install
openvpn-easy-rsa: bump to 3.0.8 New easyrsa will look for missing vars and x509-types where easyrsa is located (following symlink). /usr/bin/easyrsa is now a link to /usr/lib/easyrsa/easyrsa and /usr/lib/easyrsa/{vars,x509-types} a link to /etc/easyrsa/{vars,x509-types}. This keeps the same previous OpenWrt easyrsa behavior which tries to use $PWD/pki and /etc/easyrsa/{vars,x509-types}, but without patching it. Easyrsa can also use env vars to set pki root path (instead of /usr/lib/easyrsa), pki path (instead of $PWD/pki) and vars path. Those variables are commented in /etc/profile.d/50-openvpn-easy-rsa.sh as an example of how to make easyrsa run independent of $PWD. That scriptlet also sets $EASYRSA_TEMP_DIR from $EASYRSA_PKI/tmp to /tmp in order to avoid writing to persistent media (normally flash). However, as a profile scriptlet, it will only be used after session is restarted. The "build" tgz was replaced by the "source" tar. "build" version has a different file structure, making any patch backports too complex. I'm also putting myself as maintainer. Closes openwrt/openwrt#2926, since it moved to openwrt/packages. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-12-07 21:00:37 +00:00
$(INSTALL_DIR) $(1)/usr/lib/easy-rsa/
$(INSTALL_BIN) $(PKG_BUILD_DIR)/dist-staging/unix/EasyRSA-$(PKG_VERSION)/easyrsa $(1)/usr/lib/easy-rsa/
openvpn-easy-rsa: import from base Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-01 20:36:27 +00:00
$(INSTALL_DIR) $(1)/usr/bin
openvpn-easy-rsa: use relative symlinks Fixes dead symlinks under InstallDev. Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-18 00:31:29 +00:00
$(LN) ../lib/easy-rsa/easyrsa $(1)/usr/bin/easyrsa
openvpn-easy-rsa: import from base Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-01 20:36:27 +00:00
$(INSTALL_DIR) $(1)/etc/easy-rsa
openvpn-easy-rsa: bump to 3.0.8 New easyrsa will look for missing vars and x509-types where easyrsa is located (following symlink). /usr/bin/easyrsa is now a link to /usr/lib/easyrsa/easyrsa and /usr/lib/easyrsa/{vars,x509-types} a link to /etc/easyrsa/{vars,x509-types}. This keeps the same previous OpenWrt easyrsa behavior which tries to use $PWD/pki and /etc/easyrsa/{vars,x509-types}, but without patching it. Easyrsa can also use env vars to set pki root path (instead of /usr/lib/easyrsa), pki path (instead of $PWD/pki) and vars path. Those variables are commented in /etc/profile.d/50-openvpn-easy-rsa.sh as an example of how to make easyrsa run independent of $PWD. That scriptlet also sets $EASYRSA_TEMP_DIR from $EASYRSA_PKI/tmp to /tmp in order to avoid writing to persistent media (normally flash). However, as a profile scriptlet, it will only be used after session is restarted. The "build" tgz was replaced by the "source" tar. "build" version has a different file structure, making any patch backports too complex. I'm also putting myself as maintainer. Closes openwrt/openwrt#2926, since it moved to openwrt/packages. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-12-07 21:00:37 +00:00
$(INSTALL_DATA) $(PKG_BUILD_DIR)/dist-staging/unix/EasyRSA-$(PKG_VERSION)/openssl-easyrsa.cnf $(1)/etc/easy-rsa/openssl-1.0.cnf
openvpn-easy-rsa: use relative symlinks Fixes dead symlinks under InstallDev. Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-18 00:31:29 +00:00
$(LN) openssl-1.0.cnf $(1)/etc/easy-rsa/openssl-easyrsa.cnf
$(LN) ../../../etc/easy-rsa/openssl-easyrsa.cnf $(1)/usr/lib/easy-rsa/openssl-easyrsa.cnf
openvpn-easy-rsa: bump to 3.0.8 New easyrsa will look for missing vars and x509-types where easyrsa is located (following symlink). /usr/bin/easyrsa is now a link to /usr/lib/easyrsa/easyrsa and /usr/lib/easyrsa/{vars,x509-types} a link to /etc/easyrsa/{vars,x509-types}. This keeps the same previous OpenWrt easyrsa behavior which tries to use $PWD/pki and /etc/easyrsa/{vars,x509-types}, but without patching it. Easyrsa can also use env vars to set pki root path (instead of /usr/lib/easyrsa), pki path (instead of $PWD/pki) and vars path. Those variables are commented in /etc/profile.d/50-openvpn-easy-rsa.sh as an example of how to make easyrsa run independent of $PWD. That scriptlet also sets $EASYRSA_TEMP_DIR from $EASYRSA_PKI/tmp to /tmp in order to avoid writing to persistent media (normally flash). However, as a profile scriptlet, it will only be used after session is restarted. The "build" tgz was replaced by the "source" tar. "build" version has a different file structure, making any patch backports too complex. I'm also putting myself as maintainer. Closes openwrt/openwrt#2926, since it moved to openwrt/packages. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-12-07 21:00:37 +00:00
$(INSTALL_DATA) $(PKG_BUILD_DIR)/dist-staging/unix/EasyRSA-$(PKG_VERSION)/vars.example $(1)/etc/easy-rsa/vars
openvpn-easy-rsa: use relative symlinks Fixes dead symlinks under InstallDev. Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-18 00:31:29 +00:00
$(LN) ../../../etc/easy-rsa/vars $(1)/usr/lib/easy-rsa/vars
openvpn-easy-rsa: import from base Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-01 20:36:27 +00:00
$(INSTALL_DIR) $(1)/etc/easy-rsa/pki
chmod 700 $(1)/etc/easy-rsa/pki
$(INSTALL_DIR) $(1)/etc/easy-rsa/pki/private
chmod 700 $(1)/etc/easy-rsa/pki/private
$(INSTALL_DIR) $(1)/etc/easy-rsa/pki/reqs
chmod 700 $(1)/etc/easy-rsa/pki/reqs
$(INSTALL_DIR) $(1)/etc/easy-rsa/x509-types
openvpn-easy-rsa: bump to 3.0.8 New easyrsa will look for missing vars and x509-types where easyrsa is located (following symlink). /usr/bin/easyrsa is now a link to /usr/lib/easyrsa/easyrsa and /usr/lib/easyrsa/{vars,x509-types} a link to /etc/easyrsa/{vars,x509-types}. This keeps the same previous OpenWrt easyrsa behavior which tries to use $PWD/pki and /etc/easyrsa/{vars,x509-types}, but without patching it. Easyrsa can also use env vars to set pki root path (instead of /usr/lib/easyrsa), pki path (instead of $PWD/pki) and vars path. Those variables are commented in /etc/profile.d/50-openvpn-easy-rsa.sh as an example of how to make easyrsa run independent of $PWD. That scriptlet also sets $EASYRSA_TEMP_DIR from $EASYRSA_PKI/tmp to /tmp in order to avoid writing to persistent media (normally flash). However, as a profile scriptlet, it will only be used after session is restarted. The "build" tgz was replaced by the "source" tar. "build" version has a different file structure, making any patch backports too complex. I'm also putting myself as maintainer. Closes openwrt/openwrt#2926, since it moved to openwrt/packages. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-12-07 21:00:37 +00:00
$(INSTALL_DATA) $(PKG_BUILD_DIR)/dist-staging/unix/EasyRSA-$(PKG_VERSION)/x509-types/* $(1)/etc/easy-rsa/x509-types/
openvpn-easy-rsa: use relative symlinks Fixes dead symlinks under InstallDev. Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-18 00:31:29 +00:00
$(LN) ../../../etc/easy-rsa/x509-types $(1)/usr/lib/easy-rsa/x509-types
openvpn-easy-rsa: import from base Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-01 20:36:27 +00:00
$(INSTALL_DIR) $(1)/lib/upgrade/keep.d
$(INSTALL_DATA) files/openvpn-easy-rsa.upgrade $(1)/lib/upgrade/keep.d/$(PKG_NAME)
openvpn-easy-rsa: bump to 3.0.8 New easyrsa will look for missing vars and x509-types where easyrsa is located (following symlink). /usr/bin/easyrsa is now a link to /usr/lib/easyrsa/easyrsa and /usr/lib/easyrsa/{vars,x509-types} a link to /etc/easyrsa/{vars,x509-types}. This keeps the same previous OpenWrt easyrsa behavior which tries to use $PWD/pki and /etc/easyrsa/{vars,x509-types}, but without patching it. Easyrsa can also use env vars to set pki root path (instead of /usr/lib/easyrsa), pki path (instead of $PWD/pki) and vars path. Those variables are commented in /etc/profile.d/50-openvpn-easy-rsa.sh as an example of how to make easyrsa run independent of $PWD. That scriptlet also sets $EASYRSA_TEMP_DIR from $EASYRSA_PKI/tmp to /tmp in order to avoid writing to persistent media (normally flash). However, as a profile scriptlet, it will only be used after session is restarted. The "build" tgz was replaced by the "source" tar. "build" version has a different file structure, making any patch backports too complex. I'm also putting myself as maintainer. Closes openwrt/openwrt#2926, since it moved to openwrt/packages. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2020-12-07 21:00:37 +00:00
$(INSTALL_DIR) $(1)/etc/profile.d
$(INSTALL_DATA) files/openvpn-easy-rsa.profile $(1)/etc/profile.d/50-$(PKG_NAME).sh
openvpn-easy-rsa: import from base Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-12-01 20:36:27 +00:00
endef
$(eval $(call BuildPackage,openvpn-easy-rsa))
Reference in a new issue Copy permalink