mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-09 18:45:54 +02:00
105 lines
4.4 KiB
Plaintext
105 lines
4.4 KiB
Plaintext
###############################################################################
|
|
# #
|
|
# IPFire.org - A linux based firewall #
|
|
# Copyright (C) 2007-2018 IPFire Team <info@ipfire.org> #
|
|
# #
|
|
# This program is free software: you can redistribute it and/or modify #
|
|
# it under the terms of the GNU General Public License as published by #
|
|
# the Free Software Foundation, either version 3 of the License, or #
|
|
# (at your option) any later version. #
|
|
# #
|
|
# This program is distributed in the hope that it will be useful, #
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of #
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
|
|
# GNU General Public License for more details. #
|
|
# #
|
|
# You should have received a copy of the GNU General Public License #
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. #
|
|
# #
|
|
###############################################################################
|
|
|
|
###############################################################################
|
|
# Definitions
|
|
###############################################################################
|
|
|
|
include Config
|
|
|
|
VER = 7.7p1
|
|
|
|
THISAPP = openssh-$(VER)
|
|
DL_FILE = $(THISAPP).tar.gz
|
|
DL_FROM = $(URL_IPFIRE)
|
|
DIR_APP = $(DIR_SRC)/$(THISAPP)
|
|
TARGET = $(DIR_INFO)/$(THISAPP)
|
|
|
|
###############################################################################
|
|
# Top-level Rules
|
|
###############################################################################
|
|
|
|
objects = $(DL_FILE)
|
|
|
|
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
|
|
|
|
$(DL_FILE)_MD5 = 68ba883aff6958297432e5877e9a0fe2
|
|
|
|
install : $(TARGET)
|
|
|
|
check : $(patsubst %,$(DIR_CHK)/%,$(objects))
|
|
|
|
download :$(patsubst %,$(DIR_DL)/%,$(objects))
|
|
|
|
md5 : $(subst %,%_MD5,$(objects))
|
|
|
|
###############################################################################
|
|
# Downloading, checking, md5sum
|
|
###############################################################################
|
|
|
|
$(patsubst %,$(DIR_CHK)/%,$(objects)) :
|
|
@$(CHECK)
|
|
|
|
$(patsubst %,$(DIR_DL)/%,$(objects)) :
|
|
@$(LOAD)
|
|
|
|
$(subst %,%_MD5,$(objects)) :
|
|
@$(MD5)
|
|
|
|
###############################################################################
|
|
# Installation Details
|
|
###############################################################################
|
|
|
|
$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
|
|
@$(PREBUILD)
|
|
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
|
|
cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssh-7.7p1-openssl-1.1.0-1.patch
|
|
cd $(DIR_APP) && sed -i "s/lkrb5 -ldes/lkrb5/" configure
|
|
cd $(DIR_APP) && ./configure \
|
|
--prefix=/usr \
|
|
--sysconfdir=/etc/ssh \
|
|
--libexecdir=/usr/lib/openssh \
|
|
--with-md5-passwords \
|
|
--with-privsep-path=/var/empty \
|
|
--with-superuser-path=/sbin:/usr/sbin:/bin:/usr/bin
|
|
|
|
cd $(DIR_APP) && make $(MAKETUNING)
|
|
cd $(DIR_APP) && make install
|
|
sed -i -e 's/^#\?Port .*$$/Port 22/' \
|
|
-e 's/^#\?Protocol .*$$/Protocol 2/' \
|
|
-e 's/^#\?LoginGraceTime .*$$/LoginGraceTime 30s/' \
|
|
-e 's/^#\?PubkeyAuthentication .*$$/PubkeyAuthentication yes/' \
|
|
-e 's/^#\?PasswordAuthentication .*$$/PasswordAuthentication yes/' \
|
|
-e 's/^#\?MaxStartups .*$$/MaxStartups 5/' \
|
|
-e 's/^#\?IgnoreUserKnownHosts .*$$/IgnoreUserKnownHosts yes/' \
|
|
-e 's/^#\?UsePAM .*$$//' \
|
|
-e 's/^#\?X11Forwarding .*$$/X11Forwarding no/' \
|
|
-e 's/^#\?SyslogFacility AUTH .*$$/SyslogFacility AUTH/' \
|
|
-e 's/^#\?LogLevel INFO .*$$/LogLevel INFO/' \
|
|
-e 's/^#\?AllowTcpForwarding .*$$/AllowTcpForwarding no/' \
|
|
-e 's/^#\?PermitRootLogin .*$$/PermitRootLogin yes/' \
|
|
-e 's|^#\?HostKey /etc/ssh/ssh_host_dsa_key$$||' \
|
|
-e 's|^#\?HostKey /etc/ssh/ssh_host_ecdsa_key$$||' \
|
|
-e 's|^#\?HostKey /etc/ssh/ssh_host_ed25519_key$$||' \
|
|
-e 's|^#\?HostKey /etc/ssh/ssh_host_rsa_key$$|HostKey /etc/ssh/ssh_host_ecdsa_key\nHostKey /etc/ssh/ssh_host_ed25519_key\nHostKey /etc/ssh/ssh_host_rsa_key|' \
|
|
/etc/ssh/sshd_config
|
|
@rm -rf $(DIR_APP)
|
|
@$(POSTBUILD)
|