| History log of /src/lib/libipsec/Makefile |
| Revision | | Date | Author | Comments |
| 1.19 |
| 09-Mar-2025 |
christos | later is now.
|
| 1.18 |
| 04-Jan-2012 |
drochner | branches: 1.18.52;
-consistently use "char *" for the compiled policy buffer in the
ipsec_*_policy() functions, as it was documented and used by clients
-remove "ipsec_policy_t" which was undocumented and only present
in the KAME version of the ipsec.h header
-misc cleanup of historical artefacts, and to remove unnecessary
differences between KAME ans FAST_IPSEC
|
| 1.17 |
| 28-May-2007 |
tls | branches: 1.17.34;
Add new Makefile knob, USE_FORT, which extends USE_SSP by turning on the
FORTIFY_SOURCE feature of libssp, thus checking the size of arguments to
various string and memory copy and set functions (as well as a few system
calls and other miscellany) where known at function entry. RedHat has
evidently built all "core system packages" with this option for some time.
This option should be used at the top of Makefiles (or Makefile.inc where
this is used for subdirectories) but after any setting of LIB.
This is only useful for userland code, and cannot be used in libc or in
any code which includes the libc internals, because it overrides certain
libc functions with macros. Some effort has been made to make USE_FORT=yes
work correctly for a full-system build by having the bsd.sys.mk logic
disable the feature where it should not be used (libc, libssp iteself,
the kernel) but no attempt has been made to build the entire system with
USE_FORT and doing so will doubtless expose numerous bugs and misfeatures.
Adjust the system build so that all programs and libraries that are setuid,
directly handle network data (including serial comm data), perform
authentication, or appear likely to have (or have a history of having)
data-driven bugs (e.g. file(1)) are built with USE_FORT=yes by default,
with the exception of libc, which cannot use USE_FORT and thus uses
only USE_SSP by default. Tested on i386 with no ill results; USE_FORT=no
per-directory or in a system build will disable if desired.
|
| 1.16 |
| 16-Dec-2005 |
jmc | Redo previous rework to generate yacc/lex output again and remove generated
copies from the import as they don't compile clean across all archs.
|
| 1.15 |
| 15-Dec-2005 |
jmc | Don't yacc/lex here as dist includes generated copies already and depending
on timestamps it's possible for gcc2 on vax to get confused on which .h
to use.
|
| 1.14 |
| 28-Jun-2005 |
christos | Ignore lint argument promotion warnings (for now).
|
| 1.13 |
| 24-Feb-2005 |
manu | branches: 1.13.2;
Define SADB_X_EALG_AESCBC=SADB_X_EALG_AES, as we define SADB_X_EALG_AES
in <net/pfkeyv2.h> while ipsec-tools uses SADB_X_EALG_AESCBC in the code.
|
| 1.12 |
| 19-Feb-2005 |
thorpej | Enable building the lint library.
|
| 1.11 |
| 19-Feb-2005 |
thorpej | Additional cleanup pass.
|
| 1.10 |
| 19-Feb-2005 |
thorpej | Switch to ipsec-tools for libipsec, setkey, and racoon. From
Emmanuel Dreyfus, with some small changes by me.
|
| 1.9 |
| 10-Jan-2005 |
lukem | Only compile in IPv6 support if ${USE_INET6} != "no"
MKINET6 is for providing IPv6 infrastructure.
USE_INET6 is for compiling IPv6 support into the programs (needs MKINET6).
|
| 1.8 |
| 19-Aug-2002 |
lukem | Explicitly move setting of NOxxx and USE_SHLIBDIR to the top of the
Makefile (before including <bsd.own.mk>)
|
| 1.7 |
| 19-Aug-2002 |
lukem | Use ${NETBSDSRCDIR}/some/path instead of ${.CURDIR}/../../some/path (etc).
(Reduces make output by ~ 20%)
|
| 1.6 |
| 28-Dec-2001 |
lukem | * Add user-controlled mk.conf variables
- SHLIBDIR Location to install shared libraries if ${USE_SHLIBDIR}
is "yes". Defaults to "/usr/lib".
- USE_SHLIBDIR If "yes", install shared libraries in ${SHLIBDIR}
instead of ${LIBDIR}. Defaults to "no".
Sets ${_LIBSODIR} to the appropriate value.
This may be set by individual Makefiles as well.
- SHLINKDIR Location of shared linker. Defaults to "/usr/libexec".
If != "/usr/libexec", change the dynamic-linker
encoded in shared programs
* Set USE_SHLIBDIR for libraries used by /bin and /sbin:
libc libcrypt libcrypto libedit libipsec libkvm libm libmi387
libtermcap libutil libz
* If ${_LIBSODIR} != ${LIBDIR}, add symlinks from ${LIBDIR}/${LIB}.so*
to ${_LIBSODIR}/${LIB}.so* for compatibility.
* Always install /sbin/init statically (for now)
The net effect of these changes depends on how the variables are set:
1.) If nothing is set or changed, there is no change from the
current behaviour:
- Static /bin, /sbin, and bits of /usr/*
- Dynamic rest
- Shared linker is /usr/libexec/ld*so
2.) If the following make variables are set:
LDSTATIC=
SHLINKDIR=/lib
SHLIBDIR=/lib
Then the behaviour becomes:
- Dynamic tools
- .so libraries used by /bin and /sbin are installed to /lib,
with symlinks from /usr/lib/lib*so to -> /lib/lib*so
where appropriate
- Shared linker is /lib/ld*so
3.) As per 2.), but add the following variable:
USE_SHLIBDIR=yes
This forces all .so's to be instaleld in /lib (with compat
symlinks), not just those tagged by their Makefiles to be.
Again, compat symlinks are installed
|
| 1.5 |
| 09-May-2000 |
thorpej | Need -I${.CURDIR} for ipsec_strerror.h
|
| 1.4 |
| 13-Mar-2000 |
itojun | hide shouldn't-be-exported symbols from the outside.
don't compile pfkey*, since we expect tons of changes in the near future.
bump shlib major (due to less exported APIs than before - am I correct here?).
|
| 1.3 |
| 31-Jan-2000 |
itojun | upgrade libipsec to the latest.
- parser now uses yacc/lex (there'll be no symbol conflict).
- outbound policy and inbound policy is now separate
- policy specification for tunnel SA is improved
- api changed, bump shlib major
XXX some of programs will become not buildable - will commit shortly
|
| 1.2 |
| 03-Jul-1999 |
itojun | s/CFLAGS/CPPFLAGS/ for -D and -I.
remove lint error.
|
| 1.1 |
| 01-Jul-1999 |
itojun | ipsec support library.
mainly for debugging, and policy text->binary conversion. NO crypto code
is included so it is export safe.
|
| 1.13.2.2 |
| 21-Nov-2005 |
tron | Apply patch (requested by manu in ticket #981):
Update ipsec-tools to version 0.6.3.
|
| 1.13.2.1 |
| 03-Sep-2005 |
snj | Apply patch (requested by tron in ticket #741):
Update ipsec-tools to version 0.6.1.
|
| 1.17.34.1 |
| 17-Apr-2012 |
yamt | sync with head
|
| 1.18.52.1 |
| 02-Aug-2025 |
perseant | Sync with HEAD
|
