2017-10-30 15:40:48 +03:00
|
|
|
{ lib, stdenv, fetchurl, openssl, openldap, kerberos, db, gettext,
|
|
|
|
pam, fixDarwinDylibNames, autoreconfHook, fetchpatch, enableLdap ? false }:
|
2010-04-11 00:27:17 +04:00
|
|
|
|
2014-12-30 12:04:16 +03:00
|
|
|
with stdenv.lib;
|
2012-07-07 15:00:53 +04:00
|
|
|
stdenv.mkDerivation rec {
|
2016-12-20 17:59:33 +03:00
|
|
|
name = "cyrus-sasl-${version}${optionalString (kerberos == null) "-without-kerberos"}";
|
2017-05-24 06:37:48 +03:00
|
|
|
version = "2.1.26";
|
2007-10-01 19:11:38 +04:00
|
|
|
|
|
|
|
src = fetchurl {
|
2013-03-12 13:05:49 +04:00
|
|
|
url = "ftp://ftp.cyrusimap.org/cyrus-sasl/${name}.tar.gz";
|
|
|
|
sha256 = "1hvvbcsg21nlncbgs0cgn3iwlnb3vannzwsp6rwvnn9ba4v53g4g";
|
2007-10-01 19:11:38 +04:00
|
|
|
};
|
2012-07-07 15:00:53 +04:00
|
|
|
|
2016-09-01 12:07:23 +03:00
|
|
|
outputs = [ "bin" "dev" "out" "man" "devdoc" ];
|
2015-10-18 15:48:14 +03:00
|
|
|
|
2014-09-24 20:28:26 +04:00
|
|
|
buildInputs =
|
2014-12-30 12:04:16 +03:00
|
|
|
[ openssl db gettext kerberos ]
|
2017-06-06 14:00:28 +03:00
|
|
|
++ lib.optional enableLdap openldap
|
2016-01-03 13:55:25 +03:00
|
|
|
++ lib.optional stdenv.isFreeBSD autoreconfHook
|
2014-09-24 20:28:26 +04:00
|
|
|
++ lib.optional stdenv.isLinux pam
|
|
|
|
++ lib.optional stdenv.isDarwin fixDarwinDylibNames;
|
2012-07-07 15:00:53 +04:00
|
|
|
|
FreeBSD: apr-util, cyrus-sasl, berkeley db, glib, gnutls, kerberos, libelf-freebsd, openldap, serf, guile, tet, shishi, gawk, gnugrep
2015-11-28 03:46:00 +03:00
|
|
|
patches = [
|
|
|
|
./missing-size_t.patch # https://bugzilla.redhat.com/show_bug.cgi?id=906519
|
2018-04-21 16:42:44 +03:00
|
|
|
(fetchpatch {
|
|
|
|
name = "CVE-2013-4122.patch";
|
2017-10-30 15:40:48 +03:00
|
|
|
url = "http://sourceforge.net/projects/miscellaneouspa/files/glibc217/cyrus-sasl-2.1.26-glibc217-crypt.diff";
|
|
|
|
sha256 = "05l7dh1w9d5fvzg0pjwzqh0fy4ah8y5cv6v67s4ssbq8xwd4pkf2";
|
|
|
|
})
|
2016-01-03 13:55:25 +03:00
|
|
|
] ++ lib.optional stdenv.isFreeBSD (
|
FreeBSD: apr-util, cyrus-sasl, berkeley db, glib, gnutls, kerberos, libelf-freebsd, openldap, serf, guile, tet, shishi, gawk, gnugrep
2015-11-28 03:46:00 +03:00
|
|
|
fetchurl {
|
|
|
|
url = "http://www.linuxfromscratch.org/patches/blfs/svn/cyrus-sasl-2.1.26-fixes-3.patch";
|
|
|
|
sha256 = "1vh4pc2rxxm6yvykx0b7kg09jbcwcxwv5rs6yq2ag3y8p6a9x86w";
|
|
|
|
}
|
2016-01-03 13:55:25 +03:00
|
|
|
);
|
2013-03-14 00:06:37 +04:00
|
|
|
|
2015-01-09 21:21:04 +03:00
|
|
|
configureFlags = [
|
2016-04-16 20:44:32 +03:00
|
|
|
"--with-openssl=${openssl.dev}"
|
2018-09-21 16:33:57 +03:00
|
|
|
"--with-plugindir=${placeholder "out"}/lib/sasl2"
|
|
|
|
"--with-saslauthd=/run/saslauthd"
|
|
|
|
"--enable-login"
|
|
|
|
"--enable-shared"
|
2017-06-06 14:00:28 +03:00
|
|
|
] ++ lib.optional enableLdap "--with-ldap=${openldap.dev}";
|
2015-01-09 21:21:04 +03:00
|
|
|
|
2018-09-21 16:33:57 +03:00
|
|
|
# Avoid triggering regenerating using broken autoconf/libtool bits.
|
|
|
|
# (many distributions carry patches to remove/replace, but this works for now)
|
2018-09-24 17:44:30 +03:00
|
|
|
dontUpdateAutotoolsGnuConfigScripts = if stdenv.hostPlatform.isMusl then true else null;
|
2012-07-07 15:00:53 +04:00
|
|
|
|
2014-09-24 20:28:26 +04:00
|
|
|
installFlags = lib.optional stdenv.isDarwin [ "framedir=$(out)/Library/Frameworks/SASL2.framework" ];
|
2013-05-29 00:37:19 +04:00
|
|
|
|
2015-10-18 15:48:14 +03:00
|
|
|
postInstall = ''
|
|
|
|
for f in $out/lib/*.la $out/lib/sasl2/*.la; do
|
|
|
|
substituteInPlace $f --replace "${openssl.dev}/lib" "${openssl.out}/lib"
|
|
|
|
done
|
|
|
|
'';
|
|
|
|
|
2012-07-07 15:00:53 +04:00
|
|
|
meta = {
|
2018-09-21 16:33:57 +03:00
|
|
|
homepage = https://www.cyrusimap.org/sasl;
|
2016-06-20 13:53:46 +03:00
|
|
|
description = "Library for adding authentication support to connection-based protocols";
|
2014-12-30 12:04:16 +03:00
|
|
|
platforms = platforms.unix;
|
2018-09-30 12:33:34 +03:00
|
|
|
license = licenses.bsdOriginal;
|
2012-07-07 15:00:53 +04:00
|
|
|
};
|
2007-10-01 19:11:38 +04:00
|
|
|
}
|