head	1.6;
access;
symbols
	RELENG_8_4:1.6.0.2
	RELENG_9_1_0_RELEASE:1.1.4.2.4.2
	RELENG_9_1:1.1.4.2.0.4
	RELENG_9_1_BP:1.1.4.2
	RELENG_8_3_0_RELEASE:1.1.2.1.8.1
	RELENG_8_3:1.1.2.1.0.8
	RELENG_8_3_BP:1.1.2.1
	RELENG_9_0_0_RELEASE:1.1.4.2.2.1
	RELENG_9_0:1.1.4.2.0.2
	RELENG_9_0_BP:1.1.4.2
	RELENG_9:1.1.0.4
	RELENG_9_BP:1.1
	RELENG_8_2_0_RELEASE:1.1.2.1.6.1
	RELENG_8_2:1.1.2.1.0.6
	RELENG_8_2_BP:1.1.2.1
	RELENG_8_1_0_RELEASE:1.1.2.1.4.1
	RELENG_8_1:1.1.2.1.0.4
	RELENG_8_1_BP:1.1.2.1
	RELENG_8_0_0_RELEASE:1.1.2.1.2.1
	RELENG_8_0:1.1.2.1.0.2
	RELENG_8_0_BP:1.1.2.1
	RELENG_8:1.1.0.2
	RELENG_8_BP:1.1;
locks; strict;
comment	@# @;


1.6
date	2012.11.17.01.49.16;	author svnexp;	state Exp;
branches
	1.6.2.1;
next	1.5;

1.5
date	2012.06.01.21.26.28;	author obrien;	state Exp;
branches;
next	1.4;

1.4
date	2012.05.30.22.21.25;	author obrien;	state Exp;
branches;
next	1.3;

1.3
date	2012.03.22.08.48.42;	author stas;	state Exp;
branches;
next	1.2;

1.2
date	2011.09.27.07.14.12;	author stas;	state Exp;
branches;
next	1.1;

1.1
date	2008.05.07.13.53.04;	author dfr;	state Exp;
branches
	1.1.2.1
	1.1.4.1;
next	;

1.6.2.1
date	2012.11.17.01.49.16;	author svnexp;	state dead;
branches;
next	1.6.2.2;

1.6.2.2
date	2013.03.28.13.02.54;	author svnexp;	state Exp;
branches;
next	;

1.1.2.1
date	2009.08.03.08.13.06;	author kensmith;	state Exp;
branches
	1.1.2.1.2.1
	1.1.2.1.4.1
	1.1.2.1.6.1
	1.1.2.1.8.1;
next	1.1.2.2;

1.1.2.2
date	2012.11.17.10.36.00;	author svnexp;	state Exp;
branches;
next	;

1.1.2.1.2.1
date	2009.10.25.01.10.29;	author kensmith;	state Exp;
branches;
next	;

1.1.2.1.4.1
date	2010.06.14.02.09.06;	author kensmith;	state Exp;
branches;
next	;

1.1.2.1.6.1
date	2010.12.21.17.09.25;	author kensmith;	state Exp;
branches;
next	;

1.1.2.1.8.1
date	2012.03.03.06.15.13;	author kensmith;	state Exp;
branches;
next	1.1.2.1.8.2;

1.1.2.1.8.2
date	2012.11.17.08.24.41;	author svnexp;	state Exp;
branches;
next	;

1.1.4.1
date	2011.09.23.00.51.37;	author kensmith;	state Exp;
branches;
next	1.1.4.2;

1.1.4.2
date	2011.09.27.18.40.13;	author stas;	state Exp;
branches
	1.1.4.2.2.1
	1.1.4.2.4.1;
next	1.1.4.3;

1.1.4.3
date	2012.11.17.11.36.15;	author svnexp;	state Exp;
branches;
next	;

1.1.4.2.2.1
date	2011.11.11.04.20.22;	author kensmith;	state Exp;
branches;
next	1.1.4.2.2.2;

1.1.4.2.2.2
date	2012.11.17.08.36.15;	author svnexp;	state Exp;
branches;
next	;

1.1.4.2.4.1
date	2012.08.05.23.54.33;	author kensmith;	state Exp;
branches;
next	1.1.4.2.4.2;

1.1.4.2.4.2
date	2012.11.17.08.47.05;	author svnexp;	state Exp;
branches;
next	;


desc
@@


1.6
log
@Switching exporter and resync
@
text
@# $FreeBSD: head/kerberos5/lib/libhx509/Makefile 236422 2012-06-01 21:26:28Z obrien $

LIB=	hx509
LDFLAGS=	-Wl,--no-undefined
VERSION_MAP= ${KRB5DIR}/lib/hx509/version-script.map
LDADD=	-lasn1 -lcom_err -lcrypto -lroken -lwind
DPADD=	${LIBASN1} ${LIBCOM_ERR} ${LIBCRYPTO} ${LIBROKEN} ${LIBWIND}

MAN=	hx509.3 \
	hx509_ca.3 \
	hx509_cert.3 \
	hx509_cms.3 \
	hx509_crypto.3 \
	hx509_env.3 \
	hx509_error.3 \
	hx509_keyset.3 \
	hx509_lock.3 \
	hx509_misc.3 \
	hx509_name.3 \
	hx509_peer.3 \
	hx509_print.3 \
	hx509_query.3 \
	hx509_revoke.3 \
	hx509_verify.3

MLINKS=	hx509.3 hx509_context_free.3 \
	hx509.3 hx509_context_init.3 \
	hx509_ca.3 hx509_ca_sign.3 \
	hx509_ca.3 hx509_ca_sign_self.3 \
	hx509_ca.3 hx509_ca_tbs_add_crl_dp_uri.3 \
	hx509_ca.3 hx509_ca_tbs_add_eku.3 \
	hx509_ca.3 hx509_ca_tbs_add_san_hostname.3 \
	hx509_ca.3 hx509_ca_tbs_add_san_jid.3 \
	hx509_ca.3 hx509_ca_tbs_add_san_ms_upn.3 \
	hx509_ca.3 hx509_ca_tbs_add_san_otherName.3 \
	hx509_ca.3 hx509_ca_tbs_add_san_pkinit.3 \
	hx509_ca.3 hx509_ca_tbs_add_san_rfc822name.3 \
	hx509_ca.3 hx509_ca_tbs_free.3 \
	hx509_ca.3 hx509_ca_tbs_init.3 \
	hx509_ca.3 hx509_ca_tbs_set_ca.3 \
	hx509_ca.3 hx509_ca_tbs_set_domaincontroller.3 \
	hx509_ca.3 hx509_ca_tbs_set_notAfter.3 \
	hx509_ca.3 hx509_ca_tbs_set_notAfter_lifetime.3 \
	hx509_ca.3 hx509_ca_tbs_set_notBefore.3 \
	hx509_ca.3 hx509_ca_tbs_set_proxy.3 \
	hx509_ca.3 hx509_ca_tbs_set_serialnumber.3 \
	hx509_ca.3 hx509_ca_tbs_set_spki.3 \
	hx509_ca.3 hx509_ca_tbs_set_subject.3 \
	hx509_ca.3 hx509_ca_tbs_set_template.3 \
	hx509_ca.3 hx509_ca_tbs_set_unique.3 \
	hx509_ca.3 hx509_ca_tbs_subject_expand.3 \
	hx509_ca.3 hx509_ca_tbs_template_units.3 \
	hx509_cert.3 hx509_cert_binary.3 \
	hx509_cert.3 hx509_cert_check_eku.3 \
	hx509_cert.3 hx509_cert_cmp.3 \
	hx509_cert.3 hx509_cert_find_subjectAltName_otherName.3 \
	hx509_cert.3 hx509_cert_free.3 \
	hx509_cert.3 hx509_cert_get_SPKI.3 \
	hx509_cert.3 hx509_cert_get_SPKI_AlgorithmIdentifier.3 \
	hx509_cert.3 hx509_cert_get_attribute.3 \
	hx509_cert.3 hx509_cert_get_base_subject.3 \
	hx509_cert.3 hx509_cert_get_friendly_name.3 \
	hx509_cert.3 hx509_cert_get_issuer.3 \
	hx509_cert.3 hx509_cert_get_issuer_unique_id.3 \
	hx509_cert.3 hx509_cert_get_notAfter.3 \
	hx509_cert.3 hx509_cert_get_notBefore.3 \
	hx509_cert.3 hx509_cert_get_serialnumber.3 \
	hx509_cert.3 hx509_cert_get_subject.3 \
	hx509_cert.3 hx509_cert_get_subject_unique_id.3 \
	hx509_cert.3 hx509_cert_init.3 \
	hx509_cert.3 hx509_cert_init_data.3 \
	hx509_cert.3 hx509_cert_ref.3 \
	hx509_cert.3 hx509_cert_set_friendly_name.3 \
	hx509_cert.3 hx509_print_cert.3 \
	hx509_cert.3 hx509_query_alloc.3 \
	hx509_cert.3 hx509_query_free.3 \
	hx509_cert.3 hx509_query_match_cmp_func.3 \
	hx509_cert.3 hx509_query_match_eku.3 \
	hx509_cert.3 hx509_query_match_friendly_name.3 \
	hx509_cert.3 hx509_query_match_issuer_serial.3 \
	hx509_cert.3 hx509_query_match_option.3 \
	hx509_cert.3 hx509_query_statistic_file.3 \
	hx509_cert.3 hx509_query_unparse_stats.3 \
	hx509_cert.3 hx509_verify_ctx_f_allow_default_trustanchors.3 \
	hx509_cert.3 hx509_verify_hostname.3 \
	hx509_cms.3 hx509_cms_create_signed_1.3 \
	hx509_cms.3 hx509_cms_envelope_1.3 \
	hx509_cms.3 hx509_cms_unenvelope.3 \
	hx509_cms.3 hx509_cms_unwrap_ContentInfo.3 \
	hx509_cms.3 hx509_cms_verify_signed.3 \
	hx509_cms.3 hx509_cms_wrap_ContentInfo.3 \
	hx509_crypto.3 hx509_verify_signature.3 \
	hx509_env.3 hx509_env_add.3 \
	hx509_env.3 hx509_env_add_binding.3 \
	hx509_env.3 hx509_env_find.3 \
	hx509_env.3 hx509_env_find_binding.3 \
	hx509_env.3 hx509_env_free.3 \
	hx509_env.3 hx509_env_lfind.3 \
	hx509_error.3 hx509_clear_error_string.3 \
	hx509_error.3 hx509_err.3 \
	hx509_error.3 hx509_free_error_string.3 \
	hx509_error.3 hx509_get_error_string.3 \
	hx509_error.3 hx509_set_error_string.3 \
	hx509_error.3 hx509_set_error_stringv.3 \
	hx509_keyset.3 hx509_certs_add.3 \
	hx509_keyset.3 hx509_certs_append.3 \
	hx509_keyset.3 hx509_certs_end_seq.3 \
	hx509_keyset.3 hx509_certs_filter.3 \
	hx509_keyset.3 hx509_certs_find.3 \
	hx509_keyset.3 hx509_certs_free.3 \
	hx509_keyset.3 hx509_certs_info.3 \
	hx509_keyset.3 hx509_certs_init.3 \
	hx509_keyset.3 hx509_certs_iter_f.3 \
	hx509_keyset.3 hx509_certs_merge.3 \
	hx509_keyset.3 hx509_certs_next_cert.3 \
	hx509_keyset.3 hx509_certs_start_seq.3 \
	hx509_keyset.3 hx509_certs_store.3 \
	hx509_keyset.3 hx509_ci_print_names.3 \
	hx509_keyset.3 hx509_get_one_cert.3 \
	hx509_misc.3 hx509_free_octet_string_list.3 \
	hx509_misc.3 hx509_xfree.3 \
	hx509_name.3 hx509_general_name_unparse.3 \
	hx509_name.3 hx509_name_binary.3 \
	hx509_name.3 hx509_name_cmp.3 \
	hx509_name.3 hx509_name_copy.3 \
	hx509_name.3 hx509_name_expand.3 \
	hx509_name.3 hx509_name_free.3 \
	hx509_name.3 hx509_name_is_null_p.3 \
	hx509_name.3 hx509_name_to_Name.3 \
	hx509_name.3 hx509_name_to_string.3 \
	hx509_name.3 hx509_parse_name.3 \
	hx509_name.3 hx509_unparse_der_name.3 \
	hx509_peer.3 hx509_peer_info_add_cms_alg.3 \
	hx509_peer.3 hx509_peer_info_alloc.3 \
	hx509_peer.3 hx509_peer_info_free.3 \
	hx509_peer.3 hx509_peer_info_set_cert.3 \
	hx509_peer.3 hx509_peer_info_set_cms_algs.3 \
	hx509_print.3 hx509_bitstring_print.3 \
	hx509_print.3 hx509_cert_keyusage_print.3 \
	hx509_print.3 hx509_oid_print.3 \
	hx509_print.3 hx509_oid_sprint.3 \
	hx509_print.3 hx509_print_stdout.3 \
	hx509_print.3 hx509_validate_cert.3 \
	hx509_print.3 hx509_validate_ctx_add_flags.3 \
	hx509_print.3 hx509_validate_ctx_free.3 \
	hx509_print.3 hx509_validate_ctx_init.3 \
	hx509_print.3 hx509_validate_ctx_set_print.3 \
	hx509_revoke.3 hx509_ocsp_request.3 \
	hx509_revoke.3 hx509_revoke_add_crl.3 \
	hx509_revoke.3 hx509_revoke_add_ocsp.3 \
	hx509_revoke.3 hx509_revoke_free.3 \
	hx509_revoke.3 hx509_revoke_init.3 \
	hx509_revoke.3 hx509_revoke_ocsp_print.3 \
	hx509_revoke.3 hx509_revoke_verify.3 \
	hx509_verify.3 hx509_context_set_missing_revoke.3 \
	hx509_verify.3 hx509_crl_add_revoked_certs.3 \
	hx509_verify.3 hx509_crl_alloc.3 \
	hx509_verify.3 hx509_crl_free.3 \
	hx509_verify.3 hx509_crl_lifetime.3 \
	hx509_verify.3 hx509_crl_sign.3 \
	hx509_verify.3 hx509_ocsp_verify.3 \
	hx509_verify.3 hx509_verify_attach_anchors.3 \
	hx509_verify.3 hx509_verify_attach_revoke.3 \
	hx509_verify.3 hx509_verify_destroy_ctx.3 \
	hx509_verify.3 hx509_verify_init_ctx.3 \
	hx509_verify.3 hx509_verify_path.3 \
	hx509_verify.3 hx509_verify_set_max_depth.3 \
	hx509_verify.3 hx509_verify_set_proxy_certificate.3 \
	hx509_verify.3 hx509_verify_set_strict_rfc3280_verification.3 \
	hx509_verify.3 hx509_verify_set_time.3

INCS=	hx509-private.h \
	hx509-protos.h \
	hx509.h \
	hx509_err.h

SRCS=	ca.c \
	cert.c \
	cms.c \
	collector.c \
	crypto.c \
	doxygen.c \
	error.c \
	env.c \
	file.c \
	sel.c \
	sel-gram.y \
	sel-lex.l \
	keyset.c \
	ks_dir.c \
	ks_file.c \
	ks_mem.c \
	ks_null.c \
	ks_p11.c \
	ks_p12.c \
	ks_keychain.c \
	lock.c \
	name.c \
	peer.c \
	print.c \
	softp11.c \
	req.c \
	revoke.c

SRCS+=	hx509_err.c \
	hx509_err.h

SRCS+=	${GEN_OCSP:S/.x$/.c/:S/.hx$/.h/} \
	${GEN_PKCS10:S/.x$/.c/:S/.hx$/.h/}

CFLAGS+=-I${KRB5DIR}/lib/hx509
CFLAGS+=-I${KRB5DIR}/lib/hx509/ref
CFLAGS+=-I${KRB5DIR}/lib/asn1
CFLAGS+=-I${KRB5DIR}/lib/wind
CFLAGS+=-I${KRB5DIR}/lib/roken -I.

GEN_OCSP= \
	asn1_OCSPBasicOCSPResponse.x \
	asn1_OCSPCertID.x \
	asn1_OCSPCertStatus.x \
	asn1_OCSPInnerRequest.x \
	asn1_OCSPKeyHash.x \
	asn1_OCSPRequest.x \
	asn1_OCSPResponderID.x \
	asn1_OCSPResponse.x \
	asn1_OCSPResponseBytes.x \
	asn1_OCSPResponseData.x \
	asn1_OCSPResponseStatus.x \
	asn1_OCSPSignature.x \
	asn1_OCSPSingleResponse.x \
	asn1_OCSPTBSRequest.x \
	asn1_OCSPVersion.x \
	asn1_id_pkix_ocsp.x \
	asn1_id_pkix_ocsp_basic.x \
	asn1_id_pkix_ocsp_nonce.x \
	ocsp_asn1.hx \
	ocsp_asn1-priv.hx

GEN_PKCS10= \
	asn1_CertificationRequestInfo.x \
	asn1_CertificationRequest.x \
	pkcs10_asn1.hx \
	pkcs10_asn1-priv.hx

GEN_CRMF= \
	asn1_CRMFRDNSequence.x \
	asn1_CertReqMessages.x \
	asn1_CertReqMsg.x \
	asn1_CertRequest.x \
	asn1_CertTemplate.x \
	asn1_Controls.x \
	asn1_PBMParameter.x \
	asn1_PKMACValue.x \
	asn1_POPOPrivKey.x \
	asn1_POPOSigningKey.x \
	asn1_POPOSigningKeyInput.x \
	asn1_ProofOfPossession.x \
	asn1_SubsequentMessage.x \
	crmf_asn1.hx \
	crmf_asn1-priv.hx

GEN+=	${GEN_OCSP}
GEN+=	${GEN_PKCS10}
GEN+=	${GEN_CRMF}

CLEANFILES= ${GEN} ${GEN:S/.x$/.c/:S/.hx$/.h/} ocsp_asn1_files \
	pkcs10_asn1_files crmf_asn1_files ocsp_asn1-template.[ch]* \
	pkcs10_asn1-template.[ch]* crmf_asn1-template.[ch]*

INCS+=	ocsp_asn1.h pkcs10_asn1.h crmf_asn1.h

${GEN_OCSP}: ocsp.asn1 ocsp.opt
	${ASN1_COMPILE} --option-file=${.ALLSRC:M*.opt} \
	 ${.ALLSRC:M*.asn1} ocsp_asn1

${GEN_PKCS10}: pkcs10.asn1 pkcs10.opt
	${ASN1_COMPILE} --option-file=${.ALLSRC:M*.opt} \
	${.ALLSRC:M*.asn1} pkcs10_asn1

${GEN_CRMF}: crmf.asn1
	${ASN1_COMPILE} ${.ALLSRC:M*.asn1} crmf_asn1

.SUFFIXES: .h .c .x .hx

.x.c:   
	cmp -s ${.IMPSRC} ${.TARGET} 2> /dev/null || cp ${.IMPSRC} ${.TARGET}

.hx.h:
	cmp -s ${.IMPSRC} ${.TARGET} 2> /dev/null || cp ${.IMPSRC} ${.TARGET}

.include <bsd.lib.mk>

.SUFFIXES: .h .c .x .hx

.PATH: ${KRB5DIR}/lib/hx509 ${KRB5DIR}/lib/asn1 ${KRB5DIR}/doc/doxyout/hx509/man/man3
@


1.6.2.1
log
@file Makefile was added on branch RELENG_8_4 on 2013-03-28 13:02:54 +0000
@
text
@d1 295
@


1.6.2.2
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/248810
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a0 103
# $FreeBSD: releng/8.4/kerberos5/lib/libhx509/Makefile 178828 2008-05-07 13:53:12Z dfr $

LIB=	hx509
VERSION_MAP= ${KRB5DIR}/lib/hx509/version-script.map

INCS=	hx509-private.h \
	hx509-protos.h \
	hx509.h \
	hx509_err.h

SRCS=	ca.c \
	cert.c \
	cms.c \
	collector.c \
	crypto.c \
	doxygen.c \
	error.c \
	env.c \
	file.c \
	hx509-private.h \
	hx509-protos.h \
	hx509.h \
	hx_locl.h \
	keyset.c \
	ks_dir.c \
	ks_file.c \
	ks_mem.c \
	ks_null.c \
	ks_p11.c \
	ks_p12.c \
	ks_keychain.c \
	lock.c \
	name.c \
	peer.c \
	print.c \
	softp11.c \
	ref/pkcs11.h \
	req.c \
	revoke.c

SRCS+=	hx509_err.c \
	hx509_err.h

SRCS+=	${GEN:S/.x$/.c/}

CFLAGS+=-I${KRB5DIR}/lib/hx509
CFLAGS+=-I${KRB5DIR}/lib/hx509/ref
CFLAGS+=-I${KRB5DIR}/lib/asn1
CFLAGS+=-I${KRB5DIR}/lib/roken -I.

GEN_OCSP= \
	asn1_OCSPBasicOCSPResponse.x \
	asn1_OCSPCertID.x \
	asn1_OCSPCertStatus.x \
	asn1_OCSPInnerRequest.x \
	asn1_OCSPKeyHash.x \
	asn1_OCSPRequest.x \
	asn1_OCSPResponderID.x \
	asn1_OCSPResponse.x \
	asn1_OCSPResponseBytes.x \
	asn1_OCSPResponseData.x \
	asn1_OCSPResponseStatus.x \
	asn1_OCSPSignature.x \
	asn1_OCSPSingleResponse.x \
	asn1_OCSPTBSRequest.x \
	asn1_OCSPVersion.x \
	asn1_id_pkix_ocsp.x \
	asn1_id_pkix_ocsp_basic.x \
	asn1_id_pkix_ocsp_nonce.x

GEN_PKCS10= \
	asn1_CertificationRequestInfo.x \
	asn1_CertificationRequest.x

GEN+=	${GEN_OCSP}
GEN+=	${GEN_PKCS10}

CLEANFILES= ${GEN} ${GEN:S/.x$/.c/} asn1_files

GEN_ASN1=ocsp_asn1.h pkcs10_asn1.h
CLEANFILES+=${GEN_ASN1}
SRCS+=${GEN_ASN1}
INCS+=${GEN_ASN1}

.ORDER: ${GEN} ${GEN_ASN1}

${GEN_OCSP} ocsp_asn1.h: ocsp.asn1 ../../tools/asn1_compile/asn1_compile
	../../tools/asn1_compile/asn1_compile --preserve-binary=OCSPTBSRequest --preserve-binary=OCSPResponseData ${.ALLSRC:M*.asn1} ocsp_asn1

${GEN_PKCS10} pkcs10_asn1.h: pkcs10.asn1 ../../tools/asn1_compile/asn1_compile
	../../tools/asn1_compile/asn1_compile ${.ALLSRC:M*.asn1} pkcs10_asn1

../../tools/asn1_compile/asn1_compile:
	cd ${.CURDIR}/../../tools/asn1_compile && ${MAKE}

.for I in ${GEN}
${I:R}.c: ${I}
	cat ${.ALLSRC} > ${.TARGET}
.endfor

.include <bsd.lib.mk>

.PATH: ${KRB5DIR}/lib/hx509 ${KRB5DIR}/lib/asn1
@


1.5
log
@SVN rev 236422 on 2012-06-01 21:26:28Z by obrien

Centralize the specification of the krb5 build tools.
@
text
@d1 1
a1 1
# $FreeBSD$
@


1.4
log
@SVN rev 236337 on 2012-05-30 22:21:25Z by obrien

* Remove headers from SRCS that are not generated
  (and are in /usr/src/crypto/heimdal/).

* Avoid race conditions with 'make -j<N>'.
@
text
@a271 2
ASN1_COMPILE=	asn1_compile

@


1.3
log
@SVN rev 233294 on 2012-03-22 08:48:42Z by stas

- Update FreeBSD Heimdal distribution to version 1.5.1.  This also brings
  several new kerberos related libraries and applications to FreeBSD:
  o kgetcred(1) allows one to manually get a ticket for a particular service.
  o kf(1) securily forwards ticket to another host through an authenticated
    and encrypted stream.
  o kcc(1) is an umbrella program around klist(1), kswitch(1), kgetcred(1)
    and other user kerberos operations. klist and kswitch are just symlinks
    to kcc(1) now.
  o kswitch(1) allows you to easily switch between kerberos credentials if
    you're running KCM.
  o hxtool(1) is a certificate management tool to use with PKINIT.
  o string2key(1) maps a password into key.
  o kdigest(8) is a userland tool to access the KDC's digest interface.
  o kimpersonate(8) creates a "fake" ticket for a service.

  We also now install manpages for some lirbaries that were not installed
  before, libheimntlm and libhx509.

- The new HEIMDAL version no longer supports Kerberos 4.  All users are
  recommended to switch to Kerberos 5.

- Weak ciphers are now disabled by default.  To enable DES support (used
  by telnet(8)), use "allow_weak_crypto" option in krb5.conf.

- libtelnet, pam_ksu and pam_krb5 are now compiled with error on warnings
  disabled due to the function they use (krb5_get_err_text(3)) being
  deprecated.  I plan to work on this next.

- Heimdal's KDC now require sqlite to operate.  We use the bundled version
  and install it as libheimsqlite.  If some other FreeBSD components will
  require it in the future we can rename it to libbsdsqlite and use for these
  components as well.

- This is not a latest Heimdal version, the new one was released while I was
  working on the update.  I will update it to 1.5.2 soon, as it fixes some
  important bugs and security issues.
@
text
@a178 1
	char_map.h \
a185 4
	hx509-private.h \
	hx509-protos.h \
	hx509.h \
	hx_locl.h \
a186 1
	sel.h \
a201 1
	ref/pkcs11.h \
@


1.2
log
@SVN rev 225778 on 2011-09-27 07:14:12Z by stas

- Add missing interdependencies to kerberos libraries.  Some of the
  kerberos libraries were not linked properly (missing dependencies),
  which causes 3rd party applications linking to fail when --as-needed
  ld flag is used.  I also added the --no-undefined ld(1) flag to make
  sure that there're no missing dependencies.

MFC after:	3 days
@
text
@d6 165
a170 2
LDADD=	-lasn1 -lcom_err -lcrypto -lroken
DPADD=	${LIBASN1} ${LIBCOM_ERR} ${LIBCRYPTO} ${LIBROKEN}
d179 1
d191 4
d215 2
a216 1
SRCS+=	${GEN:S/.x$/.c/}
d221 1
d242 3
a244 1
	asn1_id_pkix_ocsp_nonce.x
d248 20
a267 1
	asn1_CertificationRequest.x
d271 5
d277 1
a277 1
CLEANFILES= ${GEN} ${GEN:S/.x$/.c/} asn1_files
d279 1
a279 4
GEN_ASN1=ocsp_asn1.h pkcs10_asn1.h
CLEANFILES+=${GEN_ASN1}
SRCS+=${GEN_ASN1}
INCS+=${GEN_ASN1}
d281 3
a283 1
.ORDER: ${GEN} ${GEN_ASN1}
d285 3
a287 2
${GEN_OCSP} ocsp_asn1.h: ocsp.asn1 ../../tools/asn1_compile/asn1_compile
	../../tools/asn1_compile/asn1_compile --preserve-binary=OCSPTBSRequest --preserve-binary=OCSPResponseData ${.ALLSRC:M*.asn1} ocsp_asn1
d289 2
a290 2
${GEN_PKCS10} pkcs10_asn1.h: pkcs10.asn1 ../../tools/asn1_compile/asn1_compile
	../../tools/asn1_compile/asn1_compile ${.ALLSRC:M*.asn1} pkcs10_asn1
d292 1
a292 2
../../tools/asn1_compile/asn1_compile:
	cd ${.CURDIR}/../../tools/asn1_compile && ${MAKE}
d294 5
a298 4
.for I in ${GEN}
${I:R}.c: ${I}
	cat ${.ALLSRC} > ${.TARGET}
.endfor
d302 3
a304 1
.PATH: ${KRB5DIR}/lib/hx509 ${KRB5DIR}/lib/asn1
@


1.1
log
@Fix conflicts after heimdal-1.1 import and add build infrastructure. Import
all non-style changes made by heimdal to our own libgssapi.
@
text
@d4 1
d6 2
@


1.1.4.1
log
@SVN rev 225736 on 2011-09-23 00:51:37Z by kensmith

Copy head to stable/9 as part of 9.0-RELEASE release cycle.

Approved by:	re (implicit)
@
text
@@


1.1.4.2
log
@SVN rev 225811 on 2011-09-27 18:40:13Z by stas

- MFC r225778:
  - Add missing interdependencies to kerberos libraries.  Some of the
    kerberos libraries were not linked properly (missing dependencies),
    which causes 3rd party applications linking to fail when --as-needed
    ld flag is used.  I also added the --no-undefined ld(1) flag to make
    sure that there're no missing dependencies.

Approved by:	re (kib)
@
text
@a3 1
LDFLAGS=	-Wl,--no-undefined
a4 2
LDADD=	-lasn1 -lcom_err -lcrypto -lroken
DPADD=	${LIBASN1} ${LIBCOM_ERR} ${LIBCRYPTO} ${LIBROKEN}
@


1.1.4.3
log
@## SVN ##
## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/ 242902
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r242902 | dteske | 2012-11-11 23:29:45 +0000 (Sun, 11 Nov 2012) | 10 lines
## SVN ##
## SVN ## Fix a regression introduced by SVN r211417 that saw the breakage of a feature
## SVN ## documented in usr.sbin/sysinstall/help/shortcuts.hlp (reproduced below):
## SVN ##
## SVN ## If /usr/sbin/sysinstall is linked to another filename, say
## SVN ## `/usr/local/bin/configPackages', then the basename will be used
## SVN ## as an implicit command name.
## SVN ##
## SVN ## Reviewed by:	adrian (co-mentor)
## SVN ## Approved by:	adrian (co-mentor)
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d1 1
a1 1
# $FreeBSD: stable/9/kerberos5/lib/libhx509/Makefile 225811 2011-09-27 18:40:13Z stas $
@


1.1.4.2.4.1
log
@SVN rev 239080 on 2012-08-05 23:54:33Z by kensmith

Copy stable/9 to releng/9.1 as part of the 9.1-RELEASE release process.

Approved by:	re (implicit)
@
text
@@


1.1.4.2.4.2
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: releng/9.1/kerberos5/lib/libhx509/Makefile 225811 2011-09-27 18:40:13Z stas $
@


1.1.4.2.2.1
log
@SVN rev 227445 on 2011-11-11 04:20:22Z by kensmith

Copy stable/9 to releng/9.0 as part of the FreeBSD 9.0-RELEASE release
cycle.

Approved by:	re (implicit)
@
text
@@


1.1.4.2.2.2
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: releng/9.0/kerberos5/lib/libhx509/Makefile 225811 2011-09-27 18:40:13Z stas $
@


1.1.2.1
log
@SVN rev 196045 on 2009-08-03 08:13:06Z by kensmith

Copy head to stable/8 as part of 8.0 Release cycle.

Approved by:	re (Implicit)
@
text
@@


1.1.2.2
log
@## SVN ##
## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/ 242909
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r242909 | dim | 2012-11-12 07:47:19 +0000 (Mon, 12 Nov 2012) | 20 lines
## SVN ##
## SVN ## MFC r242625:
## SVN ##
## SVN ## Remove duplicate const specifiers in many drivers (I hope I got all of
## SVN ## them, please let me know if not).  Most of these are of the form:
## SVN ##
## SVN ## static const struct bzzt_type {
## SVN ##       [...list of members...]
## SVN ## } const bzzt_devs[] = {
## SVN ##       [...list of initializers...]
## SVN ## };
## SVN ##
## SVN ## The second const is unnecessary, as arrays cannot be modified anyway,
## SVN ## and if the elements are const, the whole thing is const automatically
## SVN ## (e.g. it is placed in .rodata).
## SVN ##
## SVN ## I have verified this does not change the binary output of a full kernel
## SVN ## build (except for build timestamps embedded in the object files).
## SVN ##
## SVN ## Reviewed by:	yongari, marius
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d1 1
a1 1
# $FreeBSD: stable/8/kerberos5/lib/libhx509/Makefile 178828 2008-05-07 13:53:12Z dfr $
@


1.1.2.1.8.1
log
@SVN rev 232438 on 2012-03-03 06:15:13Z by kensmith

Copy stable/8 to releng/8.3 as part of 8.3-RELEASE release cycle.

Approved by:	re (implicit)
@
text
@@


1.1.2.1.8.2
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: releng/8.3/kerberos5/lib/libhx509/Makefile 178828 2008-05-07 13:53:12Z dfr $
@


1.1.2.1.6.1
log
@SVN rev 216617 on 2010-12-21 17:09:25Z by kensmith

Copy stable/8 to releng/8.2 in preparation for FreeBSD-8.2 release.

Approved by:	re (implicit)
@
text
@@


1.1.2.1.4.1
log
@SVN rev 209145 on 2010-06-14 02:09:06Z by kensmith

Copy stable/8 to releng/8.1 in preparation for 8.1-RC1.

Approved by:	re (implicit)
@
text
@@


1.1.2.1.2.1
log
@SVN rev 198460 on 2009-10-25 01:10:29Z by kensmith

Copy stable/8 to releng/8.0 as part of 8.0-RELEASE release procedure.

Approved by:	re (implicit)
@
text
@@


