NetBSD/sbin/setkey/Makefile

# $NetBSD: Makefile,v 1.1 2000/06/13 15:15:24 itojun Exp $

PROG=	setkey
SRCS=	setkey.c parse.y token.l

#CFLAGS+=-g
CPPFLAGS+=-I${.CURDIR}/../../lib/libipsec
LDADD+=	-ll -ly
DPADD+=	${LIBL} ${LIBY}
CLEANFILES+=	y.tab.c y.tab.h key_test.o keytest
YFLAGS+=-d

#SCRIPTS=	scriptdump

all: ${PROG} scriptdump

CPPFLAGS+=-DIPSEC_DEBUG -DINET6 -DYY_NO_UNPUT
CPPFLAGS+=-I. -I${.CURDIR}
LDADD+= -lipsec
DPADD+=	${LIBIPSEC}
CLEANFILES+=	scriptdump

# libpfkey.
# ipsec_strerror.c is for avoiding shlib reference to non-exported function.
.PATH: ${.CURDIR}/../../lib/libipsec ${.CURDIR}/../../sys/netkey
SRCS+= pfkey.c pfkey_dump.c key_debug.c ipsec_strerror.c
CPPFLAGS+=-I${.CURDIR}/../../lib/libipsec -I${.CURDIR}/../../sys/netkey

MAN=	setkey.8
LOCALPREFIX=	/usr/pkg

scriptdump: scriptdump.pl
	sed -e 's#@LOCALPREFIX@#${LOCALPREFIX}#' < $> > scriptdump

.include <bsd.prog.mk>
move setkey(8) from usr.sbin to sbin, to enable us to initialize IPsec manual key before /usr mount.. (based on "don't use cvsmove" discussion i have seen, I did not use cvsmove) 2000-06-13 19:15:21 +04:00			`# $NetBSD: Makefile,v 1.1 2000/06/13 15:15:24 itojun Exp $`
setkey: configure IPsec keys to the kernel key table (not subject to export control as itself does not contain crypto) 1999-07-02 21:41:23 +04:00
			`PROG= setkey`
			`SRCS= setkey.c parse.y token.l`
avoid shlib reference for pfkey_*. compile them on our own. 2000-03-14 00:04:07 +03:00
move setkey(8) from usr.sbin to sbin, to enable us to initialize IPsec manual key before /usr mount.. (based on "don't use cvsmove" discussion i have seen, I did not use cvsmove) 2000-06-13 19:15:21 +04:00			`#CFLAGS+=-g`
sync with almost-latest KAME IPsec. full changelog would be too big to mention here. notable changes are like below. kernel: - make PF_KEY kernel interface more robust against broken input stream. it includes complete internal structure change in sys/netkey/key.c. - remove non-RFC compliant change in PF_KEY API, in particular, in struct sadb_msg. we cannot just change these standard structs. sadb_x_sa2 is introduced instead. - remove prototypes for pfkey_xx functions from /usr/include/net/pfkeyv2.h. these functions are not supplied in /usr/lib. setkey(8): - get/delete does not require "-m mode" (ignored with warning, if you specify it) - spddelete takes direction specification 2000-06-12 14:40:37 +04:00			`CPPFLAGS+=-I${.CURDIR}/../../lib/libipsec`
setkey: configure IPsec keys to the kernel key table (not subject to export control as itself does not contain crypto) 1999-07-02 21:41:23 +04:00			`LDADD+= -ll -ly`
catch up with latest libipsec/kernel. 2000-01-31 17:22:41 +03:00			`DPADD+= ${LIBL} ${LIBY}`
			`CLEANFILES+= y.tab.c y.tab.h key_test.o keytest`
			`YFLAGS+=-d`
setkey: configure IPsec keys to the kernel key table (not subject to export control as itself does not contain crypto) 1999-07-02 21:41:23 +04:00
do not install /usr/sbin/scriptdump, a helper perl script for setkey(8). makes no sense when we have no perl in base system. 2000-06-13 09:35:45 +04:00			`#SCRIPTS= scriptdump`
setkey: configure IPsec keys to the kernel key table (not subject to export control as itself does not contain crypto) 1999-07-02 21:41:23 +04:00
catch up with latest libipsec/kernel. 2000-01-31 17:22:41 +03:00			`all: ${PROG} scriptdump`
setkey: configure IPsec keys to the kernel key table (not subject to export control as itself does not contain crypto) 1999-07-02 21:41:23 +04:00
catch up with latest libipsec/kernel. 2000-01-31 17:22:41 +03:00			`CPPFLAGS+=-DIPSEC_DEBUG -DINET6 -DYY_NO_UNPUT`
			`CPPFLAGS+=-I. -I${.CURDIR}`
setkey: configure IPsec keys to the kernel key table (not subject to export control as itself does not contain crypto) 1999-07-02 21:41:23 +04:00			`LDADD+= -lipsec`
			`DPADD+= ${LIBIPSEC}`
catch up with latest libipsec/kernel. 2000-01-31 17:22:41 +03:00			`CLEANFILES+= scriptdump`
setkey: configure IPsec keys to the kernel key table (not subject to export control as itself does not contain crypto) 1999-07-02 21:41:23 +04:00
avoid shlib reference for pfkey_*. compile them on our own. 2000-03-14 00:04:07 +03:00			`# libpfkey.`
			`# ipsec_strerror.c is for avoiding shlib reference to non-exported function.`
			`.PATH: ${.CURDIR}/../../lib/libipsec ${.CURDIR}/../../sys/netkey`
			`SRCS+= pfkey.c pfkey_dump.c key_debug.c ipsec_strerror.c`
			`CPPFLAGS+=-I${.CURDIR}/../../lib/libipsec -I${.CURDIR}/../../sys/netkey`

setkey: configure IPsec keys to the kernel key table (not subject to export control as itself does not contain crypto) 1999-07-02 21:41:23 +04:00			`MAN= setkey.8`
			`LOCALPREFIX= /usr/pkg`

catch up with latest libipsec/kernel. 2000-01-31 17:22:41 +03:00			`scriptdump: scriptdump.pl`
			`sed -e 's#@LOCALPREFIX@#${LOCALPREFIX}#' < $> > scriptdump`
setkey: configure IPsec keys to the kernel key table (not subject to export control as itself does not contain crypto) 1999-07-02 21:41:23 +04:00
			`.include <bsd.prog.mk>`