apk-tools/libfetch/Makefile

libs-y			+= libfetch.a
libfetch.a-objs		:= common.o fetch.o file.o ftp.o http.o openssl-compat.o
generate-y		+= ftperr.h httperr.h
CFLAGS_common.o		+= -DCA_CERT_FILE=\"$(CONFDIR)/ca.pem\" -DCA_CRL_FILE=\"$(CONFDIR)/crl.pem\"
CFLAGS_common.o		+= -DCLIENT_CERT_FILE=\"$(CONFDIR)/cert.pem\" -DCLIENT_KEY_FILE=\"$(CONFDIR)/cert.key\"

quiet_cmd_generr = GENERR  $@
      cmd_generr = $(obj)/errlist.sh $(basename $(<F))_errlist $(shell echo $(basename $(<F)) | tr a-z A-Z) $< > $@

$(obj)/%err.h: $(obj)/%.errors
	@$(call echo-cmd,generr) $(cmd_generr); $(cmd_generr)
build and use bundled libfetch natively 2017-10-05 07:57:45 +00:00			`libs-y += libfetch.a`
libfetch: improve openssl/libressl compatibility X509_check_host() is introduced in libressl-2.5.0 and openssl-1.0.2 which are not yet universally available. Add support for building against the older versions. 2017-10-06 10:23:54 +00:00			`libfetch.a-objs := common.o fetch.o file.o ftp.o http.o openssl-compat.o`
build and use bundled libfetch natively 2017-10-05 07:57:45 +00:00			`generate-y += ftperr.h httperr.h`
libfetch: improve ssl connections loosely based on the freebsd implementation, implement https connection settings to override CA, and use client certificate. new files supported in /etc/apk/: ca.pem - if exists, it contains CAs acceptable for https (otherwise system wide CAs are used) crl.pem - if ca.pem is used, this is the (optional) CRL for it cert.pem - used as client authentication certificate (+ key) cert.key - used as client key (can be also inside cert.pem) 2017-10-05 13:39:47 +00:00			`CFLAGS_common.o += -DCA_CERT_FILE=\"$(CONFDIR)/ca.pem\" -DCA_CRL_FILE=\"$(CONFDIR)/crl.pem\"`
			`CFLAGS_common.o += -DCLIENT_CERT_FILE=\"$(CONFDIR)/cert.pem\" -DCLIENT_KEY_FILE=\"$(CONFDIR)/cert.key\"`
import libfetch-2.38 from NetBSD ftp://ftp.fu-berlin.de/unix/NetBSD/packages/current-src/pkgsrc/net/libfetch/files libfetch comes (at least) in netbsd and freebsd flavors which differing functionality. Alpine and Arch package netbsd one, but it's not widely packaged across other distributions. We need NetBSD version as it does not use funopen(3) which is not supported in musl, and supports connection pooling. FreeBSD seems to be the orignal and better maintained version with support for SSL CAs, client certificate authentication, proxy authentication, and improved http redirect handling. So this imports NetBSD version, and future commits will pick up the needed improvements from FreeBSD tree. Incidentally, this also fixes #7857 and likes for good. 2017-10-05 05:57:18 +00:00
build and use bundled libfetch natively 2017-10-05 07:57:45 +00:00			`quiet_cmd_generr = GENERR $@`
			`cmd_generr = $(obj)/errlist.sh $(basename $(<F))_errlist $(shell echo $(basename $(<F)) \| tr a-z A-Z) $< > $@`
import libfetch-2.38 from NetBSD ftp://ftp.fu-berlin.de/unix/NetBSD/packages/current-src/pkgsrc/net/libfetch/files libfetch comes (at least) in netbsd and freebsd flavors which differing functionality. Alpine and Arch package netbsd one, but it's not widely packaged across other distributions. We need NetBSD version as it does not use funopen(3) which is not supported in musl, and supports connection pooling. FreeBSD seems to be the orignal and better maintained version with support for SSL CAs, client certificate authentication, proxy authentication, and improved http redirect handling. So this imports NetBSD version, and future commits will pick up the needed improvements from FreeBSD tree. Incidentally, this also fixes #7857 and likes for good. 2017-10-05 05:57:18 +00:00
build and use bundled libfetch natively 2017-10-05 07:57:45 +00:00			`$(obj)/%err.h: $(obj)/%.errors`
			`@$(call echo-cmd,generr) $(cmd_generr); $(cmd_generr)`