krb5: new package

Signed-off-by Arnout Vandecappelle (Essensium/Mind) <[email protected]>

Cc Daniel Price <[email protected]>

Cc Charles Hardin <[email protected]>

---
Note: I do NOT want to be added to DEVELOPERS for this package, it's just something I cobbled together quickly.

---
 package/Config.in      |  1 +
 package/krb5/Config.in | 13 ++++++++++++
 package/krb5/krb5.hash |  2 ++
 package/krb5/krb5.mk   | 55 ++++++++++++++++++++++++++++++
++++++++++++++++++++
 4 files changed, 71 insertions(+)
 create mode 100644 package/krb5/Config.in
 create mode 100644 package/krb5/krb5.hash
 create mode 100644 package/krb5/krb5.mk

package/Config.in +1 -0

index 0d449dc..83ce629 100644
@@ -1189,6 +1189,7 @@ menu "Networking"
        source "package/gupnp-dlna/Config.in"
        source "package/ibrcommon/Config.in"
        source "package/ibrdtn/Config.in"
+       source "package/krb5/Config.in"
        source "package/libcgi/Config.in"
        source "package/libcgicc/Config.in"
        source "package/libcoap/Config.in"

package/krb5/Config.in new file +13 -0

new file mode 100644
index 0000000..43fd799
@@ -0,0 +1,13 @@
+config BR2_PACKAGE_KRB5
+       bool "krb5"
+       depends on BR2_USE_MMU # fork()
+       help
+         KRB5 is the MIT Kerberos Version 5 implementation
+
+         Kerberos is a network authentication protocol. It is designed
+         to provide strong authentication for client/server
+         applications by using secret-key cryptography. A free
+         implementation of this protocol is available from the
+         Massachusetts Institute of Technology.
+
+         http://web.mit.edu/Kerberos

package/krb5/krb5.hash new file +1 -0

new file mode 100644
index 0000000..22cd970
@@ -0,0 +1,2 @@
+# Locally calculated after checking pgp signature from

https://web.mit.edu/kerberos/krb5-1.14/krb5-1.14.4.sig
+sha256 03a61a4280c9161771fb39019085dbe6a57aa602080515ff93b43cd6137e0b95 krb5-1.14.4.tar.gz

package/krb5/krb5.mk new file +1 -0

new file mode 100644
index 0000000..59603c5
@@ -0,0 +1,55 @@
+###########################################################

#####################

package/krb5/krb5.mk new file +4 -0

+#
+# krb5
+#
+###########################################################

#####################

package/krb5/krb5.mk new file +50 -1

+
+KRB5_VERSION_MAJOR = 1.14
+KRB5_VERSION = $(KRB5_VERSION_MAJOR).4
+KRB5_SITE = http://web.mit.edu/kerberos/dist/krb5/$(KRB5_VERSION_MAJOR)
+KRB5_LICENSE = BSD-2c, others
+KRB5_LICENSE_FILES = NOTICE
+KRB5_SUBDIR = src
+KRB5_INSTALL_STAGING = YES
+
+KRB5_CONF_ENV = \
+       krb5_cv_attr_constructor_destructor=yes,yes \
+       ac_cv_func_regcomp=yes \
+       krb5_cv_sys_rcdir=/tmp \
+       ac_cv_printf_positional=yes \
+       WARN_CFLAGS='-Wall'
+
+KRB5_CONF_OPTS = \
+       --without-tcl \
+       --without-hesiod \
+       --without-ldap \
+       --without-libedit \
+       --without-libreadline
+
+# No buildroot packages exist for these so use the bundled ones.
+KRB5_CONF_OPTS += \
+       --without-system-libverto \
+       --without-system-ss \
+       --without-system-et
+
+# Buildroot's berkeleydb does not provide API 1.85
+KRB5_CONF_OPTS += --without-system-db
+
+ifeq ($(BR2_TOOLCHAIN_HAS_THREADS),y)
+KRB5_CONF_OPTS += --enable-thread-support
+else
+KRB5_CONF_OPTS += --disable-thread-support
+endif
+
+ifeq ($(BR2_PACKAGE_OPENSSL),y)
+KRB5_CONF_OPTS += --with-crypto-impl=openssl
+KRB5_DEPENDENCIES += openssl
+else ifeq ($(BR2_PACKAGE_LIBNSS),y)
+KRB5_CONF_OPTS += --with-crypto-impl=nss
+KRB5_DEPENDENCIES += libnss
+else
+KRB5_CONF_OPTS += --with-crypto-impl=builtin
+endif
+
+
+$(eval $(autotools-package))
--

2.10.2

Hello,

On Tue, 8 Nov 2016 01:50:32 +0100, Arnout Vandecappelle (Essensium/Mind) wrote:

package/krb5/krb5.mk line 33

Quoted 5 lines

package/krb5/krb5.mk new file +5 -0

+# No buildroot packages exist for these so use the bundled ones.
+KRB5_CONF_OPTS += \
+	--without-system-libverto \
+	--without-system-ss \
+	--without-system-et

We generally don't like to use bundled libraries. Are those libraries likely to be used by other packages? Or are they so specific to krb stuff that it isn't worth having separate packages for them?

Quoted 3 lines

We generally don't like to use bundled libraries. Are those libraries likely to be used by other packages? Or are they so specific to krb stuff that it isn't worth having separate packages for them?

You are so right. libss is part of e2fsprogs, and libverto makes sense
stand-alone. I can't find a libet in Debian, so I guess it doesn't make much sense on its own.

This was anyway just a bit of help for Charles and Daniel, so it may take some
time before I respin...