From f29d569cd33a73da5ad675f43a34ad53c5cc9bc6 Mon Sep 17 00:00:00 2001
From: davidovski <david@davidovski.xyz>
Date: Thu, 2 Feb 2023 14:10:02 +0000
Subject: Work

---
 repo/krb5/krb5.xibuild | 83 +++++++++++++++++++++++---------------------------
 1 file changed, 38 insertions(+), 45 deletions(-)

(limited to 'repo/krb5/krb5.xibuild')

diff --git a/repo/krb5/krb5.xibuild b/repo/krb5/krb5.xibuild
index c38416a..92185b9 100644
--- a/repo/krb5/krb5.xibuild
+++ b/repo/krb5/krb5.xibuild
@@ -1,59 +1,52 @@
 #!/bin/sh
 
-MAKEDEPS="make "
-DEPS="musl e2fsprogs libldap gdbm"
+NAME="krb5"
+DESC="The Kerberos network authentication system"
+
+MAKEDEPS="e2fsprogs libverto libldap openssl keyutils bison flex perl"
 
 PKG_VER=1.19.3
-SOURCE=http://kerberos.org/dist/krb5/${PKG_VER%.*}/krb5-${PKG_VER}.tar.gz
+maj_min=$PKG_VER
+case $PKG_VER in
+	*.*.*) maj_min=${PKG_VER%.*} ;;
+esac
+
+SOURCE="https://web.mit.edu/kerberos/dist/krb5/$maj_min/krb5-$PKG_VER.tar.gz"
 
 ADDITIONAL="
-    https://www.linuxfromscratch.org/patches/blfs/svn/mitkrb-${PKG_VER}-openssl3_fixes-1.patch
+krb5kadmind.initd
+krb5kdc.initd
+krb5kpropd.initd
+mit-krb5_krb5-config_LDFLAGS.patch
 "
 
-DESC="The Kerberos network authentication system"
-
 prepare () {
-
-    # fix denial of service vulnerability
-    sed -i '210a if (sprinc == NULL) {\
-       status = "NULL_SERVER";\
-       errcode = KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN;\
-       goto cleanup;\
-       }' src/kdc/do_tgs_req.c
-
-
-    cd src &&
-    #these were needed for libressl
-    #patch -Np0 -i ../patch-plugins_preauth_pkinit_pkinit__crypto__openssl.c
-    #patch -Np0 -i ../patch-plugins_preauth_pkinit_pkinit__crypto__openssl.h
-    patch -Np2 -i ../mitkrb-$PKG_VER-openssl3_fixes-1.patch
-
-
-   	sed -e "/LDFLAGS=/d" -i build-tools/krb5-config.in
-    sed -i -e 's@\^u}@^u cols 300}@' tests/dejagnu/config/default.exp || true
-    sed -i -e '/eq 0/{N;s/12 //}'    plugins/kdb/db2/libdb2/test/run.test || true
-    sed -i '/t_iprop.py/d'           tests/Makefile.in                    || true
+    cd src
+    mv ../*.patch .
+    apply_patches
 }
 
-build () {
-    # would be ideal to use openssl rather than builtin library
-    autoreconf
-    ./configure --prefix=/usr            \
-                --sysconfdir=/etc        \
-                --localstatedir=/var/lib \
-                --runstatedir=/run       \
-                --with-system-et         \
-                --with-system-ss         \
-                --with-system-verto=no   \
-                --with-crypto-impl=builtin \
-                --enable-dns-for-realm &&
-
-    make
+build() {
+	./configure \
+		CPPFLAGS="$CPPFLAGS -fPIC -I/usr/include/et" \
+		WARN_CFLAGS= \
+		--prefix=/usr \
+		--localstatedir=/var/lib \
+		--enable-shared \
+		--disable-nls \
+		--disable-static \
+		--disable-rpath \
+		--with-system-et \
+		--with-system-ss \
+		--with-system-verto \
+		--without-tcl \
+		--with-ldap
+	make
 }
 
-package () {
-    make DESTDIR=$PKG_DEST install
-
-    install -dm755 $PKG_DEST/usr/share/doc/krb5-$PKG_VER &&
-    cp -fr ../doc/*  $PKG_DEST/usr/share/doc/krb5-$PKG_VER
+package() {
+	make install DESTDIR="$PKG_DEST"
+	mkdir -p "$PKG_DEST"/usr/share/doc/krb5
+	mv "$PKG_DEST"/usr/share/examples "$PKG_DEST"/usr/share/doc/krb5/
 }
+
-- 
cgit v1.2.1