blob: ebad808e6e1fbc19223bd68cd3148fbcedb284bb (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
|
# Copyright 1999-2024 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=8
inherit autotools systemd linux-info tmpfiles
DESCRIPTION="Robust and highly flexible tunneling application compatible with many OSes"
HOMEPAGE="https://openvpn.net/"
if [[ ${PV} == "9999" ]]; then
EGIT_REPO_URI="https://github.com/OpenVPN/${PN}.git"
inherit git-r3
else
SRC_URI="https://build.openvpn.net/downloads/releases/${P}.tar.gz"
KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~mips ~ppc ~ppc64 ~riscv ~sparc ~x86"
fi
LICENSE="GPL-2"
SLOT="0"
IUSE="dco down-root examples inotify iproute2 +lz4 +lzo mbedtls +openssl"
IUSE+=" pam pkcs11 +plugins selinux systemd test"
RESTRICT="!test? ( test )"
REQUIRED_USE="
^^ ( openssl mbedtls )
pkcs11? ( !mbedtls )
!plugins? ( !pam !down-root )
inotify? ( plugins )
dco? ( !iproute2 )
"
COMMON_DEPEND="
kernel_linux? (
iproute2? ( sys-apps/iproute2[-minimal] )
)
lz4? ( app-arch/lz4 )
lzo? ( >=dev-libs/lzo-1.07 )
mbedtls? ( net-libs/mbedtls:= )
openssl? ( >=dev-libs/openssl-1.0.2:0= )
pam? ( sys-libs/pam )
pkcs11? ( >=dev-libs/pkcs11-helper-1.11 )
systemd? ( sys-apps/systemd )
dco? ( >=net-vpn/ovpn-dco-0.2 >=dev-libs/libnl-3.2.29:= )
sys-libs/libcap-ng:=
"
BDEPEND="
virtual/pkgconfig
"
DEPEND="
${COMMON_DEPEND}
test? ( dev-util/cmocka )
"
RDEPEND="
${COMMON_DEPEND}
acct-group/openvpn
acct-user/openvpn
selinux? ( sec-policy/selinux-openvpn )
"
if [[ ${PV} = "9999" ]]; then
BDEPEND+=" dev-python/docutils"
fi
pkg_setup() {
local CONFIG_CHECK="~TUN"
linux-info_pkg_setup
}
src_prepare() {
default
eautoreconf
}
src_configure() {
local -a myeconfargs
if ! use mbedtls; then
myeconfargs+=(
$(use_enable pkcs11)
)
fi
myeconfargs+=(
$(use_enable inotify async-push)
--with-crypto-library=$(usex mbedtls mbedtls openssl)
$(use_enable lz4)
$(use_enable lzo)
$(use_enable plugins)
$(use_enable iproute2)
$(use_enable pam plugin-auth-pam)
$(use_enable down-root plugin-down-root)
$(use_enable systemd)
$(use_enable dco)
)
SYSTEMD_UNIT_DIR=$(systemd_get_systemunitdir) \
TMPFILES_DIR="/usr/lib/tmpfiles.d" \
IPROUTE=$(usex iproute2 '/bin/ip' '') \
econf "${myeconfargs[@]}"
}
src_test() {
local -x RUN_SUDO=false
elog "Running top-level tests"
emake check
pushd tests/unit_tests &>/dev/null || die
elog "Running unit tests"
emake check
popd &>/dev/null || die
}
src_install() {
default
find "${ED}/usr" -name '*.la' -delete || die
# install documentation
dodoc AUTHORS ChangeLog PORTS README
# Install some helper scripts
keepdir /etc/openvpn
exeinto /etc/openvpn
doexe "${FILESDIR}/up.sh"
doexe "${FILESDIR}/down.sh"
# Install the init script and config file
newinitd "${FILESDIR}/${PN}-2.1.init" openvpn
newconfd "${FILESDIR}/${PN}-2.1.conf" openvpn
# install examples, controlled by the respective useflag
if use examples ; then
# (is the below comment relevant anymore?)
## dodoc does not supportly support directory traversal, #15193
docinto examples
dodoc -r sample contrib
fi
# https://bugs.gentoo.org/755680#c3
doman doc/openvpn.8
}
pkg_postinst() {
tmpfiles_process openvpn.conf
if use x64-macos ; then
elog "You might want to install tuntaposx for TAP interface support:"
elog "http://tuntaposx.sourceforge.net"
fi
if systemd_is_booted || has_version sys-apps/systemd ; then
elog "In order to use OpenVPN with systemd please use the correct systemd service file."
elog ""
elog "server:"
elog ""
elog "- Place your server configuration file in /etc/openvpn/server"
elog "- Use the openvpn-server@.service like so"
elog "systemctl start openvpn-server@{Server-config}"
elog ""
elog "client:"
elog ""
elog "- Place your client configuration file in /etc/openvpn/client"
elog "- Use the openvpn-client@.service like so:"
elog "systemctl start openvpn-client@{Client-config}"
else
elog "The openvpn init script expects to find the configuration file"
elog "openvpn.conf in /etc/openvpn along with any extra files it may need."
elog ""
elog "To create more VPNs, simply create a new .conf file for it and"
elog "then create a symlink to the openvpn init script from a link called"
elog "openvpn.newconfname - like so"
elog " cd /etc/openvpn"
elog " ${EDITOR##*/} foo.conf"
elog " cd /etc/init.d"
elog " ln -s openvpn openvpn.foo"
elog ""
elog "You can then treat openvpn.foo as any other service, so you can"
elog "stop one vpn and start another if you need to."
fi
if grep -Eq "^[ \t]*(up|down)[ \t].*" "${ROOT}/etc/openvpn"/*.conf 2>/dev/null ; then
ewarn ""
ewarn "WARNING: If you use the remote keyword then you are deemed to be"
ewarn "a client by our init script and as such we force up,down scripts."
ewarn "These scripts call /etc/openvpn/\$SVCNAME-{up,down}.sh where you"
ewarn "can move your scripts to."
fi
if use plugins ; then
einfo ""
einfo "plugins have been installed into /usr/$(get_libdir)/${PN}/plugins"
fi
}
|
GitWeb