mirror of
https://git.freebsd.org/src.git
synced 2026-01-11 19:57:22 +00:00
For MIT Kerberos, MK_GSSAPI has no meaning: GSSAPI is a required part of Kerberos and is always built if MK_KERBEROS is enabled. Backport this behaviour to Heimdal so it works the same way. While here, change Heimdal's libcom_err and compile_et to be selected by MK_KERBEROS, not MK_KERBEROS_SUPPORT, since these are part of Kerberos and third-party users might need it even if Kerberos support is disabled in the base system. This means MK_KERBEROS_SUPPORT installs the same files with both MIT and Heimdal. Reviewed by: cy Differential Revision: https://reviews.freebsd.org/D51859
34 lines
664 B
Makefile
34 lines
664 B
Makefile
# Common Make variables for OpenSSH
|
|
|
|
.include <src.opts.mk>
|
|
|
|
SSHDIR= ${SRCTOP}/crypto/openssh
|
|
|
|
SFTP_CLIENT_SRCS=sftp-common.c sftp-client.c sftp-glob.c
|
|
SKSRCS= ssh-sk-client.c
|
|
|
|
CFLAGS+= -I${SSHDIR} -include ssh_namespace.h
|
|
|
|
.if ${MK_KERBEROS_SUPPORT} != "no"
|
|
CFLAGS+= -include krb5_config.h
|
|
.if ${MK_MITKRB5} == "no"
|
|
CFLAGS+= -DHEIMDAL=1
|
|
.endif
|
|
.endif
|
|
|
|
CFLAGS+= -DXAUTH_PATH=\"${LOCALBASE:U/usr/local}/bin/xauth\"
|
|
|
|
.if ${MK_LDNS} != "no"
|
|
CFLAGS+= -DHAVE_LDNS=1
|
|
.endif
|
|
|
|
.if ${MK_TCP_WRAPPERS} != "no"
|
|
CFLAGS+= -DLIBWRAP=1
|
|
.endif
|
|
|
|
.if ${MK_USB} != "no"
|
|
# Built-in security key support
|
|
CFLAGS+= -include sk_config.h
|
|
.endif
|
|
|
|
CFLAGS+= -DOPENSSL_API_COMPAT=0x10100000L
|