# New ports collection makefile for:	Apache + mod_ssl
# Date created:		Sat Aug 22 12:00:00 CDT 1998
# Whom:			rse@engelschall.com
#
# $FreeBSD$
#

PORTNAME=	apache+mod_ssl
PORTVERSION=	${VERSION_APACHE}+${VERSION_MODSSL}
CATEGORIES?=	www security
MASTER_SITES=	${MASTER_SITE_APACHE_HTTPD} \
		${MASTER_SITES_MODSSL:S/$/:mod_ssl/} \
		http://www.mod-snmp.com/distr/:mod_snmp \
		http://sysoev.ru/mod_accel/:mod_accel \
		http://sysoev.ru/mod_deflate/:mod_deflate
PKGNAMESUFFIX?=	${MODSNMP_SUFFIX}${MODACCEL_SUFFIX}${MODDEFLATE_SUFFIX}${IPV6_SUFFIX}${PKGNAMESUFFIX2}
DISTNAME=	apache_${VERSION_APACHE}
DISTFILES=	${DISTNAME}${EXTRACT_SUFX} ${MODSSL_FILE}:mod_ssl \
		${MODSNMP_DISTFILE} ${MODACCEL_DISTFILE} ${MODDEFLATE_DISTFILE}
EXTRACT_ONLY=	${DISTNAME}${EXTRACT_SUFX} ${MODSSL_FILE} \
		${MODACCEL_FILE} ${MODDEFLATE_FILE}

.if defined(WITH_APACHE_IPV6) || defined(APACHE_WITH_IPV6) || make(makesum) || defined(FETCH_ALL)
PATCH_SITES+=	ftp://ftp.42.org/pub/orphan/ ${MASTER_SITE_LOCAL}
PATCH_SITE_SUBDIR=	dinoex
PATCHFILES+=	apache-1.3.31modssl-v6-20040514.diff.gz
.endif

MAINTAINER=	dinoex@FreeBSD.org
COMMENT?=	The Apache 1.3 webserver with SSL/TLS functionality

LIB_DEPENDS=	mm.13:${PORTSDIR}/devel/mm
PATCH_DEPENDS=	${BUILD_DEPENDS}

CONFLICTS?=	apache+ipv6-1.* apache+ssl-1.* apache-1.* apache-2.* \
		apache_fp-1.* caudium-devel-1.* caudium10-1.* caudium12-* \
		ru-apache+mod_ssl-1.* ru-apache-1.* thttpd-2.* w3c-httpd-3.*
VERSION_APACHE=	1.3.31
VERSION_MODSSL=	2.8.19
VERSION_MODSNMP=	1.3.14.12
VERSION_MODACCEL=	1.0.31
VERSION_MODDEFLATE=	1.0.21
USE_OPENSSL=	yes
HAS_CONFIGURE=	yes
USE_PERL5_BUILD=	yes
MASTER_SITES_MODSSL=	http://www.modssl.org/source/ \
		ftp://ftp.modssl.org/source/ \
		ftp://ftp.blatzheim.com/pub/mod_ssl/ \
		ftp://ftp.fu-berlin.de/unix/security/mod_ssl/ \
		${MASTER_SITE_RINGSERVER:S,%SUBDIR%,net/www/mod_ssl/source,}
MODSSL_FILE=	mod_ssl-${VERSION_MODSSL}-${VERSION_APACHE}${EXTRACT_SUFX}
MODSNMP_FILE=	mod_snmp_${VERSION_MODSNMP}${EXTRACT_SUFX}
RC_SCRIPTS_SUB=	PREFIX=${PREFIX} RC_SUBR=${RC_SUBR}

.if !defined(WITHOUT_RC_SUBR)
USE_RC_SUBR=	yes
.endif

.include <bsd.port.pre.mk>

DATADIR=	${PREFIX}/www
DOCSDIR=	${PREFIX}/share/doc/apache
DOCUMENT_ROOT=	${DATADIR}/data

.if exists(${LOCALBASE}/include/fnmatch.h)
check-depends::
	@${ECHO_CMD} "Dependency error, please do: pkg_delete " \
		`pkg_info -W ${LOCALBASE}/include/fnmatch.h`
	@${FALSE}
.endif

.if exists(${PREFIX}/etc/rc.d/apache.sh)
PLIST_FILES+=	etc/rc.d/apache.sh.sample
.else
PLIST_FILES+=	etc/rc.d/apache.sh
.endif

.if defined(WITH_APACHE_SUEXEC) && ${WITH_APACHE_SUEXEC} == yes

APACHE_SUEXEC_CALLER?=www
APACHE_SUEXEC_DOCROOT?=${DOCUMENT_ROOT}
APACHE_SUEXEC_LOG?=/var/log/httpd-suexec.log
APACHE_SUEXEC_USERDIR?=public_html
APACHE_SUEXEC_UIDMIN?=1000
APACHE_SUEXEC_GIDMIN?=1000
APACHE_SUEXEC_SAFE_PATH?=/bin:/usr/bin:${PREFIX}/bin

SUEXEC_CONF=	--enable-suexec \
		--suexec-caller=${APACHE_SUEXEC_CALLER} \
		--suexec-docroot=${APACHE_SUEXEC_DOCROOT} \
		--suexec-logfile=${APACHE_SUEXEC_LOG} \
		--suexec-userdir=${APACHE_SUEXEC_USERDIR} \
		--suexec-uidmin=${APACHE_SUEXEC_UIDMIN} \
		--suexec-gidmin=${APACHE_SUEXEC_GIDMIN} \
		--suexec-safepath=${APACHE_SUEXEC_SAFE_PATH}

.if defined(APACHE_SUEXEC_UMASK)
SUEXEC_CONF+=	--suexec-umask=${APACHE_SUEXEC_UMASK}
.endif

PLIST_FILES+=	sbin/suexec
SUEXEC_MAN=	suexec.8

.else   # !SUEXEC

SUEXEC_CONF=
SUEXEC_MAN=

.endif  # !SUEXEC

CONFIGURE_ARGS+=--prefix=${PREFIX} \
		--server-uid=www \
		--server-gid=www \
		--with-perl=${PERL} \
		--with-layout=FreeBSD \
		--without-confadjust \
		--enable-module=most \
		--enable-module=auth_db \
		--enable-module=mmap_static \
		--disable-module=auth_dbm \
		--enable-shared=max \
		--enable-module=ssl \
		--enable-module=define \
		${SUEXEC_CONF}

.if defined(APACHE_RELATIVE_RUNTIMEDIR)
CONFIGURE_ARGS+=	--runtimedir=${APACHE_RELATIVE_RUNTIMEDIR}
.endif

.if defined(WITHOUT_APACHE_EXPAT) || defined(APACHE_WITHOUT_EXPAT)
CONFIGURE_ARGS+=	--disable-rule=EXPAT
.else
.if !defined(WITH_APACHE_INTERNAL_EXPAT) || ${WITH_APACHE_INTERNAL_EXPAT} != yes
EXPAT_CONF+=	--disable-rule=EXPAT
LIB_DEPENDS+=	expat.5:${PORTSDIR}/textproc/expat2
.else
EXPAT_CONF+=	--enable-rule=EXPAT
.endif
.endif

.if defined(APACHE_HARD_SERVER_LIMIT)
HARD_SERVER_LIMIT=-DHARD_SERVER_LIMIT=${APACHE_HARD_SERVER_LIMIT}
.else
HARD_SERVER_LIMIT=-DHARD_SERVER_LIMIT=512
.endif

OPTIM=		${HARD_SERVER_LIMIT} \
		-DDOCUMENT_LOCATION=\\"${PREFIX}/www/data/\\" \
		-DDEFAULT_PATH=\\"${PREFIX}/bin:/bin:/usr/bin\\" \
		-DACCEPT_FILTER_NAME=\\"httpready\\"

.if defined(APACHE_FD_SETSIZE)
OPTIM+=		-DFD_SETSIZE=${APACHE_FD_SETSIZE}
.else
OPTIM+=		-DFD_SETSIZE=1024
.endif

.if defined(APACHE_BUFFERED_LOGS) && ${APACHE_BUFFERED_LOGS} == yes
OPTIM+=		-DBUFFERED_LOGS
.endif

.if defined(APACHE_PERF_TUNING) && ${APACHE_PERF_TUNING} == yes
CFLAGS+=	-O3
.endif
.if defined(WITH_APACHE_PERF_TUNING) && ${WITH_APACHE_PERF_TUNING} == yes
CFLAGS+=	-O3
.endif

.if defined(WITH_APACHE_MODSNMP) || defined(APACHE_WITH_MODSNMP) || make(makesum) || defined(FETCH_ALL)
MODSNMP_DISTFILE=	${MODSNMP_FILE}:mod_snmp
.endif
.if defined(WITH_APACHE_MODSNMP) || defined(APACHE_WITH_MODSNMP)
CONFLICTS+=	apache+mod_ssl-1.* \
		apache+mod_ssl+ipv6-1.* \
		apache+mod_ssl+mod_accel-1.* \
		apache+mod_ssl+mod_accel+ipv6-1.* \
		apache+mod_ssl+mod_accel+mod_deflate-1.* \
		apache+mod_ssl+mod_accel+mod_deflate+ipv6-1.* \
		apache+mod_ssl+mod_deflate-1.* \
		apache+mod_ssl+mod_deflate+ipv6-1.* \
MODSNMP_SUFFIX=	+mod_snmp
CONFIGURE_ARGS+=	--activate-module=src/modules/snmp_agt/libsnmp_agt.a
CFLAGS+=	-DSNMP -DUSE_DB -DSNMP_CONFIG_H -DHARD_VIRTUAL_HOST_MAX=1000 \
		-DSNMPLOCALONLY
EXTRA_PATCHES+=	${WRKSRC}/src/modules/snmp_agt/mod_snmp.patch
PLIST_FILES+=	%%DOCSDIR%%/mod/mod_snmp.html \
		%%DOCSDIR%%/snmp_agt/index.html \
		%%DOCSDIR%%/snmp_agt/www-mib.txt \
		%%DOCSDIR%%/snmp_agt/snmpv2-mib.txt \
		%%DOCSDIR%%/snmp_agt/rfc2594.txt \
		%%DOCSDIR%%/snmp_agt/apache-scoreboard-mib.txt \
		%%DOCSDIR%%/snmp_agt/apache-config-mib.txt
PLIST_DIRS+=	%%DOCSDIR%%/snmp_agt %%DOCSDIR%% www/buckets www
.else
CONFLICTS+=	apache+mod_snmp*-1.*
.endif

.if defined(WITH_APACHE_MODACCEL) || defined(APACHE_WITH_MODACCEL) || make(makesum) || defined(FETCH_ALL)
MODACCEL_FILE=	mod_accel-${VERSION_MODACCEL}${EXTRACT_SUFX}
MODACCEL_DISTFILE=	${MODACCEL_FILE}:mod_accel
.endif
.if defined(WITH_APACHE_MODACCEL) || defined(APACHE_WITH_MODACCEL)
CONFLICTS+=	apache+mod_ssl-1.* \
		apache+mod_ssl+ipv6-1.* \
		apache+mod_ssl+mod_snmp-1.* \
		apache+mod_ssl+mod_snmp+ipv6-1.* \
		apache+mod_ssl+mod_snmp+mod_deflate-1.* \
		apache+mod_ssl+mod_snmp+mod_deflate+ipv6-1.* \
		apache+mod_ssl+mod_deflate-1.* \
		apache+mod_ssl+mod_deflate+ipv6-1.*
MODACCEL_SUFFIX=	+mod_accel
CONFIGURE_ARGS+=	--activate-module=src/modules/extra/mod_randban.o \
		--enable-shared=randban \
		--activate-module=src/modules/extra/mod_freeze.o \
		--enable-shared=freeze \
		--activate-module=src/modules/accel/libaccel.a \
		--enable-shared=accel
EXTRA_PATCHES+=	${FILESDIR}/mod_accel-preservehost.patch
PLIST_FILES+=	libexec/apache/libaccel.so \
		libexec/apache/mod_freeze.so \
		libexec/apache/mod_randban.so \
		%%DOCSDIR%%/mod/mod_accel.html
.else
CONFLICTS+=	apache+mod_accel*-1.*
.endif

.if defined(WITH_APACHE_MODDEFLATE) || defined(APACHE_WITH_MODDEFLATE) || make(makesum) || defined(FETCH_ALL)
MODDEFLATE_FILE=	mod_deflate-${VERSION_MODDEFLATE}${EXTRACT_SUFX}
MODDEFLATE_DISTFILE=	${MODDEFLATE_FILE}:mod_deflate
.endif
.if defined(WITH_APACHE_MODDEFLATE) || defined(APACHE_WITH_MODDEFLATE)
CONFLICTS+=	apache+mod_ssl-1.* \
		apache+mod_ssl+ipv6-1.* \
		apache+mod_ssl+mod_snmp-1.* \
		apache+mod_ssl+mod_snmp+ipv6-1.* \
		apache+mod_ssl+mod_snmp+mod_accel-1.* \
		apache+mod_ssl+mod_snmp+mod_accel+ipv6-1.* \
		apache+mod_ssl+mod_accel-1.* \
		apache+mod_ssl+mod_accel+ipv6-1.*
MODDEFLATE_SUFFIX=	+mod_deflate
CONFIGURE_ARGS+=	--activate-module=src/modules/extra/mod_deflate.o
PLIST_FILES+=	%%DOCSDIR%%/mod/mod_deflate.html
.else
CONFLICTS+=	apache+mod_deflate*-1.*
.endif

.if defined(WITH_APACHE_IPV6) || defined(APACHE_WITH_IPV6)
.if defined(WITH_APACHE_MODACCEL) || defined(APACHE_WITH_MODACCEL)
BROKEN=		"mod_accel and ipv6 don't compile together"
.endif

CONFLICTS+=	apache+mod_ssl-1.* \
		apache+mod_ssl+mod_snmp-1.* \
		apache+mod_ssl+mod_snmp+mod_accel-1.* \
		apache+mod_ssl+mod_snmp+mod_accel+mod_deflate-1.* \
		apache+mod_ssl+mod_accel-1.* \
		apache+mod_ssl+mod_accel+mod_deflate-1.* \
		apache+mod_ssl+mod_deflate-1.*
IPV6_SUFFIX=	+ipv6
CONFIGURE_ARGS+=	--enable-rule=INET6
PLIST_SUB+=	WITHIPV6=""
PLIST_FILES+=	include/apache/sa_len.h \
		include/apache/sockaddr_storage.h
.endif

CONFIGURE_ENV=	CFLAGS='${CFLAGS}' \
		OPTIM='${OPTIM}' \
		SSL_BASE='${OPENSSLBASE}' \
		EAPI_MM='SYSTEM' \
		PATH="${PREFIX}/bin:${PATH}"

INSTALL_TARGET=	install-quiet

MAN1=	dbmmanage.1 htdigest.1 htpasswd.1
MAN8=	ab.8 apachectl.8 apxs.8 httpd.8 logresolve.8 rotatelogs.8 \
	${SUEXEC_MAN}

TYPE=	test
CRT=
KEY=

pre-fetch:
	@${ECHO_MSG} ""
	@${ECHO_MSG} "You may use the following build options:"
	@${ECHO_MSG} ""
	@${ECHO_MSG} "  WITH_APACHE_SUEXEC=yes	enable the suEXEC feature"
	@${ECHO_MSG} "				[default is no]"
	@${ECHO_MSG} "  APACHE_SUEXEC_CALLER=user	set the suEXEC username of the allowed caller"
	@${ECHO_MSG} "				[default is www]"
	@${ECHO_MSG} "  APACHE_SUEXEC_DOCROOT=dir	set the suEXEC root directory"
	@${ECHO_MSG} "				[default is ${DOCUMENT_ROOT}]"
	@${ECHO_MSG} "  APACHE_SUEXEC_LOG=file	set the suEXEC logfile"
	@${ECHO_MSG} "				[default is /var/log/httpd-suexec.log]"
	@${ECHO_MSG} "  APACHE_SUEXEC_USERDIR=dir	set the suEXEC user subdirectory"
	@${ECHO_MSG} "				[default is public_html]"
	@${ECHO_MSG} "  APACHE_SUEXEC_UIDMIN=uid	set the suEXEC minimal allowed UID"
	@${ECHO_MSG} "				[default is 1000]"
	@${ECHO_MSG} "  APACHE_SUEXEC_GIDMIN=gid	set the suEXEC minimal allowed GID"
	@${ECHO_MSG} "				[default is 1000]"
	@${ECHO_MSG} "  APACHE_SUEXEC_SAFE_PATH=path	set the suEXEC safe PATH"
	@${ECHO_MSG} "				[default is /bin:/usr/bin:${PREFIX}/bin]"
	@${ECHO_MSG} "  APACHE_SUEXEC_UMASK=umask	set the umask for the suEXEC'd script"
	@${ECHO_MSG} "				[default is inherited from the Apache process]"
	@${ECHO_MSG} ""
	@${ECHO_MSG} "  APACHE_HARD_SERVER_LIMIT=nr	Maximum number of Apache processes."
	@${ECHO_MSG} "				[default is 512]"
	@${ECHO_MSG} "  APACHE_FD_SETSIZE=nr		Maximum number of descriptors."
	@${ECHO_MSG} "				[default is 1024]"
	@${ECHO_MSG} ""
	@${ECHO_MSG} "  APACHE_BUFFERED_LOGS=yes	Log entries are buffered before writing."
	@${ECHO_MSG} "				Writes may not be atomic, entries from multiple"
	@${ECHO_MSG} "				children could become mixed together and your"
	@${ECHO_MSG} "				web stats may be inaccurate."
	@${ECHO_MSG} "				[default is no]"
	@${ECHO_MSG} "  WITH_APACHE_PERF_TUNING=yes	CFLAGS optimization."
	@${ECHO_MSG} "				This setting may produce broken code and thus"
	@${ECHO_MSG} "				is not recommended for production servers."
	@${ECHO_MSG} "				[default is no]"
	@${ECHO_MSG} ""
	@${ECHO_MSG} "  WITH_APACHE_IPV6=yes		IPv6 support."
	@${ECHO_MSG} "				This setting turns IPv6 support on."
	@${ECHO_MSG} "				[default is no]"
	@${ECHO_MSG} ""
	@${ECHO_MSG} "  WITH_APACHE_MODSNMP=yes	mod_snmp support."
	@${ECHO_MSG} "				This setting turns support for SNMP on."
	@${ECHO_MSG} "				[default is no]"
	@${ECHO_MSG} ""
	@${ECHO_MSG} "  WITH_APACHE_MODACCEL=yes	mod_accel support."
	@${ECHO_MSG} "				This setting activates build of mod_accel."
	@${ECHO_MSG} "				[default is no]"
	@${ECHO_MSG} ""
	@${ECHO_MSG} "  WITH_APACHE_MODDEFLATE=yes	mod_deflate support."
	@${ECHO_MSG} "				This setting activates build of mod_deflate."
	@${ECHO_MSG} "				[default is no]"
	@${ECHO_MSG} ""
	@${ECHO_MSG} "  WITHOUT_APACHE_EXPAT=yes	don't compile in expat."
	@${ECHO_MSG} "				[default is no (expat is included)]"
	@${ECHO_MSG} ""

post-extract:
	@${SED}	${RC_SCRIPTS_SUB:S/$/!g/:S/^/ -e s!%%/:S/=/%%!/} \
		${FILESDIR}/rcng.sh > ${WRKSRC}/rcng.sh
	@${SED} -e "s=%%PREFIX%%=${PREFIX}=g" ${FILESDIR}/apache.sh \
		> ${WRKSRC}/apache.sh
.if defined(WITH_APACHE_MODSNMP) || defined(APACHE_WITH_MODSNMP)
	(cd ${WRKSRC}; ${TAR} xfz  ${DISTDIR}/${MODSNMP_FILE})
.endif

pre-patch:
	@cd ${WRKDIR}/mod_ssl-${VERSION_MODSSL}-${VERSION_APACHE} \
	&& ${ECHO_MSG} "===>  Applying mod_ssl-${VERSION_MODSSL} extension" \
	&& ./configure --with-apache=../${DISTNAME} --expert
.if defined(WITH_APACHE_MODACCEL) || defined(APACHE_WITH_MODACCEL)
	@cd ${WRKDIR}/mod_accel-${VERSION_MODACCEL} \
	&& ${ECHO_MSG} "===>  Applying mod_accel-${VERSION_MODACCEL} extension" \
	&& ./configure --with-apache=../${DISTNAME} --with-mod_randban --with-mod_freeze \
	&& ${MAKE}
.endif
.if defined(WITH_APACHE_MODDEFLATE) || defined(APACHE_WITH_MODDEFLATE)
	@cd ${WRKDIR}/mod_deflate-${VERSION_MODDEFLATE} \
	&& ${ECHO_MSG} "===>  Applying mod_deflate-${VERSION_MODDEFLATE} extension" \
	&& ./configure --with-apache=../${DISTNAME} \
	&& ${MAKE}
.endif

post-patch:
	@${PERL} -pi -e 's|-print|-print0|;s|xargs|xargs -0|' \
		${WRKSRC}/Makefile.tmpl
	@${PERL} -pi -e "s|SSL_LDFLAGS=''|SSL_LDFLAGS='${OPENSSL_LDFLAGS}'|" \
		${WRKSRC}/src/modules/ssl/libssl.module
	@cd ${WRKSRC} \
	&& ${FIND} . -type f -name "*.orig" -print | ${XARGS} ${RM} -f

post-build:
	@cd ${WRKSRC} \
	&& ${ECHO_MSG} "===>  Creating Dummy Certificate for Server (SnakeOil)" \
	&& ${ECHO_MSG} "      [use 'make certificate' to create a real one]" \
	&& ${MAKE} certificate TYPE=dummy >/dev/null 2>&1

certificate:
	@cd ${WRKSRC} \
	&& ${ECHO_MSG} "===>  Creating Test Certificate for Server" \
	&& ${MAKE} certificate TYPE=${TYPE} CRT=${CRT} KEY=${KEY}

pre-install:
	@${SH} ${PKGINSTALL} ${PKGNAME} PRE-INSTALL

post-install:
.if defined(USE_RC_SUBR)
	${INSTALL_SCRIPT} ${WRKSRC}/rcng.sh ${PREFIX}/etc/rc.d/apache.sh
.else
	${INSTALL_SCRIPT} ${WRKSRC}/apache.sh ${PREFIX}/etc/rc.d/apache.sh.sample
.endif
.if defined(WITH_APACHE_MODSNMP) || defined(APACHE_WITH_MODSNMP)
	@${MKDIR} ${DATADIR}/buckets
	@${CHOWN} www:www ${DATADIR}/buckets
.endif

.include <bsd.port.post.mk>