###############################################################################
#                                                                             #
# IPFire.org - A linux based firewall                                         #
# Copyright (C) 2007  Michael Tremer & Christian Schmidt                      #
#                                                                             #
# This program is free software: you can redistribute it and/or modify        #
# it under the terms of the GNU General Public License as published by        #
# the Free Software Foundation, either version 3 of the License, or           #
# (at your option) any later version.                                         #
#                                                                             #
# This program is distributed in the hope that it will be useful,             #
# but WITHOUT ANY WARRANTY; without even the implied warranty of              #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
# GNU General Public License for more details.                                #
#                                                                             #
# You should have received a copy of the GNU General Public License           #
# along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
#                                                                             #
###############################################################################

###############################################################################
# Definitions
###############################################################################

include Config

VER        = 5.1p1

THISAPP    = openssh-$(VER)
DL_FILE    = $(THISAPP).tar.gz
DL_FROM    = $(URL_IPFIRE)
DIR_APP    = $(DIR_SRC)/$(THISAPP)
TARGET     = $(DIR_INFO)/$(THISAPP)

###############################################################################
# Top-level Rules
###############################################################################

objects = $(DL_FILE)

$(DL_FILE) = $(DL_FROM)/$(DL_FILE)

$(DL_FILE)_MD5 = 03f2d0c1b5ec60d4ac9997a146d2faec

install : $(TARGET)

check : $(patsubst %,$(DIR_CHK)/%,$(objects))

download :$(patsubst %,$(DIR_DL)/%,$(objects))

md5 : $(subst %,%_MD5,$(objects))

###############################################################################
# Downloading, checking, md5sum
###############################################################################

$(patsubst %,$(DIR_CHK)/%,$(objects)) :
	@$(CHECK)

$(patsubst %,$(DIR_DL)/%,$(objects)) :
	@$(LOAD)

$(subst %,%_MD5,$(objects)) :
	@$(MD5)

###############################################################################
# Installation Details
###############################################################################

$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
	@$(PREBUILD)
	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
ifeq "$(PADLOCK)" "1"
	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssh-4.7p1-padlock.patch
endif
	cd $(DIR_APP) && sed -i "s/lkrb5 -ldes/lkrb5/" configure
	cd $(DIR_APP) && ./configure --prefix=/usr --sysconfdir=/etc/ssh \
		    --libexecdir=/usr/lib/openssh --with-md5-passwords \
		    --with-privsep-path=/var/empty --disable-nls \
		    --with-superuser-path=/sbin:/usr/sbin:/bin:/usr/bin
	cd $(DIR_APP) && make $(MAKETUNING)
	cd $(DIR_APP) && make install
	sed -i -e 's/^#\?Port .*$$/Port 222/' \
	    -e 's/^#\?Protocol .*$$/Protocol 2/' \
	    -e 's/^#\?LoginGraceTime .*$$/LoginGraceTime 30s/' \
	    -e 's/^#\?RSAAuthentication .*$$/RSAAuthentication yes/' \
	    -e 's/^#\?PubkeyAuthentication .*$$/PubkeyAuthentication yes/' \
	    -e 's/^#\?PasswordAuthentication .*$$/PasswordAuthentication yes/' \
	    -e 's/^#\?MaxStartups .*$$/MaxStartups 5/' \
	    -e 's/^#\?IgnoreUserKnownHosts .*$$/IgnoreUserKnownHosts yes/' \
	    -e 's/^#\?UsePAM .*$$//' \
	    -e 's/^#\?X11Forwarding .*$$/X11Forwarding no/' \
	    -e 's/^#\?AllowTcpForwarding .*$$/AllowTcpForwarding no/' \
	    /etc/ssh/sshd_config
	@rm -rf $(DIR_APP)
	@$(POSTBUILD)
