Changeset View
Changeset View
Standalone View
Standalone View
security/suricata/Makefile
| Show All 25 Lines | |||||
| GNU_CONFIGURE= yes | GNU_CONFIGURE= yes | ||||
| CPE_VENDOR= openinfosecfoundation | CPE_VENDOR= openinfosecfoundation | ||||
| INSTALL_TARGET= install-strip | INSTALL_TARGET= install-strip | ||||
| TEST_TARGET= check | TEST_TARGET= check | ||||
| OPTIONS_DEFINE= GEOIP HTP_PORT IPFW JSON NETMAP NSS PORTS_PCAP PRELUDE SC TESTS | OPTIONS_DEFINE= GEOIP HTP_PORT IPFW JSON NETMAP NSS PORTS_PCAP PRELUDE \ | ||||
| REDIS SC TESTS | |||||
| OPTIONS_DEFINE_amd64= HYPERSCAN | OPTIONS_DEFINE_amd64= HYPERSCAN | ||||
| OPTIONS_DEFAULT= HTP_PORT IPFW JSON NETMAP PRELUDE | OPTIONS_DEFAULT= HTP_PORT IPFW JSON NETMAP PRELUDE | ||||
| OPTIONS_SUB= yes | OPTIONS_SUB= yes | ||||
| OPTIONS_RADIO= SCRIPTS | OPTIONS_RADIO= SCRIPTS | ||||
| OPTIONS_RADIO_SCRIPTS= LUA LUAJIT | OPTIONS_RADIO_SCRIPTS= LUA LUAJIT | ||||
| SCRIPTS_DESC= Scripting | SCRIPTS_DESC= Scripting | ||||
| GEOIP_DESC= GeoIP support | GEOIP_DESC= GeoIP support | ||||
| HYPERSCAN_DESC= Hyperscan support | HYPERSCAN_DESC= Hyperscan support | ||||
| HTP_PORT_DESC= Use libhtp from ports | HTP_PORT_DESC= Use libhtp from ports | ||||
| IPFW_DESC= IPFW and IP Divert support for inline IDP | IPFW_DESC= IPFW and IP Divert support for inline IDP | ||||
| JSON_DESC= JSON output support | JSON_DESC= JSON output support | ||||
| LUA_DESC= LUA scripting support | LUA_DESC= LUA scripting support | ||||
| LUAJIT_DESC= LuaJIT scripting support | LUAJIT_DESC= LuaJIT scripting support | ||||
| NETMAP_DESC= Netmap support for inline IDP | NETMAP_DESC= Netmap support for inline IDP | ||||
| NSS_DESC= File checksums and SSL/TLS fingerprinting | NSS_DESC= File checksums and SSL/TLS fingerprinting | ||||
| PORTS_PCAP_DESC= Use libpcap from ports | PORTS_PCAP_DESC= Use libpcap from ports | ||||
| PRELUDE_DESC= Prelude support for NIDS alerts | PRELUDE_DESC= Prelude support for NIDS alerts | ||||
| REDIS_DESC= Redis output support | |||||
franco_opnsense.org: small typo here | |||||
| SC_DESC= Suricata socket client (suricatasc) | SC_DESC= Suricata socket client (suricatasc) | ||||
| TESTS_DESC= Unit tests in suricata binary | TESTS_DESC= Unit tests in suricata binary | ||||
| GEOIP_LIB_DEPENDS= libGeoIP.so:net/GeoIP | GEOIP_LIB_DEPENDS= libGeoIP.so:net/GeoIP | ||||
| GEOIP_CONFIGURE_ON= --enable-geoip | GEOIP_CONFIGURE_ON= --enable-geoip | ||||
| HTP_PORT_BUILD_DEPENDS= libhtp>=0.5.20:devel/libhtp | HTP_PORT_BUILD_DEPENDS= libhtp>=0.5.20:devel/libhtp | ||||
| HTP_PORT_LIB_DEPENDS= libhtp.so:devel/libhtp | HTP_PORT_LIB_DEPENDS= libhtp.so:devel/libhtp | ||||
| Show All 33 Lines | |||||
| PORTS_PCAP_CONFIGURE_ON= --with-libpcap-includes=${LOCALBASE}/include \ | PORTS_PCAP_CONFIGURE_ON= --with-libpcap-includes=${LOCALBASE}/include \ | ||||
| --with-libpcap-libraries=${LOCALBASE}/lib | --with-libpcap-libraries=${LOCALBASE}/lib | ||||
| PORTS_PCAP_CONFIGURE_OFF= --with-libpcap-includes=/usr/include \ | PORTS_PCAP_CONFIGURE_OFF= --with-libpcap-includes=/usr/include \ | ||||
| --with-libpcap-libraries=/usr/lib | --with-libpcap-libraries=/usr/lib | ||||
| PRELUDE_LIB_DEPENDS= libprelude.so:security/libprelude | PRELUDE_LIB_DEPENDS= libprelude.so:security/libprelude | ||||
| PRELUDE_CONFIGURE_ENABLE= prelude | PRELUDE_CONFIGURE_ENABLE= prelude | ||||
| PRELUDE_CONFIGURE_ON= --with-libprelude-prefix=${LOCALBASE} | PRELUDE_CONFIGURE_ON= --with-libprelude-prefix=${LOCALBASE} | ||||
| REDIS_LIB_DEPENDS= libhiredis.so:databases/hiredis | |||||
| REDIS_CONFIGURE_ON= --enable-hiredis \ | |||||
matUnsubmitted Done Inline ActionsThis should probably be a REDIS_CONFIGURE_ENABLE=hiredis so that a --disable-hiredis is added when the option is disabled. See "feature auto-activation" in https://www.freebsd.org/doc/en/books/porters-handbook/makefile-options.html mat: This should probably be a REDIS_CONFIGURE_ENABLE=hiredis so that a --disable-hiredis is added… | |||||
franco_opnsense.orgUnsubmitted Not Done Inline Actionsthe style of the port should be updated, but we can do this after initial merge. I have a larger 3.2.2 update waiting anyway and can look at it then? franco_opnsense.org: the style of the port should be updated, but we can do this after initial merge. I have a… | |||||
matUnsubmitted Not Done Inline ActionsI would rather bad things never go in, there are already enough in this port. mat: I would rather bad things never go in, there are already enough in this port.
Fixing this will… | |||||
franco_opnsense.orgUnsubmitted Done Inline Actionsfine, let @garga mop this one up and I'll take care of the others with the version update :) franco_opnsense.org: fine, let @garga mop this one up and I'll take care of the others with the version update :) | |||||
franco_opnsense.orgUnsubmitted Not Done Inline Actionsok, now I'm seeing this with REDIS disabled, REDIS_CONFIGURE_ENABLE does something that suricata doesn't like. checking hiredis/hiredis.h usability... no checking hiredis/hiredis.h presence... no checking for hiredis/hiredis.h... no ERROR! libhiredis library not found, go get it from https://github.com/redis/hiredis or your distribution: Ubuntu: apt-get install libhiredis-dev Fedora: dnf install hiredis-devel RHEL/CentOS: yum install hiredis-devel ===> Script "configure" failed unexpectedly. Please report the problem to franco@opnsense.org [maintainer] and attach the "/usr/obj/usr/ports/security/suricata/work/suricata-3.2.2/config.log" including the output of the failure of your make command. Also, it might be a good idea to provide an overview of all packages installed on your system (e.g. a /usr/local/sbin/pkg-static info -g -Ea). *** Error code 1 franco_opnsense.org: ok, now I'm seeing this with REDIS disabled, REDIS_CONFIGURE_ENABLE does something that… | |||||
matUnsubmitted Not Done Inline ActionsWhat is the content of CONFIGURE_ARGS ? mat: What is the content of CONFIGURE_ARGS ? | |||||
franco_opnsense.orgUnsubmitted Not Done Inline Actions$ ./configure --enable-gccprotect --with-libpcre-includes=/usr/local/include --with-libpcre-libraries=/usr/local/lib --with-libyaml-includes=/usr/local/include --with-libyaml-libraries=/usr/local/lib --with-libnet-includes=/usr/local/include --with-libnet-libraries=/usr/local/lib --with-libhtp-includes=/usr/local/include/ --with-libhtp-libraries=/usr/local/lib --disable-gccmarch-native --enable-geoip --enable-bundled-htp --with-libhs-includes=/usr/local/include --with-libhs-libraries=/usr/local/lib --enable-ipfw --with-libjansson-includes=/usr/local/include --with-libjansson-libraries=/usr/local/lib --enable-netmap --with-libpcap-includes=/usr/include --with-libpcap-libraries=/usr/lib --disable-prelude --disable-hiredis --disable-unittests --prefix=/usr/local --localstatedir=/var --mandir=/usr/local/man --disable-silent-rules --infodir=/usr/local/info/ --build=amd64-portbld-freebsd11.0--disable-hiredis seems to achieve the opposite, I verified this manually on 3.2.1 and 3.2.2 franco_opnsense.org: $ ./configure --enable-gccprotect --with-libpcre-includes=/usr/local/include --with-libpcre… | |||||
gargaAuthorUnsubmitted Not Done Inline ActionsSuricata configure scripts only deal with --enable options and don't support --disable-FEATURE that is the cause of confusion. We can report it upstream to see if it can be improved for future versions. I'll update to old patch here to get it committed garga: Suricata configure scripts only deal with --enable options and don't support --disable-FEATURE… | |||||
| --with-libhiredis-includes=${LOCALBASE}/include \ | |||||
| --with-libhiredis-libraries=${LOCALBASE}/lib | |||||
| SC_USES= python | SC_USES= python | ||||
| SC_CONFIGURE_ENV= ac_cv_path_HAVE_PYTHON_CONFIG=yes | SC_CONFIGURE_ENV= ac_cv_path_HAVE_PYTHON_CONFIG=yes | ||||
| SC_CONFIGURE_ENV_OFF= ac_cv_path_HAVE_PYTHON_CONFIG=no | SC_CONFIGURE_ENV_OFF= ac_cv_path_HAVE_PYTHON_CONFIG=no | ||||
| TESTS_CONFIGURE_ENABLE= unittests | TESTS_CONFIGURE_ENABLE= unittests | ||||
| SUB_FILES= pkg-message | SUB_FILES= pkg-message | ||||
| ▲ Show 20 Lines • Show All 45 Lines • Show Last 20 Lines | |||||
small typo here