# -*- coding: utf-8; mode: tcl; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- vim:fenc=utf-8:ft=tcl:et:sw=4:ts=4:sts=4
# $Id$

PortSystem                  1.0
PortGroup                   compiler_blacklist_versions 1.0

name                        kerberos5
version                     1.14.4
set branch                  [join [lrange [split ${version} .] 0 1] .]
conflicts                   fbopenssl
categories                  net security
maintainers                 ryandesign openmaintainer
license                     MIT BSD ISC OpenLDAP-2.8+
platforms                   darwin

description                 Kerberos is a network authentication protocol.

long_description            Kerberos is a network authentication protocol. \
                            It is designed to provide strong authentication \
                            for client/server applications by using secret-key \
                            cryptography. A free implementation of this protocol \
                            is  available from the Massachusetts Institute of \
                            Technology. Kerberos is available in many commercial \
                            products as well.

homepage                    http://web.mit.edu/kerberos/
master_sites                ${homepage}dist/krb5/${branch}/
distname                    krb5-${version}

checksums                   rmd160  12d788cca175bcf20e8497d30698a3244a7a6983 \
                            sha256  03a61a4280c9161771fb39019085dbe6a57aa602080515ff93b43cd6137e0b95

depends_build               port:python27

depends_lib                 port:gettext \
                            port:libcomerr \
                            port:libedit \
                            port:ncurses \
                            path:lib/libssl.dylib:openssl

worksrcdir                  ${worksrcdir}/src

patchfiles                  patch-util__verto__Makefile.in-use-nonzero-compat-version.diff \
                            patch-config__shlib.conf-do-not-pass-dylib-file-ldflags.diff \
                            patch-lib_rpc_Makefile.in-explicitly-link-krb5support.diff \
                            no-Werror.patch

use_autoreconf              yes
# kerberos5 fails to build in its own presence, see #23769, #37944
# remove ${prefix}/lib from configure.ldflags to allow linking against its own libs first
# adding ${worksrcpath}/lib is not necessary and pollutes krb5-config --libs and pkg-config files
configure.ldflags-delete    -L${prefix}/lib
configure.python            ${prefix}/bin/python2.7
configure.args              --mandir=${prefix}/share/man \
                            --with-system-et \
                            --without-system-db \
                            --without-hesiod \
                            --without-ldap \
                            --without-tcl \
                            --with-crypto-impl=openssl \
                            --with-pkinit-crypto-impl=openssl \
                            --with-libedit \
                            --without-readline \
                            --without-system-verto \
                            --without-system-ss \
                            ac_cv_prog_AWK=/usr/bin/awk

# Needs LIBRARY_PATH support
compiler.blacklist-append   {clang <= 318.0.61}

# i386 linking fails on Snow Leopard with gcc-4.2 from Xcode 3.2.6
if {[string match *gcc-4.2 ${configure.compiler}] &&
    ($build_arch eq "i386" || ([variant_isset universal] && "i386" in $universal_archs))} {
    configure.optflags -O2
}

post-configure {
    reinplace -E {s|-arch [^ ]+||g} \
        ${worksrcpath}/build-tools/krb5-config
}

post-destroot {
    # Remove LDFLAGS settings that are needed for building this port but not dependents
    reinplace "/^LDFLAGS=/s/^.*$/LDFLAGS=''/" ${destroot}${prefix}/bin/krb5-config
}

livecheck.type              regex
livecheck.url               ${homepage}
livecheck.regex             {Current\s+release:\s+<.*>krb5-([0-9.]+)<}