From: Hans de Graaff <graaff@gentoo.org>
Date: Sun, 13 Oct 2019 08:46:34 +0000 (+0200)
Subject: net-analyzer/sslscan: always use static custom openssl
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=56421592e8fdca2cf6a1a0ddeefad9eb5a89fc7b;p=gentoo.git

net-analyzer/sslscan: always use static custom openssl

sslscan is intended to be built against an openssl fork that has known
security issues so that sslscan can scan for these issues. We also
allowed building against a local openssl or libressl, but these versions
are now diverging enough that sslscan won't build against them anymore.

Fixes: https://bugs.gentoo.org/697072
Package-Manager: Portage-2.3.76, Repoman-2.3.16
Signed-off-by: Hans de Graaff <graaff@gentoo.org>
---

diff --git a/net-analyzer/sslscan/sslscan-1.11.13-r1.ebuild b/net-analyzer/sslscan/sslscan-1.11.13-r1.ebuild
new file mode 100644
index 000000000000..dfa4053fb25f
--- /dev/null
+++ b/net-analyzer/sslscan/sslscan-1.11.13-r1.ebuild
@@ -0,0 +1,45 @@
+# Copyright 1999-2019 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=6
+
+# Upstream now builds against the openssl 1.0.x fork by PeterMosmans
+MOSMANS_OPENSSL_COMMIT=c9ba19c8b7fd131137373dbd1fccd6a8bb0628be
+
+inherit eutils toolchain-funcs
+
+DESCRIPTION="Fast SSL configuration scanner"
+HOMEPAGE="https://github.com/rbsec/sslscan"
+MY_FORK="rbsec"
+SRC_URI="https://github.com/${MY_FORK}/${PN}/archive/${PV}-${MY_FORK}.tar.gz -> ${P}-${MY_FORK}.tar.gz
+	https://github.com/PeterMosmans/openssl/archive/${MOSMANS_OPENSSL_COMMIT}.tar.gz -> ${P}-${MY_FORK}-openssl.tar.gz"
+
+LICENSE="GPL-3"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE=""
+
+DEPEND=""
+RDEPEND="${DEPEND}"
+
+S="${WORKDIR}/${P}-${MY_FORK}"
+
+src_prepare() {
+	ln -s ../openssl-${MOSMANS_OPENSSL_COMMIT} openssl || die
+	touch .openssl_is_fresh || die
+
+	sed -i -e '/openssl\/.git/,/fi/d' \
+		-e '/openssl test/d' Makefile || die
+
+	default
+}
+
+src_compile() {
+	emake static
+}
+
+src_install() {
+	DESTDIR="${D}" emake install
+
+	dodoc Changelog README.md
+}