1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
{ lib, stdenv, fetchFromGitHub, fetchpatch, autoreconfHook
, libpcap, texinfo
, iptables
, gnupgSupport ? true, gnupg, gpgme # Increases dependencies!
, wgetSupport ? true, wget
, buildServer ? true
, buildClient ? true }:
stdenv.mkDerivation rec {
pname = "fwknop";
version = "2.6.10";
src = fetchFromGitHub {
owner = "mrash";
repo = pname;
rev = version;
sha256 = "05kvqhmxj9p2y835w75f3jvhr38bb96cd58mvfd7xil9dhmhn9ra";
};
patches = [
# Pull patch pending upstream inclusion for -fno-common tollchains:
# https://github.com/mrash/fwknop/pull/319
(fetchpatch {
name = "fno-common.patch";
url = "https://github.com/mrash/fwknop/commit/a8214fd58bc46d23b64b3a55db023c7f5a5ea6af.patch";
sha256 = "0cp1350q66n455hpd3rdydb9anx66bcirza5gyyyy5232zgg58bi";
})
# Pull patch pending upstream inclusion for `autoconf-2.72` support:
# https://github.com/mrash/fwknop/pull/357
(fetchpatch {
name = "autoconf-2.72.patch";
url = "https://github.com/mrash/fwknop/commit/bee7958532338499e35c19e75937891c8113f7de.patch";
hash = "sha256-lrro5dSDR0Zz9aO3bV5vFFADNJjoDR9z6P5lFYWyLW8=";
})
];
nativeBuildInputs = [ autoreconfHook ];
buildInputs = [ libpcap texinfo ]
++ lib.optionals gnupgSupport [ gnupg gpgme.dev ]
++ lib.optionals wgetSupport [ wget ];
configureFlags = [
"--sysconfdir=/etc"
"--localstatedir=/run"
"--with-iptables=${iptables}/sbin/iptables"
(lib.enableFeature buildServer "server")
(lib.enableFeature buildClient "client")
(lib.withFeatureAs wgetSupport "wget" "${wget}/bin/wget")
] ++ lib.optionalString gnupgSupport [
"--with-gpgme"
"--with-gpgme-prefix=${gpgme.dev}"
"--with-gpg=${gnupg}"
];
# Temporary hack to copy the example configuration files into the nix-store,
# this'll probably be helpful until there's a NixOS module for that (feel free
# to ping me (@primeos) if you want to help).
preInstall = ''
substituteInPlace Makefile --replace\
"sysconfdir = /etc"\
"sysconfdir = $out/etc"
substituteInPlace server/Makefile --replace\
"wknopddir = /etc/fwknop"\
"wknopddir = $out/etc/fwknop"
'';
meta = with lib; {
description =
"Single Packet Authorization (and Port Knocking) server/client";
longDescription = ''
fwknop stands for the "FireWall KNock OPerator", and implements an
authorization scheme called Single Packet Authorization (SPA).
'';
homepage = "https://www.cipherdyne.org/fwknop/";
license = licenses.gpl2Plus;
platforms = platforms.linux;
maintainers = with maintainers; [ primeos ];
};
}
|
