163N/A#
163N/A# CDDL HEADER START
163N/A#
163N/A# The contents of this file are subject to the terms of the
163N/A# Common Development and Distribution License (the "License").
163N/A# You may not use this file except in compliance with the License.
163N/A#
163N/A# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
163N/A# or http://www.opensolaris.org/os/licensing.
163N/A# See the License for the specific language governing permissions
163N/A# and limitations under the License.
163N/A#
163N/A# When distributing Covered Code, include this CDDL HEADER in each
163N/A# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
163N/A# If applicable, add the following below this CDDL HEADER, with the
163N/A# fields enclosed by brackets "[]" replaced with your own identifying
163N/A# information: Portions Copyright [yyyy] [name of copyright owner]
163N/A#
163N/A# CDDL HEADER END
163N/A#
163N/A
163N/A#
5452N/A# Copyright (c) 2011, 2016, Oracle and/or its affiliates. All rights reserved.
163N/A#
5680N/ABUILD_BITS= 64
5680N/ACOMPILER= gcc
163N/Ainclude ../../make-rules/shared-macros.mk
163N/A
5680N/APATH=$(USRBINDIR):$(GNUBIN):$(USRSBINDIR):$(USRDIR)/perl5/bin
163N/A
211N/ACOMPONENT_NAME= squid
5965N/ACOMPONENT_VERSION= 3.5.18
636N/ACOMPONENT_PROJECT_URL= http://www.squid-cache.org/
1689N/ACOMPONENT_ARCHIVE= $(COMPONENT_SRC).tar.xz
844N/ACOMPONENT_ARCHIVE_HASH= \
5965N/A sha256:812ba5ec74ebdc1bea1b3013b636f9dfcb7a6f5271b2783961009c215879af82
4537N/ACOMPONENT_ARCHIVE_URL= $(COMPONENT_PROJECT_URL)Versions/v3/3.5/$(COMPONENT_ARCHIVE)
163N/A
5965N/ATPNO= 28337
2899N/A
7243N/A# Enable adiheap and adistack security extensions
7243N/AADIHEAP_MODE = $(ADIHEAP_ENABLE)
7243N/AADISTACK_MODE = $(ADISTACK_ENABLE)
7243N/A
5758N/ATEST_TARGET= $(TEST_64)
5680N/Ainclude $(WS_MAKE_RULES)/common.mk
163N/A
7310N/A# Look for gnutls-3 pkg-config & libraries before the defaults
7310N/APKG_CONFIG_PATH.64 := $(PKG_CONFIG_PATH.64)/gnutls-3:$(PKG_CONFIG_PATH.64)
7310N/ALDFLAGS += -L$(USRLIBDIR64)/gnutls-3
7310N/A
5680N/ACFLAGS += -I$(USRINCDIR)/kerberosv5
163N/ACFLAGS += $(CPP_LARGEFILES)
5999N/A# <getopt.h> changed between 11 & 12.
5999N/Aifeq ($(OS_VERSION), 5.11)
5999N/ACXXFLAGS += -Wno-write-strings
5999N/Aendif
163N/A
2283N/ACONFIGURE_LIBDIR.64 = $(CONFIGURE_PREFIX)/lib
2283N/A
163N/A# Squid has own prefix
5680N/ACONFIGURE_PREFIX = $(USRDIR)/squid
163N/A
163N/ACONFIGURE_OPTIONS += --libexecdir=$(CONFIGURE_PREFIX)/libexec
5680N/ACONFIGURE_OPTIONS += --localstatedir=$(VARDIR)/squid
5680N/ACONFIGURE_OPTIONS += --sharedstatedir=$(VARDIR)/squid
163N/ACONFIGURE_OPTIONS += --sysconfdir=$(ETCDIR)/squid
163N/ACONFIGURE_OPTIONS += --mandir=$(CONFIGURE_PREFIX)/man
2283N/ACONFIGURE_OPTIONS += --sbindir=$(CONFIGURE_PREFIX)/sbin
163N/ACONFIGURE_OPTIONS += --enable-arp-acl
4870N/ACONFIGURE_OPTIONS += --enable-auth-basic='DB,NCSA,NIS,LDAP,PAM,getpwnam,MSNT-multi-domain,POP3,SMB,SMB_LM,SASL'
163N/ACONFIGURE_OPTIONS += --enable-cache-digests
163N/ACONFIGURE_OPTIONS += --enable-carp
163N/ACONFIGURE_OPTIONS += --enable-coss-aio-ops
163N/ACONFIGURE_OPTIONS += --enable-delay-pools
4870N/ACONFIGURE_OPTIONS += --enable-auth-digest='file,LDAP'
4537N/ACONFIGURE_OPTIONS += --enable-external-acl-helpers='file_userip,unix_group,LDAP_group,wbinfo_group'
163N/ACONFIGURE_OPTIONS += --enable-follow-x-forwarded-for
163N/ACONFIGURE_OPTIONS += --enable-forward-log
163N/ACONFIGURE_OPTIONS += --enable-forw-via-db
163N/ACONFIGURE_OPTIONS += --enable-htcp
163N/ACONFIGURE_OPTIONS += --enable-icmp
163N/ACONFIGURE_OPTIONS += --enable-large-cache-files
163N/ACONFIGURE_OPTIONS += --enable-multicast-miss
4537N/ACONFIGURE_OPTIONS += --enable-auth-negotiate='kerberos'
4537N/ACONFIGURE_OPTIONS += --enable-auth-ntlm='smb_lm,fake'
163N/ACONFIGURE_OPTIONS += --enable-ntlm-fail-open
163N/ACONFIGURE_OPTIONS += --enable-removal-policies='heap,lru'
163N/ACONFIGURE_OPTIONS += --enable-snmp
211N/ACONFIGURE_OPTIONS += --enable-storeio='aufs,diskd,ufs'
163N/ACONFIGURE_OPTIONS += --enable-x-accelerator-vary
163N/ACONFIGURE_OPTIONS += --with-aio
163N/ACONFIGURE_OPTIONS += --with-aufs-threads=8
7310N/ACONFIGURE_OPTIONS += --with-build-environment=POSIX_V6_LP64_OFF64
7310N/A# Due to the current licensing of squid and openssl, gnutls/nettle
7310N/A# must be enabled and used instead of openssl for tls and/or other
7310N/A# crypto support.
7310N/ACONFIGURE_OPTIONS += --with-gnutls
7310N/ACONFIGURE_OPTIONS += --with-nettle
163N/ACONFIGURE_OPTIONS += --with-pthreads
5120N/ACONFIGURE_OPTIONS += --disable-arch-native
5795N/ACONFIGURE_OPTIONS += PERL=$(PERL)
163N/A
4560N/A# Appends the following line to the end of the squid.conf configuration
4560N/A# file. This line is necessary for running squid for testing.
4560N/A# This starts up squid as user webservd.
4560N/ACOMPONENT_POST_INSTALL_ACTION += \
4560N/A (cd $(PROTO_DIR)/etc/squid ; \
4560N/A echo '\ncache_effective_user webservd' >> squid.conf)
4560N/A
5795N/A# Adjust '#!/usr/bin/perl'
5795N/APERL_SCRIPTS= $(PROTOUSRDIR)/squid/libexec/helper-mux.pl
5795N/A
1689N/A# To test manually follow along in the book
1689N/A# Squid Proxy Server 3.1 Beginner's Guide Page 34
1689N/A#
1689N/A# Add this to the top of /etc/squid/squid.conf:
1689N/A# cache_dir ufs /var/squid/cache/ 500 16 256
1689N/A# acl my_machine src 192.0.2.21 # Replace with your desktop's IP address
1689N/A# http_access allow my_machine
1689N/A#
4537N/A# You will probably need to remove or comment out the following lines or Squid
4537N/A# will fail to start:
4537N/A# # acl manager proto cache_object
4537N/A#
1689N/A# Make sure apache is running.
1689N/A# # svcs apache22
1689N/A# Start squid:
1689N/A# # svcadm enable squid
1689N/A# On your desktop set your web browser to proxy through this squid:
1689N/A# Edit -> Preferences -> Advanced -> Network -> Settings
1689N/A# Check: Manual proxy configuration
1689N/A# HTTP Proxy: <squid servers IP address> Port: 3128
1689N/A# Save
1689N/A# Enter <squid server URL> in your web browser. You should be accessing squid
1689N/A# and seeing files stored in the http server on that machine.
1689N/A# Enter <squid server URL>:897 in your web browser and squid should complain.
1689N/A# Squid is working properly.
1689N/A
5807N/A# squid tests use cppunit. Currently this requires a version of cppunit
5807N/A# installed that have been built with the GNU version 5.3 compilers.
5807N/A
5758N/ACOMPONENT_TEST_TRANSFORMS += \
5758N/A '-n ' \
5758N/A '-e "/=====/p" ' \
5758N/A '-e "/TOTAL/p" ' \
5758N/A '-e "/SKIP/p" ' \
5758N/A '-e "/PASS/p" ' \
5758N/A '-e "/FAIL/p" ' \
5758N/A '-e "/Can not open file/d" ' \
5758N/A '-e "/ERROR/p" '
5758N/A
7310N/AREQUIRED_PACKAGES += library/gnutls-3
3817N/AREQUIRED_PACKAGES += library/libtool/libltdl
7310N/AREQUIRED_PACKAGES += library/security/nettle
5795N/AREQUIRED_PACKAGES += $(PERL_PKG)
6066N/AREQUIRED_PACKAGES += security/kerberos-5
7277N/Aifeq ($(OS_VERSION),5.11)
7277N/AREQUIRED_PACKAGES += service/security/kerberos-5
7277N/Aendif
3817N/AREQUIRED_PACKAGES += shell/ksh93
3817N/AREQUIRED_PACKAGES += system/core-os
3817N/AREQUIRED_PACKAGES += system/library/gcc/gcc-c-runtime
3817N/AREQUIRED_PACKAGES += system/library/gcc/gcc-c++-runtime
3817N/AREQUIRED_PACKAGES += system/library/math
3817N/AREQUIRED_PACKAGES += system/library/security/crypto
7277N/Aifeq ($(OS_VERSION),5.11)
7277N/AREQUIRED_PACKAGES += system/library/security/gss
7277N/Aendif
3817N/AREQUIRED_PACKAGES += system/library/security/libsasl
5452N/AREQUIRED_PACKAGES += system/library/security/libsasl2
3817N/AREQUIRED_PACKAGES += system/network
6123N/AREQUIRED_PACKAGES += system/network/ldap/openldap