net-libs/libssh: new package, add 0.11.1-r1

Signed-off-by: orbea <orbea@riseup.net>

4 files changed, 186 insertions, 0 deletions

diff --git a/net-libs/libssh/Manifest b/net-libs/libssh/Manifest
new file mode 100644
index 0000000..91230e1
--- /dev/null
+++ b/net-libs/libssh/Manifest
@@ -0,0 +1,4 @@
+AUX libssh-0.11.1-libressl.patch 951 BLAKE2B b7518de5335906e75a69f5c51f1360331495f883ebc35cc3d83f9c354cbc2d8554e6830fb57f1c718cf98643f2811ee50d3ae086b5604055c66263abc87d4bed SHA512 f98a9fdf45c5c05eaf098429a1735576b35909caa41123e19063100986e8e6ba0667af9eb6e842186ba3d7eade7f5ad009af4189d35335291e7a517918fd7aee
+DIST libssh-0.11.1.tar.xz 621108 BLAKE2B 87079b4eaf66ceb77803b3d854f847b3f3fb6a67ac3bfa756ebcf8f06bf2b313e976044e0a1d81227fb5278fb04bc56f1a82877d14a6ee76bec0c690b14f38a7 SHA512 284d376ad9ea30b0274b4ac754b27d168286dca862ece43ef15ca6d89e66865ad7a6703cc12dd4a8564a60b8449ae9b36e6496fd51d34cc27ac4030f6cf216d6
+EBUILD libssh-0.11.1-r1.ebuild 3463 BLAKE2B e4e06d4276f435e83638ed7ffa2aa1a74abc329cf73e40b42476a3a2fade453e3c4d71fe5a9508807970044be52997a8a41ca4d32349c7e0d54a7401e833d6a1 SHA512 d10df56baad19f88d789988b7865299eb5dd70c6c8ce437403137eec2faf8418d030a5dbfcd3510ced605ce31cc4fc283f3deded75e7462c4251cb8768968d56
+MISC metadata.xml 704 BLAKE2B 5a3e9f32decb26a947dc4c51845cb8979ee071e90782367d1f0bec0eb89b54f0374bc0943e4cefcfbd5c0033bca49f613824c31f302873cccd14fdbc15eb696e SHA512 6b6fc79261d7e7d921be1b7f288a5207d5d95ba36b93db3719e39527ef6036716698412bc7fb214667040e6ca0651aedb0b09ee726e3351af44fab9ce64bdd6a
diff --git a/net-libs/libssh/files/libssh-0.11.1-libressl.patch b/net-libs/libssh/files/libssh-0.11.1-libressl.patch
new file mode 100644
index 0000000..b4e4b73
--- /dev/null
+++ b/net-libs/libssh/files/libssh-0.11.1-libressl.patch
@@ -0,0 +1,28 @@
+https://github.com/openbsd/ports/blob/5a722226e826c40b57b2d67b36b2d3221eeb3069/security/libssh/patches/patch-ConfigureChecks_cmake
+
+We have EVP_chacha20 but not EVP_PKEY_POLY1305 so the code using it
+fails.
+
+Fix exit code.
+
+Index: ConfigureChecks.cmake
+--- a/ConfigureChecks.cmake.orig
++++ b/ConfigureChecks.cmake
+@@ -102,7 +102,7 @@ if (OPENSSL_FOUND)
+     check_function_exists(EVP_KDF_CTX_new HAVE_OPENSSL_EVP_KDF_CTX_NEW)
+     check_function_exists(FIPS_mode HAVE_OPENSSL_FIPS_MODE)
+     check_function_exists(RAND_priv_bytes HAVE_OPENSSL_RAND_PRIV_BYTES)
+-    check_function_exists(EVP_chacha20 HAVE_OPENSSL_EVP_CHACHA20)
++    #check_function_exists(EVP_chacha20 HAVE_OPENSSL_EVP_CHACHA20)
+ 
+     unset(CMAKE_REQUIRED_INCLUDES)
+     unset(CMAKE_REQUIRED_LIBRARIES)
+@@ -261,7 +261,7 @@ check_c_source_compiles("
+ __thread int tls;
+ 
+ int main(void) {
+-    return 0;
++    return tls;
+ }" HAVE_GCC_THREAD_LOCAL_STORAGE)
+ 
+ check_c_source_compiles("
diff --git a/net-libs/libssh/libssh-0.11.1-r1.ebuild b/net-libs/libssh/libssh-0.11.1-r1.ebuild
new file mode 100644
index 0000000..5a5eee6
--- /dev/null
+++ b/net-libs/libssh/libssh-0.11.1-r1.ebuild
@@ -0,0 +1,135 @@
+# Copyright 1999-2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit cmake-multilib
+
+DESCRIPTION="Access a working SSH implementation by means of a library"
+HOMEPAGE="https://www.libssh.org/"
+
+if [[ ${PV} == *9999* ]] ; then
+	inherit git-r3
+	EGIT_REPO_URI="https://git.libssh.org/projects/libssh.git"
+else
+	SRC_URI="https://www.libssh.org/files/$(ver_cut 1-2)/${P}.tar.xz"
+	KEYWORDS="~alpha amd64 arm arm64 hppa ~loong ~mips ppc ppc64 ~riscv ~s390 sparc x86 ~amd64-linux ~x86-linux"
+fi
+
+LICENSE="LGPL-2.1"
+SLOT="0/4" # subslot = soname major version
+IUSE="debug doc examples gssapi mbedtls pcap server +sftp static-libs test zlib"
+# Maintainer: check IUSE-defaults at DefineOptions.cmake
+
+RESTRICT="!test? ( test )"
+
+RDEPEND="
+	!mbedtls? ( >=dev-libs/openssl-1.0.1h-r2:0=[${MULTILIB_USEDEP}] )
+	gssapi? ( >=virtual/krb5-0-r1[${MULTILIB_USEDEP}] )
+	mbedtls? ( net-libs/mbedtls:0=[${MULTILIB_USEDEP}] )
+	zlib? ( >=sys-libs/zlib-1.2.8-r1[${MULTILIB_USEDEP}] )
+"
+DEPEND="${RDEPEND}
+	test? (
+		>=dev-util/cmocka-0.3.1[${MULTILIB_USEDEP}]
+		elibc_musl? ( sys-libs/argp-standalone )
+	)
+"
+BDEPEND="doc? ( app-text/doxygen[dot] )"
+
+DOCS=( AUTHORS CHANGELOG README )
+
+PATCHES=( "${FILESDIR}"/${PN}-0.11.1-libressl.patch )
+
+src_prepare() {
+	cmake_src_prepare
+
+	# just install the examples, do not compile them
+	cmake_comment_add_subdirectory examples
+
+	sed -e "/^check_include_file.*HAVE_VALGRIND_VALGRIND_H/s/^/#DONT /" \
+		-i ConfigureChecks.cmake || die
+
+	if use test; then
+		local skip_tests=(
+			# keyfile torture test is currently broken
+			-e "/torture_keyfiles/d"
+
+			# Tries to expand ~ which fails w/ portage homedir
+			# (torture_path_expand_tilde_unix and torture_config_make_absolute_no_sshdir)
+			-e "/torture_misc/d"
+			-e "/torture_config/d"
+		)
+
+		# Disable tests that take too long (bug #677006)
+		if use sparc; then
+			skip_tests+=(
+				-e "/torture_threads_pki_rsa/d"
+				-e "/torture_pki_dsa/d"
+			)
+		fi
+
+		if (( ${#skip_tests[@]} )) ; then
+			sed -i "${skip_tests[@]}" tests/unittests/CMakeLists.txt || die
+		fi
+
+		if use elibc_musl; then
+			sed -e "/SOLARIS/d" \
+				-i tests/CMakeLists.txt || die
+		fi
+	fi
+}
+
+multilib_src_configure() {
+	local mycmakeargs=(
+		-DWITH_NACL=OFF
+		-DWITH_STACK_PROTECTOR=OFF
+		-DWITH_STACK_PROTECTOR_STRONG=OFF
+		-DWITH_DEBUG_CALLTRACE=$(usex debug)
+		-DWITH_DEBUG_CRYPTO=$(usex debug)
+		-DWITH_GCRYPT=OFF
+		-DWITH_GSSAPI=$(usex gssapi)
+		-DWITH_MBEDTLS=$(usex mbedtls)
+		-DWITH_PCAP=$(usex pcap)
+		-DWITH_SERVER=$(usex server)
+		-DWITH_SFTP=$(usex sftp)
+		-DBUILD_STATIC_LIB=$(usex static-libs)
+		# TODO: try enabling {CLIENT,SERVER}_TESTING
+		-DUNIT_TESTING=$(usex test)
+		-DWITH_ZLIB=$(usex zlib)
+	)
+
+	multilib_is_native_abi || mycmakeargs+=( -DCMAKE_DISABLE_FIND_PACKAGE_Doxygen=ON )
+
+	cmake_src_configure
+}
+
+multilib_src_compile() {
+	cmake_src_compile
+	multilib_is_native_abi && use doc && cmake_src_compile docs
+}
+
+multilib_src_test() {
+	cmake_src_test --timeout 3000
+}
+
+multilib_src_install() {
+	cmake_src_install
+	multilib_is_native_abi && use doc && local HTML_DOCS=( "${BUILD_DIR}"/doc/html/. )
+
+	use static-libs && dolib.a src/libssh.a
+
+	# compatibility symlink until all consumers have been updated
+	# to no longer use libssh_threads.so
+	dosym libssh.so /usr/$(get_libdir)/libssh_threads.so
+}
+
+multilib_src_install_all() {
+	use mbedtls && DOCS+=( README.mbedtls )
+	einstalldocs
+
+	if use examples; then
+		docinto examples
+		dodoc examples/*.{c,h,cpp}
+	fi
+}
diff --git a/net-libs/libssh/metadata.xml b/net-libs/libssh/metadata.xml
new file mode 100644
index 0000000..4107f06
--- /dev/null
+++ b/net-libs/libssh/metadata.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<maintainer type="project">
+		<email>kde@gentoo.org</email>
+		<name>Gentoo KDE Project</name>
+	</maintainer>
+	<use>
+		<flag name="gssapi">Enable gssapi support</flag>
+		<flag name="mbedtls">Use <pkg>net-libs/mbedtls</pkg> as TLS provider</flag>
+		<flag name="pcap">Build with PCAP output support</flag>
+		<flag name="server">Build with SSH server support</flag>
+		<flag name="sftp">Build with SFTP support</flag>
+	</use>
+	<upstream>
+		<remote-id type="gitlab">libssh/libssh-mirror</remote-id>
+		<remote-id type="cpe">cpe:/a:libssh:libssh</remote-id>
+	</upstream>
+</pkgmetadata>