net-analyzer/sslscan: add static USE flag

Add a static USE flag, enabled by default, to build
statically against a version of the openssl libraries
with insecure options such as SSLv2 enabled. This
allows sslscan to carry out more complete scans by
also testing these insecure protocols without the
need for an insecure system openssl library.

Fixes bug 603828

Package-Manager: portage-2.3.0

2 files changed, 55 insertions, 0 deletions

diff --git a/net-analyzer/sslscan/Manifest b/net-analyzer/sslscan/Manifest
index 5f8692449665..2fe532791c17 100644
--- a/net-analyzer/sslscan/Manifest
+++ b/net-analyzer/sslscan/Manifest
@@ -1,3 +1,4 @@
+DIST openssl-1.0.2j.tar.gz 5307912 SHA256 e7aff292be21c259c6af26469c7a9b3ba26e9abaaffd325e3dccc9785256c431 SHA512 7d6ccae4aa3ccec3a5d128da29c68401cdb1210cba6d212d55235fc3bc63d7085e2f119e2bbee7ddff6b7b5eef07c6196156791724cd2caf313a4c2fef724edd WHIRLPOOL 1f17e80bc10da2eab9d4c1c3a662b0e2b4f7e8bc448aabb44cd98a96ba3d6cd0ef6cf9a3371d44b39a4d11b1a4087c8f0d056272ace6eba5bd2417f7ab9503b7
 DIST sslscan-1.11.3-rbsec.tar.gz 48865 SHA256 c36d6ac127aa36d6e550950f31540f34a7df131cd76b0be5b91092809eef4916 SHA512 37fcc5b220aa8f2fdcd1b50c5d5f29831348e609f5f678f3c31376b22721ed9fb47eff48fa78483ac7622cf8d80709ef4d220421ce85151a3f1c855f7ef0c545 WHIRLPOOL 55d2d0e35aa28e3d61b546034342d3389c3973f4495e376606ff56538daed1fec9de3e1b383430528dc132c700a86a051883a8f29f35baeb93695d158f09a27a
 DIST sslscan-1.11.7-rbsec.tar.gz 50801 SHA256 1a2787b427eabc3e61350c0692970e4ab679891f6310e2dd855bab549ff8cf73 SHA512 092b3e25d292aa9db5c75311f2e5c034068b19351ad09c9b448a692aa47ee15eb0649e3da64cc84be42a5af7c9a879d9ff41802a27ce19b3b485f98714282816 WHIRLPOOL 6066e50115d9b98b1dd6ff883ca9e7ad06b71cddf86706b94a07954ce94f111b539e3be4b488aed8bef7fc979dc77a589cfbdbb69933cee85959bf999177af1f
 DIST sslscan-1.11.8-rbsec.tar.gz 51583 SHA256 1449f8bb45d323b322cb070a74d8dcc57b43ca2dba0560e7a16151efc8b3d911 SHA512 8951b48f34eea8db255de2d0ec95aa28ce2cc9f338053ee70ce627d8992ae4c07115445cab9bc058d7ebdeccabd8bb1a9f4029e4449a2c1df5d8ee5a668ff34f WHIRLPOOL 854bf585bedda25a4c8b88fa6308429852fed6c7fa1c5873c30459325a00368a62952592fde9eeebe45e9056667e9e23900c0411c4d12dca0d1011c46a7f59e2
diff --git a/net-analyzer/sslscan/sslscan-1.11.8-r1.ebuild b/net-analyzer/sslscan/sslscan-1.11.8-r1.ebuild
new file mode 100644
index 000000000000..d943303d1f94
--- /dev/null
+++ b/net-analyzer/sslscan/sslscan-1.11.8-r1.ebuild
@@ -0,0 +1,54 @@
+# Copyright 1999-2016 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+
+EAPI=6
+
+OPENSSL_V=1.0.2j
+
+inherit eutils toolchain-funcs
+
+DESCRIPTION="Fast SSL configuration scanner"
+HOMEPAGE="https://github.com/rbsec/sslscan"
+MY_FORK="rbsec"
+SRC_URI="https://github.com/${MY_FORK}/${PN}/archive/${PV}-${MY_FORK}.tar.gz -> ${P}-${MY_FORK}.tar.gz
+	static? ( mirror://openssl/source/openssl-${OPENSSL_V}.tar.gz )"
+
+LICENSE="GPL-3"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE="libressl +static"
+
+# Depend on -bindist since sslscan unconditionally requires elliptic
+# curve support, bug 491102
+DEPEND="!libressl? ( dev-libs/openssl:0[-bindist] ) libressl? ( dev-libs/libressl )"
+RDEPEND="${DEPEND}"
+
+S="${WORKDIR}/${P}-${MY_FORK}"
+
+src_prepare() {
+	if use static; then
+		ln -s ../openssl-${OPENSSL_V} openssl || die
+		touch .openssl_is_fresh || die
+
+		sed -i -e '/openssl\/.git/,/fi/d' \
+			-e '/openssl test/d' Makefile || die
+
+	fi
+
+	default
+}
+
+src_compile() {
+	if use static; then
+		emake static
+	else
+		emake
+	fi
+}
+
+src_install() {
+	DESTDIR="${D}" emake install
+
+	dodoc Changelog README.md
+}