Add a new mechanism for handling "crypto" packages, as discussed

on tech-pkg. Setting either USE_SSL or CRYPTO in the package's
Makefile will permit the package to build or not, depending on the
setting of MKCRYPTO (set to yes by default).

mk/bsd.pkg.mk

@@ -1,4 +1,4 @@
-#	$NetBSD: bsd.pkg.mk,v 1.566 2000/09/07 15:26:52 fredb Exp $
+#	$NetBSD: bsd.pkg.mk,v 1.567 2000/09/09 18:45:16 fredb Exp $
 #
 # This file is in the public domain.
 #
@@ -20,6 +20,9 @@
 ##### Include any preferences, if not already included, and common definitions
 .include "../../mk/bsd.prefs.mk"
 
+##### Build crypto packages by default.
+MKCRYPTO?=		yes
+
 ##### Some overrides of defaults below on a per-OS basis.
 .if (${OPSYS} == "NetBSD")
 LOCALBASE?=		${DESTDIR}/usr/pkg
@@ -967,6 +970,9 @@ ACCEPTABLE_LICENSES=	${ACCEPTABLE_LICENCES}
 # Don't build a package if it's restricted and we don't want to
 # get into that.
 #
+# Don't build any package that utilizes strong cryptography, for
+# when the law of the land forbids it.
+#
 # Don't attempt to build packages against X if we don't have X.
 #
 # Don't build a package if it's broken.
@@ -991,6 +997,11 @@ IGNORE+= "${PKGNAME} may not be placed in source form on a CDROM:" \
 IGNORE+= "${PKGNAME} is restricted:" \
 	 "    "${RESTRICTED:Q}
 .endif
+.if !(${MKCRYPTO} == "YES" || ${MKCRYPTO} == yes)
+.  if (defined(CRYPTO) || defined(USE_SSL))
+IGNORE+= "${PKGNAME} may not be built, because it utilizes strong cryptography"
+.  endif
+.endif
 .if ((defined(USE_IMAKE) || defined(USE_MOTIF) || \
 	defined(USE_X11BASE) || defined(USE_X11)) && \
        !exists(${X11BASE}))

mk/mk.conf.example

@@ -1,4 +1,4 @@
-# $NetBSD: mk.conf.example,v 1.153 2000/09/09 16:34:44 veego Exp $
+# $NetBSD: mk.conf.example,v 1.154 2000/09/09 18:45:16 fredb Exp $
 #
 
 # Sample /etc/mk.conf file, which can be used to set specific values
@@ -30,6 +30,11 @@
 # Possible: defined, not defined
 # Default: not defined
 
+#MKCRYPTO= no
+# If not YES or yes, don't fetch, build or install crypto packages.
+# Possible: not defined, no
+# Default: yes
+
 #OBJMACHINE=
 # use machine-specific object directories, e.g.  work.i386, work.sparc
 # Possible: defined, not defined