openvpn-auth-ldap

MEDIUM

maintainer k0ste 1 votes scanned 2026-08-28 09:35:00.314873

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 source=("${pkgname}-${pkgver}.tar.gz::https://codeload.${_uri}/tar.gz/refs/tags/${_name}-${pkgver}"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Shalygin Konstantin <k0ste@k0ste.ru>
    
      2# Contributor: Shalygin Konstantin <k0ste@k0ste.ru>
    
      3
    
      4pkgname='openvpn-auth-ldap'
    
      5_name='auth-ldap'
    
      6pkgver='2.0.4'
    
      7pkgrel='6'
    
      8pkgdesc='OpenVPN Auth via LDAP/AD plugin. RFC2307 support'
    
      9arch=('x86_64' 'aarch64')
    
      10_uri="github.com/threerings/${pkgname}"
    
      11url="https://${_uri}"
    
      12license=('BSD')
    
      13depends=('openvpn' 'libldap' 'libsasl' 'openssl')
    
      14source=("${pkgname}-${pkgver}.tar.gz::https://codeload.${_uri}/tar.gz/refs/tags/${_name}-${pkgver}"
    
      15	"${url}/pull/73.patch"
    
      16	"${url}/pull/74.patch"
    
      17	"${url}/pull/75.patch"
    
      18	"${url}/pull/77.patch"
    
      19	"${url}/pull/85.patch"
    
      20	"${url}/pull/92.patch"
    
      21	"${url}/pull/96.patch"
    
      22	"https://salsa.debian.org/debian/${pkgname}/-/raw/master/debian/patches/gcc-14.patch")
    
      23makedepends=('gcc-objc' 're2c' 'doxygen')
    
      24sha256sums=('81f600cdc88adb2258f57df1ed2d87f0afa945f66cbf8897ad50e76f42509168'
    
      25            '0d79951a8aaffc1588fdb5717f122dc79bb6ab107986b6d54e8a681754beaea9'
    
      26            '51f9641afd9348eb06dfdae10073d43f2bb63358e4b8570caaf03c8a1b50ed44'
    
      27            '29fe8fdae6d503a28befb4f97086d7779599471101da829d9e177bd75f5f12f9'
    
      28            '003e5acefebc5cdbea5a9513ca8a27f624917a357e72f825dccf4294c375b4f5'
    
      29            '6e076fd2f6b417e7282a5b885330a42b8a41cc4c0622801c75a9fc109b156c1f'
    
      30            'dc6c47c743b8222ac412ee03ebfefa42363cfaade17f0184717347bf9fb61466'
    
      31            'efe1a990a8ce3b11c781d5f54f47ae51a5be1f6840d90b3a4837f0baf701492a'
    
      32            '75f5d5cfcb715acebf17d0a9610aae9920ff9f7e159e4c2dc9139be4351a27e3')
    
      33backup=("etc/openvpn/server/${_name}.conf")
    
      34
    
      35prepare() {
    
      36  cd "${pkgname}-${_name}-${pkgver}"
    
      37  for e in "../"*".patch"
    
      38    do
    
      39    echo "Apply patch: ${e}"
    
      40    patch -p1 -i "../${e}"
    
      41  done
    
      42
    
      43  # Archlinux use gcc
    
      44  sed --in-place \
    
      45    --expression 's|AC_CONFIG_SRCDIR(${srcdir}/src/auth-ldap.m)|AC_CONFIG_SRCDIR(src/auth-ldap.m)|g' \
    
      46    --expression 's|C_PROG_CC(clang gobjc gcc)|C_PROG_CC(gcc)|g' \
    
      47    --expression 's|AC_PROG_OBJC(clang gobjc gcc)|AC_PROG_OBJC(gcc)|g' \
    
      48  "configure.ac"
    
      49
    
      50  autoreconf -fvi
    
      51  autoheader
    
      52
    
      53  CFLAGS="${CFLAGS} -std=gnu99" \
    
      54  ./configure \
    
      55    --prefix="/usr" \
    
      56    --with-openvpn="/usr/include" \
    
      57    --with-openldap="/usr/include" \
    
      58    --with-openssl="/usr/include" \
    
      59    --with-objc-runtime="GNU"
    
      60}
    
      61
    
      62build() {
    
      63  cd "${pkgname}-${_name}-${pkgver}"
    
      64  make
    
      65}
    
      66
    
      67check() {
    
      68  cd "${pkgname}-${_name}-${pkgver}"
    
      69  make test
    
      70}
    
      71
    
      72package() {
    
      73  cd "${pkgname}-${_name}-${pkgver}"
    
      74  install -Dm0775 "src/${pkgname}.so" -t "${pkgdir}/usr/lib/openvpn/plugins"
    
      75  install -Dm0400 "${_name}.conf" -t "${pkgdir}/etc/openvpn/server"
    
      76}
    
      77

Changes since previous scan

--- PKGBUILD @ 2026-06-18 16:11
+++ PKGBUILD @ 2026-08-28 09:35
@@ -4,13 +4,14 @@
 pkgname='openvpn-auth-ldap'
 _name='auth-ldap'
 pkgver='2.0.4'
-pkgrel='5'
+pkgrel='6'
 pkgdesc='OpenVPN Auth via LDAP/AD plugin. RFC2307 support'
-arch=('any')
-url="https://github.com/threerings/${pkgname}"
+arch=('x86_64' 'aarch64')
+_uri="github.com/threerings/${pkgname}"
+url="https://${_uri}"
 license=('BSD')
 depends=('openvpn' 'libldap' 'libsasl' 'openssl')
-source=("${url}/archive/refs/tags/${_name}-${pkgver}.tar.gz"
+source=("${pkgname}-${pkgver}.tar.gz::https://codeload.${_uri}/tar.gz/refs/tags/${_name}-${pkgver}"
 	"${url}/pull/73.patch"
 	"${url}/pull/74.patch"
 	"${url}/pull/75.patch"
@@ -40,17 +41,18 @@
   done
 
   # Archlinux use gcc
-  sed -i \
-    -e 's|AC_CONFIG_SRCDIR(${srcdir}/src/auth-ldap.m)|AC_CONFIG_SRCDIR(src/auth-ldap.m)|g' \
-    -e 's|C_PROG_CC(clang gobjc gcc)|C_PROG_CC(gcc)|g' \
-    -e 's|AC_PROG_OBJC(clang gobjc gcc)|AC_PROG_OBJC(gcc)|g' \
-    configure.ac
+  sed --in-place \
+    --expression 's|AC_CONFIG_SRCDIR(${srcdir}/src/auth-ldap.m)|AC_CONFIG_SRCDIR(src/auth-ldap.m)|g' \
+    --expression 's|C_PROG_CC(clang gobjc gcc)|C_PROG_CC(gcc)|g' \
+    --expression 's|AC_PROG_OBJC(clang gobjc gcc)|AC_PROG_OBJC(gcc)|g' \
+  "configure.ac"
 
   autoreconf -fvi
   autoheader
 
   CFLAGS="${CFLAGS} -std=gnu99" \
   ./configure \
+    --prefix="/usr" \
     --with-openvpn="/usr/include" \
     --with-openldap="/usr/include" \
     --with-openssl="/usr/include" \
@@ -69,7 +71,7 @@
 
 package() {
   cd "${pkgname}-${_name}-${pkgver}"
-  install -Dm0775 "src/${pkgname}.so" "${pkgdir}/usr/lib/openvpn/plugins/${pkgname}.so"
-  install -Dm0400 "${_name}.conf" "${pkgdir}/etc/openvpn/server/${_name}.conf"
+  install -Dm0775 "src/${pkgname}.so" -t "${pkgdir}/usr/lib/openvpn/plugins"
+  install -Dm0400 "${_name}.conf" -t "${pkgdir}/etc/openvpn/server"
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-28 09:35:00	Medium	1
2026-06-18 16:11:54	Clean	0