1 |
commit: 7d29483319696877ae0a7b1e40d34e824a76bbc0 |
2 |
Author: Marc Schiffbauer <mschiff <AT> gentoo <DOT> org> |
3 |
AuthorDate: Tue Aug 23 06:51:24 2016 +0000 |
4 |
Commit: Marc Schiffbauer <mschiff <AT> gentoo <DOT> org> |
5 |
CommitDate: Tue Aug 23 15:48:33 2016 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7d294833 |
7 |
|
8 |
net-dns/opendnssec: bump 1.4 branch |
9 |
|
10 |
Package-Manager: portage-2.3.0 |
11 |
|
12 |
net-dns/opendnssec/Manifest | 1 + |
13 |
net-dns/opendnssec/opendnssec-1.4.10.ebuild | 210 ++++++++++++++++++++++++++++ |
14 |
2 files changed, 211 insertions(+) |
15 |
|
16 |
diff --git a/net-dns/opendnssec/Manifest b/net-dns/opendnssec/Manifest |
17 |
index 9beee25..4f98250 100644 |
18 |
--- a/net-dns/opendnssec/Manifest |
19 |
+++ b/net-dns/opendnssec/Manifest |
20 |
@@ -1,2 +1,3 @@ |
21 |
DIST opendnssec-1.3.18.tar.gz 1143889 SHA256 e61d23ae0cc57b6e09d408bade6872fe5241896c61a03e8bc5ceeb65df13a676 SHA512 5df39ba778c9b1245e88b81df7aa491bca0aad2943845284c4f8b4dd729fa69014d45f07bdf99a048ccf668a1c9675a8dd99efcec1abdbd4e06e9738fec6ab6d WHIRLPOOL 7213b8f2f86651114449bc4734452d6065960e26ee289051949ca27ae3b23280cea45ff707f71942eef91c9009200272c0985ef3d3de43c9343ad2e1e54303ce |
22 |
+DIST opendnssec-1.4.10.tar.gz 1036069 SHA256 55b44c1da3a665eef0af1d1b3f4d1c57d20f50f77858b1dd3d03ca6ebc1df7cb SHA512 00ba6ceba595f9d4d7736af982b78779f204eb52fcf92222256792368328647ca1a4c84b4db64dcdd9a0119292f132a4efd15e60436c2a125bf6a8fb3f33540e WHIRLPOOL 2122feed10b83b38f8954ebaaf5d065bbf124d573c085559d0b3542dc8b58b8c55a489ceda9707836501a03efbe7a81bc7518e394c86ef1f682822943bbc0a82 |
23 |
DIST opendnssec-1.4.8.2.tar.gz 1043171 SHA256 7fd553ee39173e807477ed1daff6ee2f8b1c83875cd2e52a1df3315bf0015513 SHA512 7f2e10b425f60947aca40c61509b07ddc4363105cc882b518ffa816437299d6f881411cb38325f27b3a34c2005953988b39c945362866dd0f1f7c6ef973bfa06 WHIRLPOOL 38079a89d8e3d039aeab28c80b7fb1a9739014736d6076442c546fae1b13e1c89faa1858beb6f4d2f495d19a2a1187a7af10c55c0ed33563bc9b2d57945de807 |
24 |
|
25 |
diff --git a/net-dns/opendnssec/opendnssec-1.4.10.ebuild b/net-dns/opendnssec/opendnssec-1.4.10.ebuild |
26 |
new file mode 100644 |
27 |
index 0000000..7e2931f |
28 |
--- /dev/null |
29 |
+++ b/net-dns/opendnssec/opendnssec-1.4.10.ebuild |
30 |
@@ -0,0 +1,210 @@ |
31 |
+# Copyright 1999-2016 Gentoo Foundation |
32 |
+# Distributed under the terms of the GNU General Public License v2 |
33 |
+# $Id$ |
34 |
+ |
35 |
+EAPI=5 |
36 |
+ |
37 |
+MY_P="${P/_}" |
38 |
+PKCS11_IUSE="+softhsm opensc external-hsm" |
39 |
+inherit autotools eutils multilib user |
40 |
+ |
41 |
+DESCRIPTION="An open-source turn-key solution for DNSSEC" |
42 |
+HOMEPAGE="http://www.opendnssec.org/" |
43 |
+SRC_URI="http://www.${PN}.org/files/source/${MY_P}.tar.gz" |
44 |
+ |
45 |
+LICENSE="BSD GPL-2" |
46 |
+SLOT="0" |
47 |
+KEYWORDS="~amd64 ~x86" |
48 |
+IUSE="debug doc +mysql +signer sqlite test ${PKCS11_IUSE}" |
49 |
+ |
50 |
+RDEPEND=" |
51 |
+ dev-lang/perl |
52 |
+ dev-libs/libxml2 |
53 |
+ dev-libs/libxslt |
54 |
+ net-libs/ldns |
55 |
+ mysql? ( |
56 |
+ virtual/mysql |
57 |
+ dev-perl/DBD-mysql |
58 |
+ ) |
59 |
+ opensc? ( dev-libs/opensc ) |
60 |
+ softhsm? ( dev-libs/softhsm ) |
61 |
+ sqlite? ( |
62 |
+ dev-db/sqlite:3 |
63 |
+ dev-perl/DBD-SQLite |
64 |
+ ) |
65 |
+" |
66 |
+DEPEND="${RDEPEND} |
67 |
+ doc? ( app-doc/doxygen ) |
68 |
+ test? ( |
69 |
+ app-text/trang |
70 |
+ ) |
71 |
+" |
72 |
+ |
73 |
+REQUIRED_USE=" |
74 |
+ ^^ ( mysql sqlite ) |
75 |
+ ^^ ( softhsm opensc external-hsm ) |
76 |
+" |
77 |
+ |
78 |
+PATCHES=( |
79 |
+ "${FILESDIR}/${PN}-fix-localstatedir.patch" |
80 |
+ "${FILESDIR}/${PN}-fix-run-dir.patch" |
81 |
+ "${FILESDIR}/${PN}-drop-privileges.patch" |
82 |
+ "${FILESDIR}/${PN}-use-system-trang.patch" |
83 |
+) |
84 |
+ |
85 |
+S="${WORKDIR}/${MY_P}" |
86 |
+ |
87 |
+DOCS=( MIGRATION NEWS ) |
88 |
+ |
89 |
+check_pkcs11_setup() { |
90 |
+ # PKCS#11 HSM's are often only available with proprietary drivers not |
91 |
+ # available in portage tree. |
92 |
+ |
93 |
+ if use softhsm; then |
94 |
+ PKCS11_LIB=softhsm |
95 |
+ if has_version ">=dev-libs/softhsm-1.3.1"; then |
96 |
+ PKCS11_PATH=/usr/$(get_libdir)/softhsm/libsofthsm.so |
97 |
+ else |
98 |
+ PKCS11_PATH=/usr/$(get_libdir)/libsofthsm.so |
99 |
+ fi |
100 |
+ elog "Building with SoftHSM PKCS#11 library support." |
101 |
+ fi |
102 |
+ if use opensc; then |
103 |
+ PKCS11_LIB=opensc |
104 |
+ PKCS11_PATH=/usr/$(get_libdir)/opensc-pkcs11.so |
105 |
+ elog "Building with OpenSC PKCS#11 library support." |
106 |
+ fi |
107 |
+ if use external-hsm; then |
108 |
+ if [[ -n ${PKCS11_SCA6000} ]]; then |
109 |
+ PKCS11_LIB=sca6000 |
110 |
+ PKCS11_PATH=${PKCS11_SCA6000} |
111 |
+ elif [[ -n ${PKCS11_ETOKEN} ]]; then |
112 |
+ PKCS11_LIB=etoken |
113 |
+ PKCS11_PATH=${PKCS11_ETOKEN} |
114 |
+ elif [[ -n ${PKCS11_NCIPHER} ]]; then |
115 |
+ PKCS11_LIB=ncipher |
116 |
+ PKCS11_PATH=${PKCS11_NCIPHER} |
117 |
+ elif [[ -n ${PKCS11_AEPKEYPER} ]]; then |
118 |
+ PKCS11_LIB=aepkeyper |
119 |
+ PKCS11_PATH=${PKCS11_AEPKEYPER} |
120 |
+ else |
121 |
+ ewarn "You enabled USE flag 'external-hsm' but did not specify a path to a PKCS#11" |
122 |
+ ewarn "library. To set a path, set one of the following environment variables:" |
123 |
+ ewarn " for Sun Crypto Accelerator 6000, set: PKCS11_SCA6000=<path>" |
124 |
+ ewarn " for Aladdin eToken, set: PKCS11_ETOKEN=<path>" |
125 |
+ ewarn " for Thales/nCipher netHSM, set: PKCS11_NCIPHER=<path>" |
126 |
+ ewarn " for AEP Keyper, set: PKCS11_AEPKEYPER=<path>" |
127 |
+ ewarn "Example:" |
128 |
+ ewarn " PKCS11_ETOKEN=\"/opt/etoken/lib/libeTPkcs11.so\" emerge -pv opendnssec" |
129 |
+ ewarn "or store the variable into /etc/make.conf" |
130 |
+ die "USE flag 'external-hsm' set but no PKCS#11 library path specified." |
131 |
+ fi |
132 |
+ elog "Building with external PKCS#11 library support ($PKCS11_LIB): ${PKCS11_PATH}" |
133 |
+ fi |
134 |
+} |
135 |
+ |
136 |
+pkg_pretend() { |
137 |
+ check_pkcs11_setup |
138 |
+} |
139 |
+ |
140 |
+pkg_setup() { |
141 |
+ enewgroup opendnssec |
142 |
+ enewuser opendnssec -1 -1 -1 opendnssec |
143 |
+ |
144 |
+ # pretend does not preserve variables so we need to run this once more |
145 |
+ check_pkcs11_setup |
146 |
+} |
147 |
+ |
148 |
+src_prepare() { |
149 |
+ local patch |
150 |
+ default |
151 |
+ for patch in "${PATCHES[@]}"; do |
152 |
+ epatch "$patch" |
153 |
+ done |
154 |
+ eautoreconf |
155 |
+} |
156 |
+ |
157 |
+src_configure() { |
158 |
+ econf \ |
159 |
+ --without-cunit \ |
160 |
+ --localstatedir="${EPREFIX}/var/" \ |
161 |
+ --disable-static \ |
162 |
+ --with-database-backend=$(use mysql && echo "mysql")$(use sqlite && echo "sqlite3") \ |
163 |
+ --with-pkcs11-${PKCS11_LIB}=${PKCS11_PATH} \ |
164 |
+ $(use_enable debug timeshift) \ |
165 |
+ $(use_enable signer) |
166 |
+} |
167 |
+ |
168 |
+src_compile() { |
169 |
+ default |
170 |
+ use doc && emake docs |
171 |
+} |
172 |
+ |
173 |
+src_install() { |
174 |
+ default |
175 |
+ |
176 |
+ # remove useless .la files |
177 |
+ find "${ED}" -name '*.la' -delete |
178 |
+ |
179 |
+ # Remove subversion tags from config files to avoid useless config updates |
180 |
+ sed -i \ |
181 |
+ -e '/<!-- \$Id:/ d' \ |
182 |
+ "${ED}"/etc/opendnssec/* || die |
183 |
+ |
184 |
+ # install update scripts |
185 |
+ insinto /usr/share/opendnssec |
186 |
+ if use sqlite; then |
187 |
+ doins enforcer/utils/migrate_keyshare_sqlite3.pl |
188 |
+ doins enforcer/utils/migrate_adapters_1.sqlite3 |
189 |
+ fi |
190 |
+ if use mysql; then |
191 |
+ doins enforcer/utils/migrate_keyshare_mysql.pl |
192 |
+ doins enforcer/utils/migrate_adapters_1.mysql |
193 |
+ fi |
194 |
+ |
195 |
+ # fix permissions |
196 |
+ fowners root:opendnssec /etc/opendnssec |
197 |
+ fowners root:opendnssec /etc/opendnssec/{addns,conf,kasp,zonelist}.xml |
198 |
+ fowners opendnssec:opendnssec /var/lib/opendnssec/{,signconf,unsigned,signed,tmp} |
199 |
+ |
200 |
+ # install conf/init script |
201 |
+ newinitd "${FILESDIR}"/opendnssec.initd opendnssec |
202 |
+ newconfd "${FILESDIR}"/opendnssec.confd opendnssec |
203 |
+} |
204 |
+ |
205 |
+pkg_postinst() { |
206 |
+ local v |
207 |
+ if use softhsm; then |
208 |
+ elog "Please make sure that you create your softhsm database in a location writeable" |
209 |
+ elog "by the opendnssec user. You can set its location in /etc/softhsm.conf." |
210 |
+ elog "Suggested configuration is:" |
211 |
+ elog " echo \"0:/var/lib/opendnssec/softhsm_slot0.db\" >> /etc/softhsm.conf" |
212 |
+ elog " softhsm --init-token --slot 0 --label OpenDNSSEC" |
213 |
+ elog " chown opendnssec:opendnssec /var/lib/opendnssec/softhsm_slot0.db" |
214 |
+ fi |
215 |
+ |
216 |
+ for v in $REPLACING_VERSIONS; do |
217 |
+ case $v in |
218 |
+ 1.3.*) |
219 |
+ ewarn "" |
220 |
+ ewarn "You are upgrading from version 1.3." |
221 |
+ ewarn "" |
222 |
+ ewarn "Please be aware of the following:" |
223 |
+ ewarn " * OpenDNSSEC now supports both input and output adapters for" |
224 |
+ ewarn " AXFR and IXFR in addition to file transfer." |
225 |
+ ewarn " -> The zonefetch.xml file has been replaced by addns.xml" |
226 |
+ ewarn " to support this enhancement." |
227 |
+ ewarn " -> changes to the KASP database mean that a database" |
228 |
+ ewarn " migration is required to upgrade to 1.4 from earlier" |
229 |
+ ewarn " versions of OpenDNSSEC." |
230 |
+ ewarn " * The auditor is no longer supported." |
231 |
+ ewarn "" |
232 |
+ ewarn "You can find more information here:" |
233 |
+ ewarn " * /usr/share/doc/opendnssec*/MIGRATION*" |
234 |
+ ewarn " * https://wiki.opendnssec.org/display/DOCS/Migrating+zone+fetcher+to+DNS+adapters" |
235 |
+ ewarn " * https://wiki.opendnssec.org/display/DOCS/Migrating+from+earlier+versions+of+OpenDNSSEC" |
236 |
+ ewarn "" |
237 |
+ ;; |
238 |
+ esac |
239 |
+ done |
240 |
+} |