1 |
commit: c09d096c59dea8f23ffd9afb059ef4de93c25c6d |
2 |
Author: Tomas Chvatal <scarabeus <AT> gentoo <DOT> org> |
3 |
AuthorDate: Thu Jun 2 12:27:39 2011 +0000 |
4 |
Commit: Tomas Chvatal <scarabeus <AT> gentoo <DOT> org> |
5 |
CommitDate: Thu Jun 2 12:27:39 2011 +0000 |
6 |
URL: http://git.overlays.gentoo.org/gitweb/?p=dev/scarabeus.git;a=commit;h=c09d096c |
7 |
|
8 |
[net-dns/opendnssec] Move to main tree. |
9 |
|
10 |
--- |
11 |
net-dns/opendnssec/Manifest | 9 - |
12 |
.../files/opendnssec-drop-privileges.patch | 43 ----- |
13 |
.../files/opendnssec-fix-localstatedir.patch | 32 ---- |
14 |
.../opendnssec/files/opendnssec-rename-test.patch | 11 -- |
15 |
.../files/opendnssec-use-system-trang.patch | 30 --- |
16 |
net-dns/opendnssec/files/opendnssec.confd | 14 -- |
17 |
net-dns/opendnssec/files/opendnssec.initd | 91 ---------- |
18 |
net-dns/opendnssec/metadata.xml | 18 -- |
19 |
net-dns/opendnssec/opendnssec-1.3.0_rc2.ebuild | 185 -------------------- |
20 |
9 files changed, 0 insertions(+), 433 deletions(-) |
21 |
|
22 |
diff --git a/net-dns/opendnssec/Manifest b/net-dns/opendnssec/Manifest |
23 |
deleted file mode 100644 |
24 |
index 674a1b4..0000000 |
25 |
--- a/net-dns/opendnssec/Manifest |
26 |
+++ /dev/null |
27 |
@@ -1,9 +0,0 @@ |
28 |
-AUX opendnssec-drop-privileges.patch 906 RMD160 c7e5f09d08c7431fbe0d5496e980f1468de5185a SHA1 875529fd365e9168f4a34334c884e01b670974d3 SHA256 faecb049748efab2652b890020106748039dbe7022d943393ac50b71b429b340 |
29 |
-AUX opendnssec-fix-localstatedir.patch 1693 RMD160 9f7b783350fe0418f97cb78090fd8f02fc016447 SHA1 0875f47614990ce9c454cee2b1a6ef51c4c30ad9 SHA256 e9a29b3adf22ef6dd3a0ac43d2a48e2705ae09cd7550b4f3294b89dcd7814ecd |
30 |
-AUX opendnssec-rename-test.patch 331 RMD160 34705b28224154aa7e13b15d023f16dcfaf7892e SHA1 4e7653e8425e49d98bc14d009788efbb970366e2 SHA256 d140d1da7df9ba34195097394c715fdf01ace6290325dbe9919f6666a11627d7 |
31 |
-AUX opendnssec-use-system-trang.patch 765 RMD160 8d00ea18c61f2505fb445fcd7245bc6d757b72c5 SHA1 cf997f34f78456f37f6e5e93e4a7c78171cd20f3 SHA256 f9c8c58ce8b50183b3b709876a1c4bd0b5a0eb5c0b852995118db5eead1f9f1d |
32 |
-AUX opendnssec.confd 496 RMD160 b6667e7dfdd9872ee8d9656e374c0fdec04e9106 SHA1 0a9411a4b28a856763b94990c91cbb44b8970651 SHA256 1c6b999c6e23f8834f7cca2d044a273d7fb7b784fab4b808076bf2fd8deee1b6 |
33 |
-AUX opendnssec.initd 1904 RMD160 11ece935faf50bc14152c943d8535dd4110672dd SHA1 9e32ea1ac827e64e43908d400bbffc0b21845d9d SHA256 f21952e38caf60e3f9fd0e28e39ae3f4f6d5bb28a9066c9029b71b179ab8a7ca |
34 |
-DIST opendnssec-1.3.0rc2.tar.gz 1668777 RMD160 d7d66029f9aade7f730b6dadd8bde5e8da560b6a SHA1 447da48b4a56987ec3320e2ddc2839c2c14de86a SHA256 f4bf47f6007b2047915291002c52955dd508797276119d7bc4897e257b4ae23b |
35 |
-EBUILD opendnssec-1.3.0_rc2.ebuild 4971 RMD160 af7c1c32e1b7fb4acc037b933fb52b5dc6eb76ea SHA1 8245574d9b22cf5e61cbe8ee7a0e1cb8c61d46c2 SHA256 06a4a61cf211cbc8eca12b9e00b39241568e7441e69f6a1df7e7e57db9c14fd2 |
36 |
-MISC metadata.xml 949 RMD160 5e7a1c1a843c39419fb93f3edecc35bdbc9a7fdc SHA1 b956cada0576409d10708d3cdf473d84ac89d4e2 SHA256 615711bce50ebc27af5a97dbab4a01c17f0e9370b9a6d801e4561975eceea905 |
37 |
|
38 |
diff --git a/net-dns/opendnssec/files/opendnssec-drop-privileges.patch b/net-dns/opendnssec/files/opendnssec-drop-privileges.patch |
39 |
deleted file mode 100644 |
40 |
index 7c9f723..0000000 |
41 |
--- a/net-dns/opendnssec/files/opendnssec-drop-privileges.patch |
42 |
+++ /dev/null |
43 |
@@ -1,43 +0,0 @@ |
44 |
-Index: conf/conf.xml.in |
45 |
-=================================================================== |
46 |
---- conf/conf.xml.in (revision 3022) |
47 |
-+++ conf/conf.xml.in (working copy) |
48 |
-@@ -38,12 +38,10 @@ |
49 |
- </Common> |
50 |
- |
51 |
- <Enforcer> |
52 |
--<!-- |
53 |
- <Privileges> |
54 |
- <User>opendnssec</User> |
55 |
- <Group>opendnssec</Group> |
56 |
- </Privileges> |
57 |
----> |
58 |
- |
59 |
- <Datastore><SQLite>@OPENDNSSEC_STATE_DIR@/kasp.db</SQLite></Datastore> |
60 |
- <Interval>PT3600S</Interval> |
61 |
-@@ -56,12 +54,10 @@ |
62 |
- </Enforcer> |
63 |
- |
64 |
- <Signer> |
65 |
--<!-- |
66 |
- <Privileges> |
67 |
- <User>opendnssec</User> |
68 |
- <Group>opendnssec</Group> |
69 |
- </Privileges> |
70 |
----> |
71 |
- |
72 |
- <WorkingDirectory>@OPENDNSSEC_STATE_DIR@/tmp</WorkingDirectory> |
73 |
- <WorkerThreads>8</WorkerThreads> |
74 |
-@@ -80,12 +76,10 @@ |
75 |
- </Signer> |
76 |
- |
77 |
- <Auditor> |
78 |
--<!-- |
79 |
- <Privileges> |
80 |
- <User>opendnssec</User> |
81 |
- <Group>opendnssec</Group> |
82 |
- </Privileges> |
83 |
----> |
84 |
- |
85 |
- <WorkingDirectory>@OPENDNSSEC_STATE_DIR@/tmp</WorkingDirectory> |
86 |
- </Auditor> |
87 |
|
88 |
diff --git a/net-dns/opendnssec/files/opendnssec-fix-localstatedir.patch b/net-dns/opendnssec/files/opendnssec-fix-localstatedir.patch |
89 |
deleted file mode 100644 |
90 |
index 3958c6c..0000000 |
91 |
--- a/net-dns/opendnssec/files/opendnssec-fix-localstatedir.patch |
92 |
+++ /dev/null |
93 |
@@ -1,32 +0,0 @@ |
94 |
-diff -urN opendnssec-1.3.0rc2.old/Makefile.am opendnssec-1.3.0rc2/Makefile.am |
95 |
---- opendnssec-1.3.0rc2.old/Makefile.am 2011-06-02 13:48:56.000000000 +0200 |
96 |
-+++ opendnssec-1.3.0rc2/Makefile.am 2011-06-02 13:49:19.000000000 +0200 |
97 |
-@@ -31,11 +31,11 @@ |
98 |
- |
99 |
- install-data-hook: |
100 |
- $(INSTALL) -d $(DESTDIR)$(localstatedir) |
101 |
-- $(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec |
102 |
-- $(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec/tmp |
103 |
-- $(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec/signconf |
104 |
-- $(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec/unsigned |
105 |
-- $(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec/signed |
106 |
-+ $(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec |
107 |
-+ $(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/tmp |
108 |
-+ $(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/signconf |
109 |
-+ $(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/unsigned |
110 |
-+ $(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/signed |
111 |
- $(INSTALL) -d $(DESTDIR)$(localstatedir)/run |
112 |
- $(INSTALL) -d $(DESTDIR)$(localstatedir)/run/opendnssec |
113 |
- |
114 |
-diff -urN opendnssec-1.3.0rc2.old/m4/opendnssec_common.m4 opendnssec-1.3.0rc2/m4/opendnssec_common.m4 |
115 |
---- opendnssec-1.3.0rc2.old/m4/opendnssec_common.m4 2011-06-02 13:48:56.000000000 +0200 |
116 |
-+++ opendnssec-1.3.0rc2/m4/opendnssec_common.m4 2011-06-02 13:49:36.000000000 +0200 |
117 |
-@@ -18,7 +18,7 @@ |
118 |
- OPENDNSSEC_LIBEXEC_DIR=$full_libexecdir/opendnssec |
119 |
- OPENDNSSEC_DATA_DIR=$full_datadir/opendnssec |
120 |
- OPENDNSSEC_SYSCONF_DIR=$full_sysconfdir/opendnssec |
121 |
--OPENDNSSEC_LOCALSTATE_DIR="$full_localstatedir/opendnssec" |
122 |
-+OPENDNSSEC_LOCALSTATE_DIR="$full_localstatedir/lib/opendnssec" |
123 |
- OPENDNSSEC_PID_DIR="$full_localstatedir/run/opendnssec" |
124 |
- |
125 |
- AC_SUBST([OPENDNSSEC_BIN_DIR]) |
126 |
|
127 |
diff --git a/net-dns/opendnssec/files/opendnssec-rename-test.patch b/net-dns/opendnssec/files/opendnssec-rename-test.patch |
128 |
deleted file mode 100644 |
129 |
index 39ef262..0000000 |
130 |
--- a/net-dns/opendnssec/files/opendnssec-rename-test.patch |
131 |
+++ /dev/null |
132 |
@@ -1,11 +0,0 @@ |
133 |
---- a/conf/Makefile.am |
134 |
-+++ b/conf/Makefile.am |
135 |
-@@ -27,7 +27,7 @@ SUFFIXES = .rng .rnc .xml |
136 |
- (echo "java is required for converting RelaxNG Compact to RelaxNG"; false) |
137 |
- ${TRANG} $< $@ |
138 |
- |
139 |
--regress: $(RNG) |
140 |
-+check: $(RNG) |
141 |
- @test -x ${XMLLINT} || \ |
142 |
- (echo "xmllint is required for regression tests"; false) |
143 |
- @for i in ${XML}; do \ |
144 |
|
145 |
diff --git a/net-dns/opendnssec/files/opendnssec-use-system-trang.patch b/net-dns/opendnssec/files/opendnssec-use-system-trang.patch |
146 |
deleted file mode 100644 |
147 |
index 967b3bb..0000000 |
148 |
--- a/net-dns/opendnssec/files/opendnssec-use-system-trang.patch |
149 |
+++ /dev/null |
150 |
@@ -1,30 +0,0 @@ |
151 |
---- a/conf/Makefile.am |
152 |
-+++ b/conf/Makefile.am |
153 |
-@@ -7,7 +7,7 @@ RNG = conf.rng kasp.rng zonelist.rng sig |
154 |
- XML = conf.xml kasp.xml zonelist.xml signconf.xml zonefetch.xml |
155 |
- XSL= kasp2html.xsl |
156 |
- |
157 |
--TRANG= $(srcdir)/trang/trang.jar |
158 |
-+TRANG= /usr/bin/trang |
159 |
- |
160 |
- sysconfdir = @sysconfdir@/opendnssec |
161 |
- datadir = @datadir@/opendnssec |
162 |
-@@ -16,9 +16,6 @@ noinst_DATA = ${XML} ${XSL} |
163 |
- |
164 |
- dist_data_DATA = ${RNG} ${RNC} ${XSL} |
165 |
- |
166 |
--EXTRA_DIST = ${TRANG} \ |
167 |
-- $(srcdir)/trang/copying.txt |
168 |
-- |
169 |
- CLEANFILES =+ *.xml |
170 |
- DISTCLEANFILES =+ *.rng |
171 |
- |
172 |
-@@ -28,7 +25,7 @@ SUFFIXES = .rng .rnc .xml |
173 |
- .rnc.rng: |
174 |
- @test -x ${JAVA} || \ |
175 |
- (echo "java is required for converting RelaxNG Compact to RelaxNG"; false) |
176 |
-- ${JAVA} -jar ${TRANG} $< $@ |
177 |
-+ ${TRANG} $< $@ |
178 |
- |
179 |
- regress: $(RNG) |
180 |
- @test -x ${XMLLINT} || \ |
181 |
|
182 |
diff --git a/net-dns/opendnssec/files/opendnssec.confd b/net-dns/opendnssec/files/opendnssec.confd |
183 |
deleted file mode 100644 |
184 |
index 36555b0..0000000 |
185 |
--- a/net-dns/opendnssec/files/opendnssec.confd |
186 |
+++ /dev/null |
187 |
@@ -1,14 +0,0 @@ |
188 |
-# Copyright 1999-2011 Gentoo Foundation |
189 |
-# Distributed under the terms of the GNU General Public License v2 |
190 |
-# $Header: $ |
191 |
- |
192 |
-# Variables containing default binaries used in the opendnssec |
193 |
-# initscript. You can alter them to another applications/paths |
194 |
-# if required. |
195 |
- |
196 |
-CHECKCONF_BIN=/usr/bin/ods-kaspcheck |
197 |
-CONTROL_BIN=/usr/sbin/ods-control |
198 |
-ENFORCER_BIN=/usr/sbin/ods-enforcerd |
199 |
-SIGNER_BIN=/usr/sbin/ods-signerd |
200 |
-EPPCLIENT_BIN=/usr/sbin/eppclientd |
201 |
-EPPCLIENT_PIDFILE=/var/lib/run/opendnssec/eppclientd.pid |
202 |
|
203 |
diff --git a/net-dns/opendnssec/files/opendnssec.initd b/net-dns/opendnssec/files/opendnssec.initd |
204 |
deleted file mode 100644 |
205 |
index 0b0090a..0000000 |
206 |
--- a/net-dns/opendnssec/files/opendnssec.initd |
207 |
+++ /dev/null |
208 |
@@ -1,91 +0,0 @@ |
209 |
-#!/sbin/runscript |
210 |
-# Copyright 1999-2011 Gentoo Foundation |
211 |
-# Distributed under the terms of the GNU General Public License v2 |
212 |
-# $Header: $ |
213 |
- |
214 |
-description="An open-source turn-key solution for DNSSEC" |
215 |
- |
216 |
-depend() { |
217 |
- need net |
218 |
- use logger |
219 |
-} |
220 |
- |
221 |
-checkconfig() { |
222 |
- if [ -x "${CHECKCONFIG_BIN}" ]; then |
223 |
- output=$(${CHECKCONFIG_BIN} 2>&1| grep -v -E "^/etc/opendnssec/(conf|kasp).xml validates") |
224 |
- if [ -n "$output" ]; then |
225 |
- echo $output |
226 |
- fi |
227 |
- |
228 |
- errors=$(echo $output | grep ERROR | wc -l) |
229 |
- if [ $errors -gt 0 ]; then |
230 |
- ewarn "$errors error(s) found in OpenDNSSEC configuration." |
231 |
- fi |
232 |
- return $errors |
233 |
- fi |
234 |
- # can't validate config, just die |
235 |
- return 1 |
236 |
-} |
237 |
- |
238 |
- |
239 |
-start_enforcer() { |
240 |
- if [ -x "${ENFORCER_BIN}" ]; then |
241 |
- ebegin "Starting OpenDNSSEC Enforcer" |
242 |
- ${CONTROL_BIN} enforcer start > /dev/null |
243 |
- eend $? |
244 |
- fi |
245 |
-} |
246 |
- |
247 |
-stop_enforcer() { |
248 |
- if [ -x "${ENFORCER_BIN}" ]; then |
249 |
- ebegin "Stopping OpenDNSSEC Enforcer" |
250 |
- ${CONTROL_BIN} enforcer stop > /dev/null |
251 |
- eend $? |
252 |
- fi |
253 |
-} |
254 |
- |
255 |
-start_signer() { |
256 |
- if [ -x "${SIGNER_BIN}" ]; then |
257 |
- ebegin "Starting OpenDNSSEC Signer" |
258 |
- ${CONTROL_BIN} signer start > /dev/null 2>&1 |
259 |
- eend $? |
260 |
- fi |
261 |
-} |
262 |
- |
263 |
-stop_signer() { |
264 |
- if [ -x "${SIGNER_BIN}" ]; then |
265 |
- ebegin "Stopping OpenDNSSEC Signer" |
266 |
- ${CONTROL_BIN} signer stop > /dev/null 2>&1 |
267 |
- eend $? |
268 |
- fi |
269 |
-} |
270 |
- |
271 |
-start_eppclient() { |
272 |
- if [ -x "${EPPCLIENT_BIN}" ]; then |
273 |
- ebegin "Starting OpenDNSSEC Eppclient" |
274 |
- start-stop-daemon --start --user opendnssec --group opendnssec --exec "${EPPCLIENT_BIN}" --pidfile "${EPPCLIENT_PIDFILE}" > /dev/null |
275 |
- eend $? |
276 |
- fi |
277 |
-} |
278 |
- |
279 |
-stop_eppclient() { |
280 |
- if [ -x "${EPPCLIENT_BIN}" ]; then |
281 |
- ebegin "Stopping OpenDNSSEC Eppclient" |
282 |
- start-stop-daemon --stop --exec "${EPPCLIENT_BIN}" --pidfile "${EPPCLIENT_PIDFILE}" > /dev/null |
283 |
- eend $? |
284 |
- fi |
285 |
-} |
286 |
- |
287 |
-start() { |
288 |
- checkconfig || return $? |
289 |
- start_enforcer || return $? |
290 |
- start_signer || return $? |
291 |
- start_eppclient || return $? |
292 |
-} |
293 |
- |
294 |
-stop() { |
295 |
- stop_eppclient |
296 |
- stop_signer |
297 |
- stop_enforcer |
298 |
- sleep 5 |
299 |
-} |
300 |
|
301 |
diff --git a/net-dns/opendnssec/metadata.xml b/net-dns/opendnssec/metadata.xml |
302 |
deleted file mode 100644 |
303 |
index 4298d0e..0000000 |
304 |
--- a/net-dns/opendnssec/metadata.xml |
305 |
+++ /dev/null |
306 |
@@ -1,18 +0,0 @@ |
307 |
-<?xml version="1.0" encoding="UTF-8"?> |
308 |
-<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd"> |
309 |
-<pkgmetadata> |
310 |
- <herd>no-herd</herd> |
311 |
- <maintainer> |
312 |
- <email>scarabeus@g.o</email> |
313 |
- <name>Tomáš Chvátal</name> |
314 |
- </maintainer> |
315 |
- <use> |
316 |
- <flag name='auditor'>Enables auditing capabilities for OpenDNSSEC</flag> |
317 |
- <flag name='eppclient'>Enables support for automatic submission of DNSSEC keys to an upstream epp server</flag> |
318 |
- <flag name='signer'>Enables signing capabilities for OpenDNSSEC</flag> |
319 |
- <flag name='opensc'>Enables support for storing DNSSEC keys through a <pkg>dev-libs/opensc</pkg> PKCS#11 interface</flag> |
320 |
- <flag name='softhsm'>Enables support for storing DNSSEC keys in a <pkg>dev-libs/softhsm</pkg> PKCS#11 object</flag> |
321 |
- <flag name='external-hsm'>Enables support for storing DNSSEC keys through an arbitrary non-portage PKCS#11 interface, specified through an environment variable</flag> |
322 |
- </use> |
323 |
-</pkgmetadata> |
324 |
- |
325 |
|
326 |
diff --git a/net-dns/opendnssec/opendnssec-1.3.0_rc2.ebuild b/net-dns/opendnssec/opendnssec-1.3.0_rc2.ebuild |
327 |
deleted file mode 100644 |
328 |
index 98d83bf..0000000 |
329 |
--- a/net-dns/opendnssec/opendnssec-1.3.0_rc2.ebuild |
330 |
+++ /dev/null |
331 |
@@ -1,185 +0,0 @@ |
332 |
-# Copyright 1999-2011 Gentoo Foundation |
333 |
-# Distributed under the terms of the GNU General Public License v2 |
334 |
-# $Header: $ |
335 |
- |
336 |
-EAPI=4 |
337 |
- |
338 |
-MY_P="${P/_}" |
339 |
-PKCS11_IUSE="+softhsm opensc external-hsm" |
340 |
-inherit base autotools multilib |
341 |
- |
342 |
-DESCRIPTION="An open-source turn-key solution for DNSSEC" |
343 |
-HOMEPAGE="http://www.opendnssec.org/" |
344 |
-SRC_URI="http://www.${PN}.org/files/source/${MY_P}.tar.gz" |
345 |
- |
346 |
-LICENSE="BSD" |
347 |
-SLOT="0" |
348 |
-KEYWORDS="~amd64 ~x86" |
349 |
-IUSE="auditor +curl debug doc eppclient mysql +signer +sqlite ${PKCS11_IUSE}" |
350 |
- |
351 |
-RDEPEND=" |
352 |
- dev-lang/perl |
353 |
- dev-libs/libxml2 |
354 |
- dev-libs/libxslt |
355 |
- >=net-libs/ldns-1.6.7 |
356 |
- auditor? ( dev-lang/ruby[ssl] >=dev-ruby/dnsruby-1.52 ) |
357 |
- curl? ( net-misc/curl ) |
358 |
- mysql? ( |
359 |
- virtual/mysql |
360 |
- dev-perl/DBD-mysql |
361 |
- ) |
362 |
- sqlite? ( |
363 |
- dev-db/sqlite:3 |
364 |
- dev-perl/DBD-SQLite |
365 |
- ) |
366 |
-" |
367 |
-DEPEND="${RDEPEND} |
368 |
- app-text/trang |
369 |
- doc? ( app-doc/doxygen ) |
370 |
- test? ( dev-util/cunit ) |
371 |
-" |
372 |
- |
373 |
-REQUIRED_USE=" |
374 |
- ^^ ( mysql sqlite ) |
375 |
- ^^ ( softhsm opensc external-hsm ) |
376 |
- eppclient? ( curl ) |
377 |
-" |
378 |
- |
379 |
-PATCHES=( |
380 |
- "${FILESDIR}/${PN}-use-system-trang.patch" |
381 |
- "${FILESDIR}/${PN}-fix-localstatedir.patch" |
382 |
- "${FILESDIR}/${PN}-rename-test.patch" |
383 |
- "${FILESDIR}/${PN}-drop-privileges.patch" |
384 |
-) |
385 |
- |
386 |
-S="${WORKDIR}/${MY_P}" |
387 |
- |
388 |
-DOCS=( MIGRATION NEWS README ) |
389 |
- |
390 |
-check_pkcs11_setup() { |
391 |
- # PKCS#11 HSM's are often only available with proprietary drivers not |
392 |
- # available in portage tree. |
393 |
- |
394 |
- if use softhsm; then |
395 |
- PKCS11_LIB=softhsm |
396 |
- PKCS11_PATH=/usr/$(get_libdir)/libsofthsm.so |
397 |
- elog "Building with SoftHSM PKCS#11 library support." |
398 |
- fi |
399 |
- if use opensc; then |
400 |
- PKCS11_LIB=opensc |
401 |
- PKCS11_PATH=/usr/$(get_libdir)/opensc-pkcs11.so |
402 |
- elog "Building with OpenSC PKCS#11 library support." |
403 |
- fi |
404 |
- if use external-hsm; then |
405 |
- if [[ -n ${PKCS11_SCA6000} ]]; then |
406 |
- PKCS11_LIB=sca6000 |
407 |
- PKCS11_PATH=${PKCS11_SCA6000} |
408 |
- |
409 |
- elif [[ -n ${PKCS11_ETOKEN} ]]; then |
410 |
- PKCS11_LIB=etoken |
411 |
- PKCS11_PATH=${PKCS11_ETOKEN} |
412 |
- |
413 |
- elif [[ -n ${PKCS11_NCIPHER} ]]; then |
414 |
- PKCS11_LIB=ncipher |
415 |
- PKCS11_PATH=${PKCS11_NCIPHER} |
416 |
- |
417 |
- elif [[ -n ${PKCS11_AEPKEYPER} ]]; then |
418 |
- PKCS11_LIB=aepkeyper |
419 |
- PKCS11_PATH=${PKCS11_AEPKEYPER} |
420 |
- else |
421 |
- ewarn "You enabled USE flag 'external-hsm' but did not specify a path to a PKCS#11" |
422 |
- ewarn "library. To set a path, set one of the following environment variables:" |
423 |
- ewarn " for Sun Crypto Accelerator 6000, set: PKCS11_SCA6000=<path>" |
424 |
- ewarn " for Aladdin eToken, set: PKCS11_ETOKEN=<path>" |
425 |
- ewarn " for Thales/nCipher netHSM, set: PKCS11_NCIPHER=<path>" |
426 |
- ewarn " for AEP Keyper, set: PKCS11_AEPKEYPER=<path>" |
427 |
- ewarn "Example:" |
428 |
- ewarn " PKCS11_ETOKEN=\"/opt/etoken/lib/libeTPkcs11.so\" emerge -pv opendnssec" |
429 |
- ewarn "or store the variable into /etc/make.conf" |
430 |
- die "USE flag 'external-hsm' set but no PKCS#11 library path specified." |
431 |
- fi |
432 |
- elog "Building with external PKCS#11 library support ($PKCS11_LIB): ${PKCS11_PATH}" |
433 |
- fi |
434 |
-} |
435 |
- |
436 |
-pkg_pretend() { |
437 |
- local i |
438 |
- |
439 |
- for i in "eppclient mysql"; do |
440 |
- if use ${i}; then |
441 |
- ewarn "Usage of ${i} is considered experimental." |
442 |
- ewarn "Do not report bugs against this feature." |
443 |
- fi |
444 |
- done |
445 |
- |
446 |
- check_pkcs11_setup |
447 |
-} |
448 |
- |
449 |
-pkg_setup() { |
450 |
- enewgroup opendnssec |
451 |
- enewuser opendnssec -1 -1 -1 opendnssec |
452 |
-} |
453 |
- |
454 |
-src_prepare() { |
455 |
- base_src_prepare |
456 |
- eautoreconf |
457 |
-} |
458 |
- |
459 |
-src_configure() { |
460 |
- econf \ |
461 |
- --localstatedir="${EPREFIX}/var/" \ |
462 |
- --disable-static \ |
463 |
- --with-database-backend=$(use mysql && echo "mysql")$(use sqlite && echo "sqlite3") \ |
464 |
- --with-pkcs11-${PKCS11_LIB}=${PKCS11_PATH} \ |
465 |
- $(use_with curl) \ |
466 |
- $(use_with test cunit) \ |
467 |
- $(use_enable auditor) \ |
468 |
- $(use_enable debug timeshift) \ |
469 |
- $(use_enable eppclient) \ |
470 |
- $(use_enable signer) |
471 |
-} |
472 |
- |
473 |
-src_compile() { |
474 |
- default |
475 |
- use doc && emake docs |
476 |
-} |
477 |
- |
478 |
-src_install() { |
479 |
- default |
480 |
- |
481 |
- # remove useless .la files |
482 |
- find "${ED}" -name '*.la' -exec rm -f {} + |
483 |
- |
484 |
- # Remove subversion tags from config files to avoid useless config updates |
485 |
- sed -i \ |
486 |
- -e 's/<!-- \$Id:.* \$ -->//g' \ |
487 |
- "${ED}"/etc/opendnssec/* || die |
488 |
- |
489 |
- # install update scripts |
490 |
- insinto /usr/share/opendnssec |
491 |
- use sqlite && doins enforcer/utils/migrate_keyshare_sqlite3.pl |
492 |
- use mysql && doins enforcer/utils/migrate_keyshare_mysql.pl |
493 |
- |
494 |
- # fix permissions |
495 |
- fowners root:opendnssec /etc/opendnssec |
496 |
- fowners root:opendnssec /etc/opendnssec/{conf,kasp,zonelist,zonefetch}.xml |
497 |
- use eppclient && fowners root:opendnssec /etc/opendnssec/eppclientd.conf |
498 |
- |
499 |
- fowners opendnssec:opendnssec /var/lib/opendnssec/{,signconf,unsigned,signed,tmp} |
500 |
- fowners opendnssec:opendnssec /var/run/opendnssec |
501 |
- |
502 |
- # install conf/init script |
503 |
- newinitd "${FILESDIR}"/opendnssec.initd opendnssec |
504 |
- newconfd "${FILESDIR}"/opendnssec.confd opendnssec |
505 |
-} |
506 |
- |
507 |
-pkg_postinst() { |
508 |
- if use softhsm; then |
509 |
- elog "Please make sure that you create your softhsm database in a location writeable" |
510 |
- elog "by the opendnssec user. You can set its location in /etc/softhsm.conf." |
511 |
- elog "Suggested configuration is:" |
512 |
- elog " echo \"0:/var/lib/opendnssec/softhsm_slot0.db\" >> /etc/softhsm.conf" |
513 |
- elog " softhsm --init-token --slot 0 --label OpenDNSSEC" |
514 |
- elog " chown opendnssec:opendnssec /var/lib/opendnssec/softhsm_slot0.db" |
515 |
- fi |
516 |
-} |