1 |
commit: 26db751bd8b82a7a3f91965faac3ab8a8c5dcf50 |
2 |
Author: Marc Schiffbauer <mschiff <AT> gentoo <DOT> org> |
3 |
AuthorDate: Sun Dec 6 23:41:22 2015 +0000 |
4 |
Commit: Marc Schiffbauer <mschiff <AT> gentoo <DOT> org> |
5 |
CommitDate: Sun Dec 6 23:43:02 2015 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=26db751b |
7 |
|
8 |
net-dns/opendnssec: bump version |
9 |
|
10 |
Package-Manager: portage-2.2.26 |
11 |
|
12 |
net-dns/opendnssec/Manifest | 1 + |
13 |
net-dns/opendnssec/opendnssec-1.4.8.2.ebuild | 206 +++++++++++++++++++++++++++ |
14 |
2 files changed, 207 insertions(+) |
15 |
|
16 |
diff --git a/net-dns/opendnssec/Manifest b/net-dns/opendnssec/Manifest |
17 |
index e969d31..9fac856 100644 |
18 |
--- a/net-dns/opendnssec/Manifest |
19 |
+++ b/net-dns/opendnssec/Manifest |
20 |
@@ -2,3 +2,4 @@ DIST opendnssec-1.3.17.tar.gz 1140751 SHA256 9f0dcfb53a3e10255b2d85e6a30663548ec |
21 |
DIST opendnssec-1.3.18.tar.gz 1143889 SHA256 e61d23ae0cc57b6e09d408bade6872fe5241896c61a03e8bc5ceeb65df13a676 SHA512 5df39ba778c9b1245e88b81df7aa491bca0aad2943845284c4f8b4dd729fa69014d45f07bdf99a048ccf668a1c9675a8dd99efcec1abdbd4e06e9738fec6ab6d WHIRLPOOL 7213b8f2f86651114449bc4734452d6065960e26ee289051949ca27ae3b23280cea45ff707f71942eef91c9009200272c0985ef3d3de43c9343ad2e1e54303ce |
22 |
DIST opendnssec-1.4.6.tar.gz 1014314 SHA256 53f9c454f331822925d76c9d9e5e7cb3fe2dfb03e3c467f67f9412f10d0fd5ec SHA512 c01e6e46e2007d0ae4035253484590d9a892be8284b179b6d3cdb0f8481789a67a79f9043d04de0aecc165fb44d88dac0eb02444f48e0ccd366f118a2bbb5c18 WHIRLPOOL 4535fb49879b27698b0ba88f05b2fd963c69829446a7d5eb8419c19768059347e0adfd1b59efe50b2acd5550758f499290e02ee52b1b92695e8f9061ad465bf0 |
23 |
DIST opendnssec-1.4.7.tar.gz 1038884 SHA256 8f757ca9e88d6a6dc8f9b6e46a3da5e3a2881b3311fb91c428bcf906683ac41f SHA512 def2a8e41331bd70f287ea3081a7368144ada92ad5cc9f62d28d3064e34f7c0c84998422d515f5ec9c7e668757e796df8c5446839e24e4a9e2af1357c342c0b2 WHIRLPOOL 37641549f4bb6ecb519a091e60537acf7fab69fc3482ab8857abd2ce57d8b5240031069d487246f88577ca32d48004b10a7784c10b4155b3339d67bd5567591a |
24 |
+DIST opendnssec-1.4.8.2.tar.gz 1043171 SHA256 7fd553ee39173e807477ed1daff6ee2f8b1c83875cd2e52a1df3315bf0015513 SHA512 7f2e10b425f60947aca40c61509b07ddc4363105cc882b518ffa816437299d6f881411cb38325f27b3a34c2005953988b39c945362866dd0f1f7c6ef973bfa06 WHIRLPOOL 38079a89d8e3d039aeab28c80b7fb1a9739014736d6076442c546fae1b13e1c89faa1858beb6f4d2f495d19a2a1187a7af10c55c0ed33563bc9b2d57945de807 |
25 |
|
26 |
diff --git a/net-dns/opendnssec/opendnssec-1.4.8.2.ebuild b/net-dns/opendnssec/opendnssec-1.4.8.2.ebuild |
27 |
new file mode 100644 |
28 |
index 0000000..032caea |
29 |
--- /dev/null |
30 |
+++ b/net-dns/opendnssec/opendnssec-1.4.8.2.ebuild |
31 |
@@ -0,0 +1,206 @@ |
32 |
+# Copyright 1999-2015 Gentoo Foundation |
33 |
+# Distributed under the terms of the GNU General Public License v2 |
34 |
+# $Id$ |
35 |
+ |
36 |
+EAPI=5 |
37 |
+ |
38 |
+MY_P="${P/_}" |
39 |
+PKCS11_IUSE="+softhsm opensc external-hsm" |
40 |
+inherit base autotools multilib user |
41 |
+ |
42 |
+DESCRIPTION="An open-source turn-key solution for DNSSEC" |
43 |
+HOMEPAGE="http://www.opendnssec.org/" |
44 |
+SRC_URI="http://www.${PN}.org/files/source/${MY_P}.tar.gz" |
45 |
+ |
46 |
+LICENSE="BSD GPL-2" |
47 |
+SLOT="0" |
48 |
+KEYWORDS="~amd64 ~x86" |
49 |
+IUSE="debug doc +mysql +signer sqlite test ${PKCS11_IUSE}" |
50 |
+ |
51 |
+RDEPEND=" |
52 |
+ dev-lang/perl |
53 |
+ dev-libs/libxml2 |
54 |
+ dev-libs/libxslt |
55 |
+ net-libs/ldns |
56 |
+ mysql? ( |
57 |
+ virtual/mysql |
58 |
+ dev-perl/DBD-mysql |
59 |
+ ) |
60 |
+ opensc? ( dev-libs/opensc ) |
61 |
+ softhsm? ( dev-libs/softhsm ) |
62 |
+ sqlite? ( |
63 |
+ dev-db/sqlite:3 |
64 |
+ dev-perl/DBD-SQLite |
65 |
+ ) |
66 |
+" |
67 |
+DEPEND="${RDEPEND} |
68 |
+ doc? ( app-doc/doxygen ) |
69 |
+ test? ( |
70 |
+ app-text/trang |
71 |
+ ) |
72 |
+" |
73 |
+ |
74 |
+REQUIRED_USE=" |
75 |
+ ^^ ( mysql sqlite ) |
76 |
+ ^^ ( softhsm opensc external-hsm ) |
77 |
+" |
78 |
+ |
79 |
+PATCHES=( |
80 |
+ "${FILESDIR}/${PN}-fix-localstatedir.patch" |
81 |
+ "${FILESDIR}/${PN}-fix-run-dir.patch" |
82 |
+ "${FILESDIR}/${PN}-drop-privileges.patch" |
83 |
+ "${FILESDIR}/${PN}-use-system-trang.patch" |
84 |
+) |
85 |
+ |
86 |
+S="${WORKDIR}/${MY_P}" |
87 |
+ |
88 |
+DOCS=( MIGRATION NEWS ) |
89 |
+ |
90 |
+check_pkcs11_setup() { |
91 |
+ # PKCS#11 HSM's are often only available with proprietary drivers not |
92 |
+ # available in portage tree. |
93 |
+ |
94 |
+ if use softhsm; then |
95 |
+ PKCS11_LIB=softhsm |
96 |
+ if has_version ">=dev-libs/softhsm-1.3.1"; then |
97 |
+ PKCS11_PATH=/usr/$(get_libdir)/softhsm/libsofthsm.so |
98 |
+ else |
99 |
+ PKCS11_PATH=/usr/$(get_libdir)/libsofthsm.so |
100 |
+ fi |
101 |
+ elog "Building with SoftHSM PKCS#11 library support." |
102 |
+ fi |
103 |
+ if use opensc; then |
104 |
+ PKCS11_LIB=opensc |
105 |
+ PKCS11_PATH=/usr/$(get_libdir)/opensc-pkcs11.so |
106 |
+ elog "Building with OpenSC PKCS#11 library support." |
107 |
+ fi |
108 |
+ if use external-hsm; then |
109 |
+ if [[ -n ${PKCS11_SCA6000} ]]; then |
110 |
+ PKCS11_LIB=sca6000 |
111 |
+ PKCS11_PATH=${PKCS11_SCA6000} |
112 |
+ elif [[ -n ${PKCS11_ETOKEN} ]]; then |
113 |
+ PKCS11_LIB=etoken |
114 |
+ PKCS11_PATH=${PKCS11_ETOKEN} |
115 |
+ elif [[ -n ${PKCS11_NCIPHER} ]]; then |
116 |
+ PKCS11_LIB=ncipher |
117 |
+ PKCS11_PATH=${PKCS11_NCIPHER} |
118 |
+ elif [[ -n ${PKCS11_AEPKEYPER} ]]; then |
119 |
+ PKCS11_LIB=aepkeyper |
120 |
+ PKCS11_PATH=${PKCS11_AEPKEYPER} |
121 |
+ else |
122 |
+ ewarn "You enabled USE flag 'external-hsm' but did not specify a path to a PKCS#11" |
123 |
+ ewarn "library. To set a path, set one of the following environment variables:" |
124 |
+ ewarn " for Sun Crypto Accelerator 6000, set: PKCS11_SCA6000=<path>" |
125 |
+ ewarn " for Aladdin eToken, set: PKCS11_ETOKEN=<path>" |
126 |
+ ewarn " for Thales/nCipher netHSM, set: PKCS11_NCIPHER=<path>" |
127 |
+ ewarn " for AEP Keyper, set: PKCS11_AEPKEYPER=<path>" |
128 |
+ ewarn "Example:" |
129 |
+ ewarn " PKCS11_ETOKEN=\"/opt/etoken/lib/libeTPkcs11.so\" emerge -pv opendnssec" |
130 |
+ ewarn "or store the variable into /etc/make.conf" |
131 |
+ die "USE flag 'external-hsm' set but no PKCS#11 library path specified." |
132 |
+ fi |
133 |
+ elog "Building with external PKCS#11 library support ($PKCS11_LIB): ${PKCS11_PATH}" |
134 |
+ fi |
135 |
+} |
136 |
+ |
137 |
+pkg_pretend() { |
138 |
+ check_pkcs11_setup |
139 |
+} |
140 |
+ |
141 |
+pkg_setup() { |
142 |
+ enewgroup opendnssec |
143 |
+ enewuser opendnssec -1 -1 -1 opendnssec |
144 |
+ |
145 |
+ # pretend does not preserve variables so we need to run this once more |
146 |
+ check_pkcs11_setup |
147 |
+} |
148 |
+ |
149 |
+src_prepare() { |
150 |
+ base_src_prepare |
151 |
+ eautoreconf |
152 |
+} |
153 |
+ |
154 |
+src_configure() { |
155 |
+ econf \ |
156 |
+ --without-cunit \ |
157 |
+ --localstatedir="${EPREFIX}/var/" \ |
158 |
+ --disable-static \ |
159 |
+ --with-database-backend=$(use mysql && echo "mysql")$(use sqlite && echo "sqlite3") \ |
160 |
+ --with-pkcs11-${PKCS11_LIB}=${PKCS11_PATH} \ |
161 |
+ $(use_enable debug timeshift) \ |
162 |
+ $(use_enable signer) |
163 |
+} |
164 |
+ |
165 |
+src_compile() { |
166 |
+ default |
167 |
+ use doc && emake docs |
168 |
+} |
169 |
+ |
170 |
+src_install() { |
171 |
+ default |
172 |
+ |
173 |
+ # remove useless .la files |
174 |
+ find "${ED}" -name '*.la' -delete |
175 |
+ |
176 |
+ # Remove subversion tags from config files to avoid useless config updates |
177 |
+ sed -i \ |
178 |
+ -e '/<!-- \$Id:/ d' \ |
179 |
+ "${ED}"/etc/opendnssec/* || die |
180 |
+ |
181 |
+ # install update scripts |
182 |
+ insinto /usr/share/opendnssec |
183 |
+ if use sqlite; then |
184 |
+ doins enforcer/utils/migrate_keyshare_sqlite3.pl |
185 |
+ doins enforcer/utils/migrate_adapters_1.sqlite3 |
186 |
+ fi |
187 |
+ if use mysql; then |
188 |
+ doins enforcer/utils/migrate_keyshare_mysql.pl |
189 |
+ doins enforcer/utils/migrate_adapters_1.mysql |
190 |
+ fi |
191 |
+ |
192 |
+ # fix permissions |
193 |
+ fowners root:opendnssec /etc/opendnssec |
194 |
+ fowners root:opendnssec /etc/opendnssec/{addns,conf,kasp,zonelist}.xml |
195 |
+ fowners opendnssec:opendnssec /var/lib/opendnssec/{,signconf,unsigned,signed,tmp} |
196 |
+ |
197 |
+ # install conf/init script |
198 |
+ newinitd "${FILESDIR}"/opendnssec.initd opendnssec |
199 |
+ newconfd "${FILESDIR}"/opendnssec.confd opendnssec |
200 |
+} |
201 |
+ |
202 |
+pkg_postinst() { |
203 |
+ local v |
204 |
+ if use softhsm; then |
205 |
+ elog "Please make sure that you create your softhsm database in a location writeable" |
206 |
+ elog "by the opendnssec user. You can set its location in /etc/softhsm.conf." |
207 |
+ elog "Suggested configuration is:" |
208 |
+ elog " echo \"0:/var/lib/opendnssec/softhsm_slot0.db\" >> /etc/softhsm.conf" |
209 |
+ elog " softhsm --init-token --slot 0 --label OpenDNSSEC" |
210 |
+ elog " chown opendnssec:opendnssec /var/lib/opendnssec/softhsm_slot0.db" |
211 |
+ fi |
212 |
+ |
213 |
+ for v in $REPLACING_VERSIONS; do |
214 |
+ case $v in |
215 |
+ 1.3.*) |
216 |
+ ewarn "" |
217 |
+ ewarn "You are upgrading from version 1.3." |
218 |
+ ewarn "" |
219 |
+ ewarn "Please be aware of the following:" |
220 |
+ ewarn " * OpenDNSSEC now supports both input and output adapters for" |
221 |
+ ewarn " AXFR and IXFR in addition to file transfer." |
222 |
+ ewarn " -> The zonefetch.xml file has been replaced by addns.xml" |
223 |
+ ewarn " to support this enhancement." |
224 |
+ ewarn " -> changes to the KASP database mean that a database" |
225 |
+ ewarn " migration is required to upgrade to 1.4 from earlier" |
226 |
+ ewarn " versions of OpenDNSSEC." |
227 |
+ ewarn " * The auditor is no longer supported." |
228 |
+ ewarn "" |
229 |
+ ewarn "You can find more information here:" |
230 |
+ ewarn " * /usr/share/doc/opendnssec*/MIGRATION*" |
231 |
+ ewarn " * https://wiki.opendnssec.org/display/DOCS/Migrating+zone+fetcher+to+DNS+adapters" |
232 |
+ ewarn " * https://wiki.opendnssec.org/display/DOCS/Migrating+from+earlier+versions+of+OpenDNSSEC" |
233 |
+ ewarn "" |
234 |
+ ;; |
235 |
+ esac |
236 |
+ done |
237 |
+} |