| 1 |
commit: bbc97355204668f9bf1a3c3b4054fd1ea600af7d |
| 2 |
Author: Thomas Deutschmann <whissi <AT> gentoo <DOT> org> |
| 3 |
AuthorDate: Fri Mar 1 01:30:04 2019 +0000 |
| 4 |
Commit: Thomas Deutschmann <whissi <AT> gentoo <DOT> org> |
| 5 |
CommitDate: Fri Mar 1 01:30:04 2019 +0000 |
| 6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bbc97355 |
| 7 |
|
| 8 |
net-dns/dnssec-root: bump to v20181220 |
| 9 |
|
| 10 |
Package-Manager: Portage-2.3.62, Repoman-2.3.12 |
| 11 |
Signed-off-by: Thomas Deutschmann <whissi <AT> gentoo.org> |
| 12 |
|
| 13 |
net-dns/dnssec-root/Manifest | 3 + |
| 14 |
net-dns/dnssec-root/dnssec-root-20181220.ebuild | 79 +++++++++++++++++++++++++ |
| 15 |
2 files changed, 82 insertions(+) |
| 16 |
|
| 17 |
diff --git a/net-dns/dnssec-root/Manifest b/net-dns/dnssec-root/Manifest |
| 18 |
index 04cdb296d91..1571f697355 100644 |
| 19 |
--- a/net-dns/dnssec-root/Manifest |
| 20 |
+++ b/net-dns/dnssec-root/Manifest |
| 21 |
@@ -3,8 +3,11 @@ DIST Kjqmt7v-20150504.crt 974 BLAKE2B 24a4edd7638e14dd0983ea160f20613980342b78d8 |
| 22 |
DIST icann-20110715.pgp 3401 BLAKE2B 0f1eabed0ab0d5ec78c5387c7f2b3a13a1da12643d6b60e39766d18ac603ef673e204bd7df5d600fa53cdbf51fcff5dfe6b690cddc3559cae95405ca96e7b391 SHA512 5fba8334850f2ae753f4f8a30d1e6c62abc341ece2dc83df4bc0f6db2b91ae68942c0d2a38eab3d33b5b91640cd1cf0970777225c15d5f961884c00077d539a2 |
| 23 |
DIST icannbundle-20150504.pem 17435 BLAKE2B 3e532398142ebf62dc52174c4c705ebdd6a634a67e7ce6c1e0a38d41fdab548afd1b0b75f58481d69578fd0fd97b236c62fdbe65efc3ced132115826eff695d4 SHA512 f9b9e43ad71608921d1e79f25cd98ca8c712256d4e31b04035a9aac7b46f3ec951089ca23e84500c5901d53afb66991a30818b4cd6f6de6885a107f486f56994 |
| 24 |
DIST icannbundle-20170203.pem 13026 BLAKE2B 36f760c69e8e22036d7d927071be25508b6906838f0f468900385d5a3b9ce301c5688f9bdcab471abc5445a14bfbbe34ecb39ca131b01d9e6bbebcc3f1481241 SHA512 6a8b8bec6d104d31253a8acafc1694a095714537a39a4dc53a379ac900c83715f85d75ea7322de430557691ff31ec95ae5104f47b050da3568dd68377c2d5767 |
| 25 |
+DIST icannbundle-20181220.pem 13026 BLAKE2B 36f760c69e8e22036d7d927071be25508b6906838f0f468900385d5a3b9ce301c5688f9bdcab471abc5445a14bfbbe34ecb39ca131b01d9e6bbebcc3f1481241 SHA512 6a8b8bec6d104d31253a8acafc1694a095714537a39a4dc53a379ac900c83715f85d75ea7322de430557691ff31ec95ae5104f47b050da3568dd68377c2d5767 |
| 26 |
DIST root-anchors-20100715.asc 189 BLAKE2B b709f2f67cd3e197fcaf0ac2556434ff0b4fd86114084e3281f27b70ecb4770b81f22d22f46c6173f0eef384ce5440685af8e77b75c576ce55e8dbdc79d86c49 SHA512 e9c86b897d7e8edb979cba4bebe353b7c7f21b4061cd6f571c8671b02e73c2ea0b78a980169fa7d40987b9e962a0f1ba17dbb392b5ec6ad14fedce65a139c913 |
| 27 |
DIST root-anchors-20100715.xml 418 BLAKE2B 71e809ed74c25283ea1db36707be57965d5b2dd28e6bf055851866746455bbc672e87b310b38b069936545a6ce99dbf67b1d542d78ef3ef84b76b31bd129ea8d SHA512 bca506c852bc83aa9d04ed0b52bef6d0baec745e466292273d52f49fd73cec73db4c6d55a9921fe086c7edc618f3ab21dc03146b6d617644495b3926e262e572 |
| 28 |
DIST root-anchors-20150504.p7s 5001 BLAKE2B 088dc39160013dbc63a82fcb7666c7c73707958dddbaf730ea212a038301549ce19109ec2b11962a0855f864bc8675142b21aa65884be9eecdf5b9b9898e4f36 SHA512 af188871f2ef7f9efb0d3f4822754e962fb921d62de925823f90a0c7dbe80b7a0188534adbdb324680ae981912968fcfa851eb72fb37694df8701fd749e7ff51 |
| 29 |
DIST root-anchors-20170203.p7s 4095 BLAKE2B 21c3d482cd2faa7dd85b45385b4dd4a00c8f0f5e8060a9f99df4e309e6d11bd77ae2dcc68d51eefed685dc48e9bba578ef885a6058ee3862072cdc156d254c1f SHA512 caecf5fbe3b0db140ed506fc7a3711e89e1fc2dacbdc7aefb36766f07af4c97c42466000e51bc2e9cd46a3764ccd482b93da448861aaed90a0f5cf13103b4792 |
| 30 |
DIST root-anchors-20170203.xml 651 BLAKE2B 0f2321e27cfbf88fecee0840db3b3265c6f062753b8a15d972dca12c19fdfea616470fe200b7ec4cb069553f532b6464a2784d56636d9096956eabc496eb4a6e SHA512 a0799cf2d5bec0d527d511e016a075ffd0af450eda010a4c780f7e12b2218ec577576137703cf1413352d3aac3cfda945a8a830dbb3618557f5e629049d763f4 |
| 31 |
+DIST root-anchors-20181220.p7s 4182 BLAKE2B 3d7d881f5ef066a3ff937cf638941f783e9b65834a13ba0efce766b59e8f469826718cea9e8968ca64e216b7ef1f1b4d7b73c3110ff2d65667a28e071cd52859 SHA512 af96358bbb7847fe7c30452f566771480a38a99f192775168ab8672332381958ffa6d2f4870f539e3957b6ecf62e0e3a80b1cffbd579beb3be6941ffba3f6fa9 |
| 32 |
+DIST root-anchors-20181220.xml 690 BLAKE2B 548fd62073542f527e0b05c09ed1e668baafbb3cf7ca8afd1a32b67dd43d8958cef5005729c1bc11c2b1d0ddea48ca4db69a10b049f2e8a05536b93fff15e911 SHA512 e3adfaa4f8c9751599b8062787f4c3a81d3fa1478411f138f227c0cc972c7262bcf85578d333d36352da3628211b7d8ec4416528814a8937078dc393ce195f32 |
| 33 |
|
| 34 |
diff --git a/net-dns/dnssec-root/dnssec-root-20181220.ebuild b/net-dns/dnssec-root/dnssec-root-20181220.ebuild |
| 35 |
new file mode 100644 |
| 36 |
index 00000000000..afb378ca4da |
| 37 |
--- /dev/null |
| 38 |
+++ b/net-dns/dnssec-root/dnssec-root-20181220.ebuild |
| 39 |
@@ -0,0 +1,79 @@ |
| 40 |
+# Copyright 1999-2019 Gentoo Authors |
| 41 |
+# Distributed under the terms of the GNU General Public License v2 |
| 42 |
+ |
| 43 |
+EAPI="7" |
| 44 |
+ |
| 45 |
+DESCRIPTION="The DNSSEC root key(s)" |
| 46 |
+HOMEPAGE="https://www.iana.org/dnssec/" |
| 47 |
+SRC_URI="https://data.iana.org/root-anchors/root-anchors.xml -> root-anchors-${PV}.xml |
| 48 |
+ https://data.iana.org/root-anchors/root-anchors.p7s -> root-anchors-${PV}.p7s |
| 49 |
+ https://data.iana.org/root-anchors/icannbundle.pem -> icannbundle-${PV}.pem" |
| 50 |
+ |
| 51 |
+LICENSE="public-domain" |
| 52 |
+SLOT="0" |
| 53 |
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~x64-macos" |
| 54 |
+IUSE="" |
| 55 |
+ |
| 56 |
+RDEPEND="" |
| 57 |
+DEPEND=">=dev-perl/XML-XPath-1.420.0" |
| 58 |
+ |
| 59 |
+src_unpack() { |
| 60 |
+ mkdir "${S}" || die |
| 61 |
+ |
| 62 |
+ cp -t "${S}" "${DISTDIR}"/root-anchors-${PV}.{p7s,xml} "${DISTDIR}"/icannbundle-${PV}.pem || die |
| 63 |
+} |
| 64 |
+ |
| 65 |
+src_prepare() { |
| 66 |
+ mv root-anchors-${PV}.xml root-anchors.xml || die |
| 67 |
+ mv root-anchors-${PV}.p7s root-anchors.p7s || die |
| 68 |
+ mv icannbundle-${PV}.pem icannbundle.pem || die |
| 69 |
+ |
| 70 |
+ if has_version "dev-libs/openssl" ; then |
| 71 |
+ # Signature validating is optional: |
| 72 |
+ # - We are already downloading SRC, signature file & CA from same URI |
| 73 |
+ # - We store checksums for distfiles |
| 74 |
+ einfo "dev-libs/openssl is available, will validate signature of root-anchors.xml" |
| 75 |
+ openssl smime -verify \ |
| 76 |
+ -content root-anchors.xml \ |
| 77 |
+ -in root-anchors.p7s -inform der \ |
| 78 |
+ -CAfile icannbundle.pem || die "OpenSSL S/Mime verify failed" |
| 79 |
+ else |
| 80 |
+ einfo "dev-libs/openssl is not available, skipping optional validation root-anchors.xml" |
| 81 |
+ fi |
| 82 |
+ |
| 83 |
+ default |
| 84 |
+} |
| 85 |
+ |
| 86 |
+src_compile() { |
| 87 |
+ local KEYTAGS="" ALGORITHMS="" DIGESTTYPES="" DIGESTS="" i=1 |
| 88 |
+ |
| 89 |
+ KEYTAGS=$(xpath -q -e '/TrustAnchor/KeyDigest/KeyTag/node()' root-anchors.xml) |
| 90 |
+ ALGORITHMS=$(xpath -q -e '/TrustAnchor/KeyDigest/Algorithm/node()' root-anchors.xml) |
| 91 |
+ DIGESTTYPES=$(xpath -q -e '/TrustAnchor/KeyDigest/DigestType/node()' root-anchors.xml) |
| 92 |
+ DIGESTS=$(xpath -q -e '/TrustAnchor/KeyDigest/Digest/node()' root-anchors.xml) |
| 93 |
+ while [ 1 ] ; do |
| 94 |
+ KEYTAG=$(echo ${KEYTAGS} | cut -d" " -f$i) |
| 95 |
+ [[ "${KEYTAG}" != "" ]] || break |
| 96 |
+ |
| 97 |
+ ALGORITHM=$(echo ${ALGORITHMS} | cut -d" " -f$i) |
| 98 |
+ [[ "${ALGORITHM}" == "" ]] && die "root-anchors.xml contains invalid key: ${KEYTAG} is missing algorithm" |
| 99 |
+ |
| 100 |
+ DIGESTTYPE=$(echo ${DIGESTTYPES} | cut -d" " -f$i) |
| 101 |
+ [[ "${DIGESTTYPE}" == "" ]] && die "root-anchors.xml contains invalid key: ${KEYTAG} is missing digest type" |
| 102 |
+ |
| 103 |
+ DIGEST=$(echo ${DIGESTS} | cut -d" " -f$i) |
| 104 |
+ [[ "${DIGEST}" == "" ]] && die "root-anchors.xml contains invalid key: ${KEYTAG} is missing digest" |
| 105 |
+ |
| 106 |
+ echo ". IN DS $KEYTAG $ALGORITHM $DIGESTTYPE $DIGEST" >> root-anchors.txt |
| 107 |
+ i=`expr $i + 1` |
| 108 |
+ done |
| 109 |
+ |
| 110 |
+ if [[ ! -s "root-anchors.txt" ]] ; then |
| 111 |
+ die "Sanity check failed: root-anchors.txt is empty or does not exist!" |
| 112 |
+ fi |
| 113 |
+} |
| 114 |
+ |
| 115 |
+src_install() { |
| 116 |
+ insinto /etc/dnssec |
| 117 |
+ doins root-anchors.{p7s,txt,xml} icannbundle.pem |
| 118 |
+} |
Archives