1 |
commit: ab95c4b2fc1510037a6b71dc9a6e38ffe45b0db6 |
2 |
Author: Brian Evans <grknight <AT> gentoo <DOT> org> |
3 |
AuthorDate: Mon Feb 18 19:11:40 2019 +0000 |
4 |
Commit: Brian Evans <grknight <AT> gentoo <DOT> org> |
5 |
CommitDate: Mon Feb 18 19:11:40 2019 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ab95c4b2 |
7 |
|
8 |
net-dns/opendnssec: Revbump to fix dependencies and building |
9 |
|
10 |
Non-maintainer commit |
11 |
|
12 |
Backport patch for OpenSSL 1.1 from upstream |
13 |
Adjust MySQL dependencies |
14 |
|
15 |
Closes: https://bugs.gentoo.org/675008 |
16 |
Closes: https://bugs.gentoo.org/665968 |
17 |
Package-Manager: Portage-2.3.61, Repoman-2.3.12 |
18 |
Signed-off-by: Brian Evans <grknight <AT> gentoo.org> |
19 |
|
20 |
.../opendnssec/files/opendnssec-openssl1.1.patch | 55 ++++++++++++++++++++++ |
21 |
.../files/opendnssec-use-system-trang.patch | 4 +- |
22 |
...sec-2.0.3.ebuild => opendnssec-2.0.3-r1.ebuild} | 15 +++--- |
23 |
3 files changed, 63 insertions(+), 11 deletions(-) |
24 |
|
25 |
diff --git a/net-dns/opendnssec/files/opendnssec-openssl1.1.patch b/net-dns/opendnssec/files/opendnssec-openssl1.1.patch |
26 |
new file mode 100644 |
27 |
index 00000000000..b81068c4b9f |
28 |
--- /dev/null |
29 |
+++ b/net-dns/opendnssec/files/opendnssec-openssl1.1.patch |
30 |
@@ -0,0 +1,55 @@ |
31 |
+--- a/signer/src/wire/tsig-openssl.c |
32 |
++++ b/signer/src/wire/tsig-openssl.c |
33 |
+@@ -126,7 +126,11 @@ static void |
34 |
+ cleanup_context(void *data) |
35 |
+ { |
36 |
+ HMAC_CTX* context = (HMAC_CTX*) data; |
37 |
++#ifdef HAVE_SSL_NEW_HMAC |
38 |
++ HMAC_CTX_free(context); |
39 |
++#else |
40 |
+ HMAC_CTX_cleanup(context); |
41 |
++#endif |
42 |
+ } |
43 |
+ |
44 |
+ static void |
45 |
+@@ -146,8 +150,13 @@ static void* |
46 |
+ create_context() |
47 |
+ { |
48 |
+ HMAC_CTX* context; |
49 |
++#ifdef HAVE_SSL_NEW_HMAC |
50 |
++ CHECKALLOC(context = HMAC_CTX_new()); |
51 |
++ HMAC_CTX_reset(context); |
52 |
++#else |
53 |
+ CHECKALLOC(context = (HMAC_CTX*) malloc(sizeof(HMAC_CTX))); |
54 |
+ HMAC_CTX_init(context); |
55 |
++#endif |
56 |
+ context_add_cleanup(context); |
57 |
+ return context; |
58 |
+ } |
59 |
+--- a/m4/acx_ssl.m4 2016-10-14 09:40:13.000000000 -0400 |
60 |
++++ b/m4/acx_ssl.m4 2019-02-18 13:52:49.861127549 -0500 |
61 |
+@@ -35,12 +35,21 @@ |
62 |
+ if test x_$ssldir = x_/usr/sfw; then |
63 |
+ SSL_LIBS="$SSL_LIBS -R$ssldir/lib"; |
64 |
+ fi |
65 |
+- AC_CHECK_LIB(crypto, HMAC_CTX_init,, [ |
66 |
+- AC_MSG_ERROR([OpenSSL found in $ssldir, but version 0.9.7 or higher is required]) |
67 |
+- ]) |
68 |
++ save_LIBS=$LIBS |
69 |
++ AC_CHECK_LIB(crypto, HMAC_CTX_reset, [ |
70 |
++ AC_DEFINE_UNQUOTED([HAVE_SSL_NEW_HMAC], [], [Define if you have the SSL libraries with new HMAC related functions.]) |
71 |
++ ], [ |
72 |
++ AC_CHECK_LIB(crypto, HMAC_CTX_init,, [ |
73 |
++ AC_MSG_ERROR([OpenSSL found in $ssldir, but version 0.9.7 or higher is required]) |
74 |
++ ]) |
75 |
++ ] ) |
76 |
++ SSL_LIBS="$SSL_LIBS -lcrypto"; |
77 |
++ LIBS="$SSL_LIBS $LIBS" |
78 |
+ AC_CHECK_FUNCS([EVP_sha1 EVP_sha256]) |
79 |
++ LIBS=$saveLIBS |
80 |
+ fi |
81 |
+ AC_SUBST(HAVE_SSL) |
82 |
++ AC_SUBST(HAVE_SSL_NEW_HMAC) |
83 |
+ AC_SUBST(SSL_INCLUDES) |
84 |
+ AC_SUBST(SSL_LIBS) |
85 |
+ fi |
86 |
|
87 |
diff --git a/net-dns/opendnssec/files/opendnssec-use-system-trang.patch b/net-dns/opendnssec/files/opendnssec-use-system-trang.patch |
88 |
index 745b277e133..4cc564c265a 100644 |
89 |
--- a/net-dns/opendnssec/files/opendnssec-use-system-trang.patch |
90 |
+++ b/net-dns/opendnssec/files/opendnssec-use-system-trang.patch |
91 |
@@ -1,5 +1,5 @@ |
92 |
---- conf/Makefile.am.orig 2013-05-12 22:45:26.514768943 +0200 |
93 |
-+++ conf/Makefile.am 2013-05-12 22:46:33.399545628 +0200 |
94 |
+--- a/conf/Makefile.am.orig 2013-05-12 22:45:26.514768943 +0200 |
95 |
++++ b/conf/Makefile.am 2013-05-12 22:46:33.399545628 +0200 |
96 |
@@ -7,7 +7,7 @@ |
97 |
XML = addns.xml conf.xml kasp.xml zonelist.xml signconf.xml enforcerstate.xml |
98 |
XSL= kasp2html.xsl |
99 |
|
100 |
diff --git a/net-dns/opendnssec/opendnssec-2.0.3.ebuild b/net-dns/opendnssec/opendnssec-2.0.3-r1.ebuild |
101 |
similarity index 96% |
102 |
rename from net-dns/opendnssec/opendnssec-2.0.3.ebuild |
103 |
rename to net-dns/opendnssec/opendnssec-2.0.3-r1.ebuild |
104 |
index f4ecf0b3f3e..d8769127684 100644 |
105 |
--- a/net-dns/opendnssec/opendnssec-2.0.3.ebuild |
106 |
+++ b/net-dns/opendnssec/opendnssec-2.0.3-r1.ebuild |
107 |
@@ -1,11 +1,11 @@ |
108 |
-# Copyright 1999-2017 Gentoo Foundation |
109 |
+# Copyright 1999-2019 Gentoo Authors |
110 |
# Distributed under the terms of the GNU General Public License v2 |
111 |
|
112 |
-EAPI=5 |
113 |
+EAPI=7 |
114 |
|
115 |
MY_P="${P/_}" |
116 |
PKCS11_IUSE="+softhsm opensc external-hsm" |
117 |
-inherit autotools eutils multilib user |
118 |
+inherit autotools user |
119 |
|
120 |
DESCRIPTION="An open-source turn-key solution for DNSSEC" |
121 |
HOMEPAGE="http://www.opendnssec.org/" |
122 |
@@ -22,7 +22,7 @@ RDEPEND=" |
123 |
dev-libs/libxslt |
124 |
net-libs/ldns |
125 |
mysql? ( |
126 |
- virtual/mysql |
127 |
+ dev-db/mysql-connector-c:0= |
128 |
dev-perl/DBD-mysql |
129 |
) |
130 |
opensc? ( dev-libs/opensc ) |
131 |
@@ -50,6 +50,7 @@ PATCHES=( |
132 |
"${FILESDIR}/${PN}-fix-run-dir-2.0.x.patch" |
133 |
"${FILESDIR}/${PN}-drop-privileges-2.0.x.patch" |
134 |
"${FILESDIR}/${PN}-use-system-trang.patch" |
135 |
+ "${FILESDIR}/${PN}-openssl1.1.patch" |
136 |
) |
137 |
|
138 |
S="${WORKDIR}/${MY_P}" |
139 |
@@ -130,11 +131,7 @@ pkg_setup() { |
140 |
} |
141 |
|
142 |
src_prepare() { |
143 |
- local patch |
144 |
default |
145 |
- for patch in "${PATCHES[@]}"; do |
146 |
- epatch "$patch" |
147 |
- done |
148 |
eautoreconf |
149 |
} |
150 |
|
151 |
@@ -199,7 +196,7 @@ src_install() { |
152 |
-e 's,^SCHEMA=../src/db/,SCHEMA=/usr/share/opendnssec/db/sql/,' \ |
153 |
-e 's,^SCHEMA=../../src/db/,SCHEMA=/usr/share/opendnssec/db/sql/,' \ |
154 |
"${ED}"/usr/share/opendnssec/db/convert_* \ |
155 |
- "${ED}"/usr/share/opendnssec/db/1.4-2.0_db_convert/convert_* |
156 |
+ "${ED}"/usr/share/opendnssec/db/1.4-2.0_db_convert/convert_* || die |
157 |
|
158 |
# fix permissions |
159 |
fowners root:opendnssec /etc/opendnssec |