commit: a93883869c71373646f69d6fd5c70fd8052c65c4
Author: Marc Schiffbauer <mschiff <AT> gentoo <DOT> org>
AuthorDate: Sun Nov 28 00:40:15 2021 +0000
Commit: Marc Schiffbauer <mschiff <AT> gentoo <DOT> org>
CommitDate: Sun Nov 28 00:40:55 2021 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a9388386
net-dns/opendnssec: add 2.1.10, drop 2.0.3-r2
Signed-off-by: Marc Schiffbauer <mschiff <AT> gentoo.org>
net-dns/opendnssec/Manifest | 2 +-
.../files/opendnssec-drop-privileges-2.0.x.patch | 29 ------------
.../files/opendnssec-fix-localstatedir-2.0.x.patch | 22 ---------
.../files/opendnssec-fix-run-dir-2.0.x.patch | 24 ----------
.../files/opendnssec-fix-run-dir-2.1.x.patch | 24 ++++++++++
.../opendnssec/files/opendnssec-openssl1.1.patch | 55 ----------------------
...ec-2.0.3-r2.ebuild => opendnssec-2.1.10.ebuild} | 21 +++++----
7 files changed, 38 insertions(+), 139 deletions(-)
diff --git a/net-dns/opendnssec/Manifest b/net-dns/opendnssec/Manifest
index b7655458e116..c14ca9969b6a 100644
--- a/net-dns/opendnssec/Manifest
+++ b/net-dns/opendnssec/Manifest
@@ -1 +1 @@
-DIST opendnssec-2.0.3.tar.gz 1103355 BLAKE2B
b64e729003de86e4139efaad60c9feae9f4e19c16a29fdced55d66f5896c4b7d76c4b8c57a8330d55c0c03e87de1ebe6ec49ef9d1b6e215be963680d2c805579
SHA512
4745a9ac317cc65d6f5b14be640687efd5fde2149541f692fb607a458378d27e903f175023c1aa16a777d17cef9cc68f1a84e7e7cdb233466d26756721b34424
+DIST opendnssec-2.1.10.tar.gz 1142027 BLAKE2B
063650744ffd1c6d6d3b702400c9617883394c6794743f7d61bd63f7bdaf688a3f2a80f47612e561a133a5689dad8b5f7392eec69779d1dc5632a121d9a41c8f
SHA512
c7fdbf1c3867d7b53ac11ab5cb5e636af4595dbee8d704429c7fb84cc3a6b2082ed490c33aad7747d4ee1a2c580afcf24a260bc3ed29eaf5e9d337004045b82d
diff --git a/net-dns/opendnssec/files/opendnssec-drop-privileges-2.0.x.patch
b/net-dns/opendnssec/files/opendnssec-drop-privileges-2.0.x.patch
deleted file mode 100644
index f3adc487dee9..000000000000
--- a/net-dns/opendnssec/files/opendnssec-drop-privileges-2.0.x.patch
+++ /dev/null
@@ -1,29 +0,0 @@
-diff -ur opendnssec-2.0.1.orig/conf/conf.xml.in
opendnssec-2.0.1/conf/conf.xml.in
---- opendnssec-2.0.1.orig/conf/conf.xml.in 2016-07-21 16:15:27.000000000
+0200
-+++ opendnssec-2.0.1/conf/conf.xml.in 2016-08-23 15:21:09.633384446 +0200
-@@ -36,12 +36,10 @@
- </Common>
-
- <Enforcer>
--<!--
- <Privileges>
- <User>opendnssec</User>
- <Group>opendnssec</Group>
- </Privileges>
---->
-
-
<Datastore><SQLite>@OPENDNSSEC_STATE_DIR@/kasp.db</SQLite></Datastore>
- <!--The enforcer interval parameter is no long used in 2.0 and
will be deprecated in 2.1 -->
-@@ -60,12 +58,10 @@
- </Enforcer>
-
- <Signer>
--<!--
- <Privileges>
- <User>opendnssec</User>
- <Group>opendnssec</Group>
- </Privileges>
---->
-
-
<WorkingDirectory>@OPENDNSSEC_STATE_DIR@/signer</WorkingDirectory>
- <WorkerThreads>4</WorkerThreads>
diff --git a/net-dns/opendnssec/files/opendnssec-fix-localstatedir-2.0.x.patch
b/net-dns/opendnssec/files/opendnssec-fix-localstatedir-2.0.x.patch
deleted file mode 100644
index 5940c2f050e6..000000000000
--- a/net-dns/opendnssec/files/opendnssec-fix-localstatedir-2.0.x.patch
+++ /dev/null
@@ -1,22 +0,0 @@
-diff -ur opendnssec-2.0.1.orig/Makefile.am opendnssec-2.0.1/Makefile.am
---- opendnssec-2.0.1.orig/Makefile.am 2016-07-21 16:15:00.000000000 +0200
-+++ opendnssec-2.0.1/Makefile.am 2016-08-23 14:01:50.618393034 +0200
-@@ -30,12 +30,12 @@
-
- install-data-hook:
- $(INSTALL) -d $(DESTDIR)$(localstatedir)
-- $(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec
-- $(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec/signer
-- $(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec/enforcer
-- $(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec/signconf
-- $(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec/unsigned
-- $(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec/signed
-+ $(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec
-+ $(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/signer
-+ $(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/enforcer
-+ $(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/signconf
-+ $(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/unsigned
-+ $(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/signed
- $(INSTALL) -d $(DESTDIR)$(localstatedir)/run
- $(INSTALL) -d $(DESTDIR)$(localstatedir)/run/opendnssec
-
diff --git a/net-dns/opendnssec/files/opendnssec-fix-run-dir-2.0.x.patch
b/net-dns/opendnssec/files/opendnssec-fix-run-dir-2.0.x.patch
deleted file mode 100644
index 5ea9c80f2ba7..000000000000
--- a/net-dns/opendnssec/files/opendnssec-fix-run-dir-2.0.x.patch
+++ /dev/null
@@ -1,24 +0,0 @@
-diff -ur opendnssec-2.0.1.orig/m4/opendnssec_common.m4
opendnssec-2.0.1/m4/opendnssec_common.m4
---- opendnssec-2.0.1.orig/m4/opendnssec_common.m4 2016-07-21
16:15:00.000000000 +0200
-+++ opendnssec-2.0.1/m4/opendnssec_common.m4 2016-08-23 14:42:35.033460972
+0200
-@@ -17,7 +17,7 @@
- OPENDNSSEC_DATA_DIR=$full_datadir/opendnssec
- OPENDNSSEC_SYSCONF_DIR=$full_sysconfdir/opendnssec
- OPENDNSSEC_LOCALSTATE_DIR="$full_localstatedir/opendnssec"
--OPENDNSSEC_PID_DIR="$full_localstatedir/run/opendnssec"
-+OPENDNSSEC_PID_DIR="${destdir}/run/opendnssec"
-
- AC_SUBST([OPENDNSSEC_BIN_DIR])
- AC_SUBST([OPENDNSSEC_SBIN_DIR])
-diff -ur opendnssec-2.0.1.orig/Makefile.am opendnssec-2.0.1/Makefile.am
---- opendnssec-2.0.1.orig/Makefile.am 2016-08-23 14:40:10.009951791 +0200
-+++ opendnssec-2.0.1/Makefile.am 2016-08-23 14:43:20.377870776 +0200
-@@ -36,8 +36,6 @@
- $(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/signconf
- $(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/unsigned
- $(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/signed
-- $(INSTALL) -d $(DESTDIR)$(localstatedir)/run
-- $(INSTALL) -d $(DESTDIR)$(localstatedir)/run/opendnssec
-
- docs:
- (cd libhsm; $(MAKE) doxygen)
diff --git a/net-dns/opendnssec/files/opendnssec-fix-run-dir-2.1.x.patch
b/net-dns/opendnssec/files/opendnssec-fix-run-dir-2.1.x.patch
new file mode 100644
index 000000000000..87560e090e82
--- /dev/null
+++ b/net-dns/opendnssec/files/opendnssec-fix-run-dir-2.1.x.patch
@@ -0,0 +1,24 @@
+diff -ur opendnssec-2.1.10.orig/m4/opendnssec_common.m4
opendnssec-2.1.10/m4/opendnssec_common.m4
+--- opendnssec-2.1.10.orig/m4/opendnssec_common.m4 2021-09-10
09:11:17.000000000 -1000
++++ opendnssec-2.1.10/m4/opendnssec_common.m4 2021-11-27 14:18:26.430202347
-1000
+@@ -17,7 +17,7 @@
+ OPENDNSSEC_DATA_DIR=$full_datadir/opendnssec
+ OPENDNSSEC_SYSCONF_DIR=$full_sysconfdir/opendnssec
+ OPENDNSSEC_LOCALSTATE_DIR="$full_localstatedir/opendnssec"
+-OPENDNSSEC_PID_DIR="$full_localstatedir/run/opendnssec"
++OPENDNSSEC_PID_DIR="${destdir}/run/opendnssec"
+
+ AC_SUBST([OPENDNSSEC_BIN_DIR])
+ AC_SUBST([OPENDNSSEC_SBIN_DIR])
+diff -ur opendnssec-2.1.10.orig/Makefile.am opendnssec-2.1.10/Makefile.am
+--- opendnssec-2.1.10.orig/Makefile.am 2021-09-10 09:11:17.000000000 -1000
++++ opendnssec-2.1.10/Makefile.am 2021-11-27 14:19:02.685418411 -1000
+@@ -38,8 +38,6 @@
+ $(INSTALL) @INSTALLATIONUSERARG@ @INSTALLATIONGROUPARG@ -d
$(DESTDIR)$(localstatedir)/opendnssec/signconf
+ $(INSTALL) @INSTALLATIONUSERARG@ @INSTALLATIONGROUPARG@ -d
$(DESTDIR)$(localstatedir)/opendnssec/unsigned
+ $(INSTALL) @INSTALLATIONUSERARG@ @INSTALLATIONGROUPARG@ -d
$(DESTDIR)$(localstatedir)/opendnssec/signed
+- $(INSTALL) -d $(DESTDIR)$(localstatedir)/run
+- $(INSTALL) @INSTALLATIONUSERARG@ @INSTALLATIONGROUPARG@ -d
$(DESTDIR)$(localstatedir)/run/opendnssec
+
+ docs:
+ (cd libhsm; $(MAKE) doxygen)
diff --git a/net-dns/opendnssec/files/opendnssec-openssl1.1.patch
b/net-dns/opendnssec/files/opendnssec-openssl1.1.patch
deleted file mode 100644
index b81068c4b9fd..000000000000
--- a/net-dns/opendnssec/files/opendnssec-openssl1.1.patch
+++ /dev/null
@@ -1,55 +0,0 @@
---- a/signer/src/wire/tsig-openssl.c
-+++ b/signer/src/wire/tsig-openssl.c
-@@ -126,7 +126,11 @@ static void
- cleanup_context(void *data)
- {
- HMAC_CTX* context = (HMAC_CTX*) data;
-+#ifdef HAVE_SSL_NEW_HMAC
-+ HMAC_CTX_free(context);
-+#else
- HMAC_CTX_cleanup(context);
-+#endif
- }
-
- static void
-@@ -146,8 +150,13 @@ static void*
- create_context()
- {
- HMAC_CTX* context;
-+#ifdef HAVE_SSL_NEW_HMAC
-+ CHECKALLOC(context = HMAC_CTX_new());
-+ HMAC_CTX_reset(context);
-+#else
- CHECKALLOC(context = (HMAC_CTX*) malloc(sizeof(HMAC_CTX)));
- HMAC_CTX_init(context);
-+#endif
- context_add_cleanup(context);
- return context;
- }
---- a/m4/acx_ssl.m4 2016-10-14 09:40:13.000000000 -0400
-+++ b/m4/acx_ssl.m4 2019-02-18 13:52:49.861127549 -0500
-@@ -35,12 +35,21 @@
- if test x_$ssldir = x_/usr/sfw; then
- SSL_LIBS="$SSL_LIBS -R$ssldir/lib";
- fi
-- AC_CHECK_LIB(crypto, HMAC_CTX_init,, [
-- AC_MSG_ERROR([OpenSSL found in $ssldir, but version 0.9.7
or higher is required])
-- ])
-+ save_LIBS=$LIBS
-+ AC_CHECK_LIB(crypto, HMAC_CTX_reset, [
-+ AC_DEFINE_UNQUOTED([HAVE_SSL_NEW_HMAC], [], [Define if
you have the SSL libraries with new HMAC related functions.])
-+ ], [
-+ AC_CHECK_LIB(crypto, HMAC_CTX_init,, [
-+ AC_MSG_ERROR([OpenSSL found in $ssldir, but
version 0.9.7 or higher is required])
-+ ])
-+ ] )
-+ SSL_LIBS="$SSL_LIBS -lcrypto";
-+ LIBS="$SSL_LIBS $LIBS"
- AC_CHECK_FUNCS([EVP_sha1 EVP_sha256])
-+ LIBS=$saveLIBS
- fi
- AC_SUBST(HAVE_SSL)
-+ AC_SUBST(HAVE_SSL_NEW_HMAC)
- AC_SUBST(SSL_INCLUDES)
- AC_SUBST(SSL_LIBS)
- fi
diff --git a/net-dns/opendnssec/opendnssec-2.0.3-r2.ebuild
b/net-dns/opendnssec/opendnssec-2.1.10.ebuild
similarity index 92%
rename from net-dns/opendnssec/opendnssec-2.0.3-r2.ebuild
rename to net-dns/opendnssec/opendnssec-2.1.10.ebuild
index 17efc48d4904..2df181514c42 100644
--- a/net-dns/opendnssec/opendnssec-2.0.3-r2.ebuild
+++ b/net-dns/opendnssec/opendnssec-2.1.10.ebuild
@@ -53,12 +53,16 @@ REQUIRED_USE="
^^ ( softhsm opensc external-hsm )
"
+#PATCHES=(
+# "${FILESDIR}/${PN}-fix-localstatedir-2.0.x.patch"
+# "${FILESDIR}/${PN}-fix-run-dir-2.0.x.patch"
+# "${FILESDIR}/${PN}-drop-privileges-2.0.x.patch"
+# "${FILESDIR}/${PN}-use-system-trang.patch"
+# "${FILESDIR}/${PN}-openssl1.1.patch"
+#)
PATCHES=(
- "${FILESDIR}/${PN}-fix-localstatedir-2.0.x.patch"
- "${FILESDIR}/${PN}-fix-run-dir-2.0.x.patch"
- "${FILESDIR}/${PN}-drop-privileges-2.0.x.patch"
+ "${FILESDIR}/${PN}-fix-run-dir-2.1.x.patch"
"${FILESDIR}/${PN}-use-system-trang.patch"
- "${FILESDIR}/${PN}-openssl1.1.patch"
)
DOCS=( MIGRATION NEWS )
@@ -119,8 +123,7 @@ pkg_pretend() {
eerror ""
eerror " emerge \"<net-dns/opendnssec-2\""
eerror ""
- eerror "See
https://github.com/opendnssec/opendnssec/blob/2.0/master/MIGRATION";
- eerror "for details."
+ eerror "See /usr/share/doc/opendnssec-2.1.10/MIGRATION* for
details."
eerror ""
die "Please upgrade to version >=1.4.10 first for proper db
migraion"
fi
@@ -140,8 +143,10 @@ src_prepare() {
src_configure() {
econf \
+ --enable-installation-user=opendnssec \
+ --enable-installation-group=opendnssec \
+ --localstatedir="${EPREFIX}/var/lib" \
--without-cunit \
- --localstatedir="${EPREFIX}/var" \
--disable-static \
--with-enforcer-database=$(use mysql && echo "mysql")$(use
sqlite && echo "sqlite3") \
--with-pkcs11-${PKCS11_LIB}=${PKCS11_PATH} \
@@ -230,7 +235,7 @@ pkg_postinst() {
ewarn ""
ewarn "You are upgrading from version 1.4."
ewarn ""
- ewarn "A migration is needed from 1.4 to 2.0."
+ ewarn "A migration is needed from 1.4 to 2.x."
ewarn "For details see
/usr/share/doc/${P}/MIGRATION*"
ewarn ""
ewarn "For your convenience the mentioned
migration scripts and README"
