Hi,
On Tue, Jul 17, 2012 at 06:31:05PM +1000, Роланд Чернов wrote:
> dnscrypt-proxy home: https://github.com/opendns/dnscrypt-proxy
>
> Signed-off-by: Roland Chernov <[email protected]>
>
> ---
>
> Index: net/dnscrypt-proxy/files/dnscrypt-proxy.init
> ===================================================================
> --- net/dnscrypt-proxy/files/dnscrypt-proxy.init (revision 0)
> +++ net/dnscrypt-proxy/files/dnscrypt-proxy.init (working copy)
> @@ -0,0 +1,25 @@
> +#!/bin/sh /etc/rc.common
> +# Copyright (C) 2012 OpenWrt.org
> +
> +START=50
> +
> +start_instance () {
> + local section="$1"
> + config_get address "$section" 'address'
> + config_get port "$section" 'port'
> +
> + service_start /usr/sbin/dnscrypt-proxy -d \
> + -a ${address}:${port} \
> + -n 64 \
> + -u nobody
> +}
> +
> +start() {
> + config_load 'dnscrypt-proxy'
> + config_foreach start_instance 'dnscrypt-proxy'
> +}
> +
> +stop() {
> + service_stop /usr/sbin/dnscrypt-proxy
> +}
> +
> Index: net/dnscrypt-proxy/files/dnscrypt-proxy.config
> ===================================================================
> --- net/dnscrypt-proxy/files/dnscrypt-proxy.config (revision 0)
> +++ net/dnscrypt-proxy/files/dnscrypt-proxy.config (working copy)
> @@ -0,0 +1,3 @@
> +config dnscrypt-proxy
> + option address '127.0.0.1'
> + option port '2053'
> Index: net/dnscrypt-proxy/patches/090-low-verbosity.patch
> ===================================================================
> --- net/dnscrypt-proxy/patches/090-low-verbosity.patch (revision 0)
> +++ net/dnscrypt-proxy/patches/090-low-verbosity.patch (working copy)
I think we do not need 090-low-verbosity.patch
> @@ -0,0 +1,32 @@
> +--- a/src/dnscrypt-proxy/app.c
> ++++ b/src/dnscrypt-proxy/app.c
> +@@ -142,7 +142,7 @@ main(int argc, char *argv[])
> + app_context.proxy_context = &proxy_context;
> + logger_noformat(&proxy_context, LOG_INFO, "Generating a new
> key pair");
> + dnscrypt_client_init_with_new_key_pair(&proxy_context.dnscrypt_client);
> +- logger_noformat(&proxy_context, LOG_INFO, "Done");
> ++ logger_noformat(&proxy_context, LOG_DEBUG, "Done");
> +
> + if (cert_updater_init(&proxy_context) != 0 ||
> + tcp_listener_bind(&proxy_context) != 0 ||
> +
> +--- a/src/dnscrypt-proxy/cert.c
> ++++ b/src/dnscrypt-proxy/cert.c
> +@@ -74,7 +74,7 @@ cert_parse_bincert(ProxyContext * const
> + "This certificate has expired");
> + return -1;
> + }
> +- logger_noformat(proxy_context, LOG_INFO, "This certificate
> looks valid");
> ++ logger_noformat(proxy_context, LOG_DEBUG, "This certificate
> looks valid");
> + if (previous_bincert == NULL) {
> + return 0;
> + }
> +@@ -151,7 +151,7 @@ cert_print_server_key(ProxyContext * con
> +
> + dnscrypt_key_to_fingerprint(fingerprint,
> + proxy_context->resolver_publickey);
> +- logger(proxy_context, LOG_INFO,
> ++ logger(proxy_context, LOG_DEBUG,
> + "Server key fingerprint is %s", fingerprint);
> + }
> +
> Index: net/dnscrypt-proxy/Makefile
> ===================================================================
> --- net/dnscrypt-proxy/Makefile (revision 0)
> +++ net/dnscrypt-proxy/Makefile (working copy)
> @@ -0,0 +1,82 @@
> +#
> +# Copyright (C) 2012 OpenWrt.org
> +#
> +# This is free software, licensed under the GNU General Public License v2.
> +# See /LICENSE for more information.
> +#
> +
> +include $(TOPDIR)/rules.mk
> +
> +PKG_NAME:=dnscrypt-proxy
> +PKG_VERSION:=0.11
> +PKG_RELEASE:=2
This should be 1.
> +
> +PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
> +PKG_SOURCE_URL:=https://github.com/downloads/opendns/dnscrypt-proxy/
> +PKG_MD5SUM:=491b332a6a501533fd1050b300e6addc
> +
> +PKG_INSTALL:=1
> +PKG_FIXUP:=autoreconf
> +
> +include $(INCLUDE_DIR)/package.mk
> +
> +define Package/dnscrypt-proxy/Default
> + SECTION:=net
> + CATEGORY:=Network
> + SUBMENU:=IP Addresses and Names
> + DEPENDS:=+libpthread
> + URL:=http://www.opendns.com/technology/dnscrypt
> +endef
> +
> +define Package/dnscrypt-proxy
> + $(call Package/dnscrypt-proxy/Default)
> + TITLE:=A tool for securing DNS requests
> +endef
> +
> +define Package/dnscrypt-proxy/description
> + dnscrypt-proxy is a slight variation on DNSCurve.
> + DNSCurve improves the confidentiality and integrity of DNS
> requests using
> + high-speed high-security elliptic-curve cryptography. Best of
> all, DNSCurve
> + has very low overhead and adds virtually no latency to queries.
> +endef
Your mail sender mangled the patch. Please fix this.
> +define Package/hostip
> + $(call Package/dnscrypt-proxy/Default)
> + TITLE:=A tool for resolving a name to IPv4 or IPv6 addresses
> +endef
> +
> +define Package/hostip/description
> + Sends a DNS query to a resolver, and prints the IP addresses
> for the given host name.
Your mail sender mangled the patch. Please fix this.
> +endef
> +
> +TARGET_CFLAGS += $(FPIC)
> +
> +MAKE_FLAGS += \
> + CFLAGS="$(TARGET_CFLAGS)" \
> +
> +define Build/Configure
> + $(call Build/Configure/Default, \
> + --prefix=/usr \
> + )
> +endef
> +
> +define Package/dnscrypt-proxy/install
> + $(INSTALL_DIR) $(1)/usr/sbin
> + $(CP) $(PKG_INSTALL_DIR)/usr/sbin/dnscrypt-proxy $(1)/usr/sbin/
> + $(INSTALL_DIR) $(1)/etc/init.d
> + $(INSTALL_BIN) ./files/dnscrypt-proxy.init
> $(1)/etc/init.d/dnscrypt-proxy
> + $(INSTALL_DIR) $(1)/etc/config
> + $(INSTALL_CONF) ./files/dnscrypt-proxy.config
> $(1)/etc/config/dnscrypt-proxy
Your mail sender mangled the patch. Please fix this.
> +endef
> +
> +define Package/dnscrypt-proxy/conffiles
> +/etc/config/dnscrypt-proxy
> +endef
> +
> +define Package/hostip/install
> + $(INSTALL_DIR) $(1)/usr/bin
> + $(CP) $(PKG_INSTALL_DIR)/usr/bin/hostip $(1)/usr/bin/
> +endef
> +
> +$(eval $(call BuildPackage,dnscrypt-proxy))
> +$(eval $(call BuildPackage,hostip))
Other then that it looks ok...
Luka
_______________________________________________
openwrt-devel mailing list
[email protected]
https://lists.openwrt.org/mailman/listinfo/openwrt-devel
