freebsd-ports/dns/opendnssec2/Makefile

98 lines
2.8 KiB
Makefile
Raw Normal View History

# Created by: Jaap Akkerhuis <jaap@NLnetLabs.nl>
# $FreeBSD$
PORTNAME= opendnssec
Update to 2.1.3: As of today version 2.1.3 of OpenDNSSEC has been released. No special migration steps are required when upgrading from a previous 2.x.x release. It includes fixes to the build system, some regressions w.r.t. OpenDNSSEC 1.4 and a signing bug. Please note that version 2.1.2 was skipped for release. Build fixes: * OPENDNSSEC-904: autoconfigure fails to properly identify functions in ssl library on some distributions. This caused the "tsig unknown algorithm hmac-sha256" error. * OPENDNSSEC-894: repair configuration script to allow excluding the build of the enforcer. Regressions: * OPENDNSSEC-508: Tag <RolloverNotification> was not functioning correctly * OPENDNSSEC-901: Enforcer would ignore <ManualKeyGeneration/> tag in conf.xml * OPENDNSSEC-906: Tag <AllowExtraction> tag included from late 1.4 development Bugs Fixed: * OPENDNSSEC-886: Improper time calculation on 32 bits machine causes purge of keys not being scheduled. The purge would happen but some time later than expected. * OPENDNSSEC-890: Mismatching TTLs in record sets would cause bogus signatures. * OPENDNSSEC-908: Warn when TTL of resource record exceeds KASP's MaxZoneTTL. Formerly the signer would cap such TTLs to prevent situations where those records could get bogus during ZSK rollover. However it has been realized that this can potentially lead to failing IXFRs. We intend to bring back this feature in the near future when our internal data representation allows this. PR: 221515 Submitted by: jaap@NLnetLabs.nl (maintainer)
2017-08-14 16:46:31 +02:00
PORTVERSION= 2.1.3
CATEGORIES= dns
MASTER_SITES= http://dist.opendnssec.org/source/
PKGNAMESUFFIX= 2
MAINTAINER= jaap@NLnetLabs.nl
COMMENT= Tool suite for maintaining DNSSEC
LICENSE= BSD3CLAUSE
LICENSE_FILE= ${WRKSRC}/LICENSE
BUILD_DEPENDS= ldns>=1.6.16:dns/ldns
LIB_DEPENDS= libldns.so:dns/ldns
USES= ssl
USE_RC_SUBR= opendnssec
USE_GNOME= libxml2
USE_LDCONFIG= yes
GNU_CONFIGURE= yes
CONFIGURE_ARGS= --localstatedir="${PREFIX}/var" \
--with-ssl=${OPENSSLBASE}
SUB_FILES= pkg-message
CONFLICTS= opendnssec-1.[0-4]*
USERS= opendnssec
GROUPS= opendnssec
PORTDOCS= MIGRATION NEWS README.md
MIGRATE= README.md find_problematic_zones.sql \
convert_mysql mysql_convert.sql \
convert_sqlite sqlite_convert.sql
CONVERT= convert_mysql_to_sqlite convert_sqlite_to_mysql
SCHEMAS= schema.mysql schema.sqlite
OPTIONS_DEFINE= SOFTHSM DOCS
OPTIONS_DEFAULT= SQLITE
OPTIONS_SUB= yes
OPTIONS_SINGLE= DB
OPTIONS_SINGLE_DB= SQLITE MYSQL
SOFTHSM_DESC= SoftHSM cryptographic store for PKCS \#11 interface
MYSQL_DESC= Use MYSQL backend
SQLITE_DESC= Use SQLite backend
MYSQL_CONFIGURE_ON= --with-enforcer-database=mysql
MYSQL_USES= mysql
SQLITE_USES= sqlite
SQLITE_CONFIGURE_ON= --with-enforcer-database=sqlite3
SQLITE_BUILD_DEPENDS= sqlite3>=3.3.9:databases/sqlite3
SOFTHSM_CONFIGURE_ON= --with-pkcs11-softhsm=${LOCALBASE}/lib/softhsm/libsofthsm.so
SOFTHSM_RUN_DEPENDS= softhsm>=1.2.0:security/softhsm
post-patch:
${REINPLACE_CMD} -e "s|\(-lcrypto\)|-L${OPENSSLLIB} \1|g" \
${WRKSRC}/configure
pre-install-MYSQL-on:
${REINPLACE_CMD} -e '/REQUIRE:/ s|$$| mysql|' ${WRKDIR}/opendnssec
post-install-DOCS-on:
@${MKDIR} ${STAGEDIR}${DOCSDIR}
${INSTALL_DATA} ${PORTDOCS:S|^|${WRKSRC}/|} ${STAGEDIR}${DOCSDIR}
@${MKDIR} ${STAGEDIR}${DOCSDIR}/1.4-2.0_db_convert
${INSTALL_DATA} \
${MIGRATE:S|^|${WRKSRC}/enforcer/utils/1.4-2.0_db_convert/|} \
${STAGEDIR}${DOCSDIR}/1.4-2.0_db_convert
${INSTALL_DATA} \
${CONVERT:S|^|${WRKSRC}/enforcer/utils/|} \
${STAGEDIR}${DOCSDIR}
${REINPLACE_CMD} -e 's|enforcer/utils/|${DOCSDIR}/|' \
${STAGEDIR}${DOCSDIR}/MIGRATION
${INSTALL_DATA} \
${SCHEMAS:S|^|${WRKSRC}/enforcer/src/db/|} \
${STAGEDIR}${DOCSDIR}
${REINPLACE_CMD} -e 's|../src/db/schema|${DOCSDIR}/schema|' \
-e 's|mysql_convert.sql|${DOCSDIR}/1.4-2.0_db_convert/&|' \
-e 's|sqlite_convert.sql|${DOCSDIR}/1.4-2.0_db_convert/&|' \
-e 's|find_problematic_zones.sql|${DOCSDIR}/1.4-2.0_db_convert/&|' \
${STAGEDIR}${DOCSDIR}/convert_*
${REINPLACE_CMD} -e 's|../../src/db/schema|${DOCSDIR}/schema|' \
-e 's|mysql_convert.sql|${DOCSDIR}/1.4-2.0_db_convert/&|' \
-e 's|sqlite_convert.sql|${DOCSDIR}/1.4-2.0_db_convert/&|' \
-e 's|find_problematic_zones.sql|${DOCSDIR}/1.4-2.0_db_convert/&|' \
${STAGEDIR}${DOCSDIR}/1.4-2.0_db_convert/convert_*
.include <bsd.port.mk>