kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/security/zkt/Makefile

63 lines
2.1 KiB
Makefile
Raw Normal View History

Bump all packages that depend on curses.bui* or terminfo.bui* since they might incur ncurses dependencies on some platforms, and ncurses just bumped its shlib. Some packages were bumped twice now, sorry for that.
2015-08-18 09:31:00 +02:00
# $NetBSD: Makefile,v 1.10 2015/08/18 07:31:17 wiz Exp $
ZKT is a tool to manage keys and signatures for DNSSEC-zones. The Zone Key Tool consist of two commands: * dnssec-zkt to create and list dnssec zone keys and * dnssec-signer to sign a zone and manage the lifetime of the zone signing keys Both commands are simple wrapper commands around the dnssec-keygen(8) and dnssec-signzone(8) commands provided by BIND.
2010-03-13 20:19:51 +01:00
#
zkt 1.1.2 * bug Fixed bug introduced by changes on inc_soa_serial() zkt 1.1.1 * bug Error fixed in zkt-conf in parsing the version number * misc inc_soa_serial() now returns 0 on success * bug Fixed bug in inc_serial() The zone file wasn't closed on succesful change of the soa record. Many thanks to Frederik Soderblom for fixing this.
2013-03-16 00:34:44 +01:00
DISTNAME= zkt-1.1.2
Bump all packages that depend on curses.bui* or terminfo.bui* since they might incur ncurses dependencies on some platforms, and ncurses just bumped its shlib. Some packages were bumped twice now, sorry for that.
2015-08-18 09:31:00 +02:00
PKGREVISION= 1
ZKT is a tool to manage keys and signatures for DNSSEC-zones. The Zone Key Tool consist of two commands: * dnssec-zkt to create and list dnssec zone keys and * dnssec-signer to sign a zone and manage the lifetime of the zone signing keys Both commands are simple wrapper commands around the dnssec-keygen(8) and dnssec-signzone(8) commands provided by BIND.
2010-03-13 20:19:51 +01:00
CATEGORIES= security
zkt 1.1 -- 30. Jan 2012 * misc Release numbering changed to three level "major.minor.revison" scheme * bug REMOVE_HOLD_TIME was set to 10 days only (Thanks to Chris Thompson) * doc Improved README file (Thanks to Jan-Piet Mens) * misc Fix of some typos in log messages * bug Fixed error in rollover.c (return code of genfirstkey() wasn't checked) * misc Default of KeySetDir changed from NULL to ".." (best for hierarchical mode) Default Sig Lifetime changed from 10 days to 3 weeks (21 days) Default ZSK lifetime changed from 3 months to 4 times the sig lifetime Default KSK lifetime changed from 1 year to 2 years Parameter checks in checkconfig() adapted. KSK random device changed back from /dev/urandom to BIND default (Be aware of some possibly long delay in key generation) * func New configure option to set the bind utility path manually (--enable-bindutil_path) BIND_UTIL_PATH in config_zkt.h will no longer used * bug If nsec3 is turned on and KeyAlgo (or AddKeyAlgo) is RSHASHA1 or DSA, genkey() uses algorithm type NSECRSASHA1 or NSEC3DSA instead. * bug Error in printconfigdiff() fixed. (Thanks to Holger Wirtz) * func Description added to (some of the) dnssec.conf parameters * func Adding a patch from Hrant Dadivanyan to always pre-publish ZSKs * misc Config file syntax changed to parameter names without underscores. zkt-conf uses ZKT_VERSION string as config version * bug "make install-man" now installs all man page * bug Bug fixed in zfparse.c. zkt-conf was unable to detect an already included dnskey.db file if another file was included. * misc destination dnssec-zkt removed from Makefile.in * func dki_prt_managedkeys() added to dki.c zkt_list_managedkeys() added to zkt.c zkt-ls has new option -M to print out a list of managed-keys * bug Bug fixed in the config parser (zconf.c). Couldn't parse agorithm RSASHA512 correctly (Thanks to Michael Sinatra)
2012-06-17 00:55:25 +02:00
MASTER_SITES= http://www.hznet.de/dns/zkt/
ZKT is a tool to manage keys and signatures for DNSSEC-zones. The Zone Key Tool consist of two commands: * dnssec-zkt to create and list dnssec zone keys and * dnssec-signer to sign a zone and manage the lifetime of the zone signing keys Both commands are simple wrapper commands around the dnssec-keygen(8) and dnssec-signzone(8) commands provided by BIND.
2010-03-13 20:19:51 +01:00
MAINTAINER= pettai@NetBSD.org
zkt 1.1 -- 30. Jan 2012 * misc Release numbering changed to three level "major.minor.revison" scheme * bug REMOVE_HOLD_TIME was set to 10 days only (Thanks to Chris Thompson) * doc Improved README file (Thanks to Jan-Piet Mens) * misc Fix of some typos in log messages * bug Fixed error in rollover.c (return code of genfirstkey() wasn't checked) * misc Default of KeySetDir changed from NULL to ".." (best for hierarchical mode) Default Sig Lifetime changed from 10 days to 3 weeks (21 days) Default ZSK lifetime changed from 3 months to 4 times the sig lifetime Default KSK lifetime changed from 1 year to 2 years Parameter checks in checkconfig() adapted. KSK random device changed back from /dev/urandom to BIND default (Be aware of some possibly long delay in key generation) * func New configure option to set the bind utility path manually (--enable-bindutil_path) BIND_UTIL_PATH in config_zkt.h will no longer used * bug If nsec3 is turned on and KeyAlgo (or AddKeyAlgo) is RSHASHA1 or DSA, genkey() uses algorithm type NSECRSASHA1 or NSEC3DSA instead. * bug Error in printconfigdiff() fixed. (Thanks to Holger Wirtz) * func Description added to (some of the) dnssec.conf parameters * func Adding a patch from Hrant Dadivanyan to always pre-publish ZSKs * misc Config file syntax changed to parameter names without underscores. zkt-conf uses ZKT_VERSION string as config version * bug "make install-man" now installs all man page * bug Bug fixed in zfparse.c. zkt-conf was unable to detect an already included dnskey.db file if another file was included. * misc destination dnssec-zkt removed from Makefile.in * func dki_prt_managedkeys() added to dki.c zkt_list_managedkeys() added to zkt.c zkt-ls has new option -M to print out a list of managed-keys * bug Bug fixed in the config parser (zconf.c). Couldn't parse agorithm RSASHA512 correctly (Thanks to Michael Sinatra)
2012-06-17 00:55:25 +02:00
HOMEPAGE= http://www.hznet.de/dns/zkt/
ZKT is a tool to manage keys and signatures for DNSSEC-zones. The Zone Key Tool consist of two commands: * dnssec-zkt to create and list dnssec zone keys and * dnssec-signer to sign a zone and manage the lifetime of the zone signing keys Both commands are simple wrapper commands around the dnssec-keygen(8) and dnssec-signzone(8) commands provided by BIND.
2010-03-13 20:19:51 +01:00
COMMENT= DNSSEC Zone Key Tool
LICENSE= original-bsd
GNU_CONFIGURE= yes
CONFIGURE_ARGS+= --enable-configpath=${PKG_SYSCONFDIR}/zkt
#CONFIGURE_ARGS+= --enable-configpath=/var/chroot/named/etc
INSTALLATION_DIRS= sbin share/doc/zkt ${PKGMANDIR}/man8 etc/zkt
Allow unprivileged build on NetBSD, if bind is in base.
2012-10-24 18:05:15 +02:00
.include "../../mk/bsd.prefs.mk"
security/zkt: Fix DragonFly regression When this package was updated to version 1.1, it stopped building on DragonFly. The main issue is that DragonFly doesn't have bind in its base. NetBSD does, so it zkt finds it there, but otherwise it needs the configuration switch --enable-binutil-path to be used. This was added for DragonFly to point at ${PREFIX}/sbin. zkt requires bind to be installed in order to build. Unlike other packages like python, postgresql, and ruby where the mk.conf can define a version otherwise a default is used, no such mechanism exists to hand the four separate bind packages (at least I don't know about one). So the inclusion of bind99 is a hack I'm not too proud of, but I don't have a better solution. With it, it builds in clean environments like pbulk chroot and Tinderbox. If an individual user is building from source, they'll be smart enough to comment out this include if another version of bind is already installed (zkt will fail on a bind build conflict). I suspect DragonFly is rather unique in not having bind in base, so for now this is left as a DragonFly-specific section. Something like net/bind99/builtin.mk could possibly be used to determine if no builtin bind is available and thus follow DragonFly approach. I shall leave it to others to decide.
2012-07-18 22:44:38 +02:00
# NetBSD has bind in base, util path=/usr/sbin
Allow unprivileged build on NetBSD, if bind is in base.
2012-10-24 18:05:15 +02:00
.if ${OPSYS} == "NetBSD" && exists(/usr/sbin/dnssec-keygen)
CONFIGURE_ARGS+= --enable-bind_util_path=/usr/sbin
.endif
security/zkt: Fix DragonFly regression When this package was updated to version 1.1, it stopped building on DragonFly. The main issue is that DragonFly doesn't have bind in its base. NetBSD does, so it zkt finds it there, but otherwise it needs the configuration switch --enable-binutil-path to be used. This was added for DragonFly to point at ${PREFIX}/sbin. zkt requires bind to be installed in order to build. Unlike other packages like python, postgresql, and ruby where the mk.conf can define a version otherwise a default is used, no such mechanism exists to hand the four separate bind packages (at least I don't know about one). So the inclusion of bind99 is a hack I'm not too proud of, but I don't have a better solution. With it, it builds in clean environments like pbulk chroot and Tinderbox. If an individual user is building from source, they'll be smart enough to comment out this include if another version of bind is already installed (zkt will fail on a bind build conflict). I suspect DragonFly is rather unique in not having bind in base, so for now this is left as a DragonFly-specific section. Something like net/bind99/builtin.mk could possibly be used to determine if no builtin bind is available and thus follow DragonFly approach. I shall leave it to others to decide.
2012-07-18 22:44:38 +02:00
# DragonFly uses pkgsrc bind, so the util path must be explicitly defined
# Without any global bind package to point to, pick the latest one and
# hope one of the other 3 bind packages isn't already installed because
# this one will fail to build due to conflict in that case.
Allow unprivileged build on NetBSD, if bind is in base.
2012-10-24 18:05:15 +02:00
security/zkt: Fix DragonFly regression When this package was updated to version 1.1, it stopped building on DragonFly. The main issue is that DragonFly doesn't have bind in its base. NetBSD does, so it zkt finds it there, but otherwise it needs the configuration switch --enable-binutil-path to be used. This was added for DragonFly to point at ${PREFIX}/sbin. zkt requires bind to be installed in order to build. Unlike other packages like python, postgresql, and ruby where the mk.conf can define a version otherwise a default is used, no such mechanism exists to hand the four separate bind packages (at least I don't know about one). So the inclusion of bind99 is a hack I'm not too proud of, but I don't have a better solution. With it, it builds in clean environments like pbulk chroot and Tinderbox. If an individual user is building from source, they'll be smart enough to comment out this include if another version of bind is already installed (zkt will fail on a bind build conflict). I suspect DragonFly is rather unique in not having bind in base, so for now this is left as a DragonFly-specific section. Something like net/bind99/builtin.mk could possibly be used to determine if no builtin bind is available and thus follow DragonFly approach. I shall leave it to others to decide.
2012-07-18 22:44:38 +02:00
.if ${OPSYS} == "DragonFly"
Use the correct path variable in one marino@'s dragonfly hacks.
2014-01-02 01:50:07 +01:00
CONFIGURE_ARGS+= --enable-bind_util_path=${BUILDLINK_PREFIX.bind}/sbin
security/zkt: Fix DragonFly regression When this package was updated to version 1.1, it stopped building on DragonFly. The main issue is that DragonFly doesn't have bind in its base. NetBSD does, so it zkt finds it there, but otherwise it needs the configuration switch --enable-binutil-path to be used. This was added for DragonFly to point at ${PREFIX}/sbin. zkt requires bind to be installed in order to build. Unlike other packages like python, postgresql, and ruby where the mk.conf can define a version otherwise a default is used, no such mechanism exists to hand the four separate bind packages (at least I don't know about one). So the inclusion of bind99 is a hack I'm not too proud of, but I don't have a better solution. With it, it builds in clean environments like pbulk chroot and Tinderbox. If an individual user is building from source, they'll be smart enough to comment out this include if another version of bind is already installed (zkt will fail on a bind build conflict). I suspect DragonFly is rather unique in not having bind in base, so for now this is left as a DragonFly-specific section. Something like net/bind99/builtin.mk could possibly be used to determine if no builtin bind is available and thus follow DragonFly approach. I shall leave it to others to decide.
2012-07-18 22:44:38 +02:00
.include "../../net/bind99/buildlink3.mk"
.endif
ZKT is a tool to manage keys and signatures for DNSSEC-zones. The Zone Key Tool consist of two commands: * dnssec-zkt to create and list dnssec zone keys and * dnssec-signer to sign a zone and manage the lifetime of the zone signing keys Both commands are simple wrapper commands around the dnssec-keygen(8) and dnssec-signzone(8) commands provided by BIND.
2010-03-13 20:19:51 +01:00
do-install:
zkt 1.0 -- 15. June 2010 * feat "/dev/urandom" check added to checkconfig() * feat Config compability switch (-C) added to zkt-conf * feat zkt-ls has a new switch -s to change sorting of domains from subdomain before parent to subdomain below the parent * feat "zkt-ls -T" prints only parent trust anchor zkt 1.0rc1 -- 1. Apr 2010 (The 1.0 release was sponsored by DOMINIC(r) ) * feat Several config parameter are printed now in a more consistent and user friendly form. SerialFormat "Incremental" could be abbreviated as "inc" on input. * bug use of AC_ARG_ENABLE macros changed in a way that it is possible to use it as a "--disable-FEATURE" switch. * port no longer checking for malloc() in configue script. Mainly because it checks only if malloc(0) is allowed and we do not need this. * port --disable-color-mode added to configure script * bug Makro PRINT_AGE_OF_YEAR renamed to PRINT_AGE_WITH_YEAR in configure.ac * misc man page zkt-keyman added * misc New command zkt-keyman added as replacement for dnssec-zkt's key management functionality * misc man page zkt-ls added * port Check for ncurses added to Makefile.in * misc Color mode (Option -C) added to zkt-ls (experimental) New source file tcap.c. * misc Deprecate "single linked list" version of ZKT. The binary tree version is the default for years, so the VERSION string does no longer contain a "T". Now, if someone insist on the single link list version (configure --disable-tree) a "S" is added to the version string. Anyway, the code for the single link list version does no longer have the same functionality and will be removed in one of the later releases. * misc New command zkt-ls added as replacement for dnssec-zkt's key listing functionality * func New key algorithms RSASHA256 and RSAHSHA512 added to dki.[ch] and zconf.c New parameter NSEC3 added. Now it's possible to configure an NSEC3_OPTOUT zone. * bug Token parsing function gettok() fixed to recognize tokens with dashes ("zone-statistics" was seen as "zone"). Thanks to Andreas Baess for finding this bug. * bug Fixed bug in (re)salting dynamic zones. sig_zone() and gensalt() needs parameter change for this * func New option -a added to zkt-conf * func In zconf.c CONF_TIMEINT parameter are now able to recognize "unset" values (which is represented internaly as 0) * func Set Max_TTL to sig lifetime for dynamic zones or if Max_TTL is less than 1. max_ttl checks in checkconfig() fixed. * func printconfigdiff() added to zconf.c and used by zkt-conf. Now local configs are printed as diff to site wide config. * misc man page zkt-signer.8 changed to new command syntax * func Per domain logging added. Use parameter LogDomainDir to enable it. For more details see file README.logging. * func distribute.sh supports new action type "distkeys" but is currently not used * misc LOG_FNAMETMPL changed and moved from config_zkt.h to log.h * misc Default soa serial format changed from "Incremental" to "Unixtime" * func dnssec-signer command renamed to zkt-signer. Man page updated. * func New command zkt-conf added as replacement for dnssec-zkt -Z * misc timeint2str() is now global (zconf.c) * func zfparse.c - a rudimentary zone file parser scans minimum and maximum ttl values; adds $INCLUDE dnskey.db zkt 0.99d -- Not released * func Option SIG_DnsKeyKSK for DNSKEY signing with KSK only added * misc BIND 9.7 compability
2011-03-12 17:46:05 +01:00
${INSTALL_PROGRAM} ${WRKSRC}/zkt-conf \
${DESTDIR}${PREFIX}/sbin/zkt-conf
${INSTALL_PROGRAM} ${WRKSRC}/zkt-keyman \
${DESTDIR}${PREFIX}/sbin/zkt-keyman
${INSTALL_PROGRAM} ${WRKSRC}/zkt-ls \
${DESTDIR}${PREFIX}/sbin/zkt-ls
${INSTALL_PROGRAM} ${WRKSRC}/zkt-signer \
${DESTDIR}${PREFIX}/sbin/zkt-signer
ZKT is a tool to manage keys and signatures for DNSSEC-zones. The Zone Key Tool consist of two commands: * dnssec-zkt to create and list dnssec zone keys and * dnssec-signer to sign a zone and manage the lifetime of the zone signing keys Both commands are simple wrapper commands around the dnssec-keygen(8) and dnssec-signzone(8) commands provided by BIND.
2010-03-13 20:19:51 +01:00
${INSTALL_PROGRAM} ${WRKSRC}/zkt-soaserial \
${DESTDIR}${PREFIX}/sbin/zkt-soaserial
zkt 1.0 -- 15. June 2010 * feat "/dev/urandom" check added to checkconfig() * feat Config compability switch (-C) added to zkt-conf * feat zkt-ls has a new switch -s to change sorting of domains from subdomain before parent to subdomain below the parent * feat "zkt-ls -T" prints only parent trust anchor zkt 1.0rc1 -- 1. Apr 2010 (The 1.0 release was sponsored by DOMINIC(r) ) * feat Several config parameter are printed now in a more consistent and user friendly form. SerialFormat "Incremental" could be abbreviated as "inc" on input. * bug use of AC_ARG_ENABLE macros changed in a way that it is possible to use it as a "--disable-FEATURE" switch. * port no longer checking for malloc() in configue script. Mainly because it checks only if malloc(0) is allowed and we do not need this. * port --disable-color-mode added to configure script * bug Makro PRINT_AGE_OF_YEAR renamed to PRINT_AGE_WITH_YEAR in configure.ac * misc man page zkt-keyman added * misc New command zkt-keyman added as replacement for dnssec-zkt's key management functionality * misc man page zkt-ls added * port Check for ncurses added to Makefile.in * misc Color mode (Option -C) added to zkt-ls (experimental) New source file tcap.c. * misc Deprecate "single linked list" version of ZKT. The binary tree version is the default for years, so the VERSION string does no longer contain a "T". Now, if someone insist on the single link list version (configure --disable-tree) a "S" is added to the version string. Anyway, the code for the single link list version does no longer have the same functionality and will be removed in one of the later releases. * misc New command zkt-ls added as replacement for dnssec-zkt's key listing functionality * func New key algorithms RSASHA256 and RSAHSHA512 added to dki.[ch] and zconf.c New parameter NSEC3 added. Now it's possible to configure an NSEC3_OPTOUT zone. * bug Token parsing function gettok() fixed to recognize tokens with dashes ("zone-statistics" was seen as "zone"). Thanks to Andreas Baess for finding this bug. * bug Fixed bug in (re)salting dynamic zones. sig_zone() and gensalt() needs parameter change for this * func New option -a added to zkt-conf * func In zconf.c CONF_TIMEINT parameter are now able to recognize "unset" values (which is represented internaly as 0) * func Set Max_TTL to sig lifetime for dynamic zones or if Max_TTL is less than 1. max_ttl checks in checkconfig() fixed. * func printconfigdiff() added to zconf.c and used by zkt-conf. Now local configs are printed as diff to site wide config. * misc man page zkt-signer.8 changed to new command syntax * func Per domain logging added. Use parameter LogDomainDir to enable it. For more details see file README.logging. * func distribute.sh supports new action type "distkeys" but is currently not used * misc LOG_FNAMETMPL changed and moved from config_zkt.h to log.h * misc Default soa serial format changed from "Incremental" to "Unixtime" * func dnssec-signer command renamed to zkt-signer. Man page updated. * func New command zkt-conf added as replacement for dnssec-zkt -Z * misc timeint2str() is now global (zconf.c) * func zfparse.c - a rudimentary zone file parser scans minimum and maximum ttl values; adds $INCLUDE dnskey.db zkt 0.99d -- Not released * func Option SIG_DnsKeyKSK for DNSKEY signing with KSK only added * misc BIND 9.7 compability
2011-03-12 17:46:05 +01:00
${INSTALL_MAN} ${WRKSRC}/man/zkt-conf.8 \
${DESTDIR}${PREFIX}/${PKGMANDIR}/man8/zkt-conf.8
${INSTALL_MAN} ${WRKSRC}/man/zkt-ls.8 \
${DESTDIR}${PREFIX}/${PKGMANDIR}/man8/zkt-ls.8
${INSTALL_MAN} ${WRKSRC}/man/zkt-keyman.8 \
${DESTDIR}${PREFIX}/${PKGMANDIR}/man8/zkt-keyman.8
${INSTALL_MAN} ${WRKSRC}/man/zkt-signer.8 \
${DESTDIR}${PREFIX}/${PKGMANDIR}/man8/zkt-signer.8
ZKT is a tool to manage keys and signatures for DNSSEC-zones. The Zone Key Tool consist of two commands: * dnssec-zkt to create and list dnssec zone keys and * dnssec-signer to sign a zone and manage the lifetime of the zone signing keys Both commands are simple wrapper commands around the dnssec-keygen(8) and dnssec-signzone(8) commands provided by BIND.
2010-03-13 20:19:51 +01:00
${INSTALL_DATA} ${WRKSRC}/README \
${DESTDIR}${PREFIX}/share/doc/zkt/README
${INSTALL_DATA} ${WRKSRC}/README.logging \
${DESTDIR}${PREFIX}/share/doc/zkt/README.logging
Add missing mk/curses buildlink. Bump PKGREVISION
2011-12-18 00:43:43 +01:00
.include "../../mk/curses.buildlink3.mk"
ZKT is a tool to manage keys and signatures for DNSSEC-zones. The Zone Key Tool consist of two commands: * dnssec-zkt to create and list dnssec zone keys and * dnssec-signer to sign a zone and manage the lifetime of the zone signing keys Both commands are simple wrapper commands around the dnssec-keygen(8) and dnssec-signzone(8) commands provided by BIND.
2010-03-13 20:19:51 +01:00
.include "../../mk/bsd.pkg.mk"
Reference in a new issue Copy permalink