kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/security/p5-Net-DNS-SEC/Makefile

39 lines
1.2 KiB
Makefile
Raw Normal View History

*: recursive bump for perl 5.34
2021-05-24 21:49:01 +02:00
# $NetBSD: Makefile,v 1.52 2021/05/24 19:54:04 wiz Exp $
Import of p5-Net-DNS-SEC. This Perl module implements DNS Resource Record types that are relevant for DNSSEC operations. The implementation is based on: RFC 2535, RFC 2931 and the latest draft-ietf-dnsext-delegation-signer-0.xy.txt.
2003-12-04 01:33:02 +01:00
p5-Net-DNS-SEC: update to 1.17. **** 1.17 Jun 26, 2020 Recognise BIND private key accessed via symbolic link. **** 1.16 May 11, 2020 Improve testing of verify() functions. Rework code in Digest.pm SEC.xs code reduction. **** 1.15 February 3, 2020 Provide access to OpenSSL message digest implementations. **** 1.14 October 14, 2019 Improve exception capture in test scripts. Support more efficient algorithm mapping in Net::DNS. **** 1.13 May 6, 2019 Tweaks to resolve compilation errors with BoringSSL.
2020-09-07 16:30:22 +02:00
DISTNAME= Net-DNS-SEC-1.17
Import of p5-Net-DNS-SEC. This Perl module implements DNS Resource Record types that are relevant for DNSSEC operations. The implementation is based on: RFC 2535, RFC 2931 and the latest draft-ietf-dnsext-delegation-signer-0.xy.txt.
2003-12-04 01:33:02 +01:00
PKGNAME= p5-${DISTNAME}
*: recursive bump for perl 5.34
2021-05-24 21:49:01 +02:00
PKGREVISION= 1
Import of p5-Net-DNS-SEC. This Perl module implements DNS Resource Record types that are relevant for DNSSEC operations. The implementation is based on: RFC 2535, RFC 2931 and the latest draft-ietf-dnsext-delegation-signer-0.xy.txt.
2003-12-04 01:33:02 +01:00
CATEGORIES= security net perl5
MASTER_SITES= ${MASTER_SITE_PERL_CPAN:=Net/}
Reset maintainer to "pkgsrc-users@NetBSD.org".
2013-03-02 11:44:33 +01:00
MAINTAINER= pkgsrc-users@NetBSD.org
all: migrate homepages from http to https pkglint -r --network --only "migrate" As a side-effect of migrating the homepages, pkglint also fixed a few indentations in unrelated lines. These and the new homepages have been checked manually.
2020-01-26 18:30:40 +01:00
HOMEPAGE= https://www.net-dns.org/
Import of p5-Net-DNS-SEC. This Perl module implements DNS Resource Record types that are relevant for DNSSEC operations. The implementation is based on: RFC 2535, RFC 2931 and the latest draft-ietf-dnsext-delegation-signer-0.xy.txt.
2003-12-04 01:33:02 +01:00
COMMENT= DNSSEC extension to Net::DNS Perl DNS Resolver Module
Updating security/p5-Net-DNS-SEC from 0.15 to 0.16 pkgsrc changes: - Adjust dependencies - Add license definition Upstream changes: ***0.16 March 12, 2010 Feature: KEY inherits DNSKEY This helps maintenance in one part of the code. Feature: keylength methode rt.cpan.org #53468 Added keylength method for RSA and DSA Acknowledgements Hugo Salgado Fix: rt.cpan.org #51778 Empty bitmap would cause error about undefined ARRAY in NSEC/NSEC3. Now the code will allow empty bitmaps gracefully Feature: New Algorithm Support (rt.cpan.org #51092) SHA2 algorithm support, including NSEC3 algorithm parameters updated Acknowledgement Jakob Shlyter Fix: rt.cpan.org #42089 NSEC3 Algorithm support in NSEC3 broken patch by Wes Hardaker
2010-03-16 11:32:38 +01:00
LICENSE= modified-bsd
Import of p5-Net-DNS-SEC. This Perl module implements DNS Resource Record types that are relevant for DNSSEC operations. The implementation is based on: RFC 2535, RFC 2931 and the latest draft-ietf-dnsext-delegation-signer-0.xy.txt.
2003-12-04 01:33:02 +01:00
DEPENDS+= p5-Digest-BubbleBabble>=0.01:../../security/p5-Digest-BubbleBabble
Updated to version 0.14. Pkgsrc changes: - Added support for installation to DESTDIR. - p5-Digest-SHA is a new requirement. Changes since version 0.12: =========================== 0.14 February 14, 2005 FIX: The introducion of the keytag warning triggered a bug with RSAMD5 keys, causing RSAMD5 keys not to be loaded. 0.13 December 9, 2005 FEAT: rt.cpan.org 14588 Added support for passing (a reference to) an array of keys to the RRSIG verify function. FIX/FEAT: The Net::DNS::SEC::Private function will for RSA based keys verify if the keytag in the filename is actually correct. Since at parsing the value of the DNSKEY RR flags is not known we test against the currently defined flag values 256 and 257. If we cannot find a keytag match a warning is printed and Private key generation fails This inconsistency was spotted by Jakob Shlyter. FEAT: Added support for SHA256 to the DS RR. Assigned the expected digest type2 for SHA256 type hashes. Note that this makes the Net::DNS::SEC depend on Digest::SHA instead of Digest::SHA1. The default digest type is still set to 1. NB. The code makes assumptions about the IANA assignment of the digest type. The assignment may change. Do not use SHA256 in production zones!! FIX: rt.cpan.org #15662 Roy Arends noticed and patched the label counting did not ignore an initial asterisk label. FIX: Wes Hardaker noticed the default TTL values for created signatures to be different from the TTLs from the data that is being signed. FIX: Wes Hardaker reported there was a problem with validating RRsets that had ownernames with capitals. The fix depends on a fix in Net::DNS::RR that is available in version 0.53_03 or later of the Net::DNS distribution. FEAT: Propper dealing with mnemonics for algorithm and digest type added to DS FIX/FEAT: Mnemonics were written as RSA/MD5 and RSA/SHA1. This has been corrected tp RSASHA1 and RSAMD5, as in the IANA registry. 0.12_02 June 6, 2005 (beta 2 release for 0.13) Bug: new_from_hash would not correctly create the RR since internally typebm is used to store the data this has been fixed so that the following works Net::DNS::RR->new(name=>$name, ttl=>$ttl, type=>"NSEC", nxtdname=>$nxtdname, typelist=>join(" ",@types) ); FEAT: Introduced the "use bytes" pragma to force character interpretation of all the scalars. Any utf processing by perl makes the code behave unpredictable. 0.12_01 April 18, 2005. (beta release for version 0.13) FEAT (!!!): Changed the symantics of the Net::DNS::Keyset::verify method. Read the perldoc for details. The requirement that each key in a keyset has to be selfsigned has been loosened. FEAT: Added a "carp" to the new methods of the NXT RR. Warning that that record is depricated. FEAT: Cleaned the tests so that RRSIG and DNSKEY are used except for SIG0 based tests. FEAT: Changed the name of the siginceptation[SIC] to siginception. Thanks Jakob Schlyter for notifying me of this mistyping. An alias for the method remains available. FEAT: Renamed unset_sep() to clear_sep(). NOTE: To avoid confusion the Net::DNS::SIG::Private class has been removed. Use Net::DNS::SEC::Private! DOC: Added references to RFC 4033, RFC 4034 and RFC 4035. Rewrote parts of the perlpod.
2007-05-17 19:30:21 +02:00
DEPENDS+= p5-Digest-SHA1>=2.04:../../security/p5-Digest-SHA1
pkgsrc changes: - Updating package for p5 module Net::DNS::SEC from 0.14nb1 to 0.15 - Adjusting / reordering dependencies according to META.yml Upstream changes: ***0.15 December 31, 2008 Fix: digestbin not set when an empty value passed to hash. Feature: Added DLV (rfcc 4431). The RR object is simply a clone of the DS RR and inherits ... everything Feature: Added NSEC3 and NSEC3PARAM support (RFC5155). This adds Mime::Base32 to the module dependency list. The RR type was still experimental at that time and is maintained in Net::DNS::RR. Fix: Test script recognizes change in Time::Local. Note that Time::Local does not deal with dates beyond 03:14:07 UTC on Tuesday, 19 January 2038. Therefore this code has a year 2038 problem. Fix: DS create_from_hash now produces objects that can create wireformat. Other: minor changes to the debug statements added t/05-rr.t (and identified a couple of bugs using it) Fix: a few inconsistencies with respect to parsing of trailing dots. During development the test signatures generated with the BIND tools were re-generated in order to troubleshoot a bug that (most probably) was caused by a version incompatibility between Net::DNS and Net::DNS::SEC. Before release the original test from the 0.14 release were ran against this version too.
2009-07-08 16:10:18 +02:00
DEPENDS+= p5-MIME-Base32-[0-9]*:../../converters/p5-MIME-Base32
DEPENDS+= p5-Net-DNS>=0.64:../../net/p5-Net-DNS
Import of p5-Net-DNS-SEC. This Perl module implements DNS Resource Record types that are relevant for DNSSEC operations. The implementation is based on: RFC 2535, RFC 2931 and the latest draft-ietf-dnsext-delegation-signer-0.xy.txt.
2003-12-04 01:33:02 +01:00
Comment out dependencies of the style {perl>=5.16.6,p5-ExtUtils-ParseXS>=3.15}:../../devel/p5-ExtUtils-ParseXS since pkgsrc enforces the newest perl version anyway, so they should always pick perl, but sometimes (pkg_add) don't due to the design of the {,} syntax. No effective change for the above reason. Ok joerg
2015-07-12 20:56:06 +02:00
#BUILDLINK_API_DEPENDS.perl+= perl>=5.6.1
Import of p5-Net-DNS-SEC. This Perl module implements DNS Resource Record types that are relevant for DNSSEC operations. The implementation is based on: RFC 2535, RFC 2931 and the latest draft-ietf-dnsext-delegation-signer-0.xy.txt.
2003-12-04 01:33:02 +01:00
Turn PERL5_PACKLIST into a relative path instead of an absolute path. These paths are now relative to PERL5_PACKLIST_DIR, which currently defaults to ${PERL5_SITEARCH}. There is no change to the binary packages.
2005-07-13 20:01:18 +02:00
PERL5_PACKLIST= auto/Net/DNS/SEC/.packlist
Import of p5-Net-DNS-SEC. This Perl module implements DNS Resource Record types that are relevant for DNSSEC operations. The implementation is based on: RFC 2535, RFC 2931 and the latest draft-ietf-dnsext-delegation-signer-0.xy.txt.
2003-12-04 01:33:02 +01:00
p5-Net-DNS-SEC: update to 1.10. **** 1.10 Aug 31, 2018 make test_cover now collects SEC.xs test coverage metrics using gcc and gcov.
2018-09-02 09:36:05 +02:00
REPLACE_PERL= demo/getkeyset demo/key2ds demo/make-signed-keyset
Import of p5-Net-DNS-SEC. This Perl module implements DNS Resource Record types that are relevant for DNSSEC operations. The implementation is based on: RFC 2535, RFC 2931 and the latest draft-ietf-dnsext-delegation-signer-0.xy.txt.
2003-12-04 01:33:02 +01:00
Updated to version 0.12 OWN_DIRS was incorrectly used (did not work when PKG_CONFIG=no). INSTALLATION_DIRS creates the directories now and the PLIST removes them. Needs at least net/p5-Net-DNS 0.44 (see changes below). -- Changes since 0.11 ================== FEAT: Added utility function key_difference() to Net::DNS::SEC. See perlpod for details. I needed this in other software and figured they are generic enough to make them available through this module. FEAT: Modified some functions to use DNSKEY and RRSIG instead off KEY and SIG. - Net::DNS::Keyset now uses DNSKEY and RRSIG. - the demo function getkeyset.pl now uses DNSKEY too. FEAT: Added the possibility to create a keyset out of two arrays of dnskey and rrsig object. FEAT: Added some helperfunctions to Net::DNS::SEC::Private to read X509 formated private keys and dump them into bind format. This functionality has not been tested well. BUG : When reading a RRSIG from a packet the signame would not have a trailing dot. FEAT: Removed critical dependency on bubblebabble. It is available to DS if installed but not critically dependend. BUG: - Fixed minor in signing unknown RR types. FEAT: - Prelimanary support for draf-ietf-dnssec-nsec-rdata-02. This depends on support for unknown RR types (Net::DNS version 0.44) FEAT: - To be able to deal with argument supplied as either mnemonics or by value the Net::DNS::SEC::argument method was created. It can be used as a class method but it is also inherited by Net::DNS::RR::RRSIG and Net::DNS::RR::DNSKEY.
2005-04-20 18:22:38 +02:00
DOCSUBDIR= share/doc/${PKGBASE}
EGSUBDIR= share/examples/${PKGBASE}
Import of p5-Net-DNS-SEC. This Perl module implements DNS Resource Record types that are relevant for DNSSEC operations. The implementation is based on: RFC 2535, RFC 2931 and the latest draft-ietf-dnsext-delegation-signer-0.xy.txt.
2003-12-04 01:33:02 +01:00
Updated to version 0.12 OWN_DIRS was incorrectly used (did not work when PKG_CONFIG=no). INSTALLATION_DIRS creates the directories now and the PLIST removes them. Needs at least net/p5-Net-DNS 0.44 (see changes below). -- Changes since 0.11 ================== FEAT: Added utility function key_difference() to Net::DNS::SEC. See perlpod for details. I needed this in other software and figured they are generic enough to make them available through this module. FEAT: Modified some functions to use DNSKEY and RRSIG instead off KEY and SIG. - Net::DNS::Keyset now uses DNSKEY and RRSIG. - the demo function getkeyset.pl now uses DNSKEY too. FEAT: Added the possibility to create a keyset out of two arrays of dnskey and rrsig object. FEAT: Added some helperfunctions to Net::DNS::SEC::Private to read X509 formated private keys and dump them into bind format. This functionality has not been tested well. BUG : When reading a RRSIG from a packet the signame would not have a trailing dot. FEAT: Removed critical dependency on bubblebabble. It is available to DS if installed but not critically dependend. BUG: - Fixed minor in signing unknown RR types. FEAT: - Prelimanary support for draf-ietf-dnssec-nsec-rdata-02. This depends on support for unknown RR types (Net::DNS version 0.44) FEAT: - To be able to deal with argument supplied as either mnemonics or by value the Net::DNS::SEC::argument method was created. It can be used as a class method but it is also inherited by Net::DNS::RR::RRSIG and Net::DNS::RR::DNSKEY.
2005-04-20 18:22:38 +02:00
INSTALLATION_DIRS+= ${DOCSUBDIR} ${EGSUBDIR}
Import of p5-Net-DNS-SEC. This Perl module implements DNS Resource Record types that are relevant for DNSSEC operations. The implementation is based on: RFC 2535, RFC 2931 and the latest draft-ietf-dnsext-delegation-signer-0.xy.txt.
2003-12-04 01:33:02 +01:00
post-install:
Updated to version 0.14. Pkgsrc changes: - Added support for installation to DESTDIR. - p5-Digest-SHA is a new requirement. Changes since version 0.12: =========================== 0.14 February 14, 2005 FIX: The introducion of the keytag warning triggered a bug with RSAMD5 keys, causing RSAMD5 keys not to be loaded. 0.13 December 9, 2005 FEAT: rt.cpan.org 14588 Added support for passing (a reference to) an array of keys to the RRSIG verify function. FIX/FEAT: The Net::DNS::SEC::Private function will for RSA based keys verify if the keytag in the filename is actually correct. Since at parsing the value of the DNSKEY RR flags is not known we test against the currently defined flag values 256 and 257. If we cannot find a keytag match a warning is printed and Private key generation fails This inconsistency was spotted by Jakob Shlyter. FEAT: Added support for SHA256 to the DS RR. Assigned the expected digest type2 for SHA256 type hashes. Note that this makes the Net::DNS::SEC depend on Digest::SHA instead of Digest::SHA1. The default digest type is still set to 1. NB. The code makes assumptions about the IANA assignment of the digest type. The assignment may change. Do not use SHA256 in production zones!! FIX: rt.cpan.org #15662 Roy Arends noticed and patched the label counting did not ignore an initial asterisk label. FIX: Wes Hardaker noticed the default TTL values for created signatures to be different from the TTLs from the data that is being signed. FIX: Wes Hardaker reported there was a problem with validating RRsets that had ownernames with capitals. The fix depends on a fix in Net::DNS::RR that is available in version 0.53_03 or later of the Net::DNS distribution. FEAT: Propper dealing with mnemonics for algorithm and digest type added to DS FIX/FEAT: Mnemonics were written as RSA/MD5 and RSA/SHA1. This has been corrected tp RSASHA1 and RSAMD5, as in the IANA registry. 0.12_02 June 6, 2005 (beta 2 release for 0.13) Bug: new_from_hash would not correctly create the RR since internally typebm is used to store the data this has been fixed so that the following works Net::DNS::RR->new(name=>$name, ttl=>$ttl, type=>"NSEC", nxtdname=>$nxtdname, typelist=>join(" ",@types) ); FEAT: Introduced the "use bytes" pragma to force character interpretation of all the scalars. Any utf processing by perl makes the code behave unpredictable. 0.12_01 April 18, 2005. (beta release for version 0.13) FEAT (!!!): Changed the symantics of the Net::DNS::Keyset::verify method. Read the perldoc for details. The requirement that each key in a keyset has to be selfsigned has been loosened. FEAT: Added a "carp" to the new methods of the NXT RR. Warning that that record is depricated. FEAT: Cleaned the tests so that RRSIG and DNSKEY are used except for SIG0 based tests. FEAT: Changed the name of the siginceptation[SIC] to siginception. Thanks Jakob Schlyter for notifying me of this mistyping. An alias for the method remains available. FEAT: Renamed unset_sep() to clear_sep(). NOTE: To avoid confusion the Net::DNS::SIG::Private class has been removed. Use Net::DNS::SEC::Private! DOC: Added references to RFC 4033, RFC 4034 and RFC 4035. Rewrote parts of the perlpod.
2007-05-17 19:30:21 +02:00
${INSTALL_DATA} ${WRKSRC}/README ${DESTDIR}${PREFIX}/${DOCSUBDIR}
p5-Net-DNS-SEC: update to 1.10. **** 1.10 Aug 31, 2018 make test_cover now collects SEC.xs test coverage metrics using gcc and gcov.
2018-09-02 09:36:05 +02:00
.for f in getkeyset key2ds make-signed-keyset
Updated to version 0.14. Pkgsrc changes: - Added support for installation to DESTDIR. - p5-Digest-SHA is a new requirement. Changes since version 0.12: =========================== 0.14 February 14, 2005 FIX: The introducion of the keytag warning triggered a bug with RSAMD5 keys, causing RSAMD5 keys not to be loaded. 0.13 December 9, 2005 FEAT: rt.cpan.org 14588 Added support for passing (a reference to) an array of keys to the RRSIG verify function. FIX/FEAT: The Net::DNS::SEC::Private function will for RSA based keys verify if the keytag in the filename is actually correct. Since at parsing the value of the DNSKEY RR flags is not known we test against the currently defined flag values 256 and 257. If we cannot find a keytag match a warning is printed and Private key generation fails This inconsistency was spotted by Jakob Shlyter. FEAT: Added support for SHA256 to the DS RR. Assigned the expected digest type2 for SHA256 type hashes. Note that this makes the Net::DNS::SEC depend on Digest::SHA instead of Digest::SHA1. The default digest type is still set to 1. NB. The code makes assumptions about the IANA assignment of the digest type. The assignment may change. Do not use SHA256 in production zones!! FIX: rt.cpan.org #15662 Roy Arends noticed and patched the label counting did not ignore an initial asterisk label. FIX: Wes Hardaker noticed the default TTL values for created signatures to be different from the TTLs from the data that is being signed. FIX: Wes Hardaker reported there was a problem with validating RRsets that had ownernames with capitals. The fix depends on a fix in Net::DNS::RR that is available in version 0.53_03 or later of the Net::DNS distribution. FEAT: Propper dealing with mnemonics for algorithm and digest type added to DS FIX/FEAT: Mnemonics were written as RSA/MD5 and RSA/SHA1. This has been corrected tp RSASHA1 and RSAMD5, as in the IANA registry. 0.12_02 June 6, 2005 (beta 2 release for 0.13) Bug: new_from_hash would not correctly create the RR since internally typebm is used to store the data this has been fixed so that the following works Net::DNS::RR->new(name=>$name, ttl=>$ttl, type=>"NSEC", nxtdname=>$nxtdname, typelist=>join(" ",@types) ); FEAT: Introduced the "use bytes" pragma to force character interpretation of all the scalars. Any utf processing by perl makes the code behave unpredictable. 0.12_01 April 18, 2005. (beta release for version 0.13) FEAT (!!!): Changed the symantics of the Net::DNS::Keyset::verify method. Read the perldoc for details. The requirement that each key in a keyset has to be selfsigned has been loosened. FEAT: Added a "carp" to the new methods of the NXT RR. Warning that that record is depricated. FEAT: Cleaned the tests so that RRSIG and DNSKEY are used except for SIG0 based tests. FEAT: Changed the name of the siginceptation[SIC] to siginception. Thanks Jakob Schlyter for notifying me of this mistyping. An alias for the method remains available. FEAT: Renamed unset_sep() to clear_sep(). NOTE: To avoid confusion the Net::DNS::SIG::Private class has been removed. Use Net::DNS::SEC::Private! DOC: Added references to RFC 4033, RFC 4034 and RFC 4035. Rewrote parts of the perlpod.
2007-05-17 19:30:21 +02:00
${INSTALL_SCRIPT} ${WRKSRC}/demo/${f} ${DESTDIR}${PREFIX}/${EGSUBDIR}
Import of p5-Net-DNS-SEC. This Perl module implements DNS Resource Record types that are relevant for DNSSEC operations. The implementation is based on: RFC 2535, RFC 2931 and the latest draft-ietf-dnsext-delegation-signer-0.xy.txt.
2003-12-04 01:33:02 +01:00
.endfor
.include "../../lang/perl5/module.mk"
p5-Net-DNS-SEC: Requires openssl.
2018-07-27 22:37:05 +02:00
.include "../../security/openssl/buildlink3.mk"
Import of p5-Net-DNS-SEC. This Perl module implements DNS Resource Record types that are relevant for DNSSEC operations. The implementation is based on: RFC 2535, RFC 2931 and the latest draft-ietf-dnsext-delegation-signer-0.xy.txt.
2003-12-04 01:33:02 +01:00
.include "../../mk/bsd.pkg.mk"
Reference in a new issue Copy permalink