kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/security/opendnssec/Makefile

94 lines
2.6 KiB
Makefile
Raw Normal View History

*: Move SUBST_STAGE from post-patch to pre-configure Performing substitutions during post-patch breaks tools such as mkpatches, making it very difficult to regenerate correct patches after making changes, and often leading to substituted string replacements being committed.
2018-07-04 15:40:07 +02:00
# $NetBSD: Makefile,v 1.71 2018/07/04 13:40:34 jperkin Exp $
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
#
Update OpenDNSSEC to version 1.4.13. Pkgsrc changes: * Remove patch now integrated. Upstream changes: OpenDNSSEC 1.4.13 - 2017-01-20 * OPENDNSSEC-778: Double NSEC3PARAM record after resalt. * OPENDNSSEC-853: Fixed serial_xfr_acquired not updated in state file. * Wrong error was sometimes being print on failing TCP connect. * Add support for OpenSSL 1.1.0. * OPENDNSSEC-866: Script for migration between MySQL and SQLite was outdated.
2017-01-20 17:12:39 +01:00
DISTNAME= opendnssec-1.4.13
revbump after icu update
2018-04-14 09:33:52 +02:00
PKGREVISION= 5
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
CATEGORIES= security net
Follow some redirects.
2017-09-03 10:53:04 +02:00
MASTER_SITES= https://www.opendnssec.org/files/source/
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
fixed email
2010-05-06 16:56:16 +02:00
MAINTAINER= pettai@NetBSD.org
Follow some redirects.
2017-09-03 10:53:04 +02:00
HOMEPAGE= https://www.opendnssec.org/
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
COMMENT= OSS for a fast and easy DNSSEC deployment
LICENSE= 2-clause-bsd
Update OpenDNSSEC to version 1.4.12. Local changes (retained from earlier versions): * Some adaptations of the build setup (conversion scripts etc.) * in signer/ixfr.c, log the zone name if the soamin assertion trigers * in signer/zone.c, if there's a bad ixfr journal file, save it, for debug Upstream changes: News: This is a bug fix release targeting a memory leak in the signer when being used in the "bump in the wire" model where the signer would send out notify messages and respond to IXFR requests for the signed zone. This typically would manifest itself with very frequent outgoing IXFRs over a longer period of time. When upgrading from 1.4.10 (the 1.4.11 release was skipped) no migration steps are needed. For upgrading from earlier releases see the migration steps in the individual releases, most notably in 1.4.8.2. This version of OpenDNSSEC does however require a slightly less older minimal version of the library ldns. Fixes: * OPENDNSSEC-808: Crash on query with empty query section (thanks Havard Eidnes). * SUPPORT-191: Regression, Must accept notify without SOA (thanks Christos Trochalakis). * OPENDNSSEC-845: memory leak occuring when responding to IXFR out when having had multiple updates. * OPENDNSSEC-805: Avoid full resign due to mismatch in backup file when upgrading from 1.4.8 or later. * OPENDNSSEC-828: parsing zone list could show data from next zone when zones iterated on single line. * OPENDNSSEC-811,OPENDNSSEC-827,e.o.: compiler warnings and other static code analysis cleanup * OPENDNSSEC-847: Broken DNS IN notifications when pkt answer section is empty. * OPENDNSSEC-838: Crash in signer after having removed a zone. * Update dependency to ldns to version 1.6.17 enabling the DNS HIP record. * Prevent responding to queries when not fully started yet.
2016-11-06 13:54:35 +01:00
DEPENDS+= ldns>=1.6.17:../../net/ldns
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
BUILD_DEPENDS+= CUnit-[0-9]*:../../devel/cunit
BUILD_DEFS+= VARBASE
OpenDNSSEC 1.1.0: * Partial Auditor added * Dnsruby-1.46 required * Improved error messages when the system runs out of keys * Optimise communication of signconfs for multiple zones sharing keys. Group zones in zonelist.xml by policy to get this benefit. * Bugreport #101: Signer Engine now maintains its own pidfile. * Jitter redefined: now in the range of [-jitter, ..., +jitter] * Optimized sorter: quicksorter (sorter becomes obsolete). * Optimized zone_reader, includes nseccing/nsec3ing (nseccer and nsec3er become obsolete). * Enable database selection using --with-database-backend={sqlite3|mysql} * Enable the EPP-client using --enable-eppclient For sending DS RR to the parent zone (experimental) * Turn NSEC3 OptOut off by default * Install kasp2html XML stylesheet * Add simple kasp2html conversion script * DNSKEY records communicated to an external script if configured * The command 'ods-signer restart' is removed. * Signer Engine now also reuses signatures after a change in NSEC(3) configuration or rolling keys. * Quicksorter defaults to class IN. And a lot of bugfixes...
2010-06-16 02:19:08 +02:00
USE_TOOLS+= bash gmake
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
CONFIG_SHELL= ${BASH}
Pull in OpenSSL to fix non-builtin case. Use C99. Fixes SunOS build. Patches from Sebastian Wiedenroth.
2013-12-04 18:03:02 +01:00
USE_LANGUAGES= c99 c++
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
USE_LIBTOOL= yes
GNU_CONFIGURE= yes
CONFIGURE_ARGS+= --prefix=${PREFIX:Q}
CONFIGURE_ARGS+= --localstatedir=${VARBASE}
Pull in OpenSSL to fix non-builtin case. Use C99. Fixes SunOS build. Patches from Sebastian Wiedenroth.
2013-12-04 18:03:02 +01:00
CONFIGURE_ARGS+= --with-ssl=${BUILDLINK_PREFIX.openssl}
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
OpenDNSSEC 1.4.5 Bugfixes: * OPENDNSSEC-607: libhsm not using all mandatory attributes for GOST key generation. * OPENDNSSEC-609: ods-ksmutil: 'key list' command fails with error in 1.4.4 on MySQL.
2014-06-09 12:18:12 +02:00
REPLACE_PERL= enforcer/utils/convert_database.pl
REPLACE_PERL+= enforcer/utils/migrate_id_mysql.pl
REPLACE_PERL+= enforcer/utils/migrate_keyshare_mysql.pl
REPLACE_PERL+= enforcer/utils/migrate_keyshare_sqlite3.pl
REPLACE_PERL+= enforcer/utils/migrate_to_ng_mysql.pl
REPLACE_PERL+= enforcer/utils/migrate_to_ng_sqlite.pl
OpenDNSSEC 1.1.0: * Partial Auditor added * Dnsruby-1.46 required * Improved error messages when the system runs out of keys * Optimise communication of signconfs for multiple zones sharing keys. Group zones in zonelist.xml by policy to get this benefit. * Bugreport #101: Signer Engine now maintains its own pidfile. * Jitter redefined: now in the range of [-jitter, ..., +jitter] * Optimized sorter: quicksorter (sorter becomes obsolete). * Optimized zone_reader, includes nseccing/nsec3ing (nseccer and nsec3er become obsolete). * Enable database selection using --with-database-backend={sqlite3|mysql} * Enable the EPP-client using --enable-eppclient For sending DS RR to the parent zone (experimental) * Turn NSEC3 OptOut off by default * Install kasp2html XML stylesheet * Add simple kasp2html conversion script * DNSKEY records communicated to an external script if configured * The command 'ods-signer restart' is removed. * Signer Engine now also reuses signatures after a change in NSEC(3) configuration or rolling keys. * Quicksorter defaults to class IN. And a lot of bugfixes...
2010-06-16 02:19:08 +02:00
ODS_USER?= opendnssec
ODS_GROUP?= opendnssec
PKG_GROUPS= ${ODS_GROUP}
PKG_USERS= ${ODS_USER}:${ODS_GROUP}
PKG_GECOS.${ODS_USER}= OpenDNSSEC user
PKG_HOME.${ODS_USER}= ${VARBASE}/opendnssec
PKG_SHELL.${ODS_USER}= ${SH}
PKG_USERS_VARS+= ODS_USER
PKG_GROUPS_VARS+= ODS_GROUP
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
EGDIR= ${PREFIX}/share/examples/opendnssec
OpenDNSSEC 1.2.1: * ldns 1.6.9 is required for bugfixes. * dnsruby-1.52 required for bugfixes. Bugfixes: * Auditor: 'make check' now works when srcdir != builddir. * Auditor: Include the 'make check' files in the tarball. * Enforcer: Fix the migration script for SQLite. * Enforcer: Increase size of keypairs(id) field in MySQL to allow more than 32767 keys; see MIGRATION for details. * Enforcer: Minor change to NOT_READY_KEY error message. * libhsm: Increase the maximum number of attached HSM:s from 10 to 100. * ods-ksmutil: Send trivial MySQL messages to stdout when exporting zonelist etc. Otherwise the resulting XML needs to be edited by hand. * ods-control: Fix for Bourne shell. * Signer Engine: Prevent race condition when setting up the workers and the command handler. * Signer Engine: Check if the signature exists before recycling it. * Signer Engine: Quit when there are errors in the configuration. * Signer Engine: Enable core dump on failure. * Signer Engine: Explicitly close down log msg with null. * Signer Engine: Backup state after writing output. * Signer Engine: Allow update of serial if internal structure is not initialized.
2011-03-21 16:52:25 +01:00
DOCDIR= ${PREFIX}/share/doc/opendnssec
Fix packages that had INSTALLATION_DIRS+=$(PKG_SYSCONFDIR}. Set PKG_SYSCONFSUBDIR where appropriate, and use {MAKE,OWN}_DIRS to create the directory tree under ${PKG_SYSCONFDIR} instead of using INSTALLATION_DIRS. Bump the PKGREVISION of packages that changed due to changes in the package install scripts.
2017-08-07 19:56:12 +02:00
PKG_SYSCONFSUBDIR= opendnssec
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
SUBST_CLASSES+= paths
SUBST_FILES.paths= ${WRKSRC}/conf/Makefile.in
*: Move SUBST_STAGE from post-patch to pre-configure Performing substitutions during post-patch breaks tools such as mkpatches, making it very difficult to regenerate correct patches after making changes, and often leading to substituted string replacements being committed.
2018-07-04 15:40:07 +02:00
SUBST_STAGE.paths= pre-configure
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
SUBST_SED.paths= -e 's,@EGDIR@,${EGDIR},'
CXXFLAGS.NetBSD+= -D_NETBSD_SOURCE
Update OpenDNSSEC from version 1.3.14nb1 to 1.4.1. Pkgsrc changes: * Get rid of ruby dependencies, since the validator is no longer included in OpenDNSSEC * Adapt PLIST to changes in installed files * Add a patch so that the database migration scripts are installed as part of the package Upstream notable changes: * SUPPORT-58: Extend ods-signer sign <zone> with -serial <nr> so that the user can specify the SOA serial to use in the signed zone [OPENDNSSEC-401]. * OPENDNSSEC-91: Make the keytype flag required when rolling keys Bugfixes: * SUPPORT-60: Fix datecounter in case inbound serial is higher than outbound serial [OPENDNSSEC-420]. * OPENDNSSEC-247: Signer Engine: TTL on NSEC3 was not updated on SOA Minimum change. * OPENDNSSEC-421: Signer Engine: Fix assertion error in case NSEC3 hash algorithm in signconf is not SHA1. * OPENDNSSEC-421: ods-kaspcheck: Check whether NSEC3 hash algorithm in kasp is valid. * Bugfix: The time when inbound serial is acquired was reset invalidly, could cause OpenDNSSEC wanting AXFR responses while requesting IXFR (thanks Stuart Lau). * Bugfix: Fix malform in Outbound IXFR/TCP subsequent packet (thanks Stuart Lau). * OPENDNSSEC-398: The ods-ksmutil key rollover command does not work correctly when rolling all keys using the -policy option
2013-08-22 13:05:45 +02:00
CONF_FILES+= ${EGDIR}/addns.xml.sample \
Fix packages that had INSTALLATION_DIRS+=$(PKG_SYSCONFDIR}. Set PKG_SYSCONFSUBDIR where appropriate, and use {MAKE,OWN}_DIRS to create the directory tree under ${PKG_SYSCONFDIR} instead of using INSTALLATION_DIRS. Bump the PKGREVISION of packages that changed due to changes in the package install scripts.
2017-08-07 19:56:12 +02:00
${PKG_SYSCONFDIR}/addns.xml
Update OpenDNSSEC from version 1.3.14nb1 to 1.4.1. Pkgsrc changes: * Get rid of ruby dependencies, since the validator is no longer included in OpenDNSSEC * Adapt PLIST to changes in installed files * Add a patch so that the database migration scripts are installed as part of the package Upstream notable changes: * SUPPORT-58: Extend ods-signer sign <zone> with -serial <nr> so that the user can specify the SOA serial to use in the signed zone [OPENDNSSEC-401]. * OPENDNSSEC-91: Make the keytype flag required when rolling keys Bugfixes: * SUPPORT-60: Fix datecounter in case inbound serial is higher than outbound serial [OPENDNSSEC-420]. * OPENDNSSEC-247: Signer Engine: TTL on NSEC3 was not updated on SOA Minimum change. * OPENDNSSEC-421: Signer Engine: Fix assertion error in case NSEC3 hash algorithm in signconf is not SHA1. * OPENDNSSEC-421: ods-kaspcheck: Check whether NSEC3 hash algorithm in kasp is valid. * Bugfix: The time when inbound serial is acquired was reset invalidly, could cause OpenDNSSEC wanting AXFR responses while requesting IXFR (thanks Stuart Lau). * Bugfix: Fix malform in Outbound IXFR/TCP subsequent packet (thanks Stuart Lau). * OPENDNSSEC-398: The ods-ksmutil key rollover command does not work correctly when rolling all keys using the -policy option
2013-08-22 13:05:45 +02:00
CONF_FILES+= ${EGDIR}/conf.xml.sample \
Fix packages that had INSTALLATION_DIRS+=$(PKG_SYSCONFDIR}. Set PKG_SYSCONFSUBDIR where appropriate, and use {MAKE,OWN}_DIRS to create the directory tree under ${PKG_SYSCONFDIR} instead of using INSTALLATION_DIRS. Bump the PKGREVISION of packages that changed due to changes in the package install scripts.
2017-08-07 19:56:12 +02:00
${PKG_SYSCONFDIR}/conf.xml
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
CONF_FILES+= ${EGDIR}/kasp.xml.sample \
Fix packages that had INSTALLATION_DIRS+=$(PKG_SYSCONFDIR}. Set PKG_SYSCONFSUBDIR where appropriate, and use {MAKE,OWN}_DIRS to create the directory tree under ${PKG_SYSCONFDIR} instead of using INSTALLATION_DIRS. Bump the PKGREVISION of packages that changed due to changes in the package install scripts.
2017-08-07 19:56:12 +02:00
${PKG_SYSCONFDIR}/kasp.xml
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
CONF_FILES+= ${EGDIR}/zonelist.xml.sample \
Fix packages that had INSTALLATION_DIRS+=$(PKG_SYSCONFDIR}. Set PKG_SYSCONFSUBDIR where appropriate, and use {MAKE,OWN}_DIRS to create the directory tree under ${PKG_SYSCONFDIR} instead of using INSTALLATION_DIRS. Bump the PKGREVISION of packages that changed due to changes in the package install scripts.
2017-08-07 19:56:12 +02:00
${PKG_SYSCONFDIR}/zonelist.xml
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
Fix packages that had INSTALLATION_DIRS+=$(PKG_SYSCONFDIR}. Set PKG_SYSCONFSUBDIR where appropriate, and use {MAKE,OWN}_DIRS to create the directory tree under ${PKG_SYSCONFDIR} instead of using INSTALLATION_DIRS. Bump the PKGREVISION of packages that changed due to changes in the package install scripts.
2017-08-07 19:56:12 +02:00
INSTALLATION_DIRS= ${DOCDIR} ${EGDIR}
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
INSTALLATION_DIRS+= share/opendnssec
INSTALLATION_DIRS+= lib/opendnssec
INSTALLATION_DIRS+= lib/opendnssec/signer
INSTALLATION_DIRS+= lib/opendnssec/kasp_auditor
OpenDNSSEC 1.2.0: Bugfixes: * Enforcer: Fixed a number of build warnings. OpenDNSSEC 1.2.0rc3: * Moved migration instructions to the file MIGRATION Bugfixes: * Bugreport #199: The previous DB schema change made the zone removal broken. * Enforcer: When retiring old KSK, use TTL(ds) and not TTL(ksk). * Enforcer: Minimize the set of DS RRs sent to DelegationSignerSubmitCommand. * Enforcer: Replace tab with a space character in the DNSKEY printed to syslog. * Enforcer: Fixed pontential format string bug. * ods-ksmutil: Log to syslog when ds-seen changes a key to active/standby. * Signer Engine: Don't be smart with RRSIG TTLs, the hsm will set them for you. * Signer Engine: Set notify command for zone when receiving ods-signer update. * Signer Engine: Update TTL of NSEC(3) records if SOA Minimum has changed in KASP. * Signer Engine: Now logs to the correct facility. * Signer Engine: Also remove NSEC records when detecting changes in signconf <Denial> * Signer Engine: Dropped privileges before starting Zonefetcher. OpenDNSSEC 1.2.0rc2: Bugfixes: * Signer Engine: Use the correct TTL for RRs after the $INCLUDE directive. * Signer Engine: Also create new signature if TTL of RR has changed. * Signer Engine: Drop old NSEC/NSEC3 records. * ods-ksmutil: Fixed some memory leaks. OpenDNSSEC 1.2.0rc1: * New commandline option for the signer: ods-signer running. * Allow connection to different MySQL ports in the Enforcer. * Tone down and explain warning when converting M or Y to seconds * ldns 1.6.7 is required for bugfixes * dnsruby 1.51 is required for bugfixes Bugfixes: * Bugreport #187: ods-control signer start will return non-zero if start up failed (uses ods-signer running). * Narrow glue at the zone cut is allowed, do not consider it as occluded. * Move zone fetcher output to correct input adapter file. * Enforcer shared keys on zones with ShareKeys disabled. * Make names of key states consistent. * Signer Engine file descriptor leak fix on engine.sock. * Set explicit "unlimited" repository capacity to prevent random integer being read. Requires "ods-ksmutil update conf" to be run if using an existing database. * Fix issue with key generation creating too many keys Ticket #194. * Bugreport #189: Auditor did not handle white-space-seperated substrings for base64 text * Bugreport #190: Auditor (and signer) does not handle case correctly * Signer now silence stdout-output from the notify command OpenDNSSEC 1.2.0b1: * A new signer engine, written in c. Zones are maintained in memory, instead of in files on disk. * Removed the python and python-4suite-xml dependencies. * Remove separate autoconf for libhsm/conf/enforcer. * Add option to disable building the signer. * Signer logs statistics just after outputting a new signed zone. * libhsm will skip processing (and not create) any public keys if the per repository option <SkipPublicKey/> is set. * Keysharing improved - keys can now exist in different states on each zone that the key is in use for. * Backup prepare/commit/rollback added for 2-step backups without taking the enforcer offline. * Standby keys are now optional (default to 0) and should be considered experimental. Bugfixes: * Fix semantics of refresh value in Signer Engine. * Auditor handles chains of empty nonterminals correctly. * Recalculate salt immediately if the saltlength is changed. * libhsm connected to slot 0 if the token label was not found. An error is now returned instead of connecting to the slot. * Bugreport #102: Removed the obsoleted python-4suite-xml dependency. * Fixed Known Issue: KSK rollover requires manual timing. * Fixed Known Issue: Key rollover and reuse of signatures. * Fixed Known Issue: Issue with sharing keys and adding zones. * Fixed Known Issue: Quicksorter does not allow certain owner names (Quicksorter is removed, signer now reads and sorts the zone).
2011-01-24 21:30:28 +01:00
OWN_DIRS+= ${VARBASE}/opendnssec
OWN_DIRS+= ${VARBASE}/opendnssec/tmp
OWN_DIRS+= ${VARBASE}/opendnssec/signconf
OWN_DIRS+= ${VARBASE}/opendnssec/signed
OWN_DIRS+= ${VARBASE}/opendnssec/unsigned
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
Add an rc.d script for NetBSD.
2014-10-28 14:26:37 +01:00
RCD_SCRIPTS= opendnssec
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
.include "options.mk"
pre-install:
Fix packages that had INSTALLATION_DIRS+=$(PKG_SYSCONFDIR}. Set PKG_SYSCONFSUBDIR where appropriate, and use {MAKE,OWN}_DIRS to create the directory tree under ${PKG_SYSCONFDIR} instead of using INSTALLATION_DIRS. Bump the PKGREVISION of packages that changed due to changes in the package install scripts.
2017-08-07 19:56:12 +02:00
${MKDIR} ${DESTDIR}${PKG_SYSCONFDIR}
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
OpenDNSSEC 1.2.1: * ldns 1.6.9 is required for bugfixes. * dnsruby-1.52 required for bugfixes. Bugfixes: * Auditor: 'make check' now works when srcdir != builddir. * Auditor: Include the 'make check' files in the tarball. * Enforcer: Fix the migration script for SQLite. * Enforcer: Increase size of keypairs(id) field in MySQL to allow more than 32767 keys; see MIGRATION for details. * Enforcer: Minor change to NOT_READY_KEY error message. * libhsm: Increase the maximum number of attached HSM:s from 10 to 100. * ods-ksmutil: Send trivial MySQL messages to stdout when exporting zonelist etc. Otherwise the resulting XML needs to be edited by hand. * ods-control: Fix for Bourne shell. * Signer Engine: Prevent race condition when setting up the workers and the command handler. * Signer Engine: Check if the signature exists before recycling it. * Signer Engine: Quit when there are errors in the configuration. * Signer Engine: Enable core dump on failure. * Signer Engine: Explicitly close down log msg with null. * Signer Engine: Backup state after writing output. * Signer Engine: Allow update of serial if internal structure is not initialized.
2011-03-21 16:52:25 +01:00
post-install:
${INSTALL} ${WRKSRC}/KNOWN_ISSUES ${DESTDIR}${DOCDIR}
${INSTALL} ${WRKSRC}/MIGRATION ${DESTDIR}${DOCDIR}
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
.include "../../databases/sqlite3/buildlink3.mk"
Pull in OpenSSL to fix non-builtin case. Use C99. Fixes SunOS build. Patches from Sebastian Wiedenroth.
2013-12-04 18:03:02 +01:00
.include "../../net/ldns/buildlink3.mk"
.include "../../security/openssl/buildlink3.mk"
.include "../../textproc/libxml2/buildlink3.mk"
The OpenDNSSEC project announces the development of Open Source software that manages the security of domain names on the Internet. The project intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.
2010-05-06 14:50:17 +02:00
.include "../../mk/bsd.pkg.mk"
Reference in a new issue Copy permalink