77b9b55e05
Bugfixes: * Enforcer: Fixed a number of build warnings. OpenDNSSEC 1.2.0rc3: * Moved migration instructions to the file MIGRATION Bugfixes: * Bugreport #199: The previous DB schema change made the zone removal broken. * Enforcer: When retiring old KSK, use TTL(ds) and not TTL(ksk). * Enforcer: Minimize the set of DS RRs sent to DelegationSignerSubmitCommand. * Enforcer: Replace tab with a space character in the DNSKEY printed to syslog. * Enforcer: Fixed pontential format string bug. * ods-ksmutil: Log to syslog when ds-seen changes a key to active/standby. * Signer Engine: Don't be smart with RRSIG TTLs, the hsm will set them for you. * Signer Engine: Set notify command for zone when receiving ods-signer update. * Signer Engine: Update TTL of NSEC(3) records if SOA Minimum has changed in KASP. * Signer Engine: Now logs to the correct facility. * Signer Engine: Also remove NSEC records when detecting changes in signconf <Denial> * Signer Engine: Dropped privileges before starting Zonefetcher. OpenDNSSEC 1.2.0rc2: Bugfixes: * Signer Engine: Use the correct TTL for RRs after the $INCLUDE directive. * Signer Engine: Also create new signature if TTL of RR has changed. * Signer Engine: Drop old NSEC/NSEC3 records. * ods-ksmutil: Fixed some memory leaks. OpenDNSSEC 1.2.0rc1: * New commandline option for the signer: ods-signer running. * Allow connection to different MySQL ports in the Enforcer. * Tone down and explain warning when converting M or Y to seconds * ldns 1.6.7 is required for bugfixes * dnsruby 1.51 is required for bugfixes Bugfixes: * Bugreport #187: ods-control signer start will return non-zero if start up failed (uses ods-signer running). * Narrow glue at the zone cut is allowed, do not consider it as occluded. * Move zone fetcher output to correct input adapter file. * Enforcer shared keys on zones with ShareKeys disabled. * Make names of key states consistent. * Signer Engine file descriptor leak fix on engine.sock. * Set explicit "unlimited" repository capacity to prevent random integer being read. Requires "ods-ksmutil update conf" to be run if using an existing database. * Fix issue with key generation creating too many keys Ticket #194. * Bugreport #189: Auditor did not handle white-space-seperated substrings for base64 text * Bugreport #190: Auditor (and signer) does not handle case correctly * Signer now silence stdout-output from the notify command OpenDNSSEC 1.2.0b1: * A new signer engine, written in c. Zones are maintained in memory, instead of in files on disk. * Removed the python and python-4suite-xml dependencies. * Remove separate autoconf for libhsm/conf/enforcer. * Add option to disable building the signer. * Signer logs statistics just after outputting a new signed zone. * libhsm will skip processing (and not create) any public keys if the per repository option <SkipPublicKey/> is set. * Keysharing improved - keys can now exist in different states on each zone that the key is in use for. * Backup prepare/commit/rollback added for 2-step backups without taking the enforcer offline. * Standby keys are now optional (default to 0) and should be considered experimental. Bugfixes: * Fix semantics of refresh value in Signer Engine. * Auditor handles chains of empty nonterminals correctly. * Recalculate salt immediately if the saltlength is changed. * libhsm connected to slot 0 if the token label was not found. An error is now returned instead of connecting to the slot. * Bugreport #102: Removed the obsoleted python-4suite-xml dependency. * Fixed Known Issue: KSK rollover requires manual timing. * Fixed Known Issue: Key rollover and reuse of signatures. * Fixed Known Issue: Issue with sharing keys and adding zones. * Fixed Known Issue: Quicksorter does not allow certain owner names (Quicksorter is removed, signer now reads and sorts the zone).
83 lines
2.3 KiB
Makefile
83 lines
2.3 KiB
Makefile
# $NetBSD: Makefile,v 1.9 2011/01/24 20:30:28 pettai Exp $
|
|
#
|
|
|
|
DISTNAME= opendnssec-1.2.0
|
|
CATEGORIES= security net
|
|
MASTER_SITES= http://www.opendnssec.org/files/source/
|
|
|
|
MAINTAINER= pettai@NetBSD.org
|
|
HOMEPAGE= http://www.opendnssec.org/
|
|
COMMENT= OSS for a fast and easy DNSSEC deployment
|
|
LICENSE= 2-clause-bsd
|
|
|
|
DEPENDS+= ldns>=1.6.7:../../net/ldns
|
|
DEPENDS+= ${RUBY_PKGPREFIX}-rubygems-[0-9]*:../../misc/rubygems
|
|
DEPENDS+= ${RUBY_PKGPREFIX}-dnsruby>=1.51:../../net/ruby-dnsruby
|
|
BUILD_DEPENDS+= CUnit-[0-9]*:../../devel/cunit
|
|
|
|
PKG_DESTDIR_SUPPORT= user-destdir
|
|
|
|
BUILD_DEFS+= VARBASE
|
|
|
|
USE_TOOLS+= bash gmake
|
|
CONFIG_SHELL= ${BASH}
|
|
USE_LANGUAGES= c c++
|
|
USE_LIBTOOL= yes
|
|
|
|
GNU_CONFIGURE= yes
|
|
CONFIGURE_ARGS+= --prefix=${PREFIX:Q}
|
|
CONFIGURE_ARGS+= --localstatedir=${VARBASE}
|
|
CONFIGURE_ENV+= RUBY=${RUBY}
|
|
|
|
ODS_USER?= opendnssec
|
|
ODS_GROUP?= opendnssec
|
|
|
|
PKG_GROUPS= ${ODS_GROUP}
|
|
PKG_USERS= ${ODS_USER}:${ODS_GROUP}
|
|
PKG_GECOS.${ODS_USER}= OpenDNSSEC user
|
|
PKG_HOME.${ODS_USER}= ${VARBASE}/opendnssec
|
|
PKG_SHELL.${ODS_USER}= ${SH}
|
|
PKG_USERS_VARS+= ODS_USER
|
|
PKG_GROUPS_VARS+= ODS_GROUP
|
|
|
|
EGDIR= ${PREFIX}/share/examples/opendnssec
|
|
ODS_SYSCONFDIR= ${PKG_SYSCONFDIR}/opendnssec
|
|
|
|
SUBST_CLASSES+= paths
|
|
SUBST_FILES.paths= ${WRKSRC}/conf/Makefile.in
|
|
SUBST_STAGE.paths= post-patch
|
|
SUBST_SED.paths= -e 's,@EGDIR@,${EGDIR},'
|
|
|
|
CXXFLAGS.NetBSD+= -D_NETBSD_SOURCE
|
|
|
|
CONF_FILES= ${EGDIR}/conf.xml.sample \
|
|
${ODS_SYSCONFDIR}/conf.xml
|
|
CONF_FILES+= ${EGDIR}/kasp.xml.sample \
|
|
${ODS_SYSCONFDIR}/kasp.xml
|
|
CONF_FILES+= ${EGDIR}/zonefetch.xml.sample \
|
|
${ODS_SYSCONFDIR}/zonefetch.xml
|
|
CONF_FILES+= ${EGDIR}/zonelist.xml.sample \
|
|
${ODS_SYSCONFDIR}/zonelist.xml
|
|
|
|
INSTALLATION_DIRS= ${EGDIR} ${ODS_SYSCONFDIR}
|
|
INSTALLATION_DIRS+= share/opendnssec
|
|
INSTALLATION_DIRS+= lib/opendnssec
|
|
INSTALLATION_DIRS+= lib/opendnssec/signer
|
|
INSTALLATION_DIRS+= lib/opendnssec/kasp_auditor
|
|
OWN_DIRS+= ${VARBASE}/opendnssec
|
|
OWN_DIRS+= ${VARBASE}/opendnssec/tmp
|
|
OWN_DIRS+= ${VARBASE}/opendnssec/signconf
|
|
OWN_DIRS+= ${VARBASE}/opendnssec/signed
|
|
OWN_DIRS+= ${VARBASE}/opendnssec/unsigned
|
|
|
|
.include "options.mk"
|
|
|
|
pre-install:
|
|
${MKDIR} ${DESTDIR}${PKG_SYSCONFDIR}/opendnssec
|
|
|
|
#.include "../../devel/cunit/buildlink3.mk"
|
|
.include "../../textproc/libxml2/buildlink3.mk"
|
|
.include "../../net/ldns/buildlink3.mk"
|
|
.include "../../databases/sqlite3/buildlink3.mk"
|
|
.include "../../lang/ruby/buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|