CVS commit: pkgsrc/security/duo-unix

["Jonathan Perkin" <jperkin%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   jperkin
Date:           Tue Nov 14 13:22:29 UTC 2023

Modified Files:
        pkgsrc/security/duo-unix: Makefile PLIST distinfo
        pkgsrc/security/duo-unix/patches: patch-Makefile.in patch-configure

Log Message:
duo-unix: Update to 2.0.2.

duo_unix-2.0.2:
- `make check` now works correctly on Solaris
- Added support for Fedora 37 and Fedora 38
- Added support for Debian 12
- Removed support for Ubuntu 18.04
- Removed support for Debian 9

duo_unix-2.0.1:
- The support script collects a few additional files for troubleshooting
- Duo API calls now use SHA512 instead of SHA1 as the HMAC algorithm

duo_unix-2.0.0:
- Changed the behavior of `su` when the target user is not root.  The target
  user will need to complete 2FA rather than the original user.
- login_duo resets the SIGPIPE handler when it closes its connection.
- Added logging when Duo is invoked, to assist troubleshooting.
- Updated package signing to SHA512

duo_unix-1.12.1:
- Updated Unity to 2.5.2
- Added support for Fedora 34
- Removed support for Centos 8
- Added support for Centos Stream 8
- Added support for Centos Stream 9
- Added support for Ubuntu 22.04

duo_unix-1.12.0:
- Switched from BSON to JSON as a data interchange format
- Switched from Cram to python `unittest` for testing

duo_unix-1.11.5:
- Added support for Debian 11
- Removed support for Debian 8
- Removed support for CentOS 6
- Fixed MOTD display for non-interactive sessions
- The support tool now also collects the sudo PAM configuration file
- Updated pinned certificates


To generate a diff of this commit:
cvs rdiff -u -r1.7 -r1.8 pkgsrc/security/duo-unix/Makefile
cvs rdiff -u -r1.2 -r1.3 pkgsrc/security/duo-unix/PLIST
cvs rdiff -u -r1.6 -r1.7 pkgsrc/security/duo-unix/distinfo
cvs rdiff -u -r1.1 -r1.2 pkgsrc/security/duo-unix/patches/patch-Makefile.in \
    pkgsrc/security/duo-unix/patches/patch-configure

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/duo-unix/Makefile
diff -u pkgsrc/security/duo-unix/Makefile:1.7 pkgsrc/security/duo-unix/Makefile:1.8
--- pkgsrc/security/duo-unix/Makefile:1.7       Tue Oct 24 22:10:47 2023
+++ pkgsrc/security/duo-unix/Makefile   Tue Nov 14 13:22:29 2023
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.7 2023/10/24 22:10:47 wiz Exp $
+# $NetBSD: Makefile,v 1.8 2023/11/14 13:22:29 jperkin Exp $
 #
 
-DISTNAME=      duo_unix-1.11.4
+DISTNAME=      duo_unix-2.0.2
 PKGNAME=       ${DISTNAME:S/_/-/}
-PKGREVISION=   1
 CATEGORIES=    security
 MASTER_SITES=  https://dl.duosecurity.com/
 
@@ -22,6 +21,7 @@ PKGCONFIG_OVERRIDE+=  lib/libduo.pc.in
 
 CONFIGURE_ARGS+=       --enable-lib64=no
 CONFIGURE_ARGS+=       --sysconfdir=${PKG_SYSCONFDIR}
+CONFIGURE_ENV+=                OPENSSL_LDFLAGS="-L${BUILDLINK_PREFIX.openssl}/lib ${COMPILER_RPATH_FLAG}${BUILDLINK_PREFIX.openssl}/lib"
 
 INSTALL_MAKE_FLAGS+=   sysconfdir=${PREFIX}/share/examples/duo-unix
 
@@ -39,5 +39,7 @@ SUBST_FILES.paths=    login_duo/login_duo.8
 SUBST_SED.paths=       -e 's,/etc/duo,${PKG_SYSCONFDIR},g'
 SUBST_SED.paths+=      -e 's,/usr/local,${PREFIX},g'
 
+TEST_TARGET=   check
+
 .include "../../security/openssl/buildlink3.mk"
 .include "../../mk/bsd.pkg.mk"

Index: pkgsrc/security/duo-unix/PLIST
diff -u pkgsrc/security/duo-unix/PLIST:1.2 pkgsrc/security/duo-unix/PLIST:1.3
--- pkgsrc/security/duo-unix/PLIST:1.2  Fri Dec  4 12:15:41 2020
+++ pkgsrc/security/duo-unix/PLIST      Tue Nov 14 13:22:29 2023
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2020/12/04 12:15:41 jperkin Exp $
+@comment $NetBSD: PLIST,v 1.3 2023/11/14 13:22:29 jperkin Exp $
 include/common_ini_test.h
 include/duo.h
 include/duo_private.h
@@ -11,10 +11,5 @@ man/man3/duo.3
 man/man8/login_duo.8
 ${PLIST.pam}man/man8/pam_duo.8
 sbin/login_duo
-share/doc/duo_unix/AUTHORS
-share/doc/duo_unix/CHANGES
-share/doc/duo_unix/CONTRIBUTING.md
-share/doc/duo_unix/LICENSE
-share/doc/duo_unix/README.md
 share/examples/duo-unix/login_duo.conf
 ${PLIST.pam}share/examples/duo-unix/pam_duo.conf

Index: pkgsrc/security/duo-unix/distinfo
diff -u pkgsrc/security/duo-unix/distinfo:1.6 pkgsrc/security/duo-unix/distinfo:1.7
--- pkgsrc/security/duo-unix/distinfo:1.6       Fri May 12 09:25:24 2023
+++ pkgsrc/security/duo-unix/distinfo   Tue Nov 14 13:22:29 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.6 2023/05/12 09:25:24 jperkin Exp $
+$NetBSD: distinfo,v 1.7 2023/11/14 13:22:29 jperkin Exp $
 
-BLAKE2s (duo_unix-1.11.4.tar.gz) = d5d8852124146c4d836348870c845f2240972c45c55b270f21093ee73f4e0b91
-SHA512 (duo_unix-1.11.4.tar.gz) = 67aba0ad7c8c79142613486143c42f6525470533728fdc2e3b98528e128127b9cc547553fbf914bb5214432d18a3f26d68518d5eaf89010df62e71fc3c785fce
-Size (duo_unix-1.11.4.tar.gz) = 523980 bytes
-SHA1 (patch-Makefile.in) = a85b4465546e2b55a1325271c0f670975dcc4a31
-SHA1 (patch-configure) = f9bec5b3116d7a8d32cf09cf3561d33cb5154f85
+BLAKE2s (duo_unix-2.0.2.tar.gz) = 921382fdb96e920cdebd049688a48015029069ed7384e7423c38dbbb57d9c5ef
+SHA512 (duo_unix-2.0.2.tar.gz) = 8143975e72009c9c7b833c7d198ed87b36b3579bbe484f83982f440fbe83063a056976fda34e38352cc9c277f6b8df758b9078ba70b94e0075b248fc3d89f540
+Size (duo_unix-2.0.2.tar.gz) = 580875 bytes
+SHA1 (patch-Makefile.in) = ba084177bd74508bd6b993871df82ce9c1630095
+SHA1 (patch-configure) = 5d097ad8d2ee56febcebf7369dbee2438074995a
 SHA1 (patch-login__duo_Makefile.in) = 8b9079d8ea6a9a1f2a23c5c9146a045789517378

Index: pkgsrc/security/duo-unix/patches/patch-Makefile.in
diff -u pkgsrc/security/duo-unix/patches/patch-Makefile.in:1.1 pkgsrc/security/duo-unix/patches/patch-Makefile.in:1.2
--- pkgsrc/security/duo-unix/patches/patch-Makefile.in:1.1      Fri Dec  4 12:15:41 2020
+++ pkgsrc/security/duo-unix/patches/patch-Makefile.in  Tue Nov 14 13:22:29 2023
@@ -1,16 +1,25 @@
-$NetBSD: patch-Makefile.in,v 1.1 2020/12/04 12:15:41 jperkin Exp $
+$NetBSD: patch-Makefile.in,v 1.2 2023/11/14 13:22:29 jperkin Exp $
 
 Do not install duo_unix_support (very Linux specific, assumes /etc, not very
-useful in a pkgsrc context).
+useful in a pkgsrc context).  Also skip unnecessary license files.
 
---- Makefile.in.orig   2020-05-18 16:08:52.000000000 +0000
+--- Makefile.in.orig   2023-07-28 15:10:36.000000000 +0000
 +++ Makefile.in
-@@ -371,7 +371,7 @@ top_build_prefix = @top_build_prefix@
+@@ -380,7 +380,7 @@ top_build_prefix = @top_build_prefix@
  top_builddir = @top_builddir@
  top_srcdir = @top_srcdir@
  ACLOCAL_AMFLAGS = -I autotools
 -SUBDIRS = compat lib login_duo duo_unix_support $(am__append_1) tests \
 +SUBDIRS = compat lib login_duo $(am__append_1) tests \
        tests/unity_tests
- dist_doc_DATA = README.md CONTRIBUTING.md AUTHORS CHANGES LICENSE
+ dist_doc_DATA = README.md CONTRIBUTING.md AUTHORS CHANGES $(wildcard sbom.spdx)
+ LICENSES = $(wildcard LICENSES/*.txt)
+@@ -796,7 +796,7 @@ install-data: install-data-recursive
+ uninstall: uninstall-recursive
  
+ install-am: all-am
+-      @$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
++      @$(MAKE) $(AM_MAKEFLAGS) install-exec-am
+ 
+ installcheck: installcheck-recursive
+ install-strip:
Index: pkgsrc/security/duo-unix/patches/patch-configure
diff -u pkgsrc/security/duo-unix/patches/patch-configure:1.1 pkgsrc/security/duo-unix/patches/patch-configure:1.2
--- pkgsrc/security/duo-unix/patches/patch-configure:1.1        Fri May 12 09:25:24 2023
+++ pkgsrc/security/duo-unix/patches/patch-configure    Tue Nov 14 13:22:29 2023
@@ -1,15 +1,15 @@
-$NetBSD: patch-configure,v 1.1 2023/05/12 09:25:24 jperkin Exp $
+$NetBSD: patch-configure,v 1.2 2023/11/14 13:22:29 jperkin Exp $
 
 Ensure openssl rpath flags are used.
 
---- configure.orig     2020-05-18 16:08:51.000000000 +0000
+--- configure.orig     2023-07-28 15:10:35.000000000 +0000
 +++ configure
-@@ -13013,7 +13013,7 @@ fi
+@@ -13023,7 +13023,7 @@ fi
  
  
              if test x"$PKG_CONFIG" != x""; then
 -                OPENSSL_LDFLAGS=`$PKG_CONFIG openssl --libs-only-L 2>/dev/null`
-+                OPENSSL_LDFLAGS=`$PKG_CONFIG openssl --libs-only-L --libs-only-other 2>/dev/null`
++                :
                  if test $? = 0; then
                      OPENSSL_LIBS=`$PKG_CONFIG openssl --libs-only-l 2>/dev/null`
                      OPENSSL_INCLUDES=`$PKG_CONFIG openssl --cflags-only-I 2>/dev/null`