CVS commit: pkgsrc/security/opendnssec2

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/security/opendnssec2
From: "Havard Eidnes" <he%netbsd.org@localhost>
Date: Sun, 25 Aug 2024 17:15:51 +0000

Module Name:    pkgsrc
Committed By:   he
Date:           Sun Aug 25 17:15:51 UTC 2024

Modified Files:
        pkgsrc/security/opendnssec2: Makefile distinfo
        pkgsrc/security/opendnssec2/patches: patch-conf_Makefile.in
            patch-signer_src_hsm.c

Log Message:
security/opendnssec2: update to version 2.1.14.

Pkgsrc changes:
 * None, other than patch adaptations and checksum updates.

Upstream changes:

OpenDNSSEC 2.1.14 - 2024-08-22

* OPENDNSSEC-965: Extra logging in case of HSM issues
* OPENDNSSEC-965: Extra check on HSM availability when starting signing
* OPENDNSSEC-966: Copy key function in hsmutil program
* OPENDNSSEC-960: Fix backup keys command when called with improper arguments
* OPENDNSSEC-964: No keys exported when exporting all keys with mysql back-end
* OPENDNSSEC-963: Keys not published in case of shared keys in combination
          with purging keys


To generate a diff of this commit:
cvs rdiff -u -r1.33 -r1.34 pkgsrc/security/opendnssec2/Makefile
cvs rdiff -u -r1.13 -r1.14 pkgsrc/security/opendnssec2/distinfo
cvs rdiff -u -r1.4 -r1.5 \
    pkgsrc/security/opendnssec2/patches/patch-conf_Makefile.in
cvs rdiff -u -r1.1 -r1.2 \
    pkgsrc/security/opendnssec2/patches/patch-signer_src_hsm.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/opendnssec2/Makefile
diff -u pkgsrc/security/opendnssec2/Makefile:1.33 pkgsrc/security/opendnssec2/Makefile:1.34
--- pkgsrc/security/opendnssec2/Makefile:1.33   Fri Aug 16 15:29:36 2024
+++ pkgsrc/security/opendnssec2/Makefile        Sun Aug 25 17:15:50 2024
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.33 2024/08/16 15:29:36 he Exp $
+# $NetBSD: Makefile,v 1.34 2024/08/25 17:15:50 he Exp $
 #
 
-DISTNAME=      opendnssec-2.1.13
+DISTNAME=      opendnssec-2.1.14
 PKGNAME=       ${DISTNAME:S/opendnssec/opendnssec2/}
-PKGREVISION=   4
 CATEGORIES=    security net
 MASTER_SITES=  https://www.opendnssec.org/files/source/
 
@@ -20,13 +19,14 @@ CONFLICTS+= opendnssec-1.*
 
 BUILD_DEFS+=   VARBASE
 
-USE_TOOLS+=    bash gmake
-CONFIG_SHELL=  ${BASH}
-USE_LANGUAGES= c99 c++
-USE_LIBTOOL=   yes
+USE_TOOLS+=            bash gmake
+CONFIG_SHELL=          ${BASH}
+USE_LANGUAGES=         c c++
+USE_CC_FEATURES=       c99
+USE_LIBTOOL=           yes
 
 GNU_CONFIGURE=         yes
-CONFIGURE_ARGS+=       --prefix=${PREFIX:Q}
+#CONFIGURE_ARGS+=      --prefix=${PREFIX:Q}
 CONFIGURE_ARGS+=       --localstatedir=${VARBASE}
 CONFIGURE_ARGS+=       --with-ssl=${BUILDLINK_PREFIX.openssl}
 
@@ -69,7 +69,8 @@ SUBST_SED.migrate=    -e 's,SCHEMA=../../sr
 CXXFLAGS.NetBSD+=      -D_NETBSD_SOURCE
 
 # For debugging...
-#CFLAGS.NetBSD+=       -g
+#CFLAGS.NetBSD+=       -g -fsanitize=address
+#CFLAGS.NetBSD+=       -g
 
 CONF_FILES+=   ${EGDIR}/addns.xml.sample \
                        ${PKG_SYSCONFDIR}/addns.xml

Index: pkgsrc/security/opendnssec2/distinfo
diff -u pkgsrc/security/opendnssec2/distinfo:1.13 pkgsrc/security/opendnssec2/distinfo:1.14
--- pkgsrc/security/opendnssec2/distinfo:1.13   Fri Aug 16 15:29:36 2024
+++ pkgsrc/security/opendnssec2/distinfo        Sun Aug 25 17:15:50 2024
@@ -1,12 +1,12 @@
-$NetBSD: distinfo,v 1.13 2024/08/16 15:29:36 he Exp $
+$NetBSD: distinfo,v 1.14 2024/08/25 17:15:50 he Exp $
 
-BLAKE2s (opendnssec-2.1.13.tar.gz) = d82cf590129f1f37bae7382fbcb9ed87d61182d42315e95a431d755a46dfd0c7
-SHA512 (opendnssec-2.1.13.tar.gz) = 5f3926f0f144cf8819895da2ec81fce21e2a05cf0b83dd9174a72ebfdef99badc3bcff2d6685c498485113209e7c73ab9cf55b3e126009ce6cbcc3cde54d6051
-Size (opendnssec-2.1.13.tar.gz) = 1161140 bytes
-SHA1 (patch-conf_Makefile.in) = b0a782916a9603138c09b484cc1534b938bf8330
+BLAKE2s (opendnssec-2.1.14.tar.gz) = ac36c27584a1edd1aaf84400dbd0d354270c9e2d3999f4d5df84f34665c36f3b
+SHA512 (opendnssec-2.1.14.tar.gz) = 406532008b85fbcae765a41e9fba28ce97051d86f6b64f58ded02288ac7a417a83bf93739712588b641c7d782a06448aeeb65415fd5585f70a362211a184593f
+Size (opendnssec-2.1.14.tar.gz) = 1162472 bytes
+SHA1 (patch-conf_Makefile.in) = ab0617eb6667e54f824dc15e0b61be4aa795ff40
 SHA1 (patch-enforcer_src_hsmkey_backup__hsmkeys__cmd.c) = f300504098f57d04525f70a80fac7f15f4ffaba3
 SHA1 (patch-enforcer_src_keystate_keystate__ds.c) = 0f000dc6a37cb05776a1361726082f4db35e3a45
 SHA1 (patch-enforcer_src_keystate_keystate__list__cmd.c) = 1e18aa22b8a3c2beb1d73337e72383d73cf2c8db
-SHA1 (patch-signer_src_hsm.c) = da5d35b22e189c7eef0b6344e7137662fe439c3e
+SHA1 (patch-signer_src_hsm.c) = f8b4d12308b6ea9188fc8406dac8365d1c33bd05
 SHA1 (patch-signer_src_wire_query.c) = c026ae230ad6bcb73800700823ca33be00d26fcb
 SHA1 (patch-tools_ods-kasp.5.in) = 83d13a1897368924b53f757e3b7918f9a6a918c1

Index: pkgsrc/security/opendnssec2/patches/patch-conf_Makefile.in
diff -u pkgsrc/security/opendnssec2/patches/patch-conf_Makefile.in:1.4 pkgsrc/security/opendnssec2/patches/patch-conf_Makefile.in:1.5
--- pkgsrc/security/opendnssec2/patches/patch-conf_Makefile.in:1.4      Wed Nov  9 11:39:43 2022
+++ pkgsrc/security/opendnssec2/patches/patch-conf_Makefile.in  Sun Aug 25 17:15:50 2024
@@ -1,4 +1,4 @@
-$NetBSD: patch-conf_Makefile.in,v 1.4 2022/11/09 11:39:43 he Exp $
+$NetBSD: patch-conf_Makefile.in,v 1.5 2024/08/25 17:15:50 he Exp $
 
 Install configs in example config directory.
 
@@ -12,7 +12,7 @@ Install configs in example config direct
  target = @target@
  target_alias = @target_alias@
  target_cpu = @target_cpu@
-@@ -679,18 +680,19 @@ regress: $(RNG)
+@@ -679,18 +680,20 @@ regress: $(RNG)
                (echo "kasp.xml built")
  
  install-data-hook:
@@ -41,6 +41,7 @@ Install configs in example config direct
 +      test -f ${DESTDIR}${EGDIR}/kasp.xml || \
 +              ${INSTALL_DATA} kasp.xml ${DESTDIR}${EGDIR}
 +      ${INSTALL_DATA} kasp.xml ${DESTDIR}${EGDIR}/kasp.xml.sample
++
  
  # Tell versions [3.59,3.63) of GNU make to not export all variables.
  # Otherwise a system limit (for SysV at least) may be exceeded.

Index: pkgsrc/security/opendnssec2/patches/patch-signer_src_hsm.c
diff -u pkgsrc/security/opendnssec2/patches/patch-signer_src_hsm.c:1.1 pkgsrc/security/opendnssec2/patches/patch-signer_src_hsm.c:1.2
--- pkgsrc/security/opendnssec2/patches/patch-signer_src_hsm.c:1.1      Tue Dec  5 12:20:40 2023
+++ pkgsrc/security/opendnssec2/patches/patch-signer_src_hsm.c  Sun Aug 25 17:15:50 2024
@@ -1,4 +1,4 @@
-$NetBSD: patch-signer_src_hsm.c,v 1.1 2023/12/05 12:20:40 he Exp $
+$NetBSD: patch-signer_src_hsm.c,v 1.2 2024/08/25 17:15:50 he Exp $
 
 Work around possible concurrency error and
 "[hsm] hsm_get_dnskey(): Got NULL key"
@@ -6,9 +6,9 @@ Ref. https://issues.opendnssec.org/brows
 
 --- signer/src/hsm.c.orig      2022-11-08 08:46:49.000000000 +0000
 +++ signer/src/hsm.c
-@@ -34,6 +34,10 @@
+@@ -33,6 +33,10 @@
+ #include "hsm.h"
  #include "log.h"
- #include "cryptoki_compat/pkcs11.h"
  
 +#include <pthread.h>
 +
@@ -17,7 +17,7 @@ Ref. https://issues.opendnssec.org/brows
  static const char* hsm_str = "hsm";
  
  /**
-@@ -109,7 +113,9 @@ llibhsm_key_start:
+@@ -108,7 +112,9 @@ llibhsm_key_start:
  
      /* get dnskey */
      if (!key_id->dnskey) {

Prev by Date: Re: CVS commit: pkgsrc/mk/configure
Next by Date: CVS commit: [pkgsrc-2024Q2] pkgsrc/doc
Previous by Thread: CVS commit: pkgsrc/mk/configure
Next by Thread: CVS commit: [pkgsrc-2024Q2] pkgsrc/doc
Indexes:

Home | Main Index | Thread Index | Old Index