pkgsrc-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[pkgsrc/trunk]: pkgsrc/news/inn update news/inn to version 2.6.3
details: https://anonhg.NetBSD.org/pkgsrc/rev/2a1d6bc0ebdd
branches: trunk
changeset: 444065:2a1d6bc0ebdd
user: spz <spz%pkgsrc.org@localhost>
date: Sat Jan 02 14:18:22 2021 +0000
description:
update news/inn to version 2.6.3
Changes in 2.6.3
* Fixed the selection of the elliptic curve to use with OpenSSL 1.1.0 or
later; NIST P-256 was enforced instead of using the most secure curve.
* A new inn.conf parameter has been added to fine-tune the cipher suites
to use with TLS 1.3: the *tlsciphers13* now permits configuring them.
A separate cipher suite configuration parameter is needed for TLS 1.3
because TLS 1.3 cipher suites are not compatible with TLS 1.2, and
vice-versa. In order to avoid issues where legacy TLS 1.2 cipher
suite configuration configured in the *tlsciphers* parameter would
inadvertently disable all TLS 1.3 cipher suites, the inn.conf
configuration has been separated out.
* Fixed a regression since INN 2.6.1 that prevented articles with
internationalized header fields (that is to say encoded in UTF-8) from
being posted.
* Support for Python 3 has been added to INN. Embedded Python filtering
and authentication hooks for innd and nnrpd can now use version 3.3.0
or later of the Python interpreter. In the 2.x series, version 2.3.0
or later is still supported.
When configuring INN with the --with-python flag, the "PYTHON"
environment variable, when set, is used to select the interpreter to
embed. Otherwise, it is searched in standard paths.
In case you change the Python interpreter to embed, make sure that the
Python scripts you use are written in the expected syntax for that
version of the Python interpreter. Notably, buffer objects have been
replaced with memoryview objects in Python 3, and UTF-8 encoding now
really matters for string literals (Python 3 uses bytes and Unicode
objects).
INN documentation and samples of Python hooks have been updated to
provide more examples.
* When a Python or Perl filter hook rejects an article, innd now
mentions the reason in response to CHECK and TAKETHIS commands.
Previously, the reason was given only for the IHAVE command.
* nnrpd now properly logs the hostname of clients whose connection
failed owing to an issue during the negotiation of a TLS session or
high load average.
Changes in 2.6.2
* A new *syntaxchecks* parameter has been added in inn.conf. It permits
controlling the level of checks performed by innd and nnrpd. Up to
now, only one check can be enabled/disabled: when *laxmid* is
mentioned in the values of this new parameter, INN accepts Message-IDs
that contain ".." in the left part, as well as Message-IDs with two
"@" (such Message-IDs would otherwise be considered as syntactically
invalid). See the inn.conf(5) man page for more details.
The check is disabled by default (*no-laxmid*), which corresponds to
the legacy behaviour of INN 2.6.1 and earlier.
* Use of the ovdb_server helper server is now the default when using the
ovdb overview method, that is to say the default value for the
*readserver* parameter in ovdb.conf is now set to true. It improves
stability and avoids deadlocks, timing issues and corrupted ovdb
databases.
* mailpost now removes empty header fields before attempting to post
articles, and keeps trace of them in the X-Mailpost-Empty-Hdrs: newly
generated header field body. Also, mailpost now sanitizes header
fields with regards to empty continuation header lines. Thanks to
Kamil Jonca for these bug reports.
* A new -z parameter has been added to mailpost to mention a list of
header fields to remove from the gated message. Thanks to Dieter
Stussy for the patch.
* Fixed a bug in inews that was rejecting articles containing header
fields whose length exceeded 998 bytes. This limitation is for the
length of a single line of a header field (and not for the length of
the whole header field, as it was wrongly the case).
* Added support for GnuPG's gpg binary (in addition to gpgv) in
pgpverify. Indeed, gpg still validates signatures made with weak
digest algorithms like MD5 whereas gpgv no longer do. Thanks to
Thomas Hochstein for the patch, which permits validating control
articles for hierarchies that are still using old PGP keys.
* Added similar support for GnuPG's gpg binary in perl-nocem to validate
NoCeM notices from issuers who are still using old PGP keys.
* A few commands listed in the "Control commands to INND" section in
daily Usenet reports were appearing as a mere letter; all of them are
now properly converted to meaningful words.
* The *tlsprotocols* parameter in inn.conf now recognizes the "TLSv1.3"
value (for OpenSSL versions implementing TLS 1.3, that is to say
starting from OpenSSL 1.1.1).
* The buffindexed overview method will now hopefully work properly on
systems with a native page size larger than 16KB.
* Other minor bug fixes and documentation improvements.
diffstat:
news/inn/Makefile | 51 ++++++++++++++++++++++++++++++++++++---------------
news/inn/PLIST | 3 ++-
news/inn/distinfo | 10 +++++-----
news/inn/options.mk | 32 +++++++++++++++++++++++++++++---
4 files changed, 72 insertions(+), 24 deletions(-)
diffs (188 lines):
diff -r 6e5d745835a1 -r 2a1d6bc0ebdd news/inn/Makefile
--- a/news/inn/Makefile Sat Jan 02 14:14:18 2021 +0000
+++ b/news/inn/Makefile Sat Jan 02 14:18:22 2021 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.132 2020/12/04 20:45:37 nia Exp $
+# $NetBSD: Makefile,v 1.133 2021/01/02 14:18:22 spz Exp $
-DISTNAME= inn-2.6.1
-PKGREVISION= 6
+DISTNAME= inn-2.6.3
+#PKGREVISION= 0
CATEGORIES= news
MASTER_SITES= ftp://ftp.isc.org/isc/inn/
MASTER_SITES+= ftp://ftp.fu-berlin.de/unix/news/inn/
@@ -75,34 +75,42 @@
PKG_SHELL.${INN_USER}= ${SH}
EXAMPLEDIR= ${PREFIX}/share/examples/inn
-INN_DATADIRS= log log/OLD run tmp db spool http
+INN_DATADIRS= log log/OLD tmp db spool http
INN_SPOOLDIRS= archive articles overview incoming incoming/bad \
outgoing uniover innfeed
+INSTALL_ENV+= CHOWNPROG="echo chmod"
+INSTALL_ENV+= CHGRPPROG="echo chgrp"
+
INSTALLATION_DIRS+= sbin
INSTALLATION_DIRS+= bin
INSTALLATION_DIRS+= ${EXAMPLEDIR}
INSTALLATION_DIRS+= ${EXAMPLEDIR}/filter
-MAKE_DIRS+= ${PREFIX}/bin
-MAKE_DIRS+= ${PREFIX}/sbin
-MAKE_DIRS+= ${PREFIX}/lib
-
INN_DIRS+= ${PKG_SYSCONFDIR}
INN_DIRS+= ${INN_DATA_DIR}
-OWN_DIRS+= ${PREFIX}/${INN_PATHBIN}
-OWN_DIRS+= ${PREFIX}/${INN_PATHBIN}/filter
-OWN_DIRS+= ${EXAMPLEDIR}
+MAKE_DIRS+= ${PREFIX}/${INN_PATHBIN}
+MAKE_DIRS+= ${PREFIX}/${INN_PATHBIN}/auth
+MAKE_DIRS+= ${PREFIX}/${INN_PATHBIN}/auth/resolv
+MAKE_DIRS+= ${PREFIX}/${INN_PATHBIN}/auth/passwd
+MAKE_DIRS+= ${PREFIX}/${INN_PATHBIN}/control
+MAKE_DIRS+= ${PREFIX}/${INN_PATHBIN}/filter
+MAKE_DIRS+= ${PREFIX}/${INN_PATHBIN}/rnews.libexec
+MAKE_DIRS+= ${EXAMPLEDIR}
.for dir in ${INN_DIRS}
OWN_DIRS_PERMS+= ${dir} ${INN_USER} ${INN_GROUP} 0775
.endfor
+
.for dir in ${INN_DATADIRS}
-MAKE_DIRS_PERMS+= ${INN_DATA_DIR}/${dir} ${INN_USER} ${INN_GROUP} 0775
+OWN_DIRS_PERMS+= ${INN_DATA_DIR}/${dir} ${INN_USER} ${INN_GROUP} 0775
.endfor
+
+OWN_DIRS_PERMS+= ${INN_DATA_DIR}/run ${INN_USER} ${INN_GROUP} 0770
+
.for dir in ${INN_SPOOLDIRS}
-MAKE_DIRS_PERMS+= ${INN_DATA_DIR}/spool/${dir} \
+OWN_DIRS_PERMS+= ${INN_DATA_DIR}/spool/${dir} \
${INN_USER} ${INN_GROUP} 0775
.endfor
@@ -148,9 +156,22 @@
${INN_USER} ${INN_GROUP} 0664
.endfor
-RCD_SCRIPTS= innd
+SPECIAL_PERMS+= ${PREFIX}/${INN_PATHBIN}/innbind ${REAL_ROOT_USER} ${INN_GROUP} 4555
+SPECIAL_PERMS+= ${PREFIX}/${INN_PATHBIN}/inews ${INN_USER} ${INN_GROUP} 2555
+SPECIAL_PERMS+= ${PREFIX}/${INN_PATHBIN}/rnews ${INN_USER} ${UUCP_GROUP} 2555
-PKG_DESTDIR_SUPPORT= destdir
+NEWSONLYBINS+= buffindexed_d cnfsheadconf ctlinnd expire expireover
+NEWSONLYBINS+= expirerm imapfeed inncheck innd innfeed innstat
+NEWSONLYBINS+= innupgrade innwatch makedbz makehistory mod-active
+NEWSONLYBINS+= news.daily ovdb_init ovdb_monitor ovdb_server ovdb_stat
+NEWSONLYBINS+= overchan procbatch prunehistory rc.news scanlogs
+NEWSONLYBINS+= tally.control tdx-util writelog
+.for file in ${NEWSONLYBINS}
+SPECIAL_PERMS+= ${PREFIX}/${INN_PATHBIN}/${file} ${INN_USER} ${INN_GROUP} 0550
+.endfor
+
+
+RCD_SCRIPTS= innd
.include "../../mk/bsd.prefs.mk"
diff -r 6e5d745835a1 -r 2a1d6bc0ebdd news/inn/PLIST
--- a/news/inn/PLIST Sat Jan 02 14:14:18 2021 +0000
+++ b/news/inn/PLIST Sat Jan 02 14:18:22 2021 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.26 2017/05/20 06:53:05 spz Exp $
+@comment $NetBSD: PLIST,v 1.27 2021/01/02 14:18:22 spz Exp $
bin/inews
bin/rnews
include/inn/buffer.h
@@ -233,6 +233,7 @@
man/man8/innxbatch.8
man/man8/innxmit.8
man/man8/inpaths.8
+${PLIST.kerberos}man/man8/auth_krb5.8
man/man8/mailpost.8
man/man8/makedbz.8
man/man8/makehistory.8
diff -r 6e5d745835a1 -r 2a1d6bc0ebdd news/inn/distinfo
--- a/news/inn/distinfo Sat Jan 02 14:14:18 2021 +0000
+++ b/news/inn/distinfo Sat Jan 02 14:18:22 2021 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.36 2017/05/20 06:53:05 spz Exp $
+$NetBSD: distinfo,v 1.37 2021/01/02 14:18:22 spz Exp $
-SHA1 (inn-2.6.1.tar.gz) = 254ef2e8f0121334ee52eb2174e19a2a5e7fa3a1
-RMD160 (inn-2.6.1.tar.gz) = 5884482d06b997db8b2ea7fdb8e7a9db4e644e04
-SHA512 (inn-2.6.1.tar.gz) = 3764a1be4f3e83ca555f2399d9555af9811f7b0dc83915a555e2664c875188fd4a4a3abb0fe412826b434eedd1f96dad240573fb5f3d8c5a0e2e1692afdd8ab0
-Size (inn-2.6.1.tar.gz) = 2570558 bytes
+SHA1 (inn-2.6.3.tar.gz) = 2a6646030c77b2332d167bcadfcda797822932d0
+RMD160 (inn-2.6.3.tar.gz) = 13a4a8a034f4e914b5579000f378203ad4037370
+SHA512 (inn-2.6.3.tar.gz) = 123881d474ce1df21983b3093827915706670a400d48c3945c32635cd2fa7f52be2470c39ad54b84cc31b5454d7a3be31feb306802957954a3450146e31f52cb
+Size (inn-2.6.3.tar.gz) = 2586168 bytes
SHA1 (patch-aa) = 1801206391e5f37e75edad0955cfc426d4701e45
SHA1 (patch-ab) = 28b341559ba7d132e8a6dbb0989e964b1d5849fd
SHA1 (patch-ac) = edb03ca5998873627278764ed4e528f13f3f74fd
diff -r 6e5d745835a1 -r 2a1d6bc0ebdd news/inn/options.mk
--- a/news/inn/options.mk Sat Jan 02 14:14:18 2021 +0000
+++ b/news/inn/options.mk Sat Jan 02 14:18:22 2021 +0000
@@ -1,17 +1,21 @@
-# $NetBSD: options.mk,v 1.8 2020/05/31 15:08:27 rillig Exp $
+# $NetBSD: options.mk,v 1.9 2021/01/02 14:18:22 spz Exp $
PKG_OPTIONS_VAR= PKG_OPTIONS.inn
-PKG_SUPPORTED_OPTIONS= perl python uucp
+PKG_SUPPORTED_OPTIONS= perl python uucp kerberos gnupg2
PKG_SUGGESTED_OPTIONS= perl
.include "../../mk/bsd.options.mk"
+PLIST_VARS+= kerberos
+
###
### uucp support (requires a group uucp to exist)
###
.if !empty(PKG_OPTIONS:Muucp)
+PKG_GROUPS_VARS+= UUCP_GROUP
+PKG_GROUPS+= ${UUCP_GROUP}
+
CONFIGURE_ARGS+= --enable-uucp-rnews
-PKG_GROUPS+= uucp
.else
CONFIGURE_ARGS+= --disable-uucp-rnews
.endif
@@ -27,6 +31,7 @@
.else
CONFIGURE_ARGS+= --without-perl
.endif
+
###
### Python support for INN
###
@@ -36,3 +41,24 @@
.include "../../lang/python/application.mk"
.endif
+
+###
+### kerberos support for INN
+###
+.if !empty(PKG_OPTIONS:Mkerberos)
+. include "../../mk/krb5.buildlink3.mk"
+
+CONFIGURE_ARGS+= --with-krb5
+.else
+CONFIGURE_ARGS+= --without-krb5
+.endif
+
+###
+### pick either gnupg2 or gnupg
+###
+.if !empty(PKG_OPTIONS:Mgnupg2)
+DEPENDS+= gnupg2-[0-9]*:../../security/gnupg2
+.else
+DEPENDS+= gnupg-[0-9]*:../../security/gnupg
+.endif
+
Home |
Main Index |
Thread Index |
Old Index