net-dns/opendnssec: add 2.1.10, drop 2.0.3-r2

Signed-off-by: Marc Schiffbauer <mschiff@gentoo.org>

7 files changed, 38 insertions, 139 deletions

diff --git a/net-dns/opendnssec/Manifest b/net-dns/opendnssec/Manifest
index b7655458e116..c14ca9969b6a 100644
--- a/net-dns/opendnssec/Manifest
+++ b/net-dns/opendnssec/Manifest
@@ -1 +1 @@
-DIST opendnssec-2.0.3.tar.gz 1103355 BLAKE2B b64e729003de86e4139efaad60c9feae9f4e19c16a29fdced55d66f5896c4b7d76c4b8c57a8330d55c0c03e87de1ebe6ec49ef9d1b6e215be963680d2c805579 SHA512 4745a9ac317cc65d6f5b14be640687efd5fde2149541f692fb607a458378d27e903f175023c1aa16a777d17cef9cc68f1a84e7e7cdb233466d26756721b34424
+DIST opendnssec-2.1.10.tar.gz 1142027 BLAKE2B 063650744ffd1c6d6d3b702400c9617883394c6794743f7d61bd63f7bdaf688a3f2a80f47612e561a133a5689dad8b5f7392eec69779d1dc5632a121d9a41c8f SHA512 c7fdbf1c3867d7b53ac11ab5cb5e636af4595dbee8d704429c7fb84cc3a6b2082ed490c33aad7747d4ee1a2c580afcf24a260bc3ed29eaf5e9d337004045b82d
diff --git a/net-dns/opendnssec/files/opendnssec-drop-privileges-2.0.x.patch b/net-dns/opendnssec/files/opendnssec-drop-privileges-2.0.x.patch
deleted file mode 100644
index f3adc487dee9..000000000000
--- a/net-dns/opendnssec/files/opendnssec-drop-privileges-2.0.x.patch
+++ /dev/null
@@ -1,29 +0,0 @@
-diff -ur opendnssec-2.0.1.orig/conf/conf.xml.in opendnssec-2.0.1/conf/conf.xml.in
---- opendnssec-2.0.1.orig/conf/conf.xml.in	2016-07-21 16:15:27.000000000 +0200
-+++ opendnssec-2.0.1/conf/conf.xml.in	2016-08-23 15:21:09.633384446 +0200
-@@ -36,12 +36,10 @@
- 	</Common>
- 
- 	<Enforcer>
--<!--
- 		<Privileges>
- 			<User>opendnssec</User>
- 			<Group>opendnssec</Group>
- 		</Privileges>
---->
- 
- 		<Datastore><SQLite>@OPENDNSSEC_STATE_DIR@/kasp.db</SQLite></Datastore>
- 		<!--The enforcer interval parameter is no long used in 2.0 and will be deprecated in 2.1 -->
-@@ -60,12 +58,10 @@
- 	</Enforcer>
- 
- 	<Signer>
--<!--
- 		<Privileges>
- 			<User>opendnssec</User>
- 			<Group>opendnssec</Group>
- 		</Privileges>
---->
- 
- 		<WorkingDirectory>@OPENDNSSEC_STATE_DIR@/signer</WorkingDirectory>
- 		<WorkerThreads>4</WorkerThreads>
diff --git a/net-dns/opendnssec/files/opendnssec-fix-localstatedir-2.0.x.patch b/net-dns/opendnssec/files/opendnssec-fix-localstatedir-2.0.x.patch
deleted file mode 100644
index 5940c2f050e6..000000000000
--- a/net-dns/opendnssec/files/opendnssec-fix-localstatedir-2.0.x.patch
+++ /dev/null
@@ -1,22 +0,0 @@
-diff -ur opendnssec-2.0.1.orig/Makefile.am opendnssec-2.0.1/Makefile.am
---- opendnssec-2.0.1.orig/Makefile.am	2016-07-21 16:15:00.000000000 +0200
-+++ opendnssec-2.0.1/Makefile.am	2016-08-23 14:01:50.618393034 +0200
-@@ -30,12 +30,12 @@
- 
- install-data-hook:
- 	$(INSTALL) -d $(DESTDIR)$(localstatedir)
--	$(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec
--	$(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec/signer
--	$(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec/enforcer
--	$(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec/signconf
--	$(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec/unsigned
--	$(INSTALL) -d $(DESTDIR)$(localstatedir)/opendnssec/signed
-+	$(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec
-+	$(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/signer
-+	$(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/enforcer
-+	$(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/signconf
-+	$(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/unsigned
-+	$(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/signed
- 	$(INSTALL) -d $(DESTDIR)$(localstatedir)/run
- 	$(INSTALL) -d $(DESTDIR)$(localstatedir)/run/opendnssec
- 
diff --git a/net-dns/opendnssec/files/opendnssec-fix-run-dir-2.0.x.patch b/net-dns/opendnssec/files/opendnssec-fix-run-dir-2.0.x.patch
deleted file mode 100644
index 5ea9c80f2ba7..000000000000
--- a/net-dns/opendnssec/files/opendnssec-fix-run-dir-2.0.x.patch
+++ /dev/null
@@ -1,24 +0,0 @@
-diff -ur opendnssec-2.0.1.orig/m4/opendnssec_common.m4 opendnssec-2.0.1/m4/opendnssec_common.m4
---- opendnssec-2.0.1.orig/m4/opendnssec_common.m4	2016-07-21 16:15:00.000000000 +0200
-+++ opendnssec-2.0.1/m4/opendnssec_common.m4	2016-08-23 14:42:35.033460972 +0200
-@@ -17,7 +17,7 @@
- OPENDNSSEC_DATA_DIR=$full_datadir/opendnssec
- OPENDNSSEC_SYSCONF_DIR=$full_sysconfdir/opendnssec
- OPENDNSSEC_LOCALSTATE_DIR="$full_localstatedir/opendnssec"
--OPENDNSSEC_PID_DIR="$full_localstatedir/run/opendnssec"
-+OPENDNSSEC_PID_DIR="${destdir}/run/opendnssec"
- 
- AC_SUBST([OPENDNSSEC_BIN_DIR])
- AC_SUBST([OPENDNSSEC_SBIN_DIR])
-diff -ur opendnssec-2.0.1.orig/Makefile.am opendnssec-2.0.1/Makefile.am
---- opendnssec-2.0.1.orig/Makefile.am	2016-08-23 14:40:10.009951791 +0200
-+++ opendnssec-2.0.1/Makefile.am	2016-08-23 14:43:20.377870776 +0200
-@@ -36,8 +36,6 @@
- 	$(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/signconf
- 	$(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/unsigned
- 	$(INSTALL) -d $(DESTDIR)$(localstatedir)/lib/opendnssec/signed
--	$(INSTALL) -d $(DESTDIR)$(localstatedir)/run
--	$(INSTALL) -d $(DESTDIR)$(localstatedir)/run/opendnssec
- 
- docs:
- 	(cd libhsm; $(MAKE) doxygen)
diff --git a/net-dns/opendnssec/files/opendnssec-fix-run-dir-2.1.x.patch b/net-dns/opendnssec/files/opendnssec-fix-run-dir-2.1.x.patch
new file mode 100644
index 000000000000..87560e090e82
--- /dev/null
+++ b/net-dns/opendnssec/files/opendnssec-fix-run-dir-2.1.x.patch
@@ -0,0 +1,24 @@
+diff -ur opendnssec-2.1.10.orig/m4/opendnssec_common.m4 opendnssec-2.1.10/m4/opendnssec_common.m4
+--- opendnssec-2.1.10.orig/m4/opendnssec_common.m4	2021-09-10 09:11:17.000000000 -1000
++++ opendnssec-2.1.10/m4/opendnssec_common.m4	2021-11-27 14:18:26.430202347 -1000
+@@ -17,7 +17,7 @@
+ OPENDNSSEC_DATA_DIR=$full_datadir/opendnssec
+ OPENDNSSEC_SYSCONF_DIR=$full_sysconfdir/opendnssec
+ OPENDNSSEC_LOCALSTATE_DIR="$full_localstatedir/opendnssec"
+-OPENDNSSEC_PID_DIR="$full_localstatedir/run/opendnssec"
++OPENDNSSEC_PID_DIR="${destdir}/run/opendnssec"
+ 
+ AC_SUBST([OPENDNSSEC_BIN_DIR])
+ AC_SUBST([OPENDNSSEC_SBIN_DIR])
+diff -ur opendnssec-2.1.10.orig/Makefile.am opendnssec-2.1.10/Makefile.am
+--- opendnssec-2.1.10.orig/Makefile.am	2021-09-10 09:11:17.000000000 -1000
++++ opendnssec-2.1.10/Makefile.am	2021-11-27 14:19:02.685418411 -1000
+@@ -38,8 +38,6 @@
+ 	$(INSTALL) @INSTALLATIONUSERARG@ @INSTALLATIONGROUPARG@ -d $(DESTDIR)$(localstatedir)/opendnssec/signconf
+ 	$(INSTALL) @INSTALLATIONUSERARG@ @INSTALLATIONGROUPARG@ -d $(DESTDIR)$(localstatedir)/opendnssec/unsigned
+ 	$(INSTALL) @INSTALLATIONUSERARG@ @INSTALLATIONGROUPARG@ -d $(DESTDIR)$(localstatedir)/opendnssec/signed
+-	$(INSTALL) -d $(DESTDIR)$(localstatedir)/run
+-	$(INSTALL) @INSTALLATIONUSERARG@ @INSTALLATIONGROUPARG@ -d $(DESTDIR)$(localstatedir)/run/opendnssec
+ 
+ docs:
+ 	(cd libhsm; $(MAKE) doxygen)
diff --git a/net-dns/opendnssec/files/opendnssec-openssl1.1.patch b/net-dns/opendnssec/files/opendnssec-openssl1.1.patch
deleted file mode 100644
index b81068c4b9fd..000000000000
--- a/net-dns/opendnssec/files/opendnssec-openssl1.1.patch
+++ /dev/null
@@ -1,55 +0,0 @@
---- a/signer/src/wire/tsig-openssl.c
-+++ b/signer/src/wire/tsig-openssl.c
-@@ -126,7 +126,11 @@ static void
- cleanup_context(void *data)
- {
-     HMAC_CTX* context = (HMAC_CTX*) data;
-+#ifdef HAVE_SSL_NEW_HMAC
-+    HMAC_CTX_free(context);
-+#else
-     HMAC_CTX_cleanup(context);
-+#endif
- }
- 
- static void
-@@ -146,8 +150,13 @@ static void*
- create_context()
- {
-     HMAC_CTX* context;
-+#ifdef HAVE_SSL_NEW_HMAC
-+    CHECKALLOC(context = HMAC_CTX_new());
-+    HMAC_CTX_reset(context);
-+#else
-     CHECKALLOC(context = (HMAC_CTX*) malloc(sizeof(HMAC_CTX)));
-     HMAC_CTX_init(context);
-+#endif
-     context_add_cleanup(context);
-     return context;
- }
---- a/m4/acx_ssl.m4	2016-10-14 09:40:13.000000000 -0400
-+++ b/m4/acx_ssl.m4	2019-02-18 13:52:49.861127549 -0500
-@@ -35,12 +35,21 @@
-             if test x_$ssldir = x_/usr/sfw; then
-                 SSL_LIBS="$SSL_LIBS -R$ssldir/lib";
-             fi
--            AC_CHECK_LIB(crypto, HMAC_CTX_init,, [
--                    AC_MSG_ERROR([OpenSSL found in $ssldir, but version 0.9.7 or higher is required])
--            ])
-+            save_LIBS=$LIBS
-+            AC_CHECK_LIB(crypto, HMAC_CTX_reset, [
-+                    AC_DEFINE_UNQUOTED([HAVE_SSL_NEW_HMAC], [], [Define if you have the SSL libraries with new HMAC related functions.])
-+            ], [
-+                    AC_CHECK_LIB(crypto, HMAC_CTX_init,, [
-+                            AC_MSG_ERROR([OpenSSL found in $ssldir, but version 0.9.7 or higher is required])
-+                    ])
-+            ] )
-+            SSL_LIBS="$SSL_LIBS -lcrypto";
-+            LIBS="$SSL_LIBS $LIBS"
-             AC_CHECK_FUNCS([EVP_sha1 EVP_sha256])
-+            LIBS=$saveLIBS
-         fi
-         AC_SUBST(HAVE_SSL)
-+        AC_SUBST(HAVE_SSL_NEW_HMAC)
-         AC_SUBST(SSL_INCLUDES)
-         AC_SUBST(SSL_LIBS)
-     fi
diff --git a/net-dns/opendnssec/opendnssec-2.0.3-r2.ebuild b/net-dns/opendnssec/opendnssec-2.1.10.ebuild
index 17efc48d4904..2df181514c42 100644
--- a/net-dns/opendnssec/opendnssec-2.0.3-r2.ebuild
+++ b/net-dns/opendnssec/opendnssec-2.1.10.ebuild
@@ -53,12 +53,16 @@ REQUIRED_USE="
 	^^ ( softhsm opensc external-hsm )
 "
 
+#PATCHES=(
+#	"${FILESDIR}/${PN}-fix-localstatedir-2.0.x.patch"
+#	"${FILESDIR}/${PN}-fix-run-dir-2.0.x.patch"
+#	"${FILESDIR}/${PN}-drop-privileges-2.0.x.patch"
+#	"${FILESDIR}/${PN}-use-system-trang.patch"
+#	"${FILESDIR}/${PN}-openssl1.1.patch"
+#)
 PATCHES=(
-	"${FILESDIR}/${PN}-fix-localstatedir-2.0.x.patch"
-	"${FILESDIR}/${PN}-fix-run-dir-2.0.x.patch"
-	"${FILESDIR}/${PN}-drop-privileges-2.0.x.patch"
+	"${FILESDIR}/${PN}-fix-run-dir-2.1.x.patch"
 	"${FILESDIR}/${PN}-use-system-trang.patch"
-	"${FILESDIR}/${PN}-openssl1.1.patch"
 )
 
 DOCS=( MIGRATION NEWS )
@@ -119,8 +123,7 @@ pkg_pretend() {
 		eerror ""
 		eerror "   emerge \"<net-dns/opendnssec-2\""
 		eerror ""
-		eerror "See https://github.com/opendnssec/opendnssec/blob/2.0/master/MIGRATION"
-		eerror "for details."
+		eerror "See /usr/share/doc/opendnssec-2.1.10/MIGRATION* for details."
 		eerror ""
 		die "Please upgrade to version >=1.4.10 first for proper db migraion"
 	fi
@@ -140,8 +143,10 @@ src_prepare() {
 
 src_configure() {
 	econf \
+		--enable-installation-user=opendnssec \
+		--enable-installation-group=opendnssec \
+		--localstatedir="${EPREFIX}/var/lib" \
 		--without-cunit \
-		--localstatedir="${EPREFIX}/var" \
 		--disable-static \
 		--with-enforcer-database=$(use mysql && echo "mysql")$(use sqlite && echo "sqlite3") \
 		--with-pkcs11-${PKCS11_LIB}=${PKCS11_PATH} \
@@ -230,7 +235,7 @@ pkg_postinst() {
 				ewarn ""
 				ewarn "You are upgrading from version 1.4."
 				ewarn ""
-				ewarn "A migration is needed from 1.4 to 2.0."
+				ewarn "A migration is needed from 1.4 to 2.x."
 				ewarn "For details see /usr/share/doc/${P}/MIGRATION*"
 				ewarn ""
 				ewarn "For your convenience the mentioned migration scripts and README"