From 478e13a1b87c612960fbbc49849c4b94168ffc79 Mon Sep 17 00:00:00 2001 From: Jitka Plesnikova Date: Sun, 4 Jun 2017 06:32:48 +0200 Subject: [PATCH 01/58] Perl 5.26 rebuild --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index b4ac585..d2b8882 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2 -Release: 4%{?dist} +Release: 5%{?dist} License: BSD Group: System Environment/Base URL: http://www.dnssec-tools.org/ @@ -367,6 +367,9 @@ rm -rf %{buildroot} %changelog +* Sun Jun 04 2017 Jitka Plesnikova - 2.2-5 +- Perl 5.26 rebuild + * Fri Feb 10 2017 Fedora Release Engineering - 2.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild From 5bba143a603ee1339dc8f3d0a4eba40f7d28fdca Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 26 Jul 2017 06:23:25 +0000 Subject: [PATCH 02/58] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index d2b8882..aaed878 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2 -Release: 5%{?dist} +Release: 6%{?dist} License: BSD Group: System Environment/Base URL: http://www.dnssec-tools.org/ @@ -367,6 +367,9 @@ rm -rf %{buildroot} %changelog +* Wed Jul 26 2017 Fedora Release Engineering - 2.2-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + * Sun Jun 04 2017 Jitka Plesnikova - 2.2-5 - Perl 5.26 rebuild From 2c33b2985cbd801eeb708cb9f5d82d77f7a48017 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 2 Aug 2017 19:41:55 +0000 Subject: [PATCH 03/58] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index aaed878..d91dc82 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2 -Release: 6%{?dist} +Release: 7%{?dist} License: BSD Group: System Environment/Base URL: http://www.dnssec-tools.org/ @@ -367,6 +367,9 @@ rm -rf %{buildroot} %changelog +* Wed Aug 02 2017 Fedora Release Engineering - 2.2-7 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild + * Wed Jul 26 2017 Fedora Release Engineering - 2.2-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild From 5707f40e0c66fdb216cd685c4e18e6ae16ce794f Mon Sep 17 00:00:00 2001 From: Wes Hardaker Date: Thu, 3 Aug 2017 08:57:14 -0700 Subject: [PATCH 04/58] new ksk key --- dnssec-tools-new-2017-key.patch | 12 ++++++++++++ dnssec-tools.spec | 2 ++ 2 files changed, 14 insertions(+) create mode 100644 dnssec-tools-new-2017-key.patch diff --git a/dnssec-tools-new-2017-key.patch b/dnssec-tools-new-2017-key.patch new file mode 100644 index 0000000..ef27692 --- /dev/null +++ b/dnssec-tools-new-2017-key.patch @@ -0,0 +1,12 @@ +diff --git a/dnssec-tools/validator/etc/dnsval.conf b/dnssec-tools/validator/etc/dnsval.conf +index 07288fe..34bbe6d 100644 +--- a/dnssec-tools/validator/etc/dnsval.conf ++++ b/dnssec-tools/validator/etc/dnsval.conf +@@ -21,6 +21,7 @@ global-options + + : trust-anchor + . DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5 ++ . DS 19036 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D + ; + + : zone-security-expectation diff --git a/dnssec-tools.spec b/dnssec-tools.spec index d91dc82..c4c4be0 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -27,6 +27,7 @@ Patch13: dnssec-tools-2.0-autoconf-for-aarch64.patch Patch14: dnssec-tools-zonefile-fast-misc.patch Patch15: dnssec-tools-zonefile-fast-nsec3-fixes.patch Patch16: dnssec-tools-zonefile-fast-tlsa-fixes.patch +Patch17: dnssec-tools-new-2017-key.patch %description @@ -71,6 +72,7 @@ C-based libraries useful for developing dnssec aware tools. #%patch14 -p2 #%patch15 -p2 #%patch16 -p2 +%patch17 -p2 %build %configure --with-validator-testcases-file=%{_datadir}/dnssec-tools/validator-testcases --with-perl-build-args="INSTALLDIRS=vendor OPTIMIZE='$RPM_OPT_FLAGS'" --sysconfdir=/etc --with-root-hints=/etc/dnssec-tools/root.hints --with-resolv-conf=/etc/dnssec-tools/resolv.conf --disable-static --with-nsec3 --with-ipv6 --with-dlv --disable-bind-checks From 80b0d8c5fc2464dbc4642ecdb46fcab9735c2c69 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 7 Feb 2018 07:06:15 +0000 Subject: [PATCH 05/58] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index c4c4be0..f3f4247 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2 -Release: 7%{?dist} +Release: 8%{?dist} License: BSD Group: System Environment/Base URL: http://www.dnssec-tools.org/ @@ -369,6 +369,9 @@ rm -rf %{buildroot} %changelog +* Wed Feb 07 2018 Fedora Release Engineering - 2.2-8 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + * Wed Aug 02 2017 Fedora Release Engineering - 2.2-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild From bb2ff65db0c1826159272c0fcfd4e8c4d671314e Mon Sep 17 00:00:00 2001 From: Igor Gnatenko Date: Tue, 13 Feb 2018 23:14:01 +0100 Subject: [PATCH 06/58] Remove BuildRoot definition None of currently supported distributions need that. It was needed last for EL5 which is EOL now Signed-off-by: Igor Gnatenko --- dnssec-tools.spec | 1 - 1 file changed, 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index f3f4247..c001188 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -8,7 +8,6 @@ URL: http://www.dnssec-tools.org/ Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz Source1: dnssec-tools-dnsval.conf Source2: libval-config -BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) # Require note: the auto-detection for perl-Net-DNS-SEC will not work since # the tools do run time tests for their existence. But most of the tools # are much more useful with the modules in place, so we hand require them. From 1062b2d8998ebafd6f28a00ce33aaaa78611ec56 Mon Sep 17 00:00:00 2001 From: Igor Gnatenko Date: Wed, 14 Feb 2018 07:06:30 +0100 Subject: [PATCH 07/58] Remove %clean section None of currently supported distributions need that. Last one was EL5 which is EOL for a while. Signed-off-by: Igor Gnatenko --- dnssec-tools.spec | 3 --- 1 file changed, 3 deletions(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index c001188..5996736 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -109,9 +109,6 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %postun libs -p /sbin/ldconfig -%clean -rm -rf %{buildroot} - %files %defattr(-,root,root,-) %doc README INSTALL COPYING From 4cd3a72f3e40d0918c9146588e64fa1e0dd1f64d Mon Sep 17 00:00:00 2001 From: Jitka Plesnikova Date: Thu, 28 Jun 2018 03:50:37 +0200 Subject: [PATCH 08/58] Perl 5.28 rebuild --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 5996736..7d9c4fc 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2 -Release: 8%{?dist} +Release: 9%{?dist} License: BSD Group: System Environment/Base URL: http://www.dnssec-tools.org/ @@ -365,6 +365,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Thu Jun 28 2018 Jitka Plesnikova - 2.2-9 +- Perl 5.28 rebuild + * Wed Feb 07 2018 Fedora Release Engineering - 2.2-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild From bab67482f94987c2ef62a89e609dfed29b7a5a76 Mon Sep 17 00:00:00 2001 From: Paul Wouters Date: Tue, 3 Jul 2018 15:39:00 -0400 Subject: [PATCH 09/58] packaging: remove obsolete defattr line --- dnssec-tools.spec | 5 ----- 1 file changed, 5 deletions(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 7d9c4fc..9fbac27 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -110,7 +110,6 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %postun libs -p /sbin/ldconfig %files -%defattr(-,root,root,-) %doc README INSTALL COPYING %dir %{_sysconfdir}/dnssec-tools/ @@ -257,8 +256,6 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %{_mandir}/man3/Net::DNS::SEC::Tools::realmmgr.3pm.gz %files perlmods -%defattr(-,root,root) - # perl-Net-DNS-SEC is noarch and cannot own this directory: %dir %{perl_vendorarch}/Net/DNS/SEC @@ -298,14 +295,12 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %{_mandir}/man3/Net::DNS::SEC::Tools::TrustAnchor::Secspider.3pm.gz %files libs -%defattr(-,root,root) %{_libdir}/*.so.* %config(noreplace) %{_sysconfdir}/dnssec-tools #%config(noreplace) %{_sysconfdir}/dnssec-tools/dnsval.conf #%config(noreplace) %{_sysconfdir}/dnssec-tools/root.hints %files libs-devel -%defattr(-,root,root) %{_includedir}/validator %{_libdir}/*.so From 341dbf56c888f9c5d6744324b7078dd975b77f84 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 12 Jul 2018 23:01:16 +0000 Subject: [PATCH 10/58] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 9fbac27..675b28b 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2 -Release: 9%{?dist} +Release: 10%{?dist} License: BSD Group: System Environment/Base URL: http://www.dnssec-tools.org/ @@ -360,6 +360,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Thu Jul 12 2018 Fedora Release Engineering - 2.2-10 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + * Thu Jun 28 2018 Jitka Plesnikova - 2.2-9 - Perl 5.28 rebuild From 3deeb9d7b0563e49a4ed395dc64eac8cd17020f0 Mon Sep 17 00:00:00 2001 From: Igor Gnatenko Date: Tue, 24 Jul 2018 16:20:52 +0200 Subject: [PATCH 11/58] Add missing BuildRequires on gcc configure: error: no acceptable C compiler found in $PATH References: https://bugzilla.redhat.com/show_bug.cgi?id=1603811 Signed-off-by: Igor Gnatenko --- dnssec-tools.spec | 1 + 1 file changed, 1 insertion(+) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 675b28b..d2652d8 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -14,6 +14,7 @@ Source2: libval-config Requires: perl(Net::DNS), perl(Net::DNS::SEC), dnssec-tools-perlmods, bind, perl(Getopt::GUI::Long) Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version)) Requires: perl(GraphViz) +BuildRequires: gcc BuildRequires: openssl-devel BuildRequires: perl-devel BuildRequires: perl-generators From eb01f699211b96d29ee83865bfc4ab09e25b322b Mon Sep 17 00:00:00 2001 From: Wes Hardaker Date: Mon, 30 Jul 2018 13:02:45 -0700 Subject: [PATCH 12/58] requires perl --- dnssec-tools.spec | 1 + 1 file changed, 1 insertion(+) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index c4c4be0..d328336 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -15,6 +15,7 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) Requires: perl(Net::DNS), perl(Net::DNS::SEC), dnssec-tools-perlmods, bind, perl(Getopt::GUI::Long) Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version)) Requires: perl(GraphViz) +BuildRequires: perl-interpreter BuildRequires: openssl-devel BuildRequires: perl-devel BuildRequires: perl-generators From 850ea577585de3f4ae5259ccb22bee111422059b Mon Sep 17 00:00:00 2001 From: Wes Hardaker Date: Mon, 30 Jul 2018 13:36:55 -0700 Subject: [PATCH 13/58] upgrade to 2.2.1 and move source location --- dnssec-tools.spec | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index d328336..0b52980 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,11 +1,12 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools -Version: 2.2 +Version: 2.2.1 Release: 7%{?dist} License: BSD Group: System Environment/Base URL: http://www.dnssec-tools.org/ -Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz +#Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz +Source0: https://www.hardakers.net/software/%{name}-%{version}.tar.gz Source1: dnssec-tools-dnsval.conf Source2: libval-config BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) @@ -15,10 +16,10 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) Requires: perl(Net::DNS), perl(Net::DNS::SEC), dnssec-tools-perlmods, bind, perl(Getopt::GUI::Long) Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version)) Requires: perl(GraphViz) -BuildRequires: perl-interpreter BuildRequires: openssl-devel BuildRequires: perl-devel -BuildRequires: perl-generators +#BuildRequires: perl-generators +#BuildRequires: perl-generators BuildRequires: perl(Test) perl(ExtUtils::MakeMaker) # Makes the code installation linux filesystem friendly Patch5: dnssec-tools-linux-conf-paths-1.13.patch @@ -29,6 +30,7 @@ Patch14: dnssec-tools-zonefile-fast-misc.patch Patch15: dnssec-tools-zonefile-fast-nsec3-fixes.patch Patch16: dnssec-tools-zonefile-fast-tlsa-fixes.patch Patch17: dnssec-tools-new-2017-key.patch +Patch18: dnssec-tools-new-openssl-APIs.patch %description @@ -73,7 +75,8 @@ C-based libraries useful for developing dnssec aware tools. #%patch14 -p2 #%patch15 -p2 #%patch16 -p2 -%patch17 -p2 +#%patch17 -p2 +#%patch18 -p2 %build %configure --with-validator-testcases-file=%{_datadir}/dnssec-tools/validator-testcases --with-perl-build-args="INSTALLDIRS=vendor OPTIMIZE='$RPM_OPT_FLAGS'" --sysconfdir=/etc --with-root-hints=/etc/dnssec-tools/root.hints --with-resolv-conf=/etc/dnssec-tools/resolv.conf --disable-static --with-nsec3 --with-ipv6 --with-dlv --disable-bind-checks From 92786b14d457889dabd327ba2920b4be3924e354 Mon Sep 17 00:00:00 2001 From: Wes Hardaker Date: Mon, 30 Jul 2018 13:55:34 -0700 Subject: [PATCH 14/58] 2.2.1 source --- sources | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sources b/sources index ec03a48..fb9d448 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -ceb39b4d2376bfc4aa22f73846c11789 dnssec-tools-2.2.tar.gz +SHA512 (dnssec-tools-2.2.1.tar.gz) = d0deaa8ac150c5001321c5bab9c5802b2f71eacb4935721681594e6d86c7d214759559a046ef01143693ea8ff15d4bc6b431ebfe23dc6803bbd39458ce99fc1e From f2b5eac57907a969d8145e3c03638a6deb4b0120 Mon Sep 17 00:00:00 2001 From: Wes Hardaker Date: Mon, 30 Jul 2018 13:56:03 -0700 Subject: [PATCH 15/58] missing patch --- dnssec-tools-new-openssl-APIs.patch | 464 ++++++++++++++++++++++++++++ 1 file changed, 464 insertions(+) create mode 100644 dnssec-tools-new-openssl-APIs.patch diff --git a/dnssec-tools-new-openssl-APIs.patch b/dnssec-tools-new-openssl-APIs.patch new file mode 100644 index 0000000..37baf01 --- /dev/null +++ b/dnssec-tools-new-openssl-APIs.patch @@ -0,0 +1,464 @@ +diff --git a/dnssec-tools/validator/doc/dt-danechk.1 b/dnssec-tools/validator/doc/dt-danechk.1 +index 0d7f5c0a..afe6df47 100644 +--- a/dnssec-tools/validator/doc/dt-danechk.1 ++++ b/dnssec-tools/validator/doc/dt-danechk.1 +@@ -1,4 +1,4 @@ +-.\" Automatically generated by Pod::Man 2.23 (Pod::Simple 3.14) ++.\" Automatically generated by Pod::Man 4.09 (Pod::Simple 3.35) + .\" + .\" Standard preamble: + .\" ======================================================================== +@@ -38,26 +38,31 @@ + . ds PI \(*p + . ds L" `` + . ds R" '' ++. ds C` ++. ds C' + 'br\} + .\" + .\" Escape single quotes in literal strings from groff's Unicode transform. + .ie \n(.g .ds Aq \(aq + .el .ds Aq ' + .\" +-.\" If the F register is turned on, we'll generate index entries on stderr for ++.\" If the F register is >0, we'll generate index entries on stderr for + .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index + .\" entries marked with X<> in POD. Of course, you'll have to process the + .\" output yourself in some meaningful fashion. +-.ie \nF \{\ +-. de IX +-. tm Index:\\$1\t\\n%\t"\\$2" ++.\" ++.\" Avoid warning from groff about undefined register 'F'. ++.de IX + .. +-. nr % 0 +-. rr F +-.\} +-.el \{\ ++.if !\nF .nr F 0 ++.if \nF>0 \{\ + . de IX ++. tm Index:\\$1\t\\n%\t"\\$2" + .. ++. if !\nF==2 \{\ ++. nr % 0 ++. nr F 2 ++. \} + .\} + .\" + .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). +@@ -124,7 +129,7 @@ + .\" ======================================================================== + .\" + .IX Title "DT-DANECHK 1" +-.TH DT-DANECHK 1 "2013-03-07" "perl v5.12.4" "User Commands" ++.TH DT-DANECHK 1 "2016-12-16" "perl v5.26.2" "User Commands" + .\" For nroff, turn off justification. Always turn off hyphenation; it makes + .\" way too many mistakes in technical documents. + .if n .ad l +@@ -139,8 +144,8 @@ dt\-danechk \- validate TLSA records against SSL certificates. + .SH "DESCRIPTION" + .IX Header "DESCRIPTION" + \&\fBdt-danechk\fR is a diagnostic tool that can be used to test the validity +-of an \s-1SSL/TLS\s0 certificate against the \s-1TLSA\s0 record published in the \s-1DNS\s0. +-For more information on \s-1TLSA\s0 and \s-1DANE\s0 see \s-1RFC\s0 6698. ++of an \s-1SSL/TLS\s0 certificate against the \s-1TLSA\s0 record published in the \s-1DNS.\s0 ++For more information on \s-1TLSA\s0 and \s-1DANE\s0 see \s-1RFC 6698.\s0 + .SH "OPTIONS" + .IX Header "OPTIONS" + .IP "\-h, \-\-help" 4 +@@ -204,7 +209,7 @@ Display the version and exit. + \&\fBlibval\fR + .SH "COPYRIGHT" + .IX Header "COPYRIGHT" +-Copyright 2005\-2013 \s-1SPARTA\s0, Inc. All rights reserved. ++Copyright 2005\-2013 \s-1SPARTA,\s0 Inc. All rights reserved. + See the \s-1COPYING\s0 file included with the DNSSEC-Tools package for details. + .SH "AUTHORS" + .IX Header "AUTHORS" +diff --git a/dnssec-tools/validator/doc/val_getdaneinfo.3 b/dnssec-tools/validator/doc/val_getdaneinfo.3 +index 12f3be6d..148b5a5c 100644 +--- a/dnssec-tools/validator/doc/val_getdaneinfo.3 ++++ b/dnssec-tools/validator/doc/val_getdaneinfo.3 +@@ -1,4 +1,4 @@ +-.\" Automatically generated by Pod::Man 2.23 (Pod::Simple 3.14) ++.\" Automatically generated by Pod::Man 4.09 (Pod::Simple 3.35) + .\" + .\" Standard preamble: + .\" ======================================================================== +@@ -38,26 +38,31 @@ + . ds PI \(*p + . ds L" `` + . ds R" '' ++. ds C` ++. ds C' + 'br\} + .\" + .\" Escape single quotes in literal strings from groff's Unicode transform. + .ie \n(.g .ds Aq \(aq + .el .ds Aq ' + .\" +-.\" If the F register is turned on, we'll generate index entries on stderr for ++.\" If the F register is >0, we'll generate index entries on stderr for + .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index + .\" entries marked with X<> in POD. Of course, you'll have to process the + .\" output yourself in some meaningful fashion. +-.ie \nF \{\ +-. de IX +-. tm Index:\\$1\t\\n%\t"\\$2" ++.\" ++.\" Avoid warning from groff about undefined register 'F'. ++.de IX + .. +-. nr % 0 +-. rr F +-.\} +-.el \{\ ++.if !\nF .nr F 0 ++.if \nF>0 \{\ + . de IX ++. tm Index:\\$1\t\\n%\t"\\$2" + .. ++. if !\nF==2 \{\ ++. nr % 0 ++. nr F 2 ++. \} + .\} + .\" + .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). +@@ -124,7 +129,7 @@ + .\" ======================================================================== + .\" + .IX Title "val_getdaneinfo 3" +-.TH val_getdaneinfo 3 "2013-03-08" "perl v5.12.4" "Programmer's Manual" ++.TH val_getdaneinfo 3 "2016-12-16" "perl v5.26.2" "Programmer's Manual" + .\" For nroff, turn off justification. Always turn off hyphenation; it makes + .\" way too many mistakes in technical documents. + .if n .ad l +@@ -231,9 +236,9 @@ form below: + .Ve + .PP + The \fIttl\fR field is the time-to-live associated with the \s-1TLSA\s0 record. An +-application must not cache (and use) this \s-1TLSA\s0 record beyond its \s-1TTL\s0. ++application must not cache (and use) this \s-1TLSA\s0 record beyond its \s-1TTL.\s0 + The \fIusage\fR, \fIselector\fR and \fItype\fR fields correspond to the first +-three fields of the \s-1TLSA\s0 \s-1RDATA\s0 as described in rfc6698. The \s-1TLSA\s0 ++three fields of the \s-1TLSA RDATA\s0 as described in rfc6698. The \s-1TLSA\s0 + certificate association data is returned in the \fIdata\fR field and has + a length of \fIdatalen\fR bytes. There can be more than one \s-1TLSA\s0 record + associated with a given name, and the \fInext\fR field points to the next +@@ -250,7 +255,7 @@ This function automatically iterates over all elements in \fIdres\fR and + compares the certificate association data against the \s-1SSL/TLS\s0 + certificates associated with the \s-1SSL\s0 connection \fIcon\fR. The \s-1DANE\s0 + protocol enables certain use cases that allows new trust anchors to be +-introduced via \s-1DNSSEC\s0. The value of \fIdo_pathval\fR indicates whether ++introduced via \s-1DNSSEC.\s0 The value of \fIdo_pathval\fR indicates whether + the application must proceed with X509 path validation for this + connection in accordance with the usage that was encoded in the \s-1TLSA\s0 + record. +@@ -267,7 +272,7 @@ validation policy). + \&\fI\fIval_getdaneinfo()\fI\fR and \fI\fIval_dane_submit()\fI\fR return \fB\s-1VAL_DANE_NOERROR\s0\fR + on success, and \fB\s-1VAL_DANE_MALFORMED_TLSA\s0\fR or \fB\s-1VAL_DANE_INTERNAL_ERROR\s0\fR + for error conditions. A value of \fB\s-1VAL_DANE_NOTVALIDATED\s0\fR is returned if +-the \s-1TLSA\s0 record cannot be validated via \s-1DNSSEC\s0. A value of ++the \s-1TLSA\s0 record cannot be validated via \s-1DNSSEC. A\s0 value of + \&\fB\s-1VAL_DANE_IGNORE_TLSA\s0\fR is returned if the \s-1TLSA\s0 record for the given name + is provably absent. + .PP +@@ -285,7 +290,7 @@ The \fI\fIp_dane_error()\fI\fR function can be used to convert the DANE-related + error codes to an error string value. + .SH "COPYRIGHT" + .IX Header "COPYRIGHT" +-Copyright 2004\-2013 \s-1SPARTA\s0, Inc. All rights reserved. ++Copyright 2004\-2013 \s-1SPARTA,\s0 Inc. All rights reserved. + See the \s-1COPYING\s0 file included with the DNSSEC-Tools package for details. + .SH "AUTHORS" + .IX Header "AUTHORS" +@@ -294,7 +299,7 @@ Suresh Krishnaswamy + .IX Header "SEE ALSO" + \&\fI\fIlibval\fI\|(3)\fR + .PP +-\&\s-1RFC\s0 6698 (\s-1DANE\s0) ++\&\s-1RFC 6698\s0 (\s-1DANE\s0) + .PP + draft-hayatnagarkar-dnsext-validator-api + .PP +diff --git a/dnssec-tools/validator/etc/dnsval.conf b/dnssec-tools/validator/etc/dnsval.conf +index 07288fe3..34bbe6d6 100644 +--- a/dnssec-tools/validator/etc/dnsval.conf ++++ b/dnssec-tools/validator/etc/dnsval.conf +@@ -21,6 +21,7 @@ global-options + + : trust-anchor + . DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5 ++ . DS 19036 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D + ; + + : zone-security-expectation +diff --git a/dnssec-tools/validator/include/validator/validator-compat.h b/dnssec-tools/validator/include/validator/validator-compat.h +index c6ebf23f..300ef11e 100644 +--- a/dnssec-tools/validator/include/validator/validator-compat.h ++++ b/dnssec-tools/validator/include/validator/validator-compat.h +@@ -818,14 +818,6 @@ typedef enum __ns_flag { + ns_f_max + } ns_flag; + +-/* The Algorithm field of the KEY and SIG RR's is an integer, {1..254} */ +-#define NS_ALG_MD5RSA 1 /* MD5 with RSA */ +-#define NS_ALG_DH 2 /* Diffie Hellman KEY */ +-#define NS_ALG_DSA 3 /* DSA KEY */ +-#define NS_ALG_DSS NS_ALG_DSA +-#define NS_ALG_EXPIRE_ONLY 253 /* No alg, no security */ +-#define NS_ALG_PRIVATE_OID 254 /* Key begins with OID giving alg */ +- + /* Protocol values */ + /* value 0 is reserved */ + #define NS_KEY_PROT_TLS 1 +@@ -1050,5 +1042,26 @@ struct addrinfo { + #endif + + ++/* The Algorithm field of the KEY and SIG RR's is an integer, {1..254} */ ++#define NS_ALG_MD5RSA 1 /* MD5 with RSA */ ++#define NS_ALG_DH 2 /* Diffie Hellman KEY */ ++#define NS_ALG_DSA 3 /* DSA KEY */ ++#define NS_ALG_DSS NS_ALG_DSA ++#define NS_ALG_EXPIRE_ONLY 253 /* No alg, no security */ ++#define NS_ALG_PRIVATE_OID 254 /* Key begins with OID giving alg */ ++#define ns_t_zxfr 256 ++ ++#define NS_MD5RSA_MIN_BITS 512 /* Size of a mod or exp in bits */ ++#define NS_MD5RSA_MAX_BITS 2552 ++ /* Total of binary mod and exp */ ++#define NS_MD5RSA_MAX_BYTES ((NS_MD5RSA_MAX_BITS+7/8)*2+3) ++ /* Max length of text sig block */ ++#define NS_MD5RSA_MAX_BASE64 (((NS_MD5RSA_MAX_BYTES+2)/3)*4) ++#define NS_MD5RSA_MIN_SIZE ((NS_MD5RSA_MIN_BITS+7)/8) ++#define NS_MD5RSA_MAX_SIZE ((NS_MD5RSA_MAX_BITS+7)/8) ++ ++#include "openssl/hmac.h" ++#include "openssl/ossl_typ.h" ++ + #endif /* _VALIDATOR_COMPAT_H */ + +diff --git a/dnssec-tools/validator/libsres/ns_print.c b/dnssec-tools/validator/libsres/ns_print.c +index 98f1f9c3..edcbbbc3 100644 +--- a/dnssec-tools/validator/libsres/ns_print.c ++++ b/dnssec-tools/validator/libsres/ns_print.c +@@ -712,6 +712,10 @@ ns_sprintrrf_data(const u_char * msg, size_t msglen, + nxtbitmaps: + #endif /* LIBVAL_NSEC3 */ + ++#if !defined(NS_NXT_BIT_ISSET) ++#define NS_NXT_BITS 8 ++#define NS_NXT_BIT_ISSET(n,p) (p[(n)/NS_NXT_BITS] & (0x80>>((n)%NS_NXT_BITS))) ++#endif + /** Type bit map. */ + while (edata - rdata > 0) { + b = *rdata; +diff --git a/dnssec-tools/validator/libsres/res_tsig.c b/dnssec-tools/validator/libsres/res_tsig.c +index bc010302..03f73c49 100644 +--- a/dnssec-tools/validator/libsres/res_tsig.c ++++ b/dnssec-tools/validator/libsres/res_tsig.c +@@ -16,6 +16,7 @@ + */ + #include "validator-internal.h" + ++#include + #include + + #include "res_tsig.h" +@@ -237,7 +238,7 @@ res_tsig_sign(u_char * query, + u_char *hp; + HEADER *header; + struct timeval now; +- HMAC_CTX ctx; ++ HMAC_CTX *ctx; + const EVP_MD *md; + u_char hash[MAX_DIGEST_LENGTH]; + unsigned int len; +@@ -274,8 +275,8 @@ res_tsig_sign(u_char * query, + return SR_TS_FAIL; + } + +- HMAC_CTX_init(&ctx); +- HMAC_Init_ex(&ctx, ns->ns_tsig->key, ns->ns_tsig->keylen, ++ ctx = HMAC_CTX_new(); ++ HMAC_Init_ex(ctx, ns->ns_tsig->key, ns->ns_tsig->keylen, + md, NULL); + + /* Create a TSIG RR and add it to the additional section */ +@@ -289,7 +290,7 @@ res_tsig_sign(u_char * query, + p = cp; + memcpy(cp, query, query_length * sizeof(u_char)); + cp += query_length; +- HMAC_Update(&ctx, p, cp-p); ++ HMAC_Update(ctx, p, cp-p); + + /* Bump up the additional section count */ + header = (HEADER *) p; +@@ -300,7 +301,7 @@ res_tsig_sign(u_char * query, + p = cp; + memcpy(cp, ns->ns_tsig->name_n, wire_name_length(ns->ns_tsig->name_n)); + cp += wire_name_length(ns->ns_tsig->name_n); +- HMAC_Update(&ctx, p, cp-p); ++ HMAC_Update(ctx, p, cp-p); + + /* don't digest type */ + RES_PUT16(ns_t_tsig, cp); +@@ -308,7 +309,7 @@ res_tsig_sign(u_char * query, + p = cp; + RES_PUT16(ns_t_any, cp); + RES_PUT32(0, cp); +- HMAC_Update(&ctx, p, cp-p); ++ HMAC_Update(ctx, p, cp-p); + + /* don't digest rdatalen */ + RES_PUT16(ns->ns_tsig->rdatalen, cp); +@@ -316,13 +317,13 @@ res_tsig_sign(u_char * query, + p = cp; + memcpy(cp, ns->ns_tsig->alg_n, wire_name_length(ns->ns_tsig->alg_n)); + cp += wire_name_length(ns->ns_tsig->alg_n); +- HMAC_Update(&ctx, p, cp-p); ++ HMAC_Update(ctx, p, cp-p); + + gettimeofday(&now, NULL); + p = cp; + RES_PUT48((u_int64_t)now.tv_sec, cp); + RES_PUT16(ns->ns_tsig->fudge, cp); +- HMAC_Update(&ctx, p, cp-p); ++ HMAC_Update(ctx, p, cp-p); + + /* don't digest the mac_size */ + RES_PUT16(ns->ns_tsig->mac_size, cp); +@@ -337,9 +338,9 @@ res_tsig_sign(u_char * query, + p = cp; + RES_PUT16(0, cp); + RES_PUT16(0, cp); +- HMAC_Update(&ctx, p, cp-p); ++ HMAC_Update(ctx, p, cp-p); + +- HMAC_Final(&ctx, hash, &len); ++ HMAC_Final(ctx, hash, &len); + + if (len != ns->ns_tsig->mac_size) { + FREE(*signed_query); +@@ -348,7 +349,7 @@ res_tsig_sign(u_char * query, + } + memcpy(hp, hash, len); + +- HMAC_CTX_cleanup(&ctx); ++ HMAC_CTX_free(ctx); + return SR_TS_OK; + + } else +diff --git a/dnssec-tools/validator/libval/val_crypto.c b/dnssec-tools/validator/libval/val_crypto.c +index 46d1ce5d..b3ccdcd4 100644 +--- a/dnssec-tools/validator/libval/val_crypto.c ++++ b/dnssec-tools/validator/libval/val_crypto.c +@@ -22,6 +22,7 @@ + #include + #endif + #include ++#include + #include + #include + #include +@@ -77,10 +78,8 @@ dsasha1_parse_public_key(const u_char *buf, size_t buflen, DSA * dsa) + bn_y = BN_bin2bn(buf + index, 64 + (T * 8), NULL); + index += (64 + (T * 8)); + +- dsa->p = bn_p; +- dsa->q = bn_q; +- dsa->g = bn_g; +- dsa->pub_key = bn_y; ++ DSA_set0_pqg(dsa, bn_p, bn_q, bn_g); ++ DSA_set0_key(dsa, bn_y, NULL); + + return VAL_NO_ERROR; /* success */ + } +@@ -214,8 +213,7 @@ rsamd5_parse_public_key(const u_char *buf, size_t buflen, RSA * rsa) + */ + bn_mod = BN_bin2bn(buf + index, buflen - index, NULL); + +- rsa->e = bn_exp; +- rsa->n = bn_mod; ++ RSA_set0_key(rsa, bn_mod, bn_exp, NULL); + + return VAL_NO_ERROR; /* success */ + } +@@ -246,7 +244,7 @@ rsamd5_keytag(const u_char *pubkey, size_t pubkey_len) + return VAL_BAD_ARGUMENT; + } + +- modulus = rsa->n; ++ RSA_get0_key(rsa, (const BIGNUM **) &modulus, NULL, NULL); + modulus_len = BN_num_bytes(modulus); + modulus_bin = + (u_char *) MALLOC(modulus_len * sizeof(u_char)); +@@ -361,8 +359,7 @@ rsa_parse_public_key(const u_char *buf, size_t buflen, RSA * rsa) + */ + bn_mod = BN_bin2bn(buf + index, buflen - index, NULL); + +- rsa->e = bn_exp; +- rsa->n = bn_mod; ++ RSA_set0_key(rsa, bn_mod, bn_exp, NULL); + + return VAL_NO_ERROR; /* success */ + } +@@ -460,11 +457,10 @@ ecdsa_sigverify(val_context_t * ctx, + EC_KEY *eckey = NULL; + BIGNUM *bn_x = NULL; + BIGNUM *bn_y = NULL; +- ECDSA_SIG ecdsa_sig; ++ ECDSA_SIG *ecdsa_sig; + size_t hashlen = 0; + +- ecdsa_sig.r = NULL; +- ecdsa_sig.s = NULL; ++ ecdsa_sig = ECDSA_SIG_new(); + memset(sha_hash, 0, sizeof(sha_hash)); + + val_log(ctx, LOG_DEBUG, +@@ -523,10 +519,10 @@ ecdsa_sigverify(val_context_t * ctx, + goto err; + } + +- ecdsa_sig.r = BN_bin2bn(rrsig->signature, hashlen, NULL); +- ecdsa_sig.s = BN_bin2bn(&rrsig->signature[hashlen], hashlen, NULL); ++ ECDSA_SIG_set0(ecdsa_sig, BN_bin2bn(rrsig->signature, hashlen, NULL), ++ BN_bin2bn(&rrsig->signature[hashlen], hashlen, NULL)); + +- if (ECDSA_do_verify(sha_hash, hashlen, &ecdsa_sig, eckey) == 1) { ++ if (ECDSA_do_verify(sha_hash, hashlen, ecdsa_sig, eckey) == 1) { + val_log(ctx, LOG_INFO, "ecdsa_sigverify(): returned SUCCESS"); + *sig_status = VAL_AC_RRSIG_VERIFIED; + } else { +@@ -536,10 +532,8 @@ ecdsa_sigverify(val_context_t * ctx, + + /* Free all structures allocated */ + err: +- if (ecdsa_sig.r) +- BN_free(ecdsa_sig.r); +- if (ecdsa_sig.s) +- BN_free(ecdsa_sig.s); ++ if (ecdsa_sig) ++ ECDSA_SIG_free(ecdsa_sig); + if (bn_x) + BN_free(bn_x); + if (bn_y) +diff --git a/dnssec-tools/validator/libval/val_dane.c b/dnssec-tools/validator/libval/val_dane.c +index 32ffdc7a..16b0a0b2 100644 +--- a/dnssec-tools/validator/libval/val_dane.c ++++ b/dnssec-tools/validator/libval/val_dane.c +@@ -875,7 +875,8 @@ val_X509_peer_cert_verify_cb(X509_STORE_CTX *x509ctx, void *arg) + if (x509ctx == NULL || ssl_dane_data == NULL) + return 0; + +- cert = x509ctx->cert; ++ ++ cert = X509_STORE_CTX_get_current_cert(x509ctx); + context = ssl_dane_data->context; + + /* From 7dc9a9d52a329716affccffe2b541bc2ad1ec7c0 Mon Sep 17 00:00:00 2001 From: Wes Hardaker Date: Mon, 30 Jul 2018 13:56:13 -0700 Subject: [PATCH 16/58] ignore --- .gitignore | 1 + 1 file changed, 1 insertion(+) diff --git a/.gitignore b/.gitignore index 63bf0e7..8e7518b 100644 --- a/.gitignore +++ b/.gitignore @@ -10,3 +10,4 @@ x86_64 /dnssec-tools-2.0.tar.gz /dnssec-tools-2.1.tar.gz /dnssec-tools-2.2.tar.gz +/dnssec-tools-2.2.1.tar.gz From 3af9e3977c470611a460aa62c045224288029bbd Mon Sep 17 00:00:00 2001 From: Wes Hardaker Date: Wed, 29 Aug 2018 14:53:21 -0700 Subject: [PATCH 17/58] Added Mail::Send --- dnssec-tools.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index bfe5319..e35d326 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -12,7 +12,7 @@ Source2: libval-config # Require note: the auto-detection for perl-Net-DNS-SEC will not work since # the tools do run time tests for their existence. But most of the tools # are much more useful with the modules in place, so we hand require them. -Requires: perl(Net::DNS), perl(Net::DNS::SEC), dnssec-tools-perlmods, bind, perl(Getopt::GUI::Long) +Requires: perl(Net::DNS), perl(Net::DNS::SEC), dnssec-tools-perlmods, bind, perl(Getopt::GUI::Long) perl(Mail::Send) Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version)) Requires: perl(GraphViz) BuildRequires: gcc From 4cbc4507f0de820661786bbfe8fab7b014f14621 Mon Sep 17 00:00:00 2001 From: Wes Hardaker Date: Wed, 29 Aug 2018 14:53:21 -0700 Subject: [PATCH 18/58] Added Mail::Send --- dnssec-tools.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index bfe5319..e35d326 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -12,7 +12,7 @@ Source2: libval-config # Require note: the auto-detection for perl-Net-DNS-SEC will not work since # the tools do run time tests for their existence. But most of the tools # are much more useful with the modules in place, so we hand require them. -Requires: perl(Net::DNS), perl(Net::DNS::SEC), dnssec-tools-perlmods, bind, perl(Getopt::GUI::Long) +Requires: perl(Net::DNS), perl(Net::DNS::SEC), dnssec-tools-perlmods, bind, perl(Getopt::GUI::Long) perl(Mail::Send) Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version)) Requires: perl(GraphViz) BuildRequires: gcc From 7fd2085cc7351032c0e305165f03750c1912a481 Mon Sep 17 00:00:00 2001 From: Wes Hardaker Date: Wed, 29 Aug 2018 14:57:54 -0700 Subject: [PATCH 19/58] version bump --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index e35d326..16d2a6f 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.1 -Release: 1%{?dist} +Release: 2%{?dist} License: BSD Group: System Environment/Base URL: http://www.dnssec-tools.org/ @@ -365,6 +365,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Wed Aug 29 2018 Wes Hardaker - 2.2.1-2 +- add Mail::Send + * Thu Jul 30 2018 Wes Hardaker - 2.2.1-1 - fix build issues From 6000550b8ab76d645ad74679bbb2cffb48dd0c15 Mon Sep 17 00:00:00 2001 From: Wes Hardaker Date: Wed, 29 Aug 2018 15:54:14 -0700 Subject: [PATCH 20/58] 2.2.3 --- .gitignore | 1 + sources | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/.gitignore b/.gitignore index 8e7518b..e45d36e 100644 --- a/.gitignore +++ b/.gitignore @@ -11,3 +11,4 @@ x86_64 /dnssec-tools-2.1.tar.gz /dnssec-tools-2.2.tar.gz /dnssec-tools-2.2.1.tar.gz +/dnssec-tools-2.2.3.tar.gz diff --git a/sources b/sources index fb9d448..9a6d52d 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (dnssec-tools-2.2.1.tar.gz) = d0deaa8ac150c5001321c5bab9c5802b2f71eacb4935721681594e6d86c7d214759559a046ef01143693ea8ff15d4bc6b431ebfe23dc6803bbd39458ce99fc1e +SHA512 (dnssec-tools-2.2.3.tar.gz) = b83d3dfc999560937f7bb5558caf45449ad0501818b2b7cbbdc03008a365cd1d37aae6dff49b7c6785f737d1a01f20d3bf35bb7c86e9f9fca7eff5f5b35b8834 From e8d29bac13e1010b89b20b86db4a650ce9fae0f3 Mon Sep 17 00:00:00 2001 From: Wes Hardaker Date: Wed, 29 Aug 2018 15:54:31 -0700 Subject: [PATCH 21/58] upstream version bump --- dnssec-tools.spec | 13 +++++-------- 1 file changed, 5 insertions(+), 8 deletions(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 16d2a6f..85cce2e 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools -Version: 2.2.1 -Release: 2%{?dist} +Version: 2.2.3 +Release: 1%{?dist} License: BSD Group: System Environment/Base URL: http://www.dnssec-tools.org/ @@ -23,12 +23,7 @@ BuildRequires: perl-devel BuildRequires: perl(Test) perl(ExtUtils::MakeMaker) # Makes the code installation linux filesystem friendly Patch5: dnssec-tools-linux-conf-paths-1.13.patch -Patch6: dnssec-tools-zonefile-fast-new-bind-1.13.patch -Patch12: dnssec-tools-zonefile-fast-nsec3-1.20.patch Patch13: dnssec-tools-2.0-autoconf-for-aarch64.patch -Patch14: dnssec-tools-zonefile-fast-misc.patch -Patch15: dnssec-tools-zonefile-fast-nsec3-fixes.patch -Patch16: dnssec-tools-zonefile-fast-tlsa-fixes.patch Patch17: dnssec-tools-new-2017-key.patch Patch18: dnssec-tools-new-openssl-APIs.patch @@ -286,7 +281,6 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %{_mandir}/man3/Net::DNS::SEC::Validator.3pm.gz %{_mandir}/man3/Net::addrinfo.3pm.gz %{_mandir}/man3/Net::DNS::SEC::Tools::Donuts::Rule.3pm.gz -%{_mandir}/man3/Net::DNS::ZoneFile::Fast.3pm.gz %{_mandir}/man3/Net::DNS::SEC::Tools::rolllog.3pm.gz %{_mandir}/man3/Net::DNS::SEC::Tools::TrustAnchor.3pm.gz @@ -365,6 +359,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Wed Aug 29 2018 Wes Hardaker - 2.2.3-1 +- match upstream version + * Wed Aug 29 2018 Wes Hardaker - 2.2.1-2 - add Mail::Send From fb05fc5c949d5641a6f647573e25882424561e7f Mon Sep 17 00:00:00 2001 From: Wes Hardaker Date: Wed, 29 Aug 2018 15:56:17 -0700 Subject: [PATCH 22/58] README -> README.md --- dnssec-tools.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 85cce2e..e5b9cb9 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -110,7 +110,7 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %postun libs -p /sbin/ldconfig %files -%doc README INSTALL COPYING +%doc README.md INSTALL COPYING %dir %{_sysconfdir}/dnssec-tools/ %config(noreplace) %{_sysconfdir}/dnssec-tools/dnssec-tools.conf From caaf950dd0d8498e693a97ae8490e58c39c508a8 Mon Sep 17 00:00:00 2001 From: Wes Hardaker Date: Wed, 29 Aug 2018 16:10:39 -0700 Subject: [PATCH 23/58] spec file fixes for 2.2.3 --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index e5b9cb9..a2bd275 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -293,6 +293,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %{_mandir}/man3/Net::DNS::SEC::Tools::TrustAnchor::Mf.3pm.gz %{_mandir}/man3/Net::DNS::SEC::Tools::TrustAnchor::Secspider.3pm.gz +# obsolete module still in upstream source: +%{_mandir}/man3/Net::DNS::ZoneFile::Fast.3pm.gz + %files libs %{_libdir}/*.so.* %config(noreplace) %{_sysconfdir}/dnssec-tools @@ -365,7 +368,7 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config * Wed Aug 29 2018 Wes Hardaker - 2.2.1-2 - add Mail::Send -* Thu Jul 30 2018 Wes Hardaker - 2.2.1-1 +* Mon Jul 30 2018 Wes Hardaker - 2.2.1-1 - fix build issues * Thu Jul 12 2018 Fedora Release Engineering - 2.2-10 From 62bdbb2e58b9ea1d8cdbb3e395f4b273c4a3fa59 Mon Sep 17 00:00:00 2001 From: Wes Hardaker Date: Thu, 4 Oct 2018 08:23:14 -0700 Subject: [PATCH 24/58] newer version of dnsval.conf --- dnssec-tools-dnsval.conf | 61 ++++++++++++++++++++++++++++++++++++---- 1 file changed, 56 insertions(+), 5 deletions(-) diff --git a/dnssec-tools-dnsval.conf b/dnssec-tools-dnsval.conf index 7a61654..724ac23 100644 --- a/dnssec-tools-dnsval.conf +++ b/dnssec-tools-dnsval.conf @@ -1,10 +1,61 @@ -: trust-anchor - . DS "19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5" +################################## +# Includes +################################## + +# TRUSTMAN-ACTION bind-include /var/opt/named/named.conf + +################################## +# Global Options +################################## + +global-options + trust-oob-answers yes + edns0-size 1492 + env-policy disable + app-policy disable ; -: zone-security-expectation - . validate +################################## +# Default policies +################################## + +: trust-anchor + . DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5 + . DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D ; + +: zone-security-expectation + . validate +; + : provably-insecure-status - . trusted + . trusted +; + +: clock-skew + . 0 +; + +################################## +# MTA Policies +################################## + +mta provably-insecure-status + . trusted +; + +mta clock-skew + . -1 +; + +################################## +# Web Browser Policies +################################## + +browser provably-insecure-status + . trusted +; + +browser clock-skew + . 0 ; From 4309f51fa756a73648eae1fa671b9d1e5c600d51 Mon Sep 17 00:00:00 2001 From: Wes Hardaker Date: Thu, 4 Oct 2018 08:24:05 -0700 Subject: [PATCH 25/58] update --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index a2bd275..4b03143 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 1%{?dist} +Release: 2%{?dist} License: BSD Group: System Environment/Base URL: http://www.dnssec-tools.org/ @@ -362,6 +362,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Thu Oct 4 2018 Wes Hardaker - 2.2.3-2 +- update default dnsval.conf + * Wed Aug 29 2018 Wes Hardaker - 2.2.3-1 - match upstream version From fabbfde0b4d0ae4cebf8119809fc5702ad10514f Mon Sep 17 00:00:00 2001 From: Igor Gnatenko Date: Tue, 22 Jan 2019 18:38:50 +0100 Subject: [PATCH 26/58] Remove obsolete ldconfig scriptlets References: https://fedoraproject.org/wiki/Changes/RemoveObsoleteScriptlets Signed-off-by: Igor Gnatenko --- dnssec-tools.spec | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 4b03143..9997fd4 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -105,9 +105,7 @@ mv ${RPM_BUILD_ROOT}/%{_bindir}/libval-config ${RPM_BUILD_ROOT}/%{_bindir}/libva # Add a new wrapper script that calls the right file at run time install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config -%post libs -p /sbin/ldconfig - -%postun libs -p /sbin/ldconfig +%ldconfig_scriptlets libs %files %doc README.md INSTALL COPYING From f9e112eb2f6ab1170594972a028667e9d83c659b Mon Sep 17 00:00:00 2001 From: Igor Gnatenko Date: Mon, 28 Jan 2019 20:17:42 +0100 Subject: [PATCH 27/58] Remove obsolete Group tag References: https://fedoraproject.org/wiki/Changes/Remove_Group_Tag --- dnssec-tools.spec | 4 ---- 1 file changed, 4 deletions(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 9997fd4..a36fb3c 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -3,7 +3,6 @@ Name: dnssec-tools Version: 2.2.3 Release: 2%{?dist} License: BSD -Group: System Environment/Base URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz Source0: https://www.hardakers.net/software/%{name}-%{version}.tar.gz @@ -34,7 +33,6 @@ patches, applications, wrappers, extensions, and plugins that will help ease the deployment of DNSSEC-related technologies. %package perlmods -Group: System Environment/Libraries Summary: Perl modules supporting DNSSEC (needed by the dnssec-tools) Requires: perl(Net::DNS), perl(Net::DNS::SEC) @@ -45,7 +43,6 @@ required by the DNSSEC tools themselves as well as modules that are useful for other developers. %package libs -Group: System Environment/Libraries Summary: C-based libraries for dnssec aware tools Requires: openssl @@ -53,7 +50,6 @@ Requires: openssl C-based libraries useful for developing dnssec aware tools. %package libs-devel -Group: Development/Libraries Summary: C-based development libraries for dnssec aware tools Requires: dnssec-tools-libs = %{version}-%{release} From e33602fdb69792c42e356b331806b6088123046e Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 31 Jan 2019 17:25:17 +0000 Subject: [PATCH 28/58] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index a36fb3c..acf93b3 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 2%{?dist} +Release: 3%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz @@ -356,6 +356,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Thu Jan 31 2019 Fedora Release Engineering - 2.2.3-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + * Thu Oct 4 2018 Wes Hardaker - 2.2.3-2 - update default dnsval.conf From 25fde37185f604f0239e022eb17c17f01e63c6e4 Mon Sep 17 00:00:00 2001 From: Jitka Plesnikova Date: Thu, 30 May 2019 13:29:56 +0200 Subject: [PATCH 29/58] Perl 5.30 rebuild --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index acf93b3..39435d8 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 3%{?dist} +Release: 4%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz @@ -356,6 +356,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Thu May 30 2019 Jitka Plesnikova - 2.2.3-4 +- Perl 5.30 rebuild + * Thu Jan 31 2019 Fedora Release Engineering - 2.2.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild From 68fe995d4716dc085c14d9ac7ba6db4c03513db7 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 24 Jul 2019 22:12:58 +0000 Subject: [PATCH 30/58] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 39435d8..7fd045e 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 4%{?dist} +Release: 5%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz @@ -356,6 +356,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Wed Jul 24 2019 Fedora Release Engineering - 2.2.3-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + * Thu May 30 2019 Jitka Plesnikova - 2.2.3-4 - Perl 5.30 rebuild From 14390e1d3574e9775c2a65058c3937e54d5d9c6f Mon Sep 17 00:00:00 2001 From: Tom Callaway Date: Thu, 19 Dec 2019 16:39:45 -0500 Subject: [PATCH 31/58] fix libval-threads to link with dependent libs, use LDFLAGS --- ...c6b96422e499560fb10b95c1a481ea82656d.patch | 51 +++++++++++++++++++ ...-2.2.3-link-libval-threads-with-libs.patch | 17 +++++++ dnssec-tools.spec | 13 ++++- 3 files changed, 80 insertions(+), 1 deletion(-) create mode 100644 7287c6b96422e499560fb10b95c1a481ea82656d.patch create mode 100644 dnssec-tools-2.2.3-link-libval-threads-with-libs.patch diff --git a/7287c6b96422e499560fb10b95c1a481ea82656d.patch b/7287c6b96422e499560fb10b95c1a481ea82656d.patch new file mode 100644 index 0000000..266de8f --- /dev/null +++ b/7287c6b96422e499560fb10b95c1a481ea82656d.patch @@ -0,0 +1,51 @@ +From 7287c6b96422e499560fb10b95c1a481ea82656d Mon Sep 17 00:00:00 2001 +From: Conrad Kostecki +Date: Sun, 21 Apr 2019 12:55:15 +0200 +Subject: [PATCH] Update makefile to respect users LDFLAGS + +Signed-off-by: Conrad Kostecki +--- + dnssec-tools/validator/libsres/Makefile.in | 2 +- + dnssec-tools/validator/libval/Makefile.in | 2 +- + dnssec-tools/validator/libval_shim/Makefile.in | 2 +- + 3 files changed, 3 insertions(+), 3 deletions(-) + +diff --git a/dnssec-tools/validator/libsres/Makefile.in b/dnssec-tools/validator/libsres/Makefile.in +index e20f6d788..0ef21cf80 100644 +--- a/dnssec-tools/validator/libsres/Makefile.in ++++ b/dnssec-tools/validator/libsres/Makefile.in +@@ -63,7 +63,7 @@ clean: + $(RM) -rf $(LT_DIR) + + $(LIBRES): $(LOBJ) +- $(LIBTOOLLD) -o $@ $(LOBJ) ++ $(LIBTOOLLD) -o $@ $(LOBJ) $(LDFLAGS) + + install: + $(MKPATH) $(DESTDIR)$(libdir) +diff --git a/dnssec-tools/validator/libval/Makefile.in b/dnssec-tools/validator/libval/Makefile.in +index 0d6f35f99..6b361756c 100644 +--- a/dnssec-tools/validator/libval/Makefile.in ++++ b/dnssec-tools/validator/libval/Makefile.in +@@ -65,7 +65,7 @@ clean: + $(RM) -rf $(LT_DIR) + + $(LIBVAL): $(LOBJ) +- $(LIBTOOLLD) -o $@ $(LOBJ) $(LSRES) ++ $(LIBTOOLLD) -o $@ $(LOBJ) $(LSRES) $(LDFLAGS) + + install: + $(MKPATH) $(DESTDIR)$(libdir) +diff --git a/dnssec-tools/validator/libval_shim/Makefile.in b/dnssec-tools/validator/libval_shim/Makefile.in +index 8b7c8e550..303943cc3 100644 +--- a/dnssec-tools/validator/libval_shim/Makefile.in ++++ b/dnssec-tools/validator/libval_shim/Makefile.in +@@ -21,7 +21,7 @@ clean: + $(RM) -rf $(LT_DIR) + + $(LIBVAL_SHIM): $(LOBJ) +- $(LIBTOOLLD) -o $@ $(LOBJ) $(EXTRA_LIBS) ++ $(LIBTOOLLD) -o $@ $(LOBJ) $(EXTRA_LIBS) $(LDFLAGS) + + install: + $(MKPATH) $(DESTDIR)$(libdir) diff --git a/dnssec-tools-2.2.3-link-libval-threads-with-libs.patch b/dnssec-tools-2.2.3-link-libval-threads-with-libs.patch new file mode 100644 index 0000000..f160b6b --- /dev/null +++ b/dnssec-tools-2.2.3-link-libval-threads-with-libs.patch @@ -0,0 +1,17 @@ +diff -up dnssec-tools-2.2.3/validator/libval/Makefile.in.link-with-libs dnssec-tools-2.2.3/validator/libval/Makefile.in +--- dnssec-tools-2.2.3/validator/libval/Makefile.in.link-with-libs 2019-12-19 16:36:05.522457192 -0500 ++++ dnssec-tools-2.2.3/validator/libval/Makefile.in 2019-12-19 16:36:11.967342451 -0500 +@@ -1,3 +1,4 @@ ++LIBS=@LIBS@ + + INCL= ../include + LIB= ../libsres +@@ -65,7 +66,7 @@ clean: + $(RM) -rf $(LT_DIR) + + $(LIBVAL): $(LOBJ) +- $(LIBTOOLLD) -o $@ $(LOBJ) $(LSRES) $(LDFLAGS) ++ $(LIBTOOLLD) -o $@ $(LOBJ) $(LSRES) $(LIBS) $(LDFLAGS) + + install: + $(MKPATH) $(DESTDIR)$(libdir) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 7fd045e..dc25746 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 5%{?dist} +Release: 6%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz @@ -25,6 +25,11 @@ Patch5: dnssec-tools-linux-conf-paths-1.13.patch Patch13: dnssec-tools-2.0-autoconf-for-aarch64.patch Patch17: dnssec-tools-new-2017-key.patch Patch18: dnssec-tools-new-openssl-APIs.patch +# Update Makefile to respect users LDFLAGS +# https://github.com/DNSSEC-Tools/DNSSEC-Tools/commit/7287c6b96422e499560fb10b95c1a481ea82656d +Patch19: 7287c6b96422e499560fb10b95c1a481ea82656d.patch +# link libval-threads with libs +Patch20: dnssec-tools-2.2.3-link-libval-threads-with-libs.patch %description @@ -68,6 +73,8 @@ C-based libraries useful for developing dnssec aware tools. #%patch16 -p2 #%patch17 -p2 #%patch18 -p2 +%patch19 -p2 +%patch20 -p1 -b .link-with-libs %build %configure --with-validator-testcases-file=%{_datadir}/dnssec-tools/validator-testcases --with-perl-build-args="INSTALLDIRS=vendor OPTIMIZE='$RPM_OPT_FLAGS'" --sysconfdir=/etc --with-root-hints=/etc/dnssec-tools/root.hints --with-resolv-conf=/etc/dnssec-tools/resolv.conf --disable-static --with-nsec3 --with-ipv6 --with-dlv --disable-bind-checks @@ -356,6 +363,10 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Thu Dec 19 2019 Tom Callaway - 2.2.3-6 +- fix libval-threads to link with dependent libs +- use LDFLAGS + * Wed Jul 24 2019 Fedora Release Engineering - 2.2.3-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild From b8364d760629d06a0edfb39201c26ae8d3f246e9 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Tue, 28 Jan 2020 16:04:37 +0000 Subject: [PATCH 32/58] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index dc25746..0fce442 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 6%{?dist} +Release: 7%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz @@ -363,6 +363,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Tue Jan 28 2020 Fedora Release Engineering - 2.2.3-7 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + * Thu Dec 19 2019 Tom Callaway - 2.2.3-6 - fix libval-threads to link with dependent libs - use LDFLAGS From f42aad502943cf813ba7e23569fab015c82b3092 Mon Sep 17 00:00:00 2001 From: Jitka Plesnikova Date: Mon, 22 Jun 2020 17:42:35 +0200 Subject: [PATCH 33/58] Perl 5.32 rebuild --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 0fce442..0ce79c8 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 7%{?dist} +Release: 8%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz @@ -363,6 +363,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Mon Jun 22 2020 Jitka Plesnikova - 2.2.3-8 +- Perl 5.32 rebuild + * Tue Jan 28 2020 Fedora Release Engineering - 2.2.3-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild From 056abbe8cba0e9f76654c7510ab2e94494ec127f Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Mon, 27 Jul 2020 15:35:15 +0000 Subject: [PATCH 34/58] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 0ce79c8..9b68f2c 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 8%{?dist} +Release: 9%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz @@ -363,6 +363,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Mon Jul 27 2020 Fedora Release Engineering - 2.2.3-9 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + * Mon Jun 22 2020 Jitka Plesnikova - 2.2.3-8 - Perl 5.32 rebuild From 230e3cccbf162f2d5c81758af5c2e95a009f1cd1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= Date: Fri, 25 Sep 2020 11:18:23 +0200 Subject: [PATCH 35/58] Build-require perl-macros for Perl RPM macros %perl_vendorlib and %perl_vendorarch are delivered by perl-macros package. That package was required by perl-interpreter by an accident and it was corrected in perl-interpreter-5.32.0-463.fc34. Packages have to build-require perl-macros or perl-generators explictly. --- dnssec-tools.spec | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 9b68f2c..8b6e023 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 9%{?dist} +Release: 10%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz @@ -17,8 +17,7 @@ Requires: perl(GraphViz) BuildRequires: gcc BuildRequires: openssl-devel BuildRequires: perl-devel -#BuildRequires: perl-generators -#BuildRequires: perl-generators +BuildRequires: perl-macros BuildRequires: perl(Test) perl(ExtUtils::MakeMaker) # Makes the code installation linux filesystem friendly Patch5: dnssec-tools-linux-conf-paths-1.13.patch @@ -363,6 +362,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Fri Sep 25 2020 Petr Pisar - 2.2.3-10 +- Build-require perl-macros for Perl RPM macros + * Mon Jul 27 2020 Fedora Release Engineering - 2.2.3-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild From 141e3d36f6382d90cb682028e8352c358b891c41 Mon Sep 17 00:00:00 2001 From: Tom Stellard Date: Thu, 17 Dec 2020 04:39:18 +0000 Subject: [PATCH 36/58] Add BuildRequires: make https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot --- dnssec-tools.spec | 1 + 1 file changed, 1 insertion(+) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 8b6e023..29dd3a2 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -19,6 +19,7 @@ BuildRequires: openssl-devel BuildRequires: perl-devel BuildRequires: perl-macros BuildRequires: perl(Test) perl(ExtUtils::MakeMaker) +BuildRequires: make # Makes the code installation linux filesystem friendly Patch5: dnssec-tools-linux-conf-paths-1.13.patch Patch13: dnssec-tools-2.0-autoconf-for-aarch64.patch From 0f89df97008f314fccb66888a29ee3940136d740 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Tue, 26 Jan 2021 03:36:19 +0000 Subject: [PATCH 37/58] - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 29dd3a2..9d85d10 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 10%{?dist} +Release: 11%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz @@ -363,6 +363,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Tue Jan 26 2021 Fedora Release Engineering - 2.2.3-11 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + * Fri Sep 25 2020 Petr Pisar - 2.2.3-10 - Build-require perl-macros for Perl RPM macros From 3a8ca5ae9f3f83902d843e9027bda23c46282fd0 Mon Sep 17 00:00:00 2001 From: Jitka Plesnikova Date: Fri, 21 May 2021 12:03:42 +0200 Subject: [PATCH 38/58] Perl 5.34 rebuild --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 9d85d10..c794a1e 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 11%{?dist} +Release: 12%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz @@ -363,6 +363,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Fri May 21 2021 Jitka Plesnikova - 2.2.3-12 +- Perl 5.34 rebuild + * Tue Jan 26 2021 Fedora Release Engineering - 2.2.3-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild From 63ee41053d21c037534eb7ed1431a8693ec1208a Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 21 Jul 2021 20:58:38 +0000 Subject: [PATCH 39/58] - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index c794a1e..2733b84 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 12%{?dist} +Release: 13%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz @@ -363,6 +363,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Wed Jul 21 2021 Fedora Release Engineering - 2.2.3-13 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild + * Fri May 21 2021 Jitka Plesnikova - 2.2.3-12 - Perl 5.34 rebuild From 05482a67aa85b1e665090dfa3c9fd3590d48c535 Mon Sep 17 00:00:00 2001 From: Sahana Prasad Date: Tue, 14 Sep 2021 19:00:38 +0200 Subject: [PATCH 40/58] Rebuilt with OpenSSL 3.0.0 --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 2733b84..471562d 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 13%{?dist} +Release: 14%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz @@ -363,6 +363,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Tue Sep 14 2021 Sahana Prasad - 2.2.3-14 +- Rebuilt with OpenSSL 3.0.0 + * Wed Jul 21 2021 Fedora Release Engineering - 2.2.3-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild From 3b002d284871dcd9aee4fa26a25b8735006e4cea Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 20 Jan 2022 00:52:07 +0000 Subject: [PATCH 41/58] - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 471562d..03ea72b 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 14%{?dist} +Release: 15%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz @@ -363,6 +363,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Thu Jan 20 2022 Fedora Release Engineering - 2.2.3-15 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild + * Tue Sep 14 2021 Sahana Prasad - 2.2.3-14 - Rebuilt with OpenSSL 3.0.0 From df690ddabaab37416e9b32e4f010004e2a61cd58 Mon Sep 17 00:00:00 2001 From: Jitka Plesnikova Date: Mon, 30 May 2022 19:50:14 +0200 Subject: [PATCH 42/58] Perl 5.36 rebuild --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 03ea72b..f94bbff 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 15%{?dist} +Release: 16%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz @@ -363,6 +363,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Mon May 30 2022 Jitka Plesnikova - 2.2.3-16 +- Perl 5.36 rebuild + * Thu Jan 20 2022 Fedora Release Engineering - 2.2.3-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild From 5b370ed1fa99c97377c383200e0f9876ab0fa08f Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 21 Jul 2022 00:42:19 +0000 Subject: [PATCH 43/58] Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index f94bbff..8dbcd70 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 16%{?dist} +Release: 17%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz @@ -363,6 +363,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Thu Jul 21 2022 Fedora Release Engineering - 2.2.3-17 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild + * Mon May 30 2022 Jitka Plesnikova - 2.2.3-16 - Perl 5.36 rebuild From c63c27db16ccec676bee7c89fece58ea07c35b0d Mon Sep 17 00:00:00 2001 From: Jitka Plesnikova Date: Wed, 21 Dec 2022 08:17:27 +0100 Subject: [PATCH 44/58] Add BR perl-generators to automatically generates run-time dependencies for installed Perl files --- dnssec-tools.spec | 46 +++++++++++++++++++++++++--------------------- 1 file changed, 25 insertions(+), 21 deletions(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 8dbcd70..18887f2 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,23 +1,23 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 17%{?dist} +Release: 18%{?dist} License: BSD URL: http://www.dnssec-tools.org/ -#Source0: https://www.dnssec-tools.org/download/%{name}-%{version}.tar.gz +#Source0: https://www.dnssec-tools.org/download/%%{name}-%%{version}.tar.gz Source0: https://www.hardakers.net/software/%{name}-%{version}.tar.gz Source1: dnssec-tools-dnsval.conf Source2: libval-config # Require note: the auto-detection for perl-Net-DNS-SEC will not work since # the tools do run time tests for their existence. But most of the tools # are much more useful with the modules in place, so we hand require them. -Requires: perl(Net::DNS), perl(Net::DNS::SEC), dnssec-tools-perlmods, bind, perl(Getopt::GUI::Long) perl(Mail::Send) -Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version)) +Requires: dnssec-tools-perlmods, bind, perl(Getopt::GUI::Long) +Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version)) Requires: perl(GraphViz) -BuildRequires: gcc +BuildRequires: gcc BuildRequires: openssl-devel BuildRequires: perl-devel -BuildRequires: perl-macros +BuildRequires: perl-generators BuildRequires: perl(Test) perl(ExtUtils::MakeMaker) BuildRequires: make # Makes the code installation linux filesystem friendly @@ -39,7 +39,7 @@ help ease the deployment of DNSSEC-related technologies. %package perlmods Summary: Perl modules supporting DNSSEC (needed by the dnssec-tools) -Requires: perl(Net::DNS), perl(Net::DNS::SEC) +Requires: perl(Getopt::GUI::Long) %description perlmods @@ -65,14 +65,14 @@ C-based libraries useful for developing dnssec aware tools. %setup -q %patch5 -p0 -#%patch6 -p2 -#%patch12 -p2 -#%patch13 -p2 -#%patch14 -p2 -#%patch15 -p2 -#%patch16 -p2 -#%patch17 -p2 -#%patch18 -p2 +#%%patch6 -p2 +#%%patch12 -p2 +#%%patch13 -p2 +#%%patch14 -p2 +#%%patch15 -p2 +#%%patch16 -p2 +#%%patch17 -p2 +#%%patch18 -p2 %patch19 -p2 %patch20 -p1 -b .link-with-libs @@ -83,7 +83,7 @@ sed -i 's|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g' libtool sed -i 's|^hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=""|g' validator/libtool sed -i 's|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g' validator/libtool # makefile dependencies are broken; we can't use smp_mflags: -#make %{?_smp_mflags} CCFLAGS="-D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64" +#make %%{?_smp_mflags} CCFLAGS="-D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64" make CCFLAGS="-D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64" %install @@ -128,7 +128,7 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %{_bindir}/maketestzone %{_bindir}/mapper %{_bindir}/zonesigner -# this doesn't use %{_datadir} because patch6 above uses this exact path +# this doesn't use %%{_datadir} because patch6 above uses this exact path /usr/share/dnssec-tools #/usr/share/dnssec-tools/donuts #/usr/share/dnssec-tools/donuts/rules @@ -155,7 +155,7 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %{_bindir}/dt-libval_check_conf %{_bindir}/dt-validate # configure above -#%{_datadir}/dnssec-tools/validator-testcases +#%%{_datadir}/dnssec-tools/validator-testcases %{_bindir}/dt-getaddr %{_bindir}/dt-gethost %{_bindir}/dt-getname @@ -300,8 +300,8 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %files libs %{_libdir}/*.so.* %config(noreplace) %{_sysconfdir}/dnssec-tools -#%config(noreplace) %{_sysconfdir}/dnssec-tools/dnsval.conf -#%config(noreplace) %{_sysconfdir}/dnssec-tools/root.hints +#%%config(noreplace) %%{_sysconfdir}/dnssec-tools/dnsval.conf +#%%config(noreplace) %%{_sysconfdir}/dnssec-tools/root.hints %files libs-devel %{_includedir}/validator @@ -337,7 +337,7 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %{_mandir}/man3/val_isvalidated.3.gz %{_mandir}/man3/val_res_query.3.gz %{_mandir}/man3/val_res_search.3.gz -#%{_mandir}/man3/val_addrinfo.3.gz +#%%{_mandir}/man3/val_addrinfo.3.gz %{_mandir}/man3/val_add_valpolicy.3.gz %{_mandir}/man3/val_context_setqflags.3.gz %{_mandir}/man3/val_does_not_exist.3.gz @@ -363,6 +363,10 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Mon Dec 19 2022 Jitka Plesnikova - 2.2.3-18 +- Add BR perl-generators to automatically generates run-time dependencies + for installed Perl files + * Thu Jul 21 2022 Fedora Release Engineering - 2.2.3-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild From 1ad729e6b902edb105472265840f2902fdde0993 Mon Sep 17 00:00:00 2001 From: Jitka Plesnikova Date: Fri, 13 Jan 2023 09:31:50 +0100 Subject: [PATCH 45/58] Remove perl(MODULE_COMPAT), it will be replaced by generators --- dnssec-tools.spec | 1 - 1 file changed, 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 18887f2..145aa25 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -12,7 +12,6 @@ Source2: libval-config # the tools do run time tests for their existence. But most of the tools # are much more useful with the modules in place, so we hand require them. Requires: dnssec-tools-perlmods, bind, perl(Getopt::GUI::Long) -Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version)) Requires: perl(GraphViz) BuildRequires: gcc BuildRequires: openssl-devel From 80915b4efd2ec15db5117ec3b3b782e073684665 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 19 Jan 2023 01:36:54 +0000 Subject: [PATCH 46/58] Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 145aa25..ce3c0d2 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 18%{?dist} +Release: 19%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%%{name}-%%{version}.tar.gz @@ -362,6 +362,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Thu Jan 19 2023 Fedora Release Engineering - 2.2.3-19 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild + * Mon Dec 19 2022 Jitka Plesnikova - 2.2.3-18 - Add BR perl-generators to automatically generates run-time dependencies for installed Perl files From 578162a7190ffa5cf4156250b971a58b22dd6451 Mon Sep 17 00:00:00 2001 From: Jitka Plesnikova Date: Tue, 11 Jul 2023 16:02:01 +0200 Subject: [PATCH 47/58] Perl 5.38 rebuild --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index ce3c0d2..a88bb3c 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 19%{?dist} +Release: 20%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%%{name}-%%{version}.tar.gz @@ -362,6 +362,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Tue Jul 11 2023 Jitka Plesnikova - 2.2.3-20 +- Perl 5.38 rebuild + * Thu Jan 19 2023 Fedora Release Engineering - 2.2.3-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild From f7f1f3a5768629fe02ffbf8abf5c5c11f7d00bd8 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 19 Jul 2023 17:41:47 +0000 Subject: [PATCH 48/58] Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index a88bb3c..627ecdb 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 20%{?dist} +Release: 21%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%%{name}-%%{version}.tar.gz @@ -362,6 +362,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Wed Jul 19 2023 Fedora Release Engineering - 2.2.3-21 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild + * Tue Jul 11 2023 Jitka Plesnikova - 2.2.3-20 - Perl 5.38 rebuild From 7e668fbdc81f05f92523202828c23010fa091dbf Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Fri, 19 Jan 2024 17:22:33 +0000 Subject: [PATCH 49/58] Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 627ecdb..d68e2f9 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 21%{?dist} +Release: 22%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%%{name}-%%{version}.tar.gz @@ -362,6 +362,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Fri Jan 19 2024 Fedora Release Engineering - 2.2.3-22 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + * Wed Jul 19 2023 Fedora Release Engineering - 2.2.3-21 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild From 2c95ad21b6c0dc0c917237db27d3886b3131465d Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 24 Jan 2024 09:38:59 +0000 Subject: [PATCH 50/58] Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index d68e2f9..421955e 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 22%{?dist} +Release: 23%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%%{name}-%%{version}.tar.gz @@ -362,6 +362,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Wed Jan 24 2024 Fedora Release Engineering - 2.2.3-23 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + * Fri Jan 19 2024 Fedora Release Engineering - 2.2.3-22 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild From adae71b254069a5ecf9c9b4c1ed0cdc738407525 Mon Sep 17 00:00:00 2001 From: Software Management Team Date: Thu, 30 May 2024 12:46:46 +0200 Subject: [PATCH 51/58] Eliminate use of obsolete %patchN syntax (#2283636) --- dnssec-tools.spec | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 421955e..e1e2a57 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -63,7 +63,7 @@ C-based libraries useful for developing dnssec aware tools. %prep %setup -q -%patch5 -p0 +%patch -P5 -p0 #%%patch6 -p2 #%%patch12 -p2 #%%patch13 -p2 @@ -72,8 +72,8 @@ C-based libraries useful for developing dnssec aware tools. #%%patch16 -p2 #%%patch17 -p2 #%%patch18 -p2 -%patch19 -p2 -%patch20 -p1 -b .link-with-libs +%patch -P19 -p2 +%patch -P20 -p1 -b .link-with-libs %build %configure --with-validator-testcases-file=%{_datadir}/dnssec-tools/validator-testcases --with-perl-build-args="INSTALLDIRS=vendor OPTIMIZE='$RPM_OPT_FLAGS'" --sysconfdir=/etc --with-root-hints=/etc/dnssec-tools/root.hints --with-resolv-conf=/etc/dnssec-tools/resolv.conf --disable-static --with-nsec3 --with-ipv6 --with-dlv --disable-bind-checks From 3d3384bf761b06b6393b661a78c09bc14aa2d6dc Mon Sep 17 00:00:00 2001 From: Jitka Plesnikova Date: Mon, 10 Jun 2024 20:52:55 +0200 Subject: [PATCH 52/58] Perl 5.40 rebuild --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index e1e2a57..3530f2c 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 23%{?dist} +Release: 24%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%%{name}-%%{version}.tar.gz @@ -362,6 +362,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Mon Jun 10 2024 Jitka Plesnikova - 2.2.3-24 +- Perl 5.40 rebuild + * Wed Jan 24 2024 Fedora Release Engineering - 2.2.3-23 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild From 4d4b29ea2a14f54ecd4f042ce0234e2755d851fb Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 17 Jul 2024 21:12:22 +0000 Subject: [PATCH 53/58] Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 3530f2c..6fe544e 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 24%{?dist} +Release: 25%{?dist} License: BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%%{name}-%%{version}.tar.gz @@ -362,6 +362,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Wed Jul 17 2024 Fedora Release Engineering - 2.2.3-25 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild + * Mon Jun 10 2024 Jitka Plesnikova - 2.2.3-24 - Perl 5.40 rebuild From 561ec456ec1cc9fcb3a64b5b53f28442aa906842 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Miroslav=20Such=C3=BD?= Date: Wed, 28 Aug 2024 09:03:19 +0200 Subject: [PATCH 54/58] convert license to SPDX This is part of https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_4 --- dnssec-tools.spec | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 6fe544e..067f399 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,8 +1,9 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 25%{?dist} -License: BSD +Release: 26%{?dist} +# Automatically converted from old format: BSD - review is highly recommended. +License: LicenseRef-Callaway-BSD URL: http://www.dnssec-tools.org/ #Source0: https://www.dnssec-tools.org/download/%%{name}-%%{version}.tar.gz Source0: https://www.hardakers.net/software/%{name}-%{version}.tar.gz @@ -362,6 +363,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Wed Aug 28 2024 Miroslav Suchý - 2.2.3-26 +- convert license to SPDX + * Wed Jul 17 2024 Fedora Release Engineering - 2.2.3-25 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild From 772e0c3fcbbf355b43c95012fe049c0132f219ce Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20Josef=20=C5=A0pa=C4=8Dek?= Date: Tue, 5 Nov 2024 15:39:36 +0100 Subject: [PATCH 55/58] Build without OpenSSL ENGINE support on Fedora 41 onwards --- dnssec-tools-2.2.3-add_ifdedf_to_engine.patch | 38 +++++++++++++++++++ dnssec-tools.spec | 14 ++++++- 2 files changed, 51 insertions(+), 1 deletion(-) create mode 100644 dnssec-tools-2.2.3-add_ifdedf_to_engine.patch diff --git a/dnssec-tools-2.2.3-add_ifdedf_to_engine.patch b/dnssec-tools-2.2.3-add_ifdedf_to_engine.patch new file mode 100644 index 0000000..5c6820e --- /dev/null +++ b/dnssec-tools-2.2.3-add_ifdedf_to_engine.patch @@ -0,0 +1,38 @@ +diff -r -u dnssec-tools-2.2.3.orig/validator/libval/val_context.c dnssec-tools-2.2.3/validator/libval/val_context.c +--- dnssec-tools-2.2.3.orig/validator/libval/val_context.c 2024-11-05 11:39:33.696730353 +0100 ++++ dnssec-tools-2.2.3/validator/libval/val_context.c 2024-11-05 11:44:01.428711438 +0100 +@@ -17,9 +17,10 @@ + + #include + #include ++#ifndef OPENSSL_NO_ENGINE + #include ++#endif /* !defined(OPENSSL_NO_ENGINE) */ + #include +- + #include "val_support.h" + #include "val_policy.h" + #include "val_cache.h" +@@ -853,7 +854,9 @@ + /* Whole bunch of openssl cleanup routines */ + CONF_modules_unload(1); + EVP_cleanup(); ++#ifndef OPENSSL_NO_ENGINE + ENGINE_cleanup(); ++#endif + CRYPTO_cleanup_all_ex_data(); + ERR_remove_state(0); + ERR_free_strings(); +diff -r -u dnssec-tools-2.2.3.orig/validator/libval/val_crypto.c dnssec-tools-2.2.3/validator/libval/val_crypto.c +--- dnssec-tools-2.2.3.orig/validator/libval/val_crypto.c 2024-11-05 11:39:33.695730345 +0100 ++++ dnssec-tools-2.2.3/validator/libval/val_crypto.c 2024-11-05 11:40:17.569919704 +0100 +@@ -22,7 +22,9 @@ + #include + #endif + #include ++#ifndef OPENSSL_NO_ENGINE + #include ++#endif /* !defined(OPENSSL_NO_ENGINE) */ + #include + #include + #include diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 067f399..928f2df 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -1,7 +1,14 @@ +# OpenSSL ENGINE support deprecated in Fedora 41 onwards +# https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine +%if 0%{?fedora} > 40 +%global _preprocessor_defines %{?_preprocessor_defines} -DOPENSSL_NO_ENGINE +%endif + + Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 26%{?dist} +Release: 27%{?dist} # Automatically converted from old format: BSD - review is highly recommended. License: LicenseRef-Callaway-BSD URL: http://www.dnssec-tools.org/ @@ -30,6 +37,7 @@ Patch18: dnssec-tools-new-openssl-APIs.patch Patch19: 7287c6b96422e499560fb10b95c1a481ea82656d.patch # link libval-threads with libs Patch20: dnssec-tools-2.2.3-link-libval-threads-with-libs.patch +Patch21: dnssec-tools-2.2.3-add_ifdedf_to_engine.patch %description @@ -75,6 +83,7 @@ C-based libraries useful for developing dnssec aware tools. #%%patch18 -p2 %patch -P19 -p2 %patch -P20 -p1 -b .link-with-libs +%patch -P21 -p1 %build %configure --with-validator-testcases-file=%{_datadir}/dnssec-tools/validator-testcases --with-perl-build-args="INSTALLDIRS=vendor OPTIMIZE='$RPM_OPT_FLAGS'" --sysconfdir=/etc --with-root-hints=/etc/dnssec-tools/root.hints --with-resolv-conf=/etc/dnssec-tools/resolv.conf --disable-static --with-nsec3 --with-ipv6 --with-dlv --disable-bind-checks @@ -363,6 +372,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Tue Nov 05 2024 Michal Josef Špaček - 2.2.3-27 +- Build without OpenSSL ENGINE support on Fedora 41 onwards + * Wed Aug 28 2024 Miroslav Suchý - 2.2.3-26 - convert license to SPDX From 51eeaa7376e806848212715853c549521192404c Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 16 Jan 2025 16:00:53 +0000 Subject: [PATCH 56/58] Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 928f2df..50bae1f 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -8,7 +8,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 27%{?dist} +Release: 28%{?dist} # Automatically converted from old format: BSD - review is highly recommended. License: LicenseRef-Callaway-BSD URL: http://www.dnssec-tools.org/ @@ -372,6 +372,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Thu Jan 16 2025 Fedora Release Engineering - 2.2.3-28 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild + * Tue Nov 05 2024 Michal Josef Špaček - 2.2.3-27 - Build without OpenSSL ENGINE support on Fedora 41 onwards From 9e4f8b59b02996f1ecfe88cffe145c65fab02f26 Mon Sep 17 00:00:00 2001 From: Jitka Plesnikova Date: Mon, 7 Jul 2025 15:46:36 +0200 Subject: [PATCH 57/58] Perl 5.42 rebuild --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index 50bae1f..b0075d5 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -8,7 +8,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 28%{?dist} +Release: 29%{?dist} # Automatically converted from old format: BSD - review is highly recommended. License: LicenseRef-Callaway-BSD URL: http://www.dnssec-tools.org/ @@ -372,6 +372,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Mon Jul 07 2025 Jitka Plesnikova - 2.2.3-29 +- Perl 5.42 rebuild + * Thu Jan 16 2025 Fedora Release Engineering - 2.2.3-28 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild From 8ca6021697d846dab98e56fe6485ec336cdd8ca0 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 23 Jul 2025 19:24:34 +0000 Subject: [PATCH 58/58] Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild --- dnssec-tools.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dnssec-tools.spec b/dnssec-tools.spec index b0075d5..92889ca 100644 --- a/dnssec-tools.spec +++ b/dnssec-tools.spec @@ -8,7 +8,7 @@ Summary: A suite of tools for managing dnssec aware DNS usage Name: dnssec-tools Version: 2.2.3 -Release: 29%{?dist} +Release: 30%{?dist} # Automatically converted from old format: BSD - review is highly recommended. License: LicenseRef-Callaway-BSD URL: http://www.dnssec-tools.org/ @@ -372,6 +372,9 @@ install -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/%{_bindir}/libval-config %changelog +* Wed Jul 23 2025 Fedora Release Engineering - 2.2.3-30 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild + * Mon Jul 07 2025 Jitka Plesnikova - 2.2.3-29 - Perl 5.42 rebuild