summaryrefslogtreecommitdiffstats
path: root/recipes-security
diff options
context:
space:
mode:
authorArmin Kuster <akuster808@gmail.com>2021-02-28 21:36:32 +0000
committerArmin Kuster <akuster808@gmail.com>2021-03-02 11:56:27 -0800
commit7d3704b22c6927a09942b9b9a851bbe8ad7bc379 (patch)
treec624f8fb90e5923dc5931812fe1c9c47fae92bfa /recipes-security
parentdc28e175e3474070febfeed5d27ba542c4da2321 (diff)
downloadmeta-security-7d3704b22c6927a09942b9b9a851bbe8ad7bc379.tar.gz
opendnssec: update to 2.1.8
refresh libdns_conf_fix.patch Drop fix_fprint.patch includd in update Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'recipes-security')
-rw-r--r--recipes-security/opendnssec/files/fix_fprint.patch25
-rw-r--r--recipes-security/opendnssec/files/libdns_conf_fix.patch45
-rw-r--r--recipes-security/opendnssec/opendnssec_2.1.8.bb (renamed from recipes-security/opendnssec/opendnssec_2.1.6.bb)7
3 files changed, 24 insertions, 53 deletions
diff --git a/recipes-security/opendnssec/files/fix_fprint.patch b/recipes-security/opendnssec/files/fix_fprint.patch
deleted file mode 100644
index da0bcfe..0000000
--- a/recipes-security/opendnssec/files/fix_fprint.patch
+++ /dev/null
@@ -1,25 +0,0 @@
1format not a string literal and no format arguments
2
3missing module_str in call
4
5Upstream-Status: Pending
6Signed-off-by: Armin Kuster <akuster808@gmail.com>
7
8../../../git/enforcer/src/keystate/keystate_ds.c:192:7: error: format not a string literal and no format arguments [-Werror=format-security]
9| 192 | ods_log_error_and_printf(sockfd, "Failed to run %s", cp_ds);
10| | ^~~~~~~~~~~~~~~~~~~~~~~~
11
12
13Index: git/enforcer/src/keystate/keystate_ds.c
14===================================================================
15--- git.orig/enforcer/src/keystate/keystate_ds.c
16+++ git/enforcer/src/keystate/keystate_ds.c
17@@ -189,7 +189,7 @@ exec_dnskey_by_id(int sockfd, struct dbw
18 status = 0;
19 }
20 else {
21- ods_log_error_and_printf(sockfd, "Failed to run %s", cp_ds);
22+ ods_log_error_and_printf(sockfd, module_str, "Failed to run %s", cp_ds);
23 status = 7;
24 }
25 }
diff --git a/recipes-security/opendnssec/files/libdns_conf_fix.patch b/recipes-security/opendnssec/files/libdns_conf_fix.patch
index 126e197..31d7252 100644
--- a/recipes-security/opendnssec/files/libdns_conf_fix.patch
+++ b/recipes-security/opendnssec/files/libdns_conf_fix.patch
@@ -4,14 +4,29 @@ Upstream-Status: OE specific
4 4
5Signed-off-by: Armin Kuster <akuster808@gmail.com> 5Signed-off-by: Armin Kuster <akuster808@gmail.com>
6 6
7Index: opendnssec-2.1.6/m4/acx_ldns.m4 7Index: opendnssec-2.1.8/configure.ac
8=================================================================== 8===================================================================
9--- opendnssec-2.1.6.orig/m4/acx_ldns.m4 9--- opendnssec-2.1.8.orig/configure.ac
10+++ opendnssec-2.1.6/m4/acx_ldns.m4 10+++ opendnssec-2.1.8/configure.ac
11@@ -1,128 +1,65 @@ 11@@ -133,9 +133,7 @@ AC_CHECK_MEMBER([struct sockaddr_un.sun_
12
13 # common dependencies
14 ACX_LIBXML2
15-ACX_LDNS(1,6,17)
16-ACX_LDNS_NOT(1,6,14, [binary incompatibility, see http://open.nlnetlabs.nl/pipermail/ldns-users/2012-October/000564.html])
17-ACX_LDNS_NOT(1,6,15, [fail to create NSEC3 bitmap for empty non-terminals, see http://www.nlnetlabs.nl/pipermail/ldns-users/2012-November/000565.html])
18+ACX_LDNS(1.6.17)
19 ACX_PKCS11_MODULES
20 ACX_RT
21 ACX_LIBC
22Index: opendnssec-2.1.8/m4/acx_ldns.m4
23===================================================================
24--- opendnssec-2.1.8.orig/m4/acx_ldns.m4
25+++ opendnssec-2.1.8/m4/acx_ldns.m4
26@@ -1,128 +1,63 @@
12-AC_DEFUN([ACX_LDNS],[ 27-AC_DEFUN([ACX_LDNS],[
13- AC_ARG_WITH(ldns, 28- AC_ARG_WITH(ldns,
14- [AC_HELP_STRING([--with-ldns=PATH],[specify prefix of path of ldns library to use])], 29- [AS_HELP_STRING([--with-ldns=PATH],[specify prefix of path of ldns library to use])],
15- [ 30- [
16- LDNS_PATH="$withval" 31- LDNS_PATH="$withval"
17- AC_PATH_PROGS(LDNS_CONFIG, ldns-config, ldns-config, $LDNS_PATH/bin) 32- AC_PATH_PROGS(LDNS_CONFIG, ldns-config, ldns-config, $LDNS_PATH/bin)
@@ -70,8 +85,7 @@ Index: opendnssec-2.1.6/m4/acx_ldns.m4
70- AC_MSG_ERROR([ldns library too old ($1.$2.$3 or later required)]) 85- AC_MSG_ERROR([ldns library too old ($1.$2.$3 or later required)])
71- ],[]) 86- ],[])
72- AC_LANG_POP([C]) 87- AC_LANG_POP([C])
73+#serial 11 88-
74
75- CPPFLAGS=$tmp_CPPFLAGS 89- CPPFLAGS=$tmp_CPPFLAGS
76- 90-
77- AC_SUBST(LDNS_INCLUDES) 91- AC_SUBST(LDNS_INCLUDES)
@@ -81,7 +95,7 @@ Index: opendnssec-2.1.6/m4/acx_ldns.m4
81- 95-
82-AC_DEFUN([ACX_LDNS_NOT],[ 96-AC_DEFUN([ACX_LDNS_NOT],[
83- AC_ARG_WITH(ldns, 97- AC_ARG_WITH(ldns,
84- [AC_HELP_STRING([--with-ldns=PATH],[specify prefix of path of ldns library to use])], 98- [AS_HELP_STRING([--with-ldns=PATH],[specify prefix of path of ldns library to use])],
85- [ 99- [
86- LDNS_PATH="$withval" 100- LDNS_PATH="$withval"
87- AC_PATH_PROGS(LDNS_CONFIG, ldns-config, ldns-config, $LDNS_PATH/bin) 101- AC_PATH_PROGS(LDNS_CONFIG, ldns-config, ldns-config, $LDNS_PATH/bin)
@@ -200,18 +214,3 @@ Index: opendnssec-2.1.6/m4/acx_ldns.m4
200+ AC_SUBST([LDNS_LIBS]) 214+ AC_SUBST([LDNS_LIBS])
201+ AC_SUBST([LDNS_LDFLAGS]) 215+ AC_SUBST([LDNS_LDFLAGS])
202 ]) 216 ])
203Index: opendnssec-2.1.6/configure.ac
204===================================================================
205--- opendnssec-2.1.6.orig/configure.ac
206+++ opendnssec-2.1.6/configure.ac
207@@ -138,9 +138,7 @@ AC_CHECK_MEMBER([struct sockaddr_un.sun_
208
209 # common dependencies
210 ACX_LIBXML2
211-ACX_LDNS(1,6,17)
212-ACX_LDNS_NOT(1,6,14, [binary incompatibility, see http://open.nlnetlabs.nl/pipermail/ldns-users/2012-October/000564.html])
213-ACX_LDNS_NOT(1,6,15, [fail to create NSEC3 bitmap for empty non-terminals, see http://www.nlnetlabs.nl/pipermail/ldns-users/2012-November/000565.html])
214+ACX_LDNS(1.6.17)
215 ACX_PKCS11_MODULES
216 ACX_RT
217 ACX_LIBC
diff --git a/recipes-security/opendnssec/opendnssec_2.1.6.bb b/recipes-security/opendnssec/opendnssec_2.1.8.bb
index 5e42ca8..cf6bdbd 100644
--- a/recipes-security/opendnssec/opendnssec_2.1.6.bb
+++ b/recipes-security/opendnssec/opendnssec_2.1.8.bb
@@ -5,18 +5,15 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=b041dbe2da80d4efd951393fbba90937"
5 5
6DEPENDS = "libxml2 openssl ldns libmicrohttpd jansson libyaml " 6DEPENDS = "libxml2 openssl ldns libmicrohttpd jansson libyaml "
7 7
8SRC_URI = "git://github.com/opendnssec/opendnssec;branch=develop \ 8SRC_URI = "https://dist.opendnssec.org/source/opendnssec-${PV}.tar.gz \
9 file://libxml2_conf.patch \ 9 file://libxml2_conf.patch \
10 file://libdns_conf_fix.patch \ 10 file://libdns_conf_fix.patch \
11 file://fix_fprint.patch \
12 " 11 "
13 12
14SRCREV = "5876bccb38428790e2e9afc806ca68b029879874" 13SRC_URI[sha256sum] = "900a213103ff19a405e446327fbfcea9ec13e405283d87b6ffc24a10d9a268f5"
15 14
16inherit autotools pkgconfig perlnative 15inherit autotools pkgconfig perlnative
17 16
18S = "${WORKDIR}/git"
19
20EXTRA_OECONF = " --with-libxml2=${STAGING_DIR_HOST}/usr --with-ldns=${STAGING_DIR_HOST}/usr \ 17EXTRA_OECONF = " --with-libxml2=${STAGING_DIR_HOST}/usr --with-ldns=${STAGING_DIR_HOST}/usr \
21 --with-ssl=${STAGING_DIR_HOST}/usr " 18 --with-ssl=${STAGING_DIR_HOST}/usr "
22 19