File curvedns.spec of Package curvedns

Overview Repositories Revisions Requests Users Attributes Meta

File curvedns.spec of Package curvedns (Revision 77c9cc8f67b7c5849ba29108351794e8)

Currently displaying revision 77c9cc8f67b7c5849ba29108351794e8 , Show latest

%if 0%{?suse_version} >= 1200 || 0%{?fedora} >= 16
%define systemdunitdir  %(pkg-config --variable=systemdsystemunitdir systemd)
%endif
%if 0%{?suse_version} < 1000
%define defined()       %{expand:%%{?%{1}:1}%%{!?%{1}:0}}
%define undefined()     %{expand:%%{?%{1}:0}%%{!?%{1}:1}}
%endif
%if 0%{?fedora}
%define ext_man .gz
%endif

Summary: A DNSCurve Forwarding Name Server
Name: curvedns
Version: 0.87
Release: 3.1
License: BSD-2-Clause
Group: Productivity/Networking/DNS/Servers
Source: http://curvedns.on2it.net/get/%{name}-%{version}.tar.gz
# Own creation, GPL
Source1: rc.curvedns
# Own creation, GPL
Source2: config.curvedns
# Own creation, GPL
Source3: curvedns.socket
# Own creation, GPL
Source4: curvedns.service
# GPL
Source5: COPYING
# Own creation, GPL
Source6: apparmor.curvedns
# Own creation, GPL
Source7: curvedns.private.key
# Own creation, GPL
Source8: curvedns.8
# Own creation, GPL
Source9: curvedns-keygen.8
# Own creation, GPL
Source10: service-run
# Own creation, GPL
Source11: log-run
# PATCH-FEATURE-UPSTREAM conrad@quisquis.de
Patch: curvedns-PRIVATE_KEY_F.patch
# PATCH-FEATURE-UPSTREAM conrad@quisquis.de
Patch1: curvedns-systemd.patch
# PATCH-FIX-UPSTREAM conrad@quisquis.de
Patch2: curvedns-axfr.patch
URL: http://curvedns.on2it.net/
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: libev-devel libnacl-devel-static
%if 0%{?suse_version} < 1120
BuildRequires: elfutils
%endif
%if %{defined systemdunitdir}
BuildRequires: systemd-devel, pkg-config
%if 0%{?fedora} == 0
BuildRequires: apparmor-profiles
%endif
%else
Requires(pre): %insserv_prereq
Requires: daemontools
%endif
Requires(pre): pwdutils
%if %{defined fillup_prereq}
Requires(pre): %fillup_prereq
%endif
%if 0%{?suse_version} >= 1100 && 0%{?suse_version} < 1150
Requires: licenses
BuildRequires: licenses
%endif

%description
CurveDNS is the first publicly released forwarding implementation that
implements the DNSCurve protocol.  DNSCurve uses high-speed high-security
elliptic-curve cryptography to drastically improve every dimension of DNS
security.  See http://dnscurve.org/ for protocol details.

What is so special about this implementation is the fact that any
authoritative DNS name server can act as a DNSCurve capable one, without
changing anything on your current DNS environment. The only thing a DNS data
manager (that is probably you) has to do is to install CurveDNS on a machine,
generate a keypair, and update NS type records that were pointing towards
your authoritative name server and let them point to this machine running
CurveDNS. Indeed, it is that easy to become fully protected against almost
any of the currently known DNS flaws, such as active and passive cache
poisoning.

CurveDNS supports:
* Forwarding of regular (non-protected) DNS packets;
* Unboxing of DNSCurve queries and forwarding the regular DNS packets
* Boxing of regular DNS responses to DNSCurve responses;
* Both DNSCurve's streamlined- and TXT-format;
* Caching of shared secrets;
* Both UDP and TCP;
* Both IPv4 and IPv6.

%prep
%setup -q
%__cp "%{S:8}" .
%patch -p1
%if %{defined systemdunitdir}
%patch1 -p1
%endif
%patch2 -p1

%build
%__mkdir_p nacl/build/bin nacl/build/work
%__ln_s %{_libdir}/nacl/ok* nacl/build/bin/
export CFLAGS="%{optflags}"
%if %{defined systemdunitdir}
export CFLAGS="-D USE_SYSTEMD $CFLAGS"
LDFLAGS="-lsystemd-daemon"
%endif
export EVCFLAGS="EVCFLAGS=-I/usr/include/nacl"
%if 0%{?fedora}
export EVCFLAGS="EVCFLAGS=-I/usr/include/libev -I/usr/include/nacl"
%endif
./configure.curvedns
echo " $CFLAGS" >nacl/build/work/curvedns/cflags
./configure.curvedns
%__make EVLDFLAGS="%{optflags}" "$EVCFLAGS" EXTRALIB="-lev $LDFLAGS"
sed '/^CONFIGFILE/s=$="%{_sysconfdir}/sysconfig/%{name}"=;/^PIDFILE/s=$="%{_localstatedir}/run/%{name}.pid"=;/^SERVICEDIR/s=$="%{_libexecdir}/%{name}"=' <%{S:1} >contrib/rc.curvedns
lic="`md5sum "%{S:5}" | cut -d' ' -f 1`"
if [ -r "/usr/share/doc/licenses/md5/$lic" ]; then
    %__ln_s -f /usr/share/doc/licenses/md5/"$lic" COPYING
else
    %__cp "%{S:5}" COPYING
fi
head -5 INSTALL >>README

%install
%__mkdir_p "%{buildroot}%{_sbindir}"
%__install -m 0755 curvedns curvedns-keygen "%{buildroot}%{_sbindir}"
%__mkdir_p -m 0700 "%{buildroot}%{_sysconfdir}/curvedns"
%__install -m 0600 "%{S:7}" "%{buildroot}%{_sysconfdir}/curvedns/private.key"
%__install -D -m 0600 "%{S:2}" "%{buildroot}%{_localstatedir}/adm/fillup-templates/sysconfig.%{name}"
%__mkdir_p "%{buildroot}%{_mandir}/man8"
%__install -m 0644 "%{S:9}" curvedns.8 "%{buildroot}%{_mandir}/man8/"

%if %{undefined systemdunitdir}

# /SysVInit

mkdir -p "%{buildroot}%{_libexecdir}/%{name}/log"

%__sed 's={name}=%{name}=g;s={_sysconfdir}=%{_sysconfdir}=g;s={_localstatedir}=%{_localstatedir}=g' <"%{S:10}" >"%{buildroot}%{_libexecdir}/%{name}/run"
%__sed 's={name}=%{name}=g;s={_sysconfdir}=%{_sysconfdir}=g;s={_localstatedir}=%{_localstatedir}=g' <"%{S:11}" >"%{buildroot}%{_libexecdir}/%{name}/log/run"
chmod 755 "%{buildroot}%{_libexecdir}/%{name}/run" "%{buildroot}%{_libexecdir}/%{name}/log/run"
mkdir -p "%{buildroot}%{_localstatedir}/log/%{name}"
mkdir -p "%{buildroot}%{_initrddir}"
install -m 0755 contrib/rc.curvedns "%{buildroot}%{_initrddir}/%{name}"
ln -sf "%{_initrddir}/curvedns" "%{buildroot}%{_sbindir}/rccurvedns"

# /SysVInit

%endif

%if %{defined systemdunitdir}

# systemd

%__mkdir_p "%{buildroot}%{systemdunitdir}"
%__install -m 0644 "%{S:3}" "%{S:4}" "%{buildroot}%{systemdunitdir}/"
%if 0%{?fedora} == 0
%__mkdir_p "%{buildroot}%{_sysconfdir}/apparmor.d"
%__install -m 0644 "%{S:6}" "%{buildroot}%{_sysconfdir}/apparmor.d/usr.sbin.curvedns"
%endif
%__sed -i 's/^$LISTEN\|USER\|LOGUSER$.*/#& -- ignored when running under systemd/' "%{buildroot}%{_localstatedir}/adm/fillup-templates/sysconfig.%{name}"
# /systemd

%endif

%pre
getent group named >/dev/null || groupadd -r named
getent passwd named >/dev/null || useradd -r -g named -d "%{_sysconfdir}/%{name}" -s /sbin/nologin -c "user for curvedns" named
exit 0

%post
%if %{undefined systemdunitdir}
%fillup_and_insserv curvedns
%restart_on_update curvedns
%endif
%if %{defined systemdunitdir}
%fillup_only curvedns
test -n "$FIRST_ARG" || FIRST_ARG=$1
if test "$FIRST_ARG" -ge 1 ; then
    /bin/systemctl enable %{name}.socket >/dev/null 2>&1 || :
    if /bin/false && test -x /sbin/apparmor_parser ; then
	/sbin/apparmor_parser -r "%{_sysconfdir}/apparmor.d/usr.sbin.%{name}"
    fi
fi
%endif

%preun
%if %{undefined systemdunitdir}
%stop_on_removal curvedns
%endif
%if %{defined systemdunitdir}
test -n "$FIRST_ARG" || FIRST_ARG=$1
if test "$FIRST_ARG" -lt 1 ; then
    /bin/systemctl --no-reload disable %{name}.socket >/dev/null 2>&1 || :
    /bin/systemctl stop %{name}.socket >/dev/null 2>&1 || :
    /bin/systemctl --no-reload disable %{name}.service >/dev/null 2>&1 || :
    /bin/systemctl stop %{name}.service >/dev/null 2>&1 || :
    if /bin/false && test -x /sbin/apparmor_parser ; then
	/sbin/apparmor_parser -R "%{_sysconfdir}/apparmor.d/usr.sbin.%{name}"
    fi
fi
%endif

%postun
%if %{undefined systemdunitdir}
%insserv_cleanup
%endif
%if %{defined systemdunitdir}
/bin/systemctl daemon-reload >/dev/null 2>&1 || :
test -n "$FIRST_ARG" || FIRST_ARG=$1
if test "$FIRST_ARG" -ge 1 ; then
    /bin/systemctl try-restart %{name}.service >/dev/null 2>&1 || :
fi
%endif

%clean
[ "%{buildroot}" = "/" ] || rm -rf "%{buildroot}"

%files
%defattr(-,root,root,-)
%doc ChangeLog LICENSE README VERSION COPYING
%config %attr(-,named,named) %{_sysconfdir}/curvedns/
%{_localstatedir}/adm/fillup-templates/sysconfig.%{name}
%{_mandir}/man8/curvedns.8%{ext_man}
%{_mandir}/man8/curvedns-keygen.8%{ext_man}
%{_sbindir}/curvedns
%{_sbindir}/curvedns-keygen
%if %{undefined systemdunitdir}
%attr(755,named,named) %{_localstatedir}/log/%{name}/
%{_initrddir}/%{name}
%{_sbindir}/rccurvedns
%{_libexecdir}/%{name}/
%endif
%if %{defined systemdunitdir}
%if 0%{?fedora} == 0
%config %{_sysconfdir}/apparmor.d/usr.sbin.curvedns
%endif
%{systemdunitdir}/%{name}.socket
%{systemdunitdir}/%{name}.service
%endif

%changelog

Places

File curvedns.spec of Package curvedns (Revision 77c9cc8f67b7c5849ba29108351794e8)

Places