File curvedns.spec of Package curvedns

Overview Repositories Revisions Requests Users Attributes Meta

File curvedns.spec of Package curvedns (Revision 91d3d5c68b86c986b46147389ca50ef7)

Currently displaying revision 91d3d5c68b86c986b46147389ca50ef7 , Show latest

%if 0%{?suse_version} >= 1200
%define systemdunitdir  %(pkg-config --variable=systemdsystemunitdir systemd)
%endif

Summary: A DNSCurve Forwarding Name Server
Name: curvedns
Version: 0.87
Release: 3.1
License: BSD
Group: Productivity/Networking/DNS/Servers
#Original Source: http://curvedns.on2it.net/get/%%{name}-%%{version}.tar.gz
Source: %{name}-%{version}.tar.bz2
# Own creation, GPL
Source1: rc.curvedns
# Own creation, GPL
Source2: config.curvedns
# Own creation, GPL
Source3: curvedns.socket
# Own creation, GPL
Source4: curvedns.service
# GPL
Source5: COPYING
# Own creation, GPL
Source6: apparmor.curvedns
# Own creation, GPL
Source7: curvedns.private.key
# PATCH-FEATURE-UPSTREAM conrad@quisquis.de
Patch: curvedns-PRIVATE_KEY_F.patch
# PATCH-FEATURE-UPSTREAM conrad@quisquis.de
Patch1: curvedns-systemd.patch
URL: http://curvedns.on2it.net/
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: libev-devel
%if 0%{?suse_version} < 1120
BuildRequires: elfutils
%endif
%if 0%{?suse_version} >= 1200
BuildRequires: systemd-devel, pkg-config, apparmor-profiles
%endif
Requires(pre): pwdutils %fillup_prereq
%if %{undefined systemdunitdir}
Requires(pre): %insserv_prereq
Requires: daemontools
%endif
%if 0%{?suse_version} >= 1100 && 0%{?suse_version} < 1150
Requires: licenses
BuildRequires: licenses
%endif

%description
CurveDNS is the first publicly released forwarding implementation that
implements the DNSCurve protocol.  DNSCurve uses high-speed high-security
elliptic-curve cryptography to drastically improve every dimension of DNS
security.  See http://dnscurve.org/ for protocol details.

What is so special about this implementation is the fact that any
authoritative DNS name server can act as a DNSCurve capable one, without
changing anything on your current DNS environment. The only thing a DNS data
manager (that is probably you) has to do is to install CurveDNS on a machine,
generate a keypair, and update NS type records that were pointing towards
your authoritative name server and let them point to this machine running
CurveDNS. Indeed, it is that easy to become fully protected against almost
any of the currently known DNS flaws, such as active and passive cache
poisoning.

CurveDNS supports:
* Forwarding of regular (non-protected) DNS packets;
* Unboxing of DNSCurve queries and forwarding the regular DNS packets
* Boxing of regular DNS responses to DNSCurve responses;
* Both DNSCurve's streamlined- and TXT-format;
* Caching of shared secrets;
* Both UDP and TCP;
* Both IPv4 and IPv6.

%prep
%setup -q
%patch -p1
%if %{defined systemdunitdir}
%patch1 -p1
%endif

%build
export CFLAGS="%{optflags}"
%if %{defined systemdunitdir}
export CFLAGS="-D USE_SYSTEMD $CFLAGS"
LDFLAGS="-lsystemd-daemon"
%endif
./configure.nacl
./configure.curvedns
echo " $CFLAGS" >nacl/build/work/curvedns/cflags
./configure.curvedns
%__make EVLDFLAGS="%{optflags}" EXTRALIB="-lev $LDFLAGS"
sed '/^CONFIGFILE/s=$="%{_sysconfdir}/sysconfig/%{name}"=;/^PIDFILE/s=$="%{_localstatedir}/run/%{name}.pid"=;/^SERVICEDIR/s=$="%{_libexecdir}/%{name}"=' <%{S:1} >contrib/rc.curvedns
lic="`md5sum "%{S:5}" | cut -d' ' -f 1`"
if [ -r "/usr/share/doc/licenses/md5/$lic" ]; then
    %__ln_s -f /usr/share/doc/licenses/md5/"$lic" COPYING
else
    %__cp "%{S:5}" COPYING
fi

%install
%__mkdir_p "%{buildroot}%{_sbindir}"
%__install -m 0755 curvedns curvedns-keygen "%{buildroot}%{_sbindir}"
%__mkdir_p -m 0700 "%{buildroot}%{_sysconfdir}/curvedns"
%__install -m 0600 "%{S:7}" "%{buildroot}%{_sysconfdir}/curvedns/private.key"
%__install -D -m 0600 "%{S:2}" "%{buildroot}%{_localstatedir}/adm/fillup-templates/sysconfig.%{name}"

%if %{undefined systemdunitdir}

# /SysVInit

mkdir -p "%{buildroot}%{_libexecdir}/%{name}/log"
cat >"%{buildroot}%{_libexecdir}/%{name}/run" <<__EOS__
#!/bin/sh

CONFIGFILE="%{_sysconfdir}/sysconfig/%{name}"
[ -r "\$CONFIGFILE" ] && . "\$CONFIGFILE"

export CURVEDNS_PRIVATE_KEY CURVEDNS_INTERNAL_TIMEOUT CURVEDNS_UDP_TRIES
export CURVEDNS_TCP_NUMBER CURVEDNS_TCP_TIMEOUT CURVEDNS_SHARED_SECRETS
export CURVEDNS_DEBUG CURVEDNS_SOURCE_IP

exec envuidgid "\$USER" curvedns "\$LISTEN_IPS" "\$LISTEN_PORT" "\$TARGET_IP" "\$TARGET_PORT" 2>&1
__EOS__
cat >"%{buildroot}%{_libexecdir}/%{name}/log/run" <<__EOS__
#!/bin/sh

CONFIGFILE="%{_sysconfdir}/sysconfig/%{name}"
[ -r "\$CONFIGFILE" ] && . "\$CONFIGFILE"

exec setuidgid "\$LOGUSER" multilog t n25 s1048576 "%{_localstatedir}/log/%{name}"
__EOS__
chmod 755 "%{buildroot}%{_libexecdir}/%{name}/run" "%{buildroot}%{_libexecdir}/%{name}/log/run"
mkdir -p "%{buildroot}%{_localstatedir}/log/%{name}"
mkdir -p "%{buildroot}%{_initrddir}"
install -m 0755 contrib/rc.curvedns "%{buildroot}%{_initrddir}/%{name}"
ln -sf "%{_initrddir}/curvedns" "%{buildroot}%{_sbindir}/rccurvedns"

# /SysVInit

%endif

%if %{defined systemdunitdir}

# systemd

%__mkdir_p "%{buildroot}%{systemdunitdir}"
%__install -m 0644 "%{S:3}" "%{S:4}" "%{buildroot}%{systemdunitdir}/"
%__mkdir_p "%{buildroot}%{_sysconfdir}/apparmor.d"
%__install -m 0644 "%{S:6}" "%{buildroot}%{_sysconfdir}/apparmor.d/usr.sbin.curvedns"
%__sed -i 's/^$LISTEN\|USER\|LOGUSER$.*/#& -- ignored when running under systemd/' "%{buildroot}%{_localstatedir}/adm/fillup-templates/sysconfig.%{name}"
# /systemd

%endif

%__debug_install_post

%post
%if %{undefined systemdunitdir}
%fillup_and_insserv curvedns
%restart_on_update curvedns
%endif
%if %{defined systemdunitdir}
%fillup_only curvedns
test -n "$FIRST_ARG" || FIRST_ARG=$1
if test "$FIRST_ARG" -ge 1 ; then
    /bin/systemctl enable %{name}.socket >/dev/null 2>&1 || :
#    if test -x /sbin/apparmor_parser ; then
#	/sbin/apparmor_parser -r "%{_sysconfdir}/apparmor.d/usr.sbin.%{name}"
#    fi
fi
%endif

%preun
%if %{undefined systemdunitdir}
%stop_on_removal curvedns
%endif
%if %{defined systemdunitdir}
if test "$FIRST_ARG" -lt 1 ; then
    /bin/systemctl --no-reload disable %{name}.socket >/dev/null 2>&1 || :
    /bin/systemctl stop %{name}.socket >/dev/null 2>&1 || :
    /bin/systemctl --no-reload disable %{name}.service >/dev/null 2>&1 || :
    /bin/systemctl stop %{name}.service >/dev/null 2>&1 || :
#    if test -x /sbin/apparmor_parser ; then
#	/sbin/apparmor_parser -R "%{_sysconfdir}/apparmor.d/usr.sbin.%{name}"
#    fi
fi
%endif

%postun
%if %{undefined systemdunitdir}
%insserv_cleanup
%endif
%if %{defined systemdunitdir}
/bin/systemctl daemon-reload >/dev/null 2>&1 || :
if test "$FIRST_ARG" -ge 1 ; then
    /bin/systemctl try-restart %{name}.service >/dev/null 2>&1 || :
fi
%endif

%clean
[ "%{buildroot}" = "/" ] || rm -rf "%{buildroot}"

%files
%defattr(-,root,root,-)
%doc ChangeLog INSTALL LICENSE README VERSION COPYING
%config %attr(-,named,named) %{_sysconfdir}/curvedns/
%{_localstatedir}/adm/fillup-templates/sysconfig.%{name}
%{_sbindir}/curvedns
%{_sbindir}/curvedns-keygen
%if %{undefined systemdunitdir}
%attr(755,named,named) %{_localstatedir}/log/%{name}/
%{_initrddir}/%{name}
%{_sbindir}/rccurvedns
%{_libexecdir}/%{name}/
%endif
%if %{defined systemdunitdir}
%config %{_sysconfdir}/apparmor.d/usr.sbin.curvedns
%{systemdunitdir}/%{name}.socket
%{systemdunitdir}/%{name}.service
%endif

%changelog

Places

File curvedns.spec of Package curvedns (Revision 91d3d5c68b86c986b46147389ca50ef7)

Places