Validns is a standalone command line RFC 1034/1035 zone file validation

tool that, in addition to basic syntactic and semantic zone checks,
includes DNSSEC signature verification and NSEC/NSEC3 chain validation,
as well a number of optional policy checks on the zone.

6 files changed, 85 insertions, 0 deletions

diff --git a/security/validns/DESCR b/security/validns/DESCR
new file mode 100644
index 00000000000..2cfcbc73720
--- /dev/null
+++ b/security/validns/DESCR
@@ -0,0 +1,4 @@
+Validns is a standalone command line RFC 1034/1035 zone file validation
+tool that, in addition to basic syntactic and semantic zone checks,
+includes DNSSEC signature verification and NSEC/NSEC3 chain validation,
+as well a number of optional policy checks on the zone.
diff --git a/security/validns/Makefile b/security/validns/Makefile
new file mode 100644
index 00000000000..e71c3ba5f8a
--- /dev/null
+++ b/security/validns/Makefile
@@ -0,0 +1,32 @@
+# $NetBSD: Makefile,v 1.1.1.1 2012/05/04 23:57:46 pettai Exp $
+#
+
+DISTNAME=	validns-0.4
+CATEGORIES=	security
+MASTER_SITES=	http://www.validns.net/download/
+
+MAINTAINER=	pettai@NetBSD.org
+HOMEPAGE=	http://www.validns.net/
+COMMENT=	Validns, a high performance DNS/DNSSEC zone validator
+LICENSE=	2-clause-bsd
+
+#BUILD_DEPENDS+=	p5-Test-Command-Simple-[0-9]*:../../devel/p5-Test-Command-Simple
+
+PKG_DESTDIR_SUPPORT=	user-destdir
+
+USE_TOOLS+=perl
+
+INSTALLATION_DIRS=	bin ${PKGMANDIR}/man1
+
+do-build:
+	cd ${WRKSRC} && ${SETENV} ${MAKE_ENV} ${MAKE_PROGRAM}
+
+#post-build:
+#	cd ${WRKSRC} && ${SETENV} ${MAKE_ENV} ${MAKE_PROGRAM} test
+
+do-install:
+	${INSTALL_PROGRAM} ${WRKSRC}/validns ${DESTDIR}${PREFIX}/bin
+	${INSTALL_MAN} ${WRKSRC}/validns.1 ${DESTDIR}${PREFIX}/${PKGMANDIR}/man1
+
+.include "../../devel/libjudy/buildlink3.mk"
+.include "../../mk/bsd.pkg.mk"
diff --git a/security/validns/PLIST b/security/validns/PLIST
new file mode 100644
index 00000000000..2d4c1375157
--- /dev/null
+++ b/security/validns/PLIST
@@ -0,0 +1,3 @@
+@comment $NetBSD: PLIST,v 1.1.1.1 2012/05/04 23:57:46 pettai Exp $
+bin/validns
+man/man1/validns.1
diff --git a/security/validns/distinfo b/security/validns/distinfo
new file mode 100644
index 00000000000..25fc86a3e41
--- /dev/null
+++ b/security/validns/distinfo
@@ -0,0 +1,7 @@
+$NetBSD: distinfo,v 1.1.1.1 2012/05/04 23:57:46 pettai Exp $
+
+SHA1 (validns-0.4.tar.gz) = dc253f27c06cd4874f3ae5911f890809f8290bf4
+RMD160 (validns-0.4.tar.gz) = c530cefe36996655bcce3a9b105ae2d11353cac1
+Size (validns-0.4.tar.gz) = 100105 bytes
+SHA1 (patch-Makefile) = f509fc5ec5a9954850dc8b451d7dc6dfb1b1215e
+SHA1 (patch-carp.c) = bbb750d013b751ca7994e32244c8865f8687ff1b
diff --git a/security/validns/patches/patch-Makefile b/security/validns/patches/patch-Makefile
new file mode 100644
index 00000000000..b1ce6ff202d
--- /dev/null
+++ b/security/validns/patches/patch-Makefile
@@ -0,0 +1,24 @@
+$NetBSD: patch-Makefile,v 1.1.1.1 2012/05/04 23:57:46 pettai Exp $
+
+Add (PKG_)PREFIX support
+
+--- Makefile.orig	2012-05-04 21:35:44.000000000 +0000
++++ Makefile
+@@ -1,6 +1,6 @@
+ OPTIMIZE=-O2 -g
+-CFLAGS=-Wall -Werror -pthread
+-INCPATH=-I/usr/local/include -I/opt/local/include
++CFLAGS=-Wall -pthread
++INCPATH=-I/usr/include -I${PREFIX}/include
+ CC?=cc
+ 
+ validns: main.o carp.o mempool.o textparse.o base64.o base32hex.o \
+@@ -18,7 +18,7 @@ validns: main.o carp.o mempool.o textpar
+ 	    hinfo.o loc.o nsec3checks.o ptr.o \
+ 	    sshfp.o threads.o rp.o spf.o cert.o \
+ 	    dname.o \
+-	    -L/usr/local/lib -L/opt/local/lib -lJudy -lcrypto
++	    -L/usr/lib -L${PREFIX}/lib -lJudy -lcrypto -R${PREFIX}/lib
+ 
+ clean:
+ 	-rm -f validns main.o carp.o mempool.o textparse.o
diff --git a/security/validns/patches/patch-carp.c b/security/validns/patches/patch-carp.c
new file mode 100644
index 00000000000..a34a44031e7
--- /dev/null
+++ b/security/validns/patches/patch-carp.c
@@ -0,0 +1,15 @@
+$NetBSD: patch-carp.c,v 1.1.1.1 2012/05/04 23:57:46 pettai Exp $
+
+Add __NetBSD__ support
+
+--- carp.c.orig	2012-05-04 22:27:57.000000000 +0000
++++ carp.c
+@@ -102,7 +102,7 @@ static char proggy[MAXPATHLEN];
+ 
+ const char *thisprogname(void)
+ {
+-#if defined(__FreeBSD__)
++#if defined(__FreeBSD__) || (__NetBSD__)
+ 	return getprogname();
+ #elif defined(__APPLE__)
+ 	return getprogname();