The DNSSEC-Tools project is about creating a set of software tools, patches,

applications, wrappers, extensions, and plugins that will help ease
the deployment of DNSSEC related technologies.

7 files changed, 182 insertions, 0 deletions

diff --git a/security/dnssec-tools/DESCR b/security/dnssec-tools/DESCR
new file mode 100644
index 00000000000..e28f10087fd
--- /dev/null
+++ b/security/dnssec-tools/DESCR
@@ -0,0 +1,3 @@
+The DNSSEC-Tools project is about creating a set of software tools, patches,
+applications, wrappers, extensions, and plugins that will help ease
+the deployment of DNSSEC related technologies.
diff --git a/security/dnssec-tools/Makefile b/security/dnssec-tools/Makefile
new file mode 100644
index 00000000000..837fb705b46
--- /dev/null
+++ b/security/dnssec-tools/Makefile
@@ -0,0 +1,50 @@
+# $NetBSD: Makefile,v 1.1.1.1 2010/07/22 21:08:26 pettai Exp $
+#
+
+DISTNAME=	dnssec-tools-1.7
+CATEGORIES=	security
+MASTER_SITES=	http://www.dnssec-tools.org/download/
+
+MAINTAINER=	pettai@NetBSD.org
+HOMEPAGE=	http://www.dnssec-tools.org/
+COMMENT=	Toolkit to ease the deployment of DNSSEC related technologies
+LICENSE=	modified-bsd
+
+PKG_DESTDIR_SUPPORT=	user-destdir
+
+DEPENDS=	p5-Net-DNS-SEC-[0-9]*:../../security/p5-Net-DNS-SEC
+DEPENDS=	p5-Text-Diff-[0-9]*:../../textproc/p5-Text-Diff
+DEPENDS=	p5-ExtUtils-MakeMaker-[0-9]*:../../devel/p5-ExtUtils-MakeMaker
+
+BUILD_DEFS+=	IPV6_READY
+
+USE_TOOLS+=	perl
+
+REPLACE_PERL=	tools/modules/rollrec.pm tools/modules/timetrans.pm
+REPLACE_PERL+=	tools/modules/tooloptions.pm
+REPLACE_PERL+=	tools/convertar/lib/Net/DNS/SEC/Tools/TrustAnchor/Makefile.PL
+
+PERL5_PACKLIST=		auto/Net/DNS/SEC/Tools/Dnspktflow/dnspktflow/.packlist
+PERL5_PACKLIST+=	auto/Net/DNS/SEC/Tools/Donuts/donuts/.packlist
+PERL5_PACKLIST+=	auto/Net/DNS/SEC/Tools/Drawvalmap/drawvalmap/.packlist
+PERL5_PACKLIST+=	auto/Net/DNS/SEC/Tools/Maketestzone/maketestzone/.packlist
+PERL5_PACKLIST+=	auto/Net/DNS/SEC/Tools/Mapper/mapper/.packlist
+PERL5_PACKLIST+=	auto/Net/DNS/SEC/Tools/conf/.packlist
+PERL5_PACKLIST+=	auto/convertar/.packlist
+PERL5_PACKLIST+=	auto/dnssec-tools/.packlist
+
+GNU_CONFIGURE=	yes
+CONFIGURE_ARGS+=        --enable-nsec3
+CONFIGURE_ARGS+=	--with-resolv-conf=${PKG_SYSCONFDIR}/dnssec-tools/resolv.conf
+CONFIGURE_ARGS+=	--with-root-hints=${PKG_SYSCONFDIR}/dnssec-tools/root.hints
+CONFIGURE_ARGS+=	--with-perl-build-args="INSTALLDIRS=vendor DESTDIR=${DESTDIR}"
+
+USE_LIBTOOL=	yes
+USE_LANGUAGES=	c c++
+
+.include "options.mk"
+
+.include "../../lang/perl5/packlist.mk"
+.include "../../lang/perl5/buildlink3.mk"
+.include "../../security/openssl/buildlink3.mk"
+.include "../../mk/bsd.pkg.mk"
diff --git a/security/dnssec-tools/PLIST b/security/dnssec-tools/PLIST
new file mode 100644
index 00000000000..723cdf0081c
--- /dev/null
+++ b/security/dnssec-tools/PLIST
@@ -0,0 +1,65 @@
+@comment $NetBSD: PLIST,v 1.1.1.1 2010/07/22 21:08:26 pettai Exp $
+bin/getaddr
+bin/gethost
+bin/getname
+bin/getquery
+bin/getrrset
+bin/libval-config
+bin/libval_check_conf
+bin/validate
+include/validator/resolver.h
+include/validator/val_errors.h
+include/validator/validator.h
+lib/libsres.la
+lib/libval-threads.la
+lib/libval_shim.la
+man/man1/dnssec-tools.1
+man/man1/getaddr.1
+man/man1/gethost.1
+man/man1/getname.1
+man/man1/getquery.1
+man/man1/getrrset.1
+man/man1/libval_check_conf.1
+man/man1/validate.1
+man/man3/dnsval.conf.3
+man/man3/dnsval_conf_get.3
+man/man3/dnsval_conf_set.3
+man/man3/libsres.3
+man/man3/libval.3
+man/man3/libval_shim.3
+man/man3/p_ac_status.3
+man/man3/p_val_status.3
+man/man3/resolv_conf_get.3
+man/man3/resolv_conf_set.3
+man/man3/root_hints_get.3
+man/man3/root_hints_set.3
+man/man3/val_add_valpolicy.3
+man/man3/val_create_context.3
+man/man3/val_create_context_with_conf.3
+man/man3/val_does_not_exist.3
+man/man3/val_free_answer_chain.3
+man/man3/val_free_context.3
+man/man3/val_free_response.3
+man/man3/val_free_result_chain.3
+man/man3/val_freeaddrinfo.3
+man/man3/val_get_rrset.3
+man/man3/val_getaddrinfo.3
+man/man3/val_gethostbyaddr.3
+man/man3/val_gethostbyaddr_r.3
+man/man3/val_gethostbyname.3
+man/man3/val_gethostbyname2.3
+man/man3/val_gethostbyname2_r.3
+man/man3/val_gethostbyname_r.3
+man/man3/val_getnameinfo.3
+man/man3/val_istrusted.3
+man/man3/val_isvalidated.3
+man/man3/val_res_query.3
+man/man3/val_res_search.3
+man/man3/val_resolve_and_check.3
+share/dnssec-tools/donuts/rules/check_nameservers.txt
+share/dnssec-tools/donuts/rules/dns.errors.txt
+share/dnssec-tools/donuts/rules/dnssec.rules.txt
+share/dnssec-tools/donuts/rules/nsec_check.rules.txt
+share/dnssec-tools/donuts/rules/parent_child.rules.txt
+share/dnssec-tools/donuts/rules/recommendations.rules.txt
+@pkgdir etc/dnssec-tools
diff --git a/security/dnssec-tools/distinfo b/security/dnssec-tools/distinfo
new file mode 100644
index 00000000000..5039663f096
--- /dev/null
+++ b/security/dnssec-tools/distinfo
@@ -0,0 +1,7 @@
+$NetBSD: distinfo,v 1.1.1.1 2010/07/22 21:08:26 pettai Exp $
+
+SHA1 (dnssec-tools-1.7.tar.gz) = 754ffec89a672673cae2572fdbd5340600101528
+RMD160 (dnssec-tools-1.7.tar.gz) = 851e017aba0f32828e0ecf88c9846ebf765112c3
+Size (dnssec-tools-1.7.tar.gz) = 2151305 bytes
+SHA1 (patch-aa) = cf0f806152bf912d9e6d727f66bdb186ec2f55c7
+SHA1 (patch-ab) = 07b5a0dbbca1c41cbb30b19f5a94ec9f8c900c15
diff --git a/security/dnssec-tools/options.mk b/security/dnssec-tools/options.mk
new file mode 100644
index 00000000000..887efcdae03
--- /dev/null
+++ b/security/dnssec-tools/options.mk
@@ -0,0 +1,22 @@
+# $NetBSD: options.mk,v 1.1.1.1 2010/07/22 21:08:26 pettai Exp $
+
+PKG_OPTIONS_VAR=		PKG_OPTIONS.dnssec-tools
+PKG_SUPPORTED_OPTIONS=		inet6 dlv
+PKG_SUGGESTED_OPTIONS=
+
+.include "../../mk/bsd.options.mk"
+
+.if !empty(PKG_OPTIONS:Minet6)
+CONFIGURE_ARGS+=	--with-ipv6
+.else
+CONFIGURE_ARGS+=	--without-ipv6
+.endif
+
+###
+### DLV support
+###
+.if !empty(PKG_OPTIONS:Mdlv)
+CONFIGURE_ARGS+=	--with-dlv
+.else
+CONFIGURE_ARGS+=	--without-dlv
+.endif
diff --git a/security/dnssec-tools/patches/patch-aa b/security/dnssec-tools/patches/patch-aa
new file mode 100644
index 00000000000..cec86ad4cbc
--- /dev/null
+++ b/security/dnssec-tools/patches/patch-aa
@@ -0,0 +1,25 @@
+$NetBSD: patch-aa,v 1.1.1.1 2010/07/22 21:08:26 pettai Exp $
+
+--- Makefile.in.orig	2010-06-30 14:51:12.000000000 +0000
++++ Makefile.in
+@@ -15,7 +15,7 @@ man1dir=man1
+ #man8dir=@man8dir@
+ BUILDDIR=@abs_top_builddir@
+ PERLDIRS=tools/modules tools/donuts tools/mapper tools/scripts tools/convertar \
+-         tools/dnspktflow tools/maketestzone tools/etc tools/drawvalmap
++         tools/dnspktflow tools/maketestzone tools/drawvalmap
+ PERLARGS=@PERLARGS@
+ SUBDIRS=@DNSSEC_SUBDIRS@
+ MKPATH=$(top_srcdir)/mkinstalldirs
+@@ -46,9 +46,9 @@ nextstepinstructions: subdirinstall
+ 	$(QUIET)echo ""
+ 
+ maninstall:
+-	$(MKPATH) $(mandir)/$(man1dir)
++	$(MKPATH) $(DESTDIR)/$(mandir)/$(man1dir)
+ 	for i in $(MAN1PAGES) ; do		\
+-	  $(DOCINSTALL) docs/$$i $(DESTDIR)/$(mandir)/$(man1dir) ;	\
++	  $(INSTALL) docs/$$i $(DESTDIR)/$(mandir)/$(man1dir) ;	\
+ 	done
+ 
+ 
diff --git a/security/dnssec-tools/patches/patch-ab b/security/dnssec-tools/patches/patch-ab
new file mode 100644
index 00000000000..01bf0d5b975
--- /dev/null
+++ b/security/dnssec-tools/patches/patch-ab
@@ -0,0 +1,10 @@
+$NetBSD: patch-ab,v 1.1.1.1 2010/07/22 21:08:26 pettai Exp $
+
+--- validator/apps/Makefile.in.orig	2010-07-18 17:14:45.000000000 +0000
++++ validator/apps/Makefile.in
+@@ -74,4 +74,4 @@ install:
+ 	$(LIBTOOLIN) $(GETNAME) $(DESTDIR)/$(bindir)	
+ 	$(LIBTOOLIN) $(CHECK_CONF) $(DESTDIR)/$(bindir)	
+ 	$(MKPATH) `echo $(DESTDIR)/@VALIDATOR_TESTCASES@ | sed 's#/[^/]*$$##'`
+-	$(CP) selftests.dist $(DESTDIR)/@VALIDATOR_TESTCASES@
++	#$(CP) selftests.dist $(DESTDIR)/@VALIDATOR_TESTCASES@