diff options
Diffstat (limited to 'external/unbound/contrib/unbound.spec_fedora')
| -rw-r--r-- | external/unbound/contrib/unbound.spec_fedora | 433 |
1 files changed, 0 insertions, 433 deletions
diff --git a/external/unbound/contrib/unbound.spec_fedora b/external/unbound/contrib/unbound.spec_fedora deleted file mode 100644 index e7e9ac073..000000000 --- a/external/unbound/contrib/unbound.spec_fedora +++ /dev/null @@ -1,433 +0,0 @@ -# not ready yet -%{?!with_python: %global with_python 1} - -%if %{with_python} -%{!?python_sitelib: %global python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")} -%{!?python_sitearch: %global python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib(1)")} -%endif - -Summary: Validating, recursive, and caching DNS(SEC) resolver -Name: unbound -Version: 1.4.13 -Release: 1%{?dist} -License: BSD -Url: http://www.nlnetlabs.nl/unbound/ -Source: http://www.unbound.net/downloads/%{name}-%{version}.tar.gz -Source1: unbound.init -Source2: unbound.conf -Source3: unbound.munin -Source4: unbound_munin_ -Source5: root.key -Patch1: unbound-1.2-glob.patch - -Group: System Environment/Daemons -BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) -BuildRequires: flex, openssl-devel , ldns-devel >= 1.5.0, -BuildRequires: libevent-devel expat-devel -%if %{with_python} -BuildRequires: python-devel swig -%endif -# Required for SVN versions -# BuildRequires: bison - -Requires(post): chkconfig -Requires(preun): chkconfig -Requires(preun): initscripts -Requires(postun): initscripts -Requires: ldns >= 1.5.0 -Requires(pre): shadow-utils - -Obsoletes: dnssec-conf < 1.27-2 -Provides: dnssec-conf = 1.27-1 - -%description -Unbound is a validating, recursive, and caching DNS(SEC) resolver. - -The C implementation of Unbound is developed and maintained by NLnet -Labs. It is based on ideas and algorithms taken from a java prototype -developed by Verisign labs, Nominet, Kirei and ep.net. - -Unbound is designed as a set of modular components, so that also -DNSSEC (secure DNS) validation and stub-resolvers (that do not run -as a server, but are linked into an application) are easily possible. - -%package munin -Summary: Plugin for the munin / munin-node monitoring package -Group: System Environment/Daemons -Requires: munin-node -Requires: %{name} = %{version}-%{release}, bc - -%description munin -Plugin for the munin / munin-node monitoring package - -%package devel -Summary: Development package that includes the unbound header files -Group: Development/Libraries -Requires: %{name}-libs = %{version}-%{release}, openssl-devel, ldns-devel - -%description devel -The devel package contains the unbound library and the include files - -%package libs -Summary: Libraries used by the unbound server and client applications -Group: Applications/System -Requires(post): /sbin/ldconfig -Requires(postun): /sbin/ldconfig -Requires: openssl - -%description libs -Contains libraries used by the unbound server and client applications - -%if %{with_python} -%package python -Summary: Python modules and extensions for unbound -Group: Applications/System -Requires: %{name}-libs = %{version}-%{release} - -%description python -Python modules and extensions for unbound -%endif - -%prep -%setup -q -%patch1 -p1 - -%build -%configure --with-ldns= --with-libevent --with-pthreads --with-ssl \ - --disable-rpath --disable-static \ - --with-conf-file=%{_sysconfdir}/%{name}/unbound.conf \ - --with-pidfile=%{_localstatedir}/run/%{name}/%{name}.pid \ -%if %{with_python} - --with-pythonmodule --with-pyunbound \ -%endif - --enable-sha2 --disable-gost -%{__make} %{?_smp_mflags} - -%install -rm -rf %{buildroot} -%{__make} DESTDIR=%{buildroot} install -install -d 0755 %{buildroot}%{_initrddir} -install -m 0755 %{SOURCE1} %{buildroot}%{_initrddir}/unbound -install -m 0755 %{SOURCE2} %{buildroot}%{_sysconfdir}/unbound -# Install munin plugin and its softlinks -install -d 0755 %{buildroot}%{_sysconfdir}/munin/plugin-conf.d -install -m 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/munin/plugin-conf.d/unbound -install -d 0755 %{buildroot}%{_datadir}/munin/plugins/ -install -m 0755 %{SOURCE4} %{buildroot}%{_datadir}/munin/plugins/unbound -for plugin in unbound_munin_hits unbound_munin_queue unbound_munin_memory unbound_munin_by_type unbound_munin_by_class unbound_munin_by_opcode unbound_munin_by_rcode unbound_munin_by_flags unbound_munin_histogram; do - ln -s unbound %{buildroot}%{_datadir}/munin/plugins/$plugin -done - -# install root and DLV key -install -m 0644 %{SOURCE5} %{SOURCE6} %{buildroot}%{_sysconfdir}/unbound/ - -# remove static library from install (fedora packaging guidelines) -rm %{buildroot}%{_libdir}/*.la -%if %{with_python} -rm %{buildroot}%{python_sitearch}/*.la -%endif - -mkdir -p %{buildroot}%{_localstatedir}/run/unbound - -%clean -rm -rf ${RPM_BUILD_ROOT} - -%files -%defattr(-,root,root,-) -%doc doc/README doc/CREDITS doc/LICENSE doc/FEATURES -%attr(0755,root,root) %{_initrddir}/%{name} -%attr(0755,root,root) %dir %{_sysconfdir}/%{name} -%ghost %attr(0755,unbound,unbound) %dir %{_localstatedir}/run/%{name} -%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/%{name}/unbound.conf -%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/%{name}/root.key -%{_sbindir}/* -%{_mandir}/*/* - -%if %{with_python} -%files python -%defattr(-,root,root,-) -%{python_sitearch}/* -%doc libunbound/python/examples/* -%doc pythonmod/examples/* -%endif - -%files munin -%defattr(-,root,root,-) -%config(noreplace) %{_sysconfdir}/munin/plugin-conf.d/unbound -%{_datadir}/munin/plugins/unbound* - -%files devel -%defattr(-,root,root,-) -%{_libdir}/libunbound.so -%{_includedir}/unbound.h -%doc README - -%files libs -%defattr(-,root,root,-) -%{_libdir}/libunbound.so.* -%doc doc/README doc/LICENSE - -%pre -getent group unbound >/dev/null || groupadd -r unbound -getent passwd unbound >/dev/null || \ -useradd -r -g unbound -d %{_sysconfdir}/unbound -s /sbin/nologin \ --c "Unbound DNS resolver" unbound -exit 0 - -%post -/sbin/chkconfig --add %{name} - -%post libs -p /sbin/ldconfig - -%preun -if [ "$1" -eq 0 ]; then - /sbin/service %{name} stop >/dev/null 2>&1 - /sbin/chkconfig --del %{name} -fi - -%postun -if [ "$1" -ge "1" ]; then - /sbin/service %{name} condrestart >/dev/null 2>&1 || : -fi - -%postun libs -p /sbin/ldconfig - -%changelog -* Tue Sep 06 2011 Paul Wouters <paul@xelerance.com> - 1.4.13-1 -- Updated to 1.4.13 -- Fix install location of pythonmod from sitelib to sitearch -- Removed patches merged in by upstream -- Removed versioned openssl dep, it differs per branch - -* Mon Aug 08 2011 Paul Wouters <paul@xelerance.com> - 1.4.12-3 -- Added pythonmod docs and examples -- Fix for python module load in the server (Tom Hendrikx) -- No longer enable --enable-debug as it causes degraded performance - under load. - -* Mon Jul 18 2011 Paul Wouters <paul@xelerance.com> - 1.4.12-1 -- Updated to 1.4.12 - -* Sun Jul 03 2011 Paul Wouters <paul@xelerance.com> - 1.4.11-1 -- Updated to 1.4.11 -- removed integrated CVE patch -- updated stock unbound.conf for new options introduced - -* Mon Jun 06 2011 Paul Wouters <paul@xelerance.com> - 1.4.10-1 -- Added ghost for /var/run/unbound (bz#656710) - -* Mon Jun 06 2011 Paul Wouters <paul@xelerance.com> - 1.4.9-3 -- rebuilt - -* Wed May 25 2011 Paul Wouters <paul@xelerance.com> - 1.4.9-2 -- Applied patch for CVE-2011-1922 DoS vulnerability - -* Sun Mar 27 2011 Paul Wouters <paul@xelerance.com> - 1.4.9-1 -- Updated to 1.4.9 - -* Sat Feb 12 2011 Paul Wouters <paul@xelerance.com> - 1.4.8-2 -- rebuilt - -* Tue Jan 25 2011 Paul Wouters <paul@xelerance.com> - 1.4.8-1 -- Updated to 1.4.8 -- Enable root key for DNSSEC -- Fix unbound-munin to use proper file (could cause excessive logging) -- Build unbound-python per default -- Disable gost as Fedora/EPEL does not allow ECC and has mangled openssl - -* Tue Oct 26 2010 Paul Wouters <paul@xelerance.com> - 1.4.5-4 -- Revert last build - it was on the wrong branch - -* Tue Oct 26 2010 Paul Wouters <paul@xelerance.com> - 1.4.5-3 -- Disable do-ipv6 per default - causes severe degradation on non-ipv6 machines - (see comments in inbound.conf) - -* Tue Jun 15 2010 Paul Wouters <paul@xelerance.com> - 1.4.5-2 -- Bump release - forgot to upload the new tar ball. - -* Tue Jun 15 2010 Paul Wouters <paul@xelerance.com> - 1.4.5-1 -- Upgraded to 1.4.5 - -* Mon May 31 2010 Paul Wouters <paul@xelerance.com> - 1.4.4-2 -- Added accidentally omitted svn patches to cvs - -* Mon May 31 2010 Paul Wouters <paul@xelerance.com> - 1.4.4-1 -- Upgraded to 1.4.4 with svn patches -- Obsolete dnssec-conf to ensure it is de-installed - -* Thu Mar 11 2010 Paul Wouters <paul@xelerance.com> - 1.4.3-1 -- Update to 1.4.3 that fixes 64bit crasher - -* Tue Mar 09 2010 Paul Wouters <paul@xelerance.com> - 1.4.2-1 -- Updated to 1.4.2 -- Updated unbound.conf with new options -- Enabled pre-fetching DNSKEY records (DNSSEC speedup) -- Enabled re-fetching popular records before they expire -- Enabled logging of DNSSEC validation errors - -* Mon Mar 01 2010 Paul Wouters <paul@xelerance.com> - 1.4.1-5 -- Overriding -D_GNU_SOURCE is no longer needed. This fixes DSO issues - with pthreads - -* Wed Feb 24 2010 Paul Wouters <paul@xelerance.com> - 1.4.1-3 -- Change make/configure lines to attempt to fix -lphtread linking issue - -* Thu Feb 18 2010 Paul Wouters <paul@xelerance.com> - 1.4.1-2 -- Removed dependency for dnssec-conf -- Added ISC DLV key (formerly in dnssec-conf) -- Fixup old DLV locations in unbound.conf file via %%post -- Fix parent child disagreement handling and no-ipv6 present [svn r1953] - -* Tue Jan 05 2010 Paul Wouters <paul@xelerance.com> - 1.4.1-1 -- Updated to 1.4.1 -- Changed %%define to %%global - -* Thu Oct 08 2009 Paul Wouters <paul@xelerance.com> - 1.3.4-2 -- Bump version - -* Thu Oct 08 2009 Paul Wouters <paul@xelerance.com> - 1.3.4-1 -- Upgraded to 1.3.4. Security fix with validating NSEC3 records - -* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 1.3.3-2 -- rebuilt with new openssl - -* Mon Aug 17 2009 Paul Wouters <paul@xelerance.com> - 1.3.3-1 -- Updated to 1.3.3 - -* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - -* Sat Jun 20 2009 Paul Wouters <paul@xelerance.com> - 1.3.0-2 -- Added missing glob patch to cvs -- Place python macros within the %%with_python check - -* Sat Jun 20 2009 Paul Wouters <paul@xelerance.com> - 1.3.0-1 -- Updated to 1.3.0 -- Added unbound-python sub package. disabled for now -- Patch from svn to fix DLV lookups -- Patches from svn to detect wrong truncated response from BIND 9.6.1 with - minimal-responses) -- Added Default-Start and Default-Stop to unbound.init -- Re-enabled --enable-sha2 -- Re-enabled glob.patch - -* Wed May 20 2009 Paul Wouters <paul@xelerance.com> - 1.2.1-7 -- unbound-iterator.patch was not committed - -* Wed May 20 2009 Paul Wouters <paul@xelerance.com> - 1.2.1-6 -- Fix for https://bugzilla.redhat.com/show_bug.cgi?id=499793 - -* Tue Mar 17 2009 Paul Wouters <paul@xelerance.com> - 1.2.1-5 -- Use --nocheck to avoid giving an error on missing unbound-remote certs/keys - -* Tue Mar 10 2009 Adam Tkac <atkac redhat com> - 1.2.1-4 -- enable DNSSEC only if it is enabled in sysconfig/dnssec - -* Mon Mar 09 2009 Adam Tkac <atkac redhat com> - 1.2.1-3 -- add DNSSEC support to initscript and enabled it per default -- add requires dnssec-conf - -* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.1-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - -* Tue Feb 10 2009 Paul Wouters <paul@xelerance.com - 1.2.1-1 -- updated to 1.2.1 - -* Sun Jan 18 2009 Tomas Mraz <tmraz@redhat.com> - 1.2.0-2 -- rebuild with new openssl - -* Wed Jan 14 2009 Paul Wouters <paul@xelerance.com - 1.2.0-1 -- Updated to 1.2.0 -- Added dependency on minimum SSL for CVE-2008-5077 -- Added dependency on bc for unbound-munin -- Added minimum requirement of libevent 1.4.5. Crashes with older versions - (note: libevent is stale in EL-4 and not in EL-5, needs fixing there) -- Removed dependency on selinux-policy (will get used when available) -- Enable options as per draft-wijngaards-dnsext-resolver-side-mitigation-00.txt -- Enable unwanted-reply-threshold to mitigate against a Kaminsky attack -- Enable val-clean-additional to drop addition unsigned data from signed - response. -- Removed patches (got merged into upstream) - -* Mon Jan 5 2009 Paul Wouters <paul@xelerance.com> - 1.1.1-7 -- Modified scandir patch to silently fail when wildcard matches nothing -- Patch to allow unbound-checkconf to find empty wildcard matches - -* Mon Jan 5 2009 Paul Wouters <paul@xelerance.com> - 1.1.1-6 -- Added scandir patch for trusted-keys-file: option, which - is used to load multiple dnssec keys in bind file format - -* Mon Dec 8 2008 Paul Wouters <paul@xelerance.com> - 1.1.1-4 -- Added Requires: for selinux-policy >= 3.5.13-33 for proper SElinux rules. - -* Mon Dec 1 2008 Paul Wouters <paul@xelerance.com> - 1.1.1-3 -- We did not own the /etc/unbound directory (#474020) -- Fixed cvs anomalies - -* Fri Nov 28 2008 Adam Tkac <atkac redhat com> - 1.1.1-2 -- removed all obsolete chroot related stuff -- label control certs after generation correctly - -* Thu Nov 20 2008 Paul Wouters <paul@xelerance.com> - 1.1.1-1 -- Updated to unbound 1.1.1 which fixes a crasher and - addresses nlnetlabs bug #219 - -* Wed Nov 19 2008 Paul Wouters <paul@xelerance.com> - 1.1.0-3 -- Remove the chroot, obsoleted by SElinux -- Add additional munin plugin links supported by unbound plugin -- Move configuration directory from /var/lib/unbound to /etc/unbound -- Modified unbound.init and unbound.conf to account for chroot changes -- Updated unbound.conf with new available options -- Enabled dns-0x20 protection per default - -* Wed Nov 19 2008 Adam Tkac <atkac redhat com> - 1.1.0-2 -- unbound-1.1.0-log_open.patch - - make sure log is opened before chroot call - - tracked as http://www.nlnetlabs.nl/bugs/show_bug.cgi?id=219 -- removed /dev/log and /var/run/unbound and /etc/resolv.conf from - chroot, not needed -- don't mount files in chroot, it causes problems during updates -- fixed typo in default config file - -* Fri Nov 14 2008 Paul Wouters <paul@xelerance.com> - 1.1.0-1 -- Updated to version 1.1.0 -- Updated unbound.conf's statistics options and remote-control - to work properly for munin -- Added unbound-munin package -- Generate unbound remote-control key/certs on first startup -- Required ldns is now 1.4.0 - -* Wed Oct 22 2008 Paul Wouters <paul@xelerance.com> - 1.0.2-5 -- Only call ldconfig in -libs package -- Move configure into build section -- devel subpackage should only depend on libs subpackage - -* Tue Oct 21 2008 Paul Wouters <paul@xelerance.com> - 1.0.2-4 -- Fix CFLAGS getting lost in build -- Don't enable interface-automatic:yes because that - causes unbound to listen on 0.0.0.0 instead of 127.0.0.1 - -* Sun Oct 19 2008 Paul Wouters <paul@xelerance.com> - 1.0.2-3 -- Split off unbound-libs, make build verbose - -* Thu Oct 9 2008 Paul Wouters <paul@xelerance.com> - 1.0.2-2 -- FSB compliance, chroot fixes, initscript fixes - -* Thu Sep 11 2008 Paul Wouters <paul@xelerance.com> - 1.0.2-1 -- Upgraded to 1.0.2 - -* Wed Jul 16 2008 Paul Wouters <paul@xelerance.com> - 1.0.1-1 -- upgraded to new release - -* Wed May 21 2008 Paul Wouters <paul@xelerance.com> - 1.0.0-2 -- Build against ldns-1.3.0 - -* Wed May 21 2008 Paul Wouters <paul@xelerance.com> - 1.0.0-1 -- Split of -devel package, fixed dependencies, make rpmlint happy - -* Thu Apr 25 2008 Wouter Wijngaards <wouter@nlnetlabs.nl> - 0.12 -- Using parts from ports collection entry by Jaap Akkerhuis. -- Using Fedoraproject wiki guidelines. - -* Wed Apr 23 2008 Wouter Wijngaards <wouter@nlnetlabs.nl> - 0.11 -- Initial version. |