diff options
Diffstat (limited to 'net-dns/dnssec-root/dnssec-root-20110630.ebuild')
| -rw-r--r-- | net-dns/dnssec-root/dnssec-root-20110630.ebuild | 62 |
1 files changed, 62 insertions, 0 deletions
diff --git a/net-dns/dnssec-root/dnssec-root-20110630.ebuild b/net-dns/dnssec-root/dnssec-root-20110630.ebuild new file mode 100644 index 000000000000..9e76945581eb --- /dev/null +++ b/net-dns/dnssec-root/dnssec-root-20110630.ebuild @@ -0,0 +1,62 @@ +# Copyright 1999-2015 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Id$ + +EAPI=4 + +DESCRIPTION="The DNSSEC root key(s)" +HOMEPAGE="https://www.iana.org/dnssec/" +SRC_URI="http://data.iana.org/root-anchors/root-anchors.xml -> root-anchors-20100715.xml + http://data.iana.org/root-anchors/Kjqmt7v.csr -> Kjqmt7v-20100715.csr + test? ( http://data.iana.org/root-anchors/Kjqmt7v.crt -> Kjqmt7v-20110630.crt + http://data.iana.org/root-anchors/root-anchors.p7s -> root-anchors-20110630.p7s + http://data.iana.org/root-anchors/root-anchors.asc -> root-anchors-20100715.asc + http://data.iana.org/root-anchors/icannbundle.pem -> icannbundle-20100715.pem + http://data.iana.org/root-anchors/icann.pgp -> icann-20110715.pgp + )" + +LICENSE="public-domain" +SLOT="0" +KEYWORDS="~alpha amd64 ~arm ~hppa ~ia64 ~m68k ~mips ppc ppc64 ~s390 ~sh ~sparc x86 ~x64-macos" +IUSE="test" + +RESTRICT="mirror" + +RDEPEND="" +DEPEND="dev-libs/libxslt + test? ( app-crypt/gnupg + dev-libs/openssl )" + +S="${WORKDIR}" + +# xsl and checking as per: +# http://permalink.gmane.org/gmane.network.dns.unbound.user/1039 + +src_unpack() { + return +} + +src_compile() { + xsltproc -o root-anchors-20100715.txt "${FILESDIR}"/anchors2ds.xsl "${DISTDIR}"/root-anchors-20100715.xml || die 'xsl translation failed' +} + +src_test() { + # icann.pgp contains an expired key + # gpg --import "${DISTDIR}"/icann.pgp || die 'icann key import failed' + gpg --import \ + "${FILESDIR}"/dnssec_at_iana.org_1024D_0F6C91D2-20120522.asc || die + gpg --verify \ + "${DISTDIR}"/root-anchors-20100715.asc \ + "${DISTDIR}"/root-anchors-20100715.xml || die + openssl smime -verify \ + -content "${DISTDIR}"/root-anchors-20100715.xml \ + -in "${DISTDIR}"/root-anchors-20110630.p7s -inform der \ + -CAfile "${DISTDIR}"/icannbundle-20100715.pem || die +} + +src_install() { + insinto /etc/dnssec + newins root-anchors-20100715.txt root-anchors.txt + newins "${DISTDIR}"/root-anchors-20100715.xml root-anchors.xml + newins "${DISTDIR}"/Kjqmt7v-20100715.csr Kjqmt7v.csr +} |