CVS commit: pkgsrc/security/vault

["Filip Hajny" <fhajny%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   fhajny
Date:           Wed May 10 18:21:27 UTC 2017

Modified Files:
        pkgsrc/security/vault: Makefile distinfo

Log Message:
Update security/vault to 0.7.2.

0.7.2 (May 8th, 2017)

BUG FIXES:

- audit: Fix auditing entries containing certain kinds of time values

0.7.1 (May 5th, 2017)

DEPRECATIONS/CHANGES:

- LDAP Auth Backend: Group membership queries will now run as the
  binddn user when binddn/bindpass are configured, rather than as the
  authenticating user as was the case previously.

FEATURES:

- AWS IAM Authentication
- MSSQL Physical Backend
- Lease Listing and Lookup
- TOTP Secret Backend
- Database Secret Backend & Secure Plugins (Beta)

IMPROVEMENTS:

- auth/cert: Support for constraints on subject Common Name and
  DNS/email Subject Alternate Names in certificates
- auth/ldap: Use the binding credentials to search group membership
  rather than the user credentials
- cli/revoke: Add -self option to allow revoking the currently active
  token
- core: Randomize x coordinate in Shamir shares
- tidy: Improvements to auth/token/tidy and sys/leases/tidy to handle
  more cleanup cases
- secret/pki: Add no_store option that allows certificates to be
  issued without being stored. This removes the ability to look up
  and/or add to a CRL but helps with scaling to very large numbers of
  certificates.
- secret/pki: If used with a role parameter, the sign-verbatim/<role>
  endpoint honors the values of generate_lease, no_store, ttl and
  max_ttl from the given role
- secret/pki: Add role parameter allow_glob_domains that enables
  defining names in allowed_domains containing * glob patterns
- secret/pki: Update certificate storage to not use characters that
  are not supported on some filesystems
- storage/etcd3: Add discovery_srv option to query for SRV records to
  find servers
- storage/s3: Support max_parallel option to limit concurrent
  outstanding requests
- storage/s3: Use pooled transport for http client
- storage/swift: Allow domain values for V3 authentication

BUG FIXES:

- api: Respect a configured path in Vault's address
- auth/aws-ec2: New bounds added as criteria to allow role creation
- auth/ldap: Don't lowercase groups attached to users
- cli: Don't panic if vault write is used with the force flag but no
  path
- core: Help operations should request forward since standbys may not
  have appropriate info
- replication: Fix enabling secondaries when certain mounts already
  existed on the primary
- secret/mssql: Update mssql driver to support queries with colons
- secret/pki: Don't lowercase O/OU values in certs
- secret/pki: Don't attempt to validate IP SANs if none are provided


To generate a diff of this commit:
cvs rdiff -u -r1.11 -r1.12 pkgsrc/security/vault/Makefile
cvs rdiff -u -r1.6 -r1.7 pkgsrc/security/vault/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/vault/Makefile
diff -u pkgsrc/security/vault/Makefile:1.11 pkgsrc/security/vault/Makefile:1.12
--- pkgsrc/security/vault/Makefile:1.11 Thu Apr 13 15:12:06 2017
+++ pkgsrc/security/vault/Makefile      Wed May 10 18:21:27 2017
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.11 2017/04/13 15:12:06 bsiegert Exp $
+# $NetBSD: Makefile,v 1.12 2017/05/10 18:21:27 fhajny Exp $
 
-DISTNAME=      vault-0.7.0
-PKGREVISION=   1
+DISTNAME=      vault-0.7.2
 CATEGORIES=    security
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=hashicorp/}
 
@@ -12,11 +11,8 @@ LICENSE=     mpl-2.0
 
 GITHUB_TAG=    v${PKGVERSION_NOREV}
 
-WRKSRC=                ${WRKDIR}/src/github.com/hashicorp/vault
-
-.include "../../lang/go/version.mk"
-
-BUILD_DEPENDS+=                go-${GO_VERSION}*:../../lang/go
+GO_DIST_BASE=  ${DISTNAME}
+GO_SRCPATH=    github.com/hashicorp/vault
 
 USE_TOOLS+=            bash gmake
 
@@ -24,14 +20,11 @@ MAKE_ENV+=          GOPATH=${WRKDIR}:${PREFIX}/g
 
 INSTALLATION_DIRS+=    bin
 
-post-extract:
-       ${MKDIR} ${WRKSRC}
-       ${MV} ${WRKDIR}/${DISTNAME}/* ${WRKSRC}
-
 do-build:
        cd ${WRKSRC} && ${SETENV} ${MAKE_ENV} go build -o bin/vault
 
 do-install:
        ${INSTALL_PROGRAM} ${WRKSRC}/bin/vault ${DESTDIR}${PREFIX}/bin
 
+.include "../../lang/go/go-package.mk"
 .include "../../mk/bsd.pkg.mk"

Index: pkgsrc/security/vault/distinfo
diff -u pkgsrc/security/vault/distinfo:1.6 pkgsrc/security/vault/distinfo:1.7
--- pkgsrc/security/vault/distinfo:1.6  Mon Mar 20 15:15:28 2017
+++ pkgsrc/security/vault/distinfo      Wed May 10 18:21:27 2017
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.6 2017/03/20 15:15:28 fhajny Exp $
+$NetBSD: distinfo,v 1.7 2017/05/10 18:21:27 fhajny Exp $
 
-SHA1 (vault-0.7.0.tar.gz) = 407eb309107fbb5608fc108331f5d60be0b164b4
-RMD160 (vault-0.7.0.tar.gz) = 8e8ce699782d67ce4f0e6b209ad174a99c92ad80
-SHA512 (vault-0.7.0.tar.gz) = dc43949acfaf54fc5a43a01657f52b1cab373cb2f3c8fad7b82320fd9dc42d99533fba91931a636dfce1e5d586a1421d74a991ad4e10117b595fb875c1b344d5
-Size (vault-0.7.0.tar.gz) = 5826086 bytes
+SHA1 (vault-0.7.2.tar.gz) = e0482b7625b095a93fc6075c83988fda0738d45e
+RMD160 (vault-0.7.2.tar.gz) = 0b666498fcf4254ecd1b8194cf5762027c0c385a
+SHA512 (vault-0.7.2.tar.gz) = 3a811f1a3f7c318bf645bf93c66c15c6a9d06718806ca5dd7a5ff95eeafef6dc6e58bcb829373716172cf2fe863240d1f4fdd34f8dcc1d31a2e36f6917e533ba
+Size (vault-0.7.2.tar.gz) = 6547973 bytes