CVS commit: pkgsrc/security/opendnssec2

["Havard Eidnes" <he%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   he
Date:           Fri Mar  5 21:17:25 UTC 2021

Modified Files:
        pkgsrc/security/opendnssec2: Makefile distinfo
Added Files:
        pkgsrc/security/opendnssec2/patches:
            patch-enforcer_utils_1.4-2.0__db__convert_sqlite__convert.sql

Log Message:
Add a patch to fix a bug in the sqlite3 conversion script,
so that the salt value gets copied to the new kasp.db.

Bump PKGREVISION.


To generate a diff of this commit:
cvs rdiff -u -r1.9 -r1.10 pkgsrc/security/opendnssec2/Makefile
cvs rdiff -u -r1.4 -r1.5 pkgsrc/security/opendnssec2/distinfo
cvs rdiff -u -r0 -r1.1 \
    pkgsrc/security/opendnssec2/patches/patch-enforcer_utils_1.4-2.0__db__convert_sqlite__convert.sql

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/opendnssec2/Makefile
diff -u pkgsrc/security/opendnssec2/Makefile:1.9 pkgsrc/security/opendnssec2/Makefile:1.10
--- pkgsrc/security/opendnssec2/Makefile:1.9    Sun Feb 21 09:12:48 2021
+++ pkgsrc/security/opendnssec2/Makefile        Fri Mar  5 21:17:25 2021
@@ -1,8 +1,9 @@
-# $NetBSD: Makefile,v 1.9 2021/02/21 09:12:48 he Exp $
+# $NetBSD: Makefile,v 1.10 2021/03/05 21:17:25 he Exp $
 #
 
 DISTNAME=      opendnssec-2.1.8
 PKGNAME=       ${DISTNAME:S/opendnssec/opendnssec2/}
+PKGREVISION=   1
 CATEGORIES=    security net
 MASTER_SITES=  https://www.opendnssec.org/files/source/
 
@@ -54,14 +55,14 @@ MIGRATE_FILES+=             find_problematic_zones.
 MIGRATE_FILES+=                sqlite_convert.sql
 
 SUBST_CLASSES+=                paths
-SUBST_FILES.paths=     ${WRKSRC}/conf/Makefile.in
+SUBST_FILES.paths=     conf/Makefile.in
 SUBST_STAGE.paths=     pre-configure
 SUBST_VARS.paths=      EGDIR
 
 # Prepare files for installation
 SUBST_CLASSES+=                migrate
-SUBST_FILES.migrate+=  ${WRKSRC}/${CONVERT_DIR}/convert_sqlite
-SUBST_FILES.migrate+=  ${WRKSRC}/${CONVERT_DIR}/convert_mysql
+SUBST_FILES.migrate+=  ${CONVERT_DIR}/convert_sqlite
+SUBST_FILES.migrate+=  ${CONVERT_DIR}/convert_mysql
 SUBST_STAGE.migrate=   pre-configure
 SUBST_SED.migrate=     -e 's,SCHEMA=../../src/db/,SCHEMA=./,'
 

Index: pkgsrc/security/opendnssec2/distinfo
diff -u pkgsrc/security/opendnssec2/distinfo:1.4 pkgsrc/security/opendnssec2/distinfo:1.5
--- pkgsrc/security/opendnssec2/distinfo:1.4    Sun Feb 21 09:12:48 2021
+++ pkgsrc/security/opendnssec2/distinfo        Fri Mar  5 21:17:25 2021
@@ -1,7 +1,8 @@
-$NetBSD: distinfo,v 1.4 2021/02/21 09:12:48 he Exp $
+$NetBSD: distinfo,v 1.5 2021/03/05 21:17:25 he Exp $
 
 SHA1 (opendnssec-2.1.8.tar.gz) = d425f79f1378fc78d073097c02faf2b11a7bc2d1
 RMD160 (opendnssec-2.1.8.tar.gz) = ab2500a720a630b807e28c2a156aa3cd67fe17c3
 SHA512 (opendnssec-2.1.8.tar.gz) = 48fa9e1efe54d00bba1c97d42d8680a7b33d90360cbb12e333835384447a9d42ffc6508ee6b455bfa4522907b371d4703068e4fd184fd72ea6d950427029cc1c
 Size (opendnssec-2.1.8.tar.gz) = 1151571 bytes
 SHA1 (patch-conf_Makefile.in) = 83fdf2650bfe63688b072dcb8019d44b62f6f016
+SHA1 (patch-enforcer_utils_1.4-2.0__db__convert_sqlite__convert.sql) = 6f59b2f7031be04dc3f7776cf2ac4807dee4fba7

Added files:

Index: pkgsrc/security/opendnssec2/patches/patch-enforcer_utils_1.4-2.0__db__convert_sqlite__convert.sql
diff -u /dev/null pkgsrc/security/opendnssec2/patches/patch-enforcer_utils_1.4-2.0__db__convert_sqlite__convert.sql:1.1
--- /dev/null   Fri Mar  5 21:17:25 2021
+++ pkgsrc/security/opendnssec2/patches/patch-enforcer_utils_1.4-2.0__db__convert_sqlite__convert.sql   Fri Mar  5 21:17:25 2021
@@ -0,0 +1,26 @@
+$NetBSD: patch-enforcer_utils_1.4-2.0__db__convert_sqlite__convert.sql,v 1.1 2021/03/05 21:17:25 he Exp $
+
+Fix bug in conversion script so that salt gets carried
+over and not set to "0" in the target kasp.db, something
+OpenDNSSEC will not recover from.
+
+--- enforcer/utils/1.4-2.0_db_convert/sqlite_convert.sql.orig  2021-02-20 21:04:47.000000000 +0000
++++ enforcer/utils/1.4-2.0_db_convert/sqlite_convert.sql
+@@ -222,7 +222,7 @@ SET denialSalt = (
+ WHERE (
+       SELECT salt
+       FROM  REMOTE.policies
+-      WHERE REMOTE.policies.id = policy.id) != null;
++      WHERE REMOTE.policies.id = policy.id) IS NOT NULL;
+ 
+ UPDATE policy
+ SET denialSaltLastChange = (
+@@ -232,7 +232,7 @@ SET denialSaltLastChange = (
+ WHERE (
+       SELECT salt_stamp
+       FROM  REMOTE.policies
+-      WHERE REMOTE.policies.id = policy.id) != null;
++      WHERE REMOTE.policies.id = policy.id) IS NOT NULL;
+ 
+ UPDATE policy
+ SET keysTtl = (