Summary
A program implementing the Milter API that signs and verifies using the DKIM standard. This is a fork of Sendmail's DKIM-milter
Versions
v2.10.3-r32 :: 0 :: gentoo
- Modified
- License
- BSD GPL-2 Sendmail-Open-Source
- Keywords
- ~amd64 ~arm ~arm64 ~x86
- USE flags
- berkdb ldap lmdb lua memcached opendbx poll querycache sasl selinux ssl static-libs stats test unbound
v2.10.3-r30 :: 0 :: gentoo
- Modified
- License
- BSD GPL-2 Sendmail-Open-Source
- Keywords
- amd64 x86 ~arm ~arm64
- USE flags
- berkdb ldap lmdb lua memcached opendbx poll querycache sasl selinux ssl static-libs stats test unbound
USE flags
General
- berkdb
- Add support for sys-libs/db (Berkeley DB for MySQL)
- ldap
- Enable openldap as a dataset facilitator or keys, determining domains to sign for, and any other dataset that opendkim supports.
- lmdb
- Add support for using dev-db/lmdb
- lua
- Enables control over signature verification, filtering and policy to be controlled by user defined lua scripts.
- memcached
- Add support for using dev-libs/libmemcached
- opendbx
- Use opendbx backend to facilitate dataset driven OpenDKIM configuration options like stats, bodylengthdb, etc. against a wide variety of database types
- poll
- Use poll() instead of select() for the provided asynchronous resolver library.
- querycache
- Add support for query caching (requires 'berkdb' flag)
- sasl
- Used to authenticate to a LDAP server in various ways if required.
- selinux
- !!internal use only!! Security Enhanced Linux support, this must be set by the selinux profile or breakage will occur
- ssl
- Add support for SSL/TLS connections (Secure Socket Layer / Transport Layer Security)
- static-libs
- Build static versions of dynamic libraries as well
- stats
- Add support for statistics (requires 'opendbx' flag)
- test
- Enable dependencies and/or preparations necessary to run tests (usually controlled by FEATURES=test but can be toggled independently)
- unbound
- Use the unbound dnssec library to perform DKIM DNS queries.
lua_single_target
- lua5-1
- Build for Lua 5.1 only
Dependencies
dev-db / lmdb : An ultra-fast, ultra-compact key-value embedded data store
dev-db / opendbx : OpenDBX - A database abstraction layer
dev-lang / lua : A powerful light-weight programming language designed for extending applications
dev-libs / cyrus-sasl : The Cyrus SASL (Simple Authentication and Security Layer)
dev-libs / libbsd : Library to provide useful functions commonly found on BSD systems
dev-libs / libmemcached : a C client library to the memcached server
dev-libs / openssl : Robust, full-featured Open Source Toolkit for the Transport Layer Security (TLS)
mail-filter / libmilter : The Sendmail Filter API (Milter)
net-dns / dnssec-root : The DNSSEC root key(s)
net-dns / unbound : A validating, recursive and caching DNS resolver
net-nds / openldap : LDAP suite of application and development tools
Runtime Dependencies
acct-user / opendkim : User for OpenDKIM
dev-db / lmdb : An ultra-fast, ultra-compact key-value embedded data store
dev-db / opendbx : OpenDBX - A database abstraction layer
dev-lang / lua : A powerful light-weight programming language designed for extending applications
dev-libs / cyrus-sasl : The Cyrus SASL (Simple Authentication and Security Layer)
dev-libs / libbsd : Library to provide useful functions commonly found on BSD systems
dev-libs / libmemcached : a C client library to the memcached server
dev-libs / openssl : Robust, full-featured Open Source Toolkit for the Transport Layer Security (TLS)
mail-filter / libmilter : The Sendmail Filter API (Milter)
net-dns / dnssec-root : The DNSSEC root key(s)
net-dns / unbound : A validating, recursive and caching DNS resolver
net-nds / openldap : LDAP suite of application and development tools
sec-policy / selinux-dkim : SELinux policy for dkim
sys-apps / grep : GNU regular expression matcher
sys-libs / db : Oracle Berkeley DB
sys-process / psmisc : A set of tools that use the proc filesystem
virtual / tmpfiles : Virtual to select between different tmpfiles.d handlers
Bugs
Change logs
- Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: EAPI=8 bump and another implicit decl patch
Closes: https://bugs.gentoo.org/936591 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: incompatible-pointer-types patch
Closes: https://bugs.gentoo.org/919366 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: fix build with lld
Add https://github.com/trusteddomainproject/OpenDKIM/pull/192 to the ebuild. Thanks to Chris Pritchard for both the report and the solution. Closes: https://bugs.gentoo.org/918512 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: drop 2.10.3-r29
Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Sam James · gentoo
mail-filter/opendkim: Stabilize 2.10.3-r30 x86, #908129
Signed-off-by: Sam James <sam@gentoo.org> - Sam James · gentoo
mail-filter/opendkim: Stabilize 2.10.3-r30 amd64, #908129
Signed-off-by: Sam James <sam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: fix two musl/standards issues.
New patches to fix a missing include and to correct a few function signatures that violated the C standards. Closes: https://bugs.gentoo.org/870412 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: drop 2.10.3-r28
Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Michael Orlitzky · gentoo
mail-filter/opendkim: new revision to drop the net-libs/ldns dependency.
This just... doesn't do anything. And the logic was backwards this whole time, so I'm extra sure that it doesn't do anything. Thanks to Gil Kloepfer for noticing it! Closes: https://bugs.gentoo.org/895944 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Agostino Sarubbo · gentoo
mail-filter/opendkim: x86 stable wrt bug #835821
Package-Manager: Portage-3.0.30, Repoman-3.0.3 RepoMan-Options: --include-arches="x86" Signed-off-by: Agostino Sarubbo <ago@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Jakov Smolić · gentoo
mail-filter/opendkim: Stabilize 2.10.3-r29 amd64, #835821
Signed-off-by: Jakov Smolić <jsmolic@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Sam James · gentoo
mail-filter/opendkim: add subslot dep on OpenLDAP
New OpenLDAP breaks ABI (changes SONAME) Signed-off-by: Sam James <sam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: update sendmail/libmilter dependency.
As reported in bug 833778, it would be nice if we could bind to the libmilter subslot with an := dependency. In the existing ebuild, that wasn't possible because we accepted either libmilter || sendmail, and using := within an any-of clause is disallowed. Fortunately, the "|| sendmail" portion of that is a relic, for versions of sendmail that don't themselves use libmilter. All versions of mail-mta/sendmail in the tree today do, so we can drop the sendmail portion of that any-of dependency entirely, and then afterwards add the := to libmilter. Closes: https://bugs.gentoo.org/833778 Reported-by: Daniel M. Weeks <dan@danweeks.net> Package-Manager: Portage-3.0.30, Repoman-3.0.3 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Mikle Kolyada · gentoo
mail-filter/opendkim: remove libressl support
Package-Manager: Portage-3.0.18, Repoman-3.0.2 Signed-off-by: Mikle Kolyada <zlogene@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Sam James · gentoo
mail-filter/opendkim: eutils--
Signed-off-by: Sam James <sam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Conrad Kostecki · gentoo
mail-filter/opendkim: drop old version
Drop all versions, which depend on dev-lang/lua:0, since we have a stable version for slotted lua. Package-Manager: Portage-3.0.16, Repoman-3.0.2 Signed-off-by: Conrad Kostecki <conikost@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Theo Anderson · gentoo
mail-filter/opendkim: migrate to tmpfiles.eclass
Package-Manager: Portage-3.0.16, Repoman-3.0.2 Signed-off-by: Theo Anderson <telans@posteo.de> Signed-off-by: David Seifert <soap@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Sam James · gentoo
mail-filter/opendkim: conditional lua-single_pkg_setup
Closes: https://bugs.gentoo.org/766677 Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James <sam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Sam James · gentoo
mail-filter/opendkim: Stabilize 2.10.3-r26 x86, #766528
Signed-off-by: Sam James <sam@gentoo.org> - Sam James · gentoo
mail-filter/opendkim: Stabilize 2.10.3-r26 amd64, #766528
Signed-off-by: Sam James <sam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: new revision to disable parallel tests.
The test suite for OpenDKIM currently relies on two "setup" and "cleanup" tests being run at the beginning/end of the test suite, respectively. But when the test suite is run in parallel, that's not always guaranteed. This new revision runs the test suite sequentially to avoid the problem, which has been reported upstream. The credit for this goes to klondike, who was able to determine the root cause of the heisenbug. In the process, a minor security vulnerability (insecure /tmp path) was also reported upstream and fixed in the ebuild. Closes: https://bugs.gentoo.org/745969 Package-Manager: Portage-3.0.9, Repoman-3.0.2 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: add back lua-5.2 support.
Package-Manager: Portage-3.0.9, Repoman-3.0.2 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Marek Szuba · gentoo
mail-filter/opendkim-2.10.3-r25: temporarily limit LUA_COMPAT to lua5.1
Lua detection as it stands now will always prefer lua5.1, if installed, over whatever version is pointed at by the eclass-provided pkgconfig wrapper. Until the relevant patch has been merged into the tree, thus making sure that if the user requests building against lua5-2 OpenDKIM really *is* built against that version, stick with 5.1 only. Closes: https://bugs.gentoo.org/752738 Signed-off-by: Marek Szuba <marecki@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: typo fix.
Package-Manager: Portage-3.0.9, Repoman-3.0.2 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Marek Szuba · gentoo
*/*: limit pkgs not migrated to lua eclasses to dev-lang/lua:0
Only ebuilds which previously were happy with any slot (those which explicitly specify one of the 5.x slots are allowed to keep doing so until they have been migrated to the eclasses) and which do not require a version of Lua higher than 5.1 (to prevent CI from complaining about non-existent dependencies; all of these should have been masked or USE-masked by now anyway). Signed-off-by: Marek Szuba <marecki@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: new masked revision with slotted lua.
This is relatively untested, of course, but at least I've picked out the compatible versions of Lua and have put the eclass variables in approximately the right places. Bug: https://bugs.gentoo.org/752738 Package-Manager: Portage-3.0.9, Repoman-3.0.2 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Michael Orlitzky · gentoo
mail-filter/opendkim: new revision to fix lib/lib64 mixup.
Includes a patch that I've sent upstream to prevent ./configure from "detecting" /usr/lib as the correct library path when -lfoo works regardless of whether or not you're looking in /usr/lib. Closes: https://bugs.gentoo.org/751286 Package-Manager: Portage-3.0.9, Repoman-3.0.2 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Sam James · gentoo
mail-filter/opendkim: Keyword 2.10.3-r18 arm64, #745789
Signed-off-by: Sam James <sam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Wynn Wolf Arbor · gentoo
mail-filter/opendkim: Fix build on musl
The build of libvbr, which is included in opendkim and enabled by default in the ebuild, fails on musl because the '__P' macro is not defined. glibc defines it along with '__PMT' in cdefs.h, but notes that they are kept "only because some other projects expect the macros to be defined". Since cdefs.h is not included in musl, patch vbr.h to include this particular macro definition. See also: https://github.com/trusteddomainproject/OpenDKIM/pull/74 Closes: https://github.com/gentoo/gentoo/pull/16140 Signed-off-by: Wynn Wolf Arbor <wolf@oriole.systems> Package-Manager: Portage-2.3.99, Repoman-2.3.22 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: new revision to fix liblua detection.
The ./configure script for OpenDKIM is all kinds of crazy when it comes to detecting liblua. First, the PKG_CHECK_MODULES call was looking for the wrong module, and I had to add the correct name to the list. But then, once pkg-config could find liblua, it was doing the wrong thing -- none of the "I have Lua support" commands were being executed. So in a way it was fortunate that the old PKG_CHECK_MODULES was failing. In any case, I've patched configure.ac to fix everything, and will be sending a PR upstream. This new revision adds that patch. Closes: https://bugs.gentoo.org/704556 Package-Manager: Portage-2.3.84, Repoman-2.3.20 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Ralph Seichter · gentoo
mail-filter/opendkim: Removed obsolete build
Ebuild revision 17 has been stabilized. This commit removes both revision 16 and the now obsolete 'query_cache' USE flag, which has been replaced with 'querycache'. Package-Manager: Portage-2.3.79, Repoman-2.3.16 Signed-off-by: Ralph Seichter <gentoo@seichter.de> Closes: https://github.com/gentoo/gentoo/pull/14030 Signed-off-by: Joonas Niilola <juippis@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Agostino Sarubbo · gentoo
mail-filter/opendkim: x86 stable wrt bug #702754
Package-Manager: Portage-2.3.79, Repoman-2.3.16 RepoMan-Options: --include-arches="x86" Signed-off-by: Agostino Sarubbo <ago@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Agostino Sarubbo · gentoo
mail-filter/opendkim: amd64 stable wrt bug #702754
Package-Manager: Portage-2.3.79, Repoman-2.3.16 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
*/*: [QA] Fix trivial cases of MissingTestRestrict
The result was achieved via the following pipeline: pkgcheck scan -c RestrictTestCheck -R FormatReporter \ --format '{category}/{package}/{package}-{version}.ebuild' | xargs -n32 grep -L RESTRICT | xargs -n32 sed -i -e '/^IUSE=.*test/aRESTRICT="!test? ( test )"' The resulting metadata was compared before and after the change. Few Go ebuilds had to be fixed manually due to implicit RESTRICT=strip added by the eclass. Two ebuilds have to be fixed because of multiline IUSE. Suggested-by: Robin H. Johnson <robbat2@gentoo.org> Closes: https://github.com/gentoo/gentoo/pull/13942 Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Ralph Seichter · gentoo
mail-filter/opendkim: Migrate user+group to GLEP81
Use acct-group/opendkim and acct-user/opendkim as requested by QA, replace mirror://sourceforge in SRC_URI with proper URL, move test dependencies from DEPEND to BDEPEND, replace USE flag "query_cache" with "querycache". Signed-off-by: Ralph Seichter <gentoo@seichter.de> Bug: https://bugs.gentoo.org/694638 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Ralph Seichter · gentoo
mail-filter/opendkim: Remove obsolete ebuilds
Removed obsolete ebuild versions and their supporting files. Signed-off-by: Ralph Seichter <gentoo@seichter.de> Package-Manager: Portage-2.3.66, Repoman-2.3.11 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Mikle Kolyada · gentoo
mail-filter/opendkim: amd64 stable wrt bug #688966
Signed-off-by: Mikle Kolyada <zlogene@gentoo.org> Package-Manager: Portage-2.3.66, Repoman-2.3.11 RepoMan-Options: --include-arches="amd64" - Repository mirror & CI · gentoo
Merge updates from master - Thomas Deutschmann · gentoo
mail-filter/opendkim: x86 stable (bug #688966)
Package-Manager: Portage-2.3.68, Repoman-2.3.16 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Ralph Seichter · gentoo
mail-filter/opendkim: Added query_cache and stats USE flags
Added new USE flags "query_cache" to enable query caching and "stats" to enable statistics. In previous ebuild versions, these features were always enabled. Closes: https://bugs.gentoo.org/687972 Signed-off-by: Ralph Seichter <gentoo@seichter.de> Package-Manager: Portage-2.3.66, Repoman-2.3.11 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: drop --enable-popauth flag.
The "--enable-popauth" flag was enabled automatically when USE=berkdb was set, which already doesn't make any sense. This was noticed while investigating bug 684958. However, "popauth" refers to POP-before-SMTP, which is an outdated and altogether ridiculous way of authenticating. No one competent has used it since the 1990s. Instead of converting it to an independent local USE flag, this new -r15 just drops it. Bug: https://bugs.gentoo.org/687972 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.66, Repoman-2.3.11 - Michael Orlitzky · gentoo
mail-filter/opendkim: fix building against BerkeleyDB.
Our ebuild was doing something strange with USE=berkdb set, and as a result, the ./configure script for OpenDKIM was not being passed the correct location for the BerkeleyDB headers. This seems like a simple fix; to set --with-db-incdir="$(db_includedir)" in the ebuild. I've made that change in a new revision, and tested that the OpenDKIM build system can pick up the right version of BerkeleyDB: checking for BerkeleyDB db.h... /usr/include/db6.0 Seems to work. Closes: https://bugs.gentoo.org/684958 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.66, Repoman-2.3.11 - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: remove old "unused" -r9 and -r10 ebuilds.
Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Michael Orlitzky · gentoo
mail-filter/opendkim: new revision with missing test dependency.
The OpenDKIM test suite won't be run if the user doesn't have Lua installed. The (R)DEPEND variables have been refactored to add that missing build-time dependency. In addition, a hacky sed line that relocated the unix socket in the test suite has been replaced, by the --with-test-socket ./configure flag. Bug: https://bugs.gentoo.org/682290 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: new revision to set sysconfdir consistently.
In the previous revision -r11, we tried to unite the configuration for OpenRC and systemd. But, I made a mistake: the upstream location for e.g. the main configuration file is @sysconfdir@/opendkim.conf, but in Gentoo we install it to @sysconfdir@/opendkim/opendkim.conf. That path is overridden in the OpenRC service script, but not in the systemd service, which now crashes upon starting. The error, however, is in the OpenRC script (and in our ebuild). The correct way to relocate the configuration files is to pass a different value to --sysconfdir in src_configure(). This new revision does that, and updates the OpenRC service script to use the built-in location, rather than a custom Gentoo-defined one. That's how it should have been all along. This also fixes an unreported bug, wherein all of the installed documentation like opendkim.conf(5) pointed to the wrong path. Thanks to Ralph Seichter who built a systemd virtual machine in order to test everything. Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Repository mirror & CI · gentoo
Merge updates from master - Ralph Seichter · gentoo
mail-filter/opendkim: OPENSSL_thread_stop reference fix
dev-libs/libressl lacks support for OPENSSL_thread_stop which was used by the patch adding support for dev-libs/openssl-1.1.1 In order to address this problem we modify the patch to default to the old deinitialization code when dev-libs/libressl is used. Closes: https://bugs.gentoo.org/669612 Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.51, Repoman-2.3.11 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Ralph Seichter · gentoo
mail-filter/opendkim: Improved OpenRC and systemd support
Michael Orlitzky and I have been working on improved OpenRC support for OpenDKIM. Our pull request has not yet been accepted upstream (not even acknowledged, in fact). The multi-file patch adds our changes to the existing Gentoo ebuild. Changes to the upstream build files include: * configure.ac: Added workaround to support @runstatedir@. On modern systems /run replaces /var/run, so using @runstatedir@ instead of @localstatedir@/run is preferable. Autoconf 2.70 will support @runstatedir@ , but it has not been released yet, so a workaround is required for version 2.61. * contrib/systemd: Use @runstatedir@ in opendkim.service.in, enable full @VARIABLE@ substitution, fix inconsistencies in the systemd service file, add tmpfiles.d configuration file (https://bugs.gentoo.org/606978). * opendkim/opendkim.conf.*.in: Use @runstatedir@ in PidFile paths, enable full @VARIABLE@ substitution. Bug: https://bugs.gentoo.org/606978 Signed-off-by: Ralph Seichter <gentoo@seichter.de> Package-Manager: Portage-2.3.62, Repoman-2.3.11 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Ralph Seichter · gentoo
mail-filter/opendkim: Removed 'gnutls' support, added enewgroup
Removed support for the 'gnutls' use flag. Added missing enewgroup statement. These modifications address the two bugs listed below. Closes: https://bugs.gentoo.org/682906 Closes: https://bugs.gentoo.org/683338 Signed-off-by: Ralph Seichter <gentoo@seichter.de> Package-Manager: Portage-2.3.62, Repoman-2.3.11 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: remove old vulnerable revision.
Bug: https://bugs.gentoo.org/629914 Bug: https://bugs.gentoo.org/629888 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Repository mirror & CI · gentoo
Merge updates from master - Thomas Deutschmann · gentoo
mail-filter/opendkim: x86 stable (bug #629914)
Package-Manager: Portage-2.3.62, Repoman-2.3.12 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: add "UMask 0117" to the config by default.
Ralph and I have been discussing the best way to handle a local UNIX socket. One thing that we both agree on is that, regardless of the other details, the daemon should be running with a UMask of 0117 to create the socket group-writable but otherwise private. And since the opendkim(8) man page says that the UMask is used only for the socket, there's no reason we shouldn't add it to the default configuration. In other words, it doesn't hurt anything if you're *not* using a local socket. This is one fewer thing that we need to document. Bug: https://bugs.gentoo.org/575666 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Repository mirror & CI · gentoo
Merge updates from master - Repository mirror & CI · gentoo
Merge updates from master - Agostino Sarubbo · gentoo
mail-filter/opendkim: amd64 stable wrt bug #629914
Signed-off-by: Agostino Sarubbo <ago@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 RepoMan-Options: --include-arches="amd64" - Ralph Seichter · gentoo
mail-filter/opendkim: Added pre-start configuration checks
Added pre-start configuration checks for OpenRC and systemd. Signed-off-by: Ralph Seichter <gentoo@seichter.de> Closes: https://bugs.gentoo.org/622604 Package-Manager: Portage-2.3.62, Repoman-2.3.11 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michael Orlitzky · gentoo
mail-filter/opendkim: remove some no-op sed lines.
Looking through the upstream example config files, I don't see any of the expressions that the "sed" script in src_prepare is supposed to replace. Huh. This commit removes those "sed" commands. Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Michael Orlitzky · gentoo
mail-filter/opendkim: use /var/lib/opendkim in pkg_config.
The keys that are generated by opendkim-genkey are data, in a sense, and not configuration files. As a result, I think it's more appropriate to store them in /var/lib/opendkim than in /etc/opendkim where they were previously stored. This commit moves the keys, and also tightens the permissions on them a bit so that the "opendkim" user can only read them. Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Michael Orlitzky · gentoo
mail-filter/opendkim: new revision with a consistent config file.
The previous revisions installed a variable config file, and only did so conditionally, based on the state of the live filesystem. The new revision always installs the same config file. This should be simpler and more predictable. In addition, the temporary directory "${T}" is now used as "scratch space" while mangling that config file. Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Michael Orlitzky · gentoo
mail-filter/opendkim: add a TODO question about a sed line.
There's a sed line in src_prepare that messes with some *.lua test files. I've changed the action of that script to use "${T}" rather than "/tmp" for security reasons... but I'm unable to figure out when those test files are actuallty used. So, I've left a TODO comment to figure it out in the future (or maybe just delete that sed line entirely). Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Michael Orlitzky · gentoo
mail-filter/opendkim: add an elog about sharing a local socket.
Sharing a local OpenDKIM socket with an MTA is far too tricky. This commit adds an elog with some vague hints, but we really need a decent wiki page with some step-by-step instructions. This is progress towards bug 575666, but I won't consider that resolved until we have a wiki page. Bug: https://bugs.gentoo.org/575666 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Michael Orlitzky · gentoo
mail-filter/opendkim: add a trailing slash to the HOMEPAGE.
Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Michael Orlitzky · gentoo
mail-filter/opendkim: new revision to overhaul service scripts.
The OpenRC service script has been largely rewritten in this revision, to solve a number of problems: * The PID file is now stored securely (bug 629914). * Different PID files are used for multiple instances (bug 536162). * The detection of boolean options in the config file is more robust, allowing "1", "0", "yes", "false", et cetera. * The socket is now located in a conf.d file, rather than parsed from the config file. The service script ensures that the directory containing the socket has the correct permissions, and the conf.d file comes with a big warning to that effect. Note that the (commented- out) example directory IS NOT shared with the PID file. * An error is thrown if we can't remove a stale socket. * Modern OpenRC service script standards have been adopted. Some minor changes have been made to the systemd service for consistency, but none of them have been tested. More work needs to be done here anyway; for example, we most likely want a tmpfiles.d entry for the local socket directory if the user configures one. This should be documented in opendkim.service.conf, and tested by someone who uses systemd. Closes: https://bugs.gentoo.org/536162 Bug: https://bugs.gentoo.org/629914 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Michael Orlitzky · gentoo
mail-filter/opendkim: combine two neighboring sed expressions.
Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Michael Orlitzky · gentoo
mail-filter/opendkim: remove two commented econf lines.
Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Michael Orlitzky · gentoo
mail-filter/opendkim: simplify and shorten the DESCRIPTION.
Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Michael Orlitzky · gentoo
mail-filter/opendkim: new revision with a dedicated "opendkim" user.
Prior to this revision, the OpenDKIM daemon would run as the "milter" user, which is a username shared by a few other related packages. However, that user has the ability to read your private DKIM signing keys, and no other services should have access to those. Thus, sharing the user account creates a security risk. In the new revision, a dedicated "opendkim" user is created for the OpenDKIM daemon. The configuration, OpenRC service script, and systemd service files have all been updated with the new user name. In addition, the permissions on /var/lib/opendkim have been tightened so members of the "opendkim" group can only read it by default. The daemon does not need to modify your keys, in particular, and should not be able to. One downside to this is that the "Statistics" configuration directive that was enabled by default with USE=berkdb will no longer work out-of-the-box. It will still work, but the administrator will need to grant write access to the file that he designates for the statistics data. But since it won't work without some extra fiddling, it has been removed from the configuration file that we install. An ewarn notifies users who are upgrading of the account name change. Closes: https://bugs.gentoo.org/629888 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Michael Orlitzky · gentoo
mail-filter/opendkim: remove dangerous elog suggesting "umask 000".
Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Michael Orlitzky · gentoo
mail-filter/opendkim: new revision to fix a dodir->keepdir usage.
The data directory /var/lib/opendkim is installed empty by default, and therefore needs to be created with keepdir (and not dodir). This changes the installed image, and thus is cause for a new revision. Closes: https://bugs.gentoo.org/666334 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Michael Orlitzky · gentoo
mail-filter/opendkim: add GPL-2 to LICENSE for OpenRC service script.
Our init script is a critical out-of-tree piece of code that gets installed, and it's licensed GPL-2. So, we should include that in the LICENSE variable for the package. Closes: https://bugs.gentoo.org/425960 Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Michael Orlitzky · gentoo
mail-filter/opendkim: remove commented code at top of -r4 ebuild.
There were a few commented variables at the top of the -r4 ebuild that were used for beta releases. However, this package hasn't seen a release in three years -- much less a beta release -- so I think they're just wasting space at this point. Signed-off-by: Michael Orlitzky <mjo@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11 - Repository mirror & CI · gentoo
Merge updates from master - Lars Wendler · gentoo
mail-filter/opendkim: Removed old.
Package-Manager: Portage-2.3.54, Repoman-2.3.12 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Craig Andrews · gentoo
mail-filter/opendkim: Fix building with OpenSSL 1.1.1
Closes: https://bugs.gentoo.org/669512 Signed-off-by: Craig Andrews <candrews@gentoo.org> Package-Manager: Portage-2.3.51, Repoman-2.3.11 - Repository mirror & CI · gentoo
Merge updates from master - Thomas Deutschmann · gentoo
mail-filter/opendkim: add sub slot operator on net-dns/unbound atom
Package-Manager: Portage-2.3.49, Repoman-2.3.10 - Agostino Sarubbo · gentoo
mail-filter/opendkim: x86 stable wrt bug #612360
Package-Manager: Portage-2.3.3, Repoman-2.3.1 RepoMan-Options: --include-arches="x86" Signed-off-by: Agostino Sarubbo <ago@gentoo.org> - Agostino Sarubbo · gentoo
mail-filter/opendkim: amd64 stable wrt bug #612360
Package-Manager: Portage-2.3.3, Repoman-2.3.1 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org> - Alon Bar-Lev · gentoo
mail-filter/opendkim: fix myconf expansion
Package-Manager: Portage-2.3.3, Repoman-2.3.1 - Alon Bar-Lev · gentoo
mail-filter/opendkim: support gnutls-3.4 + eapi bump
Bug: 583752 Package-Manager: Portage-2.3.3, Repoman-2.3.1 - Robin H. Johnson · gentoo
Drop $Id$ per council decision in bug #611234.
Signed-off-by: Robin H. Johnson <robbat2@gentoo.org> - Craig Andrews · gentoo
mail-filter/opendkim-2.10.3-r2: fix systemd unit name, #589794
Closes: https://github.com/gentoo/gentoo/pull/1977 - Anthony G. Basile · gentoo
mail-filter/opendkim: add libressl support
Package-Manager: portage-2.2.28 - Yuri Konotopov · gentoo
mail-filter/opendkim: added runtime configuration to systemd unit.
Fixes: https://bugs.gentoo.org/show_bug.cgi?id=542936 (cherry picked from commit add2021a15b569224b4d50b1d072307d00de0eb9) Signed-off-by: Robin H. Johnson <robbat2@gentoo.org> - Eray Aslan · gentoo
mail-filter/opendkim: remove old
Package-Manager: portage-2.2.27 - Agostino Sarubbo · gentoo
mail-filter/opendkim: x86 stable wrt bug #569802
Package-Manager: portage-2.2.26 RepoMan-Options: --include-arches="x86" Signed-off-by: Agostino Sarubbo <ago@gentoo.org> - Agostino Sarubbo · gentoo
mail-filter/opendkim: amd64 stable wrt bug #569802
Package-Manager: portage-2.2.26 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org> - Robin H. Johnson · gentoo
proj/gentoo: Initial commit
This commit represents a new era for Gentoo: Storing the gentoo-x86 tree in Git, as converted from CVS. This commit is the start of the NEW history. Any historical data is intended to be grafted onto this point. Creation process: 1. Take final CVS checkout snapshot 2. Remove ALL ChangeLog* files 3. Transform all Manifests to thin 4. Remove empty Manifests 5. Convert all stale $Header$/$Id$ CVS keywords to non-expanded Git $Id$ 5.1. Do not touch files with -kb/-ko keyword flags. Signed-off-by: Robin H. Johnson <robbat2@gentoo.org> X-Thanks: Alec Warner <antarus@gentoo.org> - did the GSoC 2006 migration tests X-Thanks: Robin H. Johnson <robbat2@gentoo.org> - infra guy, herding this project X-Thanks: Nguyen Thai Ngoc Duy <pclouds@gentoo.org> - Former Gentoo developer, wrote Git features for the migration X-Thanks: Brian Harring <ferringb@gentoo.org> - wrote much python to improve cvs2svn X-Thanks: Rich Freeman <rich0@gentoo.org> - validation scripts X-Thanks: Patrick Lauer <patrick@gentoo.org> - Gentoo dev, running new 2014 work in migration X-Thanks: Michał Górny <mgorny@gentoo.org> - scripts, QA, nagging X-Thanks: All of other Gentoo developers - many ideas and lots of paint on the bikeshed