From: Harvie Date: Wed, 4 Aug 2010 06:28:45 +0000 (+0200) Subject: dnssec-tools: cleaned up verison, still segfaults... dunno why. reported upstream. X-Git-Url: https://git.harvie.cz/?a=commitdiff_plain;h=9bf471d2082eb5196e894b78da3cf6d1be8c5963;p=mirrors%2FArchLinux-Packages.git dnssec-tools: cleaned up verison, still segfaults... dunno why. reported upstream. --- diff --git a/dnssec-tools/PKGBUILD b/dnssec-tools/PKGBUILD index eac4e7a..28fd6e3 100644 --- a/dnssec-tools/PKGBUILD +++ b/dnssec-tools/PKGBUILD @@ -10,11 +10,12 @@ url="http://www.dnssec-tools.org/" license="Custom" arch=('i686' 'x86_64') depends=(dnssec-root-zone-trust-anchors perl perl-timedate perl-net-dns perl-net-dns-sec) -backup=(etc/dnssec-tools/dnsval.conf.head etc/dnssec-tools/dnsval.conf.tail) +backup=(etc/dnssec-tools/resolv.conf etc/dnssec-tools/root.hints) install="${pkgname}.install" -source=("http://www.dnssec-tools.org/download/${pkgname}-${pkgver}.tar.gz" dnsval.conf) +source=("http://www.dnssec-tools.org/download/${pkgname}-${pkgver}.tar.gz" dnsval.conf resolv.conf) md5sums=('f3dfe18ae50cf65594936e1684d469d0' - '05656944ff9caa959591f547cfe25eba') + 'aaee6f50ab4abbc183f64b5de013f756' + '03ff269fa39d2a7eb6cbe108bcea473a') build() { cd ${srcdir}/${pkgname}-${pkgver}/ || return 1 @@ -44,8 +45,7 @@ build() { msg2 'configuration files' cp -r validator/etc/* "${pkgdir}/etc/${pkgname}/" rm -rf "${pkgdir}/etc/${pkgname}/${pkgname}.conf" #will be generated in post_install - cp -f "${srcdir}/dnsval.conf" "${pkgdir}/etc/dnssec-tools/" - touch "${pkgdir}"/etc/dnssec-tools/dnsval.conf.{head,tail} + cp -f "${srcdir}"/{dnsval,resolv}.conf "${pkgdir}/etc/dnssec-tools/" msg2 'license informations' mkdir -p "${pkgdir}/usr/share/licenses/${pkgname}/" cp COPYING "${pkgdir}/usr/share/licenses/${pkgname}/" diff --git a/dnssec-tools/dnssec-tools.install b/dnssec-tools/dnssec-tools.install index 7cf3b94..34658ce 100644 --- a/dnssec-tools/dnssec-tools.install +++ b/dnssec-tools/dnssec-tools.install @@ -2,6 +2,7 @@ post_install() { echo 'Generating default config file if not exists...' while echo; do true; done 2>/dev/null | dtinitconf >/dev/null + touch /etc/dnssec-tools/dnsval.conf.{head,tail} return 0 } diff --git a/dnssec-tools/dnsval.conf b/dnssec-tools/dnsval.conf index 2b4e984..d6e77e0 100644 --- a/dnssec-tools/dnsval.conf +++ b/dnssec-tools/dnsval.conf @@ -32,13 +32,15 @@ global-options # Default policies ################################## -: trust-anchor - dnssec-tools.org DS 54556 5 2 6B026928292D452A5CC37B3EF327F27F50A29936CB31E664EB066D71A476E282 -; - -: zone-security-expectation - dnssec-tools.org validate -; +#: trust-anchor +# . "974 0 0 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" +# dnssec-tools.org DS 54556 5 2 6B026928292D452A5CC37B3EF327F27F50A29936CB31E664EB066D71A476E282 +#; + +#: zone-security-expectation +# . validate +# dnssec-tools.org validate +#; : provably-insecure-status . trusted diff --git a/dnssec-tools/resolv.conf b/dnssec-tools/resolv.conf new file mode 100644 index 0000000..1deafb5 --- /dev/null +++ b/dnssec-tools/resolv.conf @@ -0,0 +1,15 @@ +#This is list of public DNSSEC validating nameservers +#it should be replaced with symlink to /etc/resolv.conf +#when your nameserver will support DNSSEC. + +#CZ NIC +nameserver 217.31.204.130 +nameserver 2001:1488:800:400::130 +nameserver 217.31.204.131 +nameserver 2001:1488:800:400::131 + +#OARC +nameserver 149.20.64.20 +nameserver 2001:4f8:3:2bc:1::64:20 +nameserver 149.20.64.21 +nameserver 2001:4f8:3:2bc:1::64:21