gentoo resync : 16.04.2018

10 files changed, 117 insertions, 196 deletions

diff --git a/net-dns/Manifest.gz b/net-dns/Manifest.gz
index 3f2589c36257..6851889fafdb 100644
--- a/net-dns/Manifest.gz
+++ b/net-dns/Manifest.gz
diff --git a/net-dns/bind-tools/Manifest b/net-dns/bind-tools/Manifest
index 8d78fe5f5be5..21b57aa8b0e0 100644
--- a/net-dns/bind-tools/Manifest
+++ b/net-dns/bind-tools/Manifest
@@ -1,4 +1,3 @@
-AUX bind-tools-9.11.0_p5-dyndb-dlopen.patch 2932 BLAKE2B ec9b7d84b5f0ccb29ed8bdf6701adddf10c3d57298955c86f565b4d98f8031074f07e589edb9268c82726ebc7c19330aae8ea1ef7fd6a0272def963a7557cc68 SHA512 4aef9a107e15953ff81b8354e5e68756650e951ce4e12181d8ac200bd006f6d10c75f0af496a0755d883b921af2aa7984fbe15fdbd5ef8ec47ab6e185027f646
 AUX bind-tools-9.5.0_p1-lwconfig.patch 1856 BLAKE2B 3f65aaf584ced53a098cd9536eb4e8fd243b50ef0845be3008066fa0b45915f4e2db585d3f64896782e7bf94362235fc31c1f869169d92996cdaf081935a4047 SHA512 f46290cddfb39b077269cd2198d04eef6a7e680b5f0f8dcf471e551a61b4b7a56871a56cdd20afdeaa86edb790513d8c522032fb725a266c18e0e59eee803dcc
 DIST bind-9.11.2_p1.tar.gz 9783329 BLAKE2B 5a3bbd87112064231bd5e6b09ebb4014f9d5cf65cb601c03555ff540a22d87aec3990cd8e37ce5ff09e9a149bdf122d20ecb01f87731e6c79d80379a6926014f SHA512 168f27f580e3be2f7ada27afa2f72e715e750eec76831cf01bd32fabc1fa65dc29dab0eb7ed1682b076d3be99269897ddbc2c10551631a3911d9e5ae1aa40597
 EBUILD bind-tools-9.11.2_p1.ebuild 3152 BLAKE2B 814d08d064071658a17a8e6e3beb069cf8567a11e1ec74bb78f823a3d03feb0429b41feddd97b04d24deb76f92c963d6633f1f84a08a9392eedd5e7b9d745db5 SHA512 40d646ff0b6e45b18de53360b27d3d3d1211606d2f28ef4708bc69a055565962cedb2ac75e24ac9e27b94ce36cb53273e85e4555827ff7a0b7b106aa21ad36f8
diff --git a/net-dns/bind-tools/files/bind-tools-9.11.0_p5-dyndb-dlopen.patch b/net-dns/bind-tools/files/bind-tools-9.11.0_p5-dyndb-dlopen.patch
deleted file mode 100644
index 5fc8f3c18897..000000000000
--- a/net-dns/bind-tools/files/bind-tools-9.11.0_p5-dyndb-dlopen.patch
+++ /dev/null
@@ -1,97 +0,0 @@
-From ae903759c205f8a5039458d780c0e0c4442b7291 Mon Sep 17 00:00:00 2001
-From: Mark Andrews <marka@isc.org>
-Date: Tue, 30 May 2017 11:31:34 +1000
-Subject: [PATCH] 4530.   [bug]           "dyndb" is dependent on dlopen
- existing / being                         enabled. [RT #45291]
-
-From aa3a8979bc7eb1596d044eff572b3c35310584fa Mon Sep 17 00:00:00 2001
-From: Mark Andrews <marka@isc.org>
-Date: Tue, 30 May 2017 11:34:37 +1000
-Subject: [PATCH] 4530.   [bug]           "dyndb" is dependent on dlopen
- existing / being                         enabled. [RT #45291]
-
-diff --git a/lib/dns/dyndb.c b/lib/dns/dyndb.c
-index a477508..dec68a7 100644
---- a/lib/dns/dyndb.c
-+++ b/lib/dns/dyndb.c
-@@ -80,7 +80,7 @@ impfind(const char *name) {
- 	return (NULL);
- }
- 
--#if HAVE_DLFCN_H
-+#if HAVE_DLFCN_H && HAVE_DLOPEN
- static isc_result_t
- load_symbol(void *handle, const char *filename,
- 	    const char *symbol_name, void **symbolp)
---- a/bin/named/server.c
-+++ b/bin/named/server.c
-@@ -1496,6 +1496,7 @@ configure_peer(const cfg_obj_t *cpeer, isc_mem_t *mctx, dns_peer_t **peerp) {
- 	return (result);
- }
- 
-+#ifdef HAVE_DLOPEN
- static isc_result_t
- configure_dyndb(const cfg_obj_t *dyndb, isc_mem_t *mctx,
- 		const dns_dyndbctx_t *dctx)
-@@ -1521,6 +1522,7 @@ configure_dyndb(const cfg_obj_t *dyndb, isc_mem_t *mctx,
- 			      name, isc_result_totext(result));
- 	return (result);
- }
-+#endif
- 
- 
- static isc_result_t
-@@ -4669,6 +4671,7 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewlist,
- 	else
- 		(void)cfg_map_get(config, "dyndb", &dyndb_list);
- 
-+#ifdef HAVE_DLOPEN
- 	for (element = cfg_list_first(dyndb_list);
- 	     element != NULL;
- 	     element = cfg_list_next(element))
-@@ -4686,6 +4689,7 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewlist,
- 
- 		CHECK(configure_dyndb(dyndb, mctx, dctx));
- 	}
-+#endif
- 
- 	/*
- 	 * Setup automatic empty zones.  If recursion is off then
-diff --git a/lib/bind9/check.c b/lib/bind9/check.c
-index 097dd96..99b995c 100644
---- a/lib/bind9/check.c
-+++ b/lib/bind9/check.c
-@@ -2988,6 +2988,9 @@ check_viewconf(const cfg_obj_t *config, const cfg_obj_t *voptions,
- {
- 	const cfg_obj_t *zones = NULL;
- 	const cfg_obj_t *keys = NULL;
-+#ifndef HAVE_DLOPEN
-+	const cfg_obj_t *dyndb = NULL;
-+#endif
- 	const cfg_listelt_t *element, *element2;
- 	isc_symtab_t *symtab = NULL;
- 	isc_result_t result = ISC_R_SUCCESS;
-@@ -3041,6 +3044,20 @@ check_viewconf(const cfg_obj_t *config, const cfg_obj_t *voptions,
- 			result = ISC_R_FAILURE;
- 	}
- 
-+#ifndef HAVE_DLOPEN
-+	if (voptions != NULL)
-+		(void)cfg_map_get(voptions, "dyndb", &dyndb);
-+	else
-+		(void)cfg_map_get(config, "dyndb", &dyndb);
-+
-+	if (dyndb != NULL) {
-+		cfg_obj_log(dyndb, logctx, ISC_LOG_ERROR,
-+			    "dynamic loading of databases is not supported");
-+		if (tresult != ISC_R_SUCCESS)
-+			result = ISC_R_NOTIMPLEMENTED;
-+	}
-+#endif
-+
- 	/*
- 	 * Check that the response-policy and catalog-zones options
- 	 * refer to zones that exist.
--- 
-2.9.0
-
diff --git a/net-dns/bind/Manifest b/net-dns/bind/Manifest
index 4bfc04fe7de8..6fe3c752bf55 100644
--- a/net-dns/bind/Manifest
+++ b/net-dns/bind/Manifest
@@ -1,5 +1,4 @@
 AUX 10bind.env 27 BLAKE2B e5ddb2daced1b9430cb8e4b691bc0f1164f71a6e2032fa4efd18b629a6aeb971336d5eaa38c6474a3143cb34691c22d4564ebb010d9efd00cf6e2634daa8e68c SHA512 8ae5326b158b8a3eeaab667c84dd712fefd25d10832598783fa497285183cbdee554796c22d32fec54cd00461469f29ed473a730304a00aacdf06c1bb6c33d55
-AUX bind-9.11.0_p5-dyndb-dlopen.patch 2932 BLAKE2B ec9b7d84b5f0ccb29ed8bdf6701adddf10c3d57298955c86f565b4d98f8031074f07e589edb9268c82726ebc7c19330aae8ea1ef7fd6a0272def963a7557cc68 SHA512 4aef9a107e15953ff81b8354e5e68756650e951ce4e12181d8ac200bd006f6d10c75f0af496a0755d883b921af2aa7984fbe15fdbd5ef8ec47ab6e185027f646
 AUX generate-rndc-key.sh 183 BLAKE2B 33f2297745ef8e5aed09107cee6d0017d3870ea9db249a17850ae7a55f613b03a136bc61b8ac4526858178a0f8713eabda6c5f30917415f9a3ad6b34668f45ab SHA512 6c611120185c1a61b2b6da228efc28302ebd36c819b97793920543ce2cfff4da84f43ec53ddd072f008b04c7087cc19108c4279cb962d12a7e073b47235d14ee
 AUX localhost.zone-r3 426 BLAKE2B d34cf12d484c6bb705d3bd8bfbf93514e504497a99da983f6176234239cc664131502744f3cd743d938dec0309f0d8df2c1d0c5325b5cb61023ed192d32bbedd SHA512 979d8693046033c24490dca536f0d649795bbdf57eed32017b32d07d7d3c51b35197e4edd79d8258074a1bf14b71376472ba6ae749f62ceaf74d7a6a0559fa89
 AUX named.cache-r3 3316 BLAKE2B 09a17fbb29f2122a61c7e17a8dfc8eef3b0fdaa94e8dbe17a0b188946fe8017c65599fbb84c0f88123f0e0f17faae2b9a1ffbc0ee17bcf62c1cbf34f064b9c36 SHA512 3608f29d356bf853145e14c1f81fdccf7090f63e95573234221711b7b6084fbc806817c41daa5d6072a4955a714f9e1cbd6cdcabd7cd1833c3e5f8387bc1ba20
diff --git a/net-dns/bind/files/bind-9.11.0_p5-dyndb-dlopen.patch b/net-dns/bind/files/bind-9.11.0_p5-dyndb-dlopen.patch
deleted file mode 100644
index 5fc8f3c18897..000000000000
--- a/net-dns/bind/files/bind-9.11.0_p5-dyndb-dlopen.patch
+++ /dev/null
@@ -1,97 +0,0 @@
-From ae903759c205f8a5039458d780c0e0c4442b7291 Mon Sep 17 00:00:00 2001
-From: Mark Andrews <marka@isc.org>
-Date: Tue, 30 May 2017 11:31:34 +1000
-Subject: [PATCH] 4530.   [bug]           "dyndb" is dependent on dlopen
- existing / being                         enabled. [RT #45291]
-
-From aa3a8979bc7eb1596d044eff572b3c35310584fa Mon Sep 17 00:00:00 2001
-From: Mark Andrews <marka@isc.org>
-Date: Tue, 30 May 2017 11:34:37 +1000
-Subject: [PATCH] 4530.   [bug]           "dyndb" is dependent on dlopen
- existing / being                         enabled. [RT #45291]
-
-diff --git a/lib/dns/dyndb.c b/lib/dns/dyndb.c
-index a477508..dec68a7 100644
---- a/lib/dns/dyndb.c
-+++ b/lib/dns/dyndb.c
-@@ -80,7 +80,7 @@ impfind(const char *name) {
- 	return (NULL);
- }
- 
--#if HAVE_DLFCN_H
-+#if HAVE_DLFCN_H && HAVE_DLOPEN
- static isc_result_t
- load_symbol(void *handle, const char *filename,
- 	    const char *symbol_name, void **symbolp)
---- a/bin/named/server.c
-+++ b/bin/named/server.c
-@@ -1496,6 +1496,7 @@ configure_peer(const cfg_obj_t *cpeer, isc_mem_t *mctx, dns_peer_t **peerp) {
- 	return (result);
- }
- 
-+#ifdef HAVE_DLOPEN
- static isc_result_t
- configure_dyndb(const cfg_obj_t *dyndb, isc_mem_t *mctx,
- 		const dns_dyndbctx_t *dctx)
-@@ -1521,6 +1522,7 @@ configure_dyndb(const cfg_obj_t *dyndb, isc_mem_t *mctx,
- 			      name, isc_result_totext(result));
- 	return (result);
- }
-+#endif
- 
- 
- static isc_result_t
-@@ -4669,6 +4671,7 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewlist,
- 	else
- 		(void)cfg_map_get(config, "dyndb", &dyndb_list);
- 
-+#ifdef HAVE_DLOPEN
- 	for (element = cfg_list_first(dyndb_list);
- 	     element != NULL;
- 	     element = cfg_list_next(element))
-@@ -4686,6 +4689,7 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewlist,
- 
- 		CHECK(configure_dyndb(dyndb, mctx, dctx));
- 	}
-+#endif
- 
- 	/*
- 	 * Setup automatic empty zones.  If recursion is off then
-diff --git a/lib/bind9/check.c b/lib/bind9/check.c
-index 097dd96..99b995c 100644
---- a/lib/bind9/check.c
-+++ b/lib/bind9/check.c
-@@ -2988,6 +2988,9 @@ check_viewconf(const cfg_obj_t *config, const cfg_obj_t *voptions,
- {
- 	const cfg_obj_t *zones = NULL;
- 	const cfg_obj_t *keys = NULL;
-+#ifndef HAVE_DLOPEN
-+	const cfg_obj_t *dyndb = NULL;
-+#endif
- 	const cfg_listelt_t *element, *element2;
- 	isc_symtab_t *symtab = NULL;
- 	isc_result_t result = ISC_R_SUCCESS;
-@@ -3041,6 +3044,20 @@ check_viewconf(const cfg_obj_t *config, const cfg_obj_t *voptions,
- 			result = ISC_R_FAILURE;
- 	}
- 
-+#ifndef HAVE_DLOPEN
-+	if (voptions != NULL)
-+		(void)cfg_map_get(voptions, "dyndb", &dyndb);
-+	else
-+		(void)cfg_map_get(config, "dyndb", &dyndb);
-+
-+	if (dyndb != NULL) {
-+		cfg_obj_log(dyndb, logctx, ISC_LOG_ERROR,
-+			    "dynamic loading of databases is not supported");
-+		if (tresult != ISC_R_SUCCESS)
-+			result = ISC_R_NOTIMPLEMENTED;
-+	}
-+#endif
-+
- 	/*
- 	 * Check that the response-policy and catalog-zones options
- 	 * refer to zones that exist.
--- 
-2.9.0
-
diff --git a/net-dns/getdns/Manifest b/net-dns/getdns/Manifest
new file mode 100644
index 000000000000..3a6b3893429a
--- /dev/null
+++ b/net-dns/getdns/Manifest
@@ -0,0 +1,5 @@
+AUX stubby.confd 123 BLAKE2B f948e41ad6acbf19bda137fb26fc284651681b45ec7421160946c86c97089fb411cf3611853dbf9c92dfdde26814eab085cb971b552d5459ebe99828b4e4d278 SHA512 698cd718f3acf4a99399a57a7eb80e93ee50489eb1e31ffd485312b86307ece05775f4bbe9a49b3117f6a96f507e6314d9d47a7c23c828a5b231ab8e770e8bef
+AUX stubby.initd 462 BLAKE2B 0825fe3762256377c5ce6c66e982f67fee0edf9b685b51ae8538af0592966f26388776fe079aed31983a110c09b230b7dabada4949a105c83700c699fdd2c82c SHA512 26932bf845e02117bc41e907e0877b0231a9bde83cdea605f5b7a8ea514aea27a412d110e591ce794bd1574ce871a1d4b02847af4f1e58e249432007b7a769d0
+DIST getdns-1.4.1.tar.gz 1055348 BLAKE2B 3b664e669327f5d866e6b40defb3ee4b62a09be228cac726478dbc6843b64aaf49faa328e1013700daf554c4df1144a8d56cca9d9405057d35b89b8ab7ae1f43 SHA512 b15da1c898d4bb4e5dcd93b47f481696dd456d8a841b02122c46035f3da27ca13b5513e7b6a00e943d1a5f5cec8c5ce1f13729d3ce0c887d8faa31d201864b27
+EBUILD getdns-1.4.1.ebuild 1586 BLAKE2B 5d6662e6e37f8aa35f2ffcdb4a4085cce961de9bea8de5be81ccbff6f8edd3e5251eecda8f60e0fdc625e2e1c18874ebdf2cba2629b93f88cb46eb4e71899e32 SHA512 786ae123546cc5df67f13ad902e6c9523b3fe2cb7800cc79afd7b1bbad87c94ee8af4aec824698dee711ba42c37fbfabcdae3a0fe92539ca20660d6476b25f96
+MISC metadata.xml 857 BLAKE2B 25a516aa2d67d8ce5961b8a99d71f355fb99f163ccbbeee29c7c505729ba76735b7d6977f5aa8cb60b328943c715a9dbb4652b4e3133009e220c1db0de9cf875 SHA512 33065cbe6ddfa2b0382d55a0441a819f2d4795cd458fe6b53d4da444b9542d49781d7dcf7b11615c46e3157bdc1deab89c765a24ee100c67687fb64cd2099bd1
diff --git a/net-dns/getdns/files/stubby.confd b/net-dns/getdns/files/stubby.confd
new file mode 100644
index 000000000000..b862ea4a40d7
--- /dev/null
+++ b/net-dns/getdns/files/stubby.confd
@@ -0,0 +1,4 @@
+# /etc/conf.d/stubby: config file for /etc/init.d/stubby
+
+# See stubby -h for possible options to put here.
+STUBBY_OPTS=""
diff --git a/net-dns/getdns/files/stubby.initd b/net-dns/getdns/files/stubby.initd
new file mode 100755
index 000000000000..170db9be07fe
--- /dev/null
+++ b/net-dns/getdns/files/stubby.initd
@@ -0,0 +1,21 @@
+#!/sbin/openrc-run
+# Copyright 1999-2018 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License, v2 or later
+
+command="capsh"
+command_args="--inh=cap_net_bind_service --user=stubby -- -c '/usr/bin/stubby -g ${STUBBY_OPTS}'"
+pidfile="/var/run/stubby/stubby.pid"
+name="DNS Privacy Daemon"
+
+depend()
+{
+	provide dns
+	need localmount net
+	after bootmisc
+	use logger
+}
+
+start_pre()
+{
+	checkpath -d -m 1755 -o stubby:stubby /var/run/stubby
+}
diff --git a/net-dns/getdns/getdns-1.4.1.ebuild b/net-dns/getdns/getdns-1.4.1.ebuild
new file mode 100644
index 000000000000..13ab6bc3b156
--- /dev/null
+++ b/net-dns/getdns/getdns-1.4.1.ebuild
@@ -0,0 +1,66 @@
+# Copyright 1999-2018 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=6
+
+inherit user fcaps
+
+DESCRIPTION="Modern asynchronous DNS API"
+HOMEPAGE="https://getdnsapi.net/"
+SRC_URI="https://getdnsapi.net/releases/${P//./-}/${P}.tar.gz"
+
+LICENSE="BSD"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE="stubby +getdns_query +getdns_server_mon libressl +idn +unbound libevent libev libuv +threads"
+
+DEPEND="
+	dev-libs/libyaml:=
+	!libressl? ( dev-libs/openssl:0= )
+	libressl? ( dev-libs/libressl:0= )
+	idn? ( net-dns/libidn2:= )
+	unbound? ( >=net-dns/unbound-1.4.16:= )
+	libevent? ( dev-libs/libevent:= )
+	libev? ( dev-libs/libev:= )
+	libuv? ( dev-libs/libuv:= )
+"
+RDEPEND="${DEPEND}"
+
+src_configure() {
+	econf \
+		--runstatedir=/var/run \
+		--with-piddir=/var/run/stubby \
+		$(use_with stubby) \
+		$(use_with getdns_query) \
+		$(use_with getdns_server_mon) \
+		$(use_with idn libidn2) \
+		--without-libidn \
+		$(use_with unbound libunbound) \
+		$(use_with libevent) \
+		$(use_with libev) \
+		$(use_with libuv) \
+		$(use_with threads libpthread)
+}
+
+src_install() {
+	default
+	if use stubby; then
+		newinitd "${FILESDIR}"/stubby.initd stubby
+		newconfd "${FILESDIR}"/stubby.confd stubby
+	fi
+}
+
+pkg_postinst() {
+	if use stubby; then
+		enewgroup stubby
+		enewuser stubby -1 -1 -1 stubby
+		fcaps cap_net_bind_service=ei /usr/bin/stubby
+	fi
+
+	if has_version <dev-libs/libressl-2.7.0; then
+		ewarn "BEWARE: dev-libs/libressl prior to 2.7 does NOT check TLS certificates."
+		if use stubby; then
+			ewarn "You will NOT be able to use strict profile in Stubby."
+		fi
+	fi
+}
diff --git a/net-dns/getdns/metadata.xml b/net-dns/getdns/metadata.xml
new file mode 100644
index 000000000000..58710c149310
--- /dev/null
+++ b/net-dns/getdns/metadata.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<maintainer type="person">
+		<email>gentoo@retornaz.com</email>
+		<name>Quentin Retornaz</name>
+	</maintainer>
+	<maintainer type="person">
+		<email>blueness@gentoo.org</email>
+		<name>Anthony G. Basile</name>
+	</maintainer>
+	<use>
+		<flag name="stubby">Add Stubby DNS Privacy Deamon</flag>
+		<flag name="getdns_query">Add getdns_query tool</flag>
+		<flag name="getdns_server_mon">Add getdns_server_mon tool</flag>
+		<flag name="unbound">Enable <pkg>net-dns/unbound</pkg> libraries support</flag>
+		<flag name="libevent">Enable <pkg>dev-libs/libevent</pkg> support</flag>
+		<flag name="libev">Enable <pkg>dev-libs/libev</pkg> support</flag>
+		<flag name="libuv">Enable <pkg>dev-libs/libuv</pkg> support</flag>
+	</use>
+</pkgmetadata>