gentoo auto-resync : 04:07:2024 - 08:06:07

12 files changed, 258 insertions, 8 deletions

diff --git a/sys-auth/Manifest.gz b/sys-auth/Manifest.gz
index d36f43f2f4bd..d370136d3fc5 100644
--- a/sys-auth/Manifest.gz
+++ b/sys-auth/Manifest.gz
diff --git a/sys-auth/libyubikey/Manifest b/sys-auth/libyubikey/Manifest
index e632376fdbfc..bbc22287c50c 100644
--- a/sys-auth/libyubikey/Manifest
+++ b/sys-auth/libyubikey/Manifest
@@ -1,4 +1,4 @@
 DIST libyubikey-1.13.tar.gz 347337 BLAKE2B 99bbcc16115d913ffd548625f3366405879b0537c4dbcb9f6cebc406a057de642ae621d5793f1828056bfac266eb56b9a409cde44eb26753f955c9da6bcf8c0e SHA512 28f45cb9817c30a70d168ae507d3f8014051058d730eed92b31d92e96784138dea291bda4275511c5f92a6427cb4249d76c802b8abb867cec50e62fb770950f2
 EBUILD libyubikey-1.13-r1.ebuild 490 BLAKE2B 0f3b3fa9543ae1997e3ae7a9251cdd2f0baea062750c4750db40ba9316a2b17f974cb323c10de0c55972c5882083dc991cedf96a80851419667f5cfa26e5936c SHA512 f6de747b19c139285a6f30f092f9675cd5d2eea0e47b6066b1308636e4bb90bec8bbc4fb07cd3b8156c4f6f0577d45ad4c5fbbd16e7737d887537b04df53cfb3
 EBUILD libyubikey-1.13.ebuild 533 BLAKE2B 76822633450019903c2dda3c4bc5571547b245f2a702c5174a9c00a39d5f5a535c1aa181a6535fff95d955e58fe60dab70cef7c7377e57cc2ddb49b9d45ff439 SHA512 703d5c8facc83d6d13f74aed92fb860658a120c25a05a2275d37f36a38d209c163d165ee60a86f911a05518c6bff18363af14b8e28942a5b39a0878ee2887fab
-MISC metadata.xml 301 BLAKE2B 7eb5a3949c7f08900df377995750c049519b3f0b6d0f81984d1c8bfd7a35dba7cb3a8a06f061f39abfa58fa1ab1b6ac6cb96111011298de15f2a6a2f278f69e7 SHA512 7a053cd6719f7e8a06f6c979c9f8f0a84e13f8b0ef879baed4d410055c0f123ebe9e505040f8d27a463be05aa1b3a1f06e97b3e50f193dcb2374ff3cc20a918b
+MISC metadata.xml 544 BLAKE2B a2fae496e1d81bdeab6d1813bb1109aebe9bc0d8b85e83d0083f5fe38082bc66673019c2cf644cf7be4786253ecfb5a0435ca722b8393a87a24a986426f96e9f SHA512 1bd4644a7b5525a9ffbb4d7576272c1c6085b9284f1c23444c759627a7672cf5ce5a66d085435ede6a87c15d4ef256d481ff7171fccfd2e65358bf2ee90580bb
diff --git a/sys-auth/libyubikey/metadata.xml b/sys-auth/libyubikey/metadata.xml
index 21b6ba81033f..93b9b711be0e 100644
--- a/sys-auth/libyubikey/metadata.xml
+++ b/sys-auth/libyubikey/metadata.xml
@@ -1,7 +1,14 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
 <pkgmetadata>
-	<!-- maintainer-needed -->
+	<maintainer type="person" proxied="yes">
+		<email>mario.haustein@hrz.tu-chemnitz.de</email>
+		<name>Mario Haustein</name>
+	</maintainer>
+	<maintainer type="project" proxied="proxy">
+		<email>proxy-maint@gentoo.org</email>
+		<name>Proxy Maintainers</name>
+	</maintainer>
 	<upstream>
 		<remote-id type="google-code">yubico-c</remote-id>
 		<remote-id type="github">Yubico/yubico-c</remote-id>
diff --git a/sys-auth/nss-pam-ldapd/Manifest b/sys-auth/nss-pam-ldapd/Manifest
index 8245e2c2cbc5..88b7834ec4b9 100644
--- a/sys-auth/nss-pam-ldapd/Manifest
+++ b/sys-auth/nss-pam-ldapd/Manifest
@@ -12,4 +12,5 @@ AUX pynslcd.init 515 BLAKE2B 711ba152ea9cc52198171e451889ab42a224581bae7e4378846
 DIST nss-pam-ldapd-0.9.12.tar.gz 791983 BLAKE2B af580d400230db709f7ac09720edd6127b3b26c6987d1e8f6d6535ad8e68fd8cb5cf2a3319e4456fb2af28aba6528f7a5cdc28463ccfee747dbbf6abc35eee87 SHA512 5eca4851a9bcb2779548d193a363a143d6106bfc6463b8d3f0c2d5d7d227ec1e680861383d4813f40b44d1be2ce5f7ed019d838f7f6796e15f96f7411d3bb8f6
 EBUILD nss-pam-ldapd-0.9.12-r2.ebuild 4357 BLAKE2B a59a17353a23770f3b82cb408bc0bf6e62dac87a1d66aef838173da601726b3033fd6e904a07ece36971cc83caec0afec597e780a65bb54d5e2bef4d9f798e10 SHA512 eca3ebfd6ae0eda684e301e44675bcbfecfed783f917ce5b4d2d05d30682964fe4ba747e93bfd968619adee4b3e47c022cfc9d6849c8d842b19ca0962fcab982
 EBUILD nss-pam-ldapd-0.9.12-r3.ebuild 4522 BLAKE2B 785f06623d3613e79adc3fd619fb8992fc89a629961bf50cf966f3f455f3688d7976b2123a343abcc806a62c85bd20be8f848e707464dc4813aa7e6c399cb3de SHA512 3d43146767b5928730836577950b1b489f5f2ad6505afe07741a8e215c83cd0374bd34299b1e010f2b71b84b85187d598292758a31209e8fd66737c12f15675a
+EBUILD nss-pam-ldapd-0.9.12-r4.ebuild 4544 BLAKE2B 2a93f95c97a20f7229dfbb9475b2ce24d4c402c7b271bb96acfd5d29286ae33111d0feaa80d5a489f3844467bbbcc93d0f7b644eeecffff5b088da9df098700f SHA512 b506d5e9c917479d6476ec88e7ff5498ed45a3cd83f050642ee674c1f6ea2b92c85744ac94070f13658b57fc56823435e52636ad6ac4f9dbcf6d00044ae1c2a8
 MISC metadata.xml 1170 BLAKE2B 5c121a0afae864d757fda18c8546e494804c9b9d6a7d6fe2ad485b6a7bb2ed291776063407721222fa765251c9ca4d945740e8a0aa53da670747fb35cf1b8f9e SHA512 ba534679ae3b983a9b143530112f6495a4a4b5b82077095b3cc62965c1cf808c7a2d098410c00bee195112c5e7ff3afe4b368fa9a1662ce22cf48634229df7cf
diff --git a/sys-auth/nss-pam-ldapd/nss-pam-ldapd-0.9.12-r4.ebuild b/sys-auth/nss-pam-ldapd/nss-pam-ldapd-0.9.12-r4.ebuild
new file mode 100644
index 000000000000..85c045be9ab5
--- /dev/null
+++ b/sys-auth/nss-pam-ldapd/nss-pam-ldapd-0.9.12-r4.ebuild
@@ -0,0 +1,166 @@
+# Copyright 1999-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+PYTHON_COMPAT=( python3_{10..12} )
+inherit autotools python-r1 s6 systemd tmpfiles multilib-minimal
+
+DESCRIPTION="NSS module for name lookups using LDAP"
+HOMEPAGE="https://arthurdejong.org/nss-pam-ldapd/"
+SRC_URI="https://arthurdejong.org/${PN}/${P}.tar.gz"
+
+LICENSE="LGPL-2.1"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~sparc ~x86"
+IUSE="debug kerberos +pam pynslcd sasl selinux test +utils"
+REQUIRED_USE="
+	${PYTHON_REQUIRED_USE}
+	utils? ( ${PYTHON_REQUIRED_USE} )
+	kerberos? ( sasl )
+	test? ( ${PYTHON_REQUIRED_USE} pynslcd )
+"
+RESTRICT="!test? ( test )"
+
+RDEPEND="
+	acct-group/nslcd
+	acct-user/nslcd
+	net-nds/openldap:=[${MULTILIB_USEDEP}]
+	sasl? ( dev-libs/cyrus-sasl[${MULTILIB_USEDEP}] )
+	kerberos? ( virtual/krb5[${MULTILIB_USEDEP}] )
+	sys-libs/pam[${MULTILIB_USEDEP}]
+	utils? ( ${PYTHON_DEPS} )
+	pynslcd? (
+		dev-python/python-ldap[${PYTHON_USEDEP}]
+		dev-python/python-daemon[${PYTHON_USEDEP}]
+	)
+	elibc_musl? ( sys-libs/musl-nscd )
+	!sys-auth/nss_ldap
+	!sys-auth/pam_ldap
+"
+DEPEND="${RDEPEND}"
+BDEPEND="
+	${PYTHON_DEPS}
+	test? ( dev-python/pylint[${PYTHON_USEDEP}] )
+"
+RDEPEND+=" selinux? ( sec-policy/selinux-nslcd )"
+
+PATCHES=(
+	"${FILESDIR}"/nss-pam-ldapd-0.9.4-disable-py3-only-linters.patch
+	"${FILESDIR}"/nss-pam-ldapd-0.9.11-use-mkstemp.patch
+	"${FILESDIR}"/nss-pam-ldapd-0.9.11-relative-imports.patch
+	"${FILESDIR}"/nss-pam-ldapd-0.9.11-tests.patch
+	"${FILESDIR}"/nss-pam-ldapd-0.9.11-tests-py39.patch
+	"${FILESDIR}"/nss-pam-ldapd-0.9.12-netdb-defines.patch
+)
+
+pkg_setup() {
+	[[ ${MERGE_TYPE} != binary ]] && python_setup
+}
+
+src_prepare() {
+	default
+
+	touch pynslcd/__init__.py || die "Could not create __init__.py for pynslcd"
+	mv pynslcd/pynslcd.py pynslcd/main.py || die
+
+	eautoreconf
+}
+
+multilib_src_configure() {
+	local myconf=(
+		--disable-utils
+		--enable-warnings
+		--with-ldap-lib=openldap
+		--with-ldap-conf-file="${EPREFIX}"/etc/nslcd.conf
+		--with-nslcd-pidfile=/run/nslcd/nslcd.pid
+		--with-nslcd-socket=/run/nslcd/socket
+		--with-nss-flavour=glibc
+		$(use_enable pynslcd)
+		$(use_enable debug)
+		$(use_enable kerberos)
+		$(use_enable pam)
+		$(use_enable sasl)
+
+		# nss libraries always go in /lib on Gentoo
+		--with-pam-seclib-dir="${EPREFIX}"/$(get_libdir)/security
+		--libdir="${EPREFIX}"/$(get_libdir)
+	)
+	ECONF_SOURCE="${S}" econf "${myconf[@]}"
+}
+
+multilib_src_test() {
+	python_test() {
+		cp -l "${S}"/pynslcd/*.py pynslcd/ || die "Could not copy python files for tests"
+		nonfatal emake check || die "tests failed with ${EPYTHON}"
+	}
+
+	pushd "${BUILD_DIR}" >/dev/null || die
+	ln -s ../pynslcd/constants.py utils/constants.py || die
+	python_foreach_impl python_test
+	popd >/dev/null || die
+}
+
+multilib_src_install() {
+	emake DESTDIR="${D}" install
+
+	if use pynslcd; then
+		python_moduleinto pynslcd
+		python_foreach_impl python_domodule pynslcd/*.py
+	fi
+}
+
+multilib_src_install_all() {
+	einstalldocs
+
+	newinitd "${FILESDIR}"/nslcd.init nslcd
+	s6_install_service nslcd "${FILESDIR}"/nslcd.s6
+
+	insinto /usr/share/nss-pam-ldapd
+	doins "${WORKDIR}"/${P}/nslcd.conf
+
+	fperms o-r /etc/nslcd.conf
+
+	if use utils; then
+		python_moduleinto nslcd
+		python_foreach_impl python_domodule utils/*.py
+
+		local script
+		for script in chsh getent; do
+			python_foreach_impl python_newscript utils/${script}.py ${script}.ldap
+		done
+	fi
+	if use pynslcd; then
+		rm -rf "${ED}"/usr/share/pynslcd || die
+		python_moduleinto pynslcd
+		python_foreach_impl python_domodule pynslcd/*.py
+		python_scriptinto /usr/sbin
+		python_foreach_impl python_newscript pynslcd/main.py pynslcd
+		newinitd "${FILESDIR}"/pynslcd.init pynslcd
+	fi
+
+	newtmpfiles "${FILESDIR}"/nslcd-tmpfiles.conf nslcd.conf
+	systemd_newunit "${FILESDIR}"/nslcd.service nslcd.service
+}
+
+pkg_postinst() {
+	tmpfiles_process nslcd.conf
+
+	elog "For this to work you must configure /etc/nslcd.conf"
+	elog "This configuration is similar to pam_ldap's /etc/ldap.conf"
+	elog
+	elog "In order to use nss-pam-ldapd, nslcd needs to be running. You can"
+	elog "start it like this:"
+	elog "  # /etc/init.d/nslcd start"
+	elog
+	elog "You can add it to the default runlevel like so:"
+	elog " # rc-update add nslcd default"
+	elog
+	elog "If you have >=sys-apps/openrc-0.16.3, you can also use s6"
+	elog "to supervise this service."
+	elog "To do this, emerge sys-apps/s6 then add nslcd-s6"
+	elog "default runlevel instead of nslcd."
+	elog
+	elog "If you are upgrading, keep in mind that /etc/nss-ldapd.conf"
+	elog " is now named /etc/nslcd.conf"
+}
diff --git a/sys-auth/ykpers/Manifest b/sys-auth/ykpers/Manifest
index 4183b1303b47..ab32ea7e6ea2 100644
--- a/sys-auth/ykpers/Manifest
+++ b/sys-auth/ykpers/Manifest
@@ -2,4 +2,4 @@ AUX ykpers-1.20.0-fix-gcc10-fno-common.patch 308 BLAKE2B 720da4ac3f20c4512987b47
 AUX ykpers-1.20.0-json-boolean.patch 3572 BLAKE2B 684b9dab508b8d100d4e9237d833cb9160c33314a4076476b9342858844627acccc8f7025da0f22524251ca4541feceededd0f663e03810e53935ea809d1e556 SHA512 a8bc7ae71d0a05476688abfaea070ca7dc2eaa68e033524d4a1b2b6240eec2932d867e9eeaa248874a04f254618cd79bf9ebaa17421938b0c2e62502bf90c055
 DIST ykpers-1.20.0.tar.gz 127975 BLAKE2B 8753332be4df3eeb6ef0489782037fca12883a263d5697cfaee901763e4698ca5415953da1c2f8b3512de041c1e78735c03a5e6ea2101c71ada36d4e6d5d3d2d SHA512 a38b26700793f0a801e5f5889bbbce4a3f728d22aaecf8d0890f1b5135e67bed16a78b7a36dbc323c5d296901f6dd420fa658a982492a0cd9f0bbf95a5fbc823
 EBUILD ykpers-1.20.0-r1.ebuild 1117 BLAKE2B cf4e9308f6021963e9a0f36c96bb8dbfadb89bbf8cfce43cbe7a1b91a4279a480e86679a29b7b5b11859ec3016898bea270b3a04b0f81937573d9c38d7a85019 SHA512 88a93b6acc750ef13bf6f8a81d19a67c56c29579c8e25414ebe4fc38bb545b4a5c258beaa5ac320cf7ef1ef7da9a3b0c8c666cc6eb886c5f8add49bf27536526
-MISC metadata.xml 341 BLAKE2B 8f87bdbbd9f8b228bd7cd32b286b3ddf08041ab5f138d0555f5743e68860893439e6049805014f8fee4ed89277284b2aa9b532123ed2ea7540093902128b89e9 SHA512 6f020d4e65da5b9e43a50b1e4e5ccc91c048f98f15158ba1697f7ad86cb5c27516b8bedd4ee55aad03f528f44d1fa0575d0b7062f29a424f50712a4a7e643b75
+MISC metadata.xml 584 BLAKE2B a933ee65769bdfdf4c32c4d4c5e20e905e6473bb8252e82a9e94c3cc5ab008e3967f8a3d24dc526b2fb526eb156a60e6431272ca5be6be40d8d20cd44960d7db SHA512 db8fe6d0d38011a93557b0cf46d4727c654ed73f828e33e6ae611b9f5062cf45a66bf63608880ff87c13a69d86b0b55f73ca8dade1f444dccf3d7d22fd789c9b
diff --git a/sys-auth/ykpers/metadata.xml b/sys-auth/ykpers/metadata.xml
index 8ae0489de78c..68749008315e 100644
--- a/sys-auth/ykpers/metadata.xml
+++ b/sys-auth/ykpers/metadata.xml
@@ -1,7 +1,14 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
 <pkgmetadata>
-	<!-- maintainer-needed -->
+	<maintainer type="person" proxied="yes">
+		<email>mario.haustein@hrz.tu-chemnitz.de</email>
+		<name>Mario Haustein</name>
+	</maintainer>
+	<maintainer type="project" proxied="proxy">
+		<email>proxy-maint@gentoo.org</email>
+		<name>Proxy Maintainers</name>
+	</maintainer>
 	<upstream>
 		<remote-id type="github">Yubico/yubikey-personalization</remote-id>
 		<bugs-to>https://github.com/Yubico/yubikey-personalization/issues</bugs-to>
diff --git a/sys-auth/yubico-piv-tool/Manifest b/sys-auth/yubico-piv-tool/Manifest
index cd752c635187..bea24d5b445b 100644
--- a/sys-auth/yubico-piv-tool/Manifest
+++ b/sys-auth/yubico-piv-tool/Manifest
@@ -4,7 +4,10 @@ AUX yubico-piv-tool-2.3.0-no-Werror.patch 402 BLAKE2B 6ffdac507c007e3dfa8254b622
 DIST yubico-piv-tool-2.3.1.tar.gz 1315267 BLAKE2B 9b7d96129f3cab4fd68d18d0bbbf8dfa5fdda383ffb8099f898e23c99d0f1caf387a26cb9d01582521a070b93bac941b8a10faac736137cb72c86fbf5c95d2f8 SHA512 44cd9c482f2a2942d10a238ac2cb2d40df7cd11ddc27d6df88912512e956746b5634018b421d5cc4b947e4c36f9841898d5a08eb613bf22558089103dab95988
 DIST yubico-piv-tool-2.4.2.tar.gz 1332497 BLAKE2B ba08b19fe4659842fdfad06d662120a9d2858e25a56d56f63edc88e607c5b56a79f5ca90826fb8b78295e218ff1a728a168d04f330b7f640a9f3e804528320ed SHA512 032a91c9ac50cb5604a56ec0d0a84cf64bfff5440930a1643bddcd15cf02fc44d33d949286b2595eb4c196cb31050c13f507b32f3156d4600fdad46057b65b56
 DIST yubico-piv-tool-2.5.1.tar.gz 1340147 BLAKE2B 96638e22bf03046daae5ba4b4d689cfe6d7e1f8ebbf64695bd3e259ca7e53513ff92933c935294536c504fc96b2ed1c7df4b9962b1789803eb9576b51715f00e SHA512 736aeeac3d9368699b33e928cfb5b54ad6aa1450acf734397bc689ba9ccc82077f46f7ea2bd06dd1457b91eb50f7a0231a57914b3ea2ff0f07d425b4d27b96e4
+DIST yubico-piv-tool-2.5.2.tar.gz 1324642 BLAKE2B 23b175d37f0f510e1360f8c793e95ee654e7d0218ca6fb29a884e4aaf143704555bc04c489fa944e2731208cb713d2d763d84dd8b6ef36aa4dafe22c55d81edc SHA512 522a163be55dd92c2f18a779b64b1a163a6f81390757db34b58e909d896d78bcff30907eb8a2dc703d70133cdd71e2d3841d36d77cf7211351b5c825965dffd0
+DIST yubico-piv-tool-2.5.2.tar.gz.sig 566 BLAKE2B f7cdcbd7f47dd07b57c2cfe146c8801edce254b00cf4abf65783da687787ce91f2bee1419050a2977c66c074cfaf6c8e2f566d5b83ed3b61d56b6f9ba3e41a65 SHA512 c251cc7c7019923c60380302889cc3654ef913c1d5498d328528586d70b951aecff474a4da3a2b9ddb21c1b860335205a16ffed1d397e16e226e7f4725c2bf90
 EBUILD yubico-piv-tool-2.3.1.ebuild 1156 BLAKE2B f62162bd6c30849260828a9c061c037a94a4ef62bd866ebe216c21baaae14581289749766959621446d63467779eb0cfa2e7960a8036c6b3181cccdc86661ef6 SHA512 5cb011a55e77be3fd748a37cf0e3688c4bd405b67f0ac3bf871a9ac85d2aa1e89008d4f99d27173e484c900b43227e0a4272b4fdeddbe7604e4adbf80f3c28e9
 EBUILD yubico-piv-tool-2.4.2.ebuild 1156 BLAKE2B 091961aeee874329fece7dfa59e60ae9a429e9cc3885c39984fd0ec26efcfa9ebee87e5d0d58c5159e369fef21334024985be9879e077b4e652b0be82c153050 SHA512 b5570f5d482ea2a46b02219c7182fbbe44ffe646995a3032b643e96cfc9f597e4989af57e3fb8db89be502fd1ebe79588aa84c6a4916b2690c0168247e61ae7d
 EBUILD yubico-piv-tool-2.5.1.ebuild 1157 BLAKE2B c2b27bb0d033254ae63c1fe089510e1c44dc29fd964deb72462bdcd23af9a2acce3133857bed8f8785ccc6cb7403b34ad881a91b4da1ffaa98b7654d13805878 SHA512 e4b1740c94bd2b7a73696137b0160644e37b7627dc394058adb225abd2bedf80c228f02c24bece443961bc0d91c82a128cbe5eeff61fdab82b07d28c538a6573
-MISC metadata.xml 255 BLAKE2B 742c124428f7d6cfb8f7c217a6dd1c46e773a9d809e165f492612f842a476e947d7a78d833a3c58877da80524ecaa3565c2a77e9aedaea0f1bac07fdbab925b3 SHA512 495ad6a40b3348ab24f9f604f51659fed8b896a0d75ffeb4698d8e08ff37e2e4dff5ce4687c0df69fd28b882d86cb83618e8bb0c51e62dda11ec28207672f735
+EBUILD yubico-piv-tool-2.5.2.ebuild 1409 BLAKE2B 524340dfa6a56c2c1b975ad9f844e0d13a60b70b69c52b1e57cc2bb705f9779b6b3f225831c622de21bff6231380e42edd06e695440c2b6f7efcd87df327719b SHA512 4269b70f08c7ff05f0bfc9dd1317ea9d4b7ae33a8f0d7077c4577997c262efa4b010fce93be6e0e6dc256d0deb722bf1d62683bd5108c39a01d1485055aff2ec
+MISC metadata.xml 498 BLAKE2B 19eedd389983fd8e7e8db90288e345bea85bc147c7a6ae3aec673d0d400e0e8228261d8b331e12e73c57aa5094b4037d2f6b2f3f70c2792dd06edfad5b2ac1ed SHA512 930d488b4ae1597a033e7f8558748adfc0d27b2dc38d687470543fe6daafe01d32daee4fdc16eb7dab104a7a3b33f2ca262ead8e0db93680d21505060d6c8979
diff --git a/sys-auth/yubico-piv-tool/metadata.xml b/sys-auth/yubico-piv-tool/metadata.xml
index d490276f1a61..2f112a5a5f85 100644
--- a/sys-auth/yubico-piv-tool/metadata.xml
+++ b/sys-auth/yubico-piv-tool/metadata.xml
@@ -1,7 +1,14 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
 <pkgmetadata>
-	<!-- maintainer-needed -->
+	<maintainer type="person" proxied="yes">
+		<email>mario.haustein@hrz.tu-chemnitz.de</email>
+		<name>Mario Haustein</name>
+	</maintainer>
+	<maintainer type="project" proxied="proxy">
+		<email>proxy-maint@gentoo.org</email>
+		<name>Proxy Maintainers</name>
+	</maintainer>
 	<upstream>
 		<remote-id type="github">Yubico/yubico-piv-tool</remote-id>
 	</upstream>
diff --git a/sys-auth/yubico-piv-tool/yubico-piv-tool-2.5.2.ebuild b/sys-auth/yubico-piv-tool/yubico-piv-tool-2.5.2.ebuild
new file mode 100644
index 000000000000..431639fedfe6
--- /dev/null
+++ b/sys-auth/yubico-piv-tool/yubico-piv-tool-2.5.2.ebuild
@@ -0,0 +1,52 @@
+# Copyright 1999-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit cmake verify-sig
+
+DESCRIPTION="Command-line tool and p11-kit module for the YubiKey PIV application"
+HOMEPAGE="https://developers.yubico.com/yubico-piv-tool/ https://github.com/Yubico/yubico-piv-tool"
+SRC_URI="https://developers.yubico.com/${PN}/Releases/${P}.tar.gz
+	verify-sig? ( https://developers.yubico.com/${PN}/Releases/${P}.tar.gz.sig )"
+
+LICENSE="BSD-2"
+SLOT="0/2"
+KEYWORDS="~amd64 ~arm64 ~riscv"
+IUSE="test verify-sig"
+VERIFY_SIG_OPENPGP_KEY_PATH="/usr/share/openpgp-keys/yubico.com.asc"
+
+RESTRICT="!test? ( test )"
+
+RDEPEND="sys-apps/pcsc-lite
+	dev-libs/openssl:=[-bindist(-)]"
+DEPEND="${RDEPEND}
+	test? ( dev-libs/check )"
+BDEPEND="dev-util/gengetopt
+	sys-apps/help2man
+	virtual/pkgconfig
+	test? ( dev-libs/check )
+	verify-sig? ( >=sec-keys/openpgp-keys-yubico-20240628 )"
+
+PATCHES=(
+	"${FILESDIR}"/${PN}-2.1.1-tests-optional.patch
+	"${FILESDIR}"/${PN}-2.1.1-ykcs11-threads.patch
+	"${FILESDIR}"/${PN}-2.3.0-no-Werror.patch
+)
+
+src_configure() {
+	local mycmakeargs=(
+		-DBUILD_STATIC_LIB=OFF
+		-DBUILD_TESTING=$(usex test)
+	)
+	cmake_src_configure
+}
+
+src_install() {
+	cmake_src_install
+
+	echo "module: ${EPREFIX}/usr/$(get_libdir)/libykcs11.so" > ${PN}.module \
+		|| die "Failed to generate p11-kit module configuration"
+	insinto /usr/share/p11-kit/modules
+	doins ${PN}.module
+}
diff --git a/sys-auth/yubikey-personalization-gui/Manifest b/sys-auth/yubikey-personalization-gui/Manifest
index 11817a95534b..850ee44fcc6c 100644
--- a/sys-auth/yubikey-personalization-gui/Manifest
+++ b/sys-auth/yubikey-personalization-gui/Manifest
@@ -1,3 +1,3 @@
 DIST yubikey-personalization-gui-3.1.25.tar.gz 942121 BLAKE2B edc581824f917b50664dd758a0447fa9a61c85844cd220d82661c9e1f1bbabc1bda77545c1eda2e56a43b8176479c1b161f8e9ad5feb3d61cdc37d301ebde9fc SHA512 6d45c2a9e9c452a44fba5ff3830150ce65e968899215c59fd7b412317143015c466ac706dcfa49def2c4304a01866a3674ba7cc37e47dff4e8c6acb8166fcf45
 EBUILD yubikey-personalization-gui-3.1.25.ebuild 1294 BLAKE2B 308bab8da0df3b19e80c571251989a652c78bd09a8aa16123087c8c3ce3d31e636a407dff49afaed6bc155f982966f97f04d1c0efdfd11697636b2dd87c599b3 SHA512 0af1605a6188b75858e0ef0322548524676d8f4379828afed95bb0cb3d28d61d0c94920b445cfda552af2b558b4fcaea488d509966a0167887cef06d2377ff43
-MISC metadata.xml 263 BLAKE2B ca5f97a117bb931ee0e50272d24a6001811ba3f333b3c9649c1934daf0f53c4b557bf596860fc2712eb4c6249ff5d3012dbc5ff31d55f79eae87b7985fc98c76 SHA512 d94f5c8afce924a9566764da2ef0f2b71422a8162be8a6aa8612b894d7fb7690e9ff924e67590960486721c13f9688a744e1c66c4897ced7883676d253f0537b
+MISC metadata.xml 506 BLAKE2B fee40c65ea91f4595b92d06a5e2157e6f4890e0410b344d381c1fda9e28f9ee9dd14b5da52bfa9355269b588273db86aab7dabbdf28127628f7b968e3756604c SHA512 ebbbc04d1ff94d9bf8f88cbab3270d2363cd866006cf741067f70c1017662a89fd9b067a7f57200899b7757eeed7abfac5f165d0cfec5aac7f433eac33b25604
diff --git a/sys-auth/yubikey-personalization-gui/metadata.xml b/sys-auth/yubikey-personalization-gui/metadata.xml
index 9e2f8818dcb4..508cd97f361c 100644
--- a/sys-auth/yubikey-personalization-gui/metadata.xml
+++ b/sys-auth/yubikey-personalization-gui/metadata.xml
@@ -1,7 +1,14 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
 <pkgmetadata>
-	<!-- maintainer-needed -->
+	<maintainer type="person" proxied="yes">
+		<email>mario.haustein@hrz.tu-chemnitz.de</email>
+		<name>Mario Haustein</name>
+	</maintainer>
+	<maintainer type="project" proxied="proxy">
+		<email>proxy-maint@gentoo.org</email>
+		<name>Proxy Maintainers</name>
+	</maintainer>
 	<upstream>
 		<remote-id type="github">Yubico/yubikey-personalization</remote-id>
 	</upstream>