10 files changed, 183 insertions, 0 deletions
diff --git a/net-misc/tlsdate/Manifest b/net-misc/tlsdate/Manifest
new file mode 100644
index 000000000000..400e1117e835
--- /dev/null
+++ b/net-misc/tlsdate/Manifest
@@ -0,0 +1,12 @@
+AUX tlsdate-0.0.13-tlsdated-service.patch 674 SHA256 85014d654c04aa2df3fc38024e24e50024f336605634e15104333e54c169b4bc SHA512 ff24e073306bcedf014f0c3734f6ca17e7b4663409744e9960e832215a83a1954cf2c84cc7ef752de5c28d8814ec4bcc7f840bcbe78b18226380a3afc09c0706 WHIRLPOOL fb2a818d5accb6507e0674718f5448d5e8cd53365dabe14138b6063ce29678c6ebec2990af3766cbefb5cae0441e56ee0b544b5d2b2e8d70d6f868d0b8b95273
+AUX tlsdate.confd 247 SHA256 d3e4f1ca2941813cdee93ef039a5156db410cea2dc4b0e1a738a9bae89835d63 SHA512 62149e3a9f26a71624bd851780f92a41c9aaf138793b5da762aa3002bcc5a409686d1bbe687b4abf1fc2e12205720a3825d9603cab0b0d978c2d0fd41422efe7 WHIRLPOOL b7c99243741e31cebf30550ec410dffbf0bcee5f47213cdc6f6daeb5e2764feba95e16706f575c493a6d1b23a2e9d49ac5f9285db204205f79d6f582afd4599f
+AUX tlsdate.rc 349 SHA256 8d9965af5a5de9aefb2056a9e19c34ce30fb3d5a47820cb22743f0892dc573d8 SHA512 2f0bca7251fbd1ae0def2287c7470bee85a2ee0c6baa25ff724ef6880ae7a8a8793460056139d0f1add0003958b2e5dcbddb562b7ac99abdf130032f764d335d WHIRLPOOL 37c6369d188d4a8013a3ccb14615a7079c04076d680277cf9123f8c17602dd96d8cb571cbeb3d0de0ca0c18fc3c861bc84e751d14cab056b32cc18f70671c0d3
+AUX tlsdated.confd 469 SHA256 1c52ff7bc7ce0fbd876a4f594948a70e30e6197bae2b9bc1b55cc6d398091131 SHA512 38bd7d64473ab487eea2539b11a7acadfc3fa5a627fb12e78931b62c46d3ebedab4c75d56839b0dee9fd8f42d4b7ae9ace08ea3f58941b8e2d183828c6a4fef2 WHIRLPOOL 07a8bec2ccf63bacb141b51ca9050eb656fe7b8b03f63e4f06ac3d5b0958345388b23a200080180e6cf8e43ad0c71d9db8c5db2700aeb050157d5a29f8df6c77
+AUX tlsdated.default 114 SHA256 6deea41ebc0aa8c4340c2ffe5e1ede787042bac0ce0964a88c6f388d6b31469c SHA512 f18138f0980f2c02405597eccb03d3031129ca622ebccf80d6090697857853823ae69e06afff65275304d25f6cb31121b93c21575990e5008f0646b28d37bfcd WHIRLPOOL 9781010b39d48bd1c1a261d9569e6b6a5fd1c8f3813a5a64dbc422777cfcb4a7d184dfc5a102d5fd7fa3787df101f159d0ce534d84dce160f055bdd096daf244
+AUX tlsdated.rc 430 SHA256 d2fdce1aa3fb39de3f05116ced1a7adff97d7b2049c009805045a18e2e48ea00 SHA512 d3defb743ff9413d7f3b209590f25914715aa19dd02a39ee03aa1cb51607c83100db1eee5a3fe3ce8b21d334dc02a07ca1656416acec800f7c95d98f69b1fe23 WHIRLPOOL 2725881e3531e38dbd99135db7fca1902e3f97c0f010cc0cbe338c3aa637ae8f50d497fc66c510bb3607ec9c69f835115f6ad003bdc48ba3dce6a96eeca4b206
+AUX tlsdated.tmpfiles.conf 45 SHA256 40ac6b68d24e9c5e91393ed53a974e16cb2b63a30f17a5f145b92330d6edf8fe SHA512 c9b5c682032efb16e8b182aafa5a768a210f04c598ab313fe66fceda9f8d496720d5d9e614a165c90fe82aed8c1327bee2a2706c2185fbe70b348349f9ea7ede WHIRLPOOL 04c415aff92f393bf47da1dd210af22e30ac344091e559760a1be75e8073465aea69a62cca8c43a82c642f035eeb0d2bd738b999165216836fcb2bfcac41472e
+DIST tlsdate-0.0.13.tar.gz 264228 SHA256 482640a5efb8489f287da1018176fb1196adf7cb1b81ac0c7f2b419b43d44258 SHA512 9c4fd51439976a8541fdf1bb70afa5333b43b2e43b801a65b3b1ac3e4a437fd3021ef2aaeeb13fc1ba63ccd119f6eff4c10e3a5a28cf0cfd96bbc7a174dbb789 WHIRLPOOL db91755d4751e64ca6285c9f1492d1b82a06f97921a47168398377818407efe6a0fcb901ef93272f0ff66121893873bb360868207998d054c5a550734b05db06
+EBUILD tlsdate-0.0.13.ebuild 1928 SHA256 3d42a9316d9b58804d51ce07a8dfae94085ac254417a34e427df9b413e470f2e SHA512 7f8dcd5f4c3c351c32a7755ae0402e4b3b72e670d26f429a457eeae9b42ad636ddbb8ef67736a16d7cb77385935d7c34e1ab4557ffda65b59fd53948866eac02 WHIRLPOOL 95445e6d789753391c1f00fc3fd0cfc1b39f135efb08ec0700ae803f7c4b2b4d943370a878f61b574c03ccc5118f5f2ea5fad4719a714b2c5f6baa7a649d44b6
+MISC ChangeLog 4419 SHA256 396afc350ae2c9e8b988715126b0e47aed3e307d1ecf9d3e7dee7c2fe6e03329 SHA512 3511a100ec07fcdcac3c3a8e9ff23060d2844ea387ac2bf2bc7a5110e133e77e8705f5673813be8e694f9060c87a607f542aa8e1f30cb57bdaf430c0e9f9a7c8 WHIRLPOOL 27a937f467c3b59d6f8c7019b5f5aea54b3491a14a44b52dd490a2afe9f5e61b7b804264acefb56e531bb5e2c4edc083a82eb1129f3ca4a3ff7ccbcfa4d97de0
+MISC ChangeLog-2015 3439 SHA256 f5830d31423c1d678db09660eefbb80bf0ad23aef543eb6d996a69397eff9d4a SHA512 22cd87c61ea8c0ddd793df7f44222227543e2a4333aa1f14a69b2d06b5a583d7e1e26bff8aa0ada4edf5d3a8ed191e51f9cb8ae8d2c33ec8f72d5b8882993572 WHIRLPOOL f452d2fb0c3c1803ab5d2795a976117f44d8b3145f7b90ab1d1d59fa0647738f8dcedb549ce2f36af8d729de98ca26fd592fe95a00eea69f868e1da9f4bddaa0
+MISC metadata.xml 350 SHA256 9d4b286f62431d7dc0af14c28a3ff6e6f97616187642c9c0cef22159ec357a1f SHA512 7b8c7b1ac7814de92b04658aaff6e22a146ce6c5b23db7ac49383a97acbce819f0732e317ae55affd6e9f87070d3fffba70434cbe6aa749f8a580803864fcba7 WHIRLPOOL 0ce998ea28a4402900eb712b033b6559ed8840e1da8bff9829f5f7229d112011c41bd2815534141fb95b427f00ddd689ab3d6e41e75f24b7a25ba0891d12db7a
diff --git a/net-misc/tlsdate/files/tlsdate-0.0.13-tlsdated-service.patch b/net-misc/tlsdate/files/tlsdate-0.0.13-tlsdated-service.patch
new file mode 100644
index 000000000000..df03833f7cd5
--- /dev/null
+++ b/net-misc/tlsdate/files/tlsdate-0.0.13-tlsdated-service.patch
@@ -0,0 +1,22 @@
+From: Dominik Kriegner <dominik.kriegner@gmail.com>
+Date: Tue, 26 Jan 2016 12:12:26 +0000
+Subject: [PATCH] Fix systemd unit file
+
+Project-Bug-URL: https://github.com/ioerror/tlsdate/pull/162
+Gentoo-Bug-URL: https://bugs.gentoo.org/533380
+
+--- a/systemd/tlsdated.service
++++ b/systemd/tlsdated.service
+@@ -5,6 +5,9 @@ After=network.target
+ [Service]
+ Type=simple
+ EnvironmentFile=/etc/default/tlsdated
+-ExecStart=/usr/sbin/tlsdated ${DAEMON_OPTS}
+-ExecReload=/bin/kill -HUP ${MAINPID}
+-ExecStop=/bin/kill -INT ${MAINPID}
++ExecStart=/usr/sbin/tlsdated $DAEMON_OPTS
++ExecReload=/bin/kill -HUP $MAINPID
++ExecStop=/bin/kill -INT $MAINPID
++
++[Install]
++WantedBy=multi-user.target
diff --git a/net-misc/tlsdate/files/tlsdate.confd b/net-misc/tlsdate/files/tlsdate.confd
new file mode 100644
index 000000000000..2d7ed030de33
--- /dev/null
+++ b/net-misc/tlsdate/files/tlsdate.confd
@@ -0,0 +1,8 @@
+# config file for /etc/init.d/tlsdate
+
+# Command to execute to set the time.
+# This are some common tlsdate options:
+#  -l: leap (set time regardless of difference)
+#  -H: hostname to sync with
+#  -x: proxy URL
+TLSDATE_OPTS="-l -H www.google.com"
diff --git a/net-misc/tlsdate/files/tlsdate.rc b/net-misc/tlsdate/files/tlsdate.rc
new file mode 100644
index 000000000000..3c5163ac92b5
--- /dev/null
+++ b/net-misc/tlsdate/files/tlsdate.rc
@@ -0,0 +1,16 @@
+#!/sbin/openrc-run
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+description="set time once when started"
+
+depend() {
+	use net
+}
+
+start() {
+	: ${TLSDATE_CMD:=tlsdate}
+	ebegin "Setting clock via tlsdate '${TLSDATE_CMD}'"
+	"${TLSDATE_CMD}" ${TLSDATE_OPTS}
+	eend $? "Failed to set clock"
+}
diff --git a/net-misc/tlsdate/files/tlsdated.confd b/net-misc/tlsdate/files/tlsdated.confd
new file mode 100644
index 000000000000..d257289cc58d
--- /dev/null
+++ b/net-misc/tlsdate/files/tlsdated.confd
@@ -0,0 +1,15 @@
+# config file for /etc/init.d/tlsdated
+
+# Command to execute to set the time.
+# This are some common tlsdate options:
+#  -l: leap (set time regardless of difference)
+#  -H: hostname to sync with
+#  -x: proxy URL
+TLSDATED_CMD="/usr/bin/tlsdate -l -H www.google.com"
+
+# Additional options; see `man tlsdated` for reference.
+TLSDATED_OPTS=""
+
+# Cache dir.  Probably don't need to change this.
+# It matches the compiled-in default.
+TLSDATED_CACHE_DIR="/var/cache/tlsdated"
diff --git a/net-misc/tlsdate/files/tlsdated.default b/net-misc/tlsdate/files/tlsdated.default
new file mode 100644
index 000000000000..08186f75ef31
--- /dev/null
+++ b/net-misc/tlsdate/files/tlsdated.default
@@ -0,0 +1,4 @@
+# defaults file for /etc/default/tlsdated
+
+# Additional options; see `man tlsdated` for reference.
+DEAMON_OPTS=""
diff --git a/net-misc/tlsdate/files/tlsdated.rc b/net-misc/tlsdate/files/tlsdated.rc
new file mode 100644
index 000000000000..d0814c874b4e
--- /dev/null
+++ b/net-misc/tlsdate/files/tlsdated.rc
@@ -0,0 +1,18 @@
+#!/sbin/openrc-run
+# Copyright 1999-2014 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+description="start a daemon to continuously set time via a helper"
+
+command="tlsdated"
+command_args="${TLSDATED_OPTS} -- ${TLSDATED_CMD}"
+command_background="true"
+pidfile="/var/run/${SVCNAME}.pid"
+
+depend() {
+	use net
+}
+
+start_pre() {
+	checkpath -d -m 0700 -o tlsdate:tlsdate "${TLSDATED_CACHE_DIR}"
+}
diff --git a/net-misc/tlsdate/files/tlsdated.tmpfiles.conf b/net-misc/tlsdate/files/tlsdated.tmpfiles.conf
new file mode 100644
index 000000000000..07a7966cc873
--- /dev/null
+++ b/net-misc/tlsdate/files/tlsdated.tmpfiles.conf
@@ -0,0 +1 @@
+d /var/cache/tlsdated 0700 tlsdate tlsdate -
diff --git a/net-misc/tlsdate/metadata.xml b/net-misc/tlsdate/metadata.xml
new file mode 100644
index 000000000000..82f04441d92c
--- /dev/null
+++ b/net-misc/tlsdate/metadata.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<maintainer type="person">
+		<email>vapier@gentoo.org</email>
+		<description>feel free to fix things</description>
+	</maintainer>
+	<upstream>
+		<remote-id type="github">ioerror/tlsdate</remote-id>
+	</upstream>
+</pkgmetadata>
diff --git a/net-misc/tlsdate/tlsdate-0.0.13.ebuild b/net-misc/tlsdate/tlsdate-0.0.13.ebuild
new file mode 100644
index 000000000000..135c195e304e
--- /dev/null
+++ b/net-misc/tlsdate/tlsdate-0.0.13.ebuild
@@ -0,0 +1,76 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=6
+
+inherit autotools eutils systemd vcs-snapshot user
+
+DESCRIPTION="Update local time over HTTPS"
+HOMEPAGE="https://github.com/ioerror/tlsdate"
+SRC_URI="https://github.com/ioerror/tlsdate/tarball/${P} -> ${P}.tar.gz"
+
+LICENSE="BSD"
+SLOT="0"
+KEYWORDS="amd64 arm arm64 hppa ia64 m68k ~mips s390 sh sparc x86"
+IUSE="dbus +seccomp static-libs"
+
+DEPEND="dev-libs/openssl:0=
+	dev-libs/libevent:=
+	dbus? ( sys-apps/dbus )"
+RDEPEND="${DEPEND}"
+
+PATCHES=(
+	"${FILESDIR}"/${P}-tlsdated-service.patch
+)
+
+src_prepare() {
+	# Use the system cert store rather than a custom one specific
+	# to the tlsdate package. #534394
+	sed -i \
+		-e 's:/tlsdate/ca-roots/tlsdate-ca-roots.conf:/ssl/certs/ca-certificates.crt:' \
+		Makefile.am || die
+
+	default
+
+	eautoreconf
+}
+
+src_configure() {
+	econf \
+		--disable-silent-rules \
+		$(use_enable dbus) \
+		$(use_enable seccomp seccomp-filter) \
+		--disable-hardened-checks \
+		--without-polarssl \
+		--with-unpriv-user=tlsdate \
+		--with-unpriv-group=tlsdate
+}
+
+src_install() {
+	default
+
+	# Use the system cert store; see src_prepare. #446426 #534394
+	rm "${ED}"/etc/tlsdate/ca-roots/tlsdate-ca-roots.conf || die
+	rmdir "${ED}"/etc/tlsdate/ca-roots || die
+
+	newinitd "${FILESDIR}"/tlsdated.rc tlsdated
+	newconfd "${FILESDIR}"/tlsdated.confd tlsdated
+	newinitd "${FILESDIR}"/tlsdate.rc tlsdate
+	newconfd "${FILESDIR}"/tlsdate.confd tlsdate
+
+	systemd_newunit "${S}"/systemd/tlsdated.service tlsdated.service
+	systemd_newtmpfilesd "${FILESDIR}"/tlsdated.tmpfiles.conf tlsdated.conf
+	insinto /etc/default
+	newins "${FILESDIR}"/tlsdated.default tlsdated
+
+	insinto /etc/dbus-1/system.d/
+	doins dbus/org.torproject.tlsdate.conf
+
+	use static-libs || \
+		find "${ED}"/usr '(' -name '*.la' -o -name '*.a' ')' -delete
+}
+
+pkg_preinst() {
+	enewgroup tlsdate 124
+	enewuser tlsdate 124 -1 /dev/null tlsdate
+}