initial ebuild of dnssec root key

Package-Manager: portage-2.2.0_alpha3/cvs/Linux i686

5 files changed, 119 insertions, 0 deletions

diff --git a/net-dns/dnssec-root/ChangeLog b/net-dns/dnssec-root/ChangeLog
new file mode 100644
index 000000000000..61b28263743b
--- /dev/null
+++ b/net-dns/dnssec-root/ChangeLog
@@ -0,0 +1,10 @@
+# ChangeLog for net-dns/dnssec-root
+# Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/net-dns/dnssec-root/ChangeLog,v 1.1 2010/11/30 08:53:15 dragonheart Exp $
+
+*dnssec-root-20100715 (30 Nov 2010)
+
+  30 Nov 2010; Daniel Black <dragonheart@gentoo.org> +files/anchors2ds.xsl,
+  +dnssec-root-20100715.ebuild, +metadata.xml:
+  initial ebuild
+
diff --git a/net-dns/dnssec-root/Manifest b/net-dns/dnssec-root/Manifest
new file mode 100644
index 000000000000..31fc17e21ef3
--- /dev/null
+++ b/net-dns/dnssec-root/Manifest
@@ -0,0 +1,11 @@
+AUX anchors2ds.xsl 855 RMD160 b74ca78af0965231f9cfc679a8c84af8b2850116 SHA1 b8cc77e30d64d25f9c74f4dd3eead9481c6a81ba SHA256 2cc436e29e5bfd39c055390045a4c14dfae517ebdad79002983756a508a15e8f
+DIST Kjqmt7v.crt 974 RMD160 6f38900b9ea714ecf1ba782a0e0c1c8c36eaf5c8 SHA1 1521d2d6046e8858b6e7bad0a03f524abfa81cb1 SHA256 ad068d18531618a9f1d0b68ffd84c87fbb5b8c2aea0288122a2eae8ad1190c2f
+DIST Kjqmt7v.csr 765 RMD160 625ff9970265ca3826174fd93a6360f0355b361c SHA1 ccd189083713572119635047e3d78ae9a2d9d307 SHA256 401120c1721ba100b2d9abf2d01332399535ba0f9c71dbd9f97232c5ebd608d2
+DIST icann.pgp 2097 RMD160 d90a96eefa2eab21c207966931e98624c28d3e8d SHA1 c44ac1ef27f6b3070283c71c63e9567f7be4e946 SHA256 aaa2c7f6230c49b94af57931cfdd2452d24245b917a27110b28e952975b8c5be
+DIST icannbundle.pem 17699 RMD160 fa11240c2aa2f2cdd2665ebc0ff85ec1dd7f5d17 SHA1 4c4de880ff9f06e70f72cf66121ecc0849cbd1f5 SHA256 c4a91c4bea6763f4ef05ca92bf74fb41d5583594c04aa999c90a55d710a3e5da
+DIST root-anchors.asc 189 RMD160 a467cbf2ce416aeb8795e9d992a39052bc0a8e01 SHA1 9a9fe64e4ef587f4413c1e0ab7655e532de9070f SHA256 5bffcac53f810c5fb1e1baf543e2de2f10ec99d7f7cddb5f1e47b1e58cf34cfa
+DIST root-anchors.p7s 5001 RMD160 e2f50f735f5c41be7fa368916e324ef3f071022f SHA1 5e7a74700015caaed59a2cc09f5daf15f24d5c18 SHA256 62eba1622ebf8f87b3125f4f9e686cefd952f805696cab0fc24c96eccd7c6f49
+DIST root-anchors.xml 418 RMD160 db8d7aebe343f26e89ef8cfb3bf5b9f1bcb41ecf SHA1 9bb81768fb3095584096999693418fcdb13d7b9c SHA256 dfb281b771dc854c18d1cff9d2eecaf184cf7a9668606aaa33e8f01bf4b4d8e4
+EBUILD dnssec-root-20100715.ebuild 1675 RMD160 07cc7b5f354f0669b32df265944af638e13527d3 SHA1 5ef013718fbb4f2484d5d51c7bb3e5a0334344fb SHA256 685e729b77ff31eca975804582f729b2ec18541a93e819868bf59972312d28fd
+MISC ChangeLog 394 RMD160 caf0ac1222f06f1a1dcdd77d525d8b835781f0ec SHA1 47a2a3c45a12db7af387ca5e9b28f6e9226c223a SHA256 af6b3e7e0012af4c993c2790c2952bb1c27c5268abadf214c96d606d26ca8ee5
+MISC metadata.xml 454 RMD160 b02aef24648058fc233fa225800f3c74d579380c SHA1 b55d748e2805753d1a117784d329dcde26000846 SHA256 7a3320025dd2625f744e89bfa8e620cff5fefc7e311bfc011363ab00780d203b
diff --git a/net-dns/dnssec-root/dnssec-root-20100715.ebuild b/net-dns/dnssec-root/dnssec-root-20100715.ebuild
new file mode 100644
index 000000000000..387821dab222
--- /dev/null
+++ b/net-dns/dnssec-root/dnssec-root-20100715.ebuild
@@ -0,0 +1,54 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-dns/dnssec-root/dnssec-root-20100715.ebuild,v 1.1 2010/11/30 08:53:15 dragonheart Exp $
+
+DESCRIPTION="The DNSSEC root key(s)"
+HOMEPAGE="https://www.iana.org/dnssec/"
+SRC_URI="http://data.iana.org/root-anchors/root-anchors.xml
+		http://data.iana.org/root-anchors/Kjqmt7v.csr
+		test? ( http://data.iana.org/root-anchors/Kjqmt7v.crt
+				http://data.iana.org/root-anchors/root-anchors.p7s
+				http://data.iana.org/root-anchors/root-anchors.asc
+				http://data.iana.org/root-anchors/icannbundle.pem
+				http://data.iana.org/root-anchors/icann.pgp
+				)"
+
+LICENSE="public-domain"
+SLOT="0"
+KEYWORDS="~x86 ~amd64"
+
+IUSE="test"
+
+DEPEND="dev-libs/libxslt
+		test? ( app-crypt/gnupg )"
+RDEPEND=""
+
+S="${WORKDIR}"
+
+
+# xsl and checking as per:
+# http://permalink.gmane.org/gmane.network.dns.unbound.user/1039
+
+src_unpack() {
+	einfo 'unpack not needed'	
+}
+
+src_compile() {
+	xsltproc -o "${S}"/root-anchors.txt "${FILESDIR}"/anchors2ds.xsl "${DISTDIR}"/root-anchors.xml || die 'xsl translation failed'
+}
+
+src_test()
+{
+	gpg --import "${DISTDIR}"/icann.pgp || die 'icann key import failed'
+	gpg --verify "${DISTDIR}"/root-anchors.asc "${DISTDIR}"/root-anchors.xml || \
+		die 'gpg verification of the root key failed'
+	openssl smime  -verify -content "${DISTDIR}"/root-anchors.xml \
+		-in "${DISTDIR}"/root-anchors.p7s -inform der \
+		-CAfile "${DISTDIR}"/icannbundle.pem \
+		|| die 'smime verification of the root key failed'
+}
+
+src_install() {
+	insinto /etc/dnssec
+	doins root-anchors.txt "${DISTDIR}"/root-anchors.xml "${DISTDIR}"/Kjqmt7v.csr
+}
diff --git a/net-dns/dnssec-root/files/anchors2ds.xsl b/net-dns/dnssec-root/files/anchors2ds.xsl
new file mode 100644
index 000000000000..3df47e20759d
--- /dev/null
+++ b/net-dns/dnssec-root/files/anchors2ds.xsl
@@ -0,0 +1,32 @@
+<?xml version="1.0"?>
+
+<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0">
+  <xsl:output method="text"/>
+
+  <xsl:template match="/">
+     <xsl:apply-templates/>
+  </xsl:template>
+
+  <xsl:template match="/TrustAnchor">
+     <xsl:apply-templates select="Zone"/>
+     <xsl:apply-templates select="KeyDigest"/>
+     <xsl:text>
+</xsl:text>
+  </xsl:template>
+
+  <xsl:template match="KeyDigest">
+     <xsl:apply-templates select="KeyTag"/>
+     <xsl:apply-templates select="Algorithm"/>
+     <xsl:apply-templates select="DigestType"/>
+     <xsl:apply-templates select="Digest"/>
+  </xsl:template>
+
+  <xsl:template match="Zone">
+     <xsl:value-of select="text()"/><xsl:text> IN DS </xsl:text>
+  </xsl:template>
+
+  <xsl:template match="*">
+     <xsl:value-of select="text()"/><xsl:text> </xsl:text>
+  </xsl:template>
+
+</xsl:stylesheet>
\ No newline at end of file
diff --git a/net-dns/dnssec-root/metadata.xml b/net-dns/dnssec-root/metadata.xml
new file mode 100644
index 000000000000..5ff1f9c24385
--- /dev/null
+++ b/net-dns/dnssec-root/metadata.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+<herd>no-herd</herd>
+<maintainer>
+  <email>dragonheart@gentoo.org</email>
+    <name>Daniel Black</name>
+    <description>A package I felt obliged to include. Please bump/correct if you see the need. 
+</description>
+</maintainer>
+<longdescription>This package distributes the ICANN DNSSEC root key</longdescription>
+</pkgmetadata>