Attachment #234464 for bug #264475




# Created by Bruno Damour <bruno@ruomad.net>
#

PORTNAME=		openca-ocspd
DISTVERSION=		3.1.3
DISTVERSIONPREFIX=	v
CATEGORIES=		security
DISTNAME=		openca-ocspd-3.1.3

MAINTAINER=		bruno@ruomad.net
COMMENT=		OpenCA OCSP responder

LICENSE=		APACHE20

LIB_DEPENDS=		libpki.so:security/libpki \
			libxml2.so:textproc/libxml2

USES=			ssl autoreconf libtool shebangfix
USE_GITHUB=		yes
GH_ACCOUNT=		openca
#GH_TAGNAME=             v3.1.1-81-g99b7613
SHEBANG_FILES=		etc/ocspd.in scripts/ocspd-genreq.sh.in test/test.sh

# Add a rc script to start the OCSP daemon
USE_RC_SUBR=		ocspd

# Provided patches fix :
#  - src/global-vars.in to add localrootdir (new autoconf versions)
#  - configure.ac to detect the presence of socket.h :
#    hence the need to autoreconf
PATCH_STRIP=		-p0

GNU_CONFIGURE=		yes
CONFIGURE_ARGS=		--with-libpki-prefix=${PREFIX}

# Rename installed configuration files to samples
post-stage:
	for f in $$(find ${STAGEDIR}${PREFIX}/etc/ocspd -type f); do \
		${MV} $$f $$f.sample; \
	done

.include <bsd.port.mk>

Added Link Here

(-)b/security/openca-ocspd/distinfo (+3 lines)
1	TIMESTAMP = 1654414248
2	SHA256 (openca-openca-ocspd-v3.1.3_GH0.tar.gz) = 59a0054bee22ba72b23263ead6a8458e2086f1996111608a2a2aafbd9e30f591
3	SIZE (openca-openca-ocspd-v3.1.3_GH0.tar.gz) = 592190




#!/bin/sh

# PROVIDE: ocspd
# REQUIRE: NETWORK

. /etc/rc.subr

name=ocspd
rcvar=ocspd_enable

pidfile="/var/run/${name}.pid"

command="%%PREFIX%%/sbin/ocspd"
command_args="-c %%PREFIX%%/etc/ocspd/ocspd.xml -d -v"

load_rc_config ${name}
: ${ocspd_enable:=no}
: ${ocspd_msg="Nothing started."}


run_rc_command "$1"

Added Link Here

(-)b/security/openca-ocspd/files/patch-configure.ac (+11 lines)
1	--- configure.ac.orig 2020-01-08 20:28:11.000000000 +0100
2	+++ configure.ac 2021-08-25 14:58:50.324390000 +0200
3	@@ -147,7 +147,7 @@
4	dnl Checks for programs.
5	dnl AC_CONFIG_HEADERS
6	AC_STDC_HEADERS
7	-AC_HAVE_HEADERS(string.h stdio.h stdlib.h fcntl.h sys/file.h sys/param.h sys/sem.h sys/ipc.h)
8	+AC_HAVE_HEADERS(string.h stdio.h stdlib.h fcntl.h sys/file.h sys/param.h sys/sem.h sys/ipc.h sys/socket.h)
9
10	AC_CONFIG_HEADERS(src/ocspd/includes/config.h)
11

Added Link Here

(-)b/security/openca-ocspd/files/patch-global-vars.in (+10 lines)
1	--- src/global-vars.in.orig 2020-01-08 19:28:11 UTC
2	+++ src/global-vars.in
3	@@ -12,6 +12,7 @@ doc_prefix = $(DESTDIR)${datadir}/openca-prqpd
4	DEST_SBINDIR = $(DESTDIR)@sbindir@
5	DEST_BINDIR = $(DESTDIR)@bindir@
6	DEST_LIBDIR = $(DESTDIR)@libdir@
7	+DEST_DATADIR = @datarootdir@
8	DEST_DATADIR = @datadir@
9	DEST_INFODIR = @infodir@
10	DEST_MANDIR = @mandir@

Added Link Here

(-)b/security/openca-ocspd/files/patch-includes_general.h (+11 lines)
1	--- src/ocspd/includes/general.h.orig 2020-01-08 19:28:11 UTC
2	+++ src/ocspd/includes/general.h
3	@@ -15,6 +15,8 @@
4	# define ATTRIBUTE_NO_SANITIZE_ADDRESS
5	#endif
6
7	+#include "config.h"
8	+
9	#include <libpki/pki.h>
10	#include <libpki/libpkiv.h>
11

Added Link Here

(-)b/security/openca-ocspd/pkg-descr (+6 lines)
1	OpenCA OCSP Responder is an rfc2560 compliant OCSPD responder.
2	The server is a stand-alone application and can be integrated into many different PKI solutions
3	as it does not depend on specific database scheme.
4	Furthermore it can be used as a responder for multiple CAs.
5
6	WWW: https://www.openca.org/projects/ocspd




bin/ocspd-genreq.sh
@comment bin/test.sh
@comment etc/init.d/ocspd
etc/ocspd/ocspd.xml.sample
etc/ocspd/pki/token.d/etoken.xml.sample
etc/ocspd/pki/token.d/software.xml.sample
etc/ocspd/pki/token.d/eracom.xml.sample
etc/ocspd/ca.d/collegeca.xml.sample
etc/ocspd/ca.d/self-certs.xml.sample
libdata/pkgconfig/openca-ocspd.pc
sbin/ocspd
share/man/man3/ocspd.3.gz
share/man/man3/ocspd.conf.3.gz
@dir etc/ocspd/ca.d
@dir etc/ocspd/certs
@dir etc/ocspd/crls
@dir etc/ocspd/pki/hsm.d
@dir etc/ocspd/pki/profile.d
@dir etc/ocspd/private
@dir var/run

Return to bug 264475

Added Link Here

(-)b/security/openca-ocspd/Makefile (+42 lines)
1	# Created by Bruno Damour <bruno@ruomad.net>
2	#
3
4	PORTNAME= openca-ocspd
5	DISTVERSION= 3.1.3
6	DISTVERSIONPREFIX= v
7	CATEGORIES= security
8	DISTNAME= openca-ocspd-3.1.3
9
10	MAINTAINER= bruno@ruomad.net
11	COMMENT= OpenCA OCSP responder
12
13	LICENSE= APACHE20
14
15	LIB_DEPENDS= libpki.so:security/libpki \
16	libxml2.so:textproc/libxml2
17
18	USES= ssl autoreconf libtool shebangfix
19	USE_GITHUB= yes
20	GH_ACCOUNT= openca
21	#GH_TAGNAME= v3.1.1-81-g99b7613
22	SHEBANG_FILES= etc/ocspd.in scripts/ocspd-genreq.sh.in test/test.sh
23
24	# Add a rc script to start the OCSP daemon
25	USE_RC_SUBR= ocspd
26
27	# Provided patches fix :
28	# - src/global-vars.in to add localrootdir (new autoconf versions)
29	# - configure.ac to detect the presence of socket.h :
30	# hence the need to autoreconf
31	PATCH_STRIP= -p0
32
33	GNU_CONFIGURE= yes
34	CONFIGURE_ARGS= --with-libpki-prefix=${PREFIX}
35
36	# Rename installed configuration files to samples
37	post-stage:
38	for f in $$(find ${STAGEDIR}${PREFIX}/etc/ocspd -type f); do \
39	${MV} $$f $$f.sample; \
40	done
41
42	.include <bsd.port.mk>

Added Link Here

(-)b/security/openca-ocspd/files/ocspd.in (+21 lines)
1	#!/bin/sh
2
3	# PROVIDE: ocspd
4	# REQUIRE: NETWORK
5
6	. /etc/rc.subr
7
8	name=ocspd
9	rcvar=ocspd_enable
10
11	pidfile="/var/run/${name}.pid"
12
13	command="%%PREFIX%%/sbin/ocspd"
14	command_args="-c %%PREFIX%%/etc/ocspd/ocspd.xml -d -v"
15
16	load_rc_config ${name}
17	: ${ocspd_enable:=no}
18	: ${ocspd_msg="Nothing started."}
19
20
21	run_rc_command "$1"

Added Link Here

(-)b/security/openca-ocspd/pkg-plist (-1 / +20 lines)
0	-	1	bin/ocspd-genreq.sh
		2	@comment bin/test.sh
		3	@comment etc/init.d/ocspd
		4	etc/ocspd/ocspd.xml.sample
		5	etc/ocspd/pki/token.d/etoken.xml.sample
		6	etc/ocspd/pki/token.d/software.xml.sample
		7	etc/ocspd/pki/token.d/eracom.xml.sample
		8	etc/ocspd/ca.d/collegeca.xml.sample
		9	etc/ocspd/ca.d/self-certs.xml.sample
		10	libdata/pkgconfig/openca-ocspd.pc
		11	sbin/ocspd
		12	share/man/man3/ocspd.3.gz
		13	share/man/man3/ocspd.conf.3.gz
		14	@dir etc/ocspd/ca.d
		15	@dir etc/ocspd/certs
		16	@dir etc/ocspd/crls
		17	@dir etc/ocspd/pki/hsm.d
		18	@dir etc/ocspd/pki/profile.d
		19	@dir etc/ocspd/private
		20	@dir var/run