gentoo auto-resync : 03:01:2025 - 06:31:16

3 files changed, 84 insertions, 0 deletions

diff --git a/app-crypt/dehydrated/Manifest b/app-crypt/dehydrated/Manifest
index f782104c04bb..9232deeaf0ac 100644
--- a/app-crypt/dehydrated/Manifest
+++ b/app-crypt/dehydrated/Manifest
@@ -2,9 +2,11 @@ AUX 00_gentoo.sh 115 BLAKE2B f24fe757e45d9af58adb9417ef6dbd36c5db85bdc50af140304
 AUX 00_gentoo.sh-r1 153 BLAKE2B b424d130079704b69af2395e32740be8cb4e8befded6d721156fbbe6a964243dc2fd4438ad00e81ca3fc4ba03cfcb7766fc36390fd81a7dfc899614a3ddc513c SHA512 26e2ffd0e9baf4f049239b604d520afb93d7450cf79d8a8f61bf757453aecbd14066908970fa01093aa2eb70f76b7e4f95a115e774bf6a7623e9bcc827ec85f0
 AUX cron-r1 72 BLAKE2B dcdbf92a1c0bc66684df095c4bff4e2688550e89368af18d6e84732e3f8e8d62d0ddc3ee1a231122a2758d94d72e1c5e41d4fdde5f5287332b7f8f34b0b18d39 SHA512 bb81518b8de629340dc00e4f4d0b73eba7f322aa9e7f7b8d43ab653991dffa8e417ad058522b49b9bbcb5e8a92359f6d27175893a00134ba90729069b26d54b1
 AUX dehydrated-0.7.0-fix-CN-extraction-for-older-openssl-versions.patch 1179 BLAKE2B d4925675e868e24e2bd38aa0444e9b934e351fb706be5b66e71315d213186719260c20ebb976c160b1458eed1f14416ed6d27dad79a6b39b08cca50285802cb9 SHA512 2f18fa75ea6674b9b8746645395317046012f01032e35736580d87ac9a410ec4641e81c5f307d31bb238a53886b30820cde778bf83e3d04083ae1b6323777307
+AUX dehydrated-0.7.1-openssl-stdout.patch 560 BLAKE2B f3961940dc89eb8f0e8e1403d59ef34e208bc84a433006b56d448398850f55ad2a1f1260ea493cce7878822a5708bc07f39f06214a22ab529ed3d378155f36b5 SHA512 24744d9ce82416dc3a7548dddd4f009d47b04ec85a9a8ec3be98ddc6d170761ef3694cb37e2be6fc053d9ec6b0df46a9fc135f0b25cf63aeca50c5d020856a86
 DIST dehydrated-0.7.0.tar.gz 86574 BLAKE2B 35a3b0b7592126ca65003a6c9eb8934a76584710d028057e5add7f77bb2fa3799e89a060306da3b98a62d291229a2a78f23e0f95f19e033796aee31e97b94488 SHA512 47740d2d31ca73482a4fc5ed0dfce986af907dd5449cb3a5230bf9683845686c8122fc32e6219a4439574ef11d6fb104ee09591c5ff667927a2c9c13ba005511
 DIST dehydrated-0.7.1.tar.gz 119992 BLAKE2B 0b287537206936ceff33bde8bbb8ab7b13f28bf58cd29c898348db0cf5a83157fed4535da218ac48a810a93b99474e96334a27c062c157e2f164b0e516b47111 SHA512 b7ac078d6034e784f3f485e8ce56b5fa2f1e2a3b5ef014d260046b5f1d5cbd99727501e95a9530d0d1b2f300003d3fa5bf7e7f532092041597236d92fbeb0f3c
 DIST dehydrated-0.7.1.tar.gz.asc 488 BLAKE2B 0dd678976f897e8684695bce1742e498bcbec0f78781a53dae7f715a1a379f85eba3531c0f3181dcab9bd7005f086e82889dad6d26f7d2075c877eef3d653acf SHA512 f03872b7e087b3f719a76aaebd46f017f47595feb03a29f5fcbe33796655cdcd0a34580ae34a85e3280c8305a2fe2ada47e4436bfbec294b7dbf67768df86394
 EBUILD dehydrated-0.7.0-r1.ebuild 1280 BLAKE2B 0783eab859934b0de7a88301c568103d952e78e094d7504c3f3cd67d514f667245790117154eb8067319d61b6f481302e558ca7ea1d813e1f8cb4cbc9afb4975 SHA512 8f977733f22a3f56505670205fa892bd07e01bbc22b51470429f8ee5fc71b1a285a5e2fa829d20b6323aa31f537dd4de8bca264492c52731b6580a2e6b11dc80
+EBUILD dehydrated-0.7.1-r1.ebuild 1563 BLAKE2B 81eb869977977f2952b214aa94d07e35b4e9acc8cc26adec79fc143eb5b30417beab1ea59bbe5e5d4f8a0fda0b956630355aa66c4fc96f250336babc91ad7e1e SHA512 eb766b25fd8193c83616a82b7b3d0cd4965b200fa975eea64577ea81dfa7d632e13d9b24174793aa4eccca01f25cf52f954ad4793e52aa26130830f667152ad6
 EBUILD dehydrated-0.7.1.ebuild 1506 BLAKE2B a6bbf29f4a72b407997ee0e1468de0f654f557a467e443b8fb61a542d3cf6aa74d540bd04500b623ff58eabe3d2eabe1a1f4ba8ebf7d68faf5710edd0ccc8fba SHA512 15182f425dc1dbe4bb69da765502558abcfdc148103ba4b6b2a9be322a34caeb31da985c29c470a0ffacfb9586d517705013c9f70231cb3b8d36be376f5a3874
 MISC metadata.xml 444 BLAKE2B 05cdd8b05987524fd177cb35227291039e57b4272498ecadabb6f0497d4695e752eb68f764790504d79e1b3e5b9e63fd24af331df161fdad41e130ea168be317 SHA512 e265142fd3a2a11ccadc497e1dc400d81e2b3f04c0f42c5fb9f00c1b2c1cd298f917b5185a3fd0aac2a608a1905984f31fbf2ab52b25b20258f5324fd5aa3d24
diff --git a/app-crypt/dehydrated/dehydrated-0.7.1-r1.ebuild b/app-crypt/dehydrated/dehydrated-0.7.1-r1.ebuild
new file mode 100644
index 000000000000..db7d63245d29
--- /dev/null
+++ b/app-crypt/dehydrated/dehydrated-0.7.1-r1.ebuild
@@ -0,0 +1,63 @@
+# Copyright 1999-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="8"
+
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/dehydrated.asc
+
+inherit verify-sig
+
+DESCRIPTION="A client for signing certificates with an ACME-server"
+HOMEPAGE="https://dehydrated.io/"
+SRC_URI="
+	https://github.com/dehydrated-io/${PN}/releases/download/v${PV}/${P}.tar.gz
+	verify-sig? ( https://github.com/dehydrated-io/${PN}/releases/download/v${PV}/${P}.tar.gz.asc )
+"
+
+LICENSE="MIT"
+SLOT="0"
+KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~riscv ~x86"
+IUSE="+cron"
+
+BDEPEND="verify-sig? ( sec-keys/openpgp-keys-dehydrated )"
+RDEPEND="acct-group/dehydrated
+	acct-user/dehydrated
+	app-shells/bash
+	net-misc/curl
+	cron? ( virtual/cron )"
+
+PATCHES=( "${FILESDIR}"/${P}-openssl-stdout.patch )
+
+src_configure() {
+	default
+	sed -i  's,^#CONFIG_D=.*,CONFIG_D="/etc/dehydrated/config.d",' docs/examples/config \
+		|| die "could not set config (CONFIG_D)"
+}
+
+src_install() {
+	dobin ${PN}
+	insinto /etc/${PN}
+	doins docs/examples/{config,domains.txt,hook.sh}
+	fperms u+x /etc/${PN}/hook.sh
+	dodoc docs/*.md
+
+	insinto /etc/${PN}/config.d
+	newins "${FILESDIR}"/00_gentoo.sh-r1 00_gentoo.sh
+
+	keepdir /etc/${PN}/domains.d
+
+	doman  docs/man/dehydrated.1
+
+	if use cron ; then
+		insinto /etc/cron.d
+		newins "${FILESDIR}"/cron-r1 ${PN}
+	fi
+}
+
+pkg_postinst() {
+	if [[ -z "${REPLACING_VERSIONS}" ]] ; then
+		einfo "See /etc/dehydrated/config for configuration."
+
+		use cron && einfo "After finishing setup you should enable the cronjob in /etc/cron.d/dehydrated."
+	fi
+}
diff --git a/app-crypt/dehydrated/files/dehydrated-0.7.1-openssl-stdout.patch b/app-crypt/dehydrated/files/dehydrated-0.7.1-openssl-stdout.patch
new file mode 100644
index 000000000000..16e8271d4678
--- /dev/null
+++ b/app-crypt/dehydrated/files/dehydrated-0.7.1-openssl-stdout.patch
@@ -0,0 +1,19 @@
+https://bugs.gentoo.org/942637
+
+commit 4fd777e87e589652b1127b79ac6688ed7cb151fe
+Author: Wilfried Teiken <wteiken@teiken.org>
+Date:   Sun Dec 3 15:07:01 2023 -0500
+
+    Ignore output of 'openssl req -verify'.
+
+--- a/dehydrated
++++ b/dehydrated
+@@ -1011,7 +1011,7 @@ signed_request() {
+ extract_altnames() {
+   csr="${1}" # the CSR itself (not a file)
+ 
+-  if ! <<<"${csr}" "${OPENSSL}" req -verify -noout 2>/dev/null; then
++  if ! <<<"${csr}" "${OPENSSL}" req -verify -noout >/dev/null 2>&1; then
+     _exiterr "Certificate signing request isn't valid"
+   fi
+