From 2d1e7f17161c3195ff6e64fde943c6bc90d12e44 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Sat, 25 Oct 2025 16:26:18 +0200 Subject: [PATCH] libnet-dns-sec-perl: upgrade 1.10 -> 1.26 Also fix ptests. Changelog: 1.26: -Avoid test failure on RedHat by requiring DSA-SHA1 opt-in. -Fix: Rocky linux 9: libcrypto error 1.25: -Suppress AUTOLOAD for Net::DNS::SEC::Private::_index. -Abandon support for OpenSSL pre-1.1.1 API. -Fix: Tests exhibiting signatures with SHA-1 fail since Fedora 41 -Fix: Net::DNS minimum version dependency 1.24: -Eliminate deprecated RSA CRT parameter names. -Add support for SM3 digest. 1.23: -Code refactoring of XS component. 1.22: -Enable Ed25519 sign/verify for BoringSSL & LibreSSL. -Use EC curve names instead of literal NIDs. -Circumvent sign/verify test failures on EBCDIC platforms. -Fix: openssl-SNAP-20230831 breaks RSA sign/verify 1.21: -Add new t/TestToolkit.pm -Rework pre-installation test scripts. - Fix: libressl-3.7.1 breaks DSA verify 1.20: -Improve Net::DNS::SEC::Keyset tests and error reporting. -Avoid test failures if/when DSA|MD5|SHA1 become unsupported. 1.19: -Discontinue support for obsolete ECC-GOST. -Add LICENSE file to comply with Fedora/RedHat announcement and WARNING of restrictions on use of strong cryptography. 1.18: -Eliminate bareword filehandle usage. -Eliminate indirect object syntax. -Eliminate grep/map . 1.17: -Recognise BIND private key accessed via symbolic link. 1.16: -Improve testing of verify() functions. -Rework code in Digest.pm -SEC.xs code reduction. 1.15: -Provide access to OpenSSL message digest implementations. 1.14: -Improve exception capture in test scripts. -Support more efficient algorithm mapping in Net::DNS. 1.13: -Tweaks to resolve compilation errors with BoringSSL. 1.12: -Avoid use of EC_POINT_set_affine_coordinates_GFp which is deprecated in OpenSSL 3.0.0 -Reduce level of support for OpenSSL non-LTS releases. 1.11: -Explain why compilation aborted in Net::DNS::SEC::DSA et al. -Fix Makefile.PL to suppress parallel test execution. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj --- .../include/ptest-packagelists-meta-perl.inc | 2 +- .../libnet/libnet-dns-sec-perl_1.10.bb | 30 ------------ .../libnet/libnet-dns-sec-perl_1.26.bb | 46 +++++++++++++++++++ 3 files changed, 47 insertions(+), 31 deletions(-) delete mode 100644 meta-perl/recipes-perl/libnet/libnet-dns-sec-perl_1.10.bb create mode 100644 meta-perl/recipes-perl/libnet/libnet-dns-sec-perl_1.26.bb diff --git a/meta-perl/conf/include/ptest-packagelists-meta-perl.inc b/meta-perl/conf/include/ptest-packagelists-meta-perl.inc index 612754635b..fc32c709bc 100644 --- a/meta-perl/conf/include/ptest-packagelists-meta-perl.inc +++ b/meta-perl/conf/include/ptest-packagelists-meta-perl.inc @@ -26,6 +26,7 @@ PTESTS_FAST_META_PERL = "\ libmime-types-perl \ libmozilla-ca-perl \ libnet-dns-perl \ + libnet-dns-sec-perl \ libnet-ldap-perl \ libnet-ssleay-perl \ libstrictures-perl \ @@ -48,7 +49,6 @@ PTESTS_PROBLEMS_META_PERL = "\ libconfig-autoconf-perl \ libhtml-parser-perl \ libmodule-build-tiny-perl \ - libnet-dns-sec-perl \ libunix-statgrab \ libxml-libxml-perl \ " diff --git a/meta-perl/recipes-perl/libnet/libnet-dns-sec-perl_1.10.bb b/meta-perl/recipes-perl/libnet/libnet-dns-sec-perl_1.10.bb deleted file mode 100644 index ee365f9328..0000000000 --- a/meta-perl/recipes-perl/libnet/libnet-dns-sec-perl_1.10.bb +++ /dev/null @@ -1,30 +0,0 @@ -DESCRIPTION = "DNSSEC extensions to Net::DNS" -HOMEPAGE = "http://www.net-dns.org/" -SECTION = "libs" - -LICENSE = "MIT" -LIC_FILES_CHKSUM = "file://README;beginline=165;endline=192;md5=6ef523fa09e8c272675839e21de16bde" - -SRC_URI = "${CPAN_MIRROR}/authors/id/W/WI/WILLEM/Net-DNS-SEC-${PV}.tar.gz" -SRC_URI[sha256sum] = "37a47d4def72d7338f3cc7cd807ec19bd9e2ae638ae656fa536cf0314801989e" - -DEPENDS += "openssl" - -UPSTREAM_CHECK_REGEX = "Net\-DNS\-SEC\-(?P(\d+\.\d+))(?!_\d+).tar" - -S = "${UNPACKDIR}/Net-DNS-SEC-${PV}" - -EXTRA_CPANFLAGS = "INC='-I${STAGING_INCDIR}' LIBS='-L${STAGING_LIBDIR} -lssl -L${STAGING_BASELIBDIR} -lcrypto'" - -inherit cpan ptest-perl - -RDEPENDS:${PN} = " \ - libnet-dns-perl \ - libcrypto \ - perl-module-dynaloader \ - perl-module-file-find \ - perl-module-file-spec \ - perl-module-io-file \ - perl-module-mime-base64 \ - perl-module-test-more \ -" diff --git a/meta-perl/recipes-perl/libnet/libnet-dns-sec-perl_1.26.bb b/meta-perl/recipes-perl/libnet/libnet-dns-sec-perl_1.26.bb new file mode 100644 index 0000000000..d0e46783d5 --- /dev/null +++ b/meta-perl/recipes-perl/libnet/libnet-dns-sec-perl_1.26.bb @@ -0,0 +1,46 @@ +DESCRIPTION = "DNSSEC extensions to Net::DNS" +HOMEPAGE = "http://www.net-dns.org/" +SECTION = "libs" + +LICENSE = "MIT" +LIC_FILES_CHKSUM = "file://LICENSE;md5=2b7e4176275d57d0b036bdccbc01a0e7" + +SRC_URI = "${CPAN_MIRROR}/authors/id/N/NL/NLNETLABS/Net-DNS-SEC-${PV}.tar.gz" +SRC_URI[sha256sum] = "88592c65487fb7b4d05134f2f9c48e649a9cd533a8493c50189b649b4ea711a6" + +DEPENDS += "openssl" + +UPSTREAM_CHECK_REGEX = "Net\-DNS\-SEC\-(?P(\d+\.\d+))(?!_\d+).tar" + +S = "${UNPACKDIR}/Net-DNS-SEC-${PV}" + +EXTRA_CPANFLAGS = "INC='-I${STAGING_INCDIR}' LIBS='-L${STAGING_LIBDIR} -lssl -L${STAGING_BASELIBDIR} -lcrypto'" + +inherit cpan ptest-perl + +RDEPENDS:${PN} = " \ + libnet-dns-perl \ + libcrypto \ + perl-module-dynaloader \ + perl-module-file-find \ + perl-module-file-spec \ + perl-module-io-file \ + perl-module-mime-base64 \ + perl-module-test-more \ +" + +do_install_ptest_perl:append(){ + cp ${D}${PTEST_PATH}/t/TestToolkit.pm ${D}${PTEST_PATH} + + # This test reconciles the perl module's MANIFEST file with the actual files + # in the module. This might be useful for package integrity check, but not so + # much for runtime testing - and it also requires the whole source tree to + # be installed. Rather just remove it. + rm ${D}${PTEST_PATH}/t/00-install.t +} + +RDEPENDS:${PN}-ptest += "\ + libnet-dns-perl \ + perl-module-extutils-mm-unix \ + perl-module-file-spec-functions \ + perl-module-perlio"