Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 08 Apr 2007 20:05:17 +0900
From:      Hirohisa Yamaguchi <umq@ueo.co.jp>
To:        FreeBSD-gnats-submit@FreeBSD.org
Subject:   ports/111373: [maintainer] mail/dkim-milter requires openssl 0.9.8 or later to support rsa-sha256
Message-ID:  <86abxj15zm.wl%umq@ueo.co.jp>
Resent-Message-ID: <200704081110.l38BA2xr042699@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         111373
>Category:       ports
>Synopsis:       [maintainer] mail/dkim-milter requires openssl 0.9.8 or later to support rsa-sha256
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          maintainer-update
>Submitter-Id:   current-users
>Arrival-Date:   Sun Apr 08 11:10:01 GMT 2007
>Closed-Date:
>Last-Modified:
>Originator:     Hirohisa Yamaguchi
>Release:        FreeBSD 6.2-RELEASE i386
>Organization:
<organization of PR author (multiple lines)>
>Environment:
System: FreeBSD aoede.****.org 6.2-RELEASE FreeBSD 6.2-RELEASE #0: Fri Jan 12 10:40:27 UTC 2007     root@dessler.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386


>Description:
	In the latest dkim specification, rsa-sha256 is the default signing algorithm.
	 cf. http://tools.ietf.org/html/draft-ietf-dkim-base-10
	 | Verifiers MUST implement both rsa-sha1 and rsa-sha256.

	When mail/dkim-milter built with openssl-0.9.7, it does support rsa-sha1 only.
	FreeBSD 6.2-RELEASE and before have openssl-0.9.7 in their base system.
>How-To-Repeat:
	on systems prior to FreeBSD 6
	# cd /usr/ports/mail/dkim-milter
	# make build
	# work/dkim-milter-0.6.3/obj.FreeBSD.6.2-RELEASE.i386/dkim-filter/dkim-filter -V
	dkim-filter: Sendmail DKIM Filter v0.6.3
		Compiled with OpenSSL 0.9.7e-p1 25 Oct 2004
		Supported signing algorithms:
			rsa-sha1
		Supported canonicalization algorithms:
			nowsp
			relaxed
			simple
		Supported DKIM versions:
			allman-base-00
			ietf-base-00
			ietf-base-01
			ietf-base-02
			ietf-base-10

>Fix:

	the patch follows:

cvs diff: Diffing .
Index: Makefile
===================================================================
RCS file: /home/ncvs/ports/mail/dkim-milter/Makefile,v
retrieving revision 1.19
diff -u -p -r1.19 Makefile
--- Makefile	6 Apr 2007 17:41:00 -0000	1.19
+++ Makefile	8 Apr 2007 10:36:20 -0000
@@ -14,6 +14,7 @@
 
 PORTNAME=	dkim-milter
 PORTVERSION=	0.6.3
+PORTREVISION=	1
 CATEGORIES=	mail
 MASTER_SITES=	${MASTER_SITE_SOURCEFORGE}
 MASTER_SITE_SUBDIR=	${PORTNAME}
@@ -23,6 +23,11 @@ COMMENT=	Domainkeys Identified Mail (DKI
 
 USE_RC_SUBR=	milter-dkim.sh
 
+OPENSSL_PORT?=	security/openssl
+LIB_DEPENDS+=	ssl.5:${PORTSDIR}/${OPENSSL_PORT}
+OPENSSLINC?=	${LOCALBASE}/include
+OPENSSLLIB?=	${LOCALBASE}/lib
+
 .if defined(WITH_POSTFIX_MILTER) || defined(WITH_POSTFIX) || defined(WITH_POSTFIX_CURRENT)
 SENDMAIL_MILTER_IN_BASE=	yes
 PKGMESSAGE=	pkg-message.postfix
@@ -93,6 +98,8 @@ post-patch:
 		${WRKSRC}/devtools/OS/FreeBSD
 	@${SED} -e "s|%%PREFIX%%|${PREFIX}|g" \
 		-e "s|%%LOCALBASE%%|${LOCALBASE}|g" \
+		-e "s|%%OPENSSLINC%%|${OPENSSLINC}|g" \
+		-e "s|%%OPENSSLLIB%%|${OPENSSLLIB}|g" \
 		${SITE} > ${WCONF}/site.config.m4
 
 .if defined(WITH_VERIFY_DOMAINKEYS) && !defined(WITHOUT_VERIFY_DOMAINKEYS)
cvs diff: Diffing files
Index: files/site.config.m4
===================================================================
RCS file: /home/ncvs/ports/mail/dkim-milter/files/site.config.m4,v
retrieving revision 1.1
diff -u -p -r1.1 site.config.m4
--- files/site.config.m4	11 Jan 2006 13:50:22 -0000	1.1
+++ files/site.config.m4	8 Apr 2007 10:36:20 -0000
@@ -4,3 +4,5 @@ define(`confMANROOTMAN',`%%PREFIX%%/man/
 define(`confUBINDIR',`%%PREFIX%%/libexec')
 define(`confLIBDIR',`%%PREFIX%%/lib')
 define(`confDONT_INSTALL_CATMAN',`True')
+APPENDDEF(`confINCDIRS', `-I%%OPENSSLINC%%')
+APPENDDEF(`confLIBDIRS', `-L%%OPENSSLLIB%%')
>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86abxj15zm.wl%umq>