Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 13 May 2012 05:25:33 GMT
From:      Leo Vandewoestijne <freebsd@dns-lab.com>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   ports/167833: New port: dns/dnscrypt-proxy - preventing spying, spoofing, man-in-the-middle
Message-ID:  <201205130525.q4D5PXLd064995@red.freebsd.org>
Resent-Message-ID: <201205130530.q4D5UEcT048021@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         167833
>Category:       ports
>Synopsis:       New port: dns/dnscrypt-proxy - preventing spying, spoofing, man-in-the-middle
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Sun May 13 05:30:14 UTC 2012
>Closed-Date:
>Last-Modified:
>Originator:     Leo Vandewoestijne
>Release:        
>Organization:
DNS-Lab
>Environment:
>Description:
DNSCrypt is a piece of lightweight software to boost online privacy and security. It works by encrypting all DNS traffic between the user and OpenDNS (default),
preventing any spying, spoofing or man-in-the-middle attacks.

Besides OpenDNS other nameservers can be configured to.

DNSCrypt is a slight variant of DNSCurve.
>How-To-Repeat:

>Fix:


Patch attached with submission follows:

# This is a shell archive.  Save it in a file, remove anything before
# this line, and then unpack it by entering "sh file".  Note, it may
# create directories; files and directories will be owned by you and
# have default permissions.
#
# This archive contains:
#
#	dnscrypt-proxy
#	dnscrypt-proxy/Makefile
#	dnscrypt-proxy/pkg-descr
#	dnscrypt-proxy/distinfo
#	dnscrypt-proxy/files
#	dnscrypt-proxy/files/dnscrypt-proxy.in
#	dnscrypt-proxy/files/pkg-message.in
#	dnscrypt-proxy/pkg-plist
#
echo c - dnscrypt-proxy
mkdir -p dnscrypt-proxy > /dev/null 2>&1
echo x - dnscrypt-proxy/Makefile
sed 's/^X//' >dnscrypt-proxy/Makefile << '5c0739b5d11f9fbad4adc57557110aaa'
X# New ports collection makefile for:	dnscrypt-proxy
X# Date created:		15 May 2012
X# Whom:			Leo Vandewoestijne <freebsd@dns-lab.com>
X#
X# $FreeBSD$
X#
X
XPORTNAME=	dnscrypt-proxy
XPORTVERSION=	0.9.3
XCATEGORIES=	dns
XMASTER_SITES=	http://www.dns-lab.com/downloads/dnscrypt-proxy/
X
XMAINTAINER=	freebsd@dns-lab.com
XCOMMENT=	DNSCrypt is a piece of lightweight software to boost online privacy and security.
X
XGNU_CONFIGURE=	yes
X
XSUB_FILES=	pkg-message
X
XUSE_RC_SUBR=	${PORTNAME}
X
XMAN8=		dnscrypt-proxy.8 dnscrypt-proxy.8.markdown
X
XPORTDOCS=	AUTHORS ChangeLog COPYING INSTALL NEWS \
X		README README.markdown TECHNOTES THANKS
X
X
Xpre-install:
X	@${INSTALL_MAN} ${WRKSRC}/man/dnscrypt-proxy.8 ${MAN8PREFIX}/man/man8/
X	@${INSTALL_MAN} ${WRKSRC}/man/dnscrypt-proxy.8.markdown ${MAN8PREFIX}/man/man8/
X
Xpost-install:
X.if !defined(NOPORTDOCS)
X	@${MKDIR} ${DOCSDIR}
X	@${INSTALL_DATA} ${PORTDOCS:S,^,${WRKSRC}/,} ${DOCSDIR}/
X.endif
X	@${CAT} ${WRKDIR}/pkg-message
X
X.include <bsd.port.mk>
X
X
5c0739b5d11f9fbad4adc57557110aaa
echo x - dnscrypt-proxy/pkg-descr
sed 's/^X//' >dnscrypt-proxy/pkg-descr << '10b3ad080888671e4bfa0fa153992e9d'
XDNSCrypt is a piece of lightweight software that everyone
Xshould use to boost online privacy and security. It works
Xby encrypting all DNS traffic between the user and OpenDNS,
Xpreventing any spying, spoofing or man-in-the-middle attacks.
X
XWWW:	https://www.opendns.com/technology/dnscrypt/
10b3ad080888671e4bfa0fa153992e9d
echo x - dnscrypt-proxy/distinfo
sed 's/^X//' >dnscrypt-proxy/distinfo << 'bae799877f1c3af52c9c9fda1ff7853a'
XSHA256 (dnscrypt-proxy-0.9.3.tar.gz) = f1733e443a815da6789130f7718500304f2d90fbcdce863a5a5b98c9de06372b
XSIZE (dnscrypt-proxy-0.9.3.tar.gz) = 1368327
bae799877f1c3af52c9c9fda1ff7853a
echo c - dnscrypt-proxy/files
mkdir -p dnscrypt-proxy/files > /dev/null 2>&1
echo x - dnscrypt-proxy/files/dnscrypt-proxy.in
sed 's/^X//' >dnscrypt-proxy/files/dnscrypt-proxy.in << 'd7bf124893279519eed5f0c0eb2fcabb'
X#!/bin/sh
X#
X# $FreeBSD$
X#
X# PROVIDE: dnscrypt-proxy
X# REQUIRE: LOGIN cleanvar
X# KEYWORD: shutdown
X#
X# Add the following lines to /etc/rc.conf to enable dnscrypt-proxy:
X#
X# dnscrypt_proxy_enable="YES":	Set to NO by default.
X#				Set it to YES to enable dnscrypt-proxy.
X
X. /etc/rc.subr
X
Xname=dnscrypt_proxy
Xrcvar=dnscrypt_proxy_enable
X
Xstop_cmd="dnscrypt_proxy_stop"
X
Xload_rc_config dnscrypt_proxy
X
X: {dnscrypt_proxy_enable:="NO"}
X
Xcommand=%%PREFIX%%/sbin/dnscrypt-proxy
Xprocname=%%PREFIX%%/sbin/dnscrypt-proxy
Xpidfile=/var/run/dnscrypt-proxy.pid
Xlogdir=/var/log/dnscrypt-proxy.log
X
Xcommand_args="-d -p ${pidfile} -l ${logdir}"
X
Xdnscrypt_proxy_stop() {
X        kill -KILL `cat ${pidfile}` 2> /dev/null && echo "Killed ${name}."
X        }
X
Xrun_rc_command "$1"
d7bf124893279519eed5f0c0eb2fcabb
echo x - dnscrypt-proxy/files/pkg-message.in
sed 's/^X//' >dnscrypt-proxy/files/pkg-message.in << 'e61441fc2a34d249598a68776988ce27'
X
XThis port/software comes all 'working out of the box'.
X
XBy default this port is using OpenDNS' resolvers,
Xbut other nameservers are also possible.
X
XTo view available options, run:
X%%PREFIX%%/sbin/dnscrypt-proxy --help
Xor read the manual: `man dnscrypt-proxy`
X
XYou might like to adjust
X%%ETCDIR%%/rc.d/dnscrypt-proxy
Xaccordingly with your needs and/or preferences.
X
XTo enable dnscrypt-proxy at boot:
Xecho dnscrypt_proxy_enable=\"YES\" >> /etc/rc.conf
X
X
e61441fc2a34d249598a68776988ce27
echo x - dnscrypt-proxy/pkg-plist
sed 's/^X//' >dnscrypt-proxy/pkg-plist << '39a5f9d68909088234c5b24600470499'
X@stopdaemon dnscrypt-proxy
Xsbin/dnscrypt-proxy
39a5f9d68909088234c5b24600470499
exit



>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201205130525.q4D5PXLd064995>