Summary:	DNSSEC and DLV configuration and priming tool
Name:		dnssec-conf
Version:	1.22
Release:	%mkrel 1
License:	GPLv2+
URL:		http://www.xelerance.com/software/dnssec-conf/
Source0:	http://www.xelerance.com/software/%{name}/%{name}-%{version}.tar.gz
Patch0:		dnssec-conf-1.20-borked_xml.diff
Group:		System/Servers
BuildArch:	noarch
Buildrequires:	xmlto
Requires:	python-dns
Requires:	curl
#Requires: a caching nameserver
#Requires bind 9.4.0 if bind is reconfigured.....
BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-buildroot

%description
DNSSEC configuration and priming tool. Keys are required until the root
is signed, as well as for local unpublished DNSSEC keys to be preloaded
into the recursive nameserver. These DNSSEC configuration files can be
directly included in the bind or unbound nameserver configuration files.
dnssec-conf includes a commandline configuration client for Bind and
Unbound, known DNSSEC keys, URL's to official publication pages of keys,
and harvested keys, as well a script to harvest DNSKEY's from DNS.
See also: system-config-dnssec

%prep

%setup -q -n %{name}-%{version}
%patch0 -p0

%build
make

%install
rm -rf %{buildroot}

%makeinstall_std \
    PREFIX=%{_prefix} \
    ETCDIR=%{buildroot}%{_sysconfdir} \
    BINDIR=%{buildroot}%{_bindir}\
    SBINDIR=%{buildroot}%{_sbindir} \
    MANDIR=%{buildroot}%{_mandir}

#KEYSDIR=$(ETCDIR)/pki/dnssec-keys

install -d %{buildroot}%{_sysconfdir}/sysconfig
install -m0644 packaging/fedora/dnssec.sysconfig %{buildroot}%{_sysconfdir}/sysconfig/dnssec

# until upstream fixes standard DLV setting in 1.21
sed -i 's|#DLV="dlv.isc.org"|DLV="dlv.isc.org"|' %{buildroot}%{_sysconfdir}/sysconfig/dnssec
sed -i 's|DLV="off"|#DLV="off"|' %{buildroot}%{_sysconfdir}/sysconfig/dnssec

%clean
rm -rf %{buildroot}

%files 
%defattr(-,root,root)
%doc LICENSE README INSTALL
%attr(0755,root,root) %dir %{_sysconfdir}/pki/dnssec-keys
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/pki/dnssec-keys/*/*
%attr(0755,root,root) %dir %{_sysconfdir}/pki/dnssec-keys/production
%attr(0755,root,root) %dir %{_sysconfdir}/pki/dnssec-keys/production/reverse
%attr(0755,root,root) %dir %{_sysconfdir}/pki/dnssec-keys/testing
%attr(0755,root,root) %dir %{_sysconfdir}/pki/dnssec-keys/harvest
%attr(0755,root,root) %dir %{_sysconfdir}/pki/dnssec-keys/dlv
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/sysconfig/dnssec
%{_bindir}/dnskey-pull
%{_sbindir}/dnssec-configure
%{_mandir}/*/*



%changelog
* Fri Nov 06 2009 Oden Eriksson <oeriksson@mandriva.com> 1.22-1mdv2010.1
+ Revision: 461761
- 1.22

* Sun Oct 04 2009 Oden Eriksson <oeriksson@mandriva.com> 1.20-2mdv2010.0
+ Revision: 453538
- fix build
- rebuild

* Sun Mar 22 2009 Oden Eriksson <oeriksson@mandriva.com> 1.20-1mdv2009.1
+ Revision: 360307
- import dnssec-conf


* Sun Mar 22 2009 Oden Eriksson <oeriksson@mandriva.com> 1.20-1mdv2009.1
- initial fedora import

* Tue Mar 17 2009 Paul Wouters <paul@xelerance.com> - 1.20-2
- Enable DLV with dlv.isc.org in the default configuration

* Tue Mar 17 2009 Paul Wouters <paul@xelerance.com> - 1.20-1
- Upgraded to 1.20, which fixes DLV support for Bind and reverse keys for Bind

* Tue Mar 17 2009 Paul Wouters <paul@xelerance.com> - 1.19-1
- Upgraded to 1.19, which adds --nocheck for the unbound post command.

* Tue Mar 14 2009 Paul Wouters <paul@xelerance.com> - 1.18-1
- Upgraded to 1.18 for new RIPE keys and .th testing key
- Fix for when Bind is installed but Unbound is not
- No longer need the patch - upstream committed it.

* Tue Mar 10 2009 Adam Tkac <atkac redhat com> - 1.17-4
- fixed -b -s command
- added dist tag

* Tue Mar 10 2009 Paul Wouters <paul@xelerance.com> - 1.17-3
- Remove require for unbound. It can also be used with just bind,
  and we don't require it to work.

* Mon Mar 09 2009 Paul Wouters <paul@xelerance.com> - 1.17-2
- Fix build for /etc/sysconfig/dnssec

* Mon Mar 09 2009 Paul Wouters <paul@xelerance.com> - 1.17-1
- Upgraded to 1.17. This adds better initscript support and fixes a bug
  when named/unbound were not installed (rhbug 488685)

* Sun Mar 01 2009 Paul Wouters <paul@xelerance.com> - 1.16-1
- Upgraded to 1.16. This adds the production key for .gov
  See http://dotgov.gov/dnssecinfo.aspx

* Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.15-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

* Mon Feb  9 2009 Paul Wouters <paul@xelerance.com> - 1.15-1
- Upgraded to new upstream. Added INSTALL to doc section

* Wed Jan 21 2009 Paul Wouters <paul@xelerance.com> - 1.13-2
- Upstream made source available :=)
- removed macros from changes.

* Wed Jan 21 2009 Paul Wouters <paul@xelerance.com> - 1.13-1
- Clarify license
- Fix mixed use of RPM_BUILD_ROOT and buildroot
- Source tag fully qualified now

* Sat Jan 17 2009 Paul Wouters <paul@xelerance.com> - 1.10-1
- Updated to 1.10. Adds --set and --query and show option to use with system-config-dnssec
- Updated RIPE's reverse keys

* Tue Jan 13 2009 Paul Wouters <paul@xelerance.com> - 1.09-1
- Added testing key for gr.

* Mon Jan  5 2009 Paul Wouters <paul@xelerance.com> 1.08-1
- Upgrade to 'upstream'

* Mon Jan  5 2009 Paul Wouters <paul@xelerance.com> 1.07-1
- Require unbound >= 1.1.1-7

* Mon Jan  5 2009 Paul Wouters <paul@xelerance.com> 1.06-1
- Package renamed to dnssec-conf
- Added punycode test keys
- Fix for dnskey-pull and UTF8
- No longer requires the use of generating .conf files, by using
  a patch for unbound

* Fri Nov  7 2008 Paul Wouters <paul@xelerance.com> 1.0-1
- Initial release