OpenDKIM is an open source implementation of the DKIM (Domain Keys Identified
Mail) sender authentication system proposed by the E-mail Signing Technology
Group (ESTG), now standardized by the IETF (RFC4871). It also includes
an implementations of the Vouch By Reference (VBR, RFC5518) proposed standard.
The OpenDKIM package consists of a library that implements the DKIM service
and a milter-based filter application that can plug in to any milter-aware
MTA to provide that service to sufficiently recent sendmail MTAs and other
MTAs that support the milter protocol.
===> The following configuration options are available for opendkim-2.10.3_24:
FILTER=on: OpenDKIM filter, requires libmilter/Sendmail
CURL=off: Use cURL for web queries
GNUTLS=off: Use GnuTLS instead of OpenSSL
JANSSON=off: Statistics and other output as JSON data
LDNS=off: Use LDNS library for DNS queries
LMDB=off: Use Lightning Memory-Mapped DB key-value store
LUA=on: Describe filter policy with lua
MEMCACHED=off: Use memcached as a data set
BDB_BASE=off: Use Berkeley DB from base
OPENDBX=off: Store filter policies via OpenDBX
OPENLDAP=off: Store filter policies in LDAP
POPAUTH=off: Use POP authentication DB
QUERY_CACHE=off: Cache DNS query results locally
SASL=off: Enable SASL authentication with LDAP
DOCS=on: Build and/or install documentation
====> Options useful for OpenDKIM development
ALLSYMBOLS=off: Export all internal symbols for better test coverage
CODECOVERAGE=off: Enable internal code-coverage/profiling
DEBUG=off: Build with debug symbols
====> Use features marked as For-Future-Releases
ADSP_LISTS=off: ADSP filtering for lists (experimental)
ATPS=off: Authorized Third Party Sign check
DB_HANDLE_POOLS=off: Database handle pools (experimental)
DEFAULT_SENDER=off: Default sender address
DIFFHEADERS=off: Compare signed and verified headers (experimental)
IDENTITY_HEADER=off: Special header to set identity
LDAP_CACHING=off: LDAP query piggybacking and caching
POSTGRES_RECONNECT_HACK=off: PostgreSQL connection error detection bug hack
RATE_LIMIT=off: DKIM based rate limiting support
RBL=off: Realtime Blacklist query support
REPLACE_RULES=off: String substition when signing
REPRRD=off: Support for collaborative reputation that uses rrdtool (experimental)
REPUTATION=off: Reputation check (experimental)
RESIGN=off: One-step resigning
SENDER_MACRO=off: Macro to determine sender
SOCKETDB=off: Arbitrary socket data sets
STATS=off: Per-message and per-signature statistics
STATSEXT=off: Localized stats extensions
VBR=off: Vouch-By-Reference support
====> Options available for the single RESOLV: you have to select exactly one of them
STOCK_RESOLVER=off: Use the stock resolver library
UNBOUND=on: Use unbound DNS library
===> Use 'make config' to modify these settings
databases/lmdb: allow to install both 0.x and 1.x together
LMDB 1.0 and the legacy 0.9 ABI cannot be mixed, the datanase format are
incompatibles as well.
Rename or relocate everything databases/lmdb0 installs so that it no
longer overlaps with databases/lmdb:
- the utilities are now mdb_copy0, mdb_dump0, mdb_load0 and mdb_stat0
- the header is include/lmdb0/lmdb.h
- the linker name is liblmdb0.so, the shared object keeps its ABI name
liblmdb.so.0 so already linked programs are unaffected
- the pkg-config file is lmdb0.pc
A compatibility prefix holding the previous layout is also installed
under ${PREFIX}/lmdb0/ (include/, lib/ and libdata/pkgconfig/) so that
build systems which expect to find lmdb.h and -llmdb relative to a
single directory only need a path change.
Now all ports should migrate to lmdb 1.X and use the lmdb 0.9 port to ease
in the migration path, lmdb, the lmdb 0.x is supposed to get removed at
some point.
Approved by: mat (portmgr)
Reviewed by: mat
Differential Revision: https://reviews.freebsd.org/D60741
databases/lmdb0: Add port for LMDB 0.9.x legacy ABI
LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.
Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.
This commit introduces databases/lmdb0 as a holding port for the 0.9.35
(Only the first 15 lines of the commit message are shown above )
mail/opendkim: fix strlcpy misuse with overlapping buffers
strlcpy() is undefined when source and destination overlap. Replace
with manual copy in the SubDomains domain extraction where
dfc->mctx_domain and the source pointer p can overlap.
PR: 283487
Approved by: freebsd-ports@dan.me.uk (maintainer timeout)
mail/opendkim-devel: Add new port
* Add mail/opendkim-devel, development snapshot of OpenDKIM.
* Mark mail/opendkim and mail/opendkim-devel as CONFLICTS_INSTALL with
each other
cleanup: remove occurrences of WITH_DEBUG
DEBUG like all ports features, must not ever be set in a port, they are
user facing features, that the user needs to enable in their
environment/make.conf, either by defining WITH_DEBUG globally, or by
setting WITH_DEBUG_PORTS with origin of ports they want DEBUG enabled
in.
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
Convert the USE_LDAP=yes to USES=ldap and adds the following features:
- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features
Reviewed by: delphij
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D38233
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
mail/opendkim: Respect PidFile setting in opendkim.conf
While here, pet rclint a bit, though it doesn't like the profile parts
not being in functions
PR: ports/254762
Reported by: Rob LA LAU <freebsd@ohreally.nl>
Reviewed by: skozlov (a previous iteration)
Approved by: maintainer timeout, 9 months
Differential Revision: https://reviews.freebsd.org/D29586
mail/opendkim: Fix errors when no value is set for socket in RC script
Fix errors
PR: ports/222122
Submitted by: Matthias Pfaller <matthias.pfaller@familie-pfaller.de>
(Fix)
While here, various style fixes; no need for the "x$var" != "x" idiom
as that is confusing to follow.
Approved by: maintainer timeout (3 years)
The pkg-plist fix for OPENDBX option in r541860 was incomplete: it didn't
take into account STATS option. Use the patch submitted by fjoe@ instead.
PR: 211723
dns/unbound: update to 1.8.0
Bump PORTREVISION on consumers due to library major version change
PR: 231283
Submitted by: jaap@NLnetLabs.nl (maintainer)
- bump MILTER_SOVER to fix linking on FREEBSD-12
- bump PORTREVISION on ports using libmilter
- rename WITH_SENDMAIL_PORT to WITH_MILTER_PORT
- rename WITH_SENDMAIL_BASE to WITH_MILTER_BASE
- rename WITH_SENDMAIL_STATIC_MILTER to WITH_MILTER_STATIC
- cleanup ifdefs
- fix build on batv-filter with libmilter from ports
- Update security/gnutls to 3.4.10.
- Rename the LIBDANE option DANE because that's the name of the protocol
supported by libgnutls-dane and gnutls-cli. Also clarify the option
description.
- Add an IDN option.
- libgnutls-openssl has been removed in 3.4. Some ports used this library
in their LIB_DEPENDS but no port actually required it.
- Some old API functions have been removed. Ports that used these have been
updated or patched to use the new API.
- Add a patch to print/cups to prevent overlinking of libgnutls.so.
- Bump PORTREVISION on dependent ports.
net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.
www/hydra: Mark BROKEN. This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.
PR: 207768
Exp-run by: antoine
Approved by: portmgr (antoine)
- Update unbound to 1.5.7
- Bump PORTREVISIOn on dependent ports
Some Upgrade Notes:
This release fixes a validation failure for nodata with wildcards and
emptynonterminals. Fixes OpenSSL Library compability. Fixes correct
response for malformed EDNS queries. For crypto in libunbound there is
libnettle support.
Qname minimisation is implemented. Use qname-minimisation: yes to
enable it. This version sends the full query name when an error is
found for intermediate names. It should therefore not fail for names
on nonconformant servers. It combines well with
harden-below-nxdomain: yes because those nxdomains are probed by the
(Only the first 15 lines of the commit message are shown above )
* Add a fix for where libopendkim fails to cope with a header line
which is wrapped immediately after the header name. This has been
reported upstream:
http://sourceforge.net/p/opendkim/bugs/230/
* Update pkg-descr -- all of the ADSP stuff has gone from opendkim
now.
PR: 202668
Approved by: freebsd-ports@dan.me.uk (maintainer)
- Update mail/opendkim to 2.10.3
- Assign maintainership to submitter
- Mark mail/p5-Mail-OpenDKIM as broken, and deprecate it, please
use mail/p5-Mail-DKIM instead
While here:
- Sort USES
- Make IGNORE text start with lower case
- Regenerate some patches
PR: 200900
Submitted by: Daniel Austin <freebsd-ports at dan.me.uk>
Approved by: Maintainer timeout
By default libtool replaces -export-symbols <file> with -retain-symbols-file
<file> on ELF systems, but this doesn't really do what -export-symbols is
meant to do. On GNU ELF systems it converts <file> to a simple version
script first and then uses -version-script instead of -retain-symbols-file.
Let USES=libtool patch libtool scripts to do this on all systems with GNU
ld(1).
Bump PORTREVISION on all ports where the build log contains -export-symbols.
audio/calf: This port builds a module that now exports only one function,
but it also builds a number of executables that link to this module and
expect to see other functions. Because it's already a bit dodgy to link to
a module (libtool warns about this) let the module continue to export only
one function and instead build an ordinary library from the same source that
the executables can link to. Fix a number of other issues in the same
(Only the first 15 lines of the commit message are shown above )
MASTER_SITES cleanup.
- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.
While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.
Also, replace some EXTRACT_SUFX occurences with USES=tar:*.
Checked by: make fetch-urlall-list
With hat: portmgr
Sponsored by: Absolight
databases/libmemcached: Update to 1.0.18 and much more
- Update to 1.0.18 and pkg-plist accordingly
- Add LICENSE (BSD3CLAUSE) and LICENSE_FILE
- Add TEST_DEPENDS and regression-test target
- Perl is not required, remove USE_PERL and from USES
- Split LDFLAGS from CONFIGURE_ENV, they're already set there
- Add libmemcachedprotocol to CONFIGURE_ARGS (Now default: off)
- Add OPTIONS for hash functions, debug and dtrace
- pkg-descr: Update WWW: URL
- Add patches for:
* alloca.h include not found on FreeBSD
* cinttypes include location
* clang compatibility
- Strip shared libraries manually since upstream install-strip target is
fail
Changes:
https://launchpad.net/libmemcached/+announcements
[1] https://bugs.launchpad.net/libmemcached/+bug/1245562
[2] https://bugs.launchpad.net/libmemcached/+bug/1400560
Approved by: Mikhail Tsatsenko <m.tsatsenko@gmail.com> (maintainer, via email)
- Switch dns/unbound to USES=libtool, drop .la files
- Bump dependent ports as .so version has changed
- While here, add LICENSE_FILE to dns/getdns
Approved by: portmgr blanket
Berkeley DB cleanup, remove versions 4.0 ... 4.7.
- Mk/bsd.database.mk rewrite, new default to db5.
- db6 is eligible by default only if installed on the system.
- Bump PORTREVISION of all ports that directly depend on BerkeleyDB or
where USE_BDB is found in the port's directory
- Patch a few ports such that they will pick up or work with newer
versions.
- Add UPDATING entry
- Drive-by format fix for pks
- Drop BerkeleyDB option from mail/popular for now, requires more work.
- Exp-run logs linked from the PR below.
- Ports that do not build (IGNORE, BROKEN, etc.) have pro-forma changes
for new Berkeley DB, but are untested.
NOTE: please read UPDATING and the Wiki page before proceeding!
Announcement: http://lists.freebsd.org/pipermail/freebsd-ports-announce/2014-August/000090.html
Wiki reference: https://wiki.freebsd.org/Ports/BerkeleyDBCleanup
PR: 192690
Approved by: portmgr (implicit, PORTREVISION bump on unstaged ports)
net/openldap24-*:
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD
databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip
databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample
(Only the first 15 lines of the commit message are shown above )
- Replace security/gnutls with security/gnutls3 and update to 3.2.15
- Bump PORTREVISION on all ports that depend on security/gnutls and
adjust all ports that depend on security/gnutls3
- Update mail/anubis to version 4.2 which supports gnutls 3.x
- Update mail/libvmime to a development snapshot (recommended by upstream
developers)
PR: 191274
Exp-run by: antoine
Approved by: portmgr (antoine)
Update to 2.9.2
- Options helpers
- Uses += libtool
- Regenerate pkg-plist based on 'make makeplist'
- Almost all of what was in Makefile.features disappeared due to
usage of options helpers, so make that file redundant.
PR: 191286
Approved by: maintainer timeout (> 3 weeks)
- Fix install whenever WITH_FILTER is not specified
- Do not bump PORTREVISION
PR: ports/167803
Submitted by: zi
Approved by: Hirohisa Yamaguchi <umq@ueo.co.jp> (maintainer)
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
Remove painful examples of foo="", with particular prejudice against
constructions that parse out to [ -z "$foo" ] && foo=""
These are bad examples that get copied and pasted into new code, so the
hope is that with less bad examples there will be less need for me to
bring this up in review.
In a few of these files all that were changed were comments so that next
time I search for these patterns I won't trip on the file for no reason.
In a few places, add $FreeBSD$
No functional changes, so no PORTREVISION bumps
OpenDKIM is an open source implementation of the DKIM sender authentication
system proposed by the E-mail Signing Technology Group (ESTG), now a proposed
standard of the IETF (RFC4871).
The OpenDKIM package consists of a library that implements the DKIM service
and a milter-based filter application that can plug in to any milter-aware
MTA to provide that service to sufficiently recent sendmail MTAs and other
MTAs that support the milter protocol.
WWW: http://opendkim.org/
PR: ports/138232
Submitted by: Hirohisa Yamaguchi <umq@ueo.co.jp>
Feature safe: yes
