Commit 8cc3e035 authored by Ondrej Sury's avatar Ondrej Sury

Remove circular dependency between opendnssec-enforcer and its backends (Closes: #744838)

parent 61a85bdc
opendnssec (1:1.4.3-1) experimental; urgency=low
OpenDNSSEC 1.4 has some kasp database changes to allow for an update
to the zonelist.xml schema. This means that if you want to use this
version or any after it with a database created earlier you will
need to do one of 2 things...
1) wipe and recreate your kasp database (run ods-ksmutl setup) which
will lose all of your current state.
If you need to keep your key information then,
2) run the sql statements given in:
/usr/share/opendnssec/migrate_adapters_1.mysql
or
/usr/share/opendnssec/migrate_adapters_1.sqlite3
against your existing database.
These changes allow flexibility in the input and output adapters.
-- Ondřej Surý <ondrej@debian.org> Tue, 17 Dec 2013 16:17:57 +0100
opendnssec (1.4.0~a1-2) unstable; urgency=low
* Upstream has removed Zonefetcher and replaced it with Input and Output
......@@ -27,3 +51,15 @@ opendnssec (1.3.7-1) unstable; urgency=low
leading zeroes and the bug will thus not affect you.
-- Ondřej Surý <ondrej@debian.org> Tue, 13 Mar 2012 15:23:16 +0100
opendnssec (1.2.1.dfsg-1) unstable; urgency=low
If you are migrating from 1.1.x release, you need to run migration
scripts located in /usr/share/opendnssec/. There is a script for
sqlite called migrate_keyshare_sqlite3.pl and one for mysql called
migrate_keyshare_mysql.pl. It's recommended you backup your data-
base before the migration, so it's not run automatically. You can
read more about migration in /usr/share/opendnssec-common/MIGRATION
file.
-- Ondřej Surý <ondrej@debian.org> Sat, 19 Mar 2011 16:12:24 +0100
......@@ -6,7 +6,14 @@ without the other parts (unless you really know, what you're doing),
so you may want to install opendnssec meta package which pulls all
necessary dependencies to run OpenDNSSEC system.
-- Ondřej Surý <ondrej@debian.org>, Tue, 15 Jan 2013 10:24:12 +0100
If you are going to use softhsm, you need to allow opendnssec user
to access /var/lib/softhsm (or another place where you keep your
softHSM database). On standard debian system, it should be sufficient
to add opendnssec user to softhsm group by issuing:
# adduser opendnssec softhsm
-- Ondřej Surý <ondrej@debian.org>, Fri, 13 Jun 2014 13:56:02 +0200
Previous versions of OpenDNSSEC had an invalid foreign key in the
MySQL database, which causes issues when deleting --all zones from
......
......@@ -19,7 +19,7 @@ Build-Depends: debhelper (>= 7.0.50~),
procps,
graphviz,
doxygen
Standards-Version: 3.9.4
Standards-Version: 3.9.5
Homepage: http://www.opendnssec.org/
Vcs-Browser: http://git.debian.org/?p=pkg-nlnetlabs/opendnssec.git
Vcs-Git: git://git.debian.org/pkg-nlnetlabs/opendnssec.git
......@@ -30,7 +30,7 @@ Architecture: all
Depends: ${misc:Depends},
ucf,
adduser
Suggests: opendnssec, softhsm
Recommends: opendnssec, softhsm
Conflicts: opendnssec-auditor (<= 1.3.7-2)
Replaces: opendnssec-auditor (<= 1.3.7-2)
Description: common configuration files for OpenDNSSEC suite
......@@ -46,11 +46,11 @@ Package: opendnssec
Section: misc
Architecture: all
Depends: ${misc:Depends},
opendnssec-enforcer-sqlite3 | opendnssec-enforcer,
opendnssec-enforcer,
opendnssec-signer,
opendnssec-doc,
libhsm-bin
Suggests: softhsm
Recommends: softhsm
Description: dependency package to install full OpenDNSSEC suite
OpenDNSSEC is a complete DNSSEC zone signing system which is very
easy to use with stability and security in mind. There are a lot of
......@@ -63,7 +63,7 @@ Package: opendnssec-doc
Section: doc
Architecture: all
Depends: ${misc:Depends}
Suggests: opendnssec, softhsm
Suggests: opendnssec
Replaces: opendnssec-auditor (<< 1:1.3.9-5), opendnssec-signer (<< 1:1.3.9-5), opendnssec-enforcer (<< 1:1.3.9-5), libhsm-bin (<< 1:1.3.9-5)
Breaks: opendnssec-auditor (<< 1:1.3.9-5), opendnssec-signer (<< 1:1.3.9-5), opendnssec-enforcer (<< 1:1.3.9-5), libhsm-bin (<< 1:1.3.9-5)
Description: documentation for OpenDNSSEC suite
......@@ -80,8 +80,7 @@ Architecture: all
Depends: ${misc:Depends},
opendnssec-enforcer-sqlite3 | opendnssec-enforcer-backend,
procps
Recommends: opendnssec-signer
Suggests: opendnssec, softhsm
Recommends: opendnssec-signer, opendnssec, softhsm
Description: tool to prepare DNSSEC keys (common package)
OpenDNSSEC is a complete DNSSEC zone signing system which is very
easy to use with stability and security in mind. There are a lot of
......@@ -102,14 +101,13 @@ Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
opendnssec-common (= ${source:Version}),
mysql-client,
opendnssec-enforcer,
libdbd-mysql-perl
Pre-Depends: dpkg (>= 1.15.7.2~) | dpkg-maintscript-helper
Breaks: opendnssec-auditor (<< 1:1.4.0~)
Provides: opendnssec-enforcer-backend
Conflicts: opendnssec-enforcer-backend,
Replaces: opendnssec-enforcer-backend, opendnssec-auditor (<< 1:1.4.0~)
Suggests: opendnssec, softhsm
Recommends: opendnssec, softhsm
Description: tool to prepare DNSSEC keys (mysql backend)
OpenDNSSEC is a complete DNSSEC zone signing system which is very
easy to use with stability and security in mind. There are a lot of
......@@ -130,13 +128,12 @@ Depends: ${shlibs:Depends},
${misc:Depends},
opendnssec-common (= ${source:Version}),
sqlite3,
opendnssec-enforcer,
libdbd-sqlite3-perl
Breaks: opendnssec-auditor (<< 1:1.4.0~)
Provides: opendnssec-enforcer-backend
Conflicts: opendnssec-enforcer-backend, opendnssec-auditor (<< 1:1.4.0~)
Replaces: opendnssec-enforcer-backend
Suggests: opendnssec, softhsm
Recommends: opendnssec, softhsm
Description: tool to prepare DNSSEC keys (sqlite3 backend)
OpenDNSSEC is a complete DNSSEC zone signing system which is very
easy to use with stability and security in mind. There are a lot of
......@@ -156,8 +153,7 @@ Depends: ${shlibs:Depends},
${misc:Depends},
opendnssec-common (= ${source:Version}),
libldns1 (>= 1.6.12~)
Recommends: opendnssec-enforcer
Suggests: opendnssec, softhsm
Recommends: opendnssec-enforcer, opendnssec, softhsm
Conflicts: opendnssec-signer-tools (<< 1.2.0~)
Description: daemon to sign DNS zone files periodically
OpenDNSSEC is a complete DNSSEC zone signing system which is very
......@@ -177,7 +173,7 @@ Depends: ${shlibs:Depends},
${misc:Depends},
opendnssec-common (= ${source:Version})
Conflicts: libhsm-dev, libhsm0
Suggests: opendnssec, softhsm
Recommends: opendnssec, softhsm
Description: library for interfacing PKCS#11 Hardware Security Modules
OpenDNSSEC is a complete DNSSEC zone signing system which is very
easy to use with stability and security in mind. There are a lot of
......
KNOWN_ISSUES
README.md
MIGRATION
#!/bin/sh
set -e
# Replace documentation directory with symlink
docdir="/usr/share/doc/libhsm-bin"
if [ -d $docdir ] && [ ! -L $docdir ]; then
if rmdir $docdir 2>/dev/null; then
ln -sf opendnssec-common $docdir
fi
fi
# dh_installdeb will replace this with shell code automatically
# generated by other debhelper scripts.
#DEBHELPER#
exit 0
......@@ -6,3 +6,6 @@ usr/share/opendnssec/database_create.sqlite3
usr/share/opendnssec/migrate_keyshare_sqlite3.pl
usr/share/opendnssec/migrate_adapters_1.sqlite3
usr/share/opendnssec/migrate_to_ng_sqlite.pl
usr/share/man/man1/ods-ksmutil.1
usr/share/man/man8/ods-enforcerd.8
usr/share/opendnssec/convert_database.pl
opendnssec (1:1.4.3-1) experimental; urgency=low
OpenDNSSEC 1.4 has some kasp database changes to allow for an update
to the zonelist.xml schema. This means that if you want to use this
version or any after it with a database created earlier you will
need to do one of 2 things...
1) wipe and recreate your kasp database (run ods-ksmutl setup) which
will lose all of your current state.
If you need to keep your key information then,
2) run the sql statements given in:
/usr/share/opendnssec/migrate_adapters_1.mysql
or
/usr/share/opendnssec/migrate_adapters_1.sqlite3
against your existing database.
These changes allow flexibility in the input and output adapters.
-- Ondřej Surý <ondrej@debian.org> Tue, 17 Dec 2013 16:17:57 +0100
opendnssec (1.2.1.dfsg-1) unstable; urgency=low
If you are migrating from 1.1.x release, you need to run migration
scripts located in /usr/share/opendnssec/. There is a script for
sqlite called migrate_keyshare_sqlite3.pl and one for mysql called
migrate_keyshare_mysql.pl. It's recommended you backup your data-
base before the migration, so it's not run automatically. You can
read more about migration in /usr/share/opendnssec-common/MIGRATION
file.
-- Ondřej Surý <ondrej@debian.org> Sat, 19 Mar 2011 16:12:24 +0100
opendnssec-enforcer for Debian
------------------------------
This package is part of OpenDNSSEC suite, and is probably useless
without the other parts (unless you really know, what you're doing),
so you may want to install opendnssec meta package which pulls all
necessary dependencies to run OpenDNSSEC system.
If you are going to use softhsm, you need to allow opendnssec user
to access /var/lib/softhsm (or another place where you keep your
softHSM database). On standard debian system, it should be sufficient
to add opendnssec user to softhsm group by issuing:
# adduser opendnssec softhsm
-- Ondřej Surý <ondrej@debian.org>, Fri, 26 Mar 2010 05:10:25 +0100
KNOWN_ISSUES
README.md
MIGRATION
usr/share/man/man1/ods-ksmutil.1
usr/share/man/man8/ods-enforcerd.8
usr/share/opendnssec/convert_database.pl
#!/bin/sh
set -e
# Replace documentation directory with symlink
docdir="/usr/share/doc/opendnssec-enforcer"
if [ -d $docdir ] && [ ! -L $docdir ]; then
if rmdir $docdir 2>/dev/null; then
ln -sf opendnssec-common $docdir
fi
fi
# dh_installdeb will replace this with shell code automatically
# generated by other debhelper scripts.
#DEBHELPER#
exit 0
#!/bin/sh
set -e
# Replace documentation directory with symlink
docdir="/usr/share/doc/opendnssec-signer"
if [ -d $docdir ] && [ ! -L $docdir ]; then
if rmdir $docdir 2>/dev/null; then
ln -sf opendnssec-common $docdir
fi
fi
# dh_installdeb will replace this with shell code automatically
# generated by other debhelper scripts.
#DEBHELPER#
exit 0
......@@ -55,6 +55,7 @@ override_dh_auto_install:
dh_auto_install -Bbuild-mysql/enforcer -- DESTDIR=$(CURDIR)/debian/opendnssec-enforcer-mysql
# Install migration scripts
install -m 755 $(CURDIR)/enforcer/utils/convert_database.pl $(CURDIR)/debian/tmp/usr/share/opendnssec/
install -m 755 $(CURDIR)/enforcer/utils/convert_database.pl $(CURDIR)/debian/opendnssec-enforcer-mysql/usr/share/opendnssec/
install -m 755 $(CURDIR)/enforcer/utils/migrate_keyshare_mysql.pl $(CURDIR)/debian/opendnssec-enforcer-mysql/usr/share/opendnssec/
install -m 644 $(CURDIR)/enforcer/utils/migrate_adapters_1.mysql $(CURDIR)/debian/opendnssec-enforcer-mysql/usr/share/opendnssec/
install -m 644 $(CURDIR)/enforcer/utils/migrate_zone_delete.mysql $(CURDIR)/debian/opendnssec-enforcer-mysql/usr/share/opendnssec/
......@@ -64,8 +65,7 @@ override_dh_auto_install:
install -m 644 $(CURDIR)/enforcer/utils/migrate_adapters_1.sqlite3 $(CURDIR)/debian/tmp/usr/share/opendnssec/
install -m 755 $(CURDIR)/enforcer/utils/migrate_to_ng_sqlite.pl $(CURDIR)/debian/tmp/usr/share/opendnssec/
# Remove extra dist files from opendnssec-enforcer-mysql
rm -rf $(CURDIR)/debian/opendnssec-enforcer-mysql/usr/share/man/ \
$(CURDIR)/debian/opendnssec-enforcer-mysql/var/run/opendnssec/ \
rm -rf $(CURDIR)/debian/opendnssec-enforcer-mysql/var/run/opendnssec/ \
$(CURDIR)/debian/opendnssec-enforcer-mysql/usr/bin/ods-hsm* \
$(CURDIR)/debian/opendnssec-enforcer-mysql/usr/bin/ods-kasp2html \
$(CURDIR)/debian/opendnssec-enforcer-mysql/usr/sbin/ods-control \
......@@ -74,13 +74,11 @@ override_dh_auto_install:
$(CURDIR)/debian/opendnssec-enforcer-mysql/etc/opendnssec
override_dh_installdocs-arch:
dh_installdocs -popendnssec-common -popendnssec -popendnssec-dbg-mysql -popendnssec-dbg-sqlite3 --link-doc=opendnssec-common
dh_installdocs -popendnssec-enforcer -popendnssec-enforcer-sqlite3 -popendnssec-enforcer-mysql --link-doc=opendnssec-enforcer
dh_installdocs -plibhsm-bin -popendnssec-signer -popendnssec-doc
# Remove extra and unnecessary jquery.js library from generated docs (See #622147)
for p in libhsm-bin opendnssec-signer opendnssec-enforcer; do \
rm -f $(CURDIR)/debian/opendnssec-doc/usr/share/doc/$$p/html/jquery.js; \
done
dh_installdocs -popendnssec-common -popendnssec -popendnssec-dbg-mysql \
-popendnssec-dbg-sqlite3 -popendnssec-enforcer -popendnssec-enforcer-sqlite3 \
-popendnssec-enforcer-mysql -plibhsm-bin -popendnssec-signer \
--link-doc=opendnssec-common
dh_installdocs -popendnssec-doc
override_dh_installchangelogs:
dh_installchangelogs NEWS
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment