# Contributor: Olivier Mauras <olivier@mauras.ch>
# Maintainer: tcely <pdns-recursor+aports@tcely.33mail.com>
pkgname=pdns-recursor
pkgver=4.1.14
pkgrel=1
pkgdesc="PowerDNS Recursive Server"
url="https://www.powerdns.com/"
arch="all !s390x"
license="GPL-2.0-only"
depends="dns-root-hints"
makedepends="boost-dev botan-dev openssl-dev libsodium-dev lua5.1-dev net-snmp-dev protobuf-dev"
install="$pkgname.pre-install"
subpackages="$pkgname-doc $pkgname-openrc"
pkgusers="recursor"
pkggroups="recursor"
source="https://downloads.powerdns.com/releases/$pkgname-$pkgver.tar.bz2
	pdns-recursor.initd
	recursor.conf
	"

# secfixes:
#   4.1.9-r0:
#     - CVE-2019-3806
#     - CVE-2019-3807
#   4.1.8-r0:
#     - CVE-2018-16855
#   4.1.7-r0:
#     - CVE-2018-10851
#     - CVE-2018-14644
#     - CVE-2018-14626
#   4.1.1-r0:
#     - CVE-2018-1000003
#   4.0.7-r0:
#     - CVE-2017-15090
#     - CVE-2017-15092
#     - CVE-2017-15093
#     - CVE-2017-15094

build() {
	./configure --prefix=/usr \
		--sysconfdir=/etc/pdns \
		--mandir=/usr/share/man \
		--infodir=/usr/share/info \
		--localstatedir=/var \
		--libdir=/usr/lib/pdns \
		--enable-botan \
		--enable-unit-tests
	make
}

check() {
	make check
}

package() {
	make DESTDIR="$pkgdir" install
	rm -v "$pkgdir"/etc/pdns/recursor.conf-dist

	install -m755 -D "$srcdir"/$pkgname.initd \
		"$pkgdir"/etc/init.d/$pkgname

	install -v -m640 -o root -g recursor \
		-D "$srcdir/recursor.conf" \
		"$pkgdir/etc/pdns/recursor.conf"

	ln -s ../../usr/share/dns-root-hints/named.root \
		"$pkgdir/etc/pdns/root.hints"
}

# gpgfingerprints="FBAE 0323 821C 7706 A5CA 151B DCF5 13FA 7EED 19F3
# 1628 90D0 689D D12D D33E 4696 1C5E E990 D2E7 1575
# B76C D467 1C09 68BA A87D E61C 5E50 715B F2FF E1A7
# good:16E1 2866 B773 8C73 976A 5743 6FFC 3343 9B0D 04DF"

sha512sums="9b1842df5d32f0f7a7080bedb98d8f9e36c08cbf7427c9ba1bd07bae40ef48ad4a843d6eaff336d1fe9869c209c05f4edf1117b994b6ed5818146445b28b3011  pdns-recursor-4.1.14.tar.bz2
6eea64828a363a8f36a694da4ab08f48482a096572e5597e3182bbf5f4e7c0114d9b643c7ea5060ae46b50b05c6ebbace2fedd44dc6309b641fd638d44db879e  pdns-recursor.initd
9dde9e478bf3014cb0efe18c371d51225a39e9e7bf8c4ab327903d27c9b3f0aa5fbf951f465e161ff37b9b3e75bc8588f77e14169696192440c7c1afab88cf7f  recursor.conf"