# Contributor: Olivier Mauras <olivier@mauras.ch>
# Maintainer:
_pkgname="pdns-recursor" # upstream package name
pkgname="${_pkgname}"
pkgver="4.2.1"
pkgrel=0
pkgdesc="PowerDNS Recursive Server"
url="https://www.powerdns.com/"
arch="all !s390x !mips !mips64" # broken context
license="GPL-2.0-only"
depends="dns-root-hints"
makedepends="boost-dev botan-dev openssl-dev libsodium-dev lua5.3-dev net-snmp-dev protobuf-dev"
install="${pkgname}.pre-install"
subpackages="${pkgname}-doc ${pkgname}-openrc"
pkgusers="recursor"
pkggroups="recursor"
source="https://downloads.powerdns.com/releases/${_pkgname}-${pkgver}.tar.bz2
	${pkgname}-GPGKEYS::https://www.powerdns.com/powerdns-keyblock.asc
	${_pkgname}.initd
	recursor.conf
	"
builddir="${srcdir}/${_pkgname}-${pkgver}"

# secfixes:
#   4.1.9-r0:
#     - CVE-2019-3806
#     - CVE-2019-3807
#   4.1.8-r0:
#     - CVE-2018-16855
#   4.1.7-r0:
#     - CVE-2018-10851
#     - CVE-2018-14644
#     - CVE-2018-14626
#   4.1.1-r0:
#     - CVE-2018-1000003
#   4.0.7-r0:
#     - CVE-2017-15090
#     - CVE-2017-15092
#     - CVE-2017-15093
#     - CVE-2017-15094

build() {
	./configure --prefix=/usr \
		--sysconfdir=/etc/pdns \
		--mandir=/usr/share/man \
		--infodir=/usr/share/info \
		--localstatedir=/var \
		--libdir=/usr/lib/pdns \
		--enable-botan \
		--enable-unit-tests
	make
}

check() {
	make check
}

package() {
	make DESTDIR="${pkgdir}" install
	rm -v "${pkgdir}"/etc/pdns/recursor.conf-dist

	install -m755 -D "${srcdir}/${_pkgname}.initd" \
		"${pkgdir}/etc/init.d/${pkgname}"

	install -v -m640 -o root -g recursor \
		-D "${srcdir}/recursor.conf" \
		"${pkgdir}/etc/pdns/recursor.conf"

	ln -s ../../usr/share/dns-root-hints/named.root \
		"${pkgdir}/etc/pdns/root.hints"
}

gpg_signature_extensions="sig"
gpgfingerprints="
	FBAE 0323 821C 7706 A5CA 151B  DCF5 13FA 7EED 19F3
	1628 90D0 689D D12D D33E 4696  1C5E E990 D2E7 1575
	good:B76C D467 1C09 68BA A87D  E61C 5E50 715B F2FF E1A7
	good:16E1 2866 B773 8C73 976A  5743 6FFC 3343 9B0D 04DF
	"

sha512sums="ebd7ff40def4b5c9398dee5ceae0aaf762982be4124773002b3f603b18cab2a6df667524a268e72268032334ae29d32b42294cbae68dcdc154e08b8a38f75dff  pdns-recursor-4.2.1.tar.bz2
7027c12c450ecdf4fa569e882eebdb437f166c71090f867928fddb08c558df452922ee3b33fa1dad3097b322bdb79a2096e07d9d2e9f15423464a64df6a9cde3  pdns-recursor-GPGKEYS
6eea64828a363a8f36a694da4ab08f48482a096572e5597e3182bbf5f4e7c0114d9b643c7ea5060ae46b50b05c6ebbace2fedd44dc6309b641fd638d44db879e  pdns-recursor.initd
9dde9e478bf3014cb0efe18c371d51225a39e9e7bf8c4ab327903d27c9b3f0aa5fbf951f465e161ff37b9b3e75bc8588f77e14169696192440c7c1afab88cf7f  recursor.conf"