# Contributor: Olivier Mauras <olivier@mauras.ch>
# Maintainer: tcely <pdns-recursor+aports@tcely.33mail.com>
_pkgname="pdns-recursor" # upstream package name
pkgname="${_pkgname}"
pkgver="4.2.0"
pkgrel=0
pkgdesc="PowerDNS Recursive Server"
url="https://www.powerdns.com/"
arch="all !s390x" # broken context
license="GPL-2.0-only"
depends="dns-root-hints"
makedepends="boost-dev botan-dev openssl-dev libsodium-dev lua5.1-dev net-snmp-dev protobuf-dev"
install="${pkgname}.pre-install"
subpackages="${pkgname}-doc ${pkgname}-openrc"
pkgusers="recursor"
pkggroups="recursor"
source="https://downloads.powerdns.com/releases/${_pkgname}-${pkgver}.tar.bz2
	${pkgname}-GPGKEYS::https://www.powerdns.com/powerdns-keyblock.asc
	${_pkgname}.initd
	recursor.conf
	"
builddir="${srcdir}/${_pkgname}-${pkgver}"

# secfixes:
#   4.1.9-r0:
#     - CVE-2019-3806
#     - CVE-2019-3807
#   4.1.8-r0:
#     - CVE-2018-16855
#   4.1.7-r0:
#     - CVE-2018-10851
#     - CVE-2018-14644
#     - CVE-2018-14626
#   4.1.1-r0:
#     - CVE-2018-1000003
#   4.0.7-r0:
#     - CVE-2017-15090
#     - CVE-2017-15092
#     - CVE-2017-15093
#     - CVE-2017-15094

build() {
	./configure --prefix=/usr \
		--sysconfdir=/etc/pdns \
		--mandir=/usr/share/man \
		--infodir=/usr/share/info \
		--localstatedir=/var \
		--libdir=/usr/lib/pdns \
		--enable-botan \
		--enable-unit-tests
	make
}

check() {
	make check
}

package() {
	make DESTDIR="${pkgdir}" install
	rm -v "${pkgdir}"/etc/pdns/recursor.conf-dist

	install -m755 -D "${srcdir}/${_pkgname}.initd" \
		"${pkgdir}/etc/init.d/${pkgname}"

	install -v -m640 -o root -g recursor \
		-D "${srcdir}/recursor.conf" \
		"${pkgdir}/etc/pdns/recursor.conf"

	ln -s ../../usr/share/dns-root-hints/named.root \
		"${pkgdir}/etc/pdns/root.hints"
}

gpg_signature_extensions="sig"
gpgfingerprints="
	FBAE 0323 821C 7706 A5CA 151B  DCF5 13FA 7EED 19F3
	1628 90D0 689D D12D D33E 4696  1C5E E990 D2E7 1575
	good:B76C D467 1C09 68BA A87D  E61C 5E50 715B F2FF E1A7
	good:16E1 2866 B773 8C73 976A  5743 6FFC 3343 9B0D 04DF
	"

sha512sums="e4be63c1be70f0dfd7aab71f1184d5cc1d15e60e775451a96e8472db6fb3825762ebd6f51b593b167389868bbfde0538612b14a04c03f3f60a7e49f7882e78bf  pdns-recursor-4.2.0.tar.bz2
b286529121449d6f213da0486bbe434f5bcc317507716124f249db704da92b8a40949224711fc4c409b7600d11574640cc02dff57f24579d5494194b27e99384  pdns-recursor-GPGKEYS
6eea64828a363a8f36a694da4ab08f48482a096572e5597e3182bbf5f4e7c0114d9b643c7ea5060ae46b50b05c6ebbace2fedd44dc6309b641fd638d44db879e  pdns-recursor.initd
9dde9e478bf3014cb0efe18c371d51225a39e9e7bf8c4ab327903d27c9b3f0aa5fbf951f465e161ff37b9b3e75bc8588f77e14169696192440c7c1afab88cf7f  recursor.conf"