# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
# Contributor: Jakub Jirutka <jakub@jirutka.cz>
#
# secfixes:
#   2.78-r0:
#     - CVE-2017-13704
#     - CVE-2017-14491
#     - CVE-2017-14492
#     - CVE-2017-14493
#     - CVE-2017-14494
#     - CVE-2017-14495
#     - CVE-2017-14496
#
setvar pkgname = 'dnsmasq'
setvar pkgver = '2.78'
setvar pkgrel = '0'
setvar pkgdesc = ""A lightweight DNS, DHCP, RA, TFTP and PXE server""
setvar url = ""http://www.thekelleys.org.uk/dnsmasq/""
setvar arch = ""all""
setvar license = ""GPL2""
setvar depends = ""!$pkgname-dnssec""
setvar makedepends = ""linux-headers nettle-dev""
setvar install = ""$pkgname.pre-install $pkgname.pre-upgrade""
setvar subpackages = ""$pkgname-doc $pkgname-dnssec""
setvar source = ""http://www.thekelleys.org.uk/dnsmasq/$pkgname-$pkgver.tar.gz
	$pkgname.initd
	$pkgname.confd
	uncomment-conf-dir.patch
	""
setvar builddir = ""$srcdir/$pkgname-$pkgver""

proc build {
	cd $builddir

	make CFLAGS="$CFLAGS" COPTS="-DHAVE_DNSSEC" all || return 1
	mv src/dnsmasq src/dnsmasq~dnssec || return 1

	make CFLAGS="$CFLAGS" clean all
}

# dnsmasq doesn't provide any test suite (shame on them!), so just check that
# the binary isn't totally broken...
proc check {
	cd $builddir
	./src/dnsmasq --help >/dev/null
}

proc package {
	cd $builddir

	make PREFIX=/usr DESTDIR="$pkgdir" install || return 1

	install -D -m755 "$srcdir"/$pkgname.initd \
		"$pkgdir"/etc/init.d/$pkgname || return 1

	install -D -m644 "$srcdir"/$pkgname.confd \
		"$pkgdir"/etc/conf.d/$pkgname || return 1

	install -m644 dnsmasq.conf.example "$pkgdir"/etc/dnsmasq.conf || return 1
	install -d -m755 "$pkgdir"/etc/dnsmasq.d
}

proc dnssec {
	setvar pkgdesc = ""$pkgdesc with DNSSEC support""
	setvar depends = ""!$pkgname""

	cd $builddir

	install -D -m 755 src/dnsmasq~dnssec \
		"$subpkgdir"/usr/sbin/dnsmasq || return 1
	install -D -m 644 trust-anchors.conf \
		"$subpkgdir"/usr/share/$pkgname/trust-anchors.conf || return 1

	cp -r "$pkgdir"/etc "$subpkgdir"/etc
}

setvar sha512sums = ""980a6d836566d97cca6d744bee748ffb7bb63cca9455334cb923edefc0bf6aa24d513a9082575472f6d5762adae7b045dd48b3ae6fcee852fbda623fe6a918a5  dnsmasq-2.78.tar.gz
b07055d71e535f753aff432124812fbef86cc2f490ff2a4704959c34b0f69caa74791a4ad08b2b8638c9126233591d3a86c188965eb1308e7e7c12dc0039d1ad  dnsmasq.initd
9a401bfc408bf1638645c61b8ca734bea0a09ef79fb36648ec7ef21666257234254bbe6c73c82cc23aa1779ddcdda0e6baa2c041866f16dfb9c4e0ba9133eab8  dnsmasq.confd
d01077f39e1240041a6700137810f254daf683b2d58dafecb6b162e94d694992e57d45964a57993b298f97c2b589eedcf9fb1506692730a38b7f06b5f55ba8d8  uncomment-conf-dir.patch""