From a0cbbee6ee545670a9b942754f71ec25c67b9ec4 Mon Sep 17 00:00:00 2001
From: Troy Dawson <tdawson@redhat.com>
Date: Wed, 18 Nov 2020 09:47:37 -0800
Subject: [PATCH] RHEL 9.0.0 Alpha bootstrap

The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/bind-dyndb-ldap#d823019b795a05aea9d0678d5c5ab6169b5d36cb
---
 .gitignore           |  2 ++
 bind-dyndb-ldap.spec | 23 ++++++++++++++++++++---
 sources              |  4 ++--
 3 files changed, 24 insertions(+), 5 deletions(-)

diff --git a/.gitignore b/.gitignore
index d904492..715869d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -47,3 +47,5 @@ bind-dyndb-ldap-0.1.0b.tar.bz2
 /bind-dyndb-ldap-11.2.tar.bz2.asc
 /bind-dyndb-ldap-11.3.tar.bz2
 /bind-dyndb-ldap-11.3.tar.bz2.asc
+/bind-dyndb-ldap-11.5.tar.bz2
+/bind-dyndb-ldap-11.5.tar.bz2.asc
diff --git a/bind-dyndb-ldap.spec b/bind-dyndb-ldap.spec
index 7ec2a14..94178a7 100644
--- a/bind-dyndb-ldap.spec
+++ b/bind-dyndb-ldap.spec
@@ -1,10 +1,19 @@
+
 %define VERSION %{version}
 
 %define bind_version 32:9.11.17-1
 
+%if 0%{?fedora} >= 31 || 0%{?rhel} > 8
+    %global with_bind_pkcs11 0
+    %global openssl_pkcs11_version 0.4.10-6
+    %global softhsm_version 2.5.0-4
+%else
+    %global with_bind_pkcs11 1
+%endif
+
 Name:           bind-dyndb-ldap
-Version:        11.3
-Release:        5%{?dist}
+Version:        11.5
+Release:        1%{?dist}
 Summary:        LDAP back-end plug-in for BIND
 
 License:        GPLv2+
@@ -18,8 +27,12 @@ BuildRequires:  openldap-devel
 BuildRequires:  libuuid-devel
 BuildRequires:  automake, autoconf, libtool
 
+%if %{with bind_pkcs11}
 Requires:       bind-pkcs11 >= %{bind_version}, bind-pkcs11-utils >= %{bind_version}
-
+%else
+Requires: softhsm >= %{softhsm_version}
+Requires: openssl-pkcs11 >= %{openssl_pkcs11_version}
+%endif
 
 %description
 This package provides an LDAP back-end plug-in for BIND. It features
@@ -94,6 +107,10 @@ sed -i.bak -e "$SEDSCRIPT" /etc/named.conf
 
 
 %changelog
+* Wed Nov 18 2020 Alexander Bokovoy <abokovoy@redhat.com> - 11.5-1
+- Upstream release 11.5
+- Use OpenSSL pkcs11 engine in BIND instead of native PKCS11
+
 * Fri Oct 23 2020 Petr Menšík <pemensik@redhat.com> - 11.3-5
 - Rebuilt for bind 9.11.24
 
diff --git a/sources b/sources
index 85434ac..f113ba3 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (bind-dyndb-ldap-11.3.tar.bz2) = 4a9e90c23aa980890ef5d99fbe07742884f1ea1dfd45b0674b190cdad3bb050cc8c324dd70876c5b2d001fdf660143538e38db4428648245b9fb0c4ec7a07735
-SHA512 (bind-dyndb-ldap-11.3.tar.bz2.asc) = 75433512cc7be1f4d0bc2db0a375d8e74703bcc838b64c1927d1bfb6ee1cd378443e45bb97502dee641c5b13566dc9fed210177b6a24a799bde294f0944bab10
+SHA512 (bind-dyndb-ldap-11.5.tar.bz2) = 51063f5d33f41b125feb5379668503bdfcc444bc463e661a390fda4ed6bc801f0771b32b84878091d987cf893bb5a6287f70e794cf7940161677e49d7c945377
+SHA512 (bind-dyndb-ldap-11.5.tar.bz2.asc) = 488030006dd10c94b962b03011959d88601c9cd3ca3247cf05282206e7e90eff96d23cd3f05c29b1c31370999843085296744670832ffdb7fb058378745eb316