ef6d7f5b89
- Added LOC and ECDSA fixes from git (rhbz#1059594)
563 lines
16 KiB
RPMSpec
563 lines
16 KiB
RPMSpec
%if ! (0%{?fedora} > 12 || 0%{?rhel} > 5)
|
|
%{!?python_sitelib: %global python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print(get_python_lib())")}
|
|
%endif
|
|
|
|
%undefine py2dir
|
|
%global py2dir %{_builddir}/dnspython/dnspython-%{version}
|
|
|
|
%if 0%{?rhel} == 5
|
|
%global with_python26 1
|
|
%undefine py26dir
|
|
%global py26dir %{_builddir}/dnspython/dnspython26-%{version}
|
|
%{!?__python26: %global __python26 /usr/bin/python26}
|
|
%{!?python26_sitelib: %global python26_sitelib %(%{__python26} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")}
|
|
%endif
|
|
|
|
%if 0%{?fedora} > 12
|
|
%global with_python3 1
|
|
%undefine py3dir
|
|
%global py3dir %{_builddir}/dnspython/dnspython3-%{version}
|
|
%global py3unpack -a 2
|
|
%endif
|
|
|
|
Name: python-dns
|
|
Version: 1.11.1
|
|
Release: 2%{?dist}
|
|
Summary: DNS toolkit for Python
|
|
|
|
Group: Development/Languages
|
|
License: MIT
|
|
URL: http://www.dnspython.org/
|
|
Source0: http://www.dnspython.org/kits/%{version}/dnspython-%{version}.tar.gz
|
|
Source1: http://www.dnspython.org/kits/%{version}/dnspython-%{version}.tar.gz.asc
|
|
%if 0%{?with_python3}
|
|
Source2: http://www.dnspython.org/kits3/%{version}/dnspython3-%{version}.tar.gz
|
|
Source3: http://www.dnspython.org/kits3/%{version}/dnspython3-%{version}.tar.gz.asc
|
|
%endif
|
|
%if 0%{?rhel} == 5
|
|
Patch0: 0001-Don-t-fail-on-older-python-versions-because-of-hashe.patch
|
|
%endif
|
|
Patch1: dnspython-1.11.1-ecdsa-loc.patch
|
|
|
|
BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
|
|
|
|
BuildArch: noarch
|
|
|
|
BuildRequires: python2-devel
|
|
# for tests
|
|
BuildRequires: python-crypto
|
|
|
|
%if 0%{?rhel} == 5
|
|
BuildRequires: python-setuptools
|
|
%endif
|
|
|
|
%if 0%{?with_python26}
|
|
BuildRequires: python26-devel
|
|
# for tests
|
|
BuildRequires: python26-crypto
|
|
%endif
|
|
|
|
%if 0%{?with_python3}
|
|
BuildRequires: python3-devel
|
|
# for tests
|
|
BuildRequires: python3-crypto
|
|
%endif
|
|
|
|
# for DNSSEC support
|
|
Requires: python-crypto
|
|
|
|
%description
|
|
dnspython is a DNS toolkit for Python. It supports almost all record
|
|
types. It can be used for queries, zone transfers, and dynamic
|
|
updates. It supports TSIG authenticated messages and EDNS0.
|
|
|
|
dnspython provides both high and low level access to DNS. The high
|
|
level classes perform queries for data of a given name, type, and
|
|
class, and return an answer set. The low level classes allow direct
|
|
manipulation of DNS zones, messages, names, and records.
|
|
|
|
%if 0%{?with_python26}
|
|
%package -n python26-dns
|
|
Summary: DNS toolkit for Python 2.6
|
|
Group: Development/Languages
|
|
|
|
# for DNSSEC support
|
|
Requires: python26-crypto
|
|
|
|
%description -n python26-dns
|
|
dnspython is a DNS toolkit for Python. It supports almost all record
|
|
types. It can be used for queries, zone transfers, and dynamic
|
|
updates. It supports TSIG authenticated messages and EDNS0.
|
|
|
|
dnspython provides both high and low level access to DNS. The high
|
|
level classes perform queries for data of a given name, type, and
|
|
class, and return an answer set. The low level classes allow direct
|
|
manipulation of DNS zones, messages, names, and records.
|
|
%endif
|
|
|
|
%if 0%{?with_python3}
|
|
%package -n python3-dns
|
|
Summary: DNS toolkit for Python 3
|
|
Group: Development/Languages
|
|
|
|
# for DNSSEC support
|
|
Requires: python3-crypto
|
|
|
|
%description -n python3-dns
|
|
dnspython3 is a DNS toolkit for Python 3. It supports almost all
|
|
record types. It can be used for queries, zone transfers, and dynamic
|
|
updates. It supports TSIG authenticated messages and EDNS0.
|
|
|
|
dnspython3 provides both high and low level access to DNS. The high
|
|
level classes perform queries for data of a given name, type, and
|
|
class, and return an answer set. The low level classes allow direct
|
|
manipulation of DNS zones, messages, names, and records.
|
|
%endif
|
|
|
|
%prep
|
|
%setup -q -T -c -n dnspython -a 0 %{?py3unpack:%{py3unpack}}
|
|
|
|
# get rid of Mac goop
|
|
find . -name ._\* -delete
|
|
|
|
# strip executable permissions so that we don't pick up dependencies
|
|
# from documentation
|
|
find %{py2dir}/examples -type f | xargs chmod a-x
|
|
%if 0%{?with_python3}
|
|
find %{py3dir}/examples -type f | xargs chmod a-x
|
|
%endif
|
|
|
|
%if 0%{?with_python26}
|
|
rm -rf %{py26dir}
|
|
cp -a %{py2dir} %{py26dir}
|
|
find %{py26dir} -name '*.py' | xargs sed -i '1s|^#!.*python|#!%{__python26}|'
|
|
%endif
|
|
|
|
%if 0%{?rhel} == 5
|
|
pushd %{py2dir}
|
|
%patch0 -p1
|
|
popd
|
|
%endif
|
|
%patch1 -p1
|
|
|
|
%build
|
|
pushd %{py2dir}
|
|
%if 0%{?rhel} == 5
|
|
%{__python} -c 'import setuptools; execfile("setup.py")' build
|
|
%else
|
|
%{__python} setup.py build
|
|
%endif
|
|
popd
|
|
|
|
%if 0%{?with_python26}
|
|
pushd %{py26dir}
|
|
%{__python26} setup.py build
|
|
popd
|
|
%endif
|
|
|
|
%if 0%{?with_python3}
|
|
pushd %{py3dir}
|
|
%{__python3} setup.py build
|
|
popd
|
|
%endif
|
|
|
|
%install
|
|
rm -rf %{buildroot}
|
|
|
|
pushd %{py2dir}
|
|
%if 0%{?rhel} == 5
|
|
%{__python} -c 'import setuptools; execfile("setup.py")' install --skip-build --root %{buildroot}
|
|
%else
|
|
%{__python} setup.py install --skip-build --root %{buildroot}
|
|
%endif
|
|
popd
|
|
|
|
%if 0%{?with_python26}
|
|
pushd %{py26dir}
|
|
%{__python26} setup.py install --skip-build --root %{buildroot}
|
|
popd
|
|
%endif
|
|
|
|
%if 0%{?with_python3}
|
|
pushd %{py3dir}
|
|
%{__python3} setup.py install --skip-build --root %{buildroot}
|
|
popd
|
|
%endif
|
|
|
|
%check
|
|
pushd %{py2dir}/tests
|
|
# skip one test because it queries the network
|
|
# dnssec tests fail in RHEL5 Python 2.4 due to the
|
|
# lack of some hashes
|
|
for py in *.py
|
|
do
|
|
%if 0%{?rhel} == 5
|
|
if [ $py != resolver.py -a $py != dnssec.py -a $py != grange.py ]
|
|
%else
|
|
if [ $py != resolver.py ]
|
|
%endif
|
|
then
|
|
PYTHONPATH=%{buildroot}%{python_sitelib} %{__python} $py
|
|
fi
|
|
done
|
|
popd
|
|
|
|
%if 0%{?with_python26}
|
|
pushd %{py26dir}/tests
|
|
# skip one test because it queries the network
|
|
for py in *.py
|
|
do
|
|
if [ $py != resolver.py ]
|
|
then
|
|
PYTHONPATH=%{buildroot}%{python26_sitelib} %{__python26} $py
|
|
fi
|
|
done
|
|
popd
|
|
%endif
|
|
|
|
%if 0%{?with_python3}
|
|
pushd %{py3dir}/tests
|
|
# skip one test because it queries the network
|
|
for py in *.py
|
|
do
|
|
if [ $py != resolver.py ]
|
|
then
|
|
PYTHONPATH=%{buildroot}%{python3_sitelib} %{__python3} $py
|
|
fi
|
|
done
|
|
popd
|
|
%endif
|
|
|
|
%clean
|
|
rm -rf %{buildroot}
|
|
|
|
%files
|
|
%defattr(-,root,root,-)
|
|
%doc dnspython-%{version}/{ChangeLog,LICENSE,README,examples}
|
|
|
|
%{python_sitelib}/*egg-info
|
|
%{python_sitelib}/dns
|
|
|
|
%if 0%{?with_python26}
|
|
%files -n python26-dns
|
|
%defattr(-,root,root,-)
|
|
%doc dnspython26-%{version}/{ChangeLog,LICENSE,README,examples}
|
|
|
|
%{python26_sitelib}/*egg-info
|
|
%{python26_sitelib}/dns
|
|
%endif
|
|
|
|
%if 0%{?with_python3}
|
|
%files -n python3-dns
|
|
%defattr(-,root,root,-)
|
|
%doc dnspython3-%{version}/{ChangeLog,LICENSE,README,examples}
|
|
|
|
%{python3_sitelib}/*egg-info
|
|
%{python3_sitelib}/dns
|
|
%endif
|
|
|
|
%changelog
|
|
* Tue Feb 18 2014 Paul Wouters <pwouters@redhat.com> - 1.11.1-2
|
|
- Added LOC and ECDSA fixes from git (rhbz#1059594)
|
|
|
|
* Thu Sep 5 2013 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.11.1-1
|
|
- New since 1.11.0:
|
|
-
|
|
- Nothing
|
|
-
|
|
- Bugs fixed since 1.11.1:
|
|
-
|
|
- dns.resolver.Resolver erroneously referred to 'retry_servfail'
|
|
- instead of 'self.retry_servfail'.
|
|
-
|
|
- dns.tsigkeyring.to_text() would fail trying to convert the
|
|
- keyname to text.
|
|
-
|
|
- Multi-message TSIGs were broken for algorithms other than
|
|
- HMAC-MD5 because we weren't passing the right digest module to
|
|
- the HMAC code.
|
|
-
|
|
- dns.dnssec._find_candidate_keys() tried to extract the key
|
|
- from the wrong variable name.
|
|
-
|
|
- $GENERATE tests were not backward compatible with python 2.4.
|
|
-
|
|
- APL RR trailing zero suppression didn't work due to insufficient
|
|
- python 3 porting. [dnspython3 only]
|
|
|
|
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.11.0-3
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
|
|
|
* Sun Jul 7 2013 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.11.0-2
|
|
- Integrate Python 2.6 packaging, EPEL5, EPEL6 support
|
|
|
|
* Sun Jul 7 2013 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.11.0-1
|
|
- New since 1.10.0:
|
|
-
|
|
- $GENERATE support
|
|
-
|
|
- TLSA RR support
|
|
-
|
|
- Added set_flags() method to dns.resolver.Resolver
|
|
-
|
|
- Bugs fixed since 1.10.0:
|
|
-
|
|
- Names with offsets >= 2^14 are no longer added to the
|
|
- compression table.
|
|
-
|
|
- The "::" syntax is not used to shorten a single 16-bit section
|
|
- of the text form an IPv6 address.
|
|
-
|
|
- Caches are now locked.
|
|
-
|
|
- YXDOMAIN is raised if seen by the resolver.
|
|
-
|
|
- Empty rdatasets are not printed.
|
|
-
|
|
- DNSKEY key tags are no longer assumed to be unique.
|
|
|
|
* Sat Feb 16 2013 Jamie Nguyen <jamielinux@fedoraproject.org> - 1.10.0-3
|
|
- add python3-dns subpackage (rhbz#911933)
|
|
|
|
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.10.0-2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
|
|
|
* Mon Sep 17 2012 Paul Wouters <pwouters@redhat.com> - 1.10.0-1
|
|
- Updated to 1.10.0
|
|
- Patch to support TLSA RRtype
|
|
|
|
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.4-3
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
|
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.4-2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
|
|
|
* Mon Mar 28 2011 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.4-1
|
|
-
|
|
- dnspython 1.9.4 has been released and is available at
|
|
- http://www.dnspython.org/kits/1.9.4/
|
|
-
|
|
- There is no new functionality in this release; just a few bug fixes
|
|
- in RRSIG and SIG code.
|
|
-
|
|
- I will be eliminating legacy code for earlier versions of DNSSEC in a
|
|
- future release of dnspython.
|
|
|
|
* Fri Mar 25 2011 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.3-1
|
|
-
|
|
- New since 1.9.2:
|
|
-
|
|
- A boolean parameter, 'raise_on_no_answer', has been added to
|
|
- the query() methods. In no-error, no-data situations, this
|
|
- parameter determines whether NoAnswer should be raised or not.
|
|
- If True, NoAnswer is raised. If False, then an Answer()
|
|
- object with a None rrset will be returned.
|
|
-
|
|
- Resolver Answer() objects now have a canonical_name field.
|
|
-
|
|
- Rdata now have a __hash__ method.
|
|
-
|
|
- Bugs fixed since 1.9.2:
|
|
-
|
|
- Dnspython was erroneously doing case-insensitive comparisons
|
|
- of the names in NSEC and RRSIG RRs.
|
|
-
|
|
- We now use "is" and not "==" when testing what section an RR
|
|
- is in.
|
|
-
|
|
- The resolver now disallows metaqueries.
|
|
|
|
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.2-2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
|
|
|
* Thu Dec 2 2010 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.2-2
|
|
- Build Python 2.6 subpackage for EPEL 5
|
|
|
|
* Tue Nov 23 2010 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.2-1
|
|
- It's brown paper bag time :) The fix for the import problems was
|
|
- actually bad, but didn't show up in testing because the test suite's
|
|
- conditional importing code hid the problem.
|
|
-
|
|
- Any, 1.9.2 is out.
|
|
-
|
|
- Sorry for the churn!
|
|
|
|
* Mon Nov 22 2010 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.1-1
|
|
- New since 1.9.0:
|
|
-
|
|
- Nothing.
|
|
-
|
|
- Bugs fixed since 1.9.0
|
|
-
|
|
- The dns.dnssec module didn't work with DSA due to namespace
|
|
- contamination from a "from"-style import.
|
|
-
|
|
- New since 1.8.0:
|
|
-
|
|
- dnspython now uses poll() instead of select() when available.
|
|
-
|
|
- Basic DNSSEC validation can be done using dns.dnsec.validate()
|
|
- and dns.dnssec.validate_rrsig() if you have PyCrypto 2.3 or
|
|
- later installed. Complete secure resolution is not yet
|
|
- available.
|
|
-
|
|
- Added key_id() to the DNSSEC module, which computes the DNSSEC
|
|
- key id of a DNSKEY rdata.
|
|
-
|
|
- Added make_ds() to the DNSSEC module, which returns the DS RR
|
|
- for a given DNSKEY rdata.
|
|
-
|
|
- dnspython now raises an exception if HMAC-SHA284 or
|
|
- HMAC-SHA512 are used with a Python older than 2.5.2. (Older
|
|
- Pythons do not compute the correct value.)
|
|
-
|
|
- Symbolic constants are now available for TSIG algorithm names.
|
|
-
|
|
- Bugs fixed since 1.8.0
|
|
-
|
|
- dns.resolver.zone_for_name() didn't handle a query response
|
|
- with a CNAME or DNAME correctly in some cases.
|
|
-
|
|
- When specifying rdata types and classes as text, Unicode
|
|
- strings may now be used.
|
|
-
|
|
- Hashlib compatibility issues have been fixed.
|
|
-
|
|
- dns.message now imports dns.edns.
|
|
-
|
|
- The TSIG algorithm value was passed incorrectly to use_tsig()
|
|
- in some cases.
|
|
|
|
* Fri Aug 13 2010 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.0-3
|
|
- Add a patch from upstream to fix a Python 2.7 issue.
|
|
|
|
* Thu Jul 22 2010 David Malcolm <dmalcolm@redhat.com> - 1.8.0-2.1
|
|
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
|
|
|
|
* Wed Jan 27 2010 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.0-1.1
|
|
- Fix error
|
|
|
|
* Wed Jan 27 2010 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.0-1
|
|
- New since 1.7.1:
|
|
-
|
|
- Support for hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384 and
|
|
- hmac-sha512 has been contributed by Kevin Chen.
|
|
-
|
|
- The tokenizer's tokens are now Token objects instead of (type,
|
|
- value) tuples.
|
|
-
|
|
- Bugs fixed since 1.7.1:
|
|
-
|
|
- Escapes in masterfiles now work correctly. Previously they were
|
|
- only working correctly when the text involved was part of a domain
|
|
- name.
|
|
-
|
|
- When constructing a DDNS update, if the present() method was used
|
|
- with a single rdata, a zero TTL was not added.
|
|
-
|
|
- The entropy pool needed locking to be thread safe.
|
|
-
|
|
- The entropy pool's reading of /dev/random could cause dnspython to
|
|
- block.
|
|
-
|
|
- The entropy pool did buffered reads, potentially consuming more
|
|
- randomness than we needed.
|
|
-
|
|
- The entropy pool did not seed with high quality randomness on
|
|
- Windows.
|
|
-
|
|
- SRV records were compared incorrectly.
|
|
-
|
|
- In the e164 query function, the resolver parameter was not used.
|
|
|
|
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.1-2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
|
|
|
|
* Fri Jun 19 2009 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.7.1-1
|
|
- New since 1.7.0:
|
|
-
|
|
- Nothing
|
|
-
|
|
- Bugs fixed since 1.7.0:
|
|
-
|
|
- The 1.7.0 kitting process inadventently omitted the code for the
|
|
- DLV RR.
|
|
-
|
|
- Negative DDNS prerequisites are now handled correctly.
|
|
|
|
* Fri Jun 19 2009 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.7.0-1
|
|
- New since 1.6.0:
|
|
-
|
|
- Rdatas now have a to_digestable() method, which returns the
|
|
- DNSSEC canonical form of the rdata, suitable for use in
|
|
- signature computations.
|
|
-
|
|
- The NSEC3, NSEC3PARAM, DLV, and HIP RR types are now supported.
|
|
-
|
|
- An entropy module has been added and is used to randomize query ids.
|
|
-
|
|
- EDNS0 options are now supported.
|
|
-
|
|
- UDP IXFR is now supported.
|
|
-
|
|
- The wire format parser now has a 'one_rr_per_rrset' mode, which
|
|
- suppresses the usual coalescing of all RRs of a given type into a
|
|
- single RRset.
|
|
-
|
|
- Various helpful DNSSEC-related constants are now defined.
|
|
-
|
|
- The resolver's query() method now has an optional 'source' parameter,
|
|
- allowing the source IP address to be specified.
|
|
-
|
|
- Bugs fixed since 1.6.0:
|
|
-
|
|
- On Windows, the resolver set the domain incorrectly.
|
|
-
|
|
- DS RR parsing only allowed one Base64 chunk.
|
|
-
|
|
- TSIG validation didn't always use absolute names.
|
|
-
|
|
- NSEC.to_text() only printed the last window.
|
|
-
|
|
- We did not canonicalize IPv6 addresses before comparing them; we
|
|
- would thus treat equivalent but different textual forms, e.g.
|
|
- "1:00::1" and "1::1" as being non-equivalent.
|
|
-
|
|
- If the peer set a TSIG error, we didn't raise an exception.
|
|
-
|
|
- Some EDNS bugs in the message code have been fixed (see the ChangeLog
|
|
- for details).
|
|
|
|
* Thu Feb 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.6.0-4
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
|
|
|
|
* Sat Nov 29 2008 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.0-3
|
|
- Rebuild for Python 2.6
|
|
|
|
* Fri Aug 29 2008 Tom "spot" Callaway <tcallawa@redhat.com> - 1.6.0-2
|
|
- fix license tag
|
|
|
|
* Tue Dec 4 2007 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.0-1
|
|
- Update to 1.6.0
|
|
|
|
* Tue Oct 9 2007 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.5.0-2
|
|
- Follow new Python egg packaging specs
|
|
|
|
* Thu Jan 11 2007 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.5.0-1
|
|
- Update to 1.5.0
|
|
|
|
* Fri Dec 8 2006 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.4.0-3
|
|
- Bump release for rebuild with Python 2.5
|
|
|
|
* Mon Aug 14 2006 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.4.0-2
|
|
- No longer ghost *.pyo files, thus further simplifying the files section.
|
|
|
|
* Sat Aug 5 2006 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.4.0-1
|
|
- Update to 1.4.0
|
|
- Remove unneeded python-abi requires
|
|
- Remove unneeded python_sitearch macro
|
|
|
|
* Fri May 26 2006 Jeffrey C. Ollie <jeff@ocjtech.us> - 1.3.5-1
|
|
- First version for Fedora Extras
|
|
|