- add DNSSEC support to initscript, enabled it per default

- add requires dnssec-conf
This commit is contained in:
Adam Tkac 2009-03-09 20:36:02 +00:00
parent 77a522a8e6
commit 4abd8a925d
2 changed files with 17 additions and 3 deletions

View File

@ -28,9 +28,14 @@ pidfile="/var/run/unbound/unbound.pid"
piddir=`dirname $pidfile` piddir=`dirname $pidfile`
[ -e /etc/sysconfig/unbound ] && . /etc/sysconfig/unbound [ -e /etc/sysconfig/unbound ] && . /etc/sysconfig/unbound
[ -e /etc/sysconfig/dnssec ] && . /etc/sysconfig/dnssec
lockfile=/var/lock/subsys/unbound lockfile=/var/lock/subsys/unbound
[ -x /usr/sbin/dnssec-configure ] && [ -r "$config" ] &&
[ /etc/sysconfig/dnssec -nt "$config" ] && \
/usr/sbin/dnssec-configure -u --norestart --dnssec="$DNSSEC" --dlv="$DLV"
start() { start() {
[ -x $exec ] || exit 5 [ -x $exec ] || exit 5
[ -f $config ] || exit 6 [ -f $config ] || exit 6

View File

@ -1,7 +1,7 @@
Summary: Validating, recursive, and caching DNS(SEC) resolver Summary: Validating, recursive, and caching DNS(SEC) resolver
Name: unbound Name: unbound
Version: 1.2.1 Version: 1.2.1
Release: 2%{?dist} Release: 3%{?dist}
License: BSD License: BSD
Url: http://www.nlnetlabs.nl/unbound/ Url: http://www.nlnetlabs.nl/unbound/
Source: http://www.unbound.net/downloads/%{name}-%{version}.tar.gz Source: http://www.unbound.net/downloads/%{name}-%{version}.tar.gz
@ -18,6 +18,7 @@ Requires(preun): initscripts
Requires(postun): initscripts Requires(postun): initscripts
Requires: ldns >= 1.5.0 Requires: ldns >= 1.5.0
Requires(pre): shadow-utils Requires(pre): shadow-utils
Requires: dnssec-conf
# Is this obsolete? # Is this obsolete?
#Provides: caching-nameserver #Provides: caching-nameserver
@ -126,11 +127,15 @@ useradd -r -g unbound -d %{_sysconfdir}/unbound -s /sbin/nologin \
exit 0 exit 0
%post %post
# Enable DNSSEC per default
if [ "$1" -eq 1 ]; then
[ -x /usr/sbin/dnssec-configure ] && \
dnssec-configure -u --norestart --dnssec=on --dlv=off > /dev/null 2>&1
fi
/sbin/chkconfig --add %{name} /sbin/chkconfig --add %{name}
%post libs -p /sbin/ldconfig %post libs -p /sbin/ldconfig
%preun %preun
if [ "$1" -eq 0 ]; then if [ "$1" -eq 0 ]; then
/sbin/service %{name} stop >/dev/null 2>&1 /sbin/service %{name} stop >/dev/null 2>&1
@ -145,6 +150,10 @@ fi
%postun libs -p /sbin/ldconfig %postun libs -p /sbin/ldconfig
%changelog %changelog
* Mon Mar 09 2009 Adam Tkac <atkac redhat com> - 1.2.1-3
- add DNSSEC support to initscript and enabled it per default
- add requires dnssec-conf
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.1-2 * Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild