From f7556ceff9304bd3e661c797f108ca4a5f05a9412eb1b549008612c1000bb35c Mon Sep 17 00:00:00 2001 From: Marguerite Su Date: Fri, 5 Sep 2014 18:46:48 +0000 Subject: [PATCH] osc copypac from project:server:dns package:dnscrypt revision:2 OBS-URL: https://build.opensuse.org/package/show/server:dns/dnscrypt-proxy?expand=0&rev=1 --- .gitattributes | 23 ++++++++++ .gitignore | 1 + dnscrypt-proxy-1.4.0.tar.bz2 | 3 ++ dnscrypt.changes | 31 +++++++++++++ dnscrypt.service | 28 ++++++++++++ dnscrypt.spec | 86 ++++++++++++++++++++++++++++++++++++ 6 files changed, 172 insertions(+) create mode 100644 .gitattributes create mode 100644 .gitignore create mode 100644 dnscrypt-proxy-1.4.0.tar.bz2 create mode 100644 dnscrypt.changes create mode 100644 dnscrypt.service create mode 100644 dnscrypt.spec diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9b03811 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..57affb6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.osc diff --git a/dnscrypt-proxy-1.4.0.tar.bz2 b/dnscrypt-proxy-1.4.0.tar.bz2 new file mode 100644 index 0000000..a9c5495 --- /dev/null +++ b/dnscrypt-proxy-1.4.0.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:b9e80e8ef0cb425257071d66369027571754efd7a0ede3ebf46c96a40d3aef14 +size 1273915 diff --git a/dnscrypt.changes b/dnscrypt.changes new file mode 100644 index 0000000..32e4370 --- /dev/null +++ b/dnscrypt.changes @@ -0,0 +1,31 @@ +------------------------------------------------------------------- +Fri May 2 11:27:44 UTC 2014 - i@marguerite.su + +- update version 1.4.0 + * see https://github.com/jedisct1/dnscrypt-proxy/commits/master + +------------------------------------------------------------------- +Tue Oct 23 16:58:22 UTC 2012 - i@marguerite.su + +- fix a hang bug in dnscrypt.service +- upstream clarify license, it's BSD. + +------------------------------------------------------------------- +Sun Oct 21 18:28:26 UTC 2012 - i@marguerite.su + +- add systemd service. + +------------------------------------------------------------------- +Sun Oct 21 12:57:13 UTC 2012 - i@marguerite.su + +- Version 1.2.0: + * A pre-filter can now totally bypass the resolver and directly send a + reply to the client. + * A new example plugin has been shipped: ldns-aaaa-blocking. It + directly sends an empty response to AAAA queries in order to + significantly speed up lookups on hosts without IPv6 connectivity + (but with clients still asking for AAAA records anyway). + * Example plugins requiring ldns can be compiled on Windows. + * Paths with a drive name are now recognized as absolute paths on + Windows. + diff --git a/dnscrypt.service b/dnscrypt.service new file mode 100644 index 0000000..1a97e61 --- /dev/null +++ b/dnscrypt.service @@ -0,0 +1,28 @@ +# This file is part of dnscrypt +# Author: Marguerite Su with some AUR references. +# Version: 1.4.0 +# Description: dnscrypt is a tool that encrypts your DNS queries in order to +# protect against man-in-the-middle attacks and DNS hijacking +# (commonly seen in China). It uses OpenDNS resolvers by default. +# It is BSD-licensed. +# In openSUSE it's licensed under SuSE-Permissive (non-free ware). +# For details, refer to its documentation. +[Unit] +Description=Secure connection between your computer and a DNS resolver +After=network.target ntp.service +# Ntp always has local servers, and there's nothing to encrypt for time. +# and ntp.service isn't native systemd service, if we start before it, +# it will take a long time to sync. just save 20000+ms on boot. + +[Service] +Type=forking +PIDFile=/var/run/dnscrypt-proxy.pid +ExecStart=/usr/sbin/dnscrypt-proxy --daemonize \ + --resolver-name=opendns \ + -p /var/run/dnscrypt-proxy.pid \ + -l /var/log/dnscrypt-proxy.log +# Automatically Restart +Restart=on-abort + +[Install] +WantedBy=multi-user.target diff --git a/dnscrypt.spec b/dnscrypt.spec new file mode 100644 index 0000000..68a9d60 --- /dev/null +++ b/dnscrypt.spec @@ -0,0 +1,86 @@ +# +# spec file for package dnscrypt +# +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# + + +Name: dnscrypt +Version: 1.4.0 +Release: 0 +Summary: A tool for securing communications between a client and a DNS resolver +License: BSD-3-Clause +Group: Productivity/Networking/DNS/Utilities +Url: http://dnscrypt.org +Source: %{name}-proxy-%{version}.tar.bz2 +Source1: %{name}.service +BuildRequires: libsodium-devel +BuildRoot: %{_tmppath}/%{name}-%{version}-build +%if 0%{?suse_version} >= 1210 +BuildRequires: systemd +%{?systemd_requires} +%endif + +%description +dnscrypt-proxy provides local service which can be used directly as your local resolver or as a DNS forwarder, +encrypting and authenticating requests using the DNSCrypt protocol and passing them to an upstream server, +by default OpenDNS who run this on their resolvers. + +The DNSCrypt protocol uses high-speed high-security elliptic-curve cryptography and is very similar to +DNSCurve, but focuses on securing communications between a client and its first-level resolver. + +While not providing end-to-end security, it protects the local network, which is often the weakest point +of the chain, against man-in-the-middle attacks. It also provides some confidentiality to DNS queries. + +%prep +%setup -q -n %{name}-proxy-%{version} + +%build +%configure +make %{?_smp_mflags} + +%install +%make_install + +# install systemd service +mkdir -p %{buildroot}%{_unitdir} +cp -r %{SOURCE1} %{buildroot}%{_unitdir} + +%if 0%{?suse_version} + +%pre +%service_add_pre %{name}.service + +%post +%service_add_post %{name}.service + +%preun +%service_del_preun %{name}.service + +%postun +%service_del_postun %{name}.service +%endif + +%files +%defattr(-,root,root) +%doc AUTHORS ChangeLog README COPYING NEWS TECHNOTES THANKS +%{_bindir}/hostip +%{_sbindir}/%{name}-proxy +%{_unitdir}/%{name}.service +%{_mandir}/man8/hostip.8.gz +%{_mandir}/man8/%{name}-proxy.8.gz +%dir %{_datadir}/%{name}-proxy +%{_datadir}/%{name}-proxy/%{name}-resolvers.csv + +%changelog