Accepting request 542444 from home:vitezslav_cizek:branches:server:dns

- disable DANE verification when building with openssl < 1.1 to fix
  build on distributions that have openssl 1.0.x

OBS-URL: https://build.opensuse.org/request/show/542444
OBS-URL: https://build.opensuse.org/package/show/server:dns/ldns?expand=0&rev=34

ldns.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Thu Nov 16 14:17:03 UTC 2017 - vcizek@suse.com
+
+- disable DANE verification when building with openssl < 1.1 to fix
+  build on distributions that have openssl 1.0.x
+
 -------------------------------------------------------------------
 Sun Aug 27 20:46:30 UTC 2017 - jengelh@inai.de
 

ldns.spec

@@ -27,8 +27,8 @@ Url:            http://www.nlnetlabs.nl/projects/ldns/
 Source:         http://www.nlnetlabs.nl/downloads/ldns/ldns-%{version}.tar.gz
 BuildRequires:  doxygen
 BuildRequires:  fdupes
+BuildRequires:  libopenssl-devel
 BuildRequires:  libpcap-devel
-BuildRequires:  openssl-devel >= 1.1.0
 BuildRequires:  perl-Devel-CheckLib
 BuildRequires:  python-devel
 BuildRequires:  swig
@@ -86,6 +86,9 @@ Perl bindings for the ldns library.
 
 %build
 export CFLAGS="%{optflags} -fno-strict-aliasing"
+if pkg-config --max-version=1.1.0 openssl; then
+  DISABLE_DANE="--disable-dane-verify"
+fi
 %configure                \
   --disable-rpath         \
   --disable-static        \
@@ -98,7 +101,8 @@ export CFLAGS="%{optflags} -fno-strict-aliasing"
   --with-pyldnsx          \
   --with-drill            \
   --with-examples         \
-  --with-ca-path=%{_sysconfdir}/ssl/certs/
+  --with-ca-path=%{_sysconfdir}/ssl/certs/ \
+  $DISABLE_DANE
 make %{?_smp_mflags}
 
 # We cannot use the built-in --with-p5-dns-ldns