initial version contributed by Jiajun Wang, bug 504074

Package-Manager: portage-2.2.14/cvs/Linux x86_64
Manifest-Sign-Key: 0xAABEFD55

6 files changed, 161 insertions, 3 deletions

diff --git a/net-dns/dnscrypt-proxy/Manifest b/net-dns/dnscrypt-proxy/Manifest
index 437b681e603e..130b15d986ff 100644
--- a/net-dns/dnscrypt-proxy/Manifest
+++ b/net-dns/dnscrypt-proxy/Manifest
@@ -1,7 +1,27 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
 AUX dnscrypt-proxy.confd 286 SHA256 11d635f9a504899e450e8f742952b3a736a5fc7da61eeff83eba416f3618c304 SHA512 7135d5fccf3b61981a1d085460f256d23cc63a28acf327f3b87ffed2ee3eb55ecad7703c9d4e4825bf5639d7469366933ff120ef0e7914cc756db829ce0f3d9d WHIRLPOOL 5d1938a9fade6a7e5f8dc0993a3dce6c46f47fde27badbc05d5dbda0273aacdfc861d36f5d82c351cb4214670b2d8113c5d70e0add2caa6492f63b3ef4ef19ba
-AUX dnscrypt-proxy.initd 1269 SHA256 e812d73fb2967ee8441525f1e711d05f156e46e433bd26ae8abaaafc66e53d83 SHA512 ecc159ca4e7f61d5f5b5c1199aa2ed46735f2988d5ba1ad7f57614c18bd53328dcebe17b84ce720e4fa38a656be7e39a51de21923bf8eb8e11c9fe2ae2052778 WHIRLPOOL 0536a16cc9eb6461efe4251f66269edf8ba6340ee98f7953da4f738cba824efc8c22bb95455d0f8a59cebe90272a5c256e935d814d1d6f031016429ac53fd01c
+AUX dnscrypt-proxy.initd 1378 SHA256 a9c3fd80dc22fb4bb8df829a4e176ac6e1a88e6cf3b7f4379786c31bf341d440 SHA512 c0d2d416a6a53285e0b873a35fbc66779ac94857ed7f28261d962d0deaed8cb4ef39c60255f1b6e79046b184b536cd2216de006ec9d24f8f18cd1ca416e9b459 WHIRLPOOL 614051effa71bdeda91e93ffc674e3ff659e121b5df4a4e7066dbe5153c30a856ae90c2a5e47540dc0f714a0404b3f73388ebeda4aed01524aa0c0328c371b10
 AUX dnscrypt-proxy.service 675 SHA256 5955f2b1494d52113e878c8168c66f3b7c7168735815447af96570b371ca8e99 SHA512 e859a9582b6fdb5a0e7de323597f9145cd0c615e99b6eb2e42d6bfe80cde1e212182182507b79666c1c9aef3b37b67c543600d0a32586dcd49cea0e95702552c WHIRLPOOL 6ef8267756336183f59a25e06ea64ba6d51d2a588569a823f44a026eedd56b19716ce736bf37b0f563fce9636d6db9c709e1cf06d7661f1d7ac55c873db18f9b
 DIST dnscrypt-proxy-1.4.2.tar.gz 1592962 SHA256 1d519068c30868bb60a151908f0e300a1754b234f7bc2ad1d749ad9d0d977076 SHA512 ecb81b5d20cf88a610421bb1266861a2f5dd34d0ce916c54507507ca5dbe5d9e49e95916f76fa7997b112860f2bc37793f075ed812c75b2904adf6cdf32cac17 WHIRLPOOL ddfa3da3de933f6cbb8721ccd6435e97b9e893d32311e1c3badbc23b6a0547b6cb0f8d6037baaf0027ca1eb972c4be167dc9ce56194f7f6fa54fac974ca0bd24
-EBUILD dnscrypt-proxy-1.4.2.ebuild 930 SHA256 6f4bd1806a432448f9c7b8ce4caf0dc5946697c89dc8e8f1f762713cdfb9b1eb SHA512 b63a49c07ff8f70c2b36fa41bfa0857f027f36afe27de100a8cd4f85cf1bb0cec0d7e8e6aa85b2ad1389494292d04fdc55cf1281e0584f0b7b7bbbb878229067 WHIRLPOOL fcaca5e32f70ef258f0d621846a0fcdf801df17caa6c538892a478fffd63d2327037f6ad1b26fe0a9d0f59ada5ffa2a3a277d24c9c33742f1dff3ff9d7fc1118
-MISC ChangeLog 399 SHA256 33a10713dc01ac80eb3bab6ececc4ccab29e56ca959bfd2226306f2903a23d55 SHA512 894e61673e399230d84d1874f38dadb3bfdd38858d27681c4a57fea64fcb9a6487fa4967cc04aa2e5c84db875140171549011272819089fadfb53ad495258989 WHIRLPOOL 97ef44a0827b3f6d70148e3957420f4094943bda739daf91e7e5bff8f66343939c9f28c4fafb2b4c85e29b28b895e4105f0022cbcc76b4ca42f06c3794d4d205
+EBUILD dnscrypt-proxy-1.4.2.ebuild 1040 SHA256 2304c5e98db64245a8a2488a8d84c819fdfb231fc00f122bd77d209d8f330c75 SHA512 30a5eca7734ff9ddce695400b8432821e7657f07942e5b69f906746ab81a9d3abf59dd3fd787d86193b2885bb3a21982c5df114218ae71de2a7d6fb9e7fe71d7 WHIRLPOOL e558db7ed5489acae2066438470ef60e18424412f2c3843d31604592f7dcda142a609283248e02b155a710559a2d62d697730ae3fadaf4b72c20fb0ae2912e22
+MISC ChangeLog 491 SHA256 28f2a9d9acafc14f6c485c287d3203bc51d1a39780549ae177b6e0f6d593c631 SHA512 65a1b5801197bec818f87e1fe4f4984a38bd4a63de5aa079c30062932bf5bd32ef5eff57d307b96b28c3a36e447d87ca6decabc14699fdce5250c7dc54b19665 WHIRLPOOL 7b160349461f0f92d0f3d70aabcc19dd993fd12c49680053fe7ebd4364ecfbf7fda139346a7ce6d6037dfeb6a6edb7930d8bc9cb3fd1a9ce2df128417228c632
 MISC metadata.xml 874 SHA256 c71dc0311a91ce5ef6ee73607af9eca36842c499b51b9006fc5c40e49f95ff86 SHA512 20833600718ce70ebec2f0036b18d994cf228b7acc6ca4777811c853e0363587b55adb2b1bab6fb1181b48d12a661899bc21f57ea877df14ea41253a1d9b37c0 WHIRLPOOL 1b8295066fcde71c9828935340e6c6581082f5b15802c1f5529c210491d4ae3f7c89014c39bd9f04670de565ca5f0e98971a650db932ce617888fecbf1f32430
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+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+=nTro
+-----END PGP SIGNATURE-----
diff --git a/net-dns/dnscrypt-proxy/dnscrypt-proxy-1.4.2.ebuild b/net-dns/dnscrypt-proxy/dnscrypt-proxy-1.4.2.ebuild
new file mode 100644
index 000000000000..2bb8279b74b5
--- /dev/null
+++ b/net-dns/dnscrypt-proxy/dnscrypt-proxy-1.4.2.ebuild
@@ -0,0 +1,43 @@
+# Copyright 1999-2014 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-dns/dnscrypt-proxy/dnscrypt-proxy-1.4.2.ebuild,v 1.1 2014/12/22 14:30:41 dlan Exp $
+
+EAPI=5
+
+inherit eutils systemd user
+
+DESCRIPTION="A tool for securing communications between a client and a DNS resolver"
+HOMEPAGE="http://dnscrypt.org/"
+SRC_URI="http://download.dnscrypt.org/${PN}/${P}.tar.gz"
+
+LICENSE="ISC"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE="+plugins ldns systemd"
+
+DEPEND="dev-libs/libsodium
+	ldns? ( net-libs/ldns )"
+RDEPEND="${DEPEND}
+	systemd? ( sys-apps/systemd )"
+
+DOCS=( AUTHORS ChangeLog COPYING NEWS README.markdown README-PLUGINS.markdown
+	TECHNOTES THANKS )
+
+pkg_setup() {
+	enewgroup dnscrypt
+	enewuser dnscrypt -1 -1 /var/empty dnscrypt
+}
+
+src_configure() {
+	econf \
+		$(use_enable plugins) \
+		$(use_with systemd )
+}
+
+src_install() {
+	default
+
+	newinitd "${FILESDIR}/${PN}.initd" ${PN}
+	newconfd "${FILESDIR}/${PN}.confd" ${PN}
+	systemd_dounit "${FILESDIR}"/${PN}.service
+}
diff --git a/net-dns/dnscrypt-proxy/files/dnscrypt-proxy.confd b/net-dns/dnscrypt-proxy/files/dnscrypt-proxy.confd
new file mode 100644
index 000000000000..ceedd454b5fb
--- /dev/null
+++ b/net-dns/dnscrypt-proxy/files/dnscrypt-proxy.confd
@@ -0,0 +1,7 @@
+DNSCRYPT_LOCALIP=127.0.0.1
+DNSCRYPT_LOCALPORT=53
+DNSCRYPT_USER=dnscrypt
+DNSCRYPT_PROVIDER_NAME=2.dnscrypt-cert.opendns.com
+DNSCRYPT_PROVIDER_KEY=B735:1140:206F:225D:3E2B:D822:D7FD:691E:A1C3:3CC8:D666:8D0C:BE04:BFAB:CA43:FB79
+DNSCRYPT_RESOLVERIP=208.67.220.220
+DNSCRYPT_RESOLVERPORT=443
diff --git a/net-dns/dnscrypt-proxy/files/dnscrypt-proxy.initd b/net-dns/dnscrypt-proxy/files/dnscrypt-proxy.initd
new file mode 100644
index 000000000000..a01076517faf
--- /dev/null
+++ b/net-dns/dnscrypt-proxy/files/dnscrypt-proxy.initd
@@ -0,0 +1,48 @@
+#!/sbin/runscript
+# Copyright 1999-2014 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-dns/dnscrypt-proxy/files/dnscrypt-proxy.initd,v 1.1 2014/12/22 14:30:41 dlan Exp $
+
+DNSCRYPT_LOGFILE=${DNSCRYPT_LOGFILE:-/var/log/dnscrypt-proxy.log}
+
+rundir=${rundir:-/var/run/dnscrypt-proxy}
+pidfile=${pidfile:-${rundir}/dnscrypt-proxy.pid}
+rundir=${rundir:-/var/run/dnscrypt-proxy}
+runas_user=${runas_user:-dnscrypt}
+runas_group=${runas_user:-dnscrypt}
+
+depend() {
+	use net
+	before dns
+	after logger
+}
+
+start() {
+	if [ ! -d "${rundir}" ]; then
+		mkdir "${rundir}"
+		if [ -n "${runas_user}" ]; then
+			touch  ${DNSCRYPT_LOGFILE}
+			chown ${runas_user}:${runas_group} ${DNSCRYPT_LOGFILE}
+			chown -R ${runas_user}:${runas_group} "${rundir}"
+		fi
+	fi
+
+	ebegin "Starting dnscrypt-proxy"
+	start-stop-daemon --start --quiet \
+		--exec /usr/sbin/dnscrypt-proxy \
+		-- \
+		--pidfile=${pidfile} \
+		--logfile=${DNSCRYPT_LOGFILE} \
+		--daemonize --user=${runas_user} \
+		--local-address=${DNSCRYPT_LOCALIP}:${DNSCRYPT_LOCALPORT} \
+		--resolver-address=${DNSCRYPT_RESOLVERIP}:${DNSCRYPT_RESOLVERPORT} \
+		--provider-name=${DNSCRYPT_PROVIDER_NAME} \
+		--provider-key=${DNSCRYPT_PROVIDER_KEY}
+	eend $?
+}
+
+stop() {
+	ebegin "Stopping dnscrypt-proxy"
+	start-stop-daemon --stop --quiet --exec /usr/sbin/dnscrypt-proxy
+	eend $?
+}
diff --git a/net-dns/dnscrypt-proxy/files/dnscrypt-proxy.service b/net-dns/dnscrypt-proxy/files/dnscrypt-proxy.service
new file mode 100644
index 000000000000..414c0b498c5e
--- /dev/null
+++ b/net-dns/dnscrypt-proxy/files/dnscrypt-proxy.service
@@ -0,0 +1,20 @@
+[Unit]
+Description=A tool for securing communications between a client and a DNS resolver
+
+[Service]
+Type=forking
+PIDFile=/var/run/dnscrypt-proxy.pid
+EnvironmentFile=/etc/conf.d/dnscrypt-proxy
+ExecStartPre=/bin/rm -f /var/run/dnscrypt-proxy.pid
+ExecStart=/usr/sbin/dnscrypt-proxy --daemonize \
+	--pidfile=/var/run/dnscrypt-proxy.pid \
+	--logfile=/var/log/dnscrypt-proxy.log \
+	--local-address=${DNSCRYPT_LOCALIP}:${DNSCRYPT_LOCALPORT} \
+	--resolver-address=${DNSCRYPT_RESOLVERIP}:${DNSCRYPT_RESOLVERPORT} \
+	--provider-name=${DNSCRYPT_PROVIDER_NAME} \
+	--provider-key=${DNSCRYPT_PROVIDER_KEY} \
+	--user=${DNSCRYPT_USER}
+Restart=on-abort
+
+[Install]
+WantedBy=multi-user.target
diff --git a/net-dns/dnscrypt-proxy/metadata.xml b/net-dns/dnscrypt-proxy/metadata.xml
new file mode 100644
index 000000000000..03ba21e513a4
--- /dev/null
+++ b/net-dns/dnscrypt-proxy/metadata.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+<herd>proxy-maintainers</herd>
+<maintainer>
+	<email>amesists@gmail.com</email>
+	<name>Jiajun Wang</name>
+	<description>Primary Maintainer, Assign bugs</description>
+</maintainer>
+<longdescription lang="en">
+dnscrypt-proxy provides local service which can be used directly as your local resolver
+or as a DNS forwarder, encrypting and authenticating requests using the DNSCrypt protocol
+and passing them to an upstream server.
+</longdescription>
+<use>
+	<flag name="ldns">Use <pkg>net-libs/ldns</pkg> for DNSSEC/SSHFP validation</flag>
+	<flag name="plugins">Enable plugin support to inspect and modify queries and responses</flag>
+	<flag name="systemd">Use systemd's socket activation instead of creating the sockets itself</flag>
+</use>
+</pkgmetadata>