From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gentoo-commits+bounces-1530607-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits))
	(No client certificate requested)
	by finch.gentoo.org (Postfix) with ESMTPS id 4FE54158009
	for <garchives@archives.gentoo.org>; Tue, 20 Jun 2023 05:25:58 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id 470EEE07E1;
	Tue, 20 Jun 2023 05:25:57 +0000 (UTC)
Received: from smtp.gentoo.org (dev.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
	(No client certificate requested)
	by pigeon.gentoo.org (Postfix) with ESMTPS id 2F82AE07E1
	for <gentoo-commits@lists.gentoo.org>; Tue, 20 Jun 2023 05:25:57 +0000 (UTC)
Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
	(No client certificate requested)
	by smtp.gentoo.org (Postfix) with ESMTPS id 25E8B33BE34
	for <gentoo-commits@lists.gentoo.org>; Tue, 20 Jun 2023 05:25:56 +0000 (UTC)
Received: from localhost.localdomain (localhost [IPv6:::1])
	by oystercatcher.gentoo.org (Postfix) with ESMTP id 4B9F1A87
	for <gentoo-commits@lists.gentoo.org>; Tue, 20 Jun 2023 05:25:54 +0000 (UTC)
From: "Hans de Graaff" <graaff@gentoo.org>
To: gentoo-commits@lists.gentoo.org
Content-Transfer-Encoding: 8bit
Content-type: text/plain; charset=UTF-8
Reply-To: gentoo-dev@lists.gentoo.org, "Hans de Graaff" <graaff@gentoo.org>
Message-ID: <1687238750.c99a2499670a3e98c48e2560cd02e27dda31ffc7.graaff@gentoo>
Subject: [gentoo-commits] repo/gentoo:master commit in: net-vpn/libreswan/
X-VCS-Repository: repo/gentoo
X-VCS-Files: net-vpn/libreswan/libreswan-4.11.ebuild
X-VCS-Directories: net-vpn/libreswan/
X-VCS-Committer: graaff
X-VCS-Committer-Name: Hans de Graaff
X-VCS-Revision: c99a2499670a3e98c48e2560cd02e27dda31ffc7
X-VCS-Branch: master
Date: Tue, 20 Jun 2023 05:25:54 +0000 (UTC)
Precedence: bulk
List-Post: <mailto:gentoo-commits@lists.gentoo.org>
List-Help: <mailto:gentoo-commits+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-commits+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-commits+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-commits.gentoo.org>
X-BeenThere: gentoo-commits@lists.gentoo.org
X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply
X-Archives-Salt: 23e0ce4b-b34f-40f1-8065-081c7aefda08
X-Archives-Hash: 621cd20fb47747aada9d4be04269ddda

commit:     c99a2499670a3e98c48e2560cd02e27dda31ffc7
Author:     Hans de Graaff <graaff <AT> gentoo <DOT> org>
AuthorDate: Tue Jun 20 05:24:49 2023 +0000
Commit:     Hans de Graaff <graaff <AT> gentoo <DOT> org>
CommitDate: Tue Jun 20 05:25:50 2023 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c99a2499

net-vpn/libreswan: fix complication with USE=dnssec

Thanks to Alex for the analysis and reporting the bug.

Closes: https://bugs.gentoo.org/908822
Signed-off-by: Hans de Graaff <graaff <AT> gentoo.org>

 net-vpn/libreswan/libreswan-4.11.ebuild | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/net-vpn/libreswan/libreswan-4.11.ebuild b/net-vpn/libreswan/libreswan-4.11.ebuild
index c93c077cec25..1077d4072b28 100644
--- a/net-vpn/libreswan/libreswan-4.11.ebuild
+++ b/net-vpn/libreswan/libreswan-4.11.ebuild
@@ -24,7 +24,7 @@ DEPEND="
 	virtual/libcrypt:=
 	caps? ( sys-libs/libcap-ng )
 	curl? ( net-misc/curl )
-	dnssec? ( >=net-dns/unbound-1.9.1-r1:= net-libs/ldns:= )
+	dnssec? ( >=net-dns/unbound-1.9.1-r1:= net-libs/ldns:= net-dns/dnssec-root )
 	ldap? ( net-nds/openldap:= )
 	pam? ( sys-libs/pam )
 	seccomp? ( sys-libs/libseccomp )
@@ -66,6 +66,7 @@ src_configure() {
 	use elibc_musl && append-cflags -DGLIBC_KERN_FLIP_HEADERS
 
 	export PREFIX=/usr
+	export DEFAULT_DNSSEC_ROOTKEY_FILE=/etc/dnssec/icannbundle.pem
 	export FINALEXAMPLECONFDIR=/usr/share/doc/${PF}
 	export FINALDOCDIR=/usr/share/doc/${PF}/html
 	export INITSYSTEM=$(usex systemd systemd openrc)