experminteal stunnel uid/gid

6 files changed, 144 insertions, 4 deletions

diff --git a/net-misc/stunnel/ChangeLog b/net-misc/stunnel/ChangeLog
index f35fb3a2193a..429be832fe23 100644
--- a/net-misc/stunnel/ChangeLog
+++ b/net-misc/stunnel/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for net-misc/stunnel
 # Copyright 2002-2003 Gentoo Technologies, Inc.; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/stunnel/ChangeLog,v 1.22 2003/10/28 14:53:40 aliz Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-misc/stunnel/ChangeLog,v 1.23 2003/10/28 15:23:38 aliz Exp $
+
+*stunnel-4.04-r2 (28 Oct 2003)
+
+  28 Oct 2003; Daniel AHlberg <aliz@gentoo.org> stunnel-4.04-r2 :
+  Now stunnel should run with its own uid/gid instead of noboody/nogroup. Experimental!
+  Closes #24572.
 
   28 Oct 2003; Daniel Ahlberg <aliz@gentoo.org> stunnel-4.04-r1 stunnel-3.26.ebuild :
   Depend on >=openssl-0.9.6j becuse of blinding issues.
diff --git a/net-misc/stunnel/Manifest b/net-misc/stunnel/Manifest
index f0ed8e0af579..12c08eeb9181 100644
--- a/net-misc/stunnel/Manifest
+++ b/net-misc/stunnel/Manifest
@@ -1,12 +1,12 @@
-MD5 59398642cda6da69af2dd81584ccf78e ChangeLog 2812
+MD5 c9cd7ebc9157bad82d005d70fde312ec ChangeLog 3016
 MD5 b583fa16301c63e81e546fe03d8ba2fe stunnel-4.04-r1.ebuild 1696
 MD5 dcebdde5e1aeb2e8615b0d7c23e4ee82 stunnel-3.22-r2.ebuild 916
-MD5 d32c4d0fd3117605dbbc54b6259be7ae stunnel-4.04-r2.ebuild 1727
+MD5 b42f7fd22070ddddb1be7c55b778eafb stunnel-4.04-r2.ebuild 1766
 MD5 3fc859b0c6e1cc1a4c5b032aa4f80876 stunnel-3.26.ebuild 771
 MD5 b42ca1fbeb5d6454de36aac4cb893294 files/stunnel-3.26-gentoo.diff 941
 MD5 021f1b3d5a07aa11f572d4fa8a50b4f1 files/stunnel.conf.4.0.4-r2 721
 MD5 60507279a2c9abbec2037b9e5a0840f7 files/stunnel-3.22-gentoo.diff 1170
-MD5 fa84a54f68c019fedfdf3651dd62da13 files/stunnel.rc6.4.0.4-r2 569
+MD5 0e35d974708e77a12a106d94227199ba files/stunnel.rc6.4.0.4-r2 577
 MD5 dfc2feba647c5fb39db0bd98e769fb7e files/digest-stunnel-4.04-r2 64
 MD5 4839b059fba14c4f7f2acb50888aadac files/stunnel.conf 720
 MD5 5e045381b30eee84f8a88ad0f92dab24 files/stunnel.rc6 550
diff --git a/net-misc/stunnel/files/digest-stunnel-4.04-r2 b/net-misc/stunnel/files/digest-stunnel-4.04-r2
new file mode 100644
index 000000000000..f8df0f6a7fdf
--- /dev/null
+++ b/net-misc/stunnel/files/digest-stunnel-4.04-r2
@@ -0,0 +1 @@
+MD5 2fcdf0311a0ab8a3223293c706a84e97 stunnel-4.04.tar.gz 309072
diff --git a/net-misc/stunnel/files/stunnel.conf.4.0.4-r2 b/net-misc/stunnel/files/stunnel.conf.4.0.4-r2
new file mode 100644
index 000000000000..86598a262efa
--- /dev/null
+++ b/net-misc/stunnel/files/stunnel.conf.4.0.4-r2
@@ -0,0 +1,50 @@
+# location of pid file
+pid = /var/run/stunnel.pid
+
+# user to run as
+setuid = stunnel
+setgid = stunnel
+
+# Authentication stuff
+#verify = 2
+# don't forget about c_rehash CApath
+# it is located inside chroot jail:
+#CApath = /certs
+# or simply use CAfile instead:
+#CAfile = /usr/etc/stunnel/certs.pem
+
+# Some debugging stuff
+#debug = 7
+#output = stunnel.log
+
+# Use it for client mode
+#client = yes
+
+# sample service-level configuration
+
+#[pop3s]
+#accept  = 995
+#connect = 110
+
+#[imaps]
+#accept  = 993
+#connect = 143
+
+#[ssmtp]
+#accept  = 465
+#connect = 25
+
+#[s1]
+#accept  = 5000
+#connect = mail.osw.pl:110
+#delay = yes
+
+#[s2]
+#accept  = 5001
+#connect = mail.osw.pl:25
+
+#[https]
+#accept  = 443
+#connect = 80
+#TIMEOUTclose = 0
+
diff --git a/net-misc/stunnel/files/stunnel.rc6.4.0.4-r2 b/net-misc/stunnel/files/stunnel.rc6.4.0.4-r2
new file mode 100644
index 000000000000..698bbdbaff1f
--- /dev/null
+++ b/net-misc/stunnel/files/stunnel.rc6.4.0.4-r2
@@ -0,0 +1,20 @@
+#!/sbin/runscript
+# Copyright 1999-2003 Gentoo Technologies, Inc.
+# Distributed under the terms of the GNU General Public License, v2 or later
+# $Header: /var/cvsroot/gentoo-x86/net-misc/stunnel/files/stunnel.rc6.4.0.4-r2,v 1.1 2003/10/28 15:23:38 aliz Exp $
+
+depend() {
+	need net
+}
+
+start() {
+	ebegin "Starting stunnel"
+	start-stop-daemon -c stunnel:stunnel --start --quiet --exec /usr/sbin/stunnel -- /etc/stunnel/stunnel.conf
+	eend $?
+}
+
+stop() {
+	ebegin "Stopping stunnel"
+	start-stop-daemon --stop --quiet --exec /usr/sbin/stunnel -- /etc/stunnel/stunnel.conf
+	eend $?
+}
diff --git a/net-misc/stunnel/stunnel-4.04-r2.ebuild b/net-misc/stunnel/stunnel-4.04-r2.ebuild
new file mode 100644
index 000000000000..e2911d510006
--- /dev/null
+++ b/net-misc/stunnel/stunnel-4.04-r2.ebuild
@@ -0,0 +1,63 @@
+# Copyright 1999-2003 Gentoo Technologies, Inc.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-misc/stunnel/stunnel-4.04-r2.ebuild,v 1.1 2003/10/28 15:23:38 aliz Exp $
+
+inherit eutils
+
+IUSE="static"
+S=${WORKDIR}/${P}
+DESCRIPTION="TLS/SSL - Port Wrapper"
+SRC_URI="http://www.stunnel.org/download/stunnel/src/${P}.tar.gz"
+HOMEPAGE="http://stunnel.mirt.net"
+DEPEND="virtual/glibc >=dev-libs/openssl-0.9.6j"
+RDEPEND=">=dev-libs/openssl-0.9.6j"
+KEYWORDS="~x86 ~sparc ~alpha"
+LICENSE="GPL-2"
+SLOT="0"
+
+src_unpack() {
+	unpack ${A}; cd ${S}
+	epatch ${FILESDIR}/${P}-gentoo.diff
+}
+
+src_compile() {
+	use static && myconf="${myconf} --disable-shared --enable-static"
+	use static && LDADD="${LDADD} -all-static" && export LDADD
+	econf ${myconf} || die
+	emake || die
+}
+
+src_install() {
+	into /usr
+	dosbin src/stunnel
+	dodoc AUTHORS BUGS COPYING COPYRIGHT.GPL CREDITS INSTALL NEWS PORTS README TODO
+	dodoc doc/en/transproxy.txt
+	dohtml doc/stunnel.html doc/en/VNC_StunnelHOWTO.html tools/ca.html tools/importCA.html
+	doman doc/stunnel.8
+
+	insinto /usr/share/doc/${PF}
+	doins tools/ca.pl tools/importCA.sh
+
+	exeinto /etc/init.d
+	newexe ${FILESDIR}/stunnel.rc6.${PF} stunnel
+
+	dolib src/.libs/libstunnel.la
+	use static || newlib.so src/.libs/libstunnel.so libstunnel.so.${PV}
+	use static || dosym /usr/lib/libstunnel.so.${PV} /usr/lib/libstunnel.so
+
+	insinto /etc/stunnel
+	donewins ${FILESDIR}/stunnel.conf.${PF} stunnel.conf
+
+	dosed "s:/usr/etc/stunnel:/etc/stunnel:" /etc/stunnel/stunnel.conf
+
+	dodir /etc/stunnel
+
+}
+
+pkg_postinst() {
+	enewuser stunnel
+	enewgroup stunnel
+
+	einfo "Starting from version 4 stunnel now uses a configuration file for setting up stunnels."
+	einfo "Stunnel can now also be run as a daemon"
+}