Remove insecure warning if sslfingerprint is given (#319907). Thanks to David Fellows. Don't link libwww's libmd5 (#319283). Thanks to Karl Hakimian and Matthias Andree

(Portage version: 2.2_rc67/cvs/Linux x86_64)

4 files changed, 175 insertions, 1 deletions

diff --git a/net-mail/fetchmail/ChangeLog b/net-mail/fetchmail/ChangeLog
index 4936c95b5453..1ccd8c86ecde 100644
--- a/net-mail/fetchmail/ChangeLog
+++ b/net-mail/fetchmail/ChangeLog
@@ -1,6 +1,15 @@
 # ChangeLog for net-mail/fetchmail
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-mail/fetchmail/ChangeLog,v 1.192 2010/05/12 22:32:15 josejx Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-mail/fetchmail/ChangeLog,v 1.193 2010/05/18 06:06:51 tove Exp $
+
+*fetchmail-6.3.17-r1 (18 May 2010)
+
+  18 May 2010; Torsten Veller <tove@gentoo.org>
+  +files/MD5_library_pickup.patch, +fetchmail-6.3.17-r1.ebuild,
+  +files/debian-580796.patch:
+  Remove insecure warning if sslfingerprint is given (#319907). Thanks to
+  David Fellows. Fix linking of libwww's libmd5 (#319283). Thanks to Karl
+  Hakimian and Matthias Andree
 
   12 May 2010; Joseph Jezak <josejx@gentoo.org> fetchmail-6.3.17.ebuild:
   Marked ppc stable for bug #318875.
diff --git a/net-mail/fetchmail/fetchmail-6.3.17-r1.ebuild b/net-mail/fetchmail/fetchmail-6.3.17-r1.ebuild
new file mode 100644
index 000000000000..fb55c0b4ca66
--- /dev/null
+++ b/net-mail/fetchmail/fetchmail-6.3.17-r1.ebuild
@@ -0,0 +1,110 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-mail/fetchmail/fetchmail-6.3.17-r1.ebuild,v 1.1 2010/05/18 06:06:51 tove Exp $
+
+EAPI=2
+
+PYTHON_DEPEND="tk? 2"
+PYTHON_USE_WITH_OPT="tk"
+PYTHON_USE_WITH="tk"
+
+inherit python eutils autotools
+
+DESCRIPTION="the legendary remote-mail retrieval and forwarding utility"
+HOMEPAGE="http://fetchmail.berlios.de"
+SRC_URI="mirror://berlios/${PN}/${P}.tar.bz2"
+
+LICENSE="GPL-2 public-domain"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~x86-fbsd"
+IUSE="ssl nls kerberos hesiod tk"
+
+RDEPEND="hesiod? ( net-dns/hesiod )
+	ssl? ( >=dev-libs/openssl-0.9.6 )
+	kerberos? ( virtual/krb5 >=dev-libs/openssl-0.9.6 )
+	nls? ( virtual/libintl )
+	elibc_FreeBSD? ( sys-libs/com_err )"
+DEPEND="${RDEPEND}
+	nls? ( sys-devel/gettext )"
+
+pkg_setup() {
+	enewgroup ${PN}
+	enewuser ${PN} -1 -1 /var/lib/${PN} ${PN}
+	use tk && python_set_active_version 2
+	python_pkg_setup
+}
+
+src_prepare() {
+	epatch "${FILESDIR}"/debian-580796.patch \
+		"${FILESDIR}"/MD5_library_pickup.patch
+	eautoreconf
+	# dont compile during src_install
+	: > "${S}"/py-compile
+}
+
+src_configure() {
+	if use tk ; then
+		export PYTHON=$(PYTHON -a )
+	else
+		export PYTHON=:
+	fi
+	econf \
+		--disable-dependency-tracking \
+		--enable-RPA \
+		--enable-NTLM \
+		--enable-SDPS \
+		$(use_enable nls) \
+		$(use_with ssl) \
+		$(use kerberos && echo "--with-ssl" ) \
+		$(use_with kerberos gssapi) \
+		$(use_with kerberos kerberos5) \
+		$(use_with hesiod) \
+		${myconf}
+}
+
+src_install() {
+	# dir for pidfile
+	keepdir /var/run/${PN} || die
+	fowners ${PN}:${PN} /var/run/${PN} || die
+
+	# fetchmail's homedir (holds fetchmail's .fetchids)
+	keepdir /var/lib/${PN} || die
+	fowners ${PN}:${PN} /var/lib/${PN} || die
+	fperms 700 /var/lib/${PN} || die
+
+	emake DESTDIR="${D}" install || die
+
+	dohtml *.html
+
+	dodoc FAQ FEATURES NEWS NOTES README README.NTLM README.SSL* TODO || die
+
+	newinitd "${FILESDIR}"/fetchmail.new fetchmail || die
+	newconfd "${FILESDIR}"/conf.d-fetchmail fetchmail || die
+
+	docinto contrib
+	local f
+	for f in contrib/* ; do
+		[ -f "${f}" ] && dodoc "${f}"
+	done
+}
+
+pkg_postinst() {
+	use tk && python_mod_optimize "$(python_get_sitedir)/fetchmailconf.py"
+
+	ewarn "From the NEWS:"
+	ewarn "Fetchmail now supports a bad-header command line or rcfile option that takes"
+	ewarn "exactly one argument, accept or reject (default).  This specifies how messages"
+	ewarn "with bad headers retrieved from the current server are to be treated."
+	ewarn ""
+	ewarn "Gentoo's previous fetchmail versions (<6.3.16) accepted messages with bad"
+	ewarn "headers. So if you upgrade you must update your configuration files"
+	ewarn "to imitate the old behavior."
+	echo
+
+	elog "Please see /etc/conf.d/fetchmail if you want to adjust"
+	elog "the polling delay used by the fetchmail init script."
+}
+
+pkg_postrm() {
+	use tk && python_mod_cleanup "$(python_get_sitedir)/fetchmailconf.py"
+}
diff --git a/net-mail/fetchmail/files/MD5_library_pickup.patch b/net-mail/fetchmail/files/MD5_library_pickup.patch
new file mode 100644
index 000000000000..575572c68c1e
--- /dev/null
+++ b/net-mail/fetchmail/files/MD5_library_pickup.patch
@@ -0,0 +1,40 @@
+From: Matthias Andree <matthias.andree@gmx.de>
+Date: Mon, 17 May 2010 21:10:16 +0200
+Subject: [PATCH] Fix MD5* library pickup.
+
+Avoid picking up libmd5, which fails if libwww is installed because libmd5
+uses "long" rather than fixed-width types. This fails on non-32-bit machines.
+
+Only probe libmd if md5.h is found.
+
+To fix Gentoo Bug #319283, reported by Karl Hakimian.
+---
+ NEWS         |    4 ++++
+ configure.ac |   12 +++++++++---
+ 2 files changed, 13 insertions(+), 3 deletions(-)
+
+index 2ff315f..943eb3e 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -171,9 +171,15 @@ dnl 		[LIBS="$LIBS -lintl"])
+ 
+ AC_REPLACE_FUNCS([strstr strcasecmp memmove stpcpy strlcpy strlcat])
+ 
+-AC_SEARCH_LIBS(MD5Init, [md5 md], [],
+-	      [AC_LIBSOURCE(md5c.c)
+-               EXTRAOBJ="$EXTRAOBJ md5c.\$(OBJEXT)"])
++have_md5=no
++if test "$ac_cv_header_md5_h" != no ; then
++    AC_SEARCH_LIBS(MD5Init, [md], [have_md5=yes])
++fi
++
++if test "$have_md5" != yes ; then
++    AC_LIBSOURCE(md5c.c)
++    EXTRAOBJ="$EXTRAOBJ md5c.\$(OBJEXT)"
++fi
+ 
+ AC_CHECK_FUNC(getopt_long, [],
+               [AC_LIBSOURCES([getopt.c, getopt1.c])
+-- 
+1.6.1
+
diff --git a/net-mail/fetchmail/files/debian-580796.patch b/net-mail/fetchmail/files/debian-580796.patch
new file mode 100644
index 000000000000..0bd65b1ca026
--- /dev/null
+++ b/net-mail/fetchmail/files/debian-580796.patch
@@ -0,0 +1,15 @@
+diff --git a/socket.c b/socket.c
+index a3adfd8..2ebdfc6 100644
+--- a/socket.c
++++ b/socket.c
+@@ -1009,8 +1009,8 @@ int SSLOpen(int sock, char *mycert, char *mykey, const char *myproto, int certck
+ 		}
+ 	}
+ 
+-	if (!certck && (SSL_get_verify_result(_ssl_context[sock]) != X509_V_OK
+-|| !_verify_ok)) {
++	if (!certck && !fingerprint &&
++		(SSL_get_verify_result(_ssl_context[sock]) != X509_V_OK || !_verify_ok)) {
+ 		report(stderr, GT_("Warning: the connection is insecure, continuing anyways. (Better use --sslcertck!)\n"));
+ 	}
+