Move all to deprecated folder.

deprecated/firmware/buildroot/package/bind/0001-Fix-LibreSSL-compatibility.-RT-40977.patch

@@ -0,0 +1,129 @@
+From f824c65d1fb6a2490b03228e63cc43dae6844f73 Mon Sep 17 00:00:00 2001
+From: Mark Andrews <marka@isc.org>
+Date: Mon, 19 Oct 2015 10:43:58 +1100
+Subject: [PATCH] 4340.  [port]          Fix LibreSSL compatibility. [RT
+ #40977]
+
+Status: upstream git
+
+Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
+---
+ lib/dns/dst_openssl.h     | 2 +-
+ lib/dns/openssl_link.c    | 8 ++++----
+ lib/dns/openssldh_link.c  | 4 ++--
+ lib/dns/openssldsa_link.c | 4 ++--
+ lib/dns/opensslrsa_link.c | 2 +-
+
+diff --git a/lib/dns/dst_openssl.h b/lib/dns/dst_openssl.h
+index dd67405..12f8bfc 100644
+--- a/lib/dns/dst_openssl.h
++++ b/lib/dns/dst_openssl.h
+@@ -36,7 +36,7 @@
+ #define USE_ENGINE 1
+ #endif
+ 
+-#if OPENSSL_VERSION_NUMBER < 0x10100000L
++#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER)
+ /*
+  * These are new in OpenSSL 1.1.0.  BN_GENCB _cb needs to be declared in
+  * the function like this before the BN_GENCB_new call:
+diff --git a/lib/dns/openssl_link.c b/lib/dns/openssl_link.c
+index 8683bee..6a52b31 100644
+--- a/lib/dns/openssl_link.c
++++ b/lib/dns/openssl_link.c
+@@ -88,7 +88,7 @@ entropy_getpseudo(unsigned char *buf, int num) {
+ 	return (result == ISC_R_SUCCESS ? 1 : -1);
+ }
+ 
+-#if OPENSSL_VERSION_NUMBER < 0x10100000L
++#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER)
+ static void
+ entropy_add(const void *buf, int num, double entropy) {
+ 	/*
+@@ -121,7 +121,7 @@ lock_callback(int mode, int type, const char *file, int line) {
+ 		UNLOCK(&locks[type]);
+ }
+ 
+-#if OPENSSL_VERSION_NUMBER < 0x10100000L
++#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER)
+ static unsigned long
+ id_callback(void) {
+ 	return ((unsigned long)isc_thread_self());
+@@ -187,7 +187,7 @@ dst__openssl_init(const char *engine) {
+ 	if (result != ISC_R_SUCCESS)
+ 		goto cleanup_mutexalloc;
+ 	CRYPTO_set_locking_callback(lock_callback);
+-#if OPENSSL_VERSION_NUMBER < 0x10100000L
++#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER)
+ 	CRYPTO_set_id_callback(id_callback);
+ #endif
+ 
+@@ -287,7 +287,7 @@ dst__openssl_destroy(void) {
+ 	CRYPTO_cleanup_all_ex_data();
+ #endif
+ 	ERR_clear_error();
+-#if OPENSSL_VERSION_NUMBER < 0x10100000L
++#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER)
+ 	ERR_remove_state(0);
+ #endif
+ 	ERR_free_strings();
+diff --git a/lib/dns/openssldh_link.c b/lib/dns/openssldh_link.c
+index 9f42219..67fbf69 100644
+--- a/lib/dns/openssldh_link.c
++++ b/lib/dns/openssldh_link.c
+@@ -173,7 +173,7 @@ openssldh_generate(dst_key_t *key, int generator, void (*callback)(int)) {
+ 	DH *dh = NULL;
+ #if OPENSSL_VERSION_NUMBER > 0x00908000L
+ 	BN_GENCB *cb;
+-#if OPENSSL_VERSION_NUMBER < 0x10100000L
++#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER)
+ 	BN_GENCB _cb;
+ #endif
+ 	union {
+@@ -210,7 +210,7 @@ openssldh_generate(dst_key_t *key, int generator, void (*callback)(int)) {
+ 		if (dh == NULL)
+ 			return (dst__openssl_toresult(ISC_R_NOMEMORY));
+ 		cb = BN_GENCB_new();
+-#if OPENSSL_VERSION_NUMBER >= 0x10100000L
++#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER)
+ 		if (cb == NULL) {
+ 			DH_free(dh);
+ 			return (dst__openssl_toresult(ISC_R_NOMEMORY));
+diff --git a/lib/dns/openssldsa_link.c b/lib/dns/openssldsa_link.c
+index 963e2f5..d47b265 100644
+--- a/lib/dns/openssldsa_link.c
++++ b/lib/dns/openssldsa_link.c
+@@ -359,7 +359,7 @@ openssldsa_generate(dst_key_t *key, int unused, void (*callback)(int)) {
+ 	isc_result_t result;
+ #if OPENSSL_VERSION_NUMBER > 0x00908000L
+ 	BN_GENCB *cb;
+-#if OPENSSL_VERSION_NUMBER < 0x10100000L
++#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER)
+ 	BN_GENCB _cb;
+ #endif
+ 	union {
+@@ -383,7 +383,7 @@ openssldsa_generate(dst_key_t *key, int unused, void (*callback)(int)) {
+ 	if (dsa == NULL)
+ 		return (dst__openssl_toresult(DST_R_OPENSSLFAILURE));
+ 	cb = BN_GENCB_new();
+-#if OPENSSL_VERSION_NUMBER >= 0x10100000L
++#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER)
+ 	if (cb == NULL) {
+ 		DSA_free(dsa);
+ 		return (dst__openssl_toresult(DST_R_OPENSSLFAILURE));
+diff --git a/lib/dns/opensslrsa_link.c b/lib/dns/opensslrsa_link.c
+index 94aced2..d799be0 100644
+--- a/lib/dns/opensslrsa_link.c
++++ b/lib/dns/opensslrsa_link.c
+@@ -771,7 +771,7 @@ opensslrsa_generate(dst_key_t *key, int exp, void (*callback)(int)) {
+ 	} u;
+ 	RSA *rsa = RSA_new();
+ 	BIGNUM *e = BN_new();
+-#if OPENSSL_VERSION_NUMBER < 0x10100000L
++#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER)
+ 	BN_GENCB _cb;
+ #endif
+ 	BN_GENCB *cb = BN_GENCB_new();
+-- 
+2.4.10
+

deprecated/firmware/buildroot/package/bind/0002-cross.patch

@@ -0,0 +1,18 @@
+Use host compiler to build 'gen' since it's run when building.
+
+Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
+
+diff -Nura bind-9.5.1-P1/lib/dns/Makefile.in bind-9.5.1-P1.gencross/lib/dns/Makefile.in
+--- bind-9.5.1-P1/lib/dns/Makefile.in	2007-09-11 22:09:08.000000000 -0300
++++ bind-9.5.1-P1.gencross/lib/dns/Makefile.in	2009-03-04 16:35:23.000000000 -0200
+@@ -160,8 +160,8 @@
+ 	./gen -s ${srcdir} > code.h
+
+ gen: gen.c
+-	${BUILD_CC} ${BUILD_CFLAGS} -I${top_srcdir}/lib/isc/include \
+-	${BUILD_CPPFLAGS} ${BUILD_LDFLAGS} -o $@ ${srcdir}/gen.c ${BUILD_LIBS}
++	${HOSTCC} ${HOST_CFLAGS} -I${top_srcdir}/lib/isc/include \
++	${HOST_LDFLAGS} -o $@ ${srcdir}/gen.c
+
+ rbtdb64.@O@: rbtdb.c
+

deprecated/firmware/buildroot/package/bind/0003-Rename-ptrsize-to-ptr_size.patch

@@ -0,0 +1,74 @@
+From 254dc19788ba2a03504fc6d1036fef477a60035f Mon Sep 17 00:00:00 2001
+From: Gustavo Zacarias <gustavo@zacarias.com.ar>
+Date: Fri, 22 Jan 2016 08:31:02 -0300
+Subject: [PATCH] Rename ptrsize to ptr_size
+
+This is to compensate for a uClibc mess caused by commit
+70a04a287a2875c82e6822c36e071afba5b63a62 where ptrsize is defined for
+mips, hence causing build breakage under certain conditions for programs
+that use this variable name.
+
+Status: definitely not upstreamable.
+
+Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
+---
+ lib/dns/rbt.c   | 6 +++---
+ lib/dns/rbtdb.c | 4 ++--
+ 2 files changed, 5 insertions(+), 5 deletions(-)
+
+diff --git a/lib/dns/rbt.c b/lib/dns/rbt.c
+index 86b5183..5fd55de 100644
+--- a/lib/dns/rbt.c
++++ b/lib/dns/rbt.c
+@@ -113,7 +113,7 @@ struct file_header {
+ 	 * information about the system on which the map file was generated
+ 	 * will be used to tell if we can load the map file or not
+ 	 */
+-	isc_uint32_t ptrsize;
++	isc_uint32_t ptr_size;
+ 	unsigned int bigendian:1;	/* big or little endian system */
+ 	unsigned int rdataset_fixed:1;	/* compiled with --enable-rrset-fixed */
+ 	unsigned int nodecount;		/* shadow from rbt structure */
+@@ -517,7 +517,7 @@ write_header(FILE *file, dns_rbt_t *rbt, isc_uint64_t first_node_offset,
+ 	memmove(header.version1, FILE_VERSION, sizeof(header.version1));
+ 	memmove(header.version2, FILE_VERSION, sizeof(header.version2));
+ 	header.first_node_offset = first_node_offset;
+-	header.ptrsize = (isc_uint32_t) sizeof(void *);
++	header.ptr_size = (isc_uint32_t) sizeof(void *);
+ 	header.bigendian = (1 == htonl(1)) ? 1 : 0;
+ 
+ #ifdef DNS_RDATASET_FIXED
+@@ -902,7 +902,7 @@ dns_rbt_deserialize_tree(void *base_address, size_t filesize,
+ 	}
+ #endif
+ 
+-	if (header->ptrsize != (isc_uint32_t) sizeof(void *)) {
++	if (header->ptr_size != (isc_uint32_t) sizeof(void *)) {
+ 		result = ISC_R_INVALIDFILE;
+ 		goto cleanup;
+ 	}
+diff --git a/lib/dns/rbtdb.c b/lib/dns/rbtdb.c
+index c7168cb..dbcf944 100644
+--- a/lib/dns/rbtdb.c
++++ b/lib/dns/rbtdb.c
+@@ -114,7 +114,7 @@ typedef struct rbtdb_file_header rbtdb_file_header_t;
+ 
+ struct rbtdb_file_header {
+ 	char version1[32];
+-	isc_uint32_t ptrsize;
++	isc_uint32_t ptr_size;
+ 	unsigned int bigendian:1;
+ 	isc_uint64_t tree;
+ 	isc_uint64_t nsec;
+@@ -7593,7 +7593,7 @@ rbtdb_write_header(FILE *rbtfile, off_t tree_location, off_t nsec_location,
+ 	memset(&header, 0, sizeof(rbtdb_file_header_t));
+ 	memmove(header.version1, FILE_VERSION, sizeof(header.version1));
+ 	memmove(header.version2, FILE_VERSION, sizeof(header.version2));
+-	header.ptrsize = (isc_uint32_t) sizeof(void *);
++	header.ptr_size = (isc_uint32_t) sizeof(void *);
+ 	header.bigendian = (1 == htonl(1)) ? 1 : 0;
+ 	header.tree = (isc_uint64_t) tree_location;
+ 	header.nsec = (isc_uint64_t) nsec_location;
+-- 
+2.4.10
+

deprecated/firmware/buildroot/package/bind/Config.in

@@ -0,0 +1,43 @@
+config BR2_PACKAGE_BIND
+	bool "bind"
+	depends on BR2_USE_MMU # fork()
+	depends on BR2_TOOLCHAIN_HAS_THREADS
+	depends on !BR2_STATIC_LIBS
+	help
+	  BIND (Berkeley Internet Name Domain) is an implementation of
+	  the Domain Name System (DNS) protocols and provides an openly
+	  redistributable reference implementation of the major
+	  components of the Domain Name System, including:
+
+	    * a Domain Name System server (named)
+	    * a Domain Name System resolver library
+	    * tools for verifying the proper operation of the DNS server
+
+	  The BIND DNS Server is used on the vast majority of name
+	  serving machines on the Internet, providing a robust and
+	  stable architecture on top of which an organization's naming
+	  architecture can be built. The resolver library included in
+	  the BIND distribution provides the standard APIs for
+	  translation between domain names and Internet addresses and is
+	  intended to be linked with applications requiring name service.
+
+	  http://www.isc.org/sw/bind/
+
+if BR2_PACKAGE_BIND
+
+config BR2_PACKAGE_BIND_SERVER
+	bool "Install server components"
+	default y
+	help
+	  Install server components (named, lwresd)
+
+config BR2_PACKAGE_BIND_TOOLS
+	bool "Install tools"
+	help
+	  Install tools (dig, host, nslookup, nsupdate)
+
+endif
+
+comment "bind needs a toolchain w/ threads, dynamic library"
+	depends on BR2_USE_MMU
+	depends on !BR2_TOOLCHAIN_HAS_THREADS || BR2_STATIC_LIBS

deprecated/firmware/buildroot/package/bind/S81named

@@ -0,0 +1,39 @@
+#!/bin/sh
+
+CONFIG=/etc/bind/named.conf
+DAEMON=/usr/sbin/named
+
+[ -x $DAEMON ] || exit 0
+[ -f $CONFIG ] || exit 0
+
+case "$1" in
+	start)
+		if [ ! -f /etc/rndc.key ]; then
+		    printf "Initializing bind control key: "
+                    # if rndc.key is a symlink, the target must exist
+		    touch /etc/rndc.key
+		    rndc-confgen -a -r /dev/urandom 2>/dev/null && echo "OK" || echo "FAIL"
+		fi
+		printf "Starting domain name daemon: "
+		start-stop-daemon -S -x $DAEMON -- -c $CONFIG -u named
+		[ $? = 0 ] && echo "OK" || echo "FAIL"
+		;;
+	stop)
+		printf "Stopping domain name daemon: "
+		rndc stop || start-stop-daemon -K -x $DAEMON
+		[ $? = 0 ] && echo "OK" || echo "FAIL"
+		;;
+	restart)
+		$0 stop || true
+		sleep 1
+		$0 start
+		;;
+	reload|force-reload)
+		rndc reload || $0 restart
+		;;
+	*)
+		echo "Usage: $0 {start|stop|restart|reload|force-reload}"
+		exit 1
+esac
+
+exit 0

deprecated/firmware/buildroot/package/bind/bind.hash

@@ -0,0 +1,2 @@
+# Verified from ftp://ftp.isc.org/isc/bind9/9.10.3-P3/bind-9.10.3-P3.tar.gz.sha256.asc
+sha256	690810d1fbb72afa629e74638d19cd44e28d2b2e5eb63f55c705ad85d1a4cb83	bind-9.10.3-P3.tar.gz

deprecated/firmware/buildroot/package/bind/bind.mk

@@ -0,0 +1,113 @@
+################################################################################
+#
+# bind
+#
+################################################################################
+
+BIND_VERSION = 9.10.3-P3
+BIND_SITE = ftp://ftp.isc.org/isc/bind9/$(BIND_VERSION)
+# bind does not support parallel builds.
+BIND_MAKE = $(MAKE1)
+BIND_INSTALL_STAGING = YES
+BIND_CONFIG_SCRIPTS = bind9-config isc-config.sh
+BIND_LICENSE = ISC
+BIND_LICENSE_FILES = COPYRIGHT
+BIND_TARGET_SERVER_SBIN = arpaname ddns-confgen dnssec-checkds dnssec-coverage
+BIND_TARGET_SERVER_SBIN += dnssec-importkey dnssec-keygen dnssec-revoke
+BIND_TARGET_SERVER_SBIN += dnssec-settime dnssec-verify genrandom
+BIND_TARGET_SERVER_SBIN += isc-hmac-fixup named-journalprint nsec3hash
+BIND_TARGET_SERVER_SBIN += lwresd named named-checkconf named-checkzone
+BIND_TARGET_SERVER_SBIN += named-compilezone rndc rndc-confgen dnssec-dsfromkey
+BIND_TARGET_SERVER_SBIN += dnssec-keyfromlabel dnssec-signzone
+BIND_TARGET_TOOLS_BIN = dig host nslookup nsupdate
+BIND_CONF_ENV = \
+	BUILD_CC="$(TARGET_CC)" \
+	BUILD_CFLAGS="$(TARGET_CFLAGS)"
+BIND_CONF_OPTS = \
+	--with-libjson=no \
+	--with-randomdev=/dev/urandom \
+	--enable-epoll \
+	--with-libtool \
+	--with-gssapi=no \
+	--enable-rrl \
+	--enable-filter-aaaa
+
+ifeq ($(BR2_PACKAGE_LIBCAP),y)
+BIND_CONF_OPTS += --enable-linux-caps
+BIND_DEPENDENCIES += libcap
+else
+BIND_CONF_OPTS += --disable-linux-caps
+endif
+
+ifeq ($(BR2_PACKAGE_LIBXML2),y)
+BIND_CONF_OPTS += --with-libxml2=$(STAGING_DIR)/usr --enable-newstats
+BIND_DEPENDENCIES += libxml2
+else
+BIND_CONF_OPTS += --with-libxml2=no
+endif
+
+ifeq ($(BR2_PACKAGE_OPENSSL),y)
+BIND_DEPENDENCIES += openssl
+BIND_CONF_ENV += \
+	ac_cv_func_EVP_sha256=yes \
+	ac_cv_func_EVP_sha384=yes \
+	ac_cv_func_EVP_sha512=yes
+BIND_CONF_OPTS += \
+	--with-openssl=$(STAGING_DIR)/usr LIBS="-lz" \
+	--with-ecdsa=yes
+# GOST cipher support requires openssl extra engines
+ifeq ($(BR2_PACKAGE_OPENSSL_ENGINES),y)
+BIND_CONF_OPTS += --with-gost=yes
+else
+BIND_CONF_OPTS += --with-gost=no
+endif
+else
+BIND_CONF_OPTS += --with-openssl=no
+endif
+
+# Used by dnssec-checkds and dnssec-coverage
+ifeq ($(BR2_PACKAGE_PYTHON)$(BR2_PACKAGE_PYTHON3),)
+BIND_CONF_OPTS += --with-python=no
+endif
+
+ifeq ($(BR2_PACKAGE_READLINE),y)
+BIND_DEPENDENCIES += readline
+else
+BIND_CONF_OPTS += --with-readline=no
+endif
+
+define BIND_TARGET_REMOVE_SERVER
+	rm -rf $(addprefix $(TARGET_DIR)/usr/sbin/, $(BIND_TARGET_SERVER_SBIN))
+endef
+
+define BIND_TARGET_REMOVE_TOOLS
+	rm -rf $(addprefix $(TARGET_DIR)/usr/bin/, $(BIND_TARGET_TOOLS_BIN))
+endef
+
+ifeq ($(BR2_PACKAGE_BIND_SERVER),y)
+define BIND_INSTALL_INIT_SYSV
+	$(INSTALL) -m 0755 -D package/bind/S81named \
+		$(TARGET_DIR)/etc/init.d/S81named
+endef
+define BIND_INSTALL_INIT_SYSTEMD
+	$(INSTALL) -D -m 644 package/bind/named.service \
+		$(TARGET_DIR)/usr/lib/systemd/system/named.service
+
+	mkdir -p $(TARGET_DIR)/etc/systemd/system/multi-user.target.wants
+
+	ln -sf /usr/lib/systemd/system/named.service \
+		$(TARGET_DIR)/etc/systemd/system/multi-user.target.wants/named.service
+endef
+else
+BIND_POST_INSTALL_TARGET_HOOKS += BIND_TARGET_REMOVE_SERVER
+endif
+
+ifeq ($(BR2_PACKAGE_BIND_TOOLS),)
+BIND_POST_INSTALL_TARGET_HOOKS += BIND_TARGET_REMOVE_TOOLS
+endif
+
+define BIND_USERS
+	named -1 named -1 * /etc/bind - - BIND daemon
+endef
+
+$(eval $(autotools-package))

deprecated/firmware/buildroot/package/bind/named.service

@@ -0,0 +1,12 @@
+[Unit]
+Description=BIND Domain Name Server
+Documentation=man:named(8)
+After=network.target
+
+[Service]
+ExecStart=/usr/sbin/named -f -u named
+ExecReload=/usr/sbin/rndc reload
+ExecStop=/usr/sbin/rndc stop
+
+[Install]
+WantedBy=multi-user.target