;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2013, 2014, 2015, 2017 Ludovic Courtès <ludo@gnu.org>
;;; Copyright © 2013 Andreas Enge <andreas@enge.fr>
;;; Copyright © 2016 Leo Famulari <leo@famulari.name>
;;; Copyright © 2019 Mathieu Othacehe <m.othacehe@gmail.com>
;;; Copyright © 2022 Marius Bakke <marius@gnu.org>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (gnu packages cyrus-sasl)
  #:use-module (gnu packages)
  #:use-module (gnu packages autotools)
  #:use-module (gnu packages crypto)
  #:use-module (gnu packages dbm)
  #:use-module (gnu packages kerberos)
  #:use-module (gnu packages tls)
  #:use-module ((guix licenses) #:prefix license:)
  #:use-module (guix gexp)
  #:use-module (guix packages)
  #:use-module (guix download)
  #:use-module (guix build-system gnu))

(define-public cyrus-sasl
  (package
    (name "cyrus-sasl")
    (version "2.1.28")
    (source (origin
              (method url-fetch)
              (uri (string-append "https://github.com/cyrusimap/cyrus-sasl"
                                  "/releases/download/cyrus-sasl-" version
                                  "/cyrus-sasl-" version ".tar.gz"))
              (sha256
               (base32
                "135kbgyfpa1mwqp5dm223yr6ddzi4vjm7cr414d7rmhys2mwdkvw"))))
    (build-system gnu-build-system)
    (inputs (list gdbm libxcrypt mit-krb5 openssl))
    (arguments
     (list
      #:configure-flags #~(list (string-append "--with-plugindir="
                                               (assoc-ref %outputs "out")
                                               "/lib/sasl2")
                                ;; When cross-compiling the build system is
                                ;; unable to determine whether SPNEGO is
                                ;; supported; Kerberos does, so enable it.
                                #$@(if (%current-target-system)
                                       '("ac_cv_gssapi_supports_spnego=yes")
                                       '()))

      ;; The 'plugins' directory has shared source files, such as
      ;; 'plugin_common.c'.  When building the shared libraries there, libtool
      ;; ends up doing "ln -s plugin_common.lo plugin_common.o", which can
      ;; fail with EEXIST when building things in parallel.
      #:parallel-build? #f))
    (synopsis "Simple Authentication Security Layer implementation")
    (description
     "SASL (Simple Authentication Security Layer) is an Internet
standards-track method for remote computers to authenticate.  The Cyrus SASL
library makes supporting various SASL mechanisms easy for both client and
server writers.")
    (license (license:non-copyleft "file://COPYING"
                                   "See COPYING in the distribution."))
    (home-page "https://cyrusimap.org/sasl/")))
e='2020-09-29 21:56:27 +0200'>2020-09-29</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=d5366500ec1aeecad6fc292b195088e30aa715fd'>secret-service: Add proper logging procedure and log to syslog.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/secret-service.scm (log): New macro.
(secret-service-send-secrets, secret-service-receive-secrets): Use it
instead of raw 'format' calls.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-29 21:56:27 +0200'>2020-09-29</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=59261a22f9819b1fdf797ffba17af17d385d6c92'>services: secret-service: Add initial client/server handshake.</a><span class='msg-avail'>...<span class='msg-tooltip'>This allows the client running on the host to know when it's actually
connect to the server running in the guest.  Failing that, the client
would connect right away to QEMU and send secrets even though the server
is not running yet in the guest, which is unreliable.

* gnu/build/secret-service.scm (secret-service-send-secrets): Add
 #:handshake-timeout.  Read from SOCK an initial message from the
server.  Return #f on error.
(secret-service-receive-secrets): Send 'secret-service-server' message
to the client.  Close SOCK upon timeout.
* gnu/services/virtualization.scm (hurd-vm-shepherd-service): 'start'
method returns #f when 'secret-service-send-secrets' returns #f.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-29 21:56:27 +0200'>2020-09-29</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=f9090015c58e6f47be74fe6116ef10a90378a899'>secret-service: Fix file port leak in 'secret-service-send-secrets'.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/secret-service.scm (secret-service-send-secrets): Use
'call-with-input-file' instead of 'open-input-file'.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-29 21:56:27 +0200'>2020-09-29</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=4d047853da76dc5fa5dd50ecb750c861342ef47b'>secret-service: Add a timeout when waiting for a client.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/secret-service.scm (secret-service-receive-secrets)
[wait-for-client]: Call 'select' with a 60s timeout before 'accept'.
Return #f upon timeout.
[read-secrets]: Return FILES on success.
Adjust caller of 'wait-for-client' to handle #f.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-29 21:56:26 +0200'>2020-09-29</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=118b6dbb46ff3376db7467301fe59673c042d220'>secret-service: Clarify the origin of messages.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/secret-service.scm (secret-service-send-secrets)
(secret-service-receive-secrets): Prefix messages by "secret service".
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-01 16:06:38 +0200'>2020-09-01</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=ec32d4f291b3cc039a99f8090b6c2b2444be5a83'>services: Add secret-service-type.</a><span class='msg-avail'>...<span class='msg-tooltip'>This adds a "secret-service" that can be added to a Childhurd VM to receive
out-of-band secrets (keys) sent from the host.

Co-authored-by: Ludovic Courtès &lt;ludo@gnu.org&gt;

* gnu/services/virtualization.scm (secret-service-activation): New procedure.
(secret-service-type): New variable.
* gnu/build/secret-service.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
</span></span></td><td>Jan (janneke) Nieuwenhuizen</td></tr>