libidn and fix for ghostscript passwords

The new ghostscript could not decrypt some password protected files. It turned out to be a bug in ghostscript but in the process of investigating I thought it might be related to missing libidn that is also used in PDF passwords, so I added it.

See merge request nexedi/slapos!1455

component/curl/buildout.cfg

@@ -9,6 +9,7 @@ extends =
   ../xz-utils/buildout.cfg
   ../zstd/buildout.cfg
   ../zlib/buildout.cfg
+  ../libidn/buildout.cfg
   ../nghttp2/buildout.cfg
   ../ngtcp2/buildout.cfg
   ../nghttp3/buildout.cfg
@@ -52,7 +53,7 @@ configure-options =
   --without-libssh2
   --without-libssh
   --without-librtmp
-  --without-libidn2
+  --with-libidn2=${libidn2:location}
   --with-nghttp2=${nghttp2:location}
   --without-ngtcp2
   --without-nghttp3
@@ -72,8 +73,8 @@ WITH =
 
 environment =
   PATH=${perl:location}/bin:${pkgconfig:location}/bin:${xz-utils:location}/bin:%(PATH)s
-  PKG_CONFIG_PATH=${:OPENSSL}/lib/pkgconfig:${nghttp2:location}/lib/pkgconfig${:PKG_CONFIG_PATH}
-  LDFLAGS=-Wl,-rpath=${zlib:location}/lib -Wl,-rpath=${:OPENSSL}/lib -Wl,-rpath=${nghttp2:location}/lib -Wl,-rpath=${zstd:location}/lib ${:LDFLAGS}
+  PKG_CONFIG_PATH=${:OPENSSL}/lib/pkgconfig:${nghttp2:location}/lib/pkgconfig:${libidn2:location}/lib/pkgconfig${:PKG_CONFIG_PATH}
+  LDFLAGS=-Wl,-rpath=${libidn2:location}/lib -Wl,-rpath=${zlib:location}/lib -Wl,-rpath=${:OPENSSL}/lib -Wl,-rpath=${nghttp2:location}/lib -Wl,-rpath=${zstd:location}/lib ${:LDFLAGS}
 
 [curl-http3]
 <= curl

component/ghostscript/buildout.cfg

@@ -2,9 +2,11 @@
 extends =
   ../fontconfig/buildout.cfg
   ../freetype/buildout.cfg
+  ../libidn/buildout.cfg
   ../libjpeg/buildout.cfg
   ../libtiff/buildout.cfg
   ../libxml2/buildout.cfg
+  ../patch/buildout.cfg
   ../pkgconfig/buildout.cfg
   ../tesseract/buildout.cfg
   ../xz-utils/buildout.cfg
@@ -16,24 +18,24 @@ recipe = slapos.recipe.cmmi
 shared = true
 url = https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10020/ghostscript-10.02.0.tar.xz
 md5sum = 80c1cdfada72f2eb5987dc0d590ea5b2
-pkg_config_depends = ${libtiff:location}/lib/pkgconfig:${libjpeg:location}/lib/pkgconfig:${fontconfig:location}/lib/pkgconfig:${fontconfig:pkg_config_depends}
+pkg_config_depends = ${libidn:location}/lib/pkgconfig:${libtiff:location}/lib/pkgconfig:${libjpeg:location}/lib/pkgconfig:${fontconfig:location}/lib/pkgconfig:${fontconfig:pkg_config_depends}
 # XXX --with-tessdata work arounds a slaprunner bug of having softwares installed in a path containing //
 configure-options =
   --disable-cups
-  --disable-threadsafe
   --with-system-libtiff
-  --without-libidn
   --without-so
   --without-x
   --with-drivers=FILES
   --with-tessdata=$(python -c 'print("""${:tessdata-location}""".replace("//", "/"))')
 environment =
-  PATH=${pkgconfig:location}/bin:${xz-utils:location}/bin:%(PATH)s
+  PATH=${patch:location}/bin:${pkgconfig:location}/bin:${xz-utils:location}/bin:%(PATH)s
   PKG_CONFIG_PATH=${:pkg_config_depends}
   CFLAGS=-I${libjpeg:location}/include
-  LDFLAGS=-Wl,-rpath=${fontconfig:location}/lib -Wl,-rpath=${freetype:location}/lib -Wl,-rpath=${libtiff:location}/lib -L${libjpeg:location}/lib -Wl,-rpath=${libjpeg:location}/lib
-  LD_LIBRARY_PATH=${fontconfig:location}/lib:${freetype:location}/lib:${libtiff:location}/lib:${libxml2:location}/lib
-
+  LDFLAGS=-Wl,-rpath=${libidn:location}/lib -Wl,-rpath=${fontconfig:location}/lib -Wl,-rpath=${freetype:location}/lib -Wl,-rpath=${libtiff:location}/lib -L${libjpeg:location}/lib -Wl,-rpath=${libjpeg:location}/lib
+  LD_LIBRARY_PATH=${libidn:location}/lib:${fontconfig:location}/lib:${freetype:location}/lib:${libtiff:location}/lib:${libxml2:location}/lib
+patches =
+  https://github.com/ArtifexSoftware/ghostpdl/commit/f8a4030a319705b9402b386a0ada8dd00b8181d3.patch#7b6dcda1cf19e639994921713fb41277
+patch-options = -p1
 # configure gives priority to local jpeg library and refuse mixing local libjpeg with "system" libtiff.
 # We remove this local jpeg library source folder so that configure picks up the slapos versions of these libraries.
 pre-configure = rm -r jpeg

component/libidn/buildout.cfg

+# GNU Libidn is a fully documented implementation of the Stringprep,
+# Punycode and IDNA 2003 specifications
+
+[libidn]
+recipe = slapos.recipe.cmmi
+shared = true
+url = https://ftp.gnu.org/gnu/libidn/libidn-1.41.tar.gz
+md5sum = 2cbff2f75f904328ac507af576b07197
+
+[libidn2]
+recipe = slapos.recipe.cmmi
+shared = true
+url = https://ftp.gnu.org/gnu/libidn/libidn2-2.3.4.tar.gz
+md5sum = a12109804fc9c5d7fb31f068c66655b8