Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.netbsd.org", Issuer "Postmaster NetBSD.org" (verified OK)) by mollari.NetBSD.org (Postfix) with ESMTPS id 2E0567A280 for ; Mon, 16 Jan 2017 09:21:15 +0000 (UTC) Received: by mail.netbsd.org (Postfix, from userid 605) id D537B85608; Mon, 16 Jan 2017 09:21:14 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 65CE585593 for ; Mon, 16 Jan 2017 09:21:14 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id ZMMWd-CH-egx for ; Mon, 16 Jan 2017 09:21:13 +0000 (UTC) Received: from cvs.NetBSD.org (unknown [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id E25D484CBD for ; Mon, 16 Jan 2017 09:21:13 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id E0904FBA6; Mon, 16 Jan 2017 09:21:13 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1484558473254180" MIME-Version: 1.0 Date: Mon, 16 Jan 2017 09:21:13 +0000 From: "Havard Eidnes" Subject: CVS commit: pkgsrc/security/opendnssec To: pkgsrc-changes@NetBSD.org Reply-To: he@netbsd.org X-Mailer: log_accum Message-Id: <20170116092113.E0904FBA6@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk This is a multi-part message in MIME format. --_----------=_1484558473254180 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: he Date: Mon Jan 16 09:21:13 UTC 2017 Modified Files: pkgsrc/security/opendnssec: Makefile distinfo Added Files: pkgsrc/security/opendnssec/patches: patch-signer_src_signer_rrset.c Log Message: Update OpenDNSSEC to version 1.4.12nb3. * Apply fix from OPENDNSSEC-778: double NSEC3PARAMS on re-salt. To generate a diff of this commit: cvs rdiff -u -r1.61 -r1.62 pkgsrc/security/opendnssec/Makefile cvs rdiff -u -r1.36 -r1.37 pkgsrc/security/opendnssec/distinfo cvs rdiff -u -r0 -r1.1 \ pkgsrc/security/opendnssec/patches/patch-signer_src_signer_rrset.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1484558473254180 Content-Disposition: inline Content-Length: 2621 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/security/opendnssec/Makefile diff -u pkgsrc/security/opendnssec/Makefile:1.61 pkgsrc/security/opendnssec/Makefile:1.62 --- pkgsrc/security/opendnssec/Makefile:1.61 Sun Dec 4 05:17:40 2016 +++ pkgsrc/security/opendnssec/Makefile Mon Jan 16 09:21:13 2017 @@ -1,8 +1,8 @@ -# $NetBSD: Makefile,v 1.61 2016/12/04 05:17:40 ryoon Exp $ +# $NetBSD: Makefile,v 1.62 2017/01/16 09:21:13 he Exp $ # DISTNAME= opendnssec-1.4.12 -PKGREVISION= 2 +PKGREVISION= 3 CATEGORIES= security net MASTER_SITES= http://www.opendnssec.org/files/source/ Index: pkgsrc/security/opendnssec/distinfo diff -u pkgsrc/security/opendnssec/distinfo:1.36 pkgsrc/security/opendnssec/distinfo:1.37 --- pkgsrc/security/opendnssec/distinfo:1.36 Sun Nov 27 14:25:41 2016 +++ pkgsrc/security/opendnssec/distinfo Mon Jan 16 09:21:13 2017 @@ -1,4 +1,4 @@ -$NetBSD: distinfo,v 1.36 2016/11/27 14:25:41 he Exp $ +$NetBSD: distinfo,v 1.37 2017/01/16 09:21:13 he Exp $ SHA1 (opendnssec-1.4.12.tar.gz) = feab78605d2c49a2788a4b65e7eb4416777e9610 RMD160 (opendnssec-1.4.12.tar.gz) = dc91f862691218ca99b3496a7340ef16f29e37aa @@ -10,4 +10,5 @@ SHA1 (patch-enforcer_utils_Makefile.in) SHA1 (patch-enforcer_utils_ksmutil.c) = f9456e0339d45dcc2776375cf40f3f8d9221878f SHA1 (patch-signer_src_daemon_engine.c) = a95846ba4aa6fa42043541bb2bde0f95464f9ba4 SHA1 (patch-signer_src_signer_ixfr.c) = 74c2c320080e585a6126e146c453998f44c164f7 +SHA1 (patch-signer_src_signer_rrset.c) = 0374fc9535c722f3b394d6d351bd08b0fe4bced1 SHA1 (patch-signer_src_signer_zone.c) = 0330236f11ccab7ed83b73bc83d851f932124318 Added files: Index: pkgsrc/security/opendnssec/patches/patch-signer_src_signer_rrset.c diff -u /dev/null pkgsrc/security/opendnssec/patches/patch-signer_src_signer_rrset.c:1.1 --- /dev/null Mon Jan 16 09:21:13 2017 +++ pkgsrc/security/opendnssec/patches/patch-signer_src_signer_rrset.c Mon Jan 16 09:21:13 2017 @@ -0,0 +1,16 @@ +$NetBSD: patch-signer_src_signer_rrset.c,v 1.1 2017/01/16 09:21:13 he Exp $ + +Fix for OPENDNSSEC-778: Double NSEEC3PARAM record after re-salt. + +--- signer/src/signer/rrset.c.orig 2016-10-17 12:32:58.000000000 +0000 ++++ signer/src/signer/rrset.c +@@ -360,8 +360,7 @@ rrset_diff(rrset_type* rrset, unsigned i + del_sigs = 1; + } + rrset->rrs[i].exists = 1; +- if ((rrset->rrtype == LDNS_RR_TYPE_DNSKEY || +- rrset->rrtype == LDNS_RR_TYPE_NSEC3PARAMS) && more_coming) { ++ if ((rrset->rrtype == LDNS_RR_TYPE_DNSKEY) && more_coming) { + continue; + } + rrset->rrs[i].is_added = 0; --_----------=_1484558473254180--