Wed Jul 27 04:11:25 2011 UTC ()
1.4.12:

Bug Fixes:

* removed ldns-src tarball inside the unbound tarball.
* [bugzilla: 395 ]
  fix that id bits of other query may leak out under conditions
* fix replyaddr count wrong after jostled queries, which leads to eventual starvation where the daemon has no replyaddrs left to use.
* fix that the listening socket is not closed when too many remote control connections are made at the same time.
* version number in example config file.
* fix that --enable-static-exe does not complain about it unknown.
* iana portlist updated

1.4.11:

Features:

* log-queries: yesno option, default is no, prints querylog.
* ignore-cd-flag: yesno to provide dnssec to legacy servers.
* Use -flto compiler flag for link time optimization, if supported.
* unbound-control has version number in the header, and uses port number registered with IANA, 8953.

Bug Fixes:

* Fix Makefile for U in environment, since wrong U is more common than deansification necessity.
* defense in depth against the assertion failure bug fixed in 1.4.10, an error is printed to log instead of an assertion failure.
* [bugzilla: 386 ]
  --enable-allsymbols option links all binaries to libunbound and reduces install size significantly.
* Fix TTL of SOA so negative TTL is separately cached from normal TTL.
* configure created with newer autoconf 2.66.
* [bugzilla: 378 ]
  Fix that configure checks for ldns_get_random presence.
* queries with CD flag set cause DNSSEC validation, but the answer is not withheld if it is bogus. Thus, unbound will retry if it is bad and curb the TTL if it is bad, thus protecting the cache for use by downstream validators.
* val-override-date: -1 ignores dates entirely, for NTP usage.
* harden-below-nxdomain: changed so that it activates when the cached nxdomain is dnssec secure. This avoids backwards incompatibility because those old servers do not have dnssec.
* statistics-interval prints the number of jostled queries to log.
* IPv6 service address for d.root-servers.net (2001:500:2D::D).
* updated ldns tarball to 1.6.10rc2 snapshot
* iana portlist updated.


(pettai)
diff -r1.15 -r1.16 pkgsrc/net/unbound/Makefile
diff -r1.13 -r1.14 pkgsrc/net/unbound/distinfo
diff -r1.7 -r0 pkgsrc/net/unbound/patches/patch-ac
cvs diff -r1.15 -r1.16 pkgsrc/net/unbound/Makefile (expand / switch to unified diff)

--- pkgsrc/net/unbound/Makefile 2011/06/19 16:15:57 1.15
+++ pkgsrc/net/unbound/Makefile 2011/07/27 04:11:25 1.16
@@ -1,36 +1,79 @@ @@ -1,36 +1,79 @@
1# $NetBSD: Makefile,v 1.15 2011/06/19 16:15:57 pettai Exp $ 1# $NetBSD: Makefile,v 1.16 2011/07/27 04:11:25 pettai Exp $
2 2
3DISTNAME= unbound-1.4.10 3DISTNAME= unbound-1.4.12
4CATEGORIES= net 4CATEGORIES= net
5MASTER_SITES= http://www.unbound.net/downloads/ 5MASTER_SITES= http://www.unbound.net/downloads/
6 6
7MAINTAINER= joerg@NetBSD.org 7MAINTAINER= joerg@NetBSD.org
8HOMEPAGE= http://www.unbound.net/ 8HOMEPAGE= http://www.unbound.net/
9COMMENT= DNS resolver and recursive server 9COMMENT= DNS resolver and recursive server
10LICENSE= modified-bsd 10LICENSE= modified-bsd
11 11
12PKG_DESTDIR_SUPPORT= user-destdir 12PKG_DESTDIR_SUPPORT= user-destdir
13 13
14BUILD_DEFS+= VARBASE 14BUILD_DEFS+= VARBASE
15 15
16GNU_CONFIGURE= yes 16GNU_CONFIGURE= yes
17USE_LIBTOOL= yes 17USE_LIBTOOL= yes
18USE_TOOLS+= gmake 18USE_TOOLS+= gmake
19 19
20CONFIGURE_ARGS+= --with-ldns=${BUILDLINK_PREFIX.ldns} 20CONFIGURE_ARGS+= --with-ldns=${BUILDLINK_PREFIX.ldns}
21CONFIGURE_ARGS+= --with-libexpat=${BUILDLINK_PREFIX.expat} 21CONFIGURE_ARGS+= --with-libexpat=${BUILDLINK_PREFIX.expat}
22CONFIGURE_ARGS+= --with-pidfile=${VARBASE}/run/unbound.pid 22CONFIGURE_ARGS+= --with-pidfile=${VARBASE}/run/unbound.pid
23CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFBASE} 23CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFBASE}
 24CONFIGURE_ARGS+= --enable-allsymbols
 25
 26# Add the same logic as for ldns, so sha2/gost is configured automatically
 27.include "../../security/openssl/buildlink3.mk"
 28
 29PLIST_VARS+= sha2 gost
 30.if defined(USE_BUILTIN.openssl) && !empty(USE_BUILTIN.openssl:M[yY][eE][sS])
 31PLIST_VARS.gost!= \
 32 if ${PKG_ADMIN} pmatch 'openssl>=1.0.0' ${BUILTIN_PKG.openssl:Q}; then \
 33 ${ECHO} "yes"; \
 34 else \
 35 ${ECHO} "no"; \
 36 fi
 37PLIST_VARS.sha2!= \
 38 if ${PKG_ADMIN} pmatch 'openssl>=0.9.8' ${BUILTIN_PKG.openssl:Q}; then \
 39 ${ECHO} "yes"; \
 40 else \
 41 ${ECHO} "no"; \
 42 fi
 43.else
 44PLIST_VARS.gost!= \
 45 if ${PKG_INFO} -qe 'openssl>=1.0.0'; then \
 46 ${ECHO} yes; \
 47 else \
 48 ${ECHO} no; \
 49 fi
 50PLIST_VARS.sha2!= \
 51 if ${PKG_INFO} -qe 'openssl>=0.9.8'; then \
 52 ${ECHO} yes; \
 53 else \
 54 ${ECHO} no; \
 55 fi
 56.endif
 57.if ${PLIST_VARS.gost} == "yes"
 58CONFIGURE_ARGS+= --enable-gost
 59.else
 60CONFIGURE_ARGS+= --disable-gost
 61.endif
 62.if ${PLIST_VARS.sha2} == "yes"
 63CONFIGURE_ARGS+= --enable-sha2
 64.else
 65CONFIGURE_ARGS+= --disable-sha2
 66.endif
24 67
25SUBST_CLASSES+= paths 68SUBST_CLASSES+= paths
26SUBST_STAGE.paths= post-configure 69SUBST_STAGE.paths= post-configure
27SUBST_MESSAGE.paths= Fixing path names 70SUBST_MESSAGE.paths= Fixing path names
28SUBST_FILES.paths= doc/example.conf doc/*.5 doc/*.8 71SUBST_FILES.paths= doc/example.conf doc/*.5 doc/*.8
29SUBST_SED.paths= -e "s|/usr/local|${PREFIX}|" 72SUBST_SED.paths= -e "s|/usr/local|${PREFIX}|"
30 73
31INSTALL_MAKE_FLAGS+= \ 74INSTALL_MAKE_FLAGS+= \
32 configfile=${PREFIX}/share/examples/unbound/unbound.conf 75 configfile=${PREFIX}/share/examples/unbound/unbound.conf
33 76
34PKG_SYSCONFSUBDIR= unbound 77PKG_SYSCONFSUBDIR= unbound
35 78
36CONF_FILES+= share/examples/unbound/unbound.conf \ 79CONF_FILES+= share/examples/unbound/unbound.conf \
@@ -38,15 +81,14 @@ CONF_FILES+= share/examples/unbound/unbo @@ -38,15 +81,14 @@ CONF_FILES+= share/examples/unbound/unbo
38 81
39RCD_SCRIPTS= unbound 82RCD_SCRIPTS= unbound
40 83
41UNBOUND_USER?= unbound 84UNBOUND_USER?= unbound
42UNBOUND_GROUP?= unbound 85UNBOUND_GROUP?= unbound
43 86
44PKG_GROUPS= ${UNBOUND_GROUP} 87PKG_GROUPS= ${UNBOUND_GROUP}
45PKG_USERS= ${UNBOUND_USER}:${UNBOUND_GROUP} 88PKG_USERS= ${UNBOUND_USER}:${UNBOUND_GROUP}
46 89
47.include "options.mk" 90.include "options.mk"
48 91
49.include "../../textproc/expat/buildlink3.mk" 92.include "../../textproc/expat/buildlink3.mk"
50.include "../../net/ldns/buildlink3.mk" 93.include "../../net/ldns/buildlink3.mk"
51.include "../../security/openssl/buildlink3.mk" 
52.include "../../mk/bsd.pkg.mk" 94.include "../../mk/bsd.pkg.mk"
cvs diff -r1.13 -r1.14 pkgsrc/net/unbound/distinfo (expand / switch to unified diff)

--- pkgsrc/net/unbound/distinfo 2011/06/19 16:15:57 1.13
+++ pkgsrc/net/unbound/distinfo 2011/07/27 04:11:25 1.14
@@ -1,6 +1,5 @@ @@ -1,6 +1,5 @@
1$NetBSD: distinfo,v 1.13 2011/06/19 16:15:57 pettai Exp $ 1$NetBSD: distinfo,v 1.14 2011/07/27 04:11:25 pettai Exp $
2 2
3SHA1 (unbound-1.4.10.tar.gz) = ac9ab61a51e147ade69ca8b043fee2ed76336a62 3SHA1 (unbound-1.4.12.tar.gz) = c46c05d1fa2402a59c10f51864fd4c62d10a472f
4RMD160 (unbound-1.4.10.tar.gz) = 7102613a43e566d542ca6b571094a8fef3b901e0 4RMD160 (unbound-1.4.12.tar.gz) = 2e3a35f1e72046c9701cd3f51a8a2f58881a03d3
5Size (unbound-1.4.10.tar.gz) = 4476504 bytes 5Size (unbound-1.4.12.tar.gz) = 3506466 bytes
6SHA1 (patch-ac) = 2ad1a444a425e8583c1212faa4479f0d65061bff 
File Deleted: pkgsrc/net/unbound/patches/Attic/patch-ac