Tue Feb 28 20:05:05 2012 UTC ()
Unbound 1.4.16

Features:

* applied patch to support outgoing-interface with ub_ctx_set_option.

Bug Fixes:

* Fix validation failures (like: validation failure xx: no NSEC3 closest
  encloser from yy for DS zz. while building chain of trust, because of
  a bug in the TTL-fix in 1.4.15, it picked the wrong rdata for an NSEC3.
  Now it does not change rdata, and fixes TTL.
* Fix version-number in libtool to be version-info so it produces
  libunbound.so.2 like it should.
* Fixes for port to OpenIndiana OS with gcc 4.6.
* Fix to write key files completely to a temporary file, and if that
  succeeds, replace the real key file. So failures leave a useful file.

Unbound 1.4.15

Bug Fixes:

* Fix for memory leak (about 20 bytes when a tcp or udp send operation
  towards authority servers failed, takes about 50.000 such failures to
  leak one Mb, such failures are also usually logged).
* Fix to randomize hash function, based on 28c3 congress.
* [bugzilla: 425 ] unbound reports wrong TTL in reply, it reports a TTL
  that would be permissible by the RFCs but it is not the TTL in the cache.
* [bugzilla: 429 ] add ub_version() call to libunbound. API version increase,
  with (binary) backwards compatibility for the previous version.
* Fix bug where canonical_compare of RRSIG did not downcase the signer-name.
  This is mostly harmless because RRSIGs do not have to be sorted in
  canonical order, usually.
* uninitialised variable in reprobe for rtt blocked domains fixed.
* iana portlist updated.


(pettai)
diff -r1.19 -r1.20 pkgsrc/net/unbound/Makefile
diff -r1.16 -r1.17 pkgsrc/net/unbound/distinfo
cvs diff -r1.19 -r1.20 pkgsrc/net/unbound/Makefile (switch to unified diff)

--- pkgsrc/net/unbound/Makefile 2011/12/20 14:02:02 1.19
+++ pkgsrc/net/unbound/Makefile 2012/02/28 20:05:05 1.20
@@ -1,97 +1,96 @@ @@ -1,97 +1,96 @@
1# $NetBSD: Makefile,v 1.19 2011/12/20 14:02:02 pettai Exp $ 1# $NetBSD: Makefile,v 1.20 2012/02/28 20:05:05 pettai Exp $
2 2
3DISTNAME= unbound-1.4.14 3DISTNAME= unbound-1.4.16
4CATEGORIES= net 4CATEGORIES= net
5MASTER_SITES= http://www.unbound.net/downloads/ 5MASTER_SITES= http://www.unbound.net/downloads/
6 6
7MAINTAINER= joerg@NetBSD.org 7MAINTAINER= joerg@NetBSD.org
8HOMEPAGE= http://www.unbound.net/ 8HOMEPAGE= http://www.unbound.net/
9COMMENT= DNS resolver and recursive server 9COMMENT= DNS resolver and recursive server
10LICENSE= modified-bsd 10LICENSE= modified-bsd
11 11
12PKG_DESTDIR_SUPPORT= user-destdir 12PKG_DESTDIR_SUPPORT= user-destdir
13 13
14BUILD_DEFS+= VARBASE 14BUILD_DEFS+= VARBASE
15 15
16GNU_CONFIGURE= yes 16GNU_CONFIGURE= yes
17USE_LIBTOOL= yes 17USE_LIBTOOL= yes
18USE_TOOLS+= gmake 
19 18
20CONFIGURE_ARGS+= --with-ldns=${BUILDLINK_PREFIX.ldns} 19CONFIGURE_ARGS+= --with-ldns=${BUILDLINK_PREFIX.ldns}
21CONFIGURE_ARGS+= --with-libexpat=${BUILDLINK_PREFIX.expat} 20CONFIGURE_ARGS+= --with-libexpat=${BUILDLINK_PREFIX.expat}
22CONFIGURE_ARGS+= --with-pidfile=${VARBASE}/run/unbound.pid 21CONFIGURE_ARGS+= --with-pidfile=${VARBASE}/run/unbound.pid
23CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFBASE} 22CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFBASE}
24CONFIGURE_ARGS+= --enable-allsymbols 23CONFIGURE_ARGS+= --enable-allsymbols
25 24
26# Add the same logic as for ldns, so sha2/gost is configured automatically 25# Add the same logic as for ldns, so sha2/gost is configured automatically
27CHECK_BUILTIN.openssl= yes 26CHECK_BUILTIN.openssl= yes
28.include "../../security/openssl/builtin.mk" 27.include "../../security/openssl/builtin.mk"
29CHECK_BUILTIN.openssl= no 28CHECK_BUILTIN.openssl= no
30.include "../../security/openssl/buildlink3.mk" 29.include "../../security/openssl/buildlink3.mk"
31 30
32PLIST_VARS+= sha2 gost 31PLIST_VARS+= sha2 gost
33.if defined(USE_BUILTIN.openssl) && !empty(USE_BUILTIN.openssl:M[yY][eE][sS]) 32.if defined(USE_BUILTIN.openssl) && !empty(USE_BUILTIN.openssl:M[yY][eE][sS])
34PLIST_VARS.gost!= \ 33PLIST_VARS.gost!= \
35 if ${PKG_ADMIN} pmatch 'openssl>=1.0.0' ${BUILTIN_PKG.openssl:Q}; then \ 34 if ${PKG_ADMIN} pmatch 'openssl>=1.0.0' ${BUILTIN_PKG.openssl:Q}; then \
36 ${ECHO} "yes"; \ 35 ${ECHO} "yes"; \
37 else \ 36 else \
38 ${ECHO} "no"; \ 37 ${ECHO} "no"; \
39 fi 38 fi
40PLIST_VARS.sha2!= \ 39PLIST_VARS.sha2!= \
41 if ${PKG_ADMIN} pmatch 'openssl>=0.9.8' ${BUILTIN_PKG.openssl:Q}; then \ 40 if ${PKG_ADMIN} pmatch 'openssl>=0.9.8' ${BUILTIN_PKG.openssl:Q}; then \
42 ${ECHO} "yes"; \ 41 ${ECHO} "yes"; \
43 else \ 42 else \
44 ${ECHO} "no"; \ 43 ${ECHO} "no"; \
45 fi 44 fi
46.else 45.else
47PLIST_VARS.gost!= \ 46PLIST_VARS.gost!= \
48 if ${PKG_INFO} -qe 'openssl>=1.0.0'; then \ 47 if ${PKG_INFO} -qe 'openssl>=1.0.0'; then \
49 ${ECHO} yes; \ 48 ${ECHO} yes; \
50 else \ 49 else \
51 ${ECHO} no; \ 50 ${ECHO} no; \
52 fi 51 fi
53PLIST_VARS.sha2!= \ 52PLIST_VARS.sha2!= \
54 if ${PKG_INFO} -qe 'openssl>=0.9.8'; then \ 53 if ${PKG_INFO} -qe 'openssl>=0.9.8'; then \
55 ${ECHO} yes; \ 54 ${ECHO} yes; \
56 else \ 55 else \
57 ${ECHO} no; \ 56 ${ECHO} no; \
58 fi 57 fi
59.endif 58.endif
60.if ${PLIST_VARS.gost} == "yes" 59.if ${PLIST_VARS.gost} == "yes"
61CONFIGURE_ARGS+= --enable-gost 60CONFIGURE_ARGS+= --enable-gost
62.else 61.else
63CONFIGURE_ARGS+= --disable-gost 62CONFIGURE_ARGS+= --disable-gost
64.endif 63.endif
65.if ${PLIST_VARS.sha2} == "yes" 64.if ${PLIST_VARS.sha2} == "yes"
66CONFIGURE_ARGS+= --enable-sha2 65CONFIGURE_ARGS+= --enable-sha2
67.else 66.else
68CONFIGURE_ARGS+= --disable-sha2 67CONFIGURE_ARGS+= --disable-sha2
69.endif 68.endif
70 69
71SUBST_CLASSES+= paths 70SUBST_CLASSES+= paths
72SUBST_STAGE.paths= post-configure 71SUBST_STAGE.paths= post-configure
73SUBST_MESSAGE.paths= Fixing path names 72SUBST_MESSAGE.paths= Fixing path names
74SUBST_FILES.paths= doc/example.conf doc/*.5 doc/*.8 73SUBST_FILES.paths= doc/example.conf doc/*.5 doc/*.8
75SUBST_SED.paths= -e "s|/usr/local|${PREFIX}|" 74SUBST_SED.paths= -e "s|/usr/local|${PREFIX}|"
76 75
77INSTALL_MAKE_FLAGS+= \ 76INSTALL_MAKE_FLAGS+= \
78 configfile=${PREFIX}/share/examples/unbound/unbound.conf 77 configfile=${PREFIX}/share/examples/unbound/unbound.conf
79 78
80PKG_SYSCONFSUBDIR= unbound 79PKG_SYSCONFSUBDIR= unbound
81 80
82CONF_FILES+= share/examples/unbound/unbound.conf \ 81CONF_FILES+= share/examples/unbound/unbound.conf \
83 ${PKG_SYSCONFDIR}/unbound.conf 82 ${PKG_SYSCONFDIR}/unbound.conf
84 83
85RCD_SCRIPTS= unbound 84RCD_SCRIPTS= unbound
86 85
87UNBOUND_USER?= unbound 86UNBOUND_USER?= unbound
88UNBOUND_GROUP?= unbound 87UNBOUND_GROUP?= unbound
89 88
90PKG_GROUPS= ${UNBOUND_GROUP} 89PKG_GROUPS= ${UNBOUND_GROUP}
91PKG_USERS= ${UNBOUND_USER}:${UNBOUND_GROUP} 90PKG_USERS= ${UNBOUND_USER}:${UNBOUND_GROUP}
92 91
93.include "options.mk" 92.include "options.mk"
94 93
95.include "../../textproc/expat/buildlink3.mk" 94.include "../../textproc/expat/buildlink3.mk"
96.include "../../net/ldns/buildlink3.mk" 95.include "../../net/ldns/buildlink3.mk"
97.include "../../mk/bsd.pkg.mk" 96.include "../../mk/bsd.pkg.mk"
cvs diff -r1.16 -r1.17 pkgsrc/net/unbound/distinfo (switch to unified diff)

--- pkgsrc/net/unbound/distinfo 2011/12/20 14:02:02 1.16
+++ pkgsrc/net/unbound/distinfo 2012/02/28 20:05:05 1.17
@@ -1,5 +1,5 @@ @@ -1,5 +1,5 @@
1$NetBSD: distinfo,v 1.16 2011/12/20 14:02:02 pettai Exp $ 1$NetBSD: distinfo,v 1.17 2012/02/28 20:05:05 pettai Exp $
2 2
3SHA1 (unbound-1.4.14.tar.gz) = 1435029abe63d0106213acb9f173b885183cf1d7 3SHA1 (unbound-1.4.16.tar.gz) = 68ed8737b1a6e3f9a67812f7e962fd6740494c1e
4RMD160 (unbound-1.4.14.tar.gz) = 136aff9812eebace73c26b608f6411bd048215cc 4RMD160 (unbound-1.4.16.tar.gz) = 5da0ddeb315fb1aa5ea7a388b3e4bef251f03536
5Size (unbound-1.4.14.tar.gz) = 3546634 bytes 5Size (unbound-1.4.16.tar.gz) = 3562989 bytes