Knot DNS 2.0.1 (2015-09-02) =========================== Bugfixes: --------- - Do not reload expired zones on 'knotc reload' and server startup - Fix rare race-condition in event scheduling causing delayed event execution - Fix skipping of non-authoritative nodes in NSEC proofs - Fix TC flag setting in RRL slipped answers - Disable domain name compression for root label - Log via journald only when running under systemd - Fix CNAME following when quering for NSEC RR type - Fix refreshing of DNSSEC signatures for zone keys - Fix binding an unavailable IPv6 address on Linux (IP_FREEBIND) - Fix infinite loop in knotc zonestatus and memstats - Fix memory leak in configuration on server shutdown - Fix broken dnsproxy module - Fix DNSSEC KASP timestamps parsing in strict POSIX environment - fix multi value parsing on big-endian - Adapt to Nettle 3 API break causing base64 decoding failures on big-endian Features: --------- - Add 'keymgr zone key ds' to show key's DS record - Add 'keymgr tsig generate' to generate TSIG keys - Add query module scoping to process either all queries or zone queries only - Add support for file name globbing in config file includes - Add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries Improvements: ------------- - Send minimal responses (remove NS from Authority section for NOERROR) - Update persistent timers only on shutdown for better performance - Allow change of RR TTL over DDNS - Documentation fixes, updates, and improvements in formatting - Install yparser and zscanner header files - Improve lookup of libsystemd build dependencies - Fix compilation warnings in endian conversion functions on OpenBSD Knot DNS 2.0.0 (2015-06-26) =========================== Bugfixes: --------- - Fix lost NOTIFY message if received during zone transfer - Disable fast zone parser when compiled in Clang (workaround for Clang bug) - kdig: Record correct dnstap SocketProtocol when retrying over TCP - kdig: Hide TSIG section with +noall - Do not set AA flag for AXFR/IXFR queries Features: --------- - DNSSEC: separate library, switch to GnuTLS, new utilities - DNSSEC: basic KASP support (generate initial keys, ZSK rollover) - Configuration: New text format in YAML, binary store in LMDB - Zone parser: Split long TXT/SPF strings into multiple strings - kdig: Add generic dump style option (+generic) - Try all master servers in multi-master environment - Improved remotes and ACLs (multiple addresses, multiple keys) - Basic support for zone file patterns (%s to substitute zone name) - Disable zone file synchronization by setting 'zonefile_sync' to '-1' - knsupdate: Add input prompt in interactive mode and 'quit' command - knsupdate: Allow TSIG algorithm specification in interactive prompt Improvements: ------------- - Zone dump: Do not write class for SOA record (unified with other RR types) - Zone dump: Do not write master server address into the zone file - Documentation: Manual pages are included in HTML and PDFdiff -r1.24 -r1.25 pkgsrc/net/knot/Makefile
(pettai)
@@ -1,44 +1,54 @@ | @@ -1,44 +1,54 @@ | |||
1 | # $NetBSD: Makefile,v 1.24 2015/06/30 13:17:10 pettai Exp $ | 1 | # $NetBSD: Makefile,v 1.25 2015/10/26 19:23:08 pettai Exp $ | |
2 | 2 | |||
3 | DISTNAME= knot-1.5.3 | 3 | DISTNAME= knot-2.0.1 | |
4 | CATEGORIES= net | 4 | CATEGORIES= net | |
5 | MASTER_SITES= https://secure.nic.cz/files/knot-dns/ | 5 | MASTER_SITES= https://secure.nic.cz/files/knot-dns/ | |
6 | EXTRACT_SUFX= .tar.xz | |||
6 | 7 | |||
7 | MAINTAINER= pettai@NetBSD.org | 8 | MAINTAINER= pettai@NetBSD.org | |
8 | HOMEPAGE= http://www.knot-dns.cz/ | 9 | HOMEPAGE= http://www.knot-dns.cz/ | |
9 | COMMENT= Knot (auth) DNS server | 10 | COMMENT= Knot (auth) DNS server | |
10 | LICENSE= gnu-gpl-v3 | 11 | LICENSE= gnu-gpl-v3 | |
11 | 12 | |||
12 | BUILD_DEFS+= VARBASE | 13 | BUILD_DEFS+= VARBASE | |
13 | 14 | |||
14 | GNU_CONFIGURE= yes | 15 | GNU_CONFIGURE= yes | |
15 | CONFIGURE_ARGS+= --prefix=${PREFIX:Q} | 16 | CONFIGURE_ARGS+= --prefix=${PREFIX:Q} | |
16 | CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR} | 17 | CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR} | |
17 | CONFIGURE_ARGS+= --localstatedir=${VARBASE}/knot | 18 | CONFIGURE_ARGS+= --localstatedir=${VARBASE}/knot | |
18 | CONFIGURE_ARGS+= --with-rundir=${VARBASE}/run/knot | 19 | CONFIGURE_ARGS+= --with-rundir=${VARBASE}/run/knot | |
19 | CONFIGURE_ARGS+= --with-storage=${VARBASE}/knot/lib | 20 | CONFIGURE_ARGS+= --with-storage=${VARBASE}/knot/lib | |
21 | CONFIGURE_ARGS+= --with-urcu=${BUILDLINK_PREFIX.userspace-rcu} | |||
22 | CONFIGURE_ARGS+= --with-libidn=${BUILDLINK_PREFIX.libidn} | |||
20 | 23 | |||
21 | USE_LIBTOOL= yes | 24 | USE_LIBTOOL= yes | |
22 | USE_TOOLS+= bison flex gmake | 25 | USE_TOOLS+= bison flex gmake pkg-config | |
26 | ||||
27 | PKGCONFIG_OVERRIDE= src/dnssec/libdnssec.pc.in | |||
28 | PKGCONFIG_OVERRIDE+= src/libknot.pc.in | |||
29 | PKGCONFIG_OVERRIDE+= src/zscanner/libzscanner.pc.in | |||
30 | ||||
23 | RCD_SCRIPTS= knot | 31 | RCD_SCRIPTS= knot | |
24 | 32 | |||
25 | EGDIR= ${PREFIX}/share/examples/knot | 33 | EGDIR= ${PREFIX}/share/examples/knot | |
26 | KNOT_SYSCONFDIR= ${PKG_SYSCONFDIR}/knot | 34 | KNOT_SYSCONFDIR= ${PKG_SYSCONFDIR}/knot | |
27 | 35 | |||
28 | SUBST_CLASSES+= paths | 36 | SUBST_CLASSES+= paths | |
29 | SUBST_FILES.paths= ${WRKSRC}/samples/Makefile.in | 37 | SUBST_FILES.paths= ${WRKSRC}/samples/Makefile.in | |
30 | SUBST_STAGE.paths= post-patch | 38 | SUBST_STAGE.paths= post-patch | |
31 | SUBST_SED.paths= -e 's,@EGDIR@,${EGDIR},' | 39 | SUBST_SED.paths= -e 's,@EGDIR@,${EGDIR},' | |
32 | 40 | |||
33 | CONF_FILES= ${EGDIR}/knot.sample.conf \ | 41 | CONF_FILES= ${EGDIR}/knot.sample.conf \ | |
34 | ${KNOT_SYSCONFDIR}/knot.sample.conf | 42 | ${KNOT_SYSCONFDIR}/knot.sample.conf | |
35 | CONF_FILES+= ${EGDIR}/example.com.zone \ | 43 | CONF_FILES+= ${EGDIR}/example.com.zone \ | |
36 | ${KNOT_SYSCONFDIR}/example.com.zone | 44 | ${KNOT_SYSCONFDIR}/example.com.zone | |
37 | 45 | |||
38 | INSTALLATION_DIRS= ${EGDIR} ${KNOT_SYSCONFDIR} | 46 | INSTALLATION_DIRS= ${EGDIR} ${KNOT_SYSCONFDIR} | |
39 | OWN_DIRS+= ${VARBASE}/knot | 47 | OWN_DIRS+= ${VARBASE}/knot | |
40 | 48 | |||
41 | .include "../../devel/userspace-rcu/buildlink3.mk" | 49 | .include "../../devel/userspace-rcu/buildlink3.mk" | |
42 | .include "../../security/openssl/buildlink3.mk" | 50 | .include "../../security/gnutls/buildlink3.mk" | |
51 | .include "../../textproc/jansson/buildlink3.mk" | |||
52 | .include "../../devel/libidn/buildlink3.mk" | |||
43 | .include "../../devel/zlib/buildlink3.mk" | 53 | .include "../../devel/zlib/buildlink3.mk" | |
44 | .include "../../mk/bsd.pkg.mk" | 54 | .include "../../mk/bsd.pkg.mk" |
@@ -1,19 +1,106 @@ | @@ -1,19 +1,106 @@ | |||
1 | @comment $NetBSD: PLIST,v 1.6 2014/11/10 21:20:32 pettai Exp $ | 1 | @comment $NetBSD: PLIST,v 1.7 2015/10/26 19:23:08 pettai Exp $ | |
2 | bin/kdig | 2 | bin/kdig | |
3 | bin/khost | 3 | bin/khost | |
4 | bin/knsec3hash | 4 | bin/knsec3hash | |
5 | bin/knsupdate | 5 | bin/knsupdate | |
6 | include/dnssec/binary.h | |||
7 | include/dnssec/crypto.h | |||
8 | include/dnssec/dnssec.h | |||
9 | include/dnssec/error.h | |||
10 | include/dnssec/event.h | |||
11 | include/dnssec/kasp.h | |||
12 | include/dnssec/key.h | |||
13 | include/dnssec/keyid.h | |||
14 | include/dnssec/keystore.h | |||
15 | include/dnssec/keytag.h | |||
16 | include/dnssec/list.h | |||
17 | include/dnssec/nsec.h | |||
18 | include/dnssec/random.h | |||
19 | include/dnssec/sign.h | |||
20 | include/dnssec/tsig.h | |||
21 | include/libknot/binary.h | |||
22 | include/libknot/consts.h | |||
23 | include/libknot/descriptor.h | |||
24 | include/libknot/dname.h | |||
25 | include/libknot/errcode.h | |||
26 | include/libknot/internal/array-sort.h | |||
27 | include/libknot/internal/base32hex.h | |||
28 | include/libknot/internal/base64.h | |||
29 | include/libknot/internal/binsearch.h | |||
30 | include/libknot/internal/consts.h | |||
31 | include/libknot/internal/endian.h | |||
32 | include/libknot/internal/errcode.h | |||
33 | include/libknot/internal/getline.h | |||
34 | include/libknot/internal/heap.h | |||
35 | include/libknot/internal/hhash.h | |||
36 | include/libknot/internal/lists.h | |||
37 | include/libknot/internal/macros.h | |||
38 | include/libknot/internal/mem.h | |||
39 | include/libknot/internal/mempattern.h | |||
40 | include/libknot/internal/mempool.h | |||
41 | include/libknot/internal/namedb/namedb.h | |||
42 | include/libknot/internal/namedb/namedb_lmdb.h | |||
43 | include/libknot/internal/namedb/namedb_trie.h | |||
44 | include/libknot/internal/net.h | |||
45 | include/libknot/internal/print.h | |||
46 | include/libknot/internal/sockaddr.h | |||
47 | include/libknot/internal/strlcat.h | |||
48 | include/libknot/internal/strlcpy.h | |||
49 | include/libknot/internal/tolower.h | |||
50 | include/libknot/internal/trie/hat-trie.h | |||
51 | include/libknot/internal/trie/murmurhash3.h | |||
52 | include/libknot/internal/utils.h | |||
53 | include/libknot/internal/wire_ctx.h | |||
54 | include/libknot/libknot.h | |||
55 | include/libknot/packet/compr.h | |||
56 | include/libknot/packet/pkt.h | |||
57 | include/libknot/packet/rrset-wire.h | |||
58 | include/libknot/packet/wire.h | |||
59 | include/libknot/processing/layer.h | |||
60 | include/libknot/processing/overlay.h | |||
61 | include/libknot/processing/requestor.h | |||
62 | include/libknot/rdata.h | |||
63 | include/libknot/rdataset.h | |||
64 | include/libknot/rrset-dump.h | |||
65 | include/libknot/rrset.h | |||
66 | include/libknot/rrtype/aaaa.h | |||
67 | include/libknot/rrtype/dnskey.h | |||
68 | include/libknot/rrtype/naptr.h | |||
69 | include/libknot/rrtype/nsec.h | |||
70 | include/libknot/rrtype/nsec3.h | |||
71 | include/libknot/rrtype/nsec3param.h | |||
72 | include/libknot/rrtype/opt.h | |||
73 | include/libknot/rrtype/rdname.h | |||
74 | include/libknot/rrtype/rrsig.h | |||
75 | include/libknot/rrtype/soa.h | |||
76 | include/libknot/rrtype/tsig.h | |||
77 | include/libknot/rrtype/txt.h | |||
78 | include/libknot/tsig-op.h | |||
79 | include/libknot/tsig.h | |||
80 | include/libknot/yparser/yparser.h | |||
81 | include/libknot/yparser/ypformat.h | |||
82 | include/libknot/yparser/ypscheme.h | |||
83 | include/libknot/yparser/yptrafo.h | |||
84 | include/zscanner/error.h | |||
85 | include/zscanner/scanner.h | |||
86 | lib/libdnssec.la | |||
6 | lib/libknot.la | 87 | lib/libknot.la | |
7 | lib/libzscanner.la | 88 | lib/libzscanner.la | |
89 | lib/pkgconfig/libdnssec.pc | |||
90 | lib/pkgconfig/libknot.pc | |||
91 | lib/pkgconfig/libzscanner.pc | |||
92 | libexec/knot1to2 | |||
8 | man/man1/kdig.1 | 93 | man/man1/kdig.1 | |
9 | man/man1/khost.1 | 94 | man/man1/khost.1 | |
95 | man/man1/knot1to2.1 | |||
10 | man/man1/knsec3hash.1 | 96 | man/man1/knsec3hash.1 | |
11 | man/man1/knsupdate.1 | 97 | man/man1/knsupdate.1 | |
12 | man/man5/knot.conf.5 | 98 | man/man5/knot.conf.5 | |
99 | man/man8/keymgr.8 | |||
13 | man/man8/knotc.8 | 100 | man/man8/knotc.8 | |
14 | man/man8/knotd.8 | 101 | man/man8/knotd.8 | |
102 | sbin/keymgr | |||
15 | sbin/knotc | 103 | sbin/knotc | |
16 | sbin/knotd | 104 | sbin/knotd | |
17 | share/examples/knot/example.com.zone | 105 | share/examples/knot/example.com.zone | |
18 | share/examples/knot/knot.sample.conf | 106 | share/examples/knot/knot.sample.conf | |
19 | @pkgdir etc/knot |
@@ -1,7 +1,7 @@ | @@ -1,7 +1,7 @@ | |||
1 | $NetBSD: distinfo,v 1.14 2014/11/10 21:20:32 pettai Exp $ | 1 | $NetBSD: distinfo,v 1.15 2015/10/26 19:23:08 pettai Exp $ | |
2 | 2 | |||
3 | SHA1 (knot-1.5.3.tar.gz) = 4692c5001472443d07ac088592b349793a968706 | 3 | SHA1 (knot-2.0.1.tar.xz) = 155a9aa3e7e6f12b70ec8e079ef6c8e137b0f8cf | |
4 | RMD160 (knot-1.5.3.tar.gz) = 72442dff1c138ed0ad0300e395c524f318baa123 | 4 | RMD160 (knot-2.0.1.tar.xz) = 5fa3ed2da1fb673d329a0d5ade8a4284675c0a63 | |
5 | Size (knot-1.5.3.tar.gz) = 1175445 bytes | 5 | SHA512 (knot-2.0.1.tar.xz) = b74069a6da4eb0f456a3bd38318712f467f736af1712a14772f7e539b009c02f8e447c2fcd21f5005a2a4906466294ab6b46e7782aac3b88619063aed14cddb5 | |
6 | SHA1 (patch-Makefile.in) = b24790f99d791ac184eff66db563a0a314f8370c | 6 | Size (knot-2.0.1.tar.xz) = 958560 bytes | |
7 | SHA1 (patch-samples_Makefile.in) = 7a2cc5b1eebc7483ffcefc565d200d9a203d49ff | 7 | SHA1 (patch-samples_Makefile.in) = be60c4bfb4ed49dbe8c55dc5d453c8733fb4fb61 |
@@ -1,36 +1,35 @@ | @@ -1,36 +1,35 @@ | |||
1 | #!@RCD_SCRIPTS_SHELL@ | 1 | #!@RCD_SCRIPTS_SHELL@ | |
2 | # | 2 | # | |
3 | # $NetBSD: knot.sh,v 1.2 2015/06/30 13:17:10 pettai Exp $ | 3 | # $NetBSD: knot.sh,v 1.3 2015/10/26 19:23:08 pettai Exp $ | |
4 | # | 4 | # | |
5 | # PROVIDE: knot | 5 | # PROVIDE: knot | |
6 | # REQUIRE: NETWORKING syslogd | 6 | # REQUIRE: NETWORKING syslogd | |
7 | # BEFORE: DAEMON | 7 | # BEFORE: DAEMON | |
8 | 8 | |||
9 | if [ -f /etc/rc.subr ]; then | 9 | if [ -f /etc/rc.subr ]; then | |
10 | . /etc/rc.subr | 10 | . /etc/rc.subr | |
11 | fi | 11 | fi | |
12 | 12 | |||
13 | name="knot" | 13 | name="knot" | |
14 | rcvar=${name} | 14 | rcvar=${name} | |
15 | command="@PREFIX@/sbin/knotc" | 15 | command="@PREFIX@/sbin/knotc" | |
16 | knotd="@PREFIX@/sbin/knotd" | 16 | knotd="@PREFIX@/sbin/knotd" | |
17 | command_args="" | 17 | command_args="" | |
18 | pidfile="@VARBASE@/knot/${name}.pid" | 18 | pidfile="@VARBASE@/knot/${name}.pid" | |
19 | start_precmd="knot_precmd" | 19 | start_precmd="knot_precmd" | |
20 | extra_commands="restart reload" | 20 | extra_commands="reload" | |
21 | start_cmd="$knotd -d" | 21 | start_cmd="$knotd -d" | |
22 | stop_cmd="$command stop" | 22 | stop_cmd="$command stop" | |
23 | restart_cmd="$command restart" | |||
24 | reload_cmd="$command reload" | 23 | reload_cmd="$command reload" | |
25 | status_cmd="$command status" | 24 | status_cmd="$command status" | |
26 | 25 | |||
27 | knot_precmd() | 26 | knot_precmd() | |
28 | { | 27 | { | |
29 | if [ ! -d @VARBASE@/run/knot ]; then | 28 | if [ ! -d @VARBASE@/run/knot ]; then | |
30 | @MKDIR@ @VARBASE@/run/knot | 29 | @MKDIR@ @VARBASE@/run/knot | |
31 | @CHMOD@ 0750 @VARBASE@/run/knot | 30 | @CHMOD@ 0750 @VARBASE@/run/knot | |
32 | @CHOWN@ root:wheel @VARBASE@/run/knot | 31 | @CHOWN@ root:wheel @VARBASE@/run/knot | |
33 | fi | 32 | fi | |
34 | } | 33 | } | |
35 | 34 | |||
36 | if [ -f /etc/rc.subr ]; then | 35 | if [ -f /etc/rc.subr ]; then |
@@ -1,29 +1,25 @@ | @@ -1,29 +1,25 @@ | |||
1 | $NetBSD: patch-samples_Makefile.in,v 1.3 2014/11/10 21:20:32 pettai Exp $ | 1 | $NetBSD: patch-samples_Makefile.in,v 1.4 2015/10/26 19:23:08 pettai Exp $ | |
2 | 2 | |||
3 | Fix sysconfdir + sample conf snippet | 3 | --- samples/Makefile.in.orig 2015-10-26 16:12:16.000000000 +0000 | |
4 | ||||
5 | --- samples/Makefile.in.orig 2014-09-15 14:32:42.000000000 +0000 | |||
6 | +++ samples/Makefile.in | 4 | +++ samples/Makefile.in | |
7 | @@ -252,6 +252,7 @@ sharedstatedir = @sharedstatedir@ | 5 | @@ -264,6 +264,7 @@ sharedstatedir = @sharedstatedir@ | |
8 | srcdir = @srcdir@ | 6 | srcdir = @srcdir@ | |
9 | storage_dir = @storage_dir@ | 7 | storage_dir = @storage_dir@ | |
10 | sysconfdir = @sysconfdir@ | 8 | sysconfdir = @sysconfdir@ | |
11 | +EGDIR = @EGDIR@ | 9 | +EGDIR = @EGDIR@ | |
12 | systemd_CFLAGS = @systemd_CFLAGS@ | 10 | systemd_CFLAGS = @systemd_CFLAGS@ | |
13 | systemd_LIBS = @systemd_LIBS@ | 11 | systemd_LIBS = @systemd_LIBS@ | |
14 | target_alias = @target_alias@ | 12 | target_alias = @target_alias@ | |
15 | @@ -469,10 +470,10 @@ knot.sample.conf: knot.sample.conf.in | 13 | @@ -483,9 +484,9 @@ knot.sample.conf: knot.sample.conf.in | |
16 | mv $@.tmp $@ | 14 | mv $@.tmp $@ | |
17 | 15 | |||
18 | install-data-local: knot.sample.conf | 16 | @HAVE_DAEMON_TRUE@install-data-local: knot.sample.conf | |
19 | - [ -d $(DESTDIR)/$(config_dir) ] || \ | 17 | -@HAVE_DAEMON_TRUE@ if [ \! -f $(DESTDIR)/$(config_dir)/knot.sample.conf ]; then \ | |
20 | - $(INSTALL) -d $(DESTDIR)/$(config_dir) | 18 | -@HAVE_DAEMON_TRUE@ $(INSTALL) -d $(DESTDIR)/$(config_dir); \ | |
21 | - [ -f $(DESTDIR)/$(config_dir)/knot.sample.conf ] || \ | 19 | -@HAVE_DAEMON_TRUE@ $(INSTALL_DATA) knot.sample.conf $(srcdir)/example.com.zone $(DESTDIR)/$(config_dir); \ | |
22 | - $(INSTALL_DATA) knot.sample.conf $(srcdir)/example.com.zone $(DESTDIR)/$(config_dir) | 20 | +@HAVE_DAEMON_TRUE@ if [ \! -f $(DESTDIR)/$(EGDIR)/knot.sample.conf ]; then \ | |
23 | + [ -d $(DESTDIR)/$(EGDIR) ] || \ | 21 | +@HAVE_DAEMON_TRUE@ $(INSTALL) -d $(DESTDIR)/$(EGDIR); \ | |
24 | + $(INSTALL) -d $(DESTDIR)/$(EGDIR) | 22 | +@HAVE_DAEMON_TRUE@ $(INSTALL_DATA) knot.sample.conf $(srcdir)/example.com.zone $(DESTDIR)/$(EGDIR); \ | |
25 | + [ -f $(DESTDIR)/$(EGDIR)/knot.sample.conf ] || \ | 23 | @HAVE_DAEMON_TRUE@ fi | |
26 | + $(INSTALL_DATA) knot.sample.conf $(srcdir)/example.com.zone $(DESTDIR)/$(EGDIR) | 24 | @HAVE_BASH_COMPLETIONS_TRUE@@HAVE_DAEMON_TRUE@ if [ \! -f $(DESTDIR)/$(bash_completions_dir)/keymgr ]; then \ | |
27 | 25 | @HAVE_BASH_COMPLETIONS_TRUE@@HAVE_DAEMON_TRUE@ $(INSTALL) -d $(DESTDIR)/$(bash_completions_dir); \ | ||
28 | uninstall-local: | |||
29 | [ -f $(DESTDIR)/$(config_dir)/knot.sample.conf ] && \ |