CVS commit: pkgsrc/net/unbound

["Fredrik Pettai" <pettai%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   pettai
Date:           Wed Jul 27 04:11:25 UTC 2011

Modified Files:
        pkgsrc/net/unbound: Makefile distinfo
Removed Files:
        pkgsrc/net/unbound/patches: patch-ac

Log Message:
1.4.12:

Bug Fixes:

* removed ldns-src tarball inside the unbound tarball.
* [bugzilla: 395 ]
  fix that id bits of other query may leak out under conditions
* fix replyaddr count wrong after jostled queries, which leads to eventual 
starvation where the daemon has no replyaddrs left to use.
* fix that the listening socket is not closed when too many remote control 
connections are made at the same time.
* version number in example config file.
* fix that --enable-static-exe does not complain about it unknown.
* iana portlist updated

1.4.11:

Features:

* log-queries: yesno option, default is no, prints querylog.
* ignore-cd-flag: yesno to provide dnssec to legacy servers.
* Use -flto compiler flag for link time optimization, if supported.
* unbound-control has version number in the header, and uses port number 
registered with IANA, 8953.

Bug Fixes:

* Fix Makefile for U in environment, since wrong U is more common than 
deansification necessity.
* defense in depth against the assertion failure bug fixed in 1.4.10, an error 
is printed to log instead of an assertion failure.
* [bugzilla: 386 ]
  --enable-allsymbols option links all binaries to libunbound and reduces 
install size significantly.
* Fix TTL of SOA so negative TTL is separately cached from normal TTL.
* configure created with newer autoconf 2.66.
* [bugzilla: 378 ]
  Fix that configure checks for ldns_get_random presence.
* queries with CD flag set cause DNSSEC validation, but the answer is not 
withheld if it is bogus. Thus, unbound will retry if it is bad and curb the TTL 
if it is bad, thus protecting the cache for use by downstream validators.
* val-override-date: -1 ignores dates entirely, for NTP usage.
* harden-below-nxdomain: changed so that it activates when the cached nxdomain 
is dnssec secure. This avoids backwards incompatibility because those old 
servers do not have dnssec.
* statistics-interval prints the number of jostled queries to log.
* IPv6 service address for d.root-servers.net (2001:500:2D::D).
* updated ldns tarball to 1.6.10rc2 snapshot
* iana portlist updated.


To generate a diff of this commit:
cvs rdiff -u -r1.15 -r1.16 pkgsrc/net/unbound/Makefile
cvs rdiff -u -r1.13 -r1.14 pkgsrc/net/unbound/distinfo
cvs rdiff -u -r1.7 -r0 pkgsrc/net/unbound/patches/patch-ac

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.