CVS commit: pkgsrc/net/unbound

["Havard Eidnes" <he%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   he
Date:           Mon Jun 11 10:06:58 UTC 2018

Modified Files:
        pkgsrc/net/unbound: Makefile distinfo

Log Message:
Upgrade unbound to version 1.7.2.

Upstream changes:

Features
- Fix low-rtt-pct to low-rtt-permil, as it is parts in one thousand.
- Qname minimisation default changed to yes.
- Use accept4 to speed up incoming TCP (and TLS) connections,
  available on Linux, FreeBSD and OpenBSD.
- tls-win-cert option that adds the system certificate store for
  authenticating DNS-over-TLS connections.  It can be used instead
  of the tls-cert-bundle option, or with it to add certificates.
- Patch from Syzdek: Add ability to ignore RD bit and treat all
  requests as if the RD bit is set.
- Rename additional-tls-port to tls-additional-ports.
  The older name is accepted for backwards compatibility.

Bug fixes:
- Fix for crash in daemon_cleanup with dnstap during reload,
  from Saksham Manchanda.
- Also that for dnscrypt.
- Fix spelling error in man page and note defaults as no instead of
  off.
- Fix that unbound-control reload frees the rrset keys and returns
  the memory pages to the system.
- Fix fail to reject dead peers in forward-zone, with ssl-upstream.
- Fix that configure --with-libhiredis also turns on cachedb.
- Fix gcc 8 buffer warning in testcode.
- Fix function type cast warning in libunbound context callback type.
- Fix windows to not have sticky TLS events for TCP.
- Fix read of DNS over TLS length and data in one read call.
- Fix mesh state assertion failure due to callback removal.
- Fix contrib/libunbound.pc for libssl libcrypto references,
  from https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=226914
- Fix that libunbound can do DNS-over-TLS, when configured.
- Fix that windows unbound service can use DNS-over-TLS.
- unbound-host initializes ssl (for potential DNS-over-TLS usage
  inside libunbound), when ssl upstream or a cert-bundle is configured.
- For TCP and TLS connections that don't establish, perform address
  update in infra cache, so future selections can exclude them.
- Fix that tcp sticky events are removed for closed fd on windows.
- Fix close events for tcp only.
- Fix windows tcp and tls spin on events.
- Add routine from getdns to add windows cert store to the SSL_CTX.
- in compat/arc4random call getentropy_urandom when getentropy fails
  with ENOSYS.
- Fix that fallback for windows port.
- Fix deadlock caused by incoming notify for auth-zone.


To generate a diff of this commit:
cvs rdiff -u -r1.55 -r1.56 pkgsrc/net/unbound/Makefile
cvs rdiff -u -r1.41 -r1.42 pkgsrc/net/unbound/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/unbound/Makefile
diff -u pkgsrc/net/unbound/Makefile:1.55 pkgsrc/net/unbound/Makefile:1.56
--- pkgsrc/net/unbound/Makefile:1.55    Mon May  7 07:13:28 2018
+++ pkgsrc/net/unbound/Makefile Mon Jun 11 10:06:58 2018
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.55 2018/05/07 07:13:28 he Exp $
+# $NetBSD: Makefile,v 1.56 2018/06/11 10:06:58 he Exp $
 
-DISTNAME=      unbound-1.7.1
+DISTNAME=      unbound-1.7.2
 CATEGORIES=    net
-MASTER_SITES=  http://www.unbound.net/downloads/
+MASTER_SITES=  http://www.nlnetlabs.nl/downloads/unbound/
 
 MAINTAINER=    pettai%NetBSD.org@localhost
 HOMEPAGE=      http://www.unbound.net/

Index: pkgsrc/net/unbound/distinfo
diff -u pkgsrc/net/unbound/distinfo:1.41 pkgsrc/net/unbound/distinfo:1.42
--- pkgsrc/net/unbound/distinfo:1.41    Mon May  7 07:13:28 2018
+++ pkgsrc/net/unbound/distinfo Mon Jun 11 10:06:58 2018
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.41 2018/05/07 07:13:28 he Exp $
+$NetBSD: distinfo,v 1.42 2018/06/11 10:06:58 he Exp $
 
-SHA1 (unbound-1.7.1.tar.gz) = b853b746fa1f89ecce160850ab163ef78f67eea5
-RMD160 (unbound-1.7.1.tar.gz) = fd9ee1d94d475a84997d16e2e939c661d297fa6b
-SHA512 (unbound-1.7.1.tar.gz) = 99a68abf1f60f6ea80cf2973906df44da9c577d8cac969824af1ce9ca385a2e84dd684937480da87cb73c7dc41ad5c00b0013ec74103eadb8fd7dc6f98a89255
-Size (unbound-1.7.1.tar.gz) = 5565938 bytes
+SHA1 (unbound-1.7.2.tar.gz) = 09030d0812458ebe84efae7c837f01d92b16adef
+RMD160 (unbound-1.7.2.tar.gz) = 3d1f533b5c0c3bcc2ff705e73f018da485be0ab9
+SHA512 (unbound-1.7.2.tar.gz) = a5b0794b15d72a89bd6090f6febca3199e8c66f779c5da7f07dfbacc17bd62f340a3392b9086d39f28f7ab5942aba24810347fbf0e1ea22c5641d2b00fb29387
+Size (unbound-1.7.2.tar.gz) = 5570654 bytes
 SHA1 (patch-configure) = 769ad52b9ab93bc8e48d2ffe8fef5b4b61070eba