CVS commit: pkgsrc/net/knot

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Sun Dec 17 13:22:05 UTC 2023

Modified Files:
        pkgsrc/net/knot: Makefile distinfo

Log Message:
knot: Update to 3.3.3

Changelog:
Version 3.3.3

Wednesday, December 13, 2023

Features:

      + knotd: new 'pattern' mode of ACL update owner matching (see
        'acl.update-owner-match')
      + knotc: new '+keysonly' filter for zone backup/restore

Improvements:

      + knotd: zone purging waits for finished zone expiration for better
        reliability
      + knotd: remote configuration considers more 'via' with the same address
        family
      + knotd: refresh doesn't fall back from IXFR to AXFR upon a network error
      + knotd: increased default for 'policy.rrsig-refresh' by (0.1 *
        'rrsig-lifetime')
      + knotd: new control flag 'u' for unix time output format from zone
        status
      + knotd: extended check for inconsistent acl settings
      + knotd/libknot: simplified TCP/QUIC sweep logging
      + mod-dnsproxy: all configured remote addresses are used for fallback
        operation
      + mod-dnsproxy: module responds locally if forwarding fails instead of
        SERVFAIL
      + libs: upgraded embedded libngtcp2 to 1.1.0
      + doc: various fixes and extensions

Bugfixes:

      + knotd: zone backup fails due to improper backup context
        deinitialization #891
      + knotd: failed to sign the zone if maximum zone's TTL is too high
      + knotd: malformed TCP header if used with QUIC in the generic XDP mode
      + knotd: server can crash when processing new TCP connections over XDP
      + knotd: incorrect initialization of TCP limits
      + knotd: orphaned PEM file not deleted when key generation fails
      + knotd/libknot: connection timeouts over QUIC due to incomplete
        retransfer handling #894
      + kdig: crashed when querying DNS over TLS if TLS handshake times out #
        896
      + kzonecheck: failed to check DS with SHA-1 or GOST if not supported by
        local policy
      + libdnssec: failed to compile with GnuTLS if PKCS #11 support is
        disabled


To generate a diff of this commit:
cvs rdiff -u -r1.80 -r1.81 pkgsrc/net/knot/Makefile
cvs rdiff -u -r1.45 -r1.46 pkgsrc/net/knot/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/knot/Makefile
diff -u pkgsrc/net/knot/Makefile:1.80 pkgsrc/net/knot/Makefile:1.81
--- pkgsrc/net/knot/Makefile:1.80       Sat Dec  9 06:10:07 2023
+++ pkgsrc/net/knot/Makefile    Sun Dec 17 13:22:05 2023
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.80 2023/12/09 06:10:07 ryoon Exp $
+# $NetBSD: Makefile,v 1.81 2023/12/17 13:22:05 ryoon Exp $
 
-DISTNAME=      knot-3.3.2
+DISTNAME=      knot-3.3.3
 CATEGORIES=    net
 MASTER_SITES=  https://secure.nic.cz/files/knot-dns/
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/net/knot/distinfo
diff -u pkgsrc/net/knot/distinfo:1.45 pkgsrc/net/knot/distinfo:1.46
--- pkgsrc/net/knot/distinfo:1.45       Sat Dec  9 06:10:07 2023
+++ pkgsrc/net/knot/distinfo    Sun Dec 17 13:22:05 2023
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.45 2023/12/09 06:10:07 ryoon Exp $
+$NetBSD: distinfo,v 1.46 2023/12/17 13:22:05 ryoon Exp $
 
-BLAKE2s (knot-3.3.2.tar.xz) = ebaf73f0b27880b0cad07191f118d05e19809ee8c5042b18384d678dd55a0167
-SHA512 (knot-3.3.2.tar.xz) = c19a11db43b208a6aabfd96e0c31856affdcef1b599425343663fd6e00bacc964f197de7e5d732d7180219ba57b6e426afd2b762c7528cb50755f81429aaac1a
-Size (knot-3.3.2.tar.xz) = 1580800 bytes
+BLAKE2s (knot-3.3.3.tar.xz) = 7f44396cf1cab06db54ca208b8e74e2c2c605a087106d09a7aa7d49c8dd67c1d
+SHA512 (knot-3.3.3.tar.xz) = f911c6d735dc3f2dec9920263bcb9e5ce13d8bfbd97ebc66d8388088e9bf5059fa5976b58996b8a5688c186320b97a1707375fadfdd63ebc5f976d92733d78b9
+Size (knot-3.3.3.tar.xz) = 1586348 bytes
 SHA1 (patch-samples_Makefile.in) = 499b8742dbd948e489b01d512bc7a8d8e4fe2e7b