CVS commit: pkgsrc/net/unbound

["Havard Eidnes" <he%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   he
Date:           Thu Mar 14 09:38:19 UTC 2024

Modified Files:
        pkgsrc/net/unbound: Makefile distinfo

Log Message:
Update net/unbound to version 1.19.3.

Pkgsrc changes:
 * Add dependency on devel/protobuf-c/buildlink3.mk
 * Add pkg-config as tool dependency
 * Adjust checksums

Upstream changes:
Features:
- Merge PR #973: Use the origin (DNAME) TTL for synthesized CNAMEs as
  per RFC 6672.

Bug Fixes:
- Fix unit test parse of origin syntax.
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on
  newer systems.
- Fix #964: config.h.in~ backup file in release tar balls.
- Merge #968: Replace the obsolescent fgrep with grep -F in tests.
- Merge #971: fix 'WARNING: Message has 41 extra bytes at end'.
- Fix #969: [FR] distinguish Do53, DoT and DoH in the logs.
- Fix dnstap that assertion failed on logging other than UDP and TCP
  traffic. It lists it as TCP traffic.
- Fix to sync the tests script file common.sh.
- iana portlist update.
- Updated IPv4 and IPv6 address for b.root-servers.net in root hints.
- Update test script file common.sh.
- Fix tests to use new common.sh functions, wait_logfile and
  kill_from_pidfile.
- Fix #974: doc: default number of outgoing ports without libevent.
- Merge #975: Fixed some syntax errors in rpl files.
- Fix root_zonemd unit test, it checks that the root ZONEMD verifies,
  now that the root has a valid ZONEMD.
- Update example.conf with cookie options.
- Merge #980: DoH: reject non-h2 early. To fix #979: Improve errors
  for non-HTTP/2 DoH clients.
- Merge #985: Add DoH and DoT to dnstap message.
- Fix #983: Sha1 runtime insecure change was incomplete.
- Remove unneeded newlines and improve indentation in remote control
  code.
- Merge #987: skip edns frag retry if advertised udp payload size is
  not smaller.
- Fix unit test for #987 change in udp1xxx retry packet send.
- Merge #988: Fix NLnetLabs#981: dump_cache truncates large records.
- Fix to link with -lcrypt32 for OpenSSL 3.2.0 on Windows.
- Fix to link with libssp for libcrypto and getaddrinfo check for
  only header. Also update crosscompile to remove ssp for 32bit.
- Merge #993: Update b.root-servers.net also in example config file.
- Update workflow for ports to use newer openssl on windows compile.
- Fix warning for windres on resource files due to redefinition.
- Fix for #997: Print details for SSL certificate failure.
- Update error printout for duplicate trust anchors to include the
  trust anchor name (relates to #920).
- Update message TTL when using cached RRSETs. It could result in
  non-expired messages with expired RRSETs (non-usable messages by
  Unbound).
- Merge #999: Search for protobuf-c with pkg-config.
- Fix #1006: Can't find protobuf-c package since #999.
- Fix documentation for access-control in the unbound.conf man page.
- Merge #1010: Mention REFUSED has the TC bit set with unmatched
  allow_cookie acl in the manpage. It also fixes the code to match the
  documentation about clients with a valid cookie that bypass the
  ratelimit regardless of the allow_cookie acl.
- Document the suspend argument for process_ds_response().
- Move github workflows to use checkoutv4.
- Fix edns subnet replies for scope zero answers to not get stored
  in the global cache, and in cachedb, when the upstream replies
  without an EDNS record.
- Fix for #1022: Fix ede prohibited in access control refused answers.
- Fix unbound-control-setup.cmd to use 3072 bits so that certificates
  are long enough for newer OpenSSL versions.
- Fix TTL of synthesized CNAME when a DNAME is used from cache.
- Fix unbound-control-setup.cmd to have CA v3 basicConstraints,
  like unbound-control-setup.sh has.


To generate a diff of this commit:
cvs rdiff -u -r1.106 -r1.107 pkgsrc/net/unbound/Makefile
cvs rdiff -u -r1.78 -r1.79 pkgsrc/net/unbound/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/unbound/Makefile
diff -u pkgsrc/net/unbound/Makefile:1.106 pkgsrc/net/unbound/Makefile:1.107
--- pkgsrc/net/unbound/Makefile:1.106   Thu Mar  7 09:48:53 2024
+++ pkgsrc/net/unbound/Makefile Thu Mar 14 09:38:19 2024
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.106 2024/03/07 09:48:53 he Exp $
+# $NetBSD: Makefile,v 1.107 2024/03/14 09:38:19 he Exp $
 
-DISTNAME=      unbound-1.19.2
+DISTNAME=      unbound-1.19.3
 CATEGORIES=    net
 MASTER_SITES=  https://nlnetlabs.nl/downloads/unbound/
 
@@ -23,6 +23,8 @@ CONFIGURE_ARGS+=      --sysconfdir=${PKG_SYSC
 GNU_CONFIGURE=         yes
 TEST_TARGET=           test
 
+USE_TOOLS+=    pkg-config
+
 .include "options.mk"
 
 # unbound uses some OpenBSD libc functions such as reallocarray(3).
@@ -97,4 +99,5 @@ PKG_USERS=    ${UNBOUND_USER}:${UNBOUND_GRO
 .include "../../textproc/expat/buildlink3.mk"
 BUILDLINK_API_DEPENDS.flex+=   flex>=2.6.4
 .include "../../devel/flex/buildlink3.mk"
+.include "../../devel/protobuf-c/buildlink3.mk"
 .include "../../mk/bsd.pkg.mk"

Index: pkgsrc/net/unbound/distinfo
diff -u pkgsrc/net/unbound/distinfo:1.78 pkgsrc/net/unbound/distinfo:1.79
--- pkgsrc/net/unbound/distinfo:1.78    Thu Mar  7 09:48:53 2024
+++ pkgsrc/net/unbound/distinfo Thu Mar 14 09:38:19 2024
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.78 2024/03/07 09:48:53 he Exp $
+$NetBSD: distinfo,v 1.79 2024/03/14 09:38:19 he Exp $
 
-BLAKE2s (unbound-1.19.2.tar.gz) = 3a8a028475ff59596326c88502f714d3b84e50a55f851f4db03556ad68890dca
-SHA512 (unbound-1.19.2.tar.gz) = 03183f9d52df5644808d7cbbf2d15458a2cf5bf79bd952bbd4384bcef2e6899631605ce7780700169d7532cec0203c16765bb7706e3717241300904763914350
-Size (unbound-1.19.2.tar.gz) = 6340281 bytes
+BLAKE2s (unbound-1.19.3.tar.gz) = c3825b7651b250ca5531cd11089ece3157e7419ad174c1ab100567df1e49f042
+SHA512 (unbound-1.19.3.tar.gz) = f860614f090a5a081cceff8ca7f4b3d416c00a251ae14ceb6b4159dc8cd022f025592074d3d78aee2f86c3eeae9d1a314713e4740aa91062579143199accd159
+Size (unbound-1.19.3.tar.gz) = 6338685 bytes
 SHA1 (patch-configure) = fe43ed9fdcfe12897e30f03833aec631d473529d