pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/net/bind914 net/bind914: add version 9.14.1



details:   https://anonhg.NetBSD.org/pkgsrc/rev/94d4c316e7ea
branches:  trunk
changeset: 322882:94d4c316e7ea
user:      taca <taca%pkgsrc.org@localhost>
date:      Tue Apr 30 03:34:34 2019 +0000

description:
net/bind914: add version 9.14.1

Add bind914 version 9.14.1 package (BIND 9.14.1).

pkgsrc chagnes:

* Add blacklist support from NetBSD base system.
* Note about required directories.

BIND, the Berkeley Internet Name Daemon.  This package contains the BIND
9.14 release.

  * A new "plugin" mechanism has been added to allow query functionality
    to be extended using dynamically loadable libraries. The "filter-aaaa"
    feature has been removed from named and is now implemented as a
    plugin.
  * QNAME minimization, as described in RFC 7816, is now supported.
  * Socket and task code has been refactored to improve performance on
    most modern machines.
  * "Root key sentinel" support, enabling validating resolvers to indicate
    via a special query which trust anchors are configured for the root
    zone.
  * Secondary zones can now be configured as "mirror" zones; their
    contents are transferred in as with traditional slave zones, but are
    subject to DNSSEC validation and are not treated as authoritative data
    when answering. This makes it easier to configure a local copy of the
    root zone as described in RFC 7706.
  * The "validate-except" option allows configuration of domains below
    which DNSSEC validation should not be performed.
  * The default value of "dnssec-validation" is now "auto".
  * IDNA2008 is now supported when linking with libidn2.
  * "named -V" now outputs the default paths for files used by named and
    other tools.

diffstat:

 net/bind914/DESCR                                            |   24 +
 net/bind914/MESSAGE                                          |   19 +
 net/bind914/Makefile                                         |   76 ++
 net/bind914/PLIST                                            |  387 +++++++++++
 net/bind914/buildlink3.mk                                    |   12 +
 net/bind914/builtin.mk                                       |   92 ++
 net/bind914/distinfo                                         |   42 +
 net/bind914/files/named9.sh                                  |   74 ++
 net/bind914/files/smf/manifest.xml                           |  138 +++
 net/bind914/files/smf/named.sh                               |  262 +++++++
 net/bind914/options.mk                                       |  141 ++++
 net/bind914/patches/patch-bin_named_Makefile.in              |   38 +
 net/bind914/patches/patch-bin_named_main.c                   |   27 +
 net/bind914/patches/patch-bin_named_pfilter.c                |   58 +
 net/bind914/patches/patch-bin_named_pfilter.h                |    9 +
 net/bind914/patches/patch-bin_named_server.c                 |   23 +
 net/bind914/patches/patch-bin_nsupdate_nsupdate.c            |   24 +
 net/bind914/patches/patch-bin_pkcs11_pkcs11-keygen.c         |   30 +
 net/bind914/patches/patch-bin_tests_system_metadata_tests.sh |   15 +
 net/bind914/patches/patch-bin_tests_system_rpz_tests.sh      |   15 +
 net/bind914/patches/patch-bin_tools_arpaname.c               |   15 +
 net/bind914/patches/patch-bin_tools_nsec3hash.c              |   15 +
 net/bind914/patches/patch-config.h.in                        |   16 +
 net/bind914/patches/patch-config.threads.in                  |   15 +
 net/bind914/patches/patch-configure                          |  265 +++++++
 net/bind914/patches/patch-configure.orig                     |  257 +++++++
 net/bind914/patches/patch-contrib_dlz_config.dlz.in          |   15 +
 net/bind914/patches/patch-lib_dns_byaddr.c                   |   15 +
 net/bind914/patches/patch-lib_dns_dnsrps.c                   |   14 +
 net/bind914/patches/patch-lib_dns_gssapi__link.c             |   20 +
 net/bind914/patches/patch-lib_dns_keytable.c                 |   15 +
 net/bind914/patches/patch-lib_dns_lookup.c                   |   15 +
 net/bind914/patches/patch-lib_dns_message.c                  |   15 +
 net/bind914/patches/patch-lib_dns_rbt.c                      |   68 +
 net/bind914/patches/patch-lib_dns_rbtdb.c                    |   15 +
 net/bind914/patches/patch-lib_dns_request.c                  |   24 +
 net/bind914/patches/patch-lib_dns_sdb.c                      |   15 +
 net/bind914/patches/patch-lib_dns_sdlz.c                     |   24 +
 net/bind914/patches/patch-lib_dns_spnego.c                   |   15 +
 net/bind914/patches/patch-lib_dns_validator.c                |   15 +
 net/bind914/patches/patch-lib_dns_view.c                     |   15 +
 net/bind914/patches/patch-lib_isc_backtrace.c                |   15 +
 net/bind914/patches/patch-lib_isc_include_isc_socket.h       |   99 ++
 net/bind914/patches/patch-lib_isc_include_isc_types.h        |   18 +
 net/bind914/patches/patch-lib_isc_rwlock.c                   |   21 +
 net/bind914/patches/patch-lib_isc_stats.c                    |   18 +
 net/bind914/patches/patch-lib_isc_unix_socket.c              |  381 ++++++++++
 net/bind914/patches/patch-lib_isc_unix_time.c                |   37 +
 48 files changed, 2978 insertions(+), 0 deletions(-)

diffs (truncated from 3170 to 300 lines):

diff -r a63f512d3f00 -r 94d4c316e7ea net/bind914/DESCR
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/net/bind914/DESCR Tue Apr 30 03:34:34 2019 +0000
@@ -0,0 +1,24 @@
+BIND, the Berkeley Internet Name Daemon.  This package contains the BIND
+9.14 release.
+
+  * A new "plugin" mechanism has been added to allow query functionality
+    to be extended using dynamically loadable libraries. The "filter-aaaa"
+    feature has been removed from named and is now implemented as a
+    plugin.
+  * QNAME minimization, as described in RFC 7816, is now supported.
+  * Socket and task code has been refactored to improve performance on
+    most modern machines.
+  * "Root key sentinel" support, enabling validating resolvers to indicate
+    via a special query which trust anchors are configured for the root
+    zone.
+  * Secondary zones can now be configured as "mirror" zones; their
+    contents are transferred in as with traditional slave zones, but are
+    subject to DNSSEC validation and are not treated as authoritative data
+    when answering. This makes it easier to configure a local copy of the
+    root zone as described in RFC 7706.
+  * The "validate-except" option allows configuration of domains below
+    which DNSSEC validation should not be performed.
+  * The default value of "dnssec-validation" is now "auto".
+  * IDNA2008 is now supported when linking with libidn2.
+  * "named -V" now outputs the default paths for files used by named and
+    other tools.
diff -r a63f512d3f00 -r 94d4c316e7ea net/bind914/MESSAGE
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/net/bind914/MESSAGE       Tue Apr 30 03:34:34 2019 +0000
@@ -0,0 +1,19 @@
+===========================================================================
+$NetBSD: MESSAGE,v 1.1 2019/04/30 03:34:34 taca Exp $
+
+Please consider running BIND under the pseudo user account "${BIND_USER}"
+in a chroot environment for security reasons.
+
+To achieve this, set the variable "named_chrootdir" in /etc/rc.conf to
+the directory with the chroot environment e.g. "${BIND_DIR}".
+
+Note: named(8) requires writable directories under "/etc/namedb" which 
+specified by "directory" in "options" statement:
+
+       cache
+       keys
+       nta
+
+Make sure to these directories exists with writable by "${BIND_USER}" user.
+
+===========================================================================
diff -r a63f512d3f00 -r 94d4c316e7ea net/bind914/Makefile
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/net/bind914/Makefile      Tue Apr 30 03:34:34 2019 +0000
@@ -0,0 +1,76 @@
+# $NetBSD: Makefile,v 1.1 2019/04/30 03:34:34 taca Exp $
+
+DISTNAME=      bind-${BIND_VERSION}
+PKGNAME=       ${DISTNAME:S/-P/pl/}
+CATEGORIES=    net
+MASTER_SITES=  ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/
+
+MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
+HOMEPAGE=      http://www.isc.org/software/bind/
+COMMENT=       Berkeley Internet Name Daemon implementation of DNS, version 9.12
+LICENSE=       mpl-2.0
+
+CONFLICTS+=    host-[0-9]*
+
+MAKE_JOBS_SAFE=        no
+USE_CWRAPPERS= no
+
+BIND_VERSION=  9.14.1
+
+.include "../../mk/bsd.prefs.mk"
+
+BUILD_DEFS+=   BIND_DIR VARBASE
+
+.include "options.mk"
+
+USE_TOOLS+=            pax perl
+USE_LIBTOOL=           yes
+GNU_CONFIGURE=         yes
+
+CONFIGURE_ARGS+=       --with-libtool
+CONFIGURE_ARGS+=       --sysconfdir=${PKG_SYSCONFDIR}
+CONFIGURE_ARGS+=       --localstatedir=${VARBASE}
+CONFIGURE_ARGS+=       --with-openssl=${SSLBASE:Q}
+CONFIGURE_ARGS+=       --with-python=no
+.if !empty(MACHINE_PLATFORM:MNetBSD-*-m68k) || \
+    !empty(MACHINE_PLATFORM:MNetBSD-*-mipsel) || \
+    !empty(MACHINE_PLATFORM:MNetBSD-*-vax)
+CONFIGURE_ARGS+=       --disable-atomic
+.endif
+CONFIGURE_ARGS.DragonFly+=     --disable-kqueue
+
+PKG_GROUPS_VARS+=      BIND_GROUP
+PKG_USERS_VARS=                BIND_USER
+
+PKG_GROUPS=            ${BIND_GROUP}
+PKG_USERS=             ${BIND_USER}:${BIND_GROUP}
+
+PKG_GECOS.${BIND_USER}=        Named pseudo-user
+PKG_HOME.${BIND_USER}= ${BIND_DIR}
+
+DOCS=                  CHANGES HISTORY OPTIONS README
+
+FILES_SUBST+=          BIND_GROUP=${BIND_GROUP} \
+                       BIND_USER=${BIND_USER} PAX=${PAX:Q} \
+                       SSLBASE=${SSLBASE}
+MESSAGE_SUBST+=                BIND_DIR=${BIND_DIR} BIND_USER=${BIND_USER}
+
+DOCDIR=                        share/doc/bind9
+
+RCD_SCRIPTS=           named9
+SMF_METHODS=           named
+
+INSTALL_MAKE_FLAGS+=   sysconfdir=${PREFIX}/share/examples/bind9
+CONF_FILES+=           share/examples/bind9/bind.keys \
+                       ${PKG_SYSCONFDIR}/bind.keys
+
+INSTALLATION_DIRS+=    ${DOCDIR} ${DOCDIR}/arm
+
+post-install:
+.for f in ${DOCS}
+       ${INSTALL_DATA} ${WRKSRC}/${f} ${DESTDIR}${PREFIX}/${DOCDIR}
+.endfor
+       ${INSTALL_DATA} ${WRKSRC}/doc/arm/*.html ${DESTDIR}${PREFIX}/${DOCDIR}/arm
+
+.include "../../security/openssl/buildlink3.mk"
+.include "../../mk/bsd.pkg.mk"
diff -r a63f512d3f00 -r 94d4c316e7ea net/bind914/PLIST
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/net/bind914/PLIST Tue Apr 30 03:34:34 2019 +0000
@@ -0,0 +1,387 @@
+@comment $NetBSD: PLIST,v 1.1 2019/04/30 03:34:34 taca Exp $
+bin/arpaname
+bin/bind9-config
+bin/delv
+bin/dig
+${PLIST.dnstap}bin/dnstap-read
+bin/host
+bin/isc-config.sh
+bin/mdig
+bin/named-rrchecker
+bin/nslookup
+bin/nsupdate
+include/bind9/check.h
+include/bind9/getaddresses.h
+include/bind9/version.h
+include/dns/acl.h
+include/dns/adb.h
+include/dns/badcache.h
+include/dns/bit.h
+include/dns/byaddr.h
+include/dns/cache.h
+include/dns/callbacks.h
+include/dns/catz.h
+include/dns/cert.h
+include/dns/client.h
+include/dns/clientinfo.h
+include/dns/compress.h
+include/dns/db.h
+include/dns/dbiterator.h
+include/dns/dbtable.h
+include/dns/diff.h
+include/dns/dispatch.h
+include/dns/dlz.h
+include/dns/dlz_dlopen.h
+include/dns/dns64.h
+include/dns/dnsrps.h
+include/dns/dnssec.h
+include/dns/dnstap.h
+include/dns/ds.h
+include/dns/dsdigest.h
+include/dns/dyndb.h
+include/dns/ecdb.h
+include/dns/ecs.h
+include/dns/edns.h
+include/dns/enumclass.h
+include/dns/enumtype.h
+include/dns/events.h
+include/dns/fixedname.h
+include/dns/forward.h
+include/dns/geoip.h
+include/dns/ipkeylist.h
+include/dns/iptable.h
+include/dns/journal.h
+include/dns/keydata.h
+include/dns/keyflags.h
+include/dns/keytable.h
+include/dns/keyvalues.h
+include/dns/lib.h
+include/dns/librpz.h
+include/dns/log.h
+include/dns/lookup.h
+include/dns/master.h
+include/dns/masterdump.h
+include/dns/message.h
+include/dns/name.h
+include/dns/ncache.h
+include/dns/nsec.h
+include/dns/nsec3.h
+include/dns/nta.h
+include/dns/opcode.h
+include/dns/order.h
+include/dns/peer.h
+include/dns/portlist.h
+include/dns/private.h
+include/dns/rbt.h
+include/dns/rcode.h
+include/dns/rdata.h
+include/dns/rdataclass.h
+include/dns/rdatalist.h
+include/dns/rdataset.h
+include/dns/rdatasetiter.h
+include/dns/rdataslab.h
+include/dns/rdatastruct.h
+include/dns/rdatatype.h
+include/dns/request.h
+include/dns/resolver.h
+include/dns/result.h
+include/dns/rootns.h
+include/dns/rpz.h
+include/dns/rriterator.h
+include/dns/rrl.h
+include/dns/sdb.h
+include/dns/sdlz.h
+include/dns/secalg.h
+include/dns/secproto.h
+include/dns/soa.h
+include/dns/ssu.h
+include/dns/stats.h
+include/dns/tcpmsg.h
+include/dns/time.h
+include/dns/timer.h
+include/dns/tkey.h
+include/dns/tsec.h
+include/dns/tsig.h
+include/dns/ttl.h
+include/dns/types.h
+include/dns/update.h
+include/dns/validator.h
+include/dns/version.h
+include/dns/view.h
+include/dns/xfrin.h
+include/dns/zone.h
+include/dns/zonekey.h
+include/dns/zoneverify.h
+include/dns/zt.h
+include/dst/dst.h
+include/dst/gssapi.h
+include/dst/result.h
+include/irs/context.h
+include/irs/dnsconf.h
+include/irs/netdb.h
+include/irs/platform.h
+include/irs/resconf.h
+include/irs/types.h
+include/irs/version.h
+include/isc/aes.h
+include/isc/app.h
+include/isc/assertions.h
+include/isc/atomic.h
+include/isc/backtrace.h
+include/isc/base32.h
+include/isc/base64.h
+include/isc/bind9.h
+include/isc/buffer.h
+include/isc/bufferlist.h
+include/isc/commandline.h
+include/isc/condition.h
+include/isc/counter.h
+include/isc/crc64.h
+include/isc/deprecated.h
+include/isc/dir.h
+include/isc/errno.h
+include/isc/error.h
+include/isc/event.h
+include/isc/eventclass.h
+include/isc/file.h
+include/isc/formatcheck.h
+include/isc/fsaccess.h
+include/isc/fuzz.h
+include/isc/hash.h
+include/isc/heap.h
+include/isc/hex.h
+include/isc/hmac.h
+include/isc/ht.h
+include/isc/httpd.h
+include/isc/interfaceiter.h
+include/isc/iterated_hash.h
+include/isc/json.h
+include/isc/lang.h
+include/isc/lex.h
+include/isc/lfsr.h
+include/isc/lib.h
+include/isc/likely.h
+include/isc/list.h
+include/isc/log.h



Home | Main Index | Thread Index | Old Index