[pkgsrc/trunk]: pkgsrc/net/powerdns Update net/powerdns* to 4.0.4.

[fhajny <fhajny%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/05514f056fc6
branches:  trunk
changeset: 364324:05514f056fc6
user:      fhajny <fhajny%pkgsrc.org@localhost>
date:      Fri Jun 23 17:12:54 2017 +0000

description:
Update net/powerdns* to 4.0.4.

This release features a fix for the ed25519 signer. This signer hashed the
message before signing, resulting in unverifiable signatures. Also on the
Elliptic Curve front, support was added for ED448 (DNSSEC algorithm 16)
by using libdecaf.

Bug fixes

- Do not hash the message in the ed25519 signer
- Make URI integers 16 bits, fixes #5443
- configure.ac: Corrects syntax error in test statement on existance
   of libcrypto_ecdsa
- configure.ac: Fix quoting issue fixes #5401
- configure.ac: Check in the detected OpenSSL/libcrypto for ECDSA
- configure.ac: Check if we can link against libatomic if needed
- Fix typo in ldapbackend.cc from issue #5091
- Sort NSEC record case insensitive
- Make sure NSEC ordernames are always lower case
- API: correctly take TTL from first record even if we are at
  the last comment
- Fix AtomicCounter unit tests on 32-bit
- Fix negative port detection for IPv6 addresses on 32-bit
- Remove support for 'right' timezones, as this code turned out to be broken
- Lowercase the TSIG algorithm name in hash computation
- Handle exceptions raised by closesocket()
- Don't leak on signing errors during outgoing AXFR; signpipe stumbles over
  interrupted rrsets; fix memory leak in gmysql backend
- TinyCDB backend: Don't leak a CDB object in case of bogus data

Improvements
- ODBC backend: Allow query logging
- Add ED25519 (algo 15) and ED448 (algo 16) support with libdecaf signer
- YaHTTP: Sync with upstream changes
- Send a notification to all slave servers after every dnsupdate
- Add option to set a global lua-axfr-script value
- dnsreplay: Add --source-ip and --source-port options
- calidns: Use the correct socket family (IPv4 / IPv6)
- Add an option to allow AXFR of zones with a different (higher/lower) serial
- API: Make trailing dot handling consistent with pdnsutil
- SuffixMatchNode: Fix insertion issue for an existing node
- Do not resolve the NS-records for NOTIFY targets if the "only-notify"
  whitelist is empty, as a target will never match an empty whitelist.
- Improve the AXFR DNSSEC freshness check; Ignore NSEC3PARAM metadata in
  an unsigned zone
- Create additional reuseport sockets before dropping privileges; remove
  transaction in pgpsql backend

diffstat:

 net/powerdns/Makefile                |   3 +--
 net/powerdns/Makefile.common         |   4 ++--
 net/powerdns/distinfo                |  11 +++++------
 net/powerdns/patches/patch-configure |  15 ---------------
 4 files changed, 8 insertions(+), 25 deletions(-)

diffs (64 lines):

diff -r ada9ecba2830 -r 05514f056fc6 net/powerdns/Makefile
--- a/net/powerdns/Makefile     Fri Jun 23 17:12:17 2017 +0000
+++ b/net/powerdns/Makefile     Fri Jun 23 17:12:54 2017 +0000
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.26 2017/04/30 01:21:57 ryoon Exp $
+# $NetBSD: Makefile,v 1.27 2017/06/23 17:12:54 fhajny Exp $
 
 .include "Makefile.common"
 
 PKGNAME=               ${DISTNAME:S/pdns/powerdns/}
-PKGREVISION=           3
 COMMENT=               Modern, advanced and high performance nameserver
 
 .include "options.mk"
diff -r ada9ecba2830 -r 05514f056fc6 net/powerdns/Makefile.common
--- a/net/powerdns/Makefile.common      Fri Jun 23 17:12:17 2017 +0000
+++ b/net/powerdns/Makefile.common      Fri Jun 23 17:12:54 2017 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile.common,v 1.17 2017/03/09 13:32:54 fhajny Exp $
+# $NetBSD: Makefile.common,v 1.18 2017/06/23 17:12:54 fhajny Exp $
 
-PDNS_VERSION=          4.0.3
+PDNS_VERSION=          4.0.4
 DISTNAME=              pdns-${PDNS_VERSION}
 CATEGORIES=            net
 MASTER_SITES=          http://downloads.powerdns.com/releases/
diff -r ada9ecba2830 -r 05514f056fc6 net/powerdns/distinfo
--- a/net/powerdns/distinfo     Fri Jun 23 17:12:17 2017 +0000
+++ b/net/powerdns/distinfo     Fri Jun 23 17:12:54 2017 +0000
@@ -1,10 +1,9 @@
-$NetBSD: distinfo,v 1.24 2017/03/29 11:46:03 fhajny Exp $
+$NetBSD: distinfo,v 1.25 2017/06/23 17:12:54 fhajny Exp $
 
-SHA1 (pdns-4.0.3.tar.bz2) = de3562f135d31c6ccf9363f587bb59a5f65d1d91
-RMD160 (pdns-4.0.3.tar.bz2) = 5befc3a60dbbb14386f3557c7c419ee4b92b2438
-SHA512 (pdns-4.0.3.tar.bz2) = 58d33ac6cf457a916bae6abd8d2dc17f76fbcd1bd9e649948584dd669f5596b43e3e4d91841700ea1ea2cd1ac102749e503cd9075273540f33a2321e20d8bfc2
-Size (pdns-4.0.3.tar.bz2) = 1312299 bytes
-SHA1 (patch-configure) = 675ce8b372819a746ec9d4fbff6bea30ecd86734
+SHA1 (pdns-4.0.4.tar.bz2) = 27a7421d363e2d8c6dac1404a8c1c96bc6e93f46
+RMD160 (pdns-4.0.4.tar.bz2) = b21f87c79162d3a6b1952d96093088ede17e9690
+SHA512 (pdns-4.0.4.tar.bz2) = 4ef4705cd990b03976775167c7c37850d45907e198549feda5f5701172e008e3f1f74a35a9bebdb24b63dec15ff63cb2cc9dfc8f92e4e1012e0539c5a88b845b
+Size (pdns-4.0.4.tar.bz2) = 1320327 bytes
 SHA1 (patch-ext_json11_json11.cpp) = a8ffe67156a836841aef8a6bba134a82283f381e
 SHA1 (patch-pdns_dns.hh) = 626eb4e29b7fcd82fbe056036c157c1e85fa49ca
 SHA1 (patch-pdns_dnsscope.cc) = b289b750686b25041c3e291fb0d3d562beb36eaf
diff -r ada9ecba2830 -r 05514f056fc6 net/powerdns/patches/patch-configure
--- a/net/powerdns/patches/patch-configure      Fri Jun 23 17:12:17 2017 +0000
+++ /dev/null   Thu Jan 01 00:00:00 1970 +0000
@@ -1,15 +0,0 @@
-$NetBSD: patch-configure,v 1.4 2017/03/09 13:32:54 fhajny Exp $
-
-Portability.
-
---- configure.orig     2017-01-17 08:44:02.000000000 +0000
-+++ configure
-@@ -25420,7 +25420,7 @@ $as_echo "$as_me: Built-in modules: $mod
- $as_echo "$as_me: Dynamic modules: $dynmodules" >&6;}
- { $as_echo "$as_me:${as_lineno-$LINENO}: " >&5
- $as_echo "$as_me: " >&6;}
--if test "x$libcrypto_ecdsa" == "xyes"; then :
-+if test "x$libcrypto_ecdsa" = "xyes"; then :
-   { $as_echo "$as_me:${as_lineno-$LINENO}: OpenSSL ecdsa: yes" >&5
- $as_echo "$as_me: OpenSSL ecdsa: yes" >&6;}
- else