Commit graph

140 commits

Author SHA1 Message Date
Mathieu Arnold
022e70ccdc Introduce BIND9 9.11.0b1. (beta1)
BIND 9.11 brings many changes to BIND, including a new license
(the Mozilla Public License 2.0 -- you can read about it here:
https://www.isc.org/blogs/bind9-adopts-the-mpl-2-0-license-with-bind-9-11-0/)
and many new features, including:

-  Catalog zones, a new way to provision zones on slave servers
-  dyndb api, a fast new api enabling BIND to serve zones stored
   in a database (Developed by Petr Spacek of RedHat)
-  RNDC showzone, view-only mode and other improvements
-  dnstap query and response logging (Robert Edmonds is the author
   of dnstap, see www.dnstap.info)
-  EDNS Client-subnet (authoritative server functions)
-  DNSSEC key manager, a new utility (Thanks to Sebastián Castro
   for helping with development.)
-  Automatic CDS/CDSKEY generation
-  Negative Trust Anchors for DNSSEC validators
-  IPv6 bias to encourage use of IPv6 DNS servers
-  Minimal response to “any” queries (Thanks to Tony Finch for
   the contribution)
-  DNS Cookies are now enabled by default, using the standardized code point

Changes:	https://lists.isc.org/pipermail/bind-announce/2016-June/000994.html
Sponsored by:	Absolight
2016-07-04 09:47:25 +00:00
Mathieu Arnold
5b55a8a53e Fix usage of WITH_OPENSSL_BASE, WITH_OPENSSL_PORT and OPENSSL_PORT.
WITH_OPENSSL_* can't be set after bsd.port.pre.mk.
Fold all other usage into using SSL_DEFAULT == foo

PR:		210149
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	The FreeBSD Foundation, Absolight
Differential Revision:	https://reviews.freebsd.org/D6577
2016-06-16 13:23:13 +00:00
Mathieu Arnold
2da5650ff6 Update to 9.9.9-P1 and 9.10.4-P1.
Sponsored by:	Absolight
2016-05-26 08:54:58 +00:00
Mathieu Arnold
8a1f0e9c1f Add --with-dlopen=yes to the default options to allow using third
parties dlz drivers.

While there:
- enable the DLZ_FILESYSTEM option by default
- convert to USES=mysql and USES=bdb

Requested by:	borius i ua
Sponsored by:	Absolight
2016-05-25 13:28:21 +00:00
Dmitry Marakasov
c86e9d9724 Remove NLS, DOCS, EXAMPLES and IPV6 from OPTIONS_DEFAULT, they are enabled by default anyway and don't need to be listed
Approved by:	portmgr blanket
2016-05-23 20:35:01 +00:00
Mathieu Arnold
25e4ec193d Update to 9.9.9.
While there, update the root hints file.

Sponsored by:	Absolight
2016-04-29 10:04:43 +00:00
Mathieu Arnold
4668b601fb Stop bringing in OpenSSL from ports, it builds fine with the base one on
9, and WITH_OPENSSL_PORT does not belong in a port's Makefile anyway.

Not bumping PORTREVISION because:
- if you are building with poudriere, it will detect that a dependency
  has changed and rebuild it.
- if you are building from ports, you will have OpenSSL from ports
  installed, and it will choose to use it.

Sponsored by:	Absolight
2016-04-06 13:53:09 +00:00
Mathieu Arnold
4e1b79a0a6 Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.
With hat:	portmgr
Sponsored by:	Absolight
2016-04-01 14:00:51 +00:00
Mathieu Arnold
f6d0673391 Update to 9.9.8-P4, 9.10.3-P4 and latest snapshot.
MFH:		2016Q1 (obviously)
Security:	CVE-2016-1285
Security:	CVE-2016-1286
Security:	CVE-2016-2088
Sponsored by:	Absolight
2016-03-09 21:16:31 +00:00
Mathieu Arnold
965159c123 Update bind99 to 9.9.8-P3, bind910 to 9.10.3-P3 and bind9-devel to
latest snapshot.

MFH:		2016Q1
Security:	CVE-2015-8704
Security:	CVE-2015-8705
Sponsored by:	Absolight
2016-01-19 21:13:06 +00:00
Mathieu Arnold
ade4e0672d Update BIND9 to the latest patch releases, 9.9.8-P2, 9.10.3-P2, and snapshot.
MFH:		2015Q4
Changes:	https://kb.isc.org/article/AA-01326/81/BIND-9.9.8-P2-Release-Notes.html
Changes:	https://kb.isc.org/article/AA-01328/81/BIND-9.10.3-P2-Release-Notes.html
Security:	CVE-2015-3193
Security:	CVE-2015-8000
Security:	CVE-2015-8461
Sponsored by:	Absolight
2015-12-16 00:45:02 +00:00
Mathieu Arnold
b43773d4fd Fix build WITH=DLZ_BDB.
PR:		201715
Sponsored by:	Absolight
2015-10-08 12:14:41 +00:00
Mathieu Arnold
5ed65050ac Fix build on -CURRENT. [1]
- Force building with libedit
- Bump PORTREVISION to account for accidental succesful builds

PR:		203273 [1]
Sponsored by:	Absolight
2015-09-25 10:05:48 +00:00
Mathieu Arnold
752504ffb6 Fixup gssapi from base.
Submitted by:	hrs
Sponsored by:	Absolight
2015-09-18 22:11:21 +00:00
Mathieu Arnold
9645ef162a Update to bind99 to 9.9.8 & bind910 to 9.10.3.
- Add new QUERYTRACE & FETCHLIMIT.
  Note that QUERYTRACE is for debug purposes, and will eat your
  performances.
- Don't do the PORTREVISION patch if PORTREVISION is 0.
- Regen some patches

Changes:	https://lists.isc.org/pipermail/bind-announce/2015-September/000961.html
Changes:	https://lists.isc.org/pipermail/bind-announce/2015-September/000962.html
Sponsored by:	Absolight
2015-09-16 08:12:05 +00:00
Mathieu Arnold
cd537ade57 Update BIND to 9.9.7-P3 and 9.10.2-P4.
MFH:		2015Q3 (Also needs 393161 395660 395703)
Security:	CVE-2015-5722, CVE-2015-5986
Sponsored by:	Absolight
2015-09-02 20:46:55 +00:00
Mathieu Arnold
560c3232fe Add an option for embedding PORTREVISION in the server's version string.
Sponsored by:	Absolight
2015-08-31 16:43:14 +00:00
Mathieu Arnold
6c84a7b494 When not using OpenSSL from ports, do not try to unmount the chrooted
engines directory.

PR:		201423 (based on)
Submitted by:	girgen
Sponsored by:	Absolight
2015-08-31 10:06:27 +00:00
Mathieu Arnold
41627ba77f Add an option to enable the bind min override ttl patch.
Requested by:	Laurent Frigault
Sponsored by:	Absolight
2015-07-29 14:36:20 +00:00
Mathieu Arnold
df734ad65e Update BIND9.
- 9.9 -> 9.9.7-P2
- 9.10 -> 9.10.2-P3

Security:	CVE-2015-5477
Sponsored by:	Absolight
2015-07-28 22:21:44 +00:00
Mathieu Arnold
f10c0cc39d Update BIND 9.9 to 9.9.7-P1 and 9.10 to 9.10.2-P2.
MFH:		2015Q3
Security:	CVE-2015-4620
Sponsored by:	Absolight
2015-07-07 22:15:07 +00:00
Mathieu Arnold
3f0ba6f820 Make BIND start a bit later (and really *after* ldconfig.) [1]
Add an option to have it start way later.

PR:		200375 [1]
Sponsored by:	Absolight
2015-06-01 10:13:58 +00:00
Mathieu Arnold
2c0a2e8a9f Allow BIND 9.10 users to select the old key format when using GOST.[1]
While there, reword the options a bit, and the pkg-help files.

PR:		200031 [1]
Submitted by:	 Leo Vandewoestijne [1]
Sponsored by:	Absolight
2015-05-18 11:41:41 +00:00
Mathieu Arnold
9fbb9b3c6d When named.conf was placed somewhere else than %%ETCDIR%%, rndc would stop
working.

PR:		199384
Submitted by:	Curtis Villamizar
Sponsored by:	Absolight
2015-04-30 14:43:04 +00:00
John Marino
64c7132444 dns/bind99, dns/bind910: support no-base option on DragonFly
Approved by:	mat (maintainer)
2015-04-01 22:36:10 +00:00
Mathieu Arnold
79c5baadd0 Enhance the error message when running from a jail without devfs.
Sponsored by:	Absolight
2015-03-31 15:02:59 +00:00
Mathieu Arnold
2aba319f33 Add chroot back to BIND's startup script.
Differential Revision:	https://reviews.freebsd.org/D1952
Sponsored by:	Absolight
2015-03-24 15:22:51 +00:00
Mathieu Arnold
43e54a5f1b Update dns/bind99 to 9.9.7 and dns/bind910 to 9.10.2.
On 8 and 9, use the same configuration path than on 10+, ${PREFIX}/etc/namedb/.

Sponsored by:	Absolight
2015-02-26 02:03:15 +00:00
Mathieu Arnold
978598f6c0 Update BIND 9.9 and 9.10 to the latest security patch.
Sponsored by:	Absolight
2015-02-18 22:37:54 +00:00
Mathieu Arnold
15936336c3 Add a patch for CVE-2015-1349 while I work on updating both ports to the new version.
Security:	CVE-2015-1349
Sponsored by:	Absolight
2015-02-18 21:56:08 +00:00
Mathieu Arnold
8e4287b3c2 Generate the RPZ patch filename from ISCVERSION directly.
Sponsored by:	Absolight
2015-01-06 15:04:11 +00:00
Mathieu Arnold
4a4af272a2 Add a note about running the right BIND daemon on 8 and 9.
Sponsored by:	Absolight
2015-01-06 15:01:17 +00:00
Mathieu Arnold
d5f751dba8 Really remove BIND_DESTETC.
Noticed by:	wblock, Matt Mullins
Sponsored by:	Absolight
2015-01-05 23:54:32 +00:00
Mathieu Arnold
abea52d074 Retire REPLACE_BASE option.
While there, reduce changes from bind99 and bind910 ports.

Sponsored by:	Absolight
2015-01-05 17:44:11 +00:00
Mathieu Arnold
8a832ab6a4 Security update of BIND9 to 9.9.6-P1 and 9.10.1-P1.
Security:	CVE-2014-8500 CVE-2014-8680
Sponsored by:	Absolight
2014-12-08 17:29:44 +00:00
Mathieu Arnold
eb57f92a3f Fix three ports forgotten by the USE_PGSQL removal. (Fix a typo in devel/upp.)
Sponsored by:	Absolight
2014-11-24 17:41:10 +00:00
Mathieu Arnold
828c669f5f Install the bind.keys file with the root and dlv.isc.org keys.
Sponsored by:	Absolight
2014-11-17 17:51:51 +00:00
Mathieu Arnold
8cbf159ea1 Note REPLACE_BASE will get removed.
Sponsored by:	Absolight
2014-10-07 10:25:21 +00:00
Mathieu Arnold
1270961e3a Update to 9.9.6.
Sponsored by:	Absolight
2014-09-23 13:25:34 +00:00
Mathieu Arnold
9a1f796155 configure no longer has problems detecting our arch like it had in bind95's
time, so remove ARCH modification, which leads to other problems, like [1]

PR:		193359 [1]
Submitted by:	dinoex [1]
Sponsored by:	Absolight
2014-09-07 10:24:59 +00:00
Mathieu Arnold
bed39c740e Enable RRL by default.
Requested by:	so many my head hurts
Sponsored by:	Absolight
2014-07-29 22:16:11 +00:00
Tijl Coosemans
37f54e0f66 net/openldap24-*:
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD

databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip

databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample

databases/libgdamm:
- Drop :keepla
- USES=tar:bzip2
- Use INSTALL_TARGET=install-strip

databases/libgdamm5:
- Add INSTALL_TARGET=install-strip
- Drop --enable-static (inherited from old repocopy)

devel/anjuta x11-toolkits/py-gnome-extras:
- Drop :keepla

dns/powerdns dns/powerdns-devel:
- Convert to USES=libtool
- Add INSTALL_TARGET=install-strip
- Disable static modules
- Stop creating library symlinks with .0 suffix, not needed for dynamically
  opened modules

mail/dovecot2:
- Add USES=libtool

mail/dovecot2-pigeonhole:
- Drop CONFIGURE_TARGET (incorrect for Dragonfly)
- Add USES=libtool and INSTALL_TARGET=install-strip

math/gnumeric:
- USES=libtool tar:xz

Approved by:	portmgr (implicit, bump unstaged ports)
2014-07-24 18:34:16 +00:00
Mathieu Arnold
d0a51c4e4d And it's supposed to be lower case.
Sponsored by:	Absolight
2014-07-11 15:38:42 +00:00
Mathieu Arnold
450b3f4661 Add CPE to BIND9.
Sponsored by:	Absolight
2014-07-11 15:28:13 +00:00
Mathieu Arnold
84296bece1 Add a PYTHON option to bind99 and bind910, it installs a couple of dnssec
related utilities.
Use bind's own Makefiles for installation in bind-tools.

Sponsored by:	Absolight
2014-06-24 15:15:33 +00:00
Mathieu Arnold
03cf7df719 Fix dns/bind-tools after the gssapi update.
Also, move it from BIND 9.9 to 9.10, and add delv and nsupdate.

Sponsored by:	Absolight
2014-06-18 12:23:28 +00:00
Mathieu Arnold
f586236132 Remove test bits.
Pointy hat to:	mat
Sponsored by:	Absolight
2014-06-17 17:16:33 +00:00
Mathieu Arnold
249978131e Convert dns/bind9* to USES=gssapi.
Sponsored by:	Absolight
2014-06-17 15:01:24 +00:00
Mathieu Arnold
0169e7acf7 Correct local path for rpz* patchs.
Sponsored by:	Absolight
2014-06-13 13:14:32 +00:00
Mathieu Arnold
03f2dce435 Update to 9.9.5-P1.
Changes:	https://lists.isc.org/pipermail/bind-announce/2014-June/000913.html
Sponsored by:	Absolight
2014-06-12 14:18:57 +00:00