Mathieu Arnold
022e70ccdc
Introduce BIND9 9.11.0b1. (beta1)
...
BIND 9.11 brings many changes to BIND, including a new license
(the Mozilla Public License 2.0 -- you can read about it here:
https://www.isc.org/blogs/bind9-adopts-the-mpl-2-0-license-with-bind-9-11-0/ )
and many new features, including:
- Catalog zones, a new way to provision zones on slave servers
- dyndb api, a fast new api enabling BIND to serve zones stored
in a database (Developed by Petr Spacek of RedHat)
- RNDC showzone, view-only mode and other improvements
- dnstap query and response logging (Robert Edmonds is the author
of dnstap, see www.dnstap.info)
- EDNS Client-subnet (authoritative server functions)
- DNSSEC key manager, a new utility (Thanks to Sebastián Castro
for helping with development.)
- Automatic CDS/CDSKEY generation
- Negative Trust Anchors for DNSSEC validators
- IPv6 bias to encourage use of IPv6 DNS servers
- Minimal response to “any” queries (Thanks to Tony Finch for
the contribution)
- DNS Cookies are now enabled by default, using the standardized code point
Changes: https://lists.isc.org/pipermail/bind-announce/2016-June/000994.html
Sponsored by: Absolight
2016-07-04 09:47:25 +00:00
Mathieu Arnold
5b55a8a53e
Fix usage of WITH_OPENSSL_BASE, WITH_OPENSSL_PORT and OPENSSL_PORT.
...
WITH_OPENSSL_* can't be set after bsd.port.pre.mk.
Fold all other usage into using SSL_DEFAULT == foo
PR: 210149
Submitted by: mat
Exp-run by: antoine
Sponsored by: The FreeBSD Foundation, Absolight
Differential Revision: https://reviews.freebsd.org/D6577
2016-06-16 13:23:13 +00:00
Mathieu Arnold
2da5650ff6
Update to 9.9.9-P1 and 9.10.4-P1.
...
Sponsored by: Absolight
2016-05-26 08:54:58 +00:00
Mathieu Arnold
8a1f0e9c1f
Add --with-dlopen=yes to the default options to allow using third
...
parties dlz drivers.
While there:
- enable the DLZ_FILESYSTEM option by default
- convert to USES=mysql and USES=bdb
Requested by: borius i ua
Sponsored by: Absolight
2016-05-25 13:28:21 +00:00
Dmitry Marakasov
c86e9d9724
Remove NLS, DOCS, EXAMPLES and IPV6 from OPTIONS_DEFAULT, they are enabled by default anyway and don't need to be listed
...
Approved by: portmgr blanket
2016-05-23 20:35:01 +00:00
Mathieu Arnold
25e4ec193d
Update to 9.9.9.
...
While there, update the root hints file.
Sponsored by: Absolight
2016-04-29 10:04:43 +00:00
Mathieu Arnold
4668b601fb
Stop bringing in OpenSSL from ports, it builds fine with the base one on
...
9, and WITH_OPENSSL_PORT does not belong in a port's Makefile anyway.
Not bumping PORTREVISION because:
- if you are building with poudriere, it will detect that a dependency
has changed and rebuild it.
- if you are building from ports, you will have OpenSSL from ports
installed, and it will choose to use it.
Sponsored by: Absolight
2016-04-06 13:53:09 +00:00
Mathieu Arnold
4e1b79a0a6
Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.
...
With hat: portmgr
Sponsored by: Absolight
2016-04-01 14:00:51 +00:00
Mathieu Arnold
f6d0673391
Update to 9.9.8-P4, 9.10.3-P4 and latest snapshot.
...
MFH: 2016Q1 (obviously)
Security: CVE-2016-1285
Security: CVE-2016-1286
Security: CVE-2016-2088
Sponsored by: Absolight
2016-03-09 21:16:31 +00:00
Mathieu Arnold
965159c123
Update bind99 to 9.9.8-P3, bind910 to 9.10.3-P3 and bind9-devel to
...
latest snapshot.
MFH: 2016Q1
Security: CVE-2015-8704
Security: CVE-2015-8705
Sponsored by: Absolight
2016-01-19 21:13:06 +00:00
Mathieu Arnold
ade4e0672d
Update BIND9 to the latest patch releases, 9.9.8-P2, 9.10.3-P2, and snapshot.
...
MFH: 2015Q4
Changes: https://kb.isc.org/article/AA-01326/81/BIND-9.9.8-P2-Release-Notes.html
Changes: https://kb.isc.org/article/AA-01328/81/BIND-9.10.3-P2-Release-Notes.html
Security: CVE-2015-3193
Security: CVE-2015-8000
Security: CVE-2015-8461
Sponsored by: Absolight
2015-12-16 00:45:02 +00:00
Mathieu Arnold
b43773d4fd
Fix build WITH=DLZ_BDB.
...
PR: 201715
Sponsored by: Absolight
2015-10-08 12:14:41 +00:00
Mathieu Arnold
5ed65050ac
Fix build on -CURRENT. [1]
...
- Force building with libedit
- Bump PORTREVISION to account for accidental succesful builds
PR: 203273 [1]
Sponsored by: Absolight
2015-09-25 10:05:48 +00:00
Mathieu Arnold
752504ffb6
Fixup gssapi from base.
...
Submitted by: hrs
Sponsored by: Absolight
2015-09-18 22:11:21 +00:00
Mathieu Arnold
9645ef162a
Update to bind99 to 9.9.8 & bind910 to 9.10.3.
...
- Add new QUERYTRACE & FETCHLIMIT.
Note that QUERYTRACE is for debug purposes, and will eat your
performances.
- Don't do the PORTREVISION patch if PORTREVISION is 0.
- Regen some patches
Changes: https://lists.isc.org/pipermail/bind-announce/2015-September/000961.html
Changes: https://lists.isc.org/pipermail/bind-announce/2015-September/000962.html
Sponsored by: Absolight
2015-09-16 08:12:05 +00:00
Mathieu Arnold
cd537ade57
Update BIND to 9.9.7-P3 and 9.10.2-P4.
...
MFH: 2015Q3 (Also needs 393161 395660 395703)
Security: CVE-2015-5722, CVE-2015-5986
Sponsored by: Absolight
2015-09-02 20:46:55 +00:00
Mathieu Arnold
560c3232fe
Add an option for embedding PORTREVISION in the server's version string.
...
Sponsored by: Absolight
2015-08-31 16:43:14 +00:00
Mathieu Arnold
6c84a7b494
When not using OpenSSL from ports, do not try to unmount the chrooted
...
engines directory.
PR: 201423 (based on)
Submitted by: girgen
Sponsored by: Absolight
2015-08-31 10:06:27 +00:00
Mathieu Arnold
41627ba77f
Add an option to enable the bind min override ttl patch.
...
Requested by: Laurent Frigault
Sponsored by: Absolight
2015-07-29 14:36:20 +00:00
Mathieu Arnold
df734ad65e
Update BIND9.
...
- 9.9 -> 9.9.7-P2
- 9.10 -> 9.10.2-P3
Security: CVE-2015-5477
Sponsored by: Absolight
2015-07-28 22:21:44 +00:00
Mathieu Arnold
f10c0cc39d
Update BIND 9.9 to 9.9.7-P1 and 9.10 to 9.10.2-P2.
...
MFH: 2015Q3
Security: CVE-2015-4620
Sponsored by: Absolight
2015-07-07 22:15:07 +00:00
Mathieu Arnold
3f0ba6f820
Make BIND start a bit later (and really *after* ldconfig.) [1]
...
Add an option to have it start way later.
PR: 200375 [1]
Sponsored by: Absolight
2015-06-01 10:13:58 +00:00
Mathieu Arnold
2c0a2e8a9f
Allow BIND 9.10 users to select the old key format when using GOST.[1]
...
While there, reword the options a bit, and the pkg-help files.
PR: 200031 [1]
Submitted by: Leo Vandewoestijne [1]
Sponsored by: Absolight
2015-05-18 11:41:41 +00:00
Mathieu Arnold
9fbb9b3c6d
When named.conf was placed somewhere else than %%ETCDIR%%, rndc would stop
...
working.
PR: 199384
Submitted by: Curtis Villamizar
Sponsored by: Absolight
2015-04-30 14:43:04 +00:00
John Marino
64c7132444
dns/bind99, dns/bind910: support no-base option on DragonFly
...
Approved by: mat (maintainer)
2015-04-01 22:36:10 +00:00
Mathieu Arnold
79c5baadd0
Enhance the error message when running from a jail without devfs.
...
Sponsored by: Absolight
2015-03-31 15:02:59 +00:00
Mathieu Arnold
2aba319f33
Add chroot back to BIND's startup script.
...
Differential Revision: https://reviews.freebsd.org/D1952
Sponsored by: Absolight
2015-03-24 15:22:51 +00:00
Mathieu Arnold
43e54a5f1b
Update dns/bind99 to 9.9.7 and dns/bind910 to 9.10.2.
...
On 8 and 9, use the same configuration path than on 10+, ${PREFIX}/etc/namedb/.
Sponsored by: Absolight
2015-02-26 02:03:15 +00:00
Mathieu Arnold
978598f6c0
Update BIND 9.9 and 9.10 to the latest security patch.
...
Sponsored by: Absolight
2015-02-18 22:37:54 +00:00
Mathieu Arnold
15936336c3
Add a patch for CVE-2015-1349 while I work on updating both ports to the new version.
...
Security: CVE-2015-1349
Sponsored by: Absolight
2015-02-18 21:56:08 +00:00
Mathieu Arnold
8e4287b3c2
Generate the RPZ patch filename from ISCVERSION directly.
...
Sponsored by: Absolight
2015-01-06 15:04:11 +00:00
Mathieu Arnold
4a4af272a2
Add a note about running the right BIND daemon on 8 and 9.
...
Sponsored by: Absolight
2015-01-06 15:01:17 +00:00
Mathieu Arnold
d5f751dba8
Really remove BIND_DESTETC.
...
Noticed by: wblock, Matt Mullins
Sponsored by: Absolight
2015-01-05 23:54:32 +00:00
Mathieu Arnold
abea52d074
Retire REPLACE_BASE option.
...
While there, reduce changes from bind99 and bind910 ports.
Sponsored by: Absolight
2015-01-05 17:44:11 +00:00
Mathieu Arnold
8a832ab6a4
Security update of BIND9 to 9.9.6-P1 and 9.10.1-P1.
...
Security: CVE-2014-8500 CVE-2014-8680
Sponsored by: Absolight
2014-12-08 17:29:44 +00:00
Mathieu Arnold
eb57f92a3f
Fix three ports forgotten by the USE_PGSQL removal. (Fix a typo in devel/upp.)
...
Sponsored by: Absolight
2014-11-24 17:41:10 +00:00
Mathieu Arnold
828c669f5f
Install the bind.keys file with the root and dlv.isc.org keys.
...
Sponsored by: Absolight
2014-11-17 17:51:51 +00:00
Mathieu Arnold
8cbf159ea1
Note REPLACE_BASE will get removed.
...
Sponsored by: Absolight
2014-10-07 10:25:21 +00:00
Mathieu Arnold
1270961e3a
Update to 9.9.6.
...
Sponsored by: Absolight
2014-09-23 13:25:34 +00:00
Mathieu Arnold
9a1f796155
configure no longer has problems detecting our arch like it had in bind95's
...
time, so remove ARCH modification, which leads to other problems, like [1]
PR: 193359 [1]
Submitted by: dinoex [1]
Sponsored by: Absolight
2014-09-07 10:24:59 +00:00
Mathieu Arnold
bed39c740e
Enable RRL by default.
...
Requested by: so many my head hurts
Sponsored by: Absolight
2014-07-29 22:16:11 +00:00
Tijl Coosemans
37f54e0f66
net/openldap24-*:
...
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD
databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip
databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample
databases/libgdamm:
- Drop :keepla
- USES=tar:bzip2
- Use INSTALL_TARGET=install-strip
databases/libgdamm5:
- Add INSTALL_TARGET=install-strip
- Drop --enable-static (inherited from old repocopy)
devel/anjuta x11-toolkits/py-gnome-extras:
- Drop :keepla
dns/powerdns dns/powerdns-devel:
- Convert to USES=libtool
- Add INSTALL_TARGET=install-strip
- Disable static modules
- Stop creating library symlinks with .0 suffix, not needed for dynamically
opened modules
mail/dovecot2:
- Add USES=libtool
mail/dovecot2-pigeonhole:
- Drop CONFIGURE_TARGET (incorrect for Dragonfly)
- Add USES=libtool and INSTALL_TARGET=install-strip
math/gnumeric:
- USES=libtool tar:xz
Approved by: portmgr (implicit, bump unstaged ports)
2014-07-24 18:34:16 +00:00
Mathieu Arnold
d0a51c4e4d
And it's supposed to be lower case.
...
Sponsored by: Absolight
2014-07-11 15:38:42 +00:00
Mathieu Arnold
450b3f4661
Add CPE to BIND9.
...
Sponsored by: Absolight
2014-07-11 15:28:13 +00:00
Mathieu Arnold
84296bece1
Add a PYTHON option to bind99 and bind910, it installs a couple of dnssec
...
related utilities.
Use bind's own Makefiles for installation in bind-tools.
Sponsored by: Absolight
2014-06-24 15:15:33 +00:00
Mathieu Arnold
03cf7df719
Fix dns/bind-tools after the gssapi update.
...
Also, move it from BIND 9.9 to 9.10, and add delv and nsupdate.
Sponsored by: Absolight
2014-06-18 12:23:28 +00:00
Mathieu Arnold
f586236132
Remove test bits.
...
Pointy hat to: mat
Sponsored by: Absolight
2014-06-17 17:16:33 +00:00
Mathieu Arnold
249978131e
Convert dns/bind9* to USES=gssapi.
...
Sponsored by: Absolight
2014-06-17 15:01:24 +00:00
Mathieu Arnold
0169e7acf7
Correct local path for rpz* patchs.
...
Sponsored by: Absolight
2014-06-13 13:14:32 +00:00
Mathieu Arnold
03f2dce435
Update to 9.9.5-P1.
...
Changes: https://lists.isc.org/pipermail/bind-announce/2014-June/000913.html
Sponsored by: Absolight
2014-06-12 14:18:57 +00:00