kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
401055 commits 42 branches 80 tags 2.7 GiB
Commit graph

136 commits

Author SHA1 Message Date
Mathieu Arnold
499919c7a8 Update BIND9 to latest versions, 9.9.9-P3, 9.10.4-P3, 9.11.0rc3 
MFH:		2016Q3
Security:	CVE-2016-2776
Sponsored by:	Absolight
 2016-09-27 16:10:22 +00:00
Mathieu Arnold
6234750e3f The NEWSTATS and RRL options were removed in BIND9 9.10, so remove them 
from here, also, make the upstream default options default for real.

While there, put back the BIND_TOOLS knobs in bind9-devel.

Sponsored by:	Absolight
 2016-08-31 11:59:05 +00:00
Mathieu Arnold
8301c5d5e3 Convert to USES=ssl. 
Sponsored by:	Absolight
 2016-08-08 12:29:46 +00:00
Mathieu Arnold
f8b6156bc5 BIND9 update, 9.9.9-P2, 9.10.4-P2, 9.11.0b2 and latest 9.12 snapshot. 
MFH:		2016Q3
Security:	CVE-2016-2775
Changes:	https://lists.isc.org/pipermail/bind-announce/2016-July/000996.html
Changes:	https://lists.isc.org/pipermail/bind-announce/2016-July/000997.html
Changes:	https://lists.isc.org/pipermail/bind-announce/2016-July/000998.html
Changes:	https://lists.isc.org/pipermail/bind-announce/2016-July/000999.html
Sponsored by:	Absolight
 2016-07-19 11:30:38 +00:00
Mathieu Arnold
022e70ccdc Introduce BIND9 9.11.0b1. (beta1) 
BIND 9.11 brings many changes to BIND, including a new license
(the Mozilla Public License 2.0 -- you can read about it here:
https://www.isc.org/blogs/bind9-adopts-the-mpl-2-0-license-with-bind-9-11-0/)
and many new features, including:

-  Catalog zones, a new way to provision zones on slave servers
-  dyndb api, a fast new api enabling BIND to serve zones stored
   in a database (Developed by Petr Spacek of RedHat)
-  RNDC showzone, view-only mode and other improvements
-  dnstap query and response logging (Robert Edmonds is the author
   of dnstap, see www.dnstap.info)
-  EDNS Client-subnet (authoritative server functions)
-  DNSSEC key manager, a new utility (Thanks to Sebastián Castro
   for helping with development.)
-  Automatic CDS/CDSKEY generation
-  Negative Trust Anchors for DNSSEC validators
-  IPv6 bias to encourage use of IPv6 DNS servers
-  Minimal response to “any” queries (Thanks to Tony Finch for
   the contribution)
-  DNS Cookies are now enabled by default, using the standardized code point

Changes:	https://lists.isc.org/pipermail/bind-announce/2016-June/000994.html
Sponsored by:	Absolight
 2016-07-04 09:47:25 +00:00
Mathieu Arnold
5b55a8a53e Fix usage of WITH_OPENSSL_BASE, WITH_OPENSSL_PORT and OPENSSL_PORT. 
WITH_OPENSSL_* can't be set after bsd.port.pre.mk.
Fold all other usage into using SSL_DEFAULT == foo

PR:		210149
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	The FreeBSD Foundation, Absolight
Differential Revision:	https://reviews.freebsd.org/D6577
 2016-06-16 13:23:13 +00:00
Mathieu Arnold
2da5650ff6 Update to 9.9.9-P1 and 9.10.4-P1. 
Sponsored by:	Absolight
 2016-05-26 08:54:58 +00:00
Mathieu Arnold
8a1f0e9c1f Add --with-dlopen=yes to the default options to allow using third 
parties dlz drivers.

While there:
- enable the DLZ_FILESYSTEM option by default
- convert to USES=mysql and USES=bdb

Requested by:	borius i ua
Sponsored by:	Absolight
 2016-05-25 13:28:21 +00:00
Dmitry Marakasov
c86e9d9724 Remove NLS, DOCS, EXAMPLES and IPV6 from OPTIONS_DEFAULT, they are enabled by default anyway and don't need to be listed 
Approved by:	portmgr blanket
 2016-05-23 20:35:01 +00:00
Mathieu Arnold
25e4ec193d Update to 9.9.9. 
While there, update the root hints file.

Sponsored by:	Absolight
 2016-04-29 10:04:43 +00:00
Mathieu Arnold
4668b601fb Stop bringing in OpenSSL from ports, it builds fine with the base one on 
9, and WITH_OPENSSL_PORT does not belong in a port's Makefile anyway.

Not bumping PORTREVISION because:
- if you are building with poudriere, it will detect that a dependency
  has changed and rebuild it.
- if you are building from ports, you will have OpenSSL from ports
  installed, and it will choose to use it.

Sponsored by:	Absolight
 2016-04-06 13:53:09 +00:00
Mathieu Arnold
4e1b79a0a6 Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g. 
With hat:	portmgr
Sponsored by:	Absolight
 2016-04-01 14:00:51 +00:00
Mathieu Arnold
f6d0673391 Update to 9.9.8-P4, 9.10.3-P4 and latest snapshot. 
MFH:		2016Q1 (obviously)
Security:	CVE-2016-1285
Security:	CVE-2016-1286
Security:	CVE-2016-2088
Sponsored by:	Absolight
 2016-03-09 21:16:31 +00:00
Mathieu Arnold
965159c123 Update bind99 to 9.9.8-P3, bind910 to 9.10.3-P3 and bind9-devel to 
latest snapshot.

MFH:		2016Q1
Security:	CVE-2015-8704
Security:	CVE-2015-8705
Sponsored by:	Absolight
 2016-01-19 21:13:06 +00:00
Mathieu Arnold
ade4e0672d Update BIND9 to the latest patch releases, 9.9.8-P2, 9.10.3-P2, and snapshot. 
MFH:		2015Q4
Changes:	https://kb.isc.org/article/AA-01326/81/BIND-9.9.8-P2-Release-Notes.html
Changes:	https://kb.isc.org/article/AA-01328/81/BIND-9.10.3-P2-Release-Notes.html
Security:	CVE-2015-3193
Security:	CVE-2015-8000
Security:	CVE-2015-8461
Sponsored by:	Absolight
 2015-12-16 00:45:02 +00:00
Mathieu Arnold
5ed65050ac Fix build on -CURRENT. [1] 
- Force building with libedit
- Bump PORTREVISION to account for accidental succesful builds

PR:		203273 [1]
Sponsored by:	Absolight
 2015-09-25 10:05:48 +00:00
Mathieu Arnold
752504ffb6 Fixup gssapi from base. 
Submitted by:	hrs
Sponsored by:	Absolight
 2015-09-18 22:11:21 +00:00
Mathieu Arnold
9645ef162a Update to bind99 to 9.9.8 & bind910 to 9.10.3. 
- Add new QUERYTRACE & FETCHLIMIT.
  Note that QUERYTRACE is for debug purposes, and will eat your
  performances.
- Don't do the PORTREVISION patch if PORTREVISION is 0.
- Regen some patches

Changes:	https://lists.isc.org/pipermail/bind-announce/2015-September/000961.html
Changes:	https://lists.isc.org/pipermail/bind-announce/2015-September/000962.html
Sponsored by:	Absolight
 2015-09-16 08:12:05 +00:00
Mathieu Arnold
cd537ade57 Update BIND to 9.9.7-P3 and 9.10.2-P4. 
MFH:		2015Q3 (Also needs 393161 395660 395703)
Security:	CVE-2015-5722, CVE-2015-5986
Sponsored by:	Absolight
 2015-09-02 20:46:55 +00:00
Mathieu Arnold
560c3232fe Add an option for embedding PORTREVISION in the server's version string. 
Sponsored by:	Absolight
 2015-08-31 16:43:14 +00:00
Mathieu Arnold
6c84a7b494 When not using OpenSSL from ports, do not try to unmount the chrooted 
engines directory.

PR:		201423 (based on)
Submitted by:	girgen
Sponsored by:	Absolight
 2015-08-31 10:06:27 +00:00
Mathieu Arnold
41627ba77f Add an option to enable the bind min override ttl patch. 
Requested by:	Laurent Frigault
Sponsored by:	Absolight
 2015-07-29 14:36:20 +00:00
Mathieu Arnold
df734ad65e Update BIND9. 
- 9.9 -> 9.9.7-P2
- 9.10 -> 9.10.2-P3

Security:	CVE-2015-5477
Sponsored by:	Absolight
 2015-07-28 22:21:44 +00:00
Mathieu Arnold
f10c0cc39d Update BIND 9.9 to 9.9.7-P1 and 9.10 to 9.10.2-P2. 
MFH:		2015Q3
Security:	CVE-2015-4620
Sponsored by:	Absolight
 2015-07-07 22:15:07 +00:00
Mathieu Arnold
3f0ba6f820 Make BIND start a bit later (and really *after* ldconfig.) [1] 
Add an option to have it start way later.

PR:		200375 [1]
Sponsored by:	Absolight
 2015-06-01 10:13:58 +00:00
Mathieu Arnold
2c0a2e8a9f Allow BIND 9.10 users to select the old key format when using GOST.[1] 
While there, reword the options a bit, and the pkg-help files.

PR:		200031 [1]
Submitted by:	 Leo Vandewoestijne [1]
Sponsored by:	Absolight
 2015-05-18 11:41:41 +00:00
Mathieu Arnold
9fbb9b3c6d When named.conf was placed somewhere else than %%ETCDIR%%, rndc would stop 
working.

PR:		199384
Submitted by:	Curtis Villamizar
Sponsored by:	Absolight
 2015-04-30 14:43:04 +00:00
John Marino
64c7132444 dns/bind99, dns/bind910: support no-base option on DragonFly 
Approved by:	mat (maintainer)
 2015-04-01 22:36:10 +00:00
Mathieu Arnold
79c5baadd0 Enhance the error message when running from a jail without devfs. 
Sponsored by:	Absolight
 2015-03-31 15:02:59 +00:00
Mathieu Arnold
2aba319f33 Add chroot back to BIND's startup script. 
Differential Revision:	https://reviews.freebsd.org/D1952
Sponsored by:	Absolight
 2015-03-24 15:22:51 +00:00
Mathieu Arnold
43e54a5f1b Update dns/bind99 to 9.9.7 and dns/bind910 to 9.10.2. 
On 8 and 9, use the same configuration path than on 10+, ${PREFIX}/etc/namedb/.

Sponsored by:	Absolight
 2015-02-26 02:03:15 +00:00
Mathieu Arnold
978598f6c0 Update BIND 9.9 and 9.10 to the latest security patch. 
Sponsored by:	Absolight
 2015-02-18 22:37:54 +00:00
Mathieu Arnold
15936336c3 Add a patch for CVE-2015-1349 while I work on updating both ports to the new version. 
Security:	CVE-2015-1349
Sponsored by:	Absolight
 2015-02-18 21:56:08 +00:00
Mathieu Arnold
8e4287b3c2 Generate the RPZ patch filename from ISCVERSION directly. 
Sponsored by:	Absolight
 2015-01-06 15:04:11 +00:00
Mathieu Arnold
4a4af272a2 Add a note about running the right BIND daemon on 8 and 9. 
Sponsored by:	Absolight
 2015-01-06 15:01:17 +00:00
Mathieu Arnold
d5f751dba8 Really remove BIND_DESTETC. 
Noticed by:	wblock, Matt Mullins
Sponsored by:	Absolight
 2015-01-05 23:54:32 +00:00
Mathieu Arnold
abea52d074 Retire REPLACE_BASE option. 
While there, reduce changes from bind99 and bind910 ports.

Sponsored by:	Absolight
 2015-01-05 17:44:11 +00:00
Mathieu Arnold
8a832ab6a4 Security update of BIND9 to 9.9.6-P1 and 9.10.1-P1. 
Security:	CVE-2014-8500 CVE-2014-8680
Sponsored by:	Absolight
 2014-12-08 17:29:44 +00:00
Mathieu Arnold
eb57f92a3f Fix three ports forgotten by the USE_PGSQL removal. (Fix a typo in devel/upp.) 
Sponsored by:	Absolight
 2014-11-24 17:41:10 +00:00
Mathieu Arnold
828c669f5f Install the bind.keys file with the root and dlv.isc.org keys. 
Sponsored by:	Absolight
 2014-11-17 17:51:51 +00:00
Mathieu Arnold
8cbf159ea1 Note REPLACE_BASE will get removed. 
Sponsored by:	Absolight
 2014-10-07 10:25:21 +00:00
Mathieu Arnold
1270961e3a Update to 9.9.6. 
Sponsored by:	Absolight
 2014-09-23 13:25:34 +00:00
Mathieu Arnold
9a1f796155 configure no longer has problems detecting our arch like it had in bind95's 
time, so remove ARCH modification, which leads to other problems, like [1]

PR:		193359 [1]
Submitted by:	dinoex [1]
Sponsored by:	Absolight
 2014-09-07 10:24:59 +00:00
Mathieu Arnold
bed39c740e Enable RRL by default. 
Requested by:	so many my head hurts
Sponsored by:	Absolight
 2014-07-29 22:16:11 +00:00
Tijl Coosemans
37f54e0f66 net/openldap24-*: 
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD

databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip

databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample

databases/libgdamm:
- Drop :keepla
- USES=tar:bzip2
- Use INSTALL_TARGET=install-strip

databases/libgdamm5:
- Add INSTALL_TARGET=install-strip
- Drop --enable-static (inherited from old repocopy)

devel/anjuta x11-toolkits/py-gnome-extras:
- Drop :keepla

dns/powerdns dns/powerdns-devel:
- Convert to USES=libtool
- Add INSTALL_TARGET=install-strip
- Disable static modules
- Stop creating library symlinks with .0 suffix, not needed for dynamically
  opened modules

mail/dovecot2:
- Add USES=libtool

mail/dovecot2-pigeonhole:
- Drop CONFIGURE_TARGET (incorrect for Dragonfly)
- Add USES=libtool and INSTALL_TARGET=install-strip

math/gnumeric:
- USES=libtool tar:xz

Approved by:	portmgr (implicit, bump unstaged ports)
 2014-07-24 18:34:16 +00:00
Mathieu Arnold
d0a51c4e4d And it's supposed to be lower case. 
Sponsored by:	Absolight
 2014-07-11 15:38:42 +00:00
Mathieu Arnold
450b3f4661 Add CPE to BIND9. 
Sponsored by:	Absolight
 2014-07-11 15:28:13 +00:00
Mathieu Arnold
84296bece1 Add a PYTHON option to bind99 and bind910, it installs a couple of dnssec 
related utilities.
Use bind's own Makefiles for installation in bind-tools.

Sponsored by:	Absolight
 2014-06-24 15:15:33 +00:00
Mathieu Arnold
03cf7df719 Fix dns/bind-tools after the gssapi update. 
Also, move it from BIND 9.9 to 9.10, and add delv and nsupdate.

Sponsored by:	Absolight
 2014-06-18 12:23:28 +00:00
Mathieu Arnold
f586236132 Remove test bits. 
Pointy hat to:	mat
Sponsored by:	Absolight
 2014-06-17 17:16:33 +00:00