kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
425776 commits 42 branches 80 tags 2.7 GiB
Commit graph

42 commits

Author SHA1 Message Date
Mathieu Arnold
b104731907 Update BIND9 ports to 9.{9.11,10.6,11.2}. 
Sponsored by:	Absolight
 2017-07-28 22:57:26 +00:00
Mathieu Arnold
336fb2ebbb Remove special handling for testing and documentation domains, per RFC 
6761 recommendations.

While there:
- Fix invalid syntax in sample slave config.
- Add a message about having syslogd working with BIND9 chroot.

PR:		217915
Reported by:	eserte12 yahoo de
Sponsored by:	Absolight
 2017-06-14 22:54:43 +00:00
Mathieu Arnold
d4de1a5f8c Update to 9.9.10, 9.10.5, 9.11.1 and 9.12 to latest snapshot. 
While there:

Make it more maintainable by sorting stuff in the Makefile and removing
vestigial pre 10.3 things.

Refresh the root zone hints.

"Fix" the configuration section telling you to get some top level
zones from f.root-servers.net, which does not allow axfr any more. [1]

PR:		218656 [1]
Reported by:	Thomas Steen Rasmussen / Tykling [1]
MFH:		2017Q2
Sponsored by:	Absolight
 2017-04-20 13:12:35 +00:00
Mathieu Arnold
0688061ed1 Unbreak rndc calls when using non default rndc.key location. 
PR:		218335
Sponsored by:	Absolight
 2017-04-13 10:15:18 +00:00
Mathieu Arnold
ae4096b69e Commit the cleanups that should have gone in with the pervious update. 
Sponsored by:	Absolight
 2017-01-12 08:15:41 +00:00
Xin LI
442cd7309b Security update: 
dns/bind99:  9.9.9-P3  -> 9.9.9-P4
dns/bind910: 9.10.4-P3 -> 9.10.4-P4
dns/bind911: 9.11.0    -> 9.11.0-P1

Security:	CVE-2016-8864
Submitted by:	mat
MFH:		2016Q4
 2016-11-02 06:38:48 +00:00
Mathieu Arnold
25e4ec193d Update to 9.9.9. 
While there, update the root hints file.

Sponsored by:	Absolight
 2016-04-29 10:04:43 +00:00
Mathieu Arnold
f6d0673391 Update to 9.9.8-P4, 9.10.3-P4 and latest snapshot. 
MFH:		2016Q1 (obviously)
Security:	CVE-2016-1285
Security:	CVE-2016-1286
Security:	CVE-2016-2088
Sponsored by:	Absolight
 2016-03-09 21:16:31 +00:00
Mathieu Arnold
965159c123 Update bind99 to 9.9.8-P3, bind910 to 9.10.3-P3 and bind9-devel to 
latest snapshot.

MFH:		2016Q1
Security:	CVE-2015-8704
Security:	CVE-2015-8705
Sponsored by:	Absolight
 2016-01-19 21:13:06 +00:00
Mathieu Arnold
ade4e0672d Update BIND9 to the latest patch releases, 9.9.8-P2, 9.10.3-P2, and snapshot. 
MFH:		2015Q4
Changes:	https://kb.isc.org/article/AA-01326/81/BIND-9.9.8-P2-Release-Notes.html
Changes:	https://kb.isc.org/article/AA-01328/81/BIND-9.10.3-P2-Release-Notes.html
Security:	CVE-2015-3193
Security:	CVE-2015-8000
Security:	CVE-2015-8461
Sponsored by:	Absolight
 2015-12-16 00:45:02 +00:00
Mathieu Arnold
b43773d4fd Fix build WITH=DLZ_BDB. 
PR:		201715
Sponsored by:	Absolight
 2015-10-08 12:14:41 +00:00
Mathieu Arnold
752504ffb6 Fixup gssapi from base. 
Submitted by:	hrs
Sponsored by:	Absolight
 2015-09-18 22:11:21 +00:00
Mathieu Arnold
9645ef162a Update to bind99 to 9.9.8 & bind910 to 9.10.3. 
- Add new QUERYTRACE & FETCHLIMIT.
  Note that QUERYTRACE is for debug purposes, and will eat your
  performances.
- Don't do the PORTREVISION patch if PORTREVISION is 0.
- Regen some patches

Changes:	https://lists.isc.org/pipermail/bind-announce/2015-September/000961.html
Changes:	https://lists.isc.org/pipermail/bind-announce/2015-September/000962.html
Sponsored by:	Absolight
 2015-09-16 08:12:05 +00:00
Mathieu Arnold
6c84a7b494 When not using OpenSSL from ports, do not try to unmount the chrooted 
engines directory.

PR:		201423 (based on)
Submitted by:	girgen
Sponsored by:	Absolight
 2015-08-31 10:06:27 +00:00
Mathieu Arnold
41627ba77f Add an option to enable the bind min override ttl patch. 
Requested by:	Laurent Frigault
Sponsored by:	Absolight
 2015-07-29 14:36:20 +00:00
Mathieu Arnold
3f0ba6f820 Make BIND start a bit later (and really *after* ldconfig.) [1] 
Add an option to have it start way later.

PR:		200375 [1]
Sponsored by:	Absolight
 2015-06-01 10:13:58 +00:00
Mathieu Arnold
9fbb9b3c6d When named.conf was placed somewhere else than %%ETCDIR%%, rndc would stop 
working.

PR:		199384
Submitted by:	Curtis Villamizar
Sponsored by:	Absolight
 2015-04-30 14:43:04 +00:00
Mathieu Arnold
79c5baadd0 Enhance the error message when running from a jail without devfs. 
Sponsored by:	Absolight
 2015-03-31 15:02:59 +00:00
Mathieu Arnold
2aba319f33 Add chroot back to BIND's startup script. 
Differential Revision:	https://reviews.freebsd.org/D1952
Sponsored by:	Absolight
 2015-03-24 15:22:51 +00:00
Mathieu Arnold
978598f6c0 Update BIND 9.9 and 9.10 to the latest security patch. 
Sponsored by:	Absolight
 2015-02-18 22:37:54 +00:00
Mathieu Arnold
15936336c3 Add a patch for CVE-2015-1349 while I work on updating both ports to the new version. 
Security:	CVE-2015-1349
Sponsored by:	Absolight
 2015-02-18 21:56:08 +00:00
Mathieu Arnold
4a4af272a2 Add a note about running the right BIND daemon on 8 and 9. 
Sponsored by:	Absolight
 2015-01-06 15:01:17 +00:00
Mathieu Arnold
d5f751dba8 Really remove BIND_DESTETC. 
Noticed by:	wblock, Matt Mullins
Sponsored by:	Absolight
 2015-01-05 23:54:32 +00:00
Mathieu Arnold
abea52d074 Retire REPLACE_BASE option. 
While there, reduce changes from bind99 and bind910 ports.

Sponsored by:	Absolight
 2015-01-05 17:44:11 +00:00
Mathieu Arnold
1270961e3a Update to 9.9.6. 
Sponsored by:	Absolight
 2014-09-23 13:25:34 +00:00
Mathieu Arnold
84296bece1 Add a PYTHON option to bind99 and bind910, it installs a couple of dnssec 
related utilities.
Use bind's own Makefiles for installation in bind-tools.

Sponsored by:	Absolight
 2014-06-24 15:15:33 +00:00
Mathieu Arnold
249978131e Convert dns/bind9* to USES=gssapi. 
Sponsored by:	Absolight
 2014-06-17 15:01:24 +00:00
Mathieu Arnold
4fd85a7a49 Fix the rc script reload command. 
Noticed by:	David Samms
Sponsored by:	Absolight
 2014-04-17 16:43:48 +00:00
Mathieu Arnold
47fccddc36 Two changes to the RC script 
- Add a dependency on ldconfig
- Allow people to change the pidfile

PR:		188439
Submitted by:	Oliver Lehmann
Sponsored by:	Absolight
 2014-04-10 20:43:50 +00:00
Mathieu Arnold
6e55fcb8e1 Remove noop patch. 
Sponsored by:	Absolight
 2014-04-10 15:45:03 +00:00
Mathieu Arnold
5bab5ca52b - Add a patch to install missing man page 
- Add dnssec-* tools to bind-tools[1]

Requested by:	many [1]
Sponsored by:	Absolight
 2014-04-09 14:14:46 +00:00
Mathieu Arnold
9e86044525 - Fix startup script 
- Fix whitespace

PR:		188011
Submitted by:	takefu
Sponsored by:	Absolight
 2014-03-27 13:30:12 +00:00
Mathieu Arnold
5ec261812d Finaly pet rclint. 
With help from:	crees
Sponsored by:	Absolight
 2014-03-25 17:25:17 +00:00
Mathieu Arnold
5a324458e6 - Use SUB_FILES for named.conf and the rc script 
- Fix some package installation warnings

Sponsored by:	Absolight
 2014-03-17 18:46:47 +00:00
Mathieu Arnold
93f4bf8487 Try and have BIND start earlier. 
Sponsored by:	Absolight
 2014-03-06 17:12:52 +00:00
Mathieu Arnold
14bf5e9cb7 Don't polute isc-config.sh with gssapi flags. 
Submitted by:	hrs
Sponsored by:	Absolight
 2014-03-04 17:32:45 +00:00
Erwin Lansing
fe8682b27c There's always a default value for named_conf now, so no need to 
check for it, and espcially not for a wrong value.

Noticed by:	Stefan Bethke <stb@lassitu.de>
Approved by:	mat (maintainer)
 2014-01-07 09:55:06 +00:00
Sunpoet Po-Chuan Hsieh
b7ffdb5d78 - Respect BIND_DESTETC and PREFIX 
Submitted by:	sunpoet (myself)
Approved by:	erwin (maintainer)
 2013-11-22 19:05:01 +00:00
Erwin Lansing
5340a9fcad Fix startup script. 
PR:		184159 [1]
Submitted by:	Pawel Biernacki <pawel.biernacki@gmail.com> [1],
		Trond Endrestoel <Trond.Endrestol@ximalas.info> (private email)
 2013-11-22 13:41:34 +00:00
Erwin Lansing
d7b15df7e6 Support FreeBSD 10.0. 
On FreeBSD 10.0, all configuration is installed under
/usr/local/etc/namedb and installs its own rc script in
$PREFIX, which no longer support chroot installations.

LINKS and REPLACE_BASE options are not supported on 10.0
for obvious reasons.

Note for FreeBSD 9.x and earlier users, LINKS is no longer
the default option, though still supported.
 2013-11-12 10:59:20 +00:00
Doug Barton
b416df6141 Remove patch that is incorporated into version 9.9.1 2012-05-23 04:40:33 +00:00
Doug Barton
59d8a15c5f Add a patch from ISC slated for 9.9.1 which fixes an assertion failure 
Feature safe: yes
 2012-03-17 06:37:10 +00:00