Relevant excerpt from git shortlog between test8 and test9:
Add RFC-6605 ECDSA DNSSEC verification.
Don't mess with the TTL of DNSSEC RRs.
No CD in forwarded queries unless dnssec-debug for TCP too.
Log BOGUS validation result when upstream sends SERVFAIL.
--rev-server option. Syntactic sugar for PTR queries.
Omit ECC from DNSSEC if nettle library is old.
Add --servers-file option.
NSEC3 validation. First pass.
Check signer name in RRSIGs.
An NSEC record cannot attest to its own non-existance!
The www.nihn.org master site seems to be gone forever.
The solution to unbreak this port to upgrade to version 3.x, available at:
http://ldapdns.sourceforge.net
Port was reset to facilitate somebody else performing the update.
Sylvio has been MIA for more than a year now.
- remove PKG-INSTALL from post-install (not used with staging)
- move pkg-install and pkg-deinstall into pkg-plist
Approved by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer, per PM)
This directory contains a Python module that implements a DNS (Domain
Name Server) client, plus additional modules that define some symbolic
constants used by DNS (dnstype, dnsclass, dnsopcode).
WWW: http://pydns.sourceforge.net/
WWW: https://launchpad.net/py3dns
- Convert LIB_DEPENDS to new format [1]
- Remove leading article from COMMENT
- Switch to options helpers
- Conditional installation of docs is not needed with stage
- Don't show pkg-message twice
PR: ports/186693 [1]
Submitted by: Denis Generalov <gd.workbox@gmail.com>
Approved by: maintainer
After contacting the author, he updated the snapshot to the latest,
remove 7M worth of dead files and adding a man page. I made some
corrections to that man page and converted it to mdoc tags.
- Define EXAMPLES
- Don't install license file but define LICENSE
- also don't install THANKS file as documentation
- Add an additional mirror
- Indent
- Now that this port looks shiny clean take maintainership
GNATMake was used to clean up the WRKSRC after extraction, but the
problem is that it's not present at that point on a clean build; it
comes in later as a build dependency. Rather than a messy definition
of extract-depends, just remove the files manually without gnatmake.
IRONSIDES is an authoritative DNS server that is provably invulnerable to
many of the problems that plague other servers. It achieves this property
through the use of formal methods in its design, in particular the language
Ada and the SPARK formal methods tool set. Code validated in this way is
provably exception-free, contains no data flow errors, and terminates only
in the ways that its programmers explicitly say that it can. These are very
desirable properties from a computer security perspective.
IRONSIDES is not a complete implementation of DNS. In particular, it does
not support zone transfers or recursive queries. It does, however, support
a sufficient number of DNS records to be useful as an authoritative DNS
server for an enterprise.
