Commit graph

53 commits

Author SHA1 Message Date
Mathieu Arnold
ade4e0672d Update BIND9 to the latest patch releases, 9.9.8-P2, 9.10.3-P2, and snapshot.
MFH:		2015Q4
Changes:	https://kb.isc.org/article/AA-01326/81/BIND-9.9.8-P2-Release-Notes.html
Changes:	https://kb.isc.org/article/AA-01328/81/BIND-9.10.3-P2-Release-Notes.html
Security:	CVE-2015-3193
Security:	CVE-2015-8000
Security:	CVE-2015-8461
Sponsored by:	Absolight
2015-12-16 00:45:02 +00:00
Mathieu Arnold
b43773d4fd Fix build WITH=DLZ_BDB.
PR:		201715
Sponsored by:	Absolight
2015-10-08 12:14:41 +00:00
Mathieu Arnold
5ed65050ac Fix build on -CURRENT. [1]
- Force building with libedit
- Bump PORTREVISION to account for accidental succesful builds

PR:		203273 [1]
Sponsored by:	Absolight
2015-09-25 10:05:48 +00:00
Mathieu Arnold
752504ffb6 Fixup gssapi from base.
Submitted by:	hrs
Sponsored by:	Absolight
2015-09-18 22:11:21 +00:00
Mathieu Arnold
9645ef162a Update to bind99 to 9.9.8 & bind910 to 9.10.3.
- Add new QUERYTRACE & FETCHLIMIT.
  Note that QUERYTRACE is for debug purposes, and will eat your
  performances.
- Don't do the PORTREVISION patch if PORTREVISION is 0.
- Regen some patches

Changes:	https://lists.isc.org/pipermail/bind-announce/2015-September/000961.html
Changes:	https://lists.isc.org/pipermail/bind-announce/2015-September/000962.html
Sponsored by:	Absolight
2015-09-16 08:12:05 +00:00
Mathieu Arnold
cd537ade57 Update BIND to 9.9.7-P3 and 9.10.2-P4.
MFH:		2015Q3 (Also needs 393161 395660 395703)
Security:	CVE-2015-5722, CVE-2015-5986
Sponsored by:	Absolight
2015-09-02 20:46:55 +00:00
Mathieu Arnold
560c3232fe Add an option for embedding PORTREVISION in the server's version string.
Sponsored by:	Absolight
2015-08-31 16:43:14 +00:00
Mathieu Arnold
6c84a7b494 When not using OpenSSL from ports, do not try to unmount the chrooted
engines directory.

PR:		201423 (based on)
Submitted by:	girgen
Sponsored by:	Absolight
2015-08-31 10:06:27 +00:00
Mathieu Arnold
41627ba77f Add an option to enable the bind min override ttl patch.
Requested by:	Laurent Frigault
Sponsored by:	Absolight
2015-07-29 14:36:20 +00:00
Mathieu Arnold
df734ad65e Update BIND9.
- 9.9 -> 9.9.7-P2
- 9.10 -> 9.10.2-P3

Security:	CVE-2015-5477
Sponsored by:	Absolight
2015-07-28 22:21:44 +00:00
Mathieu Arnold
f10c0cc39d Update BIND 9.9 to 9.9.7-P1 and 9.10 to 9.10.2-P2.
MFH:		2015Q3
Security:	CVE-2015-4620
Sponsored by:	Absolight
2015-07-07 22:15:07 +00:00
Mathieu Arnold
3f0ba6f820 Make BIND start a bit later (and really *after* ldconfig.) [1]
Add an option to have it start way later.

PR:		200375 [1]
Sponsored by:	Absolight
2015-06-01 10:13:58 +00:00
Mathieu Arnold
274f6b67fd Typo
Poked by:	Peter Blok
Sponsored by:	Absolight
2015-05-18 15:33:07 +00:00
Mathieu Arnold
2c0a2e8a9f Allow BIND 9.10 users to select the old key format when using GOST.[1]
While there, reword the options a bit, and the pkg-help files.

PR:		200031 [1]
Submitted by:	 Leo Vandewoestijne [1]
Sponsored by:	Absolight
2015-05-18 11:41:41 +00:00
Mathieu Arnold
9fbb9b3c6d When named.conf was placed somewhere else than %%ETCDIR%%, rndc would stop
working.

PR:		199384
Submitted by:	Curtis Villamizar
Sponsored by:	Absolight
2015-04-30 14:43:04 +00:00
John Marino
64c7132444 dns/bind99, dns/bind910: support no-base option on DragonFly
Approved by:	mat (maintainer)
2015-04-01 22:36:10 +00:00
Mathieu Arnold
79c5baadd0 Enhance the error message when running from a jail without devfs.
Sponsored by:	Absolight
2015-03-31 15:02:59 +00:00
Mathieu Arnold
2aba319f33 Add chroot back to BIND's startup script.
Differential Revision:	https://reviews.freebsd.org/D1952
Sponsored by:	Absolight
2015-03-24 15:22:51 +00:00
Mathieu Arnold
43e54a5f1b Update dns/bind99 to 9.9.7 and dns/bind910 to 9.10.2.
On 8 and 9, use the same configuration path than on 10+, ${PREFIX}/etc/namedb/.

Sponsored by:	Absolight
2015-02-26 02:03:15 +00:00
Mathieu Arnold
978598f6c0 Update BIND 9.9 and 9.10 to the latest security patch.
Sponsored by:	Absolight
2015-02-18 22:37:54 +00:00
Mathieu Arnold
15936336c3 Add a patch for CVE-2015-1349 while I work on updating both ports to the new version.
Security:	CVE-2015-1349
Sponsored by:	Absolight
2015-02-18 21:56:08 +00:00
Mathieu Arnold
ea426e2253 Fix a few problems bind-tools by not overwritting what's defined in it in
bind910's Makefile.

Sponsored by:	Absolight
2015-01-08 15:22:49 +00:00
Mathieu Arnold
4a4af272a2 Add a note about running the right BIND daemon on 8 and 9.
Sponsored by:	Absolight
2015-01-06 15:01:17 +00:00
Mathieu Arnold
abea52d074 Retire REPLACE_BASE option.
While there, reduce changes from bind99 and bind910 ports.

Sponsored by:	Absolight
2015-01-05 17:44:11 +00:00
Mathieu Arnold
8a832ab6a4 Security update of BIND9 to 9.9.6-P1 and 9.10.1-P1.
Security:	CVE-2014-8500 CVE-2014-8680
Sponsored by:	Absolight
2014-12-08 17:29:44 +00:00
Mathieu Arnold
eb57f92a3f Fix three ports forgotten by the USE_PGSQL removal. (Fix a typo in devel/upp.)
Sponsored by:	Absolight
2014-11-24 17:41:10 +00:00
Mathieu Arnold
73782b4e77 Fix bind-tools PORTREVISION.
Noticed by:	Andrei Brezan
Sponsored by:	Absolight
2014-11-18 23:17:41 +00:00
Mathieu Arnold
828c669f5f Install the bind.keys file with the root and dlv.isc.org keys.
Sponsored by:	Absolight
2014-11-17 17:51:51 +00:00
Mathieu Arnold
f303c83fe8 Don't install named rc script with bind-tools.
Sponsored by:	Absolight
2014-10-22 15:08:58 +00:00
Mathieu Arnold
19c4b4129c And gmake is no longer needed.
Sponsored by:	Absolight
2014-09-23 11:32:51 +00:00
Mathieu Arnold
59bf70b423 Update to 9.10.1.
Sponsored by:	Absolight
2014-09-23 11:22:40 +00:00
Mathieu Arnold
4738a25037 Update pkg-descr, this 9.10, not 9.9.
Sponsored by:	Absolight
2014-09-17 11:58:39 +00:00
Mathieu Arnold
9a1f796155 configure no longer has problems detecting our arch like it had in bind95's
time, so remove ARCH modification, which leads to other problems, like [1]

PR:		193359 [1]
Submitted by:	dinoex [1]
Sponsored by:	Absolight
2014-09-07 10:24:59 +00:00
Adam Weinberger
e91f5afdf5 Bump PORTREVISION on all ports that depend on net/GeoIP for
r364627.

Approved by:	portmgr (not really, but touches unstaged ports)
2014-08-11 17:05:50 +00:00
Tijl Coosemans
37f54e0f66 net/openldap24-*:
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD

databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip

databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample

databases/libgdamm:
- Drop :keepla
- USES=tar:bzip2
- Use INSTALL_TARGET=install-strip

databases/libgdamm5:
- Add INSTALL_TARGET=install-strip
- Drop --enable-static (inherited from old repocopy)

devel/anjuta x11-toolkits/py-gnome-extras:
- Drop :keepla

dns/powerdns dns/powerdns-devel:
- Convert to USES=libtool
- Add INSTALL_TARGET=install-strip
- Disable static modules
- Stop creating library symlinks with .0 suffix, not needed for dynamically
  opened modules

mail/dovecot2:
- Add USES=libtool

mail/dovecot2-pigeonhole:
- Drop CONFIGURE_TARGET (incorrect for Dragonfly)
- Add USES=libtool and INSTALL_TARGET=install-strip

math/gnumeric:
- USES=libtool tar:xz

Approved by:	portmgr (implicit, bump unstaged ports)
2014-07-24 18:34:16 +00:00
Mathieu Arnold
d0a51c4e4d And it's supposed to be lower case.
Sponsored by:	Absolight
2014-07-11 15:38:42 +00:00
Mathieu Arnold
450b3f4661 Add CPE to BIND9.
Sponsored by:	Absolight
2014-07-11 15:28:13 +00:00
Mathieu Arnold
84296bece1 Add a PYTHON option to bind99 and bind910, it installs a couple of dnssec
related utilities.
Use bind's own Makefiles for installation in bind-tools.

Sponsored by:	Absolight
2014-06-24 15:15:33 +00:00
Mathieu Arnold
03cf7df719 Fix dns/bind-tools after the gssapi update.
Also, move it from BIND 9.9 to 9.10, and add delv and nsupdate.

Sponsored by:	Absolight
2014-06-18 12:23:28 +00:00
Mathieu Arnold
f586236132 Remove test bits.
Pointy hat to:	mat
Sponsored by:	Absolight
2014-06-17 17:16:33 +00:00
Mathieu Arnold
249978131e Convert dns/bind9* to USES=gssapi.
Sponsored by:	Absolight
2014-06-17 15:01:24 +00:00
Mathieu Arnold
a24223f48c Update to 9.10.0-P2
Changes:	https://lists.isc.org/pipermail/bind-announce/2014-June/000914.html
Security:	CVE-2014-3859
Sponsored by:	Absolight
2014-06-12 14:20:58 +00:00
Mathieu Arnold
458efc5914 Don't install rndc.conf
It is generated by the rc script during the first startup.  And if
the file is present, it messes up the rndc.key generation.

Poked by:	Alain Audebert
Sponsored by:	Absolight
2014-06-06 10:59:46 +00:00
Mathieu Arnold
3d3897ed7d Fix build with GOST (on 10, base OpenSSL doesn't have it)
Make sure OpenSSL from ports is used < 10.

Sponsored by:	Absolight
2014-05-17 21:30:24 +00:00
Mathieu Arnold
2bc2529052 Make GOST in BIND 9.* optional
Test Plan: Currently testing in poudriere

Differential Revision: https://phabric.freebsd.org/D12
2014-05-14 23:59:14 +00:00
Mathieu Arnold
3627a7323c Update to 9.10.0-P1.
Changes:	https://lists.isc.org/pipermail/bind-announce/2014-May/000909.html
Security:	CVE-2014-3214
Sponsored by:	Absolight
2014-05-08 21:48:08 +00:00
Mathieu Arnold
382fb2f15d Update to 9.10.0
Changes:	https://lists.isc.org/pipermail/bind-announce/2014-May/000908.html
Relnotes:	yes (if applicable to ports)
Sponsored by:	Absolight
2014-05-02 11:51:17 +00:00
Mathieu Arnold
e5a6ad5da6 Update to 9.10.0.rc2
- Remove REPLACE_BASE option, I should have done so when adding 9.10.0.rc1
- Clean the Makefile a bit

Changes:	https://lists.isc.org/pipermail/bind-announce/2014-April/000907.html
Sponsored by:	Absolight
2014-04-28 15:42:06 +00:00
Mathieu Arnold
4fd85a7a49 Fix the rc script reload command.
Noticed by:	David Samms
Sponsored by:	Absolight
2014-04-17 16:43:48 +00:00
Niclas Zeising
eb469f31a5 Bump portrevision for shlib change in libxml2
Approved by:	portmgr (bdrewery, implicit)
2014-04-16 19:03:10 +00:00