pkgsrc/net/bind9/Makefile

75 lines
2.5 KiB
Makefile
Raw Normal View History

# $NetBSD: Makefile,v 1.71 2005/06/01 22:23:19 tron Exp $
upgrade to 9.2.3. If you have installed BIND 9.1.3-P1, BIND 9.1.3-P2, BIND 9.2.2-P1, BIND 9.2.2-P2, BIND 9.2.3rc2 or BIND 9.2.3rc3 it is recommended that you upgrade. These versions generate false positives when applying delegation-only tests. --- 9.2.3 released --- 1525. [bug] dns_cache_create() could trigger a REQUIRE failure in isc_mem_put() during error cleanup. 1524. [port] AIX needs to be able to resolve all symbols when creating shared libraries (--with-libtool). 1523. [bug] Fix race condition in rbtdb. [RT# 9189] 1522. [bug] dns_db_findnode() relax the requirements on 'name'. [RT# 9286] 1518. [bug] dns_nxt_buildrdata(), and hence dns_nxt_build(), contained a off-by-one error when working out the number of octets in the bitmap. 1514. [bug] named: isc_hash_destroy() was being called too early. [RT #9160] 1513. [doc] Add "US" to root-delegation-only exclude list. --- 9.2.3rc4 released --- 1512. [bug] Extend the delegation-only logging to return query type, class and responding nameserver. 1511. [bug] delegation-only was generating false positives on negative answers from subzones. --- 9.2.3rc3 released --- 1510. [func] New view option "root-delegation-only". Apply delegation-only check to all TLDs and root. Note there are some TLDs that are NOT delegation only (e.g. DE, LV, US and MUSEUM) these can be excluded from the checks by using exclude. root-delegation-only exclude { "DE"; "LV"; "US"; "MUSEUM"; }; 1509. [bug] Hint zones should accept delegation-only. Forward zone should not accept delegation-only. 1508. [bug] Don't apply delegation-only checks to answers from forwarders. 1507. [bug] Handle BIND 8 style returns to NS queries to parents when making delegation-only checks. 1506. [bug] Wrong return type for dns_view_isdelegationonly(). --- 9.2.3rc2 released --- 1505. [bug] Uninitialised rdataset in sdb. [RT #8750] 1504. [func] New zone type "delegation-only". 1503. [port] win32: install libeay32.dll outside of system32. (9.2.2-P2 is somewhere around here)
2003-10-27 04:56:03 +01:00
DISTNAME= bind-${BIND_VERSION}
PKGNAME= bind-${BIND_VERSION}
CATEGORIES= net
upgrade to 9.2.3. If you have installed BIND 9.1.3-P1, BIND 9.1.3-P2, BIND 9.2.2-P1, BIND 9.2.2-P2, BIND 9.2.3rc2 or BIND 9.2.3rc3 it is recommended that you upgrade. These versions generate false positives when applying delegation-only tests. --- 9.2.3 released --- 1525. [bug] dns_cache_create() could trigger a REQUIRE failure in isc_mem_put() during error cleanup. 1524. [port] AIX needs to be able to resolve all symbols when creating shared libraries (--with-libtool). 1523. [bug] Fix race condition in rbtdb. [RT# 9189] 1522. [bug] dns_db_findnode() relax the requirements on 'name'. [RT# 9286] 1518. [bug] dns_nxt_buildrdata(), and hence dns_nxt_build(), contained a off-by-one error when working out the number of octets in the bitmap. 1514. [bug] named: isc_hash_destroy() was being called too early. [RT #9160] 1513. [doc] Add "US" to root-delegation-only exclude list. --- 9.2.3rc4 released --- 1512. [bug] Extend the delegation-only logging to return query type, class and responding nameserver. 1511. [bug] delegation-only was generating false positives on negative answers from subzones. --- 9.2.3rc3 released --- 1510. [func] New view option "root-delegation-only". Apply delegation-only check to all TLDs and root. Note there are some TLDs that are NOT delegation only (e.g. DE, LV, US and MUSEUM) these can be excluded from the checks by using exclude. root-delegation-only exclude { "DE"; "LV"; "US"; "MUSEUM"; }; 1509. [bug] Hint zones should accept delegation-only. Forward zone should not accept delegation-only. 1508. [bug] Don't apply delegation-only checks to answers from forwarders. 1507. [bug] Handle BIND 8 style returns to NS queries to parents when making delegation-only checks. 1506. [bug] Wrong return type for dns_view_isdelegationonly(). --- 9.2.3rc2 released --- 1505. [bug] Uninitialised rdataset in sdb. [RT #8750] 1504. [func] New zone type "delegation-only". 1503. [port] win32: install libeay32.dll outside of system32. (9.2.2-P2 is somewhere around here)
2003-10-27 04:56:03 +01:00
MASTER_SITES= ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/
MAINTAINER= tron@NetBSD.org
HOMEPAGE= http://www.isc.org/sw/bind/
COMMENT= Version 9 of the Berkeley Internet Name Daemon, implementation of DNS
BIND_VERSION= 9.3.1
# IPv6 ready, automatically detected
.include "../../mk/bsd.prefs.mk"
BUILD_DEFS+= USE_INET6
# No need to set USE_INET6, will auto-detect.
USE_LIBTOOL= yes
USE_PKGINSTALL= yes
GNU_CONFIGURE= yes
CONFIGURE_ARGS+=--with-libtool=yes \
--sysconfdir=/etc \
2004-12-29 16:21:50 +01:00
--localstatedir=${VARBASE}
#LDFLAGS+= ${COMPILER_RPATH_FLAG}${LOCALBASE}/pthreads/lib -L${LOCALBASE}/pthreads/lib
# use external OpenSSL. comment out the following line and the buildlink
# include at the bottom to use OpenSSL shipped with BIND9.
CONFIGURE_ARGS+=--with-openssl=${SSLBASE}
PKG_USERS= ${BIND_USER}:${BIND_GROUP}::Named\\ pseudo-user:${BIND_DIR}:${NOLOGIN}
PKG_GROUPS= ${BIND_GROUP}
PTHREAD_OPTS+= native
FILES_SUBST+= BIND_GROUP=${BIND_GROUP} BIND_USER=${BIND_USER} PAX=${PAX}
MESSAGE_SUBST+= BIND_DIR=${BIND_DIR} BIND_USER=${BIND_USER}
# include/isc/ipv6.h is installed on non-ipv6 platforms
.if defined(USE_INET6) && (${USE_INET6} == "YES")
PLIST_SUBST+= IPV6H="@comment "
.else
PLIST_SUBST+= IPV6H=
.endif
use 9.1.1rc1. we upgrade to release candidate for important fixes (change id 727 is very important). hack: package version number is set to 9.1.0.1, as 9.1.1rc1 is prior to 9.1.1. 729. [port] pthread_setconcurrency() needs to be called on Solaris. 727. [port] Work around OS bug where accept() succeeds but fails to fill in the peer address of the accepted connection, by treating it as an error rather than an assertion failure. [RT #809] 723. [bug] Referrals whose NS RRs had a 0 TTL caused the resolver to return DNS_R_SERVFAIL. [RT #783] 720. [bug] Server could enter infinite loop in dispatch.c:do_cancel(). [RT #743] 719. [bug] Rapid reloads could trigger an assertion failure. [RT #743, #763] 717. [bug] Certain TKEY processing failure modes could reference an uninitialized variable, causing the server to crash. [RT #750] 716. [bug] The first line of a $INCLUDE master file was lost if an origin was specified. [RT #744] 715. [bug] Resolving some A6 chains could cause an assertion failure in adb.c. [RT #738] 711. [bug] The libisc and liblwres implementations of inet_ntop contained an off by one error. 706. [bug] Zones with an explicit "allow-update { none; };" were considered dynamic and therefore not reloaded on SIGHUP or "rndc reload". 700. [bug] $GENERATE range check was wrong. [RT #688] 698. [bug] Aborting nsupdate with ^C would lead to several race conditions. 699. [bug] The lexer mishandled empty quoted strings. [RT #694] 694. [bug] $GENERATE did not produce the last entry. [RT #682, #683] 693. [bug] An empty lwres statement in named.conf caused the server to crash while loading. 692. [bug] Deal with systems that have getaddrinfo() but not gai_strerror(). [RT #679] 691. [bug] Configuring per-view forwarders caused an assertion failure. [RT #675, #734]
2001-02-08 11:31:43 +01:00
PLIST_SRC= ${WRKDIR}/PLIST
RCD_SCRIPTS= lwresd named9
use 9.1.1rc1. we upgrade to release candidate for important fixes (change id 727 is very important). hack: package version number is set to 9.1.0.1, as 9.1.1rc1 is prior to 9.1.1. 729. [port] pthread_setconcurrency() needs to be called on Solaris. 727. [port] Work around OS bug where accept() succeeds but fails to fill in the peer address of the accepted connection, by treating it as an error rather than an assertion failure. [RT #809] 723. [bug] Referrals whose NS RRs had a 0 TTL caused the resolver to return DNS_R_SERVFAIL. [RT #783] 720. [bug] Server could enter infinite loop in dispatch.c:do_cancel(). [RT #743] 719. [bug] Rapid reloads could trigger an assertion failure. [RT #743, #763] 717. [bug] Certain TKEY processing failure modes could reference an uninitialized variable, causing the server to crash. [RT #750] 716. [bug] The first line of a $INCLUDE master file was lost if an origin was specified. [RT #744] 715. [bug] Resolving some A6 chains could cause an assertion failure in adb.c. [RT #738] 711. [bug] The libisc and liblwres implementations of inet_ntop contained an off by one error. 706. [bug] Zones with an explicit "allow-update { none; };" were considered dynamic and therefore not reloaded on SIGHUP or "rndc reload". 700. [bug] $GENERATE range check was wrong. [RT #688] 698. [bug] Aborting nsupdate with ^C would lead to several race conditions. 699. [bug] The lexer mishandled empty quoted strings. [RT #694] 694. [bug] $GENERATE did not produce the last entry. [RT #682, #683] 693. [bug] An empty lwres statement in named.conf caused the server to crash while loading. 692. [bug] Deal with systems that have getaddrinfo() but not gai_strerror(). [RT #679] 691. [bug] Configuring per-view forwarders caused an assertion failure. [RT #675, #734]
2001-02-08 11:31:43 +01:00
post-install:
${INSTALL_DATA_DIR} ${PREFIX}/share/doc/bind9
${INSTALL_DATA_DIR} ${PREFIX}/share/doc/bind9/arm
${INSTALL_DATA_DIR} ${PREFIX}/share/doc/bind9/draft
${INSTALL_DATA_DIR} ${PREFIX}/share/doc/bind9/misc
${INSTALL_DATA_DIR} ${PREFIX}/share/doc/bind9/rfc
${INSTALL_DATA} ${WRKSRC}/README ${PREFIX}/share/doc/bind9
${INSTALL_DATA} ${WRKSRC}/doc/arm/* ${PREFIX}/share/doc/bind9/arm
${INSTALL_DATA} ${WRKSRC}/doc/draft/* ${PREFIX}/share/doc/bind9/draft
${INSTALL_DATA} ${WRKSRC}/doc/misc/* ${PREFIX}/share/doc/bind9/misc
${INSTALL_DATA} ${WRKSRC}/doc/rfc/* ${PREFIX}/share/doc/bind9/rfc
use 9.1.1rc1. we upgrade to release candidate for important fixes (change id 727 is very important). hack: package version number is set to 9.1.0.1, as 9.1.1rc1 is prior to 9.1.1. 729. [port] pthread_setconcurrency() needs to be called on Solaris. 727. [port] Work around OS bug where accept() succeeds but fails to fill in the peer address of the accepted connection, by treating it as an error rather than an assertion failure. [RT #809] 723. [bug] Referrals whose NS RRs had a 0 TTL caused the resolver to return DNS_R_SERVFAIL. [RT #783] 720. [bug] Server could enter infinite loop in dispatch.c:do_cancel(). [RT #743] 719. [bug] Rapid reloads could trigger an assertion failure. [RT #743, #763] 717. [bug] Certain TKEY processing failure modes could reference an uninitialized variable, causing the server to crash. [RT #750] 716. [bug] The first line of a $INCLUDE master file was lost if an origin was specified. [RT #744] 715. [bug] Resolving some A6 chains could cause an assertion failure in adb.c. [RT #738] 711. [bug] The libisc and liblwres implementations of inet_ntop contained an off by one error. 706. [bug] Zones with an explicit "allow-update { none; };" were considered dynamic and therefore not reloaded on SIGHUP or "rndc reload". 700. [bug] $GENERATE range check was wrong. [RT #688] 698. [bug] Aborting nsupdate with ^C would lead to several race conditions. 699. [bug] The lexer mishandled empty quoted strings. [RT #694] 694. [bug] $GENERATE did not produce the last entry. [RT #682, #683] 693. [bug] An empty lwres statement in named.conf caused the server to crash while loading. 692. [bug] Deal with systems that have getaddrinfo() but not gai_strerror(). [RT #679] 691. [bug] Configuring per-view forwarders caused an assertion failure. [RT #675, #734]
2001-02-08 11:31:43 +01:00
${CP} ${PKGDIR}/PLIST ${PLIST_SRC}
(cd ${PREFIX}; ${FIND} share/doc/bind9 -type f -print ) >> ${PLIST_SRC}
(cd ${PREFIX}; ${FIND} share/doc/bind9 -type d -print ) | \
Update bind9 pacakge to 9.2.1 (with pkglint free). --- 9.2.1 released --- 1271. [port] win32: a make file contained absolute version specific references. 1269. [bug] Missing masters clause was not handled gracefully. [RT #2703] 1244. [bug] Receiving a TCP message from a blackhole address would prevent further messages being received over that interface. 1178. [bug] Follow and cache (if appropriate) A6 and other data chains to completion in the additional section. --- 9.2.1rc2 released --- 1240. [bug] It was possible to leak zone references by specifying an incorrect zone to rndc. 1239. [bug] Under certain circumstances named could continue to use a name after it had been freed triggering INSIST() failures. [RT #2614] 1238. [bug] It is possible to lockup the server when shutting down if notifies are being processed. [RT #2591] 1237. [bug] nslookup: "set q=type" failed. 1236. [bug] dns_rdata{class,type}_fromtext() didn't handle non NULL terminated text regions. [RT #2588] 1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL. 1231. [port] HPUX 11.11 recvmsg() can return spurious EADDRNOTAVAIL. 1230. [bug] isccc_cc_isreply() and isccc_cc_isack() were broken. 1229. [bug] named would crash if it received a TSIG signed query as part of an AXFR response. [RT #2570] 1228. [bug] 'make install' did not depend on 'make all'. [RT #2559] 1227. [bug] dns_lex_getmastertoken() now returns ISC_R_BADNUMBER if a number was expected and some other token was found. [RT#2532] 1222. [bug] Specifying 'port *' did not always result in a system selected (non-reserved) port being used. [RT #2537] 1221. [bug] Zone types 'master', 'slave' and 'stub' were not being compared case insensitively. [RT #2542] 1218. [bug] Named incorrectly returned SERVFAIL rather than NOTAUTH when there was a TSIG BADTIME error. [RT #2519] 1216. [bug] Multiple server clauses for the same server were not reported. [RT #2514] 1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1 1214. [bug] Win32: isc_file_renameunique() could leave zero length files behind. 1212. [port] libbind: 64k answer buffers were causing stack space to be exceeded for certian OS. Use heap space instead. 1211. [bug] dns_name_fromtext() incorrectly handled certain valid octal bitlabels. [RT #2483] 1210. [bug] libbind: getnameinfo() failed to lookup IPv4 mapped / compatible addresses. [RT #2461] 1208. [bug] dns_master_load*() failed to log a error message if an error was detected when parsing the ownername of a record. [RT #2448] --- 9.2.1rc1 released --- 1207. [bug] libbind: getaddrinfo() could call freeaddrinfo() with an invalid pointer. 1206. [bug] SERVFAIL and NOTIMP responses to an EDNS query should trigger a non-EDNS retry. 1205. [bug] OPT, TSIG and TKEY cannot be used to set the "class" of the message. [RT #2449] 1204. [bug] libbind: res_nupdate() failed to update the name server addresses before sending the update. 1201. [bug] Require that if 'callbacks' is passed to dns_rdata_fromtext(), callbacks->error and callbacks->warn are initialized. 1200. [bug] Log 'errno' that we are unable to convert to isc_result_t. [RT #2404] 1198. [bug] OPT printing style was not consistant with the way the header fields are printed. The DO bit was not reported if set. Report if any of the MBZ bits are set. 1197. [bug] Attempts to define the same acl multiple times were not detected. 1196. [contrib] update mdnkit to 2.2.3. 1195. [bug] Attempts to redefine builtin acls should be caught. [RT #2403] 1194. [bug] Not all duplicate zone definitions were being detected at the named.conf checking stage. [RT #2431] 1193. [bug] Best effort parsing didn't handle packet truncation. 1191. [bug] A dynamic update removing the last non-apex name in a secure zone would fail. [RT #2399] 1189. [bug] On some systems, malloc(0) returns NULL, which could cause the caller to report an out of memory error. [RT #2398] 1188. [bug] Dynamic updates of a signed zone would fail if some of the zone private keys were unavailable. 1186. [bug] isc_hex_tobuffer(,,length = 0) failed to unget the EOL token when reading to end of line. 1185. [bug] libbind: don't assume statp->_u._ext.ext is valid unless RES_INIT is set when calling res_*init(). 1184. [bug] libbind: call res_ndestroy() if RES_INIT is set when res_*init() is called. 1183. [bug] Handle ENOSR error when writing to the internal control pipe. [RT #2395] 1182. [bug] The server could throw an assertion failure when constructing a negative response packet. 1176. [doc] Document that allow-v6-synthesis is only performed for clients that are supplied recursive service. [RT #2260] 1175. [bug] named-checkzone failed to call dns_result_register() at startup which could result in runtime exceptions when printing "out of memory" errors. [RT #2335] 1174. [bug] Win32: add WSAECONNRESET to the expected errors from connect(). [RT #2308] 1173. [bug] Potential memory leaks in isc_log_create() and isc_log_settag(). [RT #2336] 1172. [doc] Add CERT, GPOS, KX, NAPTR, NSAP, PX and TXT to table of RR types in ARM. 1170. [bug] Don't attempt to print the token when a I/O error occurs when parsing named.conf. [RT #2275] 1168. [bug] Empty also-notify clauses were not handled. [RT #2309] 1167. [contrib] nslint-2.1a3 (from author). 1166. [bug] "Not Implemented" should be reported as NOTIMP, not NOTIMPL. [RT #2281] 1165. [bug] We were rejecting notify-source{-v6} in zone clauses. 1164. [bug] Empty masters clauses in slave / stub zones were not handled gracefully. [RT #2262] 1162. [bug] The allow-notify option was not accepted in slave zone statements. 1161. [bug] named-checkzone looped on unbalanced brackets. [RT #2248] 1160. [bug] Generating Diffie-Hellman keys longer than 1024 bits could fail. [RT #2241] 1156. [port] The configure test for strsep() incorrectly succeeded on certain patched versions of AIX 4.3.3. [RT #2190] 1154. [bug] Don't attempt to obtain the netmask of a interface if there is no address configured. [RT #2176] 1152. [bug] libbind: read buffer overflows. 1144. [bug] rndc-confgen would crash if both the -a and -t options were specified. [RT #2159] 1142. [bug] dnssec-signzone would fail to delete temporary files in some failure cases. [RT #2144] 1141. [bug] When named rejected a control message, it would leak a file descriptor and memory. It would also fail to respond, causing rndc to hang. [RT #2139, #2164] 1140. [bug] rndc-confgen did not accept IPv6 addresses as arguments to the -s option. [RT #2138] 1136. [bug] CNAME records synthesized from DNAMEs did not have a TTL of zero as required by RFC2672. [RT #2129] 1125. [bug] rndc: -k option was missing from usage message. [RT #2057] 1124. [doc] dig: +[no]dnssec, +[no]besteffort and +[no]fail are now documented. [RT #2052] 1123. [bug] dig +[no]fail did not match description. [RT #2052] 1109. [bug] nsupdate accepted illegal ttl values. 1108. [bug] On Win32, rndc was hanging when named was not running due to failure to select for exceptional conditions in select(). [RT #1870] 1081. [bug] Multicast queries were incorrectly identified based on the source address, not the destination address. 1072. [bug] The TCP client quota could be exceeded when recursion occurred. [RT #1937] 1071. [bug] Sockets listening for TCP DNS connections specified an excessive listen backlog. [RT #1937] 1070. [bug] Copy DNSSEC OK (DO) to response as specified by draft-ietf-dnsext-dnssec-okbit-03.txt. 1014. [bug] Some queries would cause statistics counters to increment more than once or not at all. [RT #1321] 1012. [bug] The -p option to named did not behave as documented. 988. [bug] 'additional-from-auth no;' did not work reliably in the case of queries answered from the cache. [RT #1436] 995. [bug] dig, host, nslookup: using a raw IPv6 address as a target address should be fatal on a IPv4 only system.
2002-05-04 16:56:23 +02:00
${SED} -e 's/^/@dirrm /' | ${SORT} -r >> ${PLIST_SRC}
2004-04-14 22:26:51 +02:00
.include "../../mk/pthread.buildlink3.mk"
.include "../../security/openssl/buildlink3.mk"
.include "../../mk/bsd.pkg.mk"
.if defined(PTHREAD_TYPE) && (${PTHREAD_TYPE} == "none") || \
!empty(MACHINE_PLATFORM:MNetBSD-*-vax) || \
!empty(MACHINE_PLATFORM:MNetBSD-*-m68k)
CONFIGURE_ARGS+= --disable-threads
.else
CONFIGURE_ARGS+= --enable-threads
.endif