Update net/unbound to version 1.19.3.
Pkgsrc changes: * Add dependency on devel/protobuf-c/buildlink3.mk * Add pkg-config as tool dependency * Adjust checksums Upstream changes: Features: - Merge PR #973: Use the origin (DNAME) TTL for synthesized CNAMEs as per RFC 6672. Bug Fixes: - Fix unit test parse of origin syntax. - Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer systems. - Fix #964: config.h.in~ backup file in release tar balls. - Merge #968: Replace the obsolescent fgrep with grep -F in tests. - Merge #971: fix 'WARNING: Message has 41 extra bytes at end'. - Fix #969: [FR] distinguish Do53, DoT and DoH in the logs. - Fix dnstap that assertion failed on logging other than UDP and TCP traffic. It lists it as TCP traffic. - Fix to sync the tests script file common.sh. - iana portlist update. - Updated IPv4 and IPv6 address for b.root-servers.net in root hints. - Update test script file common.sh. - Fix tests to use new common.sh functions, wait_logfile and kill_from_pidfile. - Fix #974: doc: default number of outgoing ports without libevent. - Merge #975: Fixed some syntax errors in rpl files. - Fix root_zonemd unit test, it checks that the root ZONEMD verifies, now that the root has a valid ZONEMD. - Update example.conf with cookie options. - Merge #980: DoH: reject non-h2 early. To fix #979: Improve errors for non-HTTP/2 DoH clients. - Merge #985: Add DoH and DoT to dnstap message. - Fix #983: Sha1 runtime insecure change was incomplete. - Remove unneeded newlines and improve indentation in remote control code. - Merge #987: skip edns frag retry if advertised udp payload size is not smaller. - Fix unit test for #987 change in udp1xxx retry packet send. - Merge #988: Fix NLnetLabs#981: dump_cache truncates large records. - Fix to link with -lcrypt32 for OpenSSL 3.2.0 on Windows. - Fix to link with libssp for libcrypto and getaddrinfo check for only header. Also update crosscompile to remove ssp for 32bit. - Merge #993: Update b.root-servers.net also in example config file. - Update workflow for ports to use newer openssl on windows compile. - Fix warning for windres on resource files due to redefinition. - Fix for #997: Print details for SSL certificate failure. - Update error printout for duplicate trust anchors to include the trust anchor name (relates to #920). - Update message TTL when using cached RRSETs. It could result in non-expired messages with expired RRSETs (non-usable messages by Unbound). - Merge #999: Search for protobuf-c with pkg-config. - Fix #1006: Can't find protobuf-c package since #999. - Fix documentation for access-control in the unbound.conf man page. - Merge #1010: Mention REFUSED has the TC bit set with unmatched allow_cookie acl in the manpage. It also fixes the code to match the documentation about clients with a valid cookie that bypass the ratelimit regardless of the allow_cookie acl. - Document the suspend argument for process_ds_response(). - Move github workflows to use checkoutv4. - Fix edns subnet replies for scope zero answers to not get stored in the global cache, and in cachedb, when the upstream replies without an EDNS record. - Fix for #1022: Fix ede prohibited in access control refused answers. - Fix unbound-control-setup.cmd to use 3072 bits so that certificates are long enough for newer OpenSSL versions. - Fix TTL of synthesized CNAME when a DNAME is used from cache. - Fix unbound-control-setup.cmd to have CA v3 basicConstraints, like unbound-control-setup.sh has.
This commit is contained in:
parent
bf97961eff
commit
2e3b1bdf30
|
@ -1,6 +1,6 @@
|
|||
# $NetBSD: Makefile,v 1.106 2024/03/07 09:48:53 he Exp $
|
||||
# $NetBSD: Makefile,v 1.107 2024/03/14 09:38:19 he Exp $
|
||||
|
||||
DISTNAME= unbound-1.19.2
|
||||
DISTNAME= unbound-1.19.3
|
||||
CATEGORIES= net
|
||||
MASTER_SITES= https://nlnetlabs.nl/downloads/unbound/
|
||||
|
||||
|
@ -23,6 +23,8 @@ CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFBASE}
|
|||
GNU_CONFIGURE= yes
|
||||
TEST_TARGET= test
|
||||
|
||||
USE_TOOLS+= pkg-config
|
||||
|
||||
.include "options.mk"
|
||||
|
||||
# unbound uses some OpenBSD libc functions such as reallocarray(3).
|
||||
|
@ -97,4 +99,5 @@ PKG_USERS= ${UNBOUND_USER}:${UNBOUND_GROUP}
|
|||
.include "../../textproc/expat/buildlink3.mk"
|
||||
BUILDLINK_API_DEPENDS.flex+= flex>=2.6.4
|
||||
.include "../../devel/flex/buildlink3.mk"
|
||||
.include "../../devel/protobuf-c/buildlink3.mk"
|
||||
.include "../../mk/bsd.pkg.mk"
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
$NetBSD: distinfo,v 1.78 2024/03/07 09:48:53 he Exp $
|
||||
$NetBSD: distinfo,v 1.79 2024/03/14 09:38:19 he Exp $
|
||||
|
||||
BLAKE2s (unbound-1.19.2.tar.gz) = 3a8a028475ff59596326c88502f714d3b84e50a55f851f4db03556ad68890dca
|
||||
SHA512 (unbound-1.19.2.tar.gz) = 03183f9d52df5644808d7cbbf2d15458a2cf5bf79bd952bbd4384bcef2e6899631605ce7780700169d7532cec0203c16765bb7706e3717241300904763914350
|
||||
Size (unbound-1.19.2.tar.gz) = 6340281 bytes
|
||||
BLAKE2s (unbound-1.19.3.tar.gz) = c3825b7651b250ca5531cd11089ece3157e7419ad174c1ab100567df1e49f042
|
||||
SHA512 (unbound-1.19.3.tar.gz) = f860614f090a5a081cceff8ca7f4b3d416c00a251ae14ceb6b4159dc8cd022f025592074d3d78aee2f86c3eeae9d1a314713e4740aa91062579143199accd159
|
||||
Size (unbound-1.19.3.tar.gz) = 6338685 bytes
|
||||
SHA1 (patch-configure) = fe43ed9fdcfe12897e30f03833aec631d473529d
|
||||
|
|
Loading…
Reference in New Issue