dec4c8e7c6
=========================== Bugfixes: --------- - Do not reload expired zones on 'knotc reload' and server startup - Fix rare race-condition in event scheduling causing delayed event execution - Fix skipping of non-authoritative nodes in NSEC proofs - Fix TC flag setting in RRL slipped answers - Disable domain name compression for root label - Log via journald only when running under systemd - Fix CNAME following when quering for NSEC RR type - Fix refreshing of DNSSEC signatures for zone keys - Fix binding an unavailable IPv6 address on Linux (IP_FREEBIND) - Fix infinite loop in knotc zonestatus and memstats - Fix memory leak in configuration on server shutdown - Fix broken dnsproxy module - Fix DNSSEC KASP timestamps parsing in strict POSIX environment - fix multi value parsing on big-endian - Adapt to Nettle 3 API break causing base64 decoding failures on big-endian Features: --------- - Add 'keymgr zone key ds' to show key's DS record - Add 'keymgr tsig generate' to generate TSIG keys - Add query module scoping to process either all queries or zone queries only - Add support for file name globbing in config file includes - Add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries Improvements: ------------- - Send minimal responses (remove NS from Authority section for NOERROR) - Update persistent timers only on shutdown for better performance - Allow change of RR TTL over DDNS - Documentation fixes, updates, and improvements in formatting - Install yparser and zscanner header files - Improve lookup of libsystemd build dependencies - Fix compilation warnings in endian conversion functions on OpenBSD Knot DNS 2.0.0 (2015-06-26) =========================== Bugfixes: --------- - Fix lost NOTIFY message if received during zone transfer - Disable fast zone parser when compiled in Clang (workaround for Clang bug) - kdig: Record correct dnstap SocketProtocol when retrying over TCP - kdig: Hide TSIG section with +noall - Do not set AA flag for AXFR/IXFR queries Features: --------- - DNSSEC: separate library, switch to GnuTLS, new utilities - DNSSEC: basic KASP support (generate initial keys, ZSK rollover) - Configuration: New text format in YAML, binary store in LMDB - Zone parser: Split long TXT/SPF strings into multiple strings - kdig: Add generic dump style option (+generic) - Try all master servers in multi-master environment - Improved remotes and ACLs (multiple addresses, multiple keys) - Basic support for zone file patterns (%s to substitute zone name) - Disable zone file synchronization by setting 'zonefile_sync' to '-1' - knsupdate: Add input prompt in interactive mode and 'quit' command - knsupdate: Allow TSIG algorithm specification in interactive prompt Improvements: ------------- - Zone dump: Do not write class for SOA record (unified with other RR types) - Zone dump: Do not write master server address into the zone file - Documentation: Manual pages are included in HTML and PDF
41 lines
861 B
Bash
Executable file
41 lines
861 B
Bash
Executable file
#!@RCD_SCRIPTS_SHELL@
|
|
#
|
|
# $NetBSD: knot.sh,v 1.3 2015/10/26 19:23:08 pettai Exp $
|
|
#
|
|
# PROVIDE: knot
|
|
# REQUIRE: NETWORKING syslogd
|
|
# BEFORE: DAEMON
|
|
|
|
if [ -f /etc/rc.subr ]; then
|
|
. /etc/rc.subr
|
|
fi
|
|
|
|
name="knot"
|
|
rcvar=${name}
|
|
command="@PREFIX@/sbin/knotc"
|
|
knotd="@PREFIX@/sbin/knotd"
|
|
command_args=""
|
|
pidfile="@VARBASE@/knot/${name}.pid"
|
|
start_precmd="knot_precmd"
|
|
extra_commands="reload"
|
|
start_cmd="$knotd -d"
|
|
stop_cmd="$command stop"
|
|
reload_cmd="$command reload"
|
|
status_cmd="$command status"
|
|
|
|
knot_precmd()
|
|
{
|
|
if [ ! -d @VARBASE@/run/knot ]; then
|
|
@MKDIR@ @VARBASE@/run/knot
|
|
@CHMOD@ 0750 @VARBASE@/run/knot
|
|
@CHOWN@ root:wheel @VARBASE@/run/knot
|
|
fi
|
|
}
|
|
|
|
if [ -f /etc/rc.subr ]; then
|
|
load_rc_config $name
|
|
run_rc_command "$1"
|
|
else
|
|
echo -n " ${name}"
|
|
${command} ${knot_flags} ${command_args}
|
|
fi
|