f7098a5d35
4.1.24
================
FEATURES:
- #4102: control interface via local socket.
configure it with control-interface: "/path/nsd.ctl" The path
has to start with a / to separate it from an IP address.
The local socket does not use SSL, but unencrypted traffic, use
file and containing directory permissions to restrict access.
- configure --enable-systemd (needs pkg-config and libsystemd) can
be used to then use-systemd: yes in nsd.conf and have readiness
signalling with systemd.
- RFC8162 support, for record type SMIMEA.
BUG FIXES:
- Patch to fix openwrt for mac os build darwin detection in configure.
- Fix that first control-interface determines if TLS is used. Warn
when IP address interfaces are used without TLS.
- #4106: Fix that stats printed from nsd-control are recast from
unsigned long to unsigned (remote.c).
- Fix that type CAA (and URI) in the zone file can contain
dots when not in quotes.
- #4133: Fix that when IXFR contains a zone with broken NSEC3PARAM
chain, NSD leniently attempts to find a working NSEC3PARAM.
4.1.23
================
BUG FIXES:
- Fix NSD time sensitive TSIG compare vulnerability.
4.1.22
================
FEATURES:
- refuse-any sends truncation (+TC) in reply to ANY queries over UDP,
and allows TCP queries like normal.
- Use accept4 to speed up answer of TCP queries, on Linux, FreeBSD
and OpenBSD.
BUG FIXES:
- Fix nsec3 hash of parent and child co-hosted nsec3 enabled zones.
- Fix to use same condition for nsec3 hash allocation and free.
72 lines
1.8 KiB
Makefile
72 lines
1.8 KiB
Makefile
# $NetBSD: Makefile,v 1.99 2018/09/04 11:24:34 prlw1 Exp $
|
|
|
|
DISTNAME= nsd-4.1.24
|
|
CATEGORIES= net
|
|
MASTER_SITES= http://www.nlnetlabs.nl/downloads/nsd/
|
|
|
|
MAINTAINER= pettai@NetBSD.org
|
|
HOMEPAGE= http://www.nlnetlabs.nl/nsd/index.html
|
|
COMMENT= Authoritative-only DNS server
|
|
LICENSE= modified-bsd
|
|
|
|
BUILD_DEFS+= VARBASE NSD_USER NSD_GROUP
|
|
FILES_SUBST+= NSD_USER=${NSD_USER} NSD_GROUP=${NSD_GROUP}
|
|
|
|
BUILDLINK_API_DEPENDS.openssl+= openssl>=0.9.7
|
|
|
|
PKG_OPTIONS_VAR= PKG_OPTIONS.nsd
|
|
PKG_SUPPORTED_OPTIONS= inet6 rrl
|
|
PKG_SUGGESTED_OPTIONS= inet6
|
|
|
|
.include "../../mk/bsd.options.mk"
|
|
|
|
USE_LANGUAGES= c c++
|
|
USE_LIBTOOL= yes
|
|
|
|
GNU_CONFIGURE= yes
|
|
|
|
PKG_SYSCONFSUBDIR= nsd
|
|
|
|
CONFIGURE_ARGS+=--prefix=${PREFIX:Q}
|
|
CONFIGURE_ARGS+=--localstatedir=${VARBASE}
|
|
CONFIGURE_ARGS+=--with-configdir=${PKG_SYSCONFDIR:Q}
|
|
.if !empty(PKG_OPTIONS:Minet6)
|
|
CONFIGURE_ARGS+=--enable-ipv6
|
|
.else
|
|
CONFIGURE_ARGS+=--disable-ipv6
|
|
.endif
|
|
.if !empty(PKG_OPTIONS:Mrrl)
|
|
CONFIGURE_ARGS+=--enable-ratelimit
|
|
.else
|
|
CONFIGURE_ARGS+=--disable-ratelimit
|
|
.endif
|
|
|
|
CONFIGURE_ARGS+=--with-pidfile=${VARBASE}/run/nsd/nsd.pid
|
|
CONFIGURE_ARGS+=--with-user=${NSD_USER}
|
|
CONFIGURE_ARGS+=--with-dbfile=${VARBASE}/nsd/nsd.db
|
|
CONFIGURE_ARGS+=--with-xfrdfile=${VARBASE}/nsd/nsd-xfrd.state
|
|
CONFIGURE_ARGS+=--with-libevent=${BUILDLINK_PREFIX.libevent}
|
|
CONFIGURE_ARGS+=--with-ssl=${BUILDLINK_PREFIX.openssl}
|
|
|
|
.if ${OPSYS} == "NetBSD"
|
|
# For reallocarray(3)
|
|
CPPFLAGS+= -D_OPENBSD_SOURCE
|
|
.endif
|
|
|
|
RCD_SCRIPTS= nsd
|
|
|
|
NSD_USER?= nsd
|
|
NSD_GROUP?= nsd
|
|
|
|
PKG_GROUPS= ${NSD_GROUP}
|
|
PKG_USERS= ${NSD_USER}:${NSD_GROUP}
|
|
|
|
CONF_FILES+= share/examples/nsd/nsd.conf ${PKG_SYSCONFDIR}/nsd.conf
|
|
|
|
OWN_DIRS_PERMS+= ${VARBASE}/nsd ${NSD_USER} ${NSD_GROUP} 755
|
|
|
|
INSTALLATION_DIRS= share/examples/nsd
|
|
|
|
.include "../../devel/libevent/buildlink3.mk"
|
|
.include "../../security/openssl/buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|