pkgsrc/net/unbound/Makefile
pettai a8c6f291c3 Unbound 1.4.16
Features:

* applied patch to support outgoing-interface with ub_ctx_set_option.

Bug Fixes:

* Fix validation failures (like: validation failure xx: no NSEC3 closest
  encloser from yy for DS zz. while building chain of trust, because of
  a bug in the TTL-fix in 1.4.15, it picked the wrong rdata for an NSEC3.
  Now it does not change rdata, and fixes TTL.
* Fix version-number in libtool to be version-info so it produces
  libunbound.so.2 like it should.
* Fixes for port to OpenIndiana OS with gcc 4.6.
* Fix to write key files completely to a temporary file, and if that
  succeeds, replace the real key file. So failures leave a useful file.

Unbound 1.4.15

Bug Fixes:

* Fix for memory leak (about 20 bytes when a tcp or udp send operation
  towards authority servers failed, takes about 50.000 such failures to
  leak one Mb, such failures are also usually logged).
* Fix to randomize hash function, based on 28c3 congress.
* [bugzilla: 425 ] unbound reports wrong TTL in reply, it reports a TTL
  that would be permissible by the RFCs but it is not the TTL in the cache.
* [bugzilla: 429 ] add ub_version() call to libunbound. API version increase,
  with (binary) backwards compatibility for the previous version.
* Fix bug where canonical_compare of RRSIG did not downcase the signer-name.
  This is mostly harmless because RRSIGs do not have to be sorted in
  canonical order, usually.
* uninitialised variable in reprobe for rtt blocked domains fixed.
* iana portlist updated.
2012-02-28 20:05:05 +00:00

96 lines
3.2 KiB
Makefile

# $NetBSD: Makefile,v 1.20 2012/02/28 20:05:05 pettai Exp $
DISTNAME= unbound-1.4.16
CATEGORIES= net
MASTER_SITES= http://www.unbound.net/downloads/
MAINTAINER= joerg@NetBSD.org
HOMEPAGE= http://www.unbound.net/
COMMENT= DNS resolver and recursive server
LICENSE= modified-bsd
PKG_DESTDIR_SUPPORT= user-destdir
BUILD_DEFS+= VARBASE
GNU_CONFIGURE= yes
USE_LIBTOOL= yes
CONFIGURE_ARGS+= --with-ldns=${BUILDLINK_PREFIX.ldns}
CONFIGURE_ARGS+= --with-libexpat=${BUILDLINK_PREFIX.expat}
CONFIGURE_ARGS+= --with-pidfile=${VARBASE}/run/unbound.pid
CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFBASE}
CONFIGURE_ARGS+= --enable-allsymbols
# Add the same logic as for ldns, so sha2/gost is configured automatically
CHECK_BUILTIN.openssl= yes
.include "../../security/openssl/builtin.mk"
CHECK_BUILTIN.openssl= no
.include "../../security/openssl/buildlink3.mk"
PLIST_VARS+= sha2 gost
.if defined(USE_BUILTIN.openssl) && !empty(USE_BUILTIN.openssl:M[yY][eE][sS])
PLIST_VARS.gost!= \
if ${PKG_ADMIN} pmatch 'openssl>=1.0.0' ${BUILTIN_PKG.openssl:Q}; then \
${ECHO} "yes"; \
else \
${ECHO} "no"; \
fi
PLIST_VARS.sha2!= \
if ${PKG_ADMIN} pmatch 'openssl>=0.9.8' ${BUILTIN_PKG.openssl:Q}; then \
${ECHO} "yes"; \
else \
${ECHO} "no"; \
fi
.else
PLIST_VARS.gost!= \
if ${PKG_INFO} -qe 'openssl>=1.0.0'; then \
${ECHO} yes; \
else \
${ECHO} no; \
fi
PLIST_VARS.sha2!= \
if ${PKG_INFO} -qe 'openssl>=0.9.8'; then \
${ECHO} yes; \
else \
${ECHO} no; \
fi
.endif
.if ${PLIST_VARS.gost} == "yes"
CONFIGURE_ARGS+= --enable-gost
.else
CONFIGURE_ARGS+= --disable-gost
.endif
.if ${PLIST_VARS.sha2} == "yes"
CONFIGURE_ARGS+= --enable-sha2
.else
CONFIGURE_ARGS+= --disable-sha2
.endif
SUBST_CLASSES+= paths
SUBST_STAGE.paths= post-configure
SUBST_MESSAGE.paths= Fixing path names
SUBST_FILES.paths= doc/example.conf doc/*.5 doc/*.8
SUBST_SED.paths= -e "s|/usr/local|${PREFIX}|"
INSTALL_MAKE_FLAGS+= \
configfile=${PREFIX}/share/examples/unbound/unbound.conf
PKG_SYSCONFSUBDIR= unbound
CONF_FILES+= share/examples/unbound/unbound.conf \
${PKG_SYSCONFDIR}/unbound.conf
RCD_SCRIPTS= unbound
UNBOUND_USER?= unbound
UNBOUND_GROUP?= unbound
PKG_GROUPS= ${UNBOUND_GROUP}
PKG_USERS= ${UNBOUND_USER}:${UNBOUND_GROUP}
.include "options.mk"
.include "../../textproc/expat/buildlink3.mk"
.include "../../net/ldns/buildlink3.mk"
.include "../../mk/bsd.pkg.mk"