ab9cd1ad3f
Changelog:
Version 3.0.3
Features:
+ Kjournalprint can display changesets starting from specific SOA serial
Improvements:
+ New configuration check on ambiguous 'storage' specification #706
+ New configuration check on problematic 'zonefile-load' with
'journal-contents' combination
+ Server logs positive ACL check in debug severity level (Thanks to
Andreas Schrägle)
+ More verbose logging of failed zone backup
+ Extended documentation for catalog zones
Bugfixes:
+ On-slave signing produces broken NSEC(3) chain if glue node becomes
(un-)orphaned #705
+ Server responds CNAME query with NXDOMAIN for CNAME synthesized from
DNAME
+ Kdig crashes if source address and dnstap logging are specified
together #702
+ Knotc fails to display error returned from zone freeze or zone thaw
+ Dynamically reconfigured zone isn't loaded upon configuration commit
+ Keymgr is unable to import BIND-style private key if it contains empty
lines
+ Zone backup fails to backup keys if any of them is public-only
+ Failed to build with XDP support on Debian testing
Version 3.0.2
Features:
+ kdig prints Extended DNS Error (Gift for Marek Vavruša)
+ kxdpgun allows source IP address/subnet specification
Improvements:
+ Server doesn't start if any of listen addresses fails to bind
+ knotc no longer stores empty and adjacent identical commands to
interactive history
+ Depth of interactive history of knotc was increased to 1000 commands
+ keymgr prints error messages to stderr instead of stdout
+ keymgr checks for proper offline-ksk configuration before processing
KSR or SKR
+ keymgr imports Revoked timer from BIND keys
+ Additional XDP support detection in server
+ Lots of spelling and grammar fixes in documentation (Thanks to Paul
Dee)
+ Some documentation improvements
Bugfixes:
+ If more masters configured, zone retransfer triggers AXFR from all
masters
+ Server can fail to bind address during restart due to missing
SO_REUSEADDR
+ KSK imported from BIND doesn't roll over automatically
+ libdnssec respects local GnuTLS policy — affects DNSSEC operations and
Knot Resolver
+ kdig can stuck in infinite loop when solving BADCOOKIE responses
+ Zone names received over control interface are not lower-cased
+ Zone attributes not secured with multi-threaded changes
+ kzonecheck ignores forced dnssec checks if zone not signed
+ kzonecheck fails on case-sensitivity of owner names in NSEC records #
699
+ kdig fails to establish TLS connection #700
+ Server responds NOTIMPL to queries with QDCOUNT 0 and known OPCODE
67 lines
1.8 KiB
Makefile
67 lines
1.8 KiB
Makefile
# $NetBSD: Makefile,v 1.60 2021/01/06 12:18:48 ryoon Exp $
|
|
|
|
DISTNAME= knot-3.0.3
|
|
CATEGORIES= net
|
|
MASTER_SITES= https://secure.nic.cz/files/knot-dns/
|
|
EXTRACT_SUFX= .tar.xz
|
|
|
|
MAINTAINER= pettai@NetBSD.org
|
|
HOMEPAGE= https://www.knot-dns.cz/
|
|
COMMENT= Knot (auth) DNS server
|
|
LICENSE= gnu-gpl-v3
|
|
|
|
BUILD_DEFS+= VARBASE
|
|
|
|
GNU_CONFIGURE= yes
|
|
CONFIGURE_ARGS+= --prefix=${PREFIX:Q}
|
|
CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFBASE}
|
|
CONFIGURE_ARGS+= --localstatedir=${VARBASE}/knot
|
|
CONFIGURE_ARGS+= --with-rundir=${VARBASE}/run/knot
|
|
CONFIGURE_ARGS+= --with-storage=${VARBASE}/knot/lib
|
|
CONFIGURE_ARGS+= --with-urcu=${BUILDLINK_PREFIX.userspace-rcu}
|
|
CONFIGURE_ARGS+= --with-libidn=${BUILDLINK_PREFIX.libidn}
|
|
|
|
CONFIGURE_ARGS.NetBSD+= --enable-recvmmsg=no
|
|
|
|
.include "../../mk/bsd.prefs.mk"
|
|
|
|
.if ${MACHINE_ARCH} == "i386"
|
|
CFLAGS += -march=i586
|
|
.endif
|
|
|
|
USE_LIBTOOL= yes
|
|
USE_TOOLS+= bison flex gmake pkg-config
|
|
|
|
.include "../../lang/python/extension.mk"
|
|
.include "../../lang/python/application.mk"
|
|
|
|
PKGCONFIG_OVERRIDE= src/dnssec/libdnssec.pc.in
|
|
PKGCONFIG_OVERRIDE+= src/knotd.pc.in
|
|
PKGCONFIG_OVERRIDE+= src/libknot.pc.in
|
|
PKGCONFIG_OVERRIDE+= src/zscanner/libzscanner.pc.in
|
|
|
|
RCD_SCRIPTS= knot
|
|
|
|
EGDIR= ${PREFIX}/share/examples/knot
|
|
PKG_SYSCONFSUBDIR= knot
|
|
|
|
SUBST_CLASSES+= paths
|
|
SUBST_FILES.paths= ${WRKSRC}/samples/Makefile.in
|
|
SUBST_STAGE.paths= pre-configure
|
|
SUBST_VARS.paths= EGDIR
|
|
|
|
CONF_FILES= ${EGDIR}/knot.sample.conf \
|
|
${PKG_SYSCONFDIR}/knot.conf
|
|
CONF_FILES+= ${EGDIR}/example.com.zone \
|
|
${PKG_SYSCONFDIR}/example.com.zone
|
|
|
|
INSTALLATION_DIRS= ${EGDIR}
|
|
OWN_DIRS+= ${VARBASE}/knot
|
|
|
|
.include "../../databases/lmdb/buildlink3.mk"
|
|
.include "../../devel/userspace-rcu/buildlink3.mk"
|
|
.include "../../security/gnutls/buildlink3.mk"
|
|
.include "../../textproc/jansson/buildlink3.mk"
|
|
.include "../../devel/libidn/buildlink3.mk"
|
|
.include "../../devel/zlib/buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|