upgrade to 9.0.0rc2.

add patch to help 2292bis environment (= latest KAME, Solaris8).

--- rc1 -> rc2

	--- 9.0.0rc2 released ---

 377.	[bug]		When additional data lookups were refused due to
			"allow-query", the databases were still being
			attached causing reference leaks.

 376.	[bug]		The server should always use good entropy when
			performing cryptographic functions needing entropy.

 375.	[bug]		Per-zone allow-query did not properly override the
			view/global one for CNAME targets and additional
			data [RT #220].

 374.	[bug]		SOA in authoritative negative responses had wrong TTL.

 373.	[func]		nslookup is now installed by "make install".

 372.	[bug]		Deal with Microsoft DNS servers appending two bytes of
			garbage to zone transfer requests.

 371.	[bug]		At high debug levels, doing an outgoing zone transfer
			of a very large RRset could cause an assertion failure
			during logging.

 370.	[bug]		The error messages for rollforward failures were
			overly terse.

 367.   [bug]		Allow proper selection of server on nslookup command
			line.

 365.	[bug]		nsupdate -k leaked memory.

 362.	[bug]		rndc no longer aborts if the configuration file is
			missing an options statement. [RT #209]

 359.	[bug]		dnssec-signzone occasionally signed glue records.

 357.	[bug]		The zone file parser crashed if the argument
			to $INCLUDE was a quoted string.

 354.	[doc]		Man pages for the dnssec tools are now included in
			the distribution, in doc/man/dnssec.

 353.	[bug]		double increment in lwres/gethost.c:copytobuf().
			(RT# 187)

 352.	[bug]		Race condition in dns_client_t startup could cause
			an assertion failure.

 351.	[bug]		Constructing a response with rcode SERVFAIL to a TSIG
			signed query could crash the server.

 350.	[bug]		Also-notify lists specified in the global options
			block were not correctly reference counted, causing
			a memory leak.

 349.	[bug]		Processing a query with the CD bit set now works
			as expected.

 344.	[bug]		When shutting down, lwresd sometimes tried
			to shut down its client tasks twice,
			triggering an assertion.

 343.	[bug]		Although zone maintenance SOA queries and
			notify requests were signed with TSIG keys
			when configured for the server in case,
			the TSIG was not verified on the response.

 342.	[bug]		The wrong name was being passed to
			dns_name_dup() when generating a TSIG
			key using TKEY.

 340.	[bug]		The top-level COPYRIGHT file was missing from
			the distribution.

 339.	[bug]		DNSSEC validation of the response to an ANY
			query at a name with a CNAME RR in a secure
			zone triggered an assertion failure.

 337.	[bug]		"dig" did not recognize "nsap-ptr" as an RR type
			on the command line.

 336.	[bug]		"dig -f" used 64 k of memory for each line in
			the file.  It now uses much less, though still
			proportionally to the file size.

 335.	[bug]		named would occasionally attempt recursion when
			it was disallowed or undesired.

 333.	[bug]		The resolver incorrectly accepted referrals to
			domains that were not parents of the query name,
			causing assertion failures.

 331.	[bug]		Only log "recursion denied" if RD is set. (RT #178)

5 files changed, 40 insertions, 6 deletions

diff --git a/net/bind9/Makefile b/net/bind9/Makefile
index 17119cc10b3..93337d80d7d 100644
--- a/net/bind9/Makefile
+++ b/net/bind9/Makefile
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.9 2000/07/26 08:46:23 rh Exp $
+# $NetBSD: Makefile,v 1.10 2000/08/10 12:51:48 itojun Exp $
 #
 
 DISTNAME=	bind-${BIND_VERSION}
@@ -18,7 +18,7 @@ BUILD_DEFS+=	USE_INET6
 ONLY_FOR_PLATFORM=      NetBSD-*-i386 NetBSD-*-arm32 NetBSD-*-m68k
 
 # No need to set USE_INET6, will auto-detect.
-BIND_VERSION=	9.0.0rc1
+BIND_VERSION=	9.0.0rc2
 DIST_SUBDIR=	bind/${BIND_VERSION}
 GNU_CONFIGURE=	yes
 CONFIGURE_ARGS+=--with-mit-pthreads \
@@ -39,5 +39,8 @@ post-install:
 	${INSTALL_DATA} ${WRKSRC}/doc/draft/* ${PREFIX}/share/doc/bind9/draft
 	${INSTALL_DATA} ${WRKSRC}/doc/misc/* ${PREFIX}/share/doc/bind9/misc
 	${INSTALL_DATA} ${WRKSRC}/doc/rfc/* ${PREFIX}/share/doc/bind9/rfc
+	${INSTALL_MAN} ${WRKSRC}/doc/man/bin/*.8 ${PREFIX}/man/man8
+	${INSTALL_MAN} ${WRKSRC}/doc/man/bin/*.5 ${PREFIX}/man/man5
+	${INSTALL_MAN} ${WRKSRC}/doc/man/dnssec/*.8 ${PREFIX}/man/man8
 
 .include "../../mk/bsd.pkg.mk"
diff --git a/net/bind9/files/md5 b/net/bind9/files/md5
index 02f26105abe..44f4919fdc4 100644
--- a/net/bind9/files/md5
+++ b/net/bind9/files/md5
@@ -1,3 +1,3 @@
-$NetBSD: md5,v 1.6 2000/07/26 08:46:24 rh Exp $
+$NetBSD: md5,v 1.7 2000/08/10 12:51:48 itojun Exp $
 
-MD5 (bind/9.0.0rc1/bind-9.0.0rc1.tar.gz) = bcff62d7ceb802d199f36d2cd6666288
+MD5 (bind/9.0.0rc2/bind-9.0.0rc2.tar.gz) = e1b7c733484b33744a023ed15b015353
diff --git a/net/bind9/files/patch-sum b/net/bind9/files/patch-sum
index 91983111371..39c0e798c64 100644
--- a/net/bind9/files/patch-sum
+++ b/net/bind9/files/patch-sum
@@ -1,3 +1,4 @@
-$NetBSD: patch-sum,v 1.5 2000/07/26 08:46:24 rh Exp $
+$NetBSD: patch-sum,v 1.6 2000/08/10 12:51:48 itojun Exp $
 
 MD5 (patch-aa) = 24d411b5163cf4e7804a96fcd4898386
+MD5 (patch-ab) = 9cf2e332a08673d8f665bc179cf3a77b
diff --git a/net/bind9/patches/patch-ab b/net/bind9/patches/patch-ab
new file mode 100644
index 00000000000..58ed7147908
--- /dev/null
+++ b/net/bind9/patches/patch-ab
@@ -0,0 +1,22 @@
+$NetBSD: patch-ab,v 1.3 2000/08/10 12:51:48 itojun Exp $
+
+--- lib/isc/unix/socket.c.orig	Tue Jun 27 06:28:21 2000
++++ lib/isc/unix/socket.c	Sat Jul  8 11:29:29 2000
+@@ -1177,2 +1177,13 @@
+ #if defined(ISC_PLATFORM_HAVEIPV6)
++#ifdef IPV6_RECVPKTINFO
++		/* 2292bis */
++		if ((pf == AF_INET6)
++		    && (setsockopt(sock->fd, IPPROTO_IPV6, IPV6_RECVPKTINFO,
++				   (void *)&on, sizeof (on)) < 0)) {
++			UNEXPECTED_ERROR(__FILE__, __LINE__,
++					 "setsockopt(%d, IPV6_RECVPKTINFO) failed: %s",
++					 sock->fd, strerror(errno));
++		}
++#else
++		/* 2292 */
+ 		if ((pf == AF_INET6)
+@@ -1184,2 +1195,3 @@
+ 		}
++#endif
+ 
diff --git a/net/bind9/pkg/PLIST b/net/bind9/pkg/PLIST
index 718a3d43260..45f4d5e8555 100644
--- a/net/bind9/pkg/PLIST
+++ b/net/bind9/pkg/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.6 2000/07/26 08:46:25 rh Exp $
+@comment $NetBSD: PLIST,v 1.7 2000/08/10 12:51:49 itojun Exp $
 bin/dig
 bin/host
 bin/isc-config.sh
@@ -279,3 +279,11 @@ share/doc/bind9/rfc/rfc952.txt
 @dirrm include/isc
 @dirrm include/dst
 @dirrm include/dns
+man/man8/lwresd.8
+man/man8/named.8
+man/man8/rndc.8
+man/man5/rndc.conf.5
+man/man8/dnssec-keygen.8
+man/man8/dnssec-makekeyset.8
+man/man8/dnssec-signkey.8
+man/man8/dnssec-signzone.8