Update to 2.8.1

Changelog:
Knot DNS 2.8.1 (2019-04-09)
===========================

Improvements:
-------------
 - Possible zone transaction is aborted by zone events to avoid inconsistency
 - Added log message if no persistent config DB is available during 'conf-begin'
 - New environment setting 'KNOT_VERSION_FORMAT=release' for extended version suppression
 - Various improvements in the documentation

Bugfixes:
---------
 - Broken NSEC3-wildcard-nonexistence proof after NSEC3 re-salt
 - Glue records under delegation are sometimes signed
 - RRL doesn't work correctly on big-endian architectures
 - NSEC3 not re-salted during AXFR refresh
 - Failed to sign new zone contents if added dynamically #641
 - NSEC3 opt-out signing doesn't work in some cases
 - Broken NSEC3 chain after adding new sub-delegations
 - Redundant SOA RRSIG on slave if RRSIG TTL changed on master
 - Sometimes confusing log error message for NOTIFY event
 - Improper include for LMDB #638

Knot DNS 2.8.0 (2019-03-05)
===========================

Features:
---------
 - New offline-KSK mode of operation
 - Configurable multithreaded DNSSEC signing for large zones
 - Extended ACL configuration for dynamic updates
 - New knotc trigger 'zone-key-rollover' for immediate DNSKEY rollover
 - Added support for OPENPGPKEY, CSYNC, SMIMEA, and ZONEMD RR types
 - New 'double-ds' option for CDS/CDNSKEY publication

Improvements:
-------------
 - Significant speed-up of zone updates
 - Knotc supports force option in the interactive mode
 - Copy-on-write support for QP-trie (Thanks to Tony Finch)
 - Unified and more efficient LMDB layer for journal, timer, and KASP databases
 - DS check event is re-planned according to KASP even when purged timers
 - Module DNS Cookies supports explicit Server Secret configuration
 - Zone mtime is verified against full-precision timestamp (Thanks to Daniel Kahn Gillmor)
 - Extended logging (loaded SOA serials, refresh duration, tiny cleanup)
 - Relaxed fixed-length condition for DNSSEC key ID
 - Extended semantic checks for DNAME and NS RR types
 - Added support for FreeBSD's SO_REUSEPORT_LB
 - Improved performance of geoip module
 - Various improvements in the documentation

Compatibility:
--------------
 - Changed configuration default for 'cds-cdnskey-publish' to 'rollover'
 - Journal DB format changes are not downgrade-compatible
 - Keymgr no longer prints DS for algorithm SHA-1

3 files changed, 9 insertions, 9 deletions

diff --git a/net/knot/Makefile b/net/knot/Makefile
index cb89fd1abd0..4649919838c 100644
--- a/net/knot/Makefile
+++ b/net/knot/Makefile
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.41 2019/01/29 15:07:24 ryoon Exp $
+# $NetBSD: Makefile,v 1.42 2019/04/15 16:23:03 ryoon Exp $
 
-DISTNAME=	knot-2.7.6
+DISTNAME=	knot-2.8.1
 CATEGORIES=	net
 MASTER_SITES=	https://secure.nic.cz/files/knot-dns/
 EXTRACT_SUFX=	.tar.xz
diff --git a/net/knot/PLIST b/net/knot/PLIST
index 26288c0e522..7441107d869 100644
--- a/net/knot/PLIST
+++ b/net/knot/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.15 2019/01/29 15:07:24 ryoon Exp $
+@comment $NetBSD: PLIST,v 1.16 2019/04/15 16:23:03 ryoon Exp $
 bin/kdig
 bin/khost
 bin/knsec3hash
@@ -13,8 +13,8 @@ include/libdnssec/key.h
 include/libdnssec/keyid.h
 include/libdnssec/keystore.h
 include/libdnssec/keytag.h
-include/libdnssec/list.h
 include/libdnssec/nsec.h
+include/libdnssec/pem.h
 include/libdnssec/random.h
 include/libdnssec/sign.h
 include/libdnssec/tsig.h
diff --git a/net/knot/distinfo b/net/knot/distinfo
index 9b3cd6d0286..4763f7668b6 100644
--- a/net/knot/distinfo
+++ b/net/knot/distinfo
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.25 2019/01/29 15:07:24 ryoon Exp $
+$NetBSD: distinfo,v 1.26 2019/04/15 16:23:03 ryoon Exp $
 
-SHA1 (knot-2.7.6.tar.xz) = d2f313267c2b68b822c5b715927eae9d5268738e
-RMD160 (knot-2.7.6.tar.xz) = fca8c746a783789a1a5c0d1f0fbe2df8f652a250
-SHA512 (knot-2.7.6.tar.xz) = 6b6a727d57337da01e2d44abec7fde4504d112604769b118fe6254b0317f149ed4e9fab321a04517eccedb08e409818d1817fc1136c27d1fd351538e6816022a
-Size (knot-2.7.6.tar.xz) = 1151068 bytes
+SHA1 (knot-2.8.1.tar.xz) = 063c6cf372070d782481eb4b79496adc73c6f2cd
+RMD160 (knot-2.8.1.tar.xz) = b62d4e5491b92be8617c8af4ac1cf648df886ef7
+SHA512 (knot-2.8.1.tar.xz) = b1f97171efae85b5d6f845e57d933170e8f81b30e8b5a1a6157bb0f6bf5e1e545e7b3d2d51eedf0061166e9842ab01eb6c5e84b1ef9e98e20eda9a806e3e5d4b
+Size (knot-2.8.1.tar.xz) = 1169260 bytes
 SHA1 (patch-samples_Makefile.in) = 499b8742dbd948e489b01d512bc7a8d8e4fe2e7b