use 9.2.0a1.

	--- 9.2.0a1 released ---

 850.	[bug]		dns_rbt_findnode() would not find nodes that were
			split on a bitstring label somewhere other than in
			the last label of the node. [RT #1351]

 849.	[func]		<isc/net.h> will ensure INADDR_LOOPBACK is defined.

 848.	[func]		A minimum max-cache-size of two megabytes is enforced
			by the cache cleaner.

 847.	[func]		Added isc_file_test(), which currently only has
			some very basic functionality to test for the
			existence of a file, whether a pathname is absolute,
			or whether a pathname is the fundamental representation
			of the current directory.  It is intended that this
			function can be expanded to test other things a
			programmer might want to know about a file.

 846.	[func]		A non-zero 'param' do dst_key_generate() when making an
			hmac-md5 key means that good entropy is not required.

 845.	[bug]		The access rights on the public file of a symmetric
			key are now restricted as soon as the file is opened,
			rather than after it has been written and closed.

 844.	[func]		<isc/net.h> will ensure INADDR_LOOPBACK is defined,
 			just as <lwres/net.h> does.

 843.	[func]		If no controls statement is present in named.conf,
			or if any inet phrase of a controls statement is
			lacking a keys clause, then a key will be automatically
			generated by named and an rndc.conf-style file
			named named.key will be written that uses it.  rndc
			will use this file only if its normal configuration
			file, or one provided on the command line, does not
			exist.

 842.	[func]		'rndc flush' now takes an optional view.

 841.	[bug]		When sdb modules were not declared threadsafe, their
 			create and destroy functions were not serialized.

 840.	[bug]		The config file parser could print the wrong file
			name if an error was detected after an included file
			was parsed. [RT #1353]

 839.	[func]		Dump packets for which there was no view or that the
			class could not be determined to category "unmatched".

 838.	[port]		UnixWare 7.x.x is now suported by
			bin/tests/system/ifconfig.sh.

 837.	[cleanup]	Multithreading is now enabled by default only on
			OSF1, Solaris 2.7 and newer, and AIX.

 836.	[func]		Upgraded libtool to 1.4.

 835.	[bug]		The dispatcher could enter a busy loop if
			it got an I/O error receiving on a UDP socket.
			[RT #1293]

 834.	[func]		Accept (but warn about) master files beginning with
			an SOA record without an explicit TTL field and
			lacking a $TTL directive, by using the SOA MINTTL
			as a default TTL.  This is for backwards compatibility
			with old versions of BIND 8, which accepted such
			files without warning although they are illegal
			according to RFC1035.

 833.	[cleanup]	Moved dns_soa_*() from <dns/journal.h> to
			<dns/soa.h>, and extended them to support
			all the integer-valued fields of the SOA RR.

 832.	[bug]		The default location for named.conf in named-checkconf
			should depend on --sysconfdir like it does in named.
			[RT #1258]

 831.	[placeholder]

 830.	[func]		Implement 'rndc status'.

 829.	[bug]		The DNS_R_ZONECUT result code should only be returned
			when an ANY query is made with DNS_DBFIND_GLUEOK set.
			In all other ANY query cases, returning the delegation
			is better.

 828.	[bug]		The errno value from recvfrom() could be overwritten
			by logging code. [RT #1293]

 827.	[bug]		When an IXFR protocol error occurs, the slave
			should retry with AXFR.

 826.	[bug]		Some IXFR protocol errors were not detected.

 825.	[bug]		zone.c:ns_query() detached from the wrong zone
			reference. [RT #1264]

 824.	[bug]		Correct line numbers reported by dns_master_load().
			[RT #1263]

 823.	[func]		The output of "dig -h" now goes to stdout so that it
			can easily be piped through "more". [RT #1254]

 822.	[bug]		Sending nxrrset prerequisites would crash nsupdate.
 			[RT #1248]

 821.	[bug]		The program name used when logging to syslog should
 			be stripped of leading path components.
			[RT #1178, #1232]

 820.	[bug]		Name server address lookups failed to follow
			A6 chains into the glue of local authoritative
			zones.

 819.	[bug]		In certain cases, the resolver's attempts to
			restart an address lookup at the root could cause
			the fetch to deadlock (with itself) instead of
			restarting. [RT #1225]

 818.	[bug]		Certain pathological responses to ANY queries could
			cause an assertion failure. [RT #1218]

 817.	[func]		Adjust timeouts for dialup zone queries.

 816.	[bug]		Report potential problems with log file accessibility
			at configuration time, since such problems can't
			reliably be reported at the time they actually occur.

 815.	[bug]		If a log file was specified with a path separator
			character (i.e. "/") in its name and the directory
			did not exist, the log file's name was treated as
			though it were the directory name. [RT #1189]

 814.	[bug]		Socket objects left over from accept() failures
			were incorrectly destroyed, causing corruption
			of socket manager data structures.

 813.	[bug]		File descriptors exceeding FD_SETSIZE were handled
			badly. [RT #1192]

 812.	[bug]		dig sometimes printed incomplete IXFR responses
			due to an uninitialized variable. [RT #1188]

 811.	[bug]		Parentheses were not quoted in zone dumps. [RT #1194]

 810.	[bug]		The signer name in SIG records was not properly
 			downcased when signing/verifying records. [RT #1186]

 809.	[bug]		Configuring a non-local address as a transfer-source
 			could cause an assertion failure during load.

 808.	[func]		Add 'rndc flush' to flush the server's cache.

 807.	[bug]		When setting up TCP connections for incoming zone
			transfers, the transfer-source port was not
			ignored like it should be.

 806.	[bug]		DNS_R_SEENINCLUDE was failing to propagate back up
			the calling stack to the zone maintence level, causing
			zones to not reload when an included file was touched
			but the top-level zone file was not.

 805.	[bug]		When using "forward only", missing root hints should
			not cause queries to fail. [RT #1143]

 804.	[bug]		Attempting to obtain entropy could fail in some
 			situations.  This would be most common on systems
			with user-space threads. [RT #1131]

 803.	[bug]		Treat all SIG queries as if they have the CD bit set,
 			otherwise no data will be returned [RT #749]

 802.	[bug]		DNSSEC key tags were computed incorrectly in almost
 			all cases. [RT #1146]

 801.	[bug]		nsupdate should treat lines beginning with ';' as
 			comments. [RT #1139]

 800.	[bug]		dnssec-signzone produced incorrect statistics for
 			large zones. [RT #1133]

 799.	[bug]		The ADB didn't find AAAA glue in a zone unless A6
			glue was also present.

 798.	[bug]		nsupdate should be able to reject bad input lines
			and continue. [RT #1130]

 797.	[func]		Issue a warning if the 'directory' option contains
 			a relative path. [RT #269]

 796.	[func]		When a size limit is associated with a log file,
			only roll it when the size is reached, not every
			time the log file is opened. [RT #1096]

 795.	[func]		Add the +multiline option to dig. [RT #1095]

 794.	[func]		Implement the "port" and "default-port" statements
 			in rndc.conf.

 793.	[cleanup]	The DNSSEC tools could create filenames that were
 			illegal or contained shell metacharacters.  They
			now use a different text encoding of names that
			doesn't have these problems. [RT #1101]

 792.	[cleanup]	Replace the OMAPI command channel protocol with a
 			simpler one.

 791.	[bug]		The command channel now works over IPv6.

 790.	[bug]		Wildcards created using dynamic update or IXFR
			could fail to match. [RT #1111]

 789.	[bug]		The "localhost" and "localnets" ACLs did not match
			when used as the second element of a two-element
			sortlist item.

 788.	[func]		Add the "match-mapped-addresses" option, which
 			causes IPv6 v4mapped addresses to be treated as
			IPv4 addresses for the purpose of acl matching.

 787.	[bug]		The DNSSEC tools failed to downcase domain
			names when mapping them into file names.

 786.	[bug]		When DNSSEC signing/verifying data, owner names were
			not properly downcased.

 785.	[bug]		A race condition in the resolver could cause
			an assertion failure. [RT #673, #872, #1048]

 784.	[bug]		nsupdate and other programs would not quit properly
			if some signals were blocked by the caller. [RT #1081]

 783.	[bug]		Following CNAMEs could cause an assertion failure
			when either using an sdb database or under very
			rare conditions.

 782.	[func]		Implement the "serial-query-rate" option.

 781.	[func]		Avoid error packet loops by dropping duplicate FORMERR
			responses. [RT #1006]

 780.	[bug]		Error handling code dealing with out of memory or
			other rare errors could lead to assertion failures
			by calling functions on unitialized names. [RT #1065]

 779.	[func]		Added the "minimal-responses" option.

 778.	[bug]		When starting cache cleaning, cleaning_timer_action()
			returned without first pausing the iterator, which
			could cause deadlock. [RT #998]

 777.	[bug]		An empty forwarders list in a zone failed to override
			global forwarders. [RT #995]

 776.	[func]		Improved error reporting in denied messages. [RT #252]

 775.	[placeholder]

 774.	[func]		max-cache-size is implemented.

 773.	[func]		Added isc_rwlock_trylock() to attempt to lock without
			blocking.

 772.	[bug]		Owner names could be incorrectly omitted from cache
			dumps in the presence of negative caching entries.
			[RT #991]

 771.	[cleanup]	TSIG errors related to unsynchronized clocks
			are logged better. [RT #919]

 770.	[func]		Add the "edns yes_or_no" statement to the server
			clause. [RT #524]

 769.	[func]		Improved error reporting when parsing rdata. [RT #740]

 768.	[bug]		The server did not emit an SOA when a CNAME
			or DNAME chain ended in NXDOMAIN in an
			authoritative zone.

 767.	[placeholder]

 766.	[bug]		A few cases in query_find() could leak fname.
			This would trigger the mpctx->allocated == 0
			assertion when the server exited.
			[RT #739, #776, #798, #812, #818, #821, #845,
			#892, #935, #966]

 765.	[func]		ACL names are once again case insensitive, like
			in BIND 8. [RT #252]

 764.	[func]		Configuration files now allow "include" directives
			in more places, such as inside the "view" statement.
			[RT #377, #728, #860]

 763.	[func]		Configuration files no longer have reserved words.
			[RT #731, #753]

 762.	[cleanup]	The named.conf and rndc.conf file parsers have
			been completely rewritten.

 761.	[bug]		_REENTRANT was still defined when building with
			--disable-threads.

 760.	[contrib]	Significant enhancements to the pgsql sdb driver.

 759.	[bug]		The resolver didn't turn off "avoid fetches" mode
			when restarting, possibly causing resolution
			to fail when it should not.  This bug only affected
			platforms which support both IPv4 and IPv6. [RT #927]

 758.	[bug]		The "avoid fetches" code did not treat negative
			cache entries correctly, causing fetches that would
			be useful to be avoided.  This bug only affected
			platforms which support both IPv4 and IPv6. [RT #927]

 757.	[func]		Log zone transfers.

 756.	[bug]		dns_zone_load() could "return" success when no master
			file was configured.

 755.	[bug]		Fix incorrectly formatted log messages in zone.c.

 754.	[bug]		Certain failure conditions sending UDP packets
			could cause the server to retry the transmission
			indefinitely. [RT #902]

 753.	[bug]		dig, host, and nslookup would fail to contact a
			remote server if getaddrinfo() returned an IPv6
			address on a system that doesn't support IPv6.
			[RT #917]

 752.	[func]		Correct bad tv_usec elements returned by
			gettimeofday().

 751.	[func]		Log successful zone loads / transfers.	[RT #898]

 750.	[bug]		A query should not match a DNAME whose trust level
			is pending. [RT #916]

 749.	[bug]		When a query matched a DNAME in a secure zone, the
			server did not return the signature of the DNAME.
			[RT #915]

 748.	[doc]		List supported RFCs in doc/misc/rfc-compliance.
			[RT #781]

 747.	[bug]		The code to determine whether an IXFR was possible
			did not properly check for a database that could
			not have a journal. [RT #865, #908]

 746.	[bug]		The sdb didn't clone rdatasets properly, causing
			a crash when the server followed delegations. [RT #905]

 745.	[func]		Report the owner name of records that fail
			semantic checks while loading.

 744.	[bug]		When returning DNS_R_CNAME or DNS_R_DNAME as the
			result of an ANY or SIG query, the resolver failed
			to setup the return event's rdatasets, causing an
			assertion failure in the query code. [RT #881]

 743.	[bug]		Receiving a large number of certain malformed
			answers could cause named to stop responding.
			[RT #861]

5 files changed, 45 insertions, 48 deletions

diff --git a/net/bind9-current/Makefile b/net/bind9-current/Makefile
index 574009f6286..ddef71df345 100644
--- a/net/bind9-current/Makefile
+++ b/net/bind9-current/Makefile
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile,v 1.18 2001/04/12 03:35:25 itojun Exp $
+# $NetBSD: Makefile,v 1.19 2001/06/11 12:21:45 itojun Exp $
 #
 
 DISTNAME=	bind-${BIND_VERSION}
 CATEGORIES=	net
-MASTER_SITES=	ftp://ftp.isc.org/isc/bind9/snapshots/
+MASTER_SITES=	ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/
 
 MAINTAINER=	hubertf@NetBSD.org
 HOMEPAGE=	http://www.isc.org/products/BIND/
@@ -14,14 +14,14 @@ COMMENT=	Version 9 of the Berkeley Internet Name Daemon, implementation of DNS
 BUILD_DEFS+=	USE_INET6
 
 # No need to set USE_INET6, will auto-detect.
-BIND_VERSION=	9.2.0s20010214
+BIND_VERSION=	9.2.0a1
 DIST_SUBDIR=	bind/${BIND_VERSION}
 GNU_CONFIGURE=	yes
 CONFIGURE_ARGS+=--disable-threads	# Until we have real threads
 CONFIGURE_ARGS+=--with-libtool=yes \
 		--sysconfdir=/etc \
 		--localstatedir=/var
-LDFLAGS+=	-Wl,-R${LOCALBASE}/pthreads/lib -L${LOCALBASE}/pthreads/lib
+#LDFLAGS+=	-Wl,-R${LOCALBASE}/pthreads/lib -L${LOCALBASE}/pthreads/lib
 # use external OpenSSL.  comment the following two lines out to use
 # OpenSSL shipped with BIND9.
 USE_SSL=	yes
diff --git a/net/bind9-current/distinfo b/net/bind9-current/distinfo
index dcae5167dd8..6191df17464 100644
--- a/net/bind9-current/distinfo
+++ b/net/bind9-current/distinfo
@@ -1,8 +1,7 @@
-$NetBSD: distinfo,v 1.2 2001/04/21 11:23:10 wiz Exp $
+$NetBSD: distinfo,v 1.3 2001/06/11 12:21:45 itojun Exp $
 
-SHA1 (bind/9.2.0s20010214/bind-9.2.0s20010214.tar.gz) = bd95e19897367c89f45e6f23a99196839ed72694
-Size (bind/9.2.0s20010214/bind-9.2.0s20010214.tar.gz) = 3322467 bytes
+SHA1 (bind/9.2.0a1/bind-9.2.0a1.tar.gz) = 00d2a0e910db88955be4baf0f0935608ec603d98
+Size (bind/9.2.0a1/bind-9.2.0a1.tar.gz) = 4502404 bytes
 SHA1 (patch-aa) = 70102411c64adaba2d63f58d2a50b5ef725831ed
 SHA1 (patch-ab) = 77bb2703e7de1d503e85a932c503facdcdb95de3
 SHA1 (patch-ac) = ca57e92cb3e6da548e9fcc5521bc216cd6a5ca96
-SHA1 (patch-ad) = 066613b2287d1f38dfcdf026aca4266c62078739
diff --git a/net/bind9-current/files/patch-sum b/net/bind9-current/files/patch-sum
new file mode 100644
index 00000000000..810a1f015ca
--- /dev/null
+++ b/net/bind9-current/files/patch-sum
@@ -0,0 +1,7 @@
+$NetBSD: patch-sum,v 1.6 2001/06/11 12:21:45 itojun Exp $
+
+SHA1 (patch-aa) = 70102411c64adaba2d63f58d2a50b5ef725831ed
+SHA1 (patch-ab) = 77bb2703e7de1d503e85a932c503facdcdb95de3
+SHA1 (patch-ac) = ca57e92cb3e6da548e9fcc5521bc216cd6a5ca96
+SHA1 (patch-ad) = 066613b2287d1f38dfcdf026aca4266c62078739
+SHA1 (patch-ae) = 22413e9d684ba35a4c997a796c4f90f58b3880a6
diff --git a/net/bind9-current/patches/patch-ad b/net/bind9-current/patches/patch-ad
deleted file mode 100644
index 7f3780e281c..00000000000
--- a/net/bind9-current/patches/patch-ad
+++ /dev/null
@@ -1,9 +0,0 @@
-$NetBSD: patch-ad,v 1.2 2001/02/28 09:04:13 itojun Exp $
---- bin/dig/Makefile.in	Thu Feb 15 10:06:03 2001
-+++ bin/dig/Makefile.in	Wed Feb 28 17:56:50 2001
-@@ -72,4 +72,4 @@
- 	${LIBTOOL} ${INSTALL_PROGRAM} dig ${DESTDIR}${bindir}
- 	${LIBTOOL} ${INSTALL_PROGRAM} host ${DESTDIR}${bindir}
- 	${LIBTOOL} ${INSTALL_PROGRAM} nslookup ${DESTDIR}${bindir}
--	for m in ${MANPAGES}; do ${INSTALL_PROGRAM} $$m ${DESTDIR}${mandir}/man1; done
-+	for m in ${MANPAGES}; do ${INSTALL_DATA} $$m ${DESTDIR}${mandir}/man1; done
diff --git a/net/bind9-current/pkg/PLIST b/net/bind9-current/pkg/PLIST
index da57a33bb47..ab5d6e9b496 100644
--- a/net/bind9-current/pkg/PLIST
+++ b/net/bind9-current/pkg/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.7 2001/02/28 09:04:15 itojun Exp $
+@comment $NetBSD: PLIST,v 1.8 2001/06/11 12:21:45 itojun Exp $
 bin/dig
 bin/host
 bin/isc-config.sh
@@ -14,21 +14,6 @@ include/dns/cache.h
 include/dns/callbacks.h
 include/dns/cert.h
 include/dns/compress.h
-include/dns/confacl.h
-include/dns/confcache.h
-include/dns/confcommon.h
-include/dns/confctl.h
-include/dns/confctx.h
-include/dns/confip.h
-include/dns/confkeys.h
-include/dns/conflog.h
-include/dns/conflsn.h
-include/dns/conflwres.h
-include/dns/confparser.h
-include/dns/confresolv.h
-include/dns/confrrset.h
-include/dns/confview.h
-include/dns/confzone.h
 include/dns/db.h
 include/dns/dbiterator.h
 include/dns/dbtable.h
@@ -49,7 +34,6 @@ include/dns/master.h
 include/dns/masterdump.h
 include/dns/message.h
 include/dns/name.h
-include/dns/namedconf.h
 include/dns/ncache.h
 include/dns/nxt.h
 include/dns/peer.h
@@ -147,6 +131,7 @@ include/isc/stdio.h
 include/isc/stdtime.h
 include/isc/string.h
 include/isc/symtab.h
+include/isc/syslog.h
 include/isc/task.h
 include/isc/taskpool.h
 include/isc/thread.h
@@ -154,6 +139,21 @@ include/isc/time.h
 include/isc/timer.h
 include/isc/types.h
 include/isc/util.h
+include/isccc/alist.h
+include/isccc/base64.h
+include/isccc/cc.h
+include/isccc/ccmsg.h
+include/isccc/events.h
+include/isccc/lib.h
+include/isccc/result.h
+include/isccc/sexpr.h
+include/isccc/symtab.h
+include/isccc/symtype.h
+include/isccc/types.h    
+include/isccc/util.h     
+include/isccfg/cfg.h
+include/isccfg/check.h
+include/isccfg/log.h
 include/lwres/context.h
 include/lwres/int.h
 include/lwres/ipv6.h
@@ -166,32 +166,31 @@ include/lwres/net.h
 include/lwres/netdb.h
 include/lwres/platform.h
 include/lwres/result.h
-include/omapi/compatibility.h
-include/omapi/lib.h
-include/omapi/omapi.h
-include/omapi/private.h
-include/omapi/result.h
-include/omapi/types.h
 lib/libdns.a
 lib/libdns.la
 lib/libdns.so
-lib/libdns.so.4
-lib/libdns.so.4.0
+lib/libdns.so.5
+lib/libdns.so.5.0
 lib/libisc.a
 lib/libisc.la
 lib/libisc.so
 lib/libisc.so.4
 lib/libisc.so.4.0
+lib/libisccc.a
+lib/libisccc.la
+lib/libisccc.so
+lib/libisccc.so.0
+lib/libisccc.so.0.0
+lib/libisccfg.a
+lib/libisccfg.la
+lib/libisccfg.so
+lib/libisccfg.so.0
+lib/libisccfg.so.0.0
 lib/liblwres.a
 lib/liblwres.la
 lib/liblwres.so
 lib/liblwres.so.2
 lib/liblwres.so.2.0
-lib/libomapi.a
-lib/libomapi.la
-lib/libomapi.so
-lib/libomapi.so.3
-lib/libomapi.so.3.0
 sbin/dnssec-keygen
 sbin/dnssec-makekeyset
 sbin/dnssec-signkey
@@ -201,8 +200,9 @@ sbin/named
 sbin/named-checkconf
 sbin/named-checkzone
 sbin/rndc
-@dirrm include/omapi
 @dirrm include/lwres
+@dirrm include/isccc
+@dirrm include/isccfg
 @dirrm include/isc
 @dirrm include/dst
 @dirrm include/dns