Update net/powerdns (and modules) to 3.4.9.

PowerDNS Authoritative Server 3.4.9
===================================

This is a minor bugfix and performance release. Two contributions
by Kees Monshouwer make 3.4.9 fully compatible with the new single
key ECDSA default that is coming in version 4.0.0.

Changes since 3.4.8:
- use OpenSSL for ECDSA signing where available (Kees Monshouwer)
- allow common signing key (Kees Monshouwer)
- Add a disable-syslog setting
- fix SOA caching with multiple backends (Kees Monshouwer)
- whitespace-related zone parsing fixes ticket #3568
- bindbackend: fix, set domain in list() (Kees Monshouwer)

PowerDNS Authoritative Server 3.4.8
===================================

This is a small bugfix release. Additionally, the deb/RPM packages
on downloads.powerdns.com (those with -static in the name) for
3.4.8 have been built against Botan 1.10.11 instead of Botan
1.10.3 like previous packages. Please see the Botan Security page
for more information on the fixes in Botan 1.10.11. As a PowerDNS
user, these issues only affect you if you ran our -static packages
and allowed your users to upload private keys to your
configuration.

Changes since 3.4.7:
- Use AC_SEARCH_LIBS (Ruben Kerkhof)
- Check for inet_aton in libresolv (Ruben Kerkhof)
- Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof)
- pdnssec: don't check disabled records (Pieter Lexis)
- pdnssec: check all records (including disabled ones) only in
  verbose mode (Kees Monshouwer)
- traling dot in DNAME content (Kees Monshouwer)
- Fix luabackend compilation on FreeBSD i386 (RvdE)
- silence g++ 6.0 warnings and error (Kees Monshouwer)
- add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)

PowerDNS Authoritative Server 3.4.7
===================================

This is a security release fixing Security Advisory 2015-03

Bug fixes:
- Ignore invalid/empty TKEY and TSIG records (Christian
  Hofstaedtler)
- Don't reply to truncated queries (Christian Hofstaedtler)
- don't log out-of-zone ents during AXFR in (Kees Monshouwer)
- Prevent XSS by escaping user input. Thanks to Pierre Jaury and
  Damien Cauquil at Sysdream for pointing this out.
- Handle NULL and boolean properly in gPGSql (Aki Tuomi)
- Improve negative caching (Kees Monshouwer)
- Do not divide timeout twice (Aki Tuomi)
- Correctly sort records with a priority.

Improvements:
- Direct query answers and correct zone-rectification in the GeoIP
  backend (Aki Tuomi)
- Use token names to identify PKCS#11 keys (Aki Tuomi)
- Fix typo in an error message (Arjen Zonneveld)
- limit NSEC3 iterations in bindbackend (Kees Monshouwer)
- Initialize minbody (Aki Tuomi)

New features:
- OPENPGPKEY record-type (James Cloos and Kees Monshouwer)
- add global soa-edit settings (Kees Monshouwer)

6 files changed, 16 insertions, 20 deletions

diff --git a/net/powerdns-ldap/Makefile b/net/powerdns-ldap/Makefile
index 3390431d74f..5046f661a49 100644
--- a/net/powerdns-ldap/Makefile
+++ b/net/powerdns-ldap/Makefile
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.17 2016/03/05 11:29:10 jperkin Exp $
+# $NetBSD: Makefile,v 1.18 2016/06/03 11:45:34 fhajny Exp $
 
-PKGREVISION= 1
 .include "../../net/powerdns/Makefile.backend"
 
 PKGNAME=		${DISTNAME:S/pdns/powerdns-ldap/}
diff --git a/net/powerdns/Makefile b/net/powerdns/Makefile
index 611de8af128..9af93eb80b3 100644
--- a/net/powerdns/Makefile
+++ b/net/powerdns/Makefile
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.17 2016/04/11 19:02:01 ryoon Exp $
+# $NetBSD: Makefile,v 1.18 2016/06/03 11:45:34 fhajny Exp $
 
-PKGREVISION= 1
 .include "Makefile.common"
 
 PKGNAME=		${DISTNAME:S/pdns/powerdns/}
diff --git a/net/powerdns/Makefile.common b/net/powerdns/Makefile.common
index 86ef611aa88..55f00bd6f7a 100644
--- a/net/powerdns/Makefile.common
+++ b/net/powerdns/Makefile.common
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile.common,v 1.14 2015/10/22 19:01:24 fhajny Exp $
+# $NetBSD: Makefile.common,v 1.15 2016/06/03 11:45:34 fhajny Exp $
 
-PDNS_VERSION=		3.4.6
+PDNS_VERSION=		3.4.9
 DISTNAME=		pdns-${PDNS_VERSION}
 CATEGORIES=		net
 MASTER_SITES=		http://downloads.powerdns.com/releases/
diff --git a/net/powerdns/PLIST b/net/powerdns/PLIST
index 1c2b0a1eae0..dea1a8f9b3c 100644
--- a/net/powerdns/PLIST
+++ b/net/powerdns/PLIST
@@ -1,6 +1,5 @@
-@comment $NetBSD: PLIST,v 1.7 2015/03/27 23:37:52 rodent Exp $
+@comment $NetBSD: PLIST,v 1.8 2016/06/03 11:45:34 fhajny Exp $
 ${PLIST.tools}bin/dnsbulktest
-${PLIST.tools}bin/dnsdist
 ${PLIST.tools}bin/dnsreplay
 ${PLIST.tools}bin/dnsscan
 ${PLIST.tools}bin/dnsscope
@@ -20,7 +19,6 @@ ${PLIST.pipe}lib/pdns/pdns/libpipebackend.la
 ${PLIST.random}lib/pdns/pdns/librandombackend.la
 ${PLIST.remote}lib/pdns/pdns/libremotebackend.la
 ${PLIST.sqlite}lib/pdns/pdns/libgsqlite3backend.la
-${PLIST.tools}man/man1/dnsdist.1
 ${PLIST.tools}man/man1/dnstcpbench.1
 ${PLIST.tools}man/man1/dnsreplay.1
 ${PLIST.tools}man/man1/dnsscope.1
diff --git a/net/powerdns/distinfo b/net/powerdns/distinfo
index 7ac794a9736..76d31b10932 100644
--- a/net/powerdns/distinfo
+++ b/net/powerdns/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.20 2015/10/22 19:01:24 fhajny Exp $
+$NetBSD: distinfo,v 1.21 2016/06/03 11:45:34 fhajny Exp $
 
-SHA1 (pdns-3.4.6.tar.bz2) = 5b01b21e7a2807d9770fea5ed1acc4dc3ed609bd
-RMD160 (pdns-3.4.6.tar.bz2) = 222927cb39dbf4d5421dc5a2319739bd94b8c6ba
-SHA512 (pdns-3.4.6.tar.bz2) = 6ab4bef0482041d511ce0ea15e92cd12b0b331d3199c01463fa9150d04aca428c7b90fe25e53251f76a8809331cf32830240961dbf887e6b7c4e0a7fe07c8089
-Size (pdns-3.4.6.tar.bz2) = 1336760 bytes
+SHA1 (pdns-3.4.9.tar.bz2) = 51f677c692af92e6c84c5706d0698ce2c1a80de4
+RMD160 (pdns-3.4.9.tar.bz2) = f1eb7f5ffd4f94c1ab468ca82d65dea433f2d5f0
+SHA512 (pdns-3.4.9.tar.bz2) = ad0d619bfa0bbce332c4c16734cb37c588cf0d7a05bde3a484ecdf13492ca9b4b4d8d7afe448c5c2c6d35b72165f3c8fbd41a91fd5cfbe4194a3eddc5f600a38
+Size (pdns-3.4.9.tar.bz2) = 1351434 bytes
 SHA1 (patch-aa) = a7e66245ab7acbff4f568650ee285ee18a88ea56
 SHA1 (patch-ab) = a816def3825c0260642dab85f518bebaf4ba904b
 SHA1 (patch-modules_luabackend_luabackend.hh) = 23ae1a2c047f367a51b7bfa10a546aeb91cccea4
@@ -20,7 +20,7 @@ SHA1 (patch-pdns_htimer.cc) = 6064c73db33d2e7cc65979757e90ecdf8d7c16e6
 SHA1 (patch-pdns_misc.cc) = 832cf6bd2f0b018d66a49e5b0f9f879a107c1a90
 SHA1 (patch-pdns_nameserver.cc) = 13011d7cd1e6915c4b547f7817fa72e595ac2a3a
 SHA1 (patch-pdns_pdns_recursor.cc) = 97f3688baef5a7520514764a4590d0b92fa51fda
-SHA1 (patch-pdns_receiver.cc) = 11e096024b007d53528d61083a65fd5e941fe6eb
+SHA1 (patch-pdns_receiver.cc) = a7f44e2c9196f27fc5855183a8e3c34565a9e34c
 SHA1 (patch-pdns_recursor__cache.cc) = 36dc4c4691f6d88fb7b6cc452cda19dc07a1b53b
 SHA1 (patch-pdns_resolver.cc) = 0f3de1aef64d1e24a5b0f87bfdd866c75ff3c1ff
 SHA1 (patch-pdns_tcpreceiver.cc) = 994203d32464044ca303973cc27ac4080a654678
diff --git a/net/powerdns/patches/patch-pdns_receiver.cc b/net/powerdns/patches/patch-pdns_receiver.cc
index c6825d5c3e0..455528816b7 100644
--- a/net/powerdns/patches/patch-pdns_receiver.cc
+++ b/net/powerdns/patches/patch-pdns_receiver.cc
@@ -1,9 +1,9 @@
-$NetBSD: patch-pdns_receiver.cc,v 1.3 2015/03/27 23:37:52 rodent Exp $
+$NetBSD: patch-pdns_receiver.cc,v 1.4 2016/06/03 11:45:34 fhajny Exp $
 
 Limit inclusion of boost headers to only those necessary to avoid conflicting
 types errors on Solaris.
 
---- pdns/receiver.cc.orig	2015-03-02 13:17:12.000000000 +0000
+--- pdns/receiver.cc.orig	2016-05-13 16:04:50.000000000 +0000
 +++ pdns/receiver.cc
 @@ -42,7 +42,7 @@
  #include <sys/mman.h>
@@ -11,6 +11,6 @@ types errors on Solaris.
  #include <fstream>
 -#include <boost/algorithm/string.hpp>
 +#include <boost/algorithm/string/trim.hpp>
- 
- #include "config.h"
- #include "dns.hh"
+ #ifdef HAVE_OPENSSL
+ #include "opensslsigners.hh"
+ #endif