v1.4.2 - Jan 27, 2014

---------------------
Bugfixes:
        * AXFR/IXFR compatibility issues with tinydns/axfrdns
        * Journal file is created only when needed
        * Zone-related log messages are logged into correct category
        * DNSSEC: Refresh signatures earlier (3 days before their expiration
          with the default signature lifetime)
        * Fixed RCU synchronization causing deadlock on 'knotc signzone'
        * RRSIG not fitting in the additional records doesn't cause truncation

v1.4.1 - Jan 13, 2014
---------------------
Bugfixes:
        * Empty APL record support
        * 'zonestatus' when using immediate zone syncing
        * Immediate zone syncing after reload
        * Race condition writing time values to zone file

v1.4.0 - Jan 6, 2014
---------------------
Features:
        * Zone SERIAL policies (INCREMENT, UNIXTIME)
Bugfixes:
        * AXFR crash with specific packet
        * QNAME case-sensitive since 1.4.0-rc0
        * DNSSEC records over DDNS
        * Semantic check fail in AXFR is only soft-error
        * Journal race condition
        * Notifies are sent immediately

v1.4.0-rc2 - Dec 13, 2013
-------------------------
Features:
        * IDN support in Knot utilities
        * DNSSEC: support for GOST algorithm

Bugfixes:
        * Crash in particular additionals processing
        * Race condition in event cancelation
        * Journal corruption after failed transactions
        * DNSSEC: fixed detection of ECDSA support

Other improvements:
        * ./configure prints build configuration summary
        * Pretty zone file output (DNSSEC-related data separately)
        * Lower memory consumption
        * config: option 'dnssec-keydir' can be set per zone
        * config: option 'storage' can be set per zone

v1.4.0-rc1 - Nov 20, 2013
-------------------------

Features:
        * Better logging of automatic DNSSEC events
        * Support for DNSSEC key pre-publication
Bugfixes:
        * Refactored zone loading
        * Improved journal locking and fixed some race conditions
        * Various fixes in client utilities
        * Fixed memory errors in automatic DNSSEC signing
        * 'dnssec-keydir' doesn't auto-enable signing
        * Fixed rescheduling of zone resigns

v1.4.0-beta - Oct 28, 2013
--------------------------
Features:
        * Experimental automatic DNSSEC signing
        * Reduced memory usage

4 files changed, 20 insertions, 16 deletions

diff --git a/net/knot/Makefile b/net/knot/Makefile
index 4f818fb22b1..d68a60831de 100644
--- a/net/knot/Makefile
+++ b/net/knot/Makefile
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.11 2014/01/27 18:41:14 wiz Exp $
+# $NetBSD: Makefile,v 1.12 2014/01/31 22:05:43 pettai Exp $
 
-DISTNAME=	knot-1.3.3
+DISTNAME=	knot-1.4.2
 CATEGORIES=	net
 MASTER_SITES=	https://secure.nic.cz/files/knot-dns/
 
@@ -9,6 +9,8 @@ HOMEPAGE=	http://www.knot-dns.cz/
 COMMENT=	Knot (auth) DNS server
 LICENSE=	gnu-gpl-v3
 
+FETCH_USING=	curl
+
 BUILD_DEFS+=	VARBASE
 
 GNU_CONFIGURE=		yes
diff --git a/net/knot/PLIST b/net/knot/PLIST
index 773e970d0b4..ad998ec4c8d 100644
--- a/net/knot/PLIST
+++ b/net/knot/PLIST
@@ -1,9 +1,11 @@
-@comment $NetBSD: PLIST,v 1.3 2013/09/13 18:14:11 pettai Exp $
+@comment $NetBSD: PLIST,v 1.4 2014/01/31 22:05:43 pettai Exp $
 bin/kdig
 bin/khost
+bin/knsec3hash
 bin/knsupdate
 man/man1/kdig.1
 man/man1/khost.1
+man/man1/knsec3hash.1
 man/man1/knsupdate.1
 man/man5/knot.conf.5
 man/man8/knotc.8
diff --git a/net/knot/distinfo b/net/knot/distinfo
index e6ec59f96f0..8d223c27447 100644
--- a/net/knot/distinfo
+++ b/net/knot/distinfo
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.7 2013/11/09 22:17:45 pettai Exp $
+$NetBSD: distinfo,v 1.8 2014/01/31 22:05:43 pettai Exp $
 
-SHA1 (knot-1.3.3.tar.gz) = 150929cca943f773e413a75133a400eecd2e657f
-RMD160 (knot-1.3.3.tar.gz) = e523d31b0ed2d442bacb460b041f08abddf13380
-Size (knot-1.3.3.tar.gz) = 1148233 bytes
-SHA1 (patch-Makefile.in) = c2e7490ed6461ce5a5916abb86947f9d26cb174d
+SHA1 (knot-1.4.2.tar.gz) = 0ac8a2ecebce8ad0a72486cb1930f51a095a8c17
+RMD160 (knot-1.4.2.tar.gz) = 2eff5fca20e031202efadaf3cb454c20f5c77312
+Size (knot-1.4.2.tar.gz) = 1365873 bytes
+SHA1 (patch-Makefile.in) = f4b887475094a38c831f3832eb0b007f4a37ee77
 SHA1 (patch-samples_Makefile.in) = d5d835bd11c91c046caf838b92ad56ff8290d166
diff --git a/net/knot/patches/patch-Makefile.in b/net/knot/patches/patch-Makefile.in
index 888c6e789fb..d1c7dbd7522 100644
--- a/net/knot/patches/patch-Makefile.in
+++ b/net/knot/patches/patch-Makefile.in
@@ -1,15 +1,15 @@
-$NetBSD: patch-Makefile.in,v 1.2 2013/09/13 18:14:11 pettai Exp $
+$NetBSD: patch-Makefile.in,v 1.3 2014/01/31 22:05:44 pettai Exp $
 
 Ignore .texi docs, as NetBSDs makeinfo isn't UTF-8 compatible
 
---- Makefile.in.orig	2013-08-27 11:35:02.000000000 +0000
+--- Makefile.in.orig	2014-01-27 14:03:03.000000000 +0000
 +++ Makefile.in
-@@ -337,7 +337,7 @@ top_build_prefix = @top_build_prefix@
+@@ -455,7 +455,7 @@ top_build_prefix = @top_build_prefix@
  top_builddir = @top_builddir@
  top_srcdir = @top_srcdir@
  ACLOCAL_AMFLAGS = -I m4
--SUBDIRS = src samples doc man
-+SUBDIRS = src samples man
- EXTRA_DIST = resource.sh
- all: all-recursive
- 
+-SUBDIRS = src samples doc man patches
++SUBDIRS = src samples man patches
+ check_LIBRARIES = tests/tap/libtap.a
+ AM_CPPFLAGS = \
+ 	-I$(top_srcdir)/src \