1.12.1 (2/7/12)

 - Minor bug fix release
    - Fix perl Validator module so it compiles after a header move
    - Make all OSes use the new dnssec-check gui as they should have

1.12                                                            (1/26/12)
 - New Features:

    - libval:       - Made improvements to support IPv6,
                      added the ability to fetch IPv6 glue
                    - Fixed the EDNS0 fallback behavior.
                    - Tidied up the locking semantics in libval.
                    - Added support for hard-coding validator configuration
                      information that gets used in the absence of other
                      configuration data. This feature allows the
                      validator library to be self-contained in
                      environments where setting up configuration data at
                      specific locations in the file system is not always
                      feasible.
                    - The library has been ported to the Android OS

    - rollerd:      - Added support for phase-specific commands. This allows
                      the zone operator to customize processing of the rollerd
                      utility during different rollerd phases.
                    - Added support for zone groups.  This allows a collection
                      of zones to be controlled as a group, rather each of
                      those zones individually.
                    - Improved the manner in which rollerd indexes the zones
                      being managed, with the significantly decreased access
                      times for rollerd's data files.  This results in rollerd
                      being able to support a lot more zones with a single
                      rollerd instance.
                    - rollctl and the rollover GUI programs may have new
                      commands to allow for immediate termination of rollerd.

    - apps          - Added patch to enable local validation in NTP, with
                      the ability to handle a specific chicken and egg problem
                      related to the interdependency between DNSSEC and an
                      accurate system clock.

                    - Added a patch to enable DNSSEC validation in Qt
                      based applications

    - dnssec-check  - Completely rewritten GUI with many new features
                    - Now contains the ability to submit the results
                      to a central DNSSEC-Tools repository.  The
                      results will be analyzed and published on a
                      regular basis.  Please help us get started by
                      running dnssec-check on your networks!  Note
                      that it explains that it only sends hashed IP
                      addresses to our servers and the reports
                      generated will be aggregation summaries of the
                      data collected.
                    - It now runs on both Android and Harmattan (N9) devices

    - maketestzone  - Now produces zones with wildcards and changes to
                      NSEC  record signatures

    - dnssec-nodes  - parses unbound log files
                    - Initial work porting to Android

    - dnssec-system-tray
                    - parses unbound log files

1.11                                                            (9/30/11)
 - New Features:

    - libval:       - Significant improvements and bug fixes to the
                      asynchronous support.
                    - Added asynchronous version of val_getaddr_info.
                    - Some reworking of the asynchronous API and callbacks.
                      Note the asynchronous api is still under development and
                      subject to changes that break backwards compatibility.

    - rollerd:      - Added an experimental time-based method for queuing
                      rollover operations.  This original method (full list
                      of all zones) is the default queuing method, but the
                      new method can be used by editing the rollerd script.
                      rollctl and rollrec.pm were also modified to support
                      this change.
                    - Added support for merging a set of rollrec files.
                      rollctl and rollrec.pm were also modified to support
                      this change.

    - dnssec-nodes  - This graphical DNS debugging utility was greatly enhanced
                    - Now parses both bind and libval log files
                    - Multiple log files can be watched
                    - Node's represent multiple data sets
                      internally, which are independently displayed
                      and tracked.
                    - Added support for searching for and
                      highlighting DNS data and DNSSEC status
                      results

    - dnssec-system-tray
                    - This utility can now report on BOGUS responses
                      detected in both libval and bind log files.
                    - Summary window revamped to group similar
                      messages together.

 Plus many more minor features and bug fixes

3 files changed, 8 insertions, 9 deletions

diff --git a/security/dnssec-tools/Makefile b/security/dnssec-tools/Makefile
index f9923838145..6d12aa3e7b2 100644
--- a/security/dnssec-tools/Makefile
+++ b/security/dnssec-tools/Makefile
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.11 2012/03/08 01:14:24 joerg Exp $
+# $NetBSD: Makefile,v 1.12 2012/03/18 19:23:27 pettai Exp $
 #
 
-DISTNAME=	dnssec-tools-1.10
-PKGREVISION=	2
+DISTNAME=	dnssec-tools-1.12.1
 CATEGORIES=	security
 MASTER_SITES=	http://www.dnssec-tools.org/download/
 
diff --git a/security/dnssec-tools/PLIST b/security/dnssec-tools/PLIST
index 308bb09ac62..d27ef6d6e99 100644
--- a/security/dnssec-tools/PLIST
+++ b/security/dnssec-tools/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.5 2011/08/19 12:16:33 obache Exp $
+@comment $NetBSD: PLIST,v 1.6 2012/03/18 19:23:27 pettai Exp $
 bin/getaddr
 bin/gethost
 bin/getname
@@ -36,8 +36,8 @@ man/man3/resolv_conf_set.3
 man/man3/root_hints_get.3
 man/man3/root_hints_set.3
 man/man3/val_add_valpolicy.3
+man/man3/val_context_setqflags.3
 man/man3/val_create_context.3
-man/man3/val_create_context_with_conf.3
 man/man3/val_does_not_exist.3
 man/man3/val_free_answer_chain.3
 man/man3/val_free_context.3
diff --git a/security/dnssec-tools/distinfo b/security/dnssec-tools/distinfo
index 3d18e3d707e..8a6499c2165 100644
--- a/security/dnssec-tools/distinfo
+++ b/security/dnssec-tools/distinfo
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.6 2011/08/19 12:16:33 obache Exp $
+$NetBSD: distinfo,v 1.7 2012/03/18 19:23:28 pettai Exp $
 
-SHA1 (dnssec-tools-1.10.tar.gz) = d0123ede6fdd7bd3fcee377338790a9029766563
-RMD160 (dnssec-tools-1.10.tar.gz) = 1678b5bd9e0893be337c8a2f0704e5dd859496db
-Size (dnssec-tools-1.10.tar.gz) = 2871794 bytes
+SHA1 (dnssec-tools-1.12.1.tar.gz) = 66f5fd921372fafc6e9124d2d6438050525408a0
+RMD160 (dnssec-tools-1.12.1.tar.gz) = 14f8b1a49441653c375f5fceb50b4ea88e01cd64
+Size (dnssec-tools-1.12.1.tar.gz) = 3141334 bytes
 SHA1 (patch-aa) = cf0f806152bf912d9e6d727f66bdb186ec2f55c7
 SHA1 (patch-ab) = 07b5a0dbbca1c41cbb30b19f5a94ec9f8c900c15
 SHA1 (patch-tools_donuts_Makefile.PL) = 283447b2e1ac4a83f462743ef2a397c3a29b87a1