1.10:

 - New Features:
    - New Apps:     (see the validator/apps directory for details)
                    - dnssec-check: check dnssec support from your ISP
                    - dnssec-nodes: graphically displays a DNS
                      hierarchy, color coded by each node's DNSSEC status
                    - dnssec-system-tray: displays pop-up
                      notifications when a libval-enabled application
                      triggers a DNSSEC error
                    - lookup: a graphical DNS lookup utility that
                      displays the results in a hierarchical tree and
                      color codes the window according to DNSSEC status

    - libval:       - Added support for building on Windows.
                    - added support for falling back to recursion when
                      the caching name server does not appear to
                      support DNSSEC. This also works as a mechanism
                      to work around poisoned or misbehaving cache.
                    - Significant improvements to the the asynchronous support.
    - lsdnssec:     - Improvements to lsdnssec to display different
                      output depending on whether a zone is a
                      stand-alone zone or under control of rollerd.
    - nagios:       - Plugins for the nagios monitoring system which
                      enable monitoring of zone rollerover states.
    - firefox:      - Improved patches that work with the most recent firefox

 Plus many more minor features and bug fixes

1.9:
 - New Features:
    - lsdnssec:     - Added a new flag (-p) to show only zones in a
                      particular rollerd phase.
                    - fixed bugs to align timing output with rollerd.
    - rollerd:      - Added a -logtz flag for logging timezones
                    - fixed bugs related to the -alwayssign flag.
                    - zonesigner's path is taken from the config file.
    - rollctl:      - Added -rollall and -rollzone options.
    - zonesigner:   - Assumes keys need to be generated for new zones
                      (Assumes -genkeys option was given if a keyrec file
                      can't be found.)
                    - Exits with unique exit codes if a failure occurs.
                      ("zonesigner -xc CODE" can lookup a description for it.")
                    - Added the -phase option so rollover options could be
                      more easily specified.
    - lights:       - A simple GUI to check the status of rollover states
    - blinkenlights:- Added hide/show commands for rollrec names and zone
                      names, for split-zone support
    - cleankrf:     - Fixed deletion of obsolete set keyrecs.
    - GUI commands: - Fixed how the Exit command works so they don't coredump.

    - libsres
      & libval:     - New beta support for issuing asynchronous requests.
                      This can speed up queries by up to 4 times if used.
                      (see example code in validator/apps/validator_selftest.c)
                    - NSEC3, DLV and IPv6 are enabled by default.
                    - improved logging and logging-callback support.
    - drawvalmap    - Can output PNG files now

 - Packaging:
                    - Our download page now allows you to download
                      the C validator libraries independently of the
                      full DNNSEC-Tools tool-suite.

 - Many bugs were also fixed in the 240+ changes.

3 files changed, 154 insertions, 8 deletions

diff --git a/security/dnssec-tools/Makefile b/security/dnssec-tools/Makefile
index 9faf860d902..b6e12ad8caa 100644
--- a/security/dnssec-tools/Makefile
+++ b/security/dnssec-tools/Makefile
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.5 2011/03/12 20:07:19 pettai Exp $
+# $NetBSD: Makefile,v 1.6 2011/07/27 05:30:31 pettai Exp $
 #
 
-DISTNAME=	dnssec-tools-1.8
+DISTNAME=	dnssec-tools-1.10
 CATEGORIES=	security
 MASTER_SITES=	http://www.dnssec-tools.org/download/
 
diff --git a/security/dnssec-tools/PLIST b/security/dnssec-tools/PLIST
index 3018387b21f..cd891c6c763 100644
--- a/security/dnssec-tools/PLIST
+++ b/security/dnssec-tools/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.3 2010/07/25 19:57:25 pettai Exp $
+@comment $NetBSD: PLIST,v 1.4 2011/07/27 05:30:31 pettai Exp $
 bin/getaddr
 bin/gethost
 bin/getname
@@ -9,10 +9,155 @@ bin/libval_check_conf
 bin/validate
 include/validator/resolver.h
 include/validator/val_errors.h
+include/validator/validator-compat.h
+include/validator/validator-config.h
 include/validator/validator.h
 lib/libsres.la
 lib/libval-threads.la
 lib/libval_shim.la
+lib/perl5/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/perllocal.pod
+lib/perl5/vendor_perl/5.12.0/Net/DNS/SEC/Tools/Donuts/Rule.pm
+lib/perl5/vendor_perl/5.12.0/Net/DNS/SEC/Tools/TrustAnchor.pm
+lib/perl5/vendor_perl/5.12.0/Net/DNS/SEC/Tools/TrustAnchor/Bind.pm
+lib/perl5/vendor_perl/5.12.0/Net/DNS/SEC/Tools/TrustAnchor/Csv.pm
+lib/perl5/vendor_perl/5.12.0/Net/DNS/SEC/Tools/TrustAnchor/Dns.pm
+lib/perl5/vendor_perl/5.12.0/Net/DNS/SEC/Tools/TrustAnchor/Dump.pm
+lib/perl5/vendor_perl/5.12.0/Net/DNS/SEC/Tools/TrustAnchor/Itar.pm
+lib/perl5/vendor_perl/5.12.0/Net/DNS/SEC/Tools/TrustAnchor/Libval.pm
+lib/perl5/vendor_perl/5.12.0/Net/DNS/SEC/Tools/TrustAnchor/Makefile.PL
+lib/perl5/vendor_perl/5.12.0/Net/DNS/SEC/Tools/TrustAnchor/Mf.pm
+lib/perl5/vendor_perl/5.12.0/Net/DNS/SEC/Tools/TrustAnchor/Secspider.pm
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/DNS/SEC/Tools/BootStrap.pm
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/DNS/SEC/Tools/QWPrimitives.pm
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/DNS/SEC/Tools/conf.pm
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/DNS/SEC/Tools/defaults.pm
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/DNS/SEC/Tools/dnssectools.pm
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/DNS/SEC/Tools/keyrec.pm
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/DNS/SEC/Tools/keyrec.pod
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/DNS/SEC/Tools/rolllog.pm
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/DNS/SEC/Tools/rollmgr.pm
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/DNS/SEC/Tools/rollrec.pm
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/DNS/SEC/Tools/rollrec.pod
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/DNS/SEC/Tools/timetrans.pm
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/DNS/SEC/Tools/tooloptions.pm
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/DNS/SEC/Validator.pm
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/DNS/SEC/defines.pl
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/DNS/ZoneFile/Fast.pm
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/Net/addrinfo.pm
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/auto/Net/DNS/SEC/Tools/Dnspktflow/dnspktflow/.packlist
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/auto/Net/DNS/SEC/Tools/Donuts/donuts/.packlist
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/auto/Net/DNS/SEC/Tools/Drawvalmap/drawvalmap/.packlist
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/auto/Net/DNS/SEC/Tools/Maketestzone/maketestzone/.packlist
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/auto/Net/DNS/SEC/Tools/Mapper/mapper/.packlist
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/auto/Net/DNS/SEC/Tools/conf/.packlist
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/auto/Net/DNS/SEC/Validator/Validator.bs
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/auto/Net/DNS/SEC/Validator/Validator.so
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/auto/Net/addrinfo/addrinfo.bs
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/auto/Net/addrinfo/addrinfo.so
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/auto/convertar/.packlist
+lib/perl5/vendor_perl/5.12.0/${MACHINE_ARCH}-${LOWER_OPSYS}-thread-multi/auto/dnssec-tools/.packlist
+lib/perl5/vendor_perl/bin/blinkenlights
+lib/perl5/vendor_perl/bin/bubbles
+lib/perl5/vendor_perl/bin/cleanarch
+lib/perl5/vendor_perl/bin/cleankrf
+lib/perl5/vendor_perl/bin/convertar
+lib/perl5/vendor_perl/bin/dnspktflow
+lib/perl5/vendor_perl/bin/donuts
+lib/perl5/vendor_perl/bin/donutsd
+lib/perl5/vendor_perl/bin/drawvalmap
+lib/perl5/vendor_perl/bin/dtck
+lib/perl5/vendor_perl/bin/dtconf
+lib/perl5/vendor_perl/bin/dtconfchk
+lib/perl5/vendor_perl/bin/dtdefs
+lib/perl5/vendor_perl/bin/dtinitconf
+lib/perl5/vendor_perl/bin/expchk
+lib/perl5/vendor_perl/bin/fixkrf
+lib/perl5/vendor_perl/bin/genkrf
+lib/perl5/vendor_perl/bin/getdnskeys
+lib/perl5/vendor_perl/bin/getds
+lib/perl5/vendor_perl/bin/keyarch
+lib/perl5/vendor_perl/bin/krfcheck
+lib/perl5/vendor_perl/bin/lights
+lib/perl5/vendor_perl/bin/lsdnssec
+lib/perl5/vendor_perl/bin/lskrf
+lib/perl5/vendor_perl/bin/lsroll
+lib/perl5/vendor_perl/bin/maketestzone
+lib/perl5/vendor_perl/bin/mapper
+lib/perl5/vendor_perl/bin/rollchk
+lib/perl5/vendor_perl/bin/rollctl
+lib/perl5/vendor_perl/bin/rollerd
+lib/perl5/vendor_perl/bin/rollinit
+lib/perl5/vendor_perl/bin/rolllog
+lib/perl5/vendor_perl/bin/rollrec-editor
+lib/perl5/vendor_perl/bin/rollset
+lib/perl5/vendor_perl/bin/signset-editor
+lib/perl5/vendor_perl/bin/tachk
+lib/perl5/vendor_perl/bin/timetrans
+lib/perl5/vendor_perl/bin/trustman
+lib/perl5/vendor_perl/bin/zonesigner
+lib/perl5/vendor_perl/man/man1/blinkenlights.1
+lib/perl5/vendor_perl/man/man1/bubbles.1
+lib/perl5/vendor_perl/man/man1/cleanarch.1
+lib/perl5/vendor_perl/man/man1/cleankrf.1
+lib/perl5/vendor_perl/man/man1/convertar.1
+lib/perl5/vendor_perl/man/man1/dnspktflow.1
+lib/perl5/vendor_perl/man/man1/donuts.1
+lib/perl5/vendor_perl/man/man1/donutsd.1
+lib/perl5/vendor_perl/man/man1/drawvalmap.1
+lib/perl5/vendor_perl/man/man1/dtck.1
+lib/perl5/vendor_perl/man/man1/dtconf.1
+lib/perl5/vendor_perl/man/man1/dtconfchk.1
+lib/perl5/vendor_perl/man/man1/dtdefs.1
+lib/perl5/vendor_perl/man/man1/dtinitconf.1
+lib/perl5/vendor_perl/man/man1/expchk.1
+lib/perl5/vendor_perl/man/man1/fixkrf.1
+lib/perl5/vendor_perl/man/man1/genkrf.1
+lib/perl5/vendor_perl/man/man1/getdnskeys.1
+lib/perl5/vendor_perl/man/man1/getds.1
+lib/perl5/vendor_perl/man/man1/keyarch.1
+lib/perl5/vendor_perl/man/man1/krfcheck.1
+lib/perl5/vendor_perl/man/man1/lights.1
+lib/perl5/vendor_perl/man/man1/lsdnssec.1
+lib/perl5/vendor_perl/man/man1/lskrf.1
+lib/perl5/vendor_perl/man/man1/lsroll.1
+lib/perl5/vendor_perl/man/man1/maketestzone.1
+lib/perl5/vendor_perl/man/man1/mapper.1
+lib/perl5/vendor_perl/man/man1/rollchk.1
+lib/perl5/vendor_perl/man/man1/rollctl.1
+lib/perl5/vendor_perl/man/man1/rollerd.1
+lib/perl5/vendor_perl/man/man1/rollinit.1
+lib/perl5/vendor_perl/man/man1/rolllog.1
+lib/perl5/vendor_perl/man/man1/rollrec-editor.1
+lib/perl5/vendor_perl/man/man1/rollset.1
+lib/perl5/vendor_perl/man/man1/signset-editor.1
+lib/perl5/vendor_perl/man/man1/tachk.1
+lib/perl5/vendor_perl/man/man1/timetrans.1
+lib/perl5/vendor_perl/man/man1/trustman.1
+lib/perl5/vendor_perl/man/man1/zonesigner.1
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::BootStrap.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::Donuts::Rule.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::QWPrimitives.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::TrustAnchor.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::TrustAnchor::Bind.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::TrustAnchor::Csv.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::TrustAnchor::Dns.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::TrustAnchor::Dump.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::TrustAnchor::Itar.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::TrustAnchor::Libval.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::TrustAnchor::Mf.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::TrustAnchor::Secspider.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::conf.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::defaults.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::dnssectools.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::keyrec.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::rolllog.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::rollmgr.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::rollrec.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::timetrans.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Tools::tooloptions.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::SEC::Validator.3
+lib/perl5/vendor_perl/man/man3/Net::DNS::ZoneFile::Fast.3
+lib/perl5/vendor_perl/man/man3/Net::addrinfo.3
 man/man1/dnssec-tools.1
 man/man1/getaddr.1
 man/man1/gethost.1
@@ -65,3 +210,4 @@ share/dnssec-tools/donuts/rules/recommendations.rules.txt
 share/examples/dnssec-tools/dnsval.conf
 share/examples/dnssec-tools/resolv.conf
 share/examples/dnssec-tools/root.hints
+@pkgdir etc/dnssec-tools
diff --git a/security/dnssec-tools/distinfo b/security/dnssec-tools/distinfo
index a9be9aef58f..9eb9960e226 100644
--- a/security/dnssec-tools/distinfo
+++ b/security/dnssec-tools/distinfo
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.3 2011/03/12 20:07:19 pettai Exp $
+$NetBSD: distinfo,v 1.4 2011/07/27 05:30:31 pettai Exp $
 
-SHA1 (dnssec-tools-1.8.tar.gz) = 0202ae58f739d7dc3bede4cc5fc56bcaa60919c6
-RMD160 (dnssec-tools-1.8.tar.gz) = 6072fb61cff077b7793768cd742d73ac9e636974
-Size (dnssec-tools-1.8.tar.gz) = 2245452 bytes
+SHA1 (dnssec-tools-1.10.tar.gz) = d0123ede6fdd7bd3fcee377338790a9029766563
+RMD160 (dnssec-tools-1.10.tar.gz) = 1678b5bd9e0893be337c8a2f0704e5dd859496db
+Size (dnssec-tools-1.10.tar.gz) = 2871794 bytes
 SHA1 (patch-aa) = cf0f806152bf912d9e6d727f66bdb186ec2f55c7
 SHA1 (patch-ab) = 07b5a0dbbca1c41cbb30b19f5a94ec9f8c900c15
-SHA1 (patch-ac) = 582f054f0b4e8c4024d1a327ddf4236e541d4f98
+#SHA1 (patch-ac) = 582f054f0b4e8c4024d1a327ddf4236e541d4f98