summaryrefslogtreecommitdiff
path: root/net/bind9/Makefile
AgeCommit message (Collapse)AuthorFilesLines
2005-06-01Don't set "DIST_SUBDIR". BIND 9.x archives include the version number.tron1-2/+1
2005-06-01Update "bind" package to version 9.3.1. Changes since version 9.3.0:tron1-8/+3
BIND 9.3.1 is a maintenance release, containing fixes for a number of bugs in 9.3.0. libbind: corresponds to that from BIND 8.4.6-REL.
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-03-18- Incooperate change root non-root support from NetBSD's "/etc/rc.d/named"tron1-2/+7
into "named9.sh". - Create a user and a group "named" for running the name server. - Add a message file which encourages to run the name server in a change root non-root configuration. This address PR pkg/14876 by Greg A. Woods. Bump package revision because of the above changes.
2005-03-16- Rename rc script "named" to "named9" to avoid conflicts with NetBSD'stron1-2/+3
builtin script. - Don't set "pidfile" in "named9.sh" because it breaks change rooted configurations. - Disable inlining in "lib/dns/rbt.c" on PowerPC systems because certain GCC version create broken code for that file. Bump package revision because of the above changes.
2005-03-15- Reorder assignment to fix "pkglint" warnings.tron1-15/+7
- Use RCD_SCRIPTS mechanism to install startup scripts as suggested by Greg A. Woods in PR pkg/19099.
2005-01-26Apply ISC patch to fix a potential DoS in BIND 9.3.0 reported in VU#938617.tron1-3/+7
Bump package version number to 9.3.0pl1 because of this.
2004-12-29Use VARBASE.minskim1-2/+2
2004-12-18BIND 9.3.0 dies right after launch on VAX and m68k when threading isjklos1-2/+4
enabled. Until this is fixed, we'll turn off threading for VAX and m68k. PowerPC has some other issue, and i386 and SPARC appear to work fine with threading.
2004-10-03Update "bind9" package to version 9.3.0. Changes since version 9.2.3:tron1-4/+3
- DNSSEC is now DS based (RFC 3658). See also RFC 3845, doc/draft/draft-ietf-dnsext-dnssec-*. - DNSSEC lookaside validation. - check-names is now implemented. - rrset-order in more complete. - IPv4/IPv6 transition support, dual-stack-servers. - IXFR deltas can now be generated when loading master files, ixfr-from-differences. - It is now possible to specify the size of a journal, max-journal-size. - It is now possible to define a named set of master servers to be used in masters clause, masters. - The advertised EDNS UDP size can now be set, edns-udp-size. allow-v6-synthesis has been obsoleted. NOTE: * Zones containing MD and MF will now be rejected. * dig, nslookup name. now report "Not Implemented" as NOTIMP rather than NOTIMPL. This will have impact on scripts that are looking for NOTIMPL. - libbind: corresponds to that from BIND 8.4.5.
2004-10-03Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10tv1-2/+2
in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
2004-08-27Replace RPATH_FLAG with LINKER_RPATH_FLAG and COMPILER_RPATH_FLAG,jlam1-2/+2
which are the full option names used to set rpath directives for the linker and the compiler, respectively. In places were we are invoking the linker, use "${LINKER_RPATH_FLAG} <path>", where the space is inserted in case the flag is a word, e.g. -rpath. The default values of *_RPATH_FLAG are set by the compiler/*.mk files, depending on the compiler that you use. They may be overridden on a ${OPSYS}-specific basis by setting _OPSYS_LINKER_RPATH_FLAG and _OPSYS_COMPILER_RPATH_FLAG, respectively. Garbage-collect _OPSYS_RPATH_NAME and _COMPILER_LD_FLAG.
2004-04-15Bump package revision after recent package list changes because oldertron1-3/+2
version of the package miss an important shared library.
2004-04-14Convert to buildlink3.snj1-4/+4
2004-04-06Build and install BIND9 resolver in ${prefix}/include/bind/ andmanu1-2/+2
${prefix}/lib/libbind.a , just like the BIND8 package does.
2004-03-26PKGREVISION bump after openssl-security-fix-update to 0.9.6m.wiz1-2/+2
Buildlink files: RECOMMENDED version changed to current version.
2004-02-14LIBTOOL_OVERRIDE and SHLIBTOOL_OVERRIDE are now lists of shell globsjlam1-3/+1
relative to ${WRKSRC}. Remove redundant LIBTOOL_OVERRIDE settings that are automatically handled by the default setting in bsd.pkg.mk.
2003-12-28Make "${IPV6H}" substitution in package list more efficient.tron1-4/+3
2003-11-12PKGREVISION++ after openssl update.jschauma1-1/+2
2003-10-27upgrade to 9.2.3.itojun1-5/+5
If you have installed BIND 9.1.3-P1, BIND 9.1.3-P2, BIND 9.2.2-P1, BIND 9.2.2-P2, BIND 9.2.3rc2 or BIND 9.2.3rc3 it is recommended that you upgrade. These versions generate false positives when applying delegation-only tests. --- 9.2.3 released --- 1525. [bug] dns_cache_create() could trigger a REQUIRE failure in isc_mem_put() during error cleanup. 1524. [port] AIX needs to be able to resolve all symbols when creating shared libraries (--with-libtool). 1523. [bug] Fix race condition in rbtdb. [RT# 9189] 1522. [bug] dns_db_findnode() relax the requirements on 'name'. [RT# 9286] 1518. [bug] dns_nxt_buildrdata(), and hence dns_nxt_build(), contained a off-by-one error when working out the number of octets in the bitmap. 1514. [bug] named: isc_hash_destroy() was being called too early. [RT #9160] 1513. [doc] Add "US" to root-delegation-only exclude list. --- 9.2.3rc4 released --- 1512. [bug] Extend the delegation-only logging to return query type, class and responding nameserver. 1511. [bug] delegation-only was generating false positives on negative answers from subzones. --- 9.2.3rc3 released --- 1510. [func] New view option "root-delegation-only". Apply delegation-only check to all TLDs and root. Note there are some TLDs that are NOT delegation only (e.g. DE, LV, US and MUSEUM) these can be excluded from the checks by using exclude. root-delegation-only exclude { "DE"; "LV"; "US"; "MUSEUM"; }; 1509. [bug] Hint zones should accept delegation-only. Forward zone should not accept delegation-only. 1508. [bug] Don't apply delegation-only checks to answers from forwarders. 1507. [bug] Handle BIND 8 style returns to NS queries to parents when making delegation-only checks. 1506. [bug] Wrong return type for dns_view_isdelegationonly(). --- 9.2.3rc2 released --- 1505. [bug] Uninitialised rdataset in sdb. [RT #8750] 1504. [func] New zone type "delegation-only". 1503. [port] win32: install libeay32.dll outside of system32. (9.2.2-P2 is somewhere around here)
2003-09-22Update bind9 package to 9.2.2p3 (9.2.2-P3).taca1-4/+4
--- 9.2.2-P3 released --- 1512. [bug] Extend the delegation-only logging to return query type, class and responding nameserver. 1511. [bug] delegation-only was generating false positives on negative answers from subzones.
2003-09-209.2.2-P2itojun1-8/+4
--- 9.2.2-P2 released --- 1509. [bug] Hint zones should accept delegation-only. Forward zone should not accept delegation-only. 1508. [bug] Don't apply delegation-only checks to answers from forwarders. 1507. [bug] Handle BIND 8 style returns to NS queries to parents when making delegation-only checks. 1506. [bug] Wrong return type for dns_view_isdelegationonly().
2003-09-17upgrade to 9.2.2p1.itojun1-1/+6
--- BIND 9.2.2-P1 is now available. In response to high demand from our users, ISC is releasing a patch for BIND to support the declaration of "delegation-only" zones in caching/recursive name servers. Briefly, a zone which has been declared "delegation-only" will be effectively limited to containing NS RRs for subdomains, but no actual data outside its apex (for example, its SOA RR and apex NS RRset). This can be used to filter out "wildcard" or "synthesized" data from NAT boxes or from authoritative name servers whose undelegated (in-zone) data is of no interest.
2003-03-14(1) Publicly export the value of _OPSYS_RPATH_NAME as RPATH_FLAG;jlam1-2/+2
Makefiles simply need to use this value often, for better or for worse. (2) Create a new variable FIX_RPATH that lists variables that should be cleansed of -R or -rpath values if ${_USE_RPATH} is "no". By default, FIX_RPATH contains LIBS, X11_LDFLAGS, and LDFLAGS, and additional variables may be appended from package Makefiles.
2003-03-10Make the USE_INET6/IPV6H handling a bit more readable.hubertf1-3/+4
(won't fix PR 20019 though...)
2003-03-05Update bind9 to 9.2.2hubertf1-2/+2
Changes: many, at least 1 security related.
2002-10-06buildlink1 -> buildlink2seb1-3/+12
Add support for native pthread via mk/pthread.buildlink2.mk
2002-08-26use USE_INET6 to determine whether or not to installgrant1-3/+3
include/isc/ipv6.h
2002-08-26this extra doublequote causes "make plist" to failitojun1-2/+2
2002-08-20deal with optional installation of ipv6.h on non-ipv6 platforms.grant1-1/+8
2002-07-24override built-in libtool to fix shared library major versions ongrant1-1/+5
non-NetBSD systems.
2002-07-19Use INSTALL_SCRIPT to install the startup files.martti1-3/+3
2002-06-17Use openssl buildlink.mk instead of USE_SSL.wiz1-8/+9
2002-05-04Update bind9 pacakge to 9.2.1 (with pkglint free).taca1-3/+3
--- 9.2.1 released --- 1271. [port] win32: a make file contained absolute version specific references. 1269. [bug] Missing masters clause was not handled gracefully. [RT #2703] 1244. [bug] Receiving a TCP message from a blackhole address would prevent further messages being received over that interface. 1178. [bug] Follow and cache (if appropriate) A6 and other data chains to completion in the additional section. --- 9.2.1rc2 released --- 1240. [bug] It was possible to leak zone references by specifying an incorrect zone to rndc. 1239. [bug] Under certain circumstances named could continue to use a name after it had been freed triggering INSIST() failures. [RT #2614] 1238. [bug] It is possible to lockup the server when shutting down if notifies are being processed. [RT #2591] 1237. [bug] nslookup: "set q=type" failed. 1236. [bug] dns_rdata{class,type}_fromtext() didn't handle non NULL terminated text regions. [RT #2588] 1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL. 1231. [port] HPUX 11.11 recvmsg() can return spurious EADDRNOTAVAIL. 1230. [bug] isccc_cc_isreply() and isccc_cc_isack() were broken. 1229. [bug] named would crash if it received a TSIG signed query as part of an AXFR response. [RT #2570] 1228. [bug] 'make install' did not depend on 'make all'. [RT #2559] 1227. [bug] dns_lex_getmastertoken() now returns ISC_R_BADNUMBER if a number was expected and some other token was found. [RT#2532] 1222. [bug] Specifying 'port *' did not always result in a system selected (non-reserved) port being used. [RT #2537] 1221. [bug] Zone types 'master', 'slave' and 'stub' were not being compared case insensitively. [RT #2542] 1218. [bug] Named incorrectly returned SERVFAIL rather than NOTAUTH when there was a TSIG BADTIME error. [RT #2519] 1216. [bug] Multiple server clauses for the same server were not reported. [RT #2514] 1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1 1214. [bug] Win32: isc_file_renameunique() could leave zero length files behind. 1212. [port] libbind: 64k answer buffers were causing stack space to be exceeded for certian OS. Use heap space instead. 1211. [bug] dns_name_fromtext() incorrectly handled certain valid octal bitlabels. [RT #2483] 1210. [bug] libbind: getnameinfo() failed to lookup IPv4 mapped / compatible addresses. [RT #2461] 1208. [bug] dns_master_load*() failed to log a error message if an error was detected when parsing the ownername of a record. [RT #2448] --- 9.2.1rc1 released --- 1207. [bug] libbind: getaddrinfo() could call freeaddrinfo() with an invalid pointer. 1206. [bug] SERVFAIL and NOTIMP responses to an EDNS query should trigger a non-EDNS retry. 1205. [bug] OPT, TSIG and TKEY cannot be used to set the "class" of the message. [RT #2449] 1204. [bug] libbind: res_nupdate() failed to update the name server addresses before sending the update. 1201. [bug] Require that if 'callbacks' is passed to dns_rdata_fromtext(), callbacks->error and callbacks->warn are initialized. 1200. [bug] Log 'errno' that we are unable to convert to isc_result_t. [RT #2404] 1198. [bug] OPT printing style was not consistant with the way the header fields are printed. The DO bit was not reported if set. Report if any of the MBZ bits are set. 1197. [bug] Attempts to define the same acl multiple times were not detected. 1196. [contrib] update mdnkit to 2.2.3. 1195. [bug] Attempts to redefine builtin acls should be caught. [RT #2403] 1194. [bug] Not all duplicate zone definitions were being detected at the named.conf checking stage. [RT #2431] 1193. [bug] Best effort parsing didn't handle packet truncation. 1191. [bug] A dynamic update removing the last non-apex name in a secure zone would fail. [RT #2399] 1189. [bug] On some systems, malloc(0) returns NULL, which could cause the caller to report an out of memory error. [RT #2398] 1188. [bug] Dynamic updates of a signed zone would fail if some of the zone private keys were unavailable. 1186. [bug] isc_hex_tobuffer(,,length = 0) failed to unget the EOL token when reading to end of line. 1185. [bug] libbind: don't assume statp->_u._ext.ext is valid unless RES_INIT is set when calling res_*init(). 1184. [bug] libbind: call res_ndestroy() if RES_INIT is set when res_*init() is called. 1183. [bug] Handle ENOSR error when writing to the internal control pipe. [RT #2395] 1182. [bug] The server could throw an assertion failure when constructing a negative response packet. 1176. [doc] Document that allow-v6-synthesis is only performed for clients that are supplied recursive service. [RT #2260] 1175. [bug] named-checkzone failed to call dns_result_register() at startup which could result in runtime exceptions when printing "out of memory" errors. [RT #2335] 1174. [bug] Win32: add WSAECONNRESET to the expected errors from connect(). [RT #2308] 1173. [bug] Potential memory leaks in isc_log_create() and isc_log_settag(). [RT #2336] 1172. [doc] Add CERT, GPOS, KX, NAPTR, NSAP, PX and TXT to table of RR types in ARM. 1170. [bug] Don't attempt to print the token when a I/O error occurs when parsing named.conf. [RT #2275] 1168. [bug] Empty also-notify clauses were not handled. [RT #2309] 1167. [contrib] nslint-2.1a3 (from author). 1166. [bug] "Not Implemented" should be reported as NOTIMP, not NOTIMPL. [RT #2281] 1165. [bug] We were rejecting notify-source{-v6} in zone clauses. 1164. [bug] Empty masters clauses in slave / stub zones were not handled gracefully. [RT #2262] 1162. [bug] The allow-notify option was not accepted in slave zone statements. 1161. [bug] named-checkzone looped on unbalanced brackets. [RT #2248] 1160. [bug] Generating Diffie-Hellman keys longer than 1024 bits could fail. [RT #2241] 1156. [port] The configure test for strsep() incorrectly succeeded on certain patched versions of AIX 4.3.3. [RT #2190] 1154. [bug] Don't attempt to obtain the netmask of a interface if there is no address configured. [RT #2176] 1152. [bug] libbind: read buffer overflows. 1144. [bug] rndc-confgen would crash if both the -a and -t options were specified. [RT #2159] 1142. [bug] dnssec-signzone would fail to delete temporary files in some failure cases. [RT #2144] 1141. [bug] When named rejected a control message, it would leak a file descriptor and memory. It would also fail to respond, causing rndc to hang. [RT #2139, #2164] 1140. [bug] rndc-confgen did not accept IPv6 addresses as arguments to the -s option. [RT #2138] 1136. [bug] CNAME records synthesized from DNAMEs did not have a TTL of zero as required by RFC2672. [RT #2129] 1125. [bug] rndc: -k option was missing from usage message. [RT #2057] 1124. [doc] dig: +[no]dnssec, +[no]besteffort and +[no]fail are now documented. [RT #2052] 1123. [bug] dig +[no]fail did not match description. [RT #2052] 1109. [bug] nsupdate accepted illegal ttl values. 1108. [bug] On Win32, rndc was hanging when named was not running due to failure to select for exceptional conditions in select(). [RT #1870] 1081. [bug] Multicast queries were incorrectly identified based on the source address, not the destination address. 1072. [bug] The TCP client quota could be exceeded when recursion occurred. [RT #1937] 1071. [bug] Sockets listening for TCP DNS connections specified an excessive listen backlog. [RT #1937] 1070. [bug] Copy DNSSEC OK (DO) to response as specified by draft-ietf-dnsext-dnssec-okbit-03.txt. 1014. [bug] Some queries would cause statistics counters to increment more than once or not at all. [RT #1321] 1012. [bug] The -p option to named did not behave as documented. 988. [bug] 'additional-from-auth no;' did not work reliably in the case of queries answered from the cache. [RT #1436] 995. [bug] dig, host, nslookup: using a raw IPv6 address as a target address should be fatal on a IPv4 only system.
2001-11-27upgrade to 9.2.0.itojun1-8/+3
list of changes between 9.1.3 to 9.2.0 is available at: http://www.isc.org/products/BIND/bind9.html
2001-07-04upgrade to 9.1.3 from ISC. changes between 9.1.2 to 9.1.3:itojun1-3/+3
--- 9.1.3 released --- --- 9.1.3rc3 released --- 911. [bug] Fail gracefully with multiple hint zones. [RT #1433] 910. [port] Some pre-RFC2133 IPv6 implementations do not define IN6ADDR_ANY_INIT. [RT #1416] --- 9.1.3rc2 released --- 904. [bug] The server would leak memory if attempting to use an expired TSIG key. [RT #1406] 903. [bug] dig should not crash when receiving a TCP packet of length 0. 902. [bug] The -d option was ignored if both -t and -g were also specified. 901. [cleanup] The man pages no longer have empty lines outside of literal blocks. 898. [bug] "dig" failed to set a nonzero exit status on UDP query timeout. [RT #1323] 894. [bug] When using the DNSSEC tools, a message intended to warn when the keyboard was being used because of the lack of a suitable random device was not being printed. 892. [bug] The server could attempt to refresh a zone that was being loaded, causing an assertion failure. [RT #1335] 891. [bug] Return an error when a SIG(0) signed response to an unsigned query is seen. This should actually do the verification, but it's not currently possible. [RT #1391] 888. [bug] Don't die when using TKEY to delete a nonexistent TSIG key. [RT #1392] 860. [interop] Drop cross class glue in zone transfers. 852. [bug] Handle responses from servers which do not now about IXFR. 850. [bug] dns_rbt_findnode() would not find nodes that were split on a bitstring label somewhere other than in the last label of the node. [RT #1351] 705. [port] Work out resource limit type for use where rlim_t is not available. [RT #695] 704. [port] RLIMIT_NOFILE is not available on all platforms. 703. [port] sys/select.h is needed on older platforms. [RT #695] --- 9.1.3rc1 released --- 831. [bug] The configure script tried to determine endianness before making its final decision on which C compiler to use, causing Solaris/x86 systems with gcc to be incorrectly identified as big-endian. [RT #1315] 827. [bug] When an IXFR protocol error occurs, the slave should retry with AXFR. 826. [bug] Some IXFR protocol errors were not detected. 825. [bug] zone.c:ns_query() detached from the wrong zone reference. [RT #1264] 824. [bug] Correct line numbers reported by dns_master_load(). [RT #1263] 822. [bug] Sending nxrrset prerequisites would crash nsupdate. [RT #1248] 806. [bug] DNS_R_SEENINCLUDE was failing to propagate back up the calling stack to the zone maintence level, causing zones to not reload when an included file was touched but the top-level zone file was not. 771. [cleanup] TSIG errors related to unsynchronized clocks are logged better. [RT #919] 734. [bug] An attempt to re-lock the zone lock could occur if the server was shutdown during a zone tranfer. [RT #830] 712. [bug] Sending a large signed update message caused an assertion failure. [RT #718] 669. [bug] dnssec-keygen now makes the public key file non-world-readable for symmetric keys. [RT #403]
2001-05-06upgrade to 9.1.2.itojun1-3/+3
--- 9.1.2 released --- --- 9.1.2rc1 released --- 820. [bug] Name server address lookups failed to follow A6 chains into the glue of local authoritative zones. 819. [bug] In certain cases, the resolver's attempts to restart an address lookup at the root could cause the fetch to deadlock (with itself) instead of restarting. [RT #1225] 818. [bug] Certain pathological responses to ANY queries could cause an assertion failure. [RT #1218] 816. [bug] Report potential problems with log file accessibility at configuration time, since such problems can't reliably be reported at the time they actually occur. 815. [bug] If a log file was specified with a path separator character (i.e. "/") in its name and the directory did not exist, the log file's name was treated as though it were the directory name. [RT #1189] 814. [bug] Socket objects left over from accept() failures were incorrectly destroyed, causing corruption of socket manager data structures. 813. [bug] File descriptors exceeding FD_SETSIZE were handled badly. [RT #1192] 812. [bug] dig sometimes printed incomplete IXFR responses due to an uninitialized variable. [RT #1188] 811. [bug] Parentheses were not quoted in zone dumps. [RT #1194] 810. [bug] The signer name in SIG records was not properly downcased when signing/verifying records. [RT #1186] 807. [bug] When setting up TCP connections for incoming zone transfers, the transfer-source port was not ignored like it should be. 804. [bug] Attempting to obtain entropy could fail in some situations. This would be most common on systems with user-space threads. [RT #1131] 802. [bug] DNSSEC key tags were computed incorrectly in almost all cases. [RT #1146] 801. [bug] nsupdate should treat lines beginning with ';' as comments. [RT #1139] 800. [bug] dnssec-signzone produced incorrect statistics for large zones. [RT #1133] 799. [bug] The ADB didn't find AAAA glue in a zone unless A6 glue was also present.
2001-04-12on bind9 mailing list isc/niminum people recommended against the use ofitojun1-4/+2
/dev/urandom.
2001-03-29upgrade to 9.1.1. functionality equal to 9.1.1rc7 (= 9.1.0.7)itojun1-4/+3
2001-03-27upgrade to 9.1.1rc7.itojun1-4/+4
--- 9.1.1rc7 released --- 791. [bug] The control channel did not work over IPv6. 790. [bug] Wildcards created using dynamic update or IXFR could fail to match. [RT #1111] 787. [bug] The DNSSEC tools failed to downcase domain names when mapping them into file names. 786. [bug] When DNSSEC signing/verifying data, owner names were not properly downcased. --- 9.1.1rc6 released --- 785. [bug] A race condition in the resolver could cause an assertion failure. [RT #673, #872, #1048] 784. [bug] nsupdate and other programs would not quit properly if some signals were blocked by the caller. [RT #1081] 783. [bug] Following CNAMEs could cause an assertion failure when either using an sdb database or under very rare conditions. 780. [bug] Error handling code dealing with out of memory or other rare errors could lead to assertion failures by calling functions on unitialized names. [RT #1065]
2001-03-16upgrade to 9.1.1rc5 (version # is 9.1.0.5 to prevent going backward)itojun1-4/+4
--- 9.1.1rc5 released --- 778. [bug] When starting cache cleaning, cleaning_timer_action() returned without first pausing the iterator, which could cause deadlock. [RT #998] 777. [bug] An empty forwarders list in a zone failed to override global forwarders. [RT #995] 775. [bug] Address match lists with invalid netmasks caused the configuration parser to abort with an assertion failure. [RT #996] 772. [bug] Owner names could be incorrectly omitted from cache dumps in the presence of negative caching entries. [RT #991] 686. [bug] dig and nslookup can now be properly aborted during blocking operations. [RT #568]
2001-03-07upgrade to 9.1.1rc4.itojun1-4/+4
--- 9.1.1rc4 released --- 767. [bug] The configuration parser handled invalid ports badly. [RT #961] 766. [bug] A few cases in query_find() could leak fname. This would trigger the mpctx->allocated == 0 assertion when the server exited. [RT #739, #776, #798, #812, #818, #821, #845, #892, #935, #966] 759. [bug] The resolver didn't turn off "avoid fetches" mode when restarting, possibly causing resolution to fail when it should not. This bug only affected platforms which support both IPv4 and IPv6. [RT #927] 758. [bug] The "avoid fetches" code did not treat negative cache entries correctly, causing fetches that would be useful to be avoided. This bug only affected platforms which support both IPv4 and IPv6. [RT #927] 756. [bug] dns_zone_load() could "return" success when no master file was configured. 755. [bug] Fix incorrectly formatted log messages in zone.c. 709. [bug] ANY or SIG queries for data with a TTL of 0 would return SERVFAIL. [RT #620]
2001-02-27upgrade to 9.1.1rc3 (package version # is 9.1.0.3 as rc3 is prior to 9.1.1).itojun1-7/+6
--- 9.1.1rc3 released --- 754. [bug] Certain failure conditions sending UDP packets could cause the server to retry the transmission indefinitely. [RT #902] 753. [bug] dig, host, and nslookup would fail to contact a remote server if getaddrinfo() returned an IPv6 address on a system that doesn't support IPv6. [RT #917] 750. [bug] A query should not match a DNAME whose trust level is pending. [RT #916] 749. [bug] When a query matched a DNAME in a secure zone, the server did not return the signature of the DNAME. [RT #915] 747. [bug] The code to determine whether an IXFR was possible did not properly check for a database that could not have a journal. [RT #865, #908] 746. [bug] The sdb didn't clone rdatasets properly, causing a crash when the server followed delegations. [RT #905] 744. [bug] When returning DNS_R_CNAME or DNS_R_DNAME as the result of an ANY or SIG query, the resolver failed to setup the return event's rdatasets, causing an assertion failure in the query code. [RT #881] 743. [bug] Receiving a large number of certain malformed answers could cause named to stop responding. [RT #861] 742. [bug] dig +domain did not work. [RT #850] 738. [bug] If a non-threadsafe sdb driver supported AXFR and received an AXFR request, it would deadlock or die with an assertion failure. [RT #852] 737. [port] stdtime.c failed to compile on certain platforms. 648. [port] Add support for pre-RFC2133 IPv6 implementations. --- 9.1.1rc2 released --- 733. [bug] Reference counts of dns_acl_t objects need to be locked but were not. [RT #801, #821] 708. [bug] When building with --with-openssl, the openssl headers included with BIND 9 should not be used. [RT #702]
2001-02-25Cleanup MKDIR usage => INSTALL_*_DIRhubertf1-6/+6
XXX need to teach pkglint to be more picky about this
2001-02-17Update to new COMMENT style: COMMENT var in Makefile instead of pkg/COMMENT.wiz1-1/+2
2001-02-13build it with internal openssl. 9.1.1rc1 has issues with include search path.itojun1-3/+4
2001-02-08use 9.1.1rc1. we upgrade to release candidate for important fixesitojun1-2/+10
(change id 727 is very important). hack: package version number is set to 9.1.0.1, as 9.1.1rc1 is prior to 9.1.1. 729. [port] pthread_setconcurrency() needs to be called on Solaris. 727. [port] Work around OS bug where accept() succeeds but fails to fill in the peer address of the accepted connection, by treating it as an error rather than an assertion failure. [RT #809] 723. [bug] Referrals whose NS RRs had a 0 TTL caused the resolver to return DNS_R_SERVFAIL. [RT #783] 720. [bug] Server could enter infinite loop in dispatch.c:do_cancel(). [RT #743] 719. [bug] Rapid reloads could trigger an assertion failure. [RT #743, #763] 717. [bug] Certain TKEY processing failure modes could reference an uninitialized variable, causing the server to crash. [RT #750] 716. [bug] The first line of a $INCLUDE master file was lost if an origin was specified. [RT #744] 715. [bug] Resolving some A6 chains could cause an assertion failure in adb.c. [RT #738] 711. [bug] The libisc and liblwres implementations of inet_ntop contained an off by one error. 706. [bug] Zones with an explicit "allow-update { none; };" were considered dynamic and therefore not reloaded on SIGHUP or "rndc reload". 700. [bug] $GENERATE range check was wrong. [RT #688] 698. [bug] Aborting nsupdate with ^C would lead to several race conditions. 699. [bug] The lexer mishandled empty quoted strings. [RT #694] 694. [bug] $GENERATE did not produce the last entry. [RT #682, #683] 693. [bug] An empty lwres statement in named.conf caused the server to crash while loading. 692. [bug] Deal with systems that have getaddrinfo() but not gai_strerror(). [RT #679] 691. [bug] Configuring per-view forwarders caused an assertion failure. [RT #675, #734]
2001-02-04add rc.d/lwresditojun1-1/+5
2001-01-31make the rc.d script's name a bit more obvioushubertf1-2/+2
2001-01-28use OpenSSL shipped with netbsd 1.5, or in pkgsrc/security/openssl.itojun1-2/+5