From 733ece59b03e12419b5cd0c42e1977dca69433ce Mon Sep 17 00:00:00 2001 From: ryoon Date: Sat, 9 Dec 2023 06:10:07 +0000 Subject: [PATCH] knot: Update to 3.3.2 Changelog: Version 3.3.2 Friday, October 20, 2023 Features: + knotd: support for IXFR from AXFR computation (see 'zone.ixfr-from-axfr') + knotd: support benevolent IXFR (see 'zone.ixfr-benevolent') + knot-exporter: new configuration option '--no-zone-serial' #880 Improvements: + libs: upgraded embedded libngtcp2 to 1.0.0 + knotd: added logging of new SOA serial when signing is finished + knotd: unified some XDP-related logging + keymgr: improved error message if a key file is not accessible + keymgr: added offline RRSIGs validation at the end of their validity intervals + kdig: upgraded EDNS presentation format to draft version -02 + kdig: simplified QUIC connection without extra PING frames + kzonecheck: removed requirement that DS is at delegation point + doc: various fixes and improvements Bugfixes: + knotd: logged incorrect new SOA serial if 'zonefile-load: difference' is set #875 + knotd: more signing threads with a PKCS #11 keystore has no effect #876 + knotd: DNAME record returned with query domain name instead of actual name #873 + knotd: failed to import configuration file if mod-geoip is in use #881 + knotd: failed to sign RRSet that fits to 64k only if compressed + knotd: broken zone update context upon failed operation over control interface + keymgr: offline RRSIGs not refreshed if 'rrsig-refresh' is not set + knsupdate: incorrect processing of @ in the delete operation #879 + knot-exporter: failed to parse knotd PIDs on FreeBSD Version 3.2.11 Thursday, October 19, 2023 Improvements: + keymgr: improved error message if a key file is not accessible + keymgr: added offline RRSIGs validation at the end of their validity intervals + doc: fixed some typos Bugfixes: + knotd: DNAME record returned with query domain name instead of actual name #873 + knotd: failed to import configuration file if mod-geoip is in use #881 + knotd: failed to sign RRSet that fits to 64k only if compressed + keymgr: offline RRSIGs not refreshed if 'rrsig-refresh' is not set + knsupdate: incorrect processing of @ in the delete operation #879 Version 3.3.1 Monday, September 11, 2023 Improvements: + knotd: multiple catalog groups per member are tolerated, but only one is used + modules: added const qualifier to various function parameters #877 (Thanks to Robert Edmonds) + libs: upgraded embedded libngtcp2 to 0.19.1 Bugfixes: + knotd: TCP over XDP fails to respond + knotd: server can crash when adjusting a wildcard glue + knotd: failed to forward DDNS if 'zone.master' points to 'remotes' + knotd: broken YAML statistics if more modules are configured #874 + knotd: DDNS forwarding isn't RFC 8945 compliant Version 3.2.10 Sunday, September 10, 2023 Improvements: + knotd: multiple catalog groups per member are tolerated, but only one is used + knotd: server cleans up stale LMDB readers when opening a RW transaction Bugfixes: + knotd: server can crash when adjusting a wildcard glue + knotd: failed to forward DDNS if 'zone.master' points to 'remotes' + knotd: subsequent addition and removal to catalog zone isn't handled properly + knotd: server can crash if a shared module is loaded and dynamic configuration used + knotc: configuration import fails if an explicit shared module is configured + kdig: double-free on some malformed responses over QUIC #869 + kdig: some TLS parameters override QUIC parameters + libs: NULL record with empty RDATA isn't allowed Version 3.3.0 Monday, August 28, 2023 Features: + knotd: full DNS over QUIC (DoQ, RFC 9250) implementation, also without XDP + knotd: bidirectional XFR over QUIC (XoQ) support with opportunistic, strict, and mutual authentication profiles + knotd: automatic reverse PTR records pre-generation (see 'zone.reverse-generate') + knotd: new per zone statistic counters 'zone.size' and 'zone.max-ttl' + knotd: new primary server pinning (see 'zone.master-pin-tolerance') + knotd: new SOA serial modulo policy (see 'zone.serial-modulo') + knotd: new multi-signer operation mode (see 'policy.dnskey-sync' and 'DNSSEC multi-signer') + kdig: support for EDNS presentation format, also in JSON mode (see '+optpresent') + kxdpgun: new TCP/QUIC debug mode 'R' for connection reuse + kxdpgun: new XDP mode parameter '--mode' (Thanks to Jan V?el??k) + kxdpgun: new parameter '--qlog' for qlog destination specification + kzonecheck: new '--print' parameter for dumping the zone on stdout Improvements: + knotd: secondary can be configured not to forward DDNS (see 'zone.ddns-master') + knotd: extended support for UNIX socket configuration (remote, acl) + knotd: stats no longer dump empty or zero counters + knotd: new 'keys-updated' D-Bus event + knotd: added transport protocol information to outgoing event and nameserver logs + knotd: server cleans up stale LMDB readers when opening a RW transaction + knotd,kzonecheck: semantic check allows DS only at delegation point + knotc: new zone backup filters '+quic' and '+noquic' for QUIC key backup + mod-dnstap: DNS over QUIC traffic is marked as QUIC + kxdpgun: QUIC connections are closed by default + libs: upgraded embedded libngtcp2 to 0.18.0 + kdig: QUIC, TLS, or HTTPS protocol is printed in the final statistics + doc: new sections 'DNS over QUIC' and 'DNSSEC multi-signer' + doc: various improvements Bugfixes: + knotd: server can crash if a shared module is loaded and dynamic configuration used + knotd: inaccurate transfer size is logged if EDNS EXPIRE, PADDING, or TSIG is present + knotd: subsequent addition and removal to catalog zone isn't handled properly + knotc: configuration import fails if an explicit shared module is configured + utils: database transactions not properly closed when terminated prematurely + kdig: double-free on some malformed responses over QUIC #869 + kdig: some TLS parameters override QUIC parameters + libs: NULL record with empty RDATA isn't allowed + tests: dthreads destructor test sometimes fails Compatibility: + knotd: responses to forwarded DDNS requests are signed with local TSIG key + knotd: NOTIFY-initiated refresh tries all configured addresses of the remote + knotd: configuration option 'xdp.quic-log' was replaced with 'log.quic' + libs: removed embedded libbpf, an external one is necessary for XDP + libs: DNS over QUIC implementation only supports 'doq' ALPN + ctl: removed 'Version: ' prefix from 'status version' output + modules: reduced parameters of 'knotd_qdata_local_addr()' Packaging: + knot-exporter: Prometheus exporter imported from GitHub + knot-exporter: packages for Debian, Ubuntu, and PyPI + debian,ubuntu: new self-hosted repository (see https://pkg.labs.nic.cz/ doc/) + docker: upgraded to Debian bookworm-slim Version 3.2.9 Thursday, July 27, 2023 Improvements: + keymgr: 'import-pkcs11' not allowed if no PKCS #11 keystore backend is configured + keymgr: more verbose key import errors + doc: extended migration notes + doc: various improvements Bugfixes: + knotd: server may crash when storing changeset of a big zone migrating to/from NSEC3 + knotd: zone refresh loop when all masters are outdated and timers cleared + knotd: failed to active D-Bus notifications if not started as systemd service + kjournalprint: database transaction not properly closed when terminated prematurely --- net/knot/Makefile | 5 ++--- net/knot/distinfo | 9 ++++----- net/knot/patches/patch-configure | 24 ------------------------ 3 files changed, 6 insertions(+), 32 deletions(-) delete mode 100644 net/knot/patches/patch-configure diff --git a/net/knot/Makefile b/net/knot/Makefile index e00a64e52e57..4fd52839a4bf 100644 --- a/net/knot/Makefile +++ b/net/knot/Makefile @@ -1,7 +1,6 @@ -# $NetBSD: Makefile,v 1.79 2023/11/08 13:20:28 wiz Exp $ +# $NetBSD: Makefile,v 1.80 2023/12/09 06:10:07 ryoon Exp $ -DISTNAME= knot-3.2.8 -PKGREVISION= 3 +DISTNAME= knot-3.3.2 CATEGORIES= net MASTER_SITES= https://secure.nic.cz/files/knot-dns/ EXTRACT_SUFX= .tar.xz diff --git a/net/knot/distinfo b/net/knot/distinfo index e0e9fe1a26c1..36d8792b6663 100644 --- a/net/knot/distinfo +++ b/net/knot/distinfo @@ -1,7 +1,6 @@ -$NetBSD: distinfo,v 1.44 2023/07/07 10:53:14 ryoon Exp $ +$NetBSD: distinfo,v 1.45 2023/12/09 06:10:07 ryoon Exp $ -BLAKE2s (knot-3.2.8.tar.xz) = c5bce715f611fe8495e7ba31fed27f2e152a10b16a4aa13a2c98732a912a6dae -SHA512 (knot-3.2.8.tar.xz) = 792e7d062ef018530594abc26b90fcd023758cb88b77f971460ca73de36121d1faf84fe55d5f24e72cc07adcc48115c24b6c60817d90f5620cdca13f7782e67d -Size (knot-3.2.8.tar.xz) = 1681556 bytes -SHA1 (patch-configure) = cf0e2a973380dc7123835e249eea7d3bac46c7e9 +BLAKE2s (knot-3.3.2.tar.xz) = ebaf73f0b27880b0cad07191f118d05e19809ee8c5042b18384d678dd55a0167 +SHA512 (knot-3.3.2.tar.xz) = c19a11db43b208a6aabfd96e0c31856affdcef1b599425343663fd6e00bacc964f197de7e5d732d7180219ba57b6e426afd2b762c7528cb50755f81429aaac1a +Size (knot-3.3.2.tar.xz) = 1580800 bytes SHA1 (patch-samples_Makefile.in) = 499b8742dbd948e489b01d512bc7a8d8e4fe2e7b diff --git a/net/knot/patches/patch-configure b/net/knot/patches/patch-configure deleted file mode 100644 index 79f7f9d5c902..000000000000 --- a/net/knot/patches/patch-configure +++ /dev/null @@ -1,24 +0,0 @@ -$NetBSD: patch-configure,v 1.3 2023/01/08 20:40:20 ryoon Exp $ - -* Improve POSIX shell portability. - ---- configure.orig 2022-11-20 07:16:12.000000000 +0000 -+++ configure -@@ -14729,7 +14729,7 @@ fi - - - --if test "$enable_xdp" == "yes"; then : -+if test "$enable_xdp" = "yes"; then : - - - pkg_failed=no -@@ -14802,7 +14802,7 @@ else - $as_echo "yes" >&6; } - enable_xdp=libxdp - fi -- if test "$enable_xdp" == "libxdp"; then : -+ if test "$enable_xdp" = "libxdp"; then : - - - $as_echo "#define USE_LIBXDP 1" >>confdefs.h