diff options
author | erwin <erwin@FreeBSD.org> | 2012-12-07 12:39:58 +0000 |
---|---|---|
committer | erwin <erwin@FreeBSD.org> | 2012-12-07 12:39:58 +0000 |
commit | 5d8c8fc50b9836a3c4a9d975721d7682dd286965 (patch) | |
tree | c3abb28c9e8cb3396d1d00b0af4f9a474adaf5f5 /lib/bind/config.h | |
parent | d4467dc03357aa391339c667b9bce1af3f0455d9 (diff) | |
parent | 4d1484242d381404f6b827320dad3260370137c8 (diff) | |
download | FreeBSD-src-5d8c8fc50b9836a3c4a9d975721d7682dd286965.zip FreeBSD-src-5d8c8fc50b9836a3c4a9d975721d7682dd286965.tar.gz |
Update to 9.8.4-P1.
Security Fixes
Prevents named from aborting with a require assertion failure
on servers with DNS64 enabled. These crashes might occur as a
result of specific queries that are received.
New Features
* Elliptic Curve Digital Signature Algorithm keys and signatures in
DNSSEC are now supported per RFC 6605. [RT #21918]
Feature Changes
* Improves OpenSSL error logging [RT #29932]
* nslookup now returns a nonzero exit code when it is unable to get
an answer. [RT #29492]
Other critical bug fixes are included.
Approved by: delphij (mentor)
MFC after: 3 days
Security: CVE-2012-5688
Sponsored by: DK Hostmaster A/S
Diffstat (limited to 'lib/bind/config.h')
-rw-r--r-- | lib/bind/config.h | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/lib/bind/config.h b/lib/bind/config.h index 22d76bc..5e9d74b 100644 --- a/lib/bind/config.h +++ b/lib/bind/config.h @@ -3,7 +3,7 @@ /* config.h. Generated from config.h.in by configure. */ /* config.h.in. Generated from configure.in by autoheader. */ /* - * Copyright (C) 2004, 2005, 2007, 2008 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004, 2005, 2007, 2008, 2012 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 1999-2003 Internet Software Consortium. * * Permission to use, copy, modify, and/or distribute this software for any @@ -141,6 +141,9 @@ int sigwait(const unsigned int *set, int *sig); /* Define if OpenSSL includes DSA support */ #define HAVE_OPENSSL_DSA 1 +/* Define if OpenSSL includes ECDSA support */ +#define HAVE_OPENSSL_ECDSA 1 + /* Define to the length type used by the socket API (socklen_t, size_t, int). */ #define ISC_SOCKADDR_LEN_T socklen_t @@ -202,6 +205,9 @@ int sigwait(const unsigned int *set, int *sig); /* Define to 1 if you have the `EVP_sha256' function. */ #define HAVE_EVP_SHA256 1 +/* Define to 1 if you have the `EVP_sha384' function. */ +#define HAVE_EVP_SHA384 1 + /* Define to 1 if you have the `EVP_sha512' function. */ #define HAVE_EVP_SHA512 1 |