| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
| |
the problems related to the handling of broken DNSSEC trust chains.
This fix is only relevant for those who have DNSSEC validation
enabled and configure trust anchors from third parties, either
manually, or through a system like DLV.
|
|
|
|
|
|
|
|
|
|
|
|
| |
security patches to the 9.6.1 version, as well as many other bug fixes.
This version also incorporates a different fix for the problem we had
patched in contrib/bind9/bin/dig/dighost.c, so that file is now back
to being the same as the vendor version.
Due to the fact that the DNSSEC algorithm that will be used to sign the
root zone is only included in this version and in 9.7.x those who wish
to do validation MUST upgrade to one of these prior to July 2010.
|
|
|
|
| |
9.6.1-P3 update
|
|
|
|
|
|
| |
related to DNSSEC validation on a resolving name server that allows
access to untrusted users. If your system does not fall into all 3 of
these categories you do not need to update immediately.
|
|
|
|
|
|
|
| |
WITH_BIND_IDN
WITH_BIND_LARGE_FILE
WITH_BIND_SIGCHASE
WITH_BIND_XML
|
|\
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
lots of new features compared to 9.4.x, including:
Full NSEC3 support
Automatic zone re-signing
New update-policy methods tcp-self and 6to4-self
DHCID support.
More detailed statistics counters including those supported in BIND 8.
Faster ACL processing.
Efficient LRU cache-cleaning mechanism.
NSID support.
|
| |
| |
| |
| |
| | |
The libbind library is no longer distributed as part of the main
BIND package, and we never built it in any case.
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| | |
are no longer updated.
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
This change was erronously ommitted from the r185690, and attempt
to simply add the prototype to string.h has revealed that several
contributed programs defined local prototypes for strndup(), controlled
by autoconfed config.h. So, manually change #undef HAVE_STRNDUP to
#define HAVE_STRNDUP 1. Next import of the corresponding program would
regenerate config.h, overriding the changes in this commit.
No objections from: kan
|
| |
|
| |
|
| |
|
|
|
|
| |
the platform specific file that imp provided.
|
|
|
|
|
|
| |
from ru@.
Take a guess at what might work on arm to try and fix the build.
|
| |
|
|
|
|
|
| |
This includes a return to building with threads, since one of the
major focuses of the 9.4.x branch is to improve thread performance.
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html
The src.conf(5) manpage is to follow in a few days.
Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine)
|
|
|
|
| |
in src/contrib/bind9/FREEBSD-Upgrade for the 9.2.3 import
|
| |
|
|
|
|
|
|
|
|
| |
than increase it, and seems to be the cause of the memory leaks which some
users have reported.
Requested by: dougb
MFC after: 5 days
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
NOLIBPTHREAD -> NO_LIBPTHREAD
NOLIBTHR -> NO_LIBTHR
|
|
|
|
| |
any fake value.
|
|
|
|
| |
any fake value.
|
|
|
|
|
|
|
|
| |
1. Install man files and links for the lwres library.
2. Fix the path in various files to say /etc/namedb/ instead of just /etc.
3. Correctly install the conf file man pages for named and rndc.
|
|
|
|
|
|
| |
better than mine, and why to wait for review.
Submitted by: ru
|
|
|
|
|
|
|
|
|
| |
to match how similar syntax is used in the ports system. Thanks to kris
for pointing out my mistake here.
Install the lwres library unless the user defines NO_BIND, or the new
knob, NO_BIND_LIBS_LWRES. There is at least one potential customer
for this library in the wings. Thanks to nectar for the reminder.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
but have a knob (WANT_BIND_LIBS) to build and install them in /usr/lib
and /usr/include. Rumors are that this may be useful at a later point,
let's see.
What this really means is that all BIND libraries are now internal to
buildworld (by default, unless WANT_BIND_LIBS is defined), and linked
statically into various BIND executables.
While here, removed redundant -I's from CFLAGS in lib/bind makefiles.
Sponsored by: des
OK'ed by: dougb
|
| |
|
|
|
|
| |
Reminded by: ru@
|
| |
|
|
|
|
| |
things like "run/named.pid" to it.
|
|
|
|
|
|
|
| |
full KSE support still have -lpthread as an alias for -lc_r. The only
thing that's different is the name of the knob that turns it off.
Pointed out by: ru@
|
|
|
|
|
|
|
|
| |
POSIX threads libraries are not available. Add crypto support if
the crypto libraries are available. Build dnssec-{keygen,signzone}
if crypto is available.
Submitted by: (in part) dougb@
|
|
Submitted by: (in part) dougb@, trhodes@
Reviewed by: dougb@, trhodes@, re@
MFC after: 5 days
|