pkgsrc-Changes archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
CVS commit: pkgsrc/net/knot
Module Name: pkgsrc
Committed By: ryoon
Date: Sat Dec 9 06:10:07 UTC 2023
Modified Files:
pkgsrc/net/knot: Makefile distinfo
Removed Files:
pkgsrc/net/knot/patches: patch-configure
Log Message:
knot: Update to 3.3.2
Changelog:
Version 3.3.2
Friday, October 20, 2023
Features:
+ knotd: support for IXFR from AXFR computation (see
'zone.ixfr-from-axfr')
+ knotd: support benevolent IXFR (see 'zone.ixfr-benevolent')
+ knot-exporter: new configuration option '--no-zone-serial' #880
Improvements:
+ libs: upgraded embedded libngtcp2 to 1.0.0
+ knotd: added logging of new SOA serial when signing is finished
+ knotd: unified some XDP-related logging
+ keymgr: improved error message if a key file is not accessible
+ keymgr: added offline RRSIGs validation at the end of their validity
intervals
+ kdig: upgraded EDNS presentation format to draft version -02
+ kdig: simplified QUIC connection without extra PING frames
+ kzonecheck: removed requirement that DS is at delegation point
+ doc: various fixes and improvements
Bugfixes:
+ knotd: logged incorrect new SOA serial if 'zonefile-load: difference'
is set #875
+ knotd: more signing threads with a PKCS #11 keystore has no effect #876
+ knotd: DNAME record returned with query domain name instead of actual
name #873
+ knotd: failed to import configuration file if mod-geoip is in use #881
+ knotd: failed to sign RRSet that fits to 64k only if compressed
+ knotd: broken zone update context upon failed operation over control
interface
+ keymgr: offline RRSIGs not refreshed if 'rrsig-refresh' is not set
+ knsupdate: incorrect processing of @ in the delete operation #879
+ knot-exporter: failed to parse knotd PIDs on FreeBSD
Version 3.2.11
Thursday, October 19, 2023
Improvements:
+ keymgr: improved error message if a key file is not accessible
+ keymgr: added offline RRSIGs validation at the end of their validity
intervals
+ doc: fixed some typos
Bugfixes:
+ knotd: DNAME record returned with query domain name instead of actual
name #873
+ knotd: failed to import configuration file if mod-geoip is in use #881
+ knotd: failed to sign RRSet that fits to 64k only if compressed
+ keymgr: offline RRSIGs not refreshed if 'rrsig-refresh' is not set
+ knsupdate: incorrect processing of @ in the delete operation #879
Version 3.3.1
Monday, September 11, 2023
Improvements:
+ knotd: multiple catalog groups per member are tolerated, but only one
is used
+ modules: added const qualifier to various function parameters #877
(Thanks to Robert Edmonds)
+ libs: upgraded embedded libngtcp2 to 0.19.1
Bugfixes:
+ knotd: TCP over XDP fails to respond
+ knotd: server can crash when adjusting a wildcard glue
+ knotd: failed to forward DDNS if 'zone.master' points to 'remotes'
+ knotd: broken YAML statistics if more modules are configured #874
+ knotd: DDNS forwarding isn't RFC 8945 compliant
Version 3.2.10
Sunday, September 10, 2023
Improvements:
+ knotd: multiple catalog groups per member are tolerated, but only one
is used
+ knotd: server cleans up stale LMDB readers when opening a RW
transaction
Bugfixes:
+ knotd: server can crash when adjusting a wildcard glue
+ knotd: failed to forward DDNS if 'zone.master' points to 'remotes'
+ knotd: subsequent addition and removal to catalog zone isn't handled
properly
+ knotd: server can crash if a shared module is loaded and dynamic
configuration used
+ knotc: configuration import fails if an explicit shared module is
configured
+ kdig: double-free on some malformed responses over QUIC #869
+ kdig: some TLS parameters override QUIC parameters
+ libs: NULL record with empty RDATA isn't allowed
Version 3.3.0
Monday, August 28, 2023
Features:
+ knotd: full DNS over QUIC (DoQ, RFC 9250) implementation, also without
XDP
+ knotd: bidirectional XFR over QUIC (XoQ) support with opportunistic,
strict, and mutual authentication profiles
+ knotd: automatic reverse PTR records pre-generation (see
'zone.reverse-generate')
+ knotd: new per zone statistic counters 'zone.size' and 'zone.max-ttl'
+ knotd: new primary server pinning (see 'zone.master-pin-tolerance')
+ knotd: new SOA serial modulo policy (see 'zone.serial-modulo')
+ knotd: new multi-signer operation mode (see 'policy.dnskey-sync' and
'DNSSEC multi-signer')
+ kdig: support for EDNS presentation format, also in JSON mode (see
'+optpresent')
+ kxdpgun: new TCP/QUIC debug mode 'R' for connection reuse
+ kxdpgun: new XDP mode parameter '--mode' (Thanks to Jan V?el??k)
+ kxdpgun: new parameter '--qlog' for qlog destination specification
+ kzonecheck: new '--print' parameter for dumping the zone on stdout
Improvements:
+ knotd: secondary can be configured not to forward DDNS (see
'zone.ddns-master')
+ knotd: extended support for UNIX socket configuration (remote, acl)
+ knotd: stats no longer dump empty or zero counters
+ knotd: new 'keys-updated' D-Bus event
+ knotd: added transport protocol information to outgoing event and
nameserver logs
+ knotd: server cleans up stale LMDB readers when opening a RW
transaction
+ knotd,kzonecheck: semantic check allows DS only at delegation point
+ knotc: new zone backup filters '+quic' and '+noquic' for QUIC key
backup
+ mod-dnstap: DNS over QUIC traffic is marked as QUIC
+ kxdpgun: QUIC connections are closed by default
+ libs: upgraded embedded libngtcp2 to 0.18.0
+ kdig: QUIC, TLS, or HTTPS protocol is printed in the final statistics
+ doc: new sections 'DNS over QUIC' and 'DNSSEC multi-signer'
+ doc: various improvements
Bugfixes:
+ knotd: server can crash if a shared module is loaded and dynamic
configuration used
+ knotd: inaccurate transfer size is logged if EDNS EXPIRE, PADDING, or
TSIG is present
+ knotd: subsequent addition and removal to catalog zone isn't handled
properly
+ knotc: configuration import fails if an explicit shared module is
configured
+ utils: database transactions not properly closed when terminated
prematurely
+ kdig: double-free on some malformed responses over QUIC #869
+ kdig: some TLS parameters override QUIC parameters
+ libs: NULL record with empty RDATA isn't allowed
+ tests: dthreads destructor test sometimes fails
Compatibility:
+ knotd: responses to forwarded DDNS requests are signed with local TSIG
key
+ knotd: NOTIFY-initiated refresh tries all configured addresses of the
remote
+ knotd: configuration option 'xdp.quic-log' was replaced with 'log.quic'
+ libs: removed embedded libbpf, an external one is necessary for XDP
+ libs: DNS over QUIC implementation only supports 'doq' ALPN
+ ctl: removed 'Version: ' prefix from 'status version' output
+ modules: reduced parameters of 'knotd_qdata_local_addr()'
Packaging:
+ knot-exporter: Prometheus exporter imported from GitHub
+ knot-exporter: packages for Debian, Ubuntu, and PyPI
+ debian,ubuntu: new self-hosted repository (see https://pkg.labs.nic.cz/
doc/)
+ docker: upgraded to Debian bookworm-slim
Version 3.2.9
Thursday, July 27, 2023
Improvements:
+ keymgr: 'import-pkcs11' not allowed if no PKCS #11 keystore backend is
configured
+ keymgr: more verbose key import errors
+ doc: extended migration notes
+ doc: various improvements
Bugfixes:
+ knotd: server may crash when storing changeset of a big zone migrating
to/from NSEC3
+ knotd: zone refresh loop when all masters are outdated and timers
cleared
+ knotd: failed to active D-Bus notifications if not started as systemd
service
+ kjournalprint: database transaction not properly closed when terminated
prematurely
To generate a diff of this commit:
cvs rdiff -u -r1.79 -r1.80 pkgsrc/net/knot/Makefile
cvs rdiff -u -r1.44 -r1.45 pkgsrc/net/knot/distinfo
cvs rdiff -u -r1.3 -r0 pkgsrc/net/knot/patches/patch-configure
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: pkgsrc/net/knot/Makefile
diff -u pkgsrc/net/knot/Makefile:1.79 pkgsrc/net/knot/Makefile:1.80
--- pkgsrc/net/knot/Makefile:1.79 Wed Nov 8 13:20:28 2023
+++ pkgsrc/net/knot/Makefile Sat Dec 9 06:10:07 2023
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.79 2023/11/08 13:20:28 wiz Exp $
+# $NetBSD: Makefile,v 1.80 2023/12/09 06:10:07 ryoon Exp $
-DISTNAME= knot-3.2.8
-PKGREVISION= 3
+DISTNAME= knot-3.3.2
CATEGORIES= net
MASTER_SITES= https://secure.nic.cz/files/knot-dns/
EXTRACT_SUFX= .tar.xz
Index: pkgsrc/net/knot/distinfo
diff -u pkgsrc/net/knot/distinfo:1.44 pkgsrc/net/knot/distinfo:1.45
--- pkgsrc/net/knot/distinfo:1.44 Fri Jul 7 10:53:14 2023
+++ pkgsrc/net/knot/distinfo Sat Dec 9 06:10:07 2023
@@ -1,7 +1,6 @@
-$NetBSD: distinfo,v 1.44 2023/07/07 10:53:14 ryoon Exp $
+$NetBSD: distinfo,v 1.45 2023/12/09 06:10:07 ryoon Exp $
-BLAKE2s (knot-3.2.8.tar.xz) = c5bce715f611fe8495e7ba31fed27f2e152a10b16a4aa13a2c98732a912a6dae
-SHA512 (knot-3.2.8.tar.xz) = 792e7d062ef018530594abc26b90fcd023758cb88b77f971460ca73de36121d1faf84fe55d5f24e72cc07adcc48115c24b6c60817d90f5620cdca13f7782e67d
-Size (knot-3.2.8.tar.xz) = 1681556 bytes
-SHA1 (patch-configure) = cf0e2a973380dc7123835e249eea7d3bac46c7e9
+BLAKE2s (knot-3.3.2.tar.xz) = ebaf73f0b27880b0cad07191f118d05e19809ee8c5042b18384d678dd55a0167
+SHA512 (knot-3.3.2.tar.xz) = c19a11db43b208a6aabfd96e0c31856affdcef1b599425343663fd6e00bacc964f197de7e5d732d7180219ba57b6e426afd2b762c7528cb50755f81429aaac1a
+Size (knot-3.3.2.tar.xz) = 1580800 bytes
SHA1 (patch-samples_Makefile.in) = 499b8742dbd948e489b01d512bc7a8d8e4fe2e7b
Home |
Main Index |
Thread Index |
Old Index