[pkgsrc/trunk]: pkgsrc/security/opendnssec Update OpenDNSSEC to version 1.4.1...

[he <he%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/cfee5681480f
branches:  trunk
changeset: 357172:cfee5681480f
user:      he <he%pkgsrc.org@localhost>
date:      Mon Jan 16 09:21:13 2017 +0000

description:
Update OpenDNSSEC to version 1.4.12nb3.
 * Apply fix from OPENDNSSEC-778: double NSEC3PARAMS on re-salt.

diffstat:

 security/opendnssec/Makefile                                |   4 +-
 security/opendnssec/distinfo                                |   3 +-
 security/opendnssec/patches/patch-signer_src_signer_rrset.c |  16 +++++++++++++
 3 files changed, 20 insertions(+), 3 deletions(-)

diffs (49 lines):

diff -r d75f30768efd -r cfee5681480f security/opendnssec/Makefile
--- a/security/opendnssec/Makefile      Mon Jan 16 09:19:54 2017 +0000
+++ b/security/opendnssec/Makefile      Mon Jan 16 09:21:13 2017 +0000
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.61 2016/12/04 05:17:40 ryoon Exp $
+# $NetBSD: Makefile,v 1.62 2017/01/16 09:21:13 he Exp $
 #
 
 DISTNAME=      opendnssec-1.4.12
-PKGREVISION=   2
+PKGREVISION=   3
 CATEGORIES=    security net
 MASTER_SITES=  http://www.opendnssec.org/files/source/
 
diff -r d75f30768efd -r cfee5681480f security/opendnssec/distinfo
--- a/security/opendnssec/distinfo      Mon Jan 16 09:19:54 2017 +0000
+++ b/security/opendnssec/distinfo      Mon Jan 16 09:21:13 2017 +0000
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.36 2016/11/27 14:25:41 he Exp $
+$NetBSD: distinfo,v 1.37 2017/01/16 09:21:13 he Exp $
 
 SHA1 (opendnssec-1.4.12.tar.gz) = feab78605d2c49a2788a4b65e7eb4416777e9610
 RMD160 (opendnssec-1.4.12.tar.gz) = dc91f862691218ca99b3496a7340ef16f29e37aa
@@ -10,4 +10,5 @@
 SHA1 (patch-enforcer_utils_ksmutil.c) = f9456e0339d45dcc2776375cf40f3f8d9221878f
 SHA1 (patch-signer_src_daemon_engine.c) = a95846ba4aa6fa42043541bb2bde0f95464f9ba4
 SHA1 (patch-signer_src_signer_ixfr.c) = 74c2c320080e585a6126e146c453998f44c164f7
+SHA1 (patch-signer_src_signer_rrset.c) = 0374fc9535c722f3b394d6d351bd08b0fe4bced1
 SHA1 (patch-signer_src_signer_zone.c) = 0330236f11ccab7ed83b73bc83d851f932124318
diff -r d75f30768efd -r cfee5681480f security/opendnssec/patches/patch-signer_src_signer_rrset.c
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/security/opendnssec/patches/patch-signer_src_signer_rrset.c       Mon Jan 16 09:21:13 2017 +0000
@@ -0,0 +1,16 @@
+$NetBSD: patch-signer_src_signer_rrset.c,v 1.1 2017/01/16 09:21:13 he Exp $
+
+Fix for OPENDNSSEC-778: Double NSEEC3PARAM record after re-salt.
+
+--- signer/src/signer/rrset.c.orig     2016-10-17 12:32:58.000000000 +0000
++++ signer/src/signer/rrset.c
+@@ -360,8 +360,7 @@ rrset_diff(rrset_type* rrset, unsigned i
+                 del_sigs = 1;
+             }
+             rrset->rrs[i].exists = 1;
+-            if ((rrset->rrtype == LDNS_RR_TYPE_DNSKEY ||
+-                 rrset->rrtype == LDNS_RR_TYPE_NSEC3PARAMS) && more_coming) {
++            if ((rrset->rrtype == LDNS_RR_TYPE_DNSKEY) && more_coming) {
+                 continue;
+             }
+             rrset->rrs[i].is_added = 0;