[pkgsrc/trunk]: pkgsrc/net/unbound Update unbound to version 1.8.2

[he <he%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/e3cdf57d4322
branches:  trunk
changeset: 388355:e3cdf57d4322
user:      he <he%pkgsrc.org@localhost>
date:      Tue Dec 04 12:04:22 2018 +0000

description:
Update unbound to version 1.8.2

Pkgsrc changes:
 * Re-position configure diff.

Upstream changes:

Features
- Add fast-server-permil and fast-server-num options.
- Deprecate low-rtt and low-rtt-permil options.
- Change fast-server-num default to 3.
- Fix #4154: make ECS_MAX_TREESIZE configurable, with
  the max-ecs-tree-size-ipv4 and max-ecs-tree-size-ipv6 options.
- Fix #4190: Please create a "ANY" deny option, adds the option
  deny-any: yes in unbound.conf.  This responds with an empty message
  to queries of type ANY.
- Fix #4126: RTT_band too low on VSAT links with 600+ms latency,
  adds the option unknown-server-time-limit to unbound.conf that
  can be increased to avoid the problem.
- Add min-client-subnet-ipv6 and min-client-subnet-ipv4 options.
- Support SO_REUSEPORT_LB in FreeBSD 12 with the so-reuseport: yes
  option in unbound.conf.
- Add unbound-control view_local_datas command, like local_datas.

Bug Fixes
- dnscrypt.c removed sizeof to get array bounds.
- Fix testlock code to set noreturn on error routine.
- Remove unused variable from contrib fastrpz/rpz.c and
  remove unused diagnostic pragmas that themselves generate warnings
- clang analyze test is used only when assertions are enabled.
- Squelch EADDRNOTAVAIL errors when the interface goes away,
  this omits 'can't assign requested address' errors unless
  verbosity is set to a high value.
- Set default for so-reuseport to no for FreeBSD.  It is enabled
  by default for Linux and DragonFlyBSD.  The setting can
  be configured in unbound.conf to override the default.
- iana port update.
- Squelch log of failed to tcp initiate after TCP Fastopen failure.
- Fix #4192: unbound-control-setup generates keys not readable by
  group.
- check that the dnstap socket file can be opened and exists, print
  error if not.
- Add markdel function to ECS slabhash.
- Limit ECS scope returned to client to the scope used for caching.
- Fix #4191: NXDOMAIN vs SERVFAIL during dns64 PTR query.
- Fix #4141: More randomness to rrset-roundrobin.
- Fix #4132: Openness/closeness of RANGE intervals in rpl files.
- remade makefile dependencies.
- Fix #4152: Logs shows wrong time when using log-time-ascii: yes.
- Scrub NS records from NXDOMAIN responses to stop fragmentation
  poisoning of the cache.
- Scrub NS records from NODATA responses as well.
- Add patch from Jan Vcelak for pythonmod,
  add sockaddr_storage getters, add support for query callbacks,
  allow raw address access via comm_reply and update API documentation.
- Removed compile warnings in pythonmod sockaddr routines.
- With ./configure --with-pyunbound --with-pythonmodule
  PYTHON_VERSION=3.6 or with 2.7 unbound can compile and unit tests
  succeed for the python module.
- pythonmod logs the python error and traceback on failure.
- ignore debug python module for test in doxygen output.
- review fixes for python module.
- Fix #4209: Crash in libunbound when called from getdns.
- auth zone zonefiles can be in a chroot, the chroot directory
  components are removed before use.
- Fix that empty zonefile means the zonefile is not set and not used.
- Fix to not set GLOB_NOSORT so the unbound.conf include: files are
  sorted and in a predictable order.
- Fix #4193: Fix that prefetch failure does not overwrite valid cache
  entry with SERVFAIL.
- Fix DNS64 to not store intermediate results in cache, this avoids
  other threads from picking up the wrong data.  The module restores
  the previous no_cache_store setting when the the module is finished.
- Fix #4208: 'stub-no-cache' and 'forward-no-cache' not work.
- New and better fix for Fix #4193: Fix that prefetch failure does
  not overwrite valid cache entry with SERVFAIL.
- auth-zone give SERVFAIL when expired, fallback activates when
  expired, and this is documented in the man page.
- stat count SERVFAIL downstream auth-zone queries for expired zones.
- Put new logos into windows installer.
- Fix windows compile for new rrset roundrobin fix.
- Update contrib fastrpz patch for latest release.
- Fix chroot auth-zone fix to remove chroot prefix.
- windows icon updated.

diffstat:

 net/unbound/Makefile                |   4 ++--
 net/unbound/distinfo                |  12 ++++++------
 net/unbound/patches/patch-configure |   4 ++--
 3 files changed, 10 insertions(+), 10 deletions(-)

diffs (46 lines):

diff -r 345cb58b54be -r e3cdf57d4322 net/unbound/Makefile
--- a/net/unbound/Makefile      Tue Dec 04 12:04:21 2018 +0000
+++ b/net/unbound/Makefile      Tue Dec 04 12:04:22 2018 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.59 2018/10/08 12:26:17 he Exp $
+# $NetBSD: Makefile,v 1.60 2018/12/04 12:04:22 he Exp $
 
-DISTNAME=      unbound-1.8.1
+DISTNAME=      unbound-1.8.2
 CATEGORIES=    net
 MASTER_SITES=  http://www.nlnetlabs.nl/downloads/unbound/
 
diff -r 345cb58b54be -r e3cdf57d4322 net/unbound/distinfo
--- a/net/unbound/distinfo      Tue Dec 04 12:04:21 2018 +0000
+++ b/net/unbound/distinfo      Tue Dec 04 12:04:22 2018 +0000
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.45 2018/10/08 12:26:17 he Exp $
+$NetBSD: distinfo,v 1.46 2018/12/04 12:04:22 he Exp $
 
-SHA1 (unbound-1.8.1.tar.gz) = 63849ece517e06b2a3c2e6917d522682da794f87
-RMD160 (unbound-1.8.1.tar.gz) = 415447310f1db78146c43c639d84598f5bb07e10
-SHA512 (unbound-1.8.1.tar.gz) = 1872a980e06258d28d2bc7f69a4c56fc07e03e4c9856161e89abc28527fff5812a47ea9927fd362bca690e3a87b95046ac96c8beeccaeb8596458f140c33b217
-Size (unbound-1.8.1.tar.gz) = 5610191 bytes
-SHA1 (patch-configure) = 769ad52b9ab93bc8e48d2ffe8fef5b4b61070eba
+SHA1 (unbound-1.8.2.tar.gz) = ccd3a208dd6f9623065f182e9aec4da73ea9b1ad
+RMD160 (unbound-1.8.2.tar.gz) = 38966ced5cf6266cb346d1649c6635fdcfdd03e5
+SHA512 (unbound-1.8.2.tar.gz) = a775c799d41ede3c2df82a5cf4d419ec1d037d84c9bb7f2f4216727afc1e3d82c991d1a1ee99baf315530c094a416004e836312ba1ee2b7b17a4a60454878cb5
+Size (unbound-1.8.2.tar.gz) = 5628920 bytes
+SHA1 (patch-configure) = eabd0c478e92ebe37adf143849389e0e792dc77f
diff -r 345cb58b54be -r e3cdf57d4322 net/unbound/patches/patch-configure
--- a/net/unbound/patches/patch-configure       Tue Dec 04 12:04:21 2018 +0000
+++ b/net/unbound/patches/patch-configure       Tue Dec 04 12:04:22 2018 +0000
@@ -1,11 +1,11 @@
-$NetBSD: patch-configure,v 1.2 2018/05/07 07:13:28 he Exp $
+$NetBSD: patch-configure,v 1.3 2018/12/04 12:04:22 he Exp $
 
 Pretend expat.h is found: it is guaranteed by PkgSrc, but on Darwin it might
 be buried inside an SDK; we don't want the SDK path being exposed in CFLAGS.
 
 --- configure.orig     2017-07-09 07:41:42.000000000 +0000
 +++ configure
-@@ -18815,7 +18815,7 @@ fi
+@@ -19030,7 +19030,7 @@ fi
  
  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for libexpat" >&5
  $as_echo_n "checking for libexpat... " >&6; }