CVS commit: pkgsrc/security/opendnssec

["Havard Eidnes" <he%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   he
Date:           Mon Jan 16 09:21:13 UTC 2017

Modified Files:
        pkgsrc/security/opendnssec: Makefile distinfo
Added Files:
        pkgsrc/security/opendnssec/patches: patch-signer_src_signer_rrset.c

Log Message:
Update OpenDNSSEC to version 1.4.12nb3.
 * Apply fix from OPENDNSSEC-778: double NSEC3PARAMS on re-salt.


To generate a diff of this commit:
cvs rdiff -u -r1.61 -r1.62 pkgsrc/security/opendnssec/Makefile
cvs rdiff -u -r1.36 -r1.37 pkgsrc/security/opendnssec/distinfo
cvs rdiff -u -r0 -r1.1 \
    pkgsrc/security/opendnssec/patches/patch-signer_src_signer_rrset.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/opendnssec/Makefile
diff -u pkgsrc/security/opendnssec/Makefile:1.61 pkgsrc/security/opendnssec/Makefile:1.62
--- pkgsrc/security/opendnssec/Makefile:1.61    Sun Dec  4 05:17:40 2016
+++ pkgsrc/security/opendnssec/Makefile Mon Jan 16 09:21:13 2017
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.61 2016/12/04 05:17:40 ryoon Exp $
+# $NetBSD: Makefile,v 1.62 2017/01/16 09:21:13 he Exp $
 #
 
 DISTNAME=      opendnssec-1.4.12
-PKGREVISION=   2
+PKGREVISION=   3
 CATEGORIES=    security net
 MASTER_SITES=  http://www.opendnssec.org/files/source/
 

Index: pkgsrc/security/opendnssec/distinfo
diff -u pkgsrc/security/opendnssec/distinfo:1.36 pkgsrc/security/opendnssec/distinfo:1.37
--- pkgsrc/security/opendnssec/distinfo:1.36    Sun Nov 27 14:25:41 2016
+++ pkgsrc/security/opendnssec/distinfo Mon Jan 16 09:21:13 2017
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.36 2016/11/27 14:25:41 he Exp $
+$NetBSD: distinfo,v 1.37 2017/01/16 09:21:13 he Exp $
 
 SHA1 (opendnssec-1.4.12.tar.gz) = feab78605d2c49a2788a4b65e7eb4416777e9610
 RMD160 (opendnssec-1.4.12.tar.gz) = dc91f862691218ca99b3496a7340ef16f29e37aa
@@ -10,4 +10,5 @@ SHA1 (patch-enforcer_utils_Makefile.in) 
 SHA1 (patch-enforcer_utils_ksmutil.c) = f9456e0339d45dcc2776375cf40f3f8d9221878f
 SHA1 (patch-signer_src_daemon_engine.c) = a95846ba4aa6fa42043541bb2bde0f95464f9ba4
 SHA1 (patch-signer_src_signer_ixfr.c) = 74c2c320080e585a6126e146c453998f44c164f7
+SHA1 (patch-signer_src_signer_rrset.c) = 0374fc9535c722f3b394d6d351bd08b0fe4bced1
 SHA1 (patch-signer_src_signer_zone.c) = 0330236f11ccab7ed83b73bc83d851f932124318

Added files:

Index: pkgsrc/security/opendnssec/patches/patch-signer_src_signer_rrset.c
diff -u /dev/null pkgsrc/security/opendnssec/patches/patch-signer_src_signer_rrset.c:1.1
--- /dev/null   Mon Jan 16 09:21:13 2017
+++ pkgsrc/security/opendnssec/patches/patch-signer_src_signer_rrset.c  Mon Jan 16 09:21:13 2017
@@ -0,0 +1,16 @@
+$NetBSD: patch-signer_src_signer_rrset.c,v 1.1 2017/01/16 09:21:13 he Exp $
+
+Fix for OPENDNSSEC-778: Double NSEEC3PARAM record after re-salt.
+
+--- signer/src/signer/rrset.c.orig     2016-10-17 12:32:58.000000000 +0000
++++ signer/src/signer/rrset.c
+@@ -360,8 +360,7 @@ rrset_diff(rrset_type* rrset, unsigned i
+                 del_sigs = 1;
+             }
+             rrset->rrs[i].exists = 1;
+-            if ((rrset->rrtype == LDNS_RR_TYPE_DNSKEY ||
+-                 rrset->rrtype == LDNS_RR_TYPE_NSEC3PARAMS) && more_coming) {
++            if ((rrset->rrtype == LDNS_RR_TYPE_DNSKEY) && more_coming) {
+                 continue;
+             }
+             rrset->rrs[i].is_added = 0;