CVS commit: pkgsrc/net/knot

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Thu Oct  1 03:37:02 UTC 2020

Modified Files:
        pkgsrc/net/knot: Makefile PLIST distinfo
Added Files:
        pkgsrc/net/knot/patches: patch-configure

Log Message:
knot: Update to 3.0.0

Changelog:
Version 3.0.0

Wednesday, September 9, 2020

Features:

      + High-performance networking mode using XDP sockets (requires Linux
        4.18+)
      + Support for Catalog zones including kcatalogprint utility
      + New DNSSEC validation mode
      + New kzonesign utility --- an interface for manual DNSSEC signing
      + New kxdpgun utility --- high-performance DNS over UDP traffic generator
        for Linux
      + DoH support in kdig using GnuTLS and libnghttp2
      + New KSK revoked state (RFC 5011) in manual DNSSEC key management mode
      + Deterministic signing with ECDSA algorithms (requires GnuTLS 3.6.10+)
      + Module synthrecord supports reverse pointer shortening
      + Safe persistent zone data backup and restore

Improvements:

      + Processing depth of CNAME and DNAME chains is limited to 20
      + Non-FQDN is allowed as 'update-owner-name' configuration option value
      + Kdig prints detailed algorithm idendifier for PRIVATEDNS and PRIVATEOID
        in multiline mode #334
      + Queries with QTYPE ANY or RRSIG are always responded with at most one
        random RRSet
      + The statistics module has negligible performance overhead on modern
        CPUs
      + If multithreaded zone signing is enabled, some additional zone
        maintenance steps are newly parallelized
      + ACL can be configured by reference to a remote
      + Better CPU cache locality for higher query processing performance
      + Logging to non-syslog streams contains timestamps with the timezone
      + Keeping initial DNSKEY TTL and zone maximum TTL in KASP database to
        ensure proper rollover timing in case of TTL changes during the
        rollover
      + Responding FORMERR to queries with more OPT records

Bugfixes:

      + Module onlinesign responds NXDOMAIN insted of NOERROR (NODATA) if
        DNSSEC not requested
      + Outgoing multi-message transfer can contain invalid compression
        pointers under specific conditions

Version 2.9.6

Monday, August 31, 2020

Features:

      + New kdig option '+[no]opttext' to print unknown EDNS options as text if
        possible (Thanks to Robert Edmonds)

Improvements:

      + Better error message if no key is ready for submission
      + Improved logging when master is not usable
      + Improved control logging of zone-flush errors if output directory is
        specified
      + More precise system error messages when a zone transfer fails
      + Some documentation improvements (especially Offline KSK)

Bugfixes:

      + In the case of many zones, control operations over all zones take lots
        of memory
      + Misleading error message on keymgr import-bind #683
      + DS push is triggered upon every zone change even though CDS wasn't
        changed
      + Kzonecheck performance penalty with passive keys #688
       CSK->KSK+ZSK scheme rollover can end too early


To generate a diff of this commit:
cvs rdiff -u -r1.56 -r1.57 pkgsrc/net/knot/Makefile
cvs rdiff -u -r1.16 -r1.17 pkgsrc/net/knot/PLIST
cvs rdiff -u -r1.32 -r1.33 pkgsrc/net/knot/distinfo
cvs rdiff -u -r0 -r1.1 pkgsrc/net/knot/patches/patch-configure

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/knot/Makefile
diff -u pkgsrc/net/knot/Makefile:1.56 pkgsrc/net/knot/Makefile:1.57
--- pkgsrc/net/knot/Makefile:1.56       Wed May 27 14:32:02 2020
+++ pkgsrc/net/knot/Makefile    Thu Oct  1 03:37:02 2020
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.56 2020/05/27 14:32:02 ryoon Exp $
+# $NetBSD: Makefile,v 1.57 2020/10/01 03:37:02 ryoon Exp $
 
-DISTNAME=      knot-2.9.5
+DISTNAME=      knot-3.0.0
 CATEGORIES=    net
 MASTER_SITES=  https://secure.nic.cz/files/knot-dns/
 EXTRACT_SUFX=  .tar.xz
@@ -58,6 +58,7 @@ CONF_FILES+=  ${EGDIR}/example.com.zone \
 INSTALLATION_DIRS=     ${EGDIR}
 OWN_DIRS+=             ${VARBASE}/knot
 
+.include "../../databases/lmdb/buildlink3.mk"
 .include "../../devel/userspace-rcu/buildlink3.mk"
 .include "../../security/gnutls/buildlink3.mk"
 .include "../../textproc/jansson/buildlink3.mk"

Index: pkgsrc/net/knot/PLIST
diff -u pkgsrc/net/knot/PLIST:1.16 pkgsrc/net/knot/PLIST:1.17
--- pkgsrc/net/knot/PLIST:1.16  Mon Apr 15 16:23:03 2019
+++ pkgsrc/net/knot/PLIST       Thu Oct  1 03:37:02 2020
@@ -1,9 +1,10 @@
-@comment $NetBSD: PLIST,v 1.16 2019/04/15 16:23:03 ryoon Exp $
+@comment $NetBSD: PLIST,v 1.17 2020/10/01 03:37:02 ryoon Exp $
 bin/kdig
 bin/khost
 bin/knsec3hash
 bin/knsupdate
 bin/kzonecheck
+bin/kzonesign
 include/knot/module.h
 include/libdnssec/binary.h
 include/libdnssec/crypto.h
@@ -77,11 +78,14 @@ man/man1/khost.1
 man/man1/knsec3hash.1
 man/man1/knsupdate.1
 man/man1/kzonecheck.1
+man/man1/kzonesign.1
 man/man5/knot.conf.5
+man/man8/kcatalogprint.8
 man/man8/keymgr.8
 man/man8/kjournalprint.8
 man/man8/knotc.8
 man/man8/knotd.8
+sbin/kcatalogprint
 sbin/keymgr
 sbin/kjournalprint
 sbin/knotc

Index: pkgsrc/net/knot/distinfo
diff -u pkgsrc/net/knot/distinfo:1.32 pkgsrc/net/knot/distinfo:1.33
--- pkgsrc/net/knot/distinfo:1.32       Wed May 27 14:32:02 2020
+++ pkgsrc/net/knot/distinfo    Thu Oct  1 03:37:02 2020
@@ -1,7 +1,8 @@
-$NetBSD: distinfo,v 1.32 2020/05/27 14:32:02 ryoon Exp $
+$NetBSD: distinfo,v 1.33 2020/10/01 03:37:02 ryoon Exp $
 
-SHA1 (knot-2.9.5.tar.xz) = 33e87dba2610e20d212dd7b56eea875be6881abc
-RMD160 (knot-2.9.5.tar.xz) = 74a139694f4124e9437ed0dff30e594501efcb45
-SHA512 (knot-2.9.5.tar.xz) = 6bfd6a720eb512983f934c3bf853ac310391805a102546ed18b3e805d10339837569e970e0e51f64e9d938bc362c8f9d01acb15ca4dca0a66dea9deb6b59cc73
-Size (knot-2.9.5.tar.xz) = 1190872 bytes
+SHA1 (knot-3.0.0.tar.xz) = 3bac600cd82dbcc4a238c15d859822c90951abc5
+RMD160 (knot-3.0.0.tar.xz) = e34e17f546cb50364b5536edb9d1f8cd70fd0a7b
+SHA512 (knot-3.0.0.tar.xz) = 286861e4127f8c70eeba1e76f2de82e8f89d4c15d2dc3733902f8d19103f6a44b9da97a91bc99168fd4f6024d60b8bc53a78580ed04a6e9cbf8c6ad921780c81
+Size (knot-3.0.0.tar.xz) = 1329064 bytes
+SHA1 (patch-configure) = c8d556d66c37093031ecabfe889e3fd6a80bc772
 SHA1 (patch-samples_Makefile.in) = 499b8742dbd948e489b01d512bc7a8d8e4fe2e7b

Added files:

Index: pkgsrc/net/knot/patches/patch-configure
diff -u /dev/null pkgsrc/net/knot/patches/patch-configure:1.1
--- /dev/null   Thu Oct  1 03:37:02 2020
+++ pkgsrc/net/knot/patches/patch-configure     Thu Oct  1 03:37:02 2020
@@ -0,0 +1,22 @@
+$NetBSD: patch-configure,v 1.1 2020/10/01 03:37:02 ryoon Exp $
+
+--- configure.orig     2020-09-09 05:51:07.000000000 +0000
++++ configure
+@@ -5472,7 +5472,7 @@ $as_echo "#define AC_APPLE_UNIVERSAL_BUI
+  presetting ac_cv_c_bigendian=no (or yes) will help" "$LINENO" 5 ;;
+  esac
+ 
+-if test "$endianity" == "little-endian"; then :
++if test "$endianity" = "little-endian"; then :
+ 
+ 
+ $as_echo "#define ENDIANITY_LITTLE 1" >>confdefs.h
+@@ -14016,7 +14016,7 @@ fi
+ 
+ 
+ 
+-XDP_VISIBLE_HEADERS=$(test "$enable_xdp" == "no"; echo "$?")
++XDP_VISIBLE_HEADERS=$(test "$enable_xdp" = "no"; echo "$?")
+ 
+ 
+ if test "$enable_xdp" != "no"; then :