src/lib/bind/dns/Makefile, branch main FreeBSD source tree Remove BIND. 2013-09-30T17:23:45+00:00 Dag-Erling Smørgrav des@FreeBSD.org 2013-09-30T17:23:45+00:00 56b72efe825d4190e0e2fdbc07ebb295cac299df Approved by: re (gjb) 
Approved by:	re (gjb)
Update Bind to 9.9.3-P2 2013-08-22T08:15:03+00:00 Erwin Lansing erwin@FreeBSD.org 2013-08-22T08:15:03+00:00 08e6ea976b86b6591f317d290bfc9743d11c21ac Notable new features: * Elliptic Curve Digital Signature Algorithm keys and signatures in DNSSEC are now supported per RFC 6605. [RT #21918] * Introduces a new tool "dnssec-verify" that validates a signed zone, checking for the correctness of signatures and NSEC/NSEC3 chains. [RT #23673] * BIND now recognizes the TLSA resource record type, created to support IETF DANE (DNS-based Authentication of Named Entities) [RT #28989] * The new "inline-signing" option, in combination with the "auto-dnssec" option that was introduced in BIND 9.7, allows named to sign zones completely transparently. Approved by: delphij (mentor) MFC after: 3 days Sponsored by: DK Hostmaster A/S 
Notable new features:

*  Elliptic Curve Digital Signature Algorithm keys and signatures in
   DNSSEC are now supported per RFC 6605. [RT #21918]

*  Introduces a new tool "dnssec-verify" that validates a signed zone,
   checking for the correctness of signatures and NSEC/NSEC3 chains.
   [RT #23673]

*  BIND now recognizes the TLSA resource record type, created to
   support IETF DANE (DNS-based Authentication of Named Entities)
   [RT #28989]

*  The new "inline-signing" option, in combination with the
   "auto-dnssec" option that was introduced in BIND 9.7, allows
   named to sign zones completely transparently.

Approved by:	delphij (mentor)
MFC after:	3 days
Sponsored by:	DK Hostmaster A/S
Update to 9.8.4-P1. 2012-12-07T12:39:58+00:00 Erwin Lansing erwin@FreeBSD.org 2012-12-07T12:39:58+00:00 cfd4d2c42e1c88d28ef6b9bca1ffbab32de3e7ff Security Fixes Prevents named from aborting with a require assertion failure on servers with DNS64 enabled. These crashes might occur as a result of specific queries that are received. New Features * Elliptic Curve Digital Signature Algorithm keys and signatures in DNSSEC are now supported per RFC 6605. [RT #21918] Feature Changes * Improves OpenSSL error logging [RT #29932] * nslookup now returns a nonzero exit code when it is unable to get an answer. [RT #29492] Other critical bug fixes are included. Approved by: delphij (mentor) MFC after: 3 days Security: CVE-2012-5688 Sponsored by: DK Hostmaster A/S 
Security Fixes

   Prevents named from aborting with a require assertion failure
   on servers with DNS64 enabled.  These crashes might occur as a
   result of  specific queries that are received.

New Features

*  Elliptic Curve Digital Signature Algorithm keys and signatures in
   DNSSEC are now supported per RFC 6605. [RT #21918]

Feature Changes

*  Improves OpenSSL error logging [RT #29932]

*  nslookup now returns a nonzero exit code when it is unable to get
   an answer.  [RT #29492]

Other critical bug fixes are included.

Approved by:	delphij (mentor)
MFC after:	3 days
Security:	CVE-2012-5688
Sponsored by:	DK Hostmaster A/S
bmake and other updates necessary for the BIND 9.8.x upgrade. 2011-07-16T11:20:54+00:00 Doug Barton dougb@FreeBSD.org 2011-07-16T11:20:54+00:00 25630ba729c2d175add02aae3bf5bc66a89d2e3e This includes a structural change regarding atomic ops. Previously they were enabled on all platforms unless we had knowledge that they did not work. However both work performed by marius@ on sparc64 and the fact that the 9.8.x branch is fussier in this area has demonstrated that this is not a safe approach. So I've modified a patch provided by marius to enable them for i386, amd64, and ia64 only. 
This includes a structural change regarding atomic ops. Previously they
were enabled on all platforms unless we had knowledge that they did not
work. However both work performed by marius@ on sparc64 and the fact that
the 9.8.x branch is fussier in this area has demonstrated that this is
not a safe approach. So I've modified a patch provided by marius to
enable them for i386, amd64, and ia64 only.
Update BIND to version 9.6.1rc1. This version has better performance and 2009-05-31T05:42:58+00:00 Doug Barton dougb@FreeBSD.org 2009-05-31T05:42:58+00:00 6318052d9e161cbc69e4085125ef824d94de16ef lots of new features compared to 9.4.x, including: Full NSEC3 support Automatic zone re-signing New update-policy methods tcp-self and 6to4-self DHCID support. More detailed statistics counters including those supported in BIND 8. Faster ACL processing. Efficient LRU cache-cleaning mechanism. NSID support. 
lots of new features compared to 9.4.x, including:

	Full NSEC3 support
	Automatic zone re-signing
	New update-policy methods tcp-self and 6to4-self
	DHCID support.
	More detailed statistics counters including those supported in BIND 8.
	Faster ACL processing.
	Efficient LRU cache-cleaning mechanism.
	NSID support.
Update bmake glue for the BIND 9.4.1 import. 2007-06-02T23:19:58+00:00 Doug Barton dougb@FreeBSD.org 2007-06-02T23:19:58+00:00 d6ceb6db22c215fe821c9a0e85205954d153c217 This includes a return to building with threads, since one of the major focuses of the 9.4.x branch is to improve thread performance. 
This includes a return to building with threads, since one of the
major focuses of the 9.4.x branch is to improve thread performance.
Reimplementation of world/kernel build options. For details, see: 2006-03-17T18:54:44+00:00 Ruslan Ermilov ru@FreeBSD.org 2006-03-17T18:54:44+00:00 e1fe3dba5ce2826061f6489765be9b4a341736a9 http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html The src.conf(5) manpage is to follow in a few days. Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine) 
http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html

The src.conf(5) manpage is to follow in a few days.

Brought to you by:	imp, jhb, kris, phk, ru (all bugs are mine)
Finish the removal of threads support in ../config.mk,v 1.15. 2005-11-07T15:22:35+00:00 Ruslan Ermilov ru@FreeBSD.org 2005-11-07T15:22:35+00:00 1e4146ce4bf592099de22122abd9c3da53bd5992 






bmake changes to handle the move of dns/sec and related files
2005-03-17T08:35:21+00:00

Doug Barton
dougb@FreeBSD.org

2005-03-17T08:35:21+00:00

098df091f392837a78810a019da02dd01b329cd8












Fix the WANT_BIND_LIBS knob by correctly spelling it as WITH_BIND_LIBS
2004-09-24T18:42:05+00:00

Doug Barton
dougb@FreeBSD.org

2004-09-24T18:42:05+00:00

a2af6bc2597f41b8108f6add4e2a57eaa7482b35

to match how similar syntax is used in the ports system. Thanks to kris
for pointing out my mistake here.

Install the lwres library unless the user defines NO_BIND, or the new
knob, NO_BIND_LIBS_LWRES. There is at least one potential customer
for this library in the wings. Thanks to nectar for the reminder.





to match how similar syntax is used in the ports system. Thanks to kris
for pointing out my mistake here.

Install the lwres library unless the user defines NO_BIND, or the new
knob, NO_BIND_LIBS_LWRES. There is at least one potential customer
for this library in the wings. Thanks to nectar for the reminder.