aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristoph Moench-Tegeder <cmt@FreeBSD.org>2026-05-10 18:35:23 +0000
committerChristoph Moench-Tegeder <cmt@FreeBSD.org>2026-05-10 18:40:03 +0000
commit6fafccff59f3978c1b625cf795d6c72d38a958de (patch)
treeb035b1aff88b549549ccd56d90405285f8c59809
parent8d9be9a7d91aa26e1b27b5bac94bb00af5ba7534 (diff)
www/firefox{,-esr} mail/thunderbird{,-esr}: native DNS HTTPS resolving
This enables the geckos to use the OS' resolver to resolve DNS HTTPS RRs (see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460 for specs on that) PR: 294981 Submitted by: Andre Albsmeier (cherry picked from commit c839877b69be0e7f18d8337b9ec2eb52f208f981)
-rw-r--r--mail/thunderbird-esr/Makefile1
-rw-r--r--mail/thunderbird-esr/files/patch-dns-resolve-https-rr34
-rw-r--r--mail/thunderbird/Makefile1
-rw-r--r--mail/thunderbird/files/patch-dns-resolve-https-rr34
-rw-r--r--www/firefox-esr/Makefile1
-rw-r--r--www/firefox-esr/files/patch-dns-resolve-https-rr34
-rw-r--r--www/firefox/Makefile2
-rw-r--r--www/firefox/files/patch-dns-resolve-https-rr34
8 files changed, 140 insertions, 1 deletions
diff --git a/mail/thunderbird-esr/Makefile b/mail/thunderbird-esr/Makefile
index db233868a07d..c649be43a364 100644
--- a/mail/thunderbird-esr/Makefile
+++ b/mail/thunderbird-esr/Makefile
@@ -1,5 +1,6 @@
PORTNAME= thunderbird
DISTVERSION= 140.10.2
+PORTREVISION= 1
CATEGORIES= mail news net-im wayland
MASTER_SITES= MOZILLA/${PORTNAME}/releases/${DISTVERSION}esr/source \
MOZILLA/${PORTNAME}/candidates/${DISTVERSION}esr-candidates/build2/source
diff --git a/mail/thunderbird-esr/files/patch-dns-resolve-https-rr b/mail/thunderbird-esr/files/patch-dns-resolve-https-rr
new file mode 100644
index 000000000000..e00af766c62a
--- /dev/null
+++ b/mail/thunderbird-esr/files/patch-dns-resolve-https-rr
@@ -0,0 +1,34 @@
+commit be323da0618d99573ef61a096fa4ae1b147378d9
+Author: Christoph Moench-Tegeder <cmt@FreeBSD.org>
+
+ enable resolving HTTPS RRs via the OS's resolver on FreeBSD
+
+ see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460 for details
+ on HTTPS RRs.
+
+diff --git netwerk/dns/moz.build netwerk/dns/moz.build
+index b2456d23a6df..3785da5d6e87 100644
+--- netwerk/dns/moz.build
++++ netwerk/dns/moz.build
+@@ -58,6 +58,8 @@ if CONFIG["MOZ_WIDGET_TOOLKIT"] == "windows":
+ elif CONFIG["OS_TARGET"] == "Linux":
+ SOURCES += ["PlatformDNSUnix.cpp"]
+ OS_LIBS += ["resolv"]
++elif CONFIG["OS_TARGET"] == "FreeBSD":
++ SOURCES += ["PlatformDNSUnix.cpp"]
+ elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "cocoa":
+ SOURCES += ["PlatformDNSMac.cpp"]
+ elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "android":
+diff --git netwerk/dns/nsHostResolver.cpp netwerk/dns/nsHostResolver.cpp
+index b7e3763ffeb5..a36edf32dc76 100644
+--- netwerk/dns/nsHostResolver.cpp
++++ netwerk/dns/nsHostResolver.cpp
+@@ -213,7 +213,7 @@ nsresult nsHostResolver::Init() MOZ_NO_THREAD_SAFETY_ANALYSIS {
+ #elif defined(MOZ_WIDGET_ANDROID)
+ // android_res_nquery only got added in API level 29
+ sNativeHTTPSSupported = jni::GetAPIVersion() >= 29;
+-#elif defined(XP_LINUX) || defined(XP_MACOSX)
++#elif defined(XP_LINUX) || defined(XP_MACOSX) || defined(XP_FREEBSD)
+ sNativeHTTPSSupported = true;
+ #endif
+ LOG(("Native HTTPS records supported=%d", bool(sNativeHTTPSSupported)));
diff --git a/mail/thunderbird/Makefile b/mail/thunderbird/Makefile
index ae47a1600b3e..9ea82d73b668 100644
--- a/mail/thunderbird/Makefile
+++ b/mail/thunderbird/Makefile
@@ -1,5 +1,6 @@
PORTNAME= thunderbird
DISTVERSION= 150.0.2
+PORTREVISION= 1
CATEGORIES= mail news net-im wayland
MASTER_SITES= MOZILLA/${PORTNAME}/releases/${DISTVERSION}${DISTVERSIONSUFFIX}/source \
MOZILLA/${PORTNAME}/candidates/${DISTVERSION}${DISTVERSIONSUFFIX}-candidates/build1/source
diff --git a/mail/thunderbird/files/patch-dns-resolve-https-rr b/mail/thunderbird/files/patch-dns-resolve-https-rr
new file mode 100644
index 000000000000..b0517900dd0a
--- /dev/null
+++ b/mail/thunderbird/files/patch-dns-resolve-https-rr
@@ -0,0 +1,34 @@
+commit c6452bc491ef6b531ae4e948926bd8d863ad1fc3
+Author: Christoph Moench-Tegeder <cmt@FreeBSD.org>
+
+ enable resolving HTTPS RRs via the OS's resolver on FreeBSD
+
+ see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460 for details
+ on HTTPS RRs.
+
+diff --git netwerk/dns/moz.build netwerk/dns/moz.build
+index 2369794f2407..7e3bff4b5092 100644
+--- netwerk/dns/moz.build
++++ netwerk/dns/moz.build
+@@ -56,6 +56,8 @@ if CONFIG["MOZ_WIDGET_TOOLKIT"] == "windows":
+ elif CONFIG["OS_TARGET"] == "Linux":
+ SOURCES += ["PlatformDNSUnix.cpp"]
+ OS_LIBS += ["resolv"]
++elif CONFIG["OS_TARGET"] == "FreeBSD":
++ SOURCES += ["PlatformDNSUnix.cpp"]
+ elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "cocoa":
+ SOURCES += ["PlatformDNSMac.cpp"]
+ elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "android":
+diff --git netwerk/dns/nsHostResolver.cpp netwerk/dns/nsHostResolver.cpp
+index 2ef4006a3b17..29c4c7cf5730 100644
+--- netwerk/dns/nsHostResolver.cpp
++++ netwerk/dns/nsHostResolver.cpp
+@@ -175,7 +175,7 @@ nsresult nsHostResolver::Init() MOZ_NO_THREAD_SAFETY_ANALYSIS {
+ #elif defined(MOZ_WIDGET_ANDROID)
+ // android_res_nquery only got added in API level 29
+ sNativeHTTPSSupported = jni::GetAPIVersion() >= 29;
+-#elif defined(XP_LINUX) || defined(XP_MACOSX)
++#elif defined(XP_LINUX) || defined(XP_MACOSX) || defined(XP_FREEBSD)
+ sNativeHTTPSSupported = true;
+ #endif
+ LOG(("Native HTTPS records supported=%d", bool(sNativeHTTPSSupported)));
diff --git a/www/firefox-esr/Makefile b/www/firefox-esr/Makefile
index f5dddf535689..2a00e4fc5a14 100644
--- a/www/firefox-esr/Makefile
+++ b/www/firefox-esr/Makefile
@@ -1,5 +1,6 @@
PORTNAME= firefox
DISTVERSION= 140.10.2
+PORTREVISION= 1
PORTEPOCH= 2
CATEGORIES= www wayland
MASTER_SITES= MOZILLA/${PORTNAME}/releases/${DISTVERSION}esr/source \
diff --git a/www/firefox-esr/files/patch-dns-resolve-https-rr b/www/firefox-esr/files/patch-dns-resolve-https-rr
new file mode 100644
index 000000000000..e00af766c62a
--- /dev/null
+++ b/www/firefox-esr/files/patch-dns-resolve-https-rr
@@ -0,0 +1,34 @@
+commit be323da0618d99573ef61a096fa4ae1b147378d9
+Author: Christoph Moench-Tegeder <cmt@FreeBSD.org>
+
+ enable resolving HTTPS RRs via the OS's resolver on FreeBSD
+
+ see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460 for details
+ on HTTPS RRs.
+
+diff --git netwerk/dns/moz.build netwerk/dns/moz.build
+index b2456d23a6df..3785da5d6e87 100644
+--- netwerk/dns/moz.build
++++ netwerk/dns/moz.build
+@@ -58,6 +58,8 @@ if CONFIG["MOZ_WIDGET_TOOLKIT"] == "windows":
+ elif CONFIG["OS_TARGET"] == "Linux":
+ SOURCES += ["PlatformDNSUnix.cpp"]
+ OS_LIBS += ["resolv"]
++elif CONFIG["OS_TARGET"] == "FreeBSD":
++ SOURCES += ["PlatformDNSUnix.cpp"]
+ elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "cocoa":
+ SOURCES += ["PlatformDNSMac.cpp"]
+ elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "android":
+diff --git netwerk/dns/nsHostResolver.cpp netwerk/dns/nsHostResolver.cpp
+index b7e3763ffeb5..a36edf32dc76 100644
+--- netwerk/dns/nsHostResolver.cpp
++++ netwerk/dns/nsHostResolver.cpp
+@@ -213,7 +213,7 @@ nsresult nsHostResolver::Init() MOZ_NO_THREAD_SAFETY_ANALYSIS {
+ #elif defined(MOZ_WIDGET_ANDROID)
+ // android_res_nquery only got added in API level 29
+ sNativeHTTPSSupported = jni::GetAPIVersion() >= 29;
+-#elif defined(XP_LINUX) || defined(XP_MACOSX)
++#elif defined(XP_LINUX) || defined(XP_MACOSX) || defined(XP_FREEBSD)
+ sNativeHTTPSSupported = true;
+ #endif
+ LOG(("Native HTTPS records supported=%d", bool(sNativeHTTPSSupported)));
diff --git a/www/firefox/Makefile b/www/firefox/Makefile
index 3f80f660dc8f..a71856851d55 100644
--- a/www/firefox/Makefile
+++ b/www/firefox/Makefile
@@ -1,6 +1,6 @@
PORTNAME= firefox
DISTVERSION= 150.0.2
-PORTREVISION= 1
+PORTREVISION= 2
PORTEPOCH= 2
CATEGORIES= www wayland
MASTER_SITES= MOZILLA/${PORTNAME}/releases/${DISTVERSION}${DISTVERSIONSUFFIX}/source \
diff --git a/www/firefox/files/patch-dns-resolve-https-rr b/www/firefox/files/patch-dns-resolve-https-rr
new file mode 100644
index 000000000000..b0517900dd0a
--- /dev/null
+++ b/www/firefox/files/patch-dns-resolve-https-rr
@@ -0,0 +1,34 @@
+commit c6452bc491ef6b531ae4e948926bd8d863ad1fc3
+Author: Christoph Moench-Tegeder <cmt@FreeBSD.org>
+
+ enable resolving HTTPS RRs via the OS's resolver on FreeBSD
+
+ see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460 for details
+ on HTTPS RRs.
+
+diff --git netwerk/dns/moz.build netwerk/dns/moz.build
+index 2369794f2407..7e3bff4b5092 100644
+--- netwerk/dns/moz.build
++++ netwerk/dns/moz.build
+@@ -56,6 +56,8 @@ if CONFIG["MOZ_WIDGET_TOOLKIT"] == "windows":
+ elif CONFIG["OS_TARGET"] == "Linux":
+ SOURCES += ["PlatformDNSUnix.cpp"]
+ OS_LIBS += ["resolv"]
++elif CONFIG["OS_TARGET"] == "FreeBSD":
++ SOURCES += ["PlatformDNSUnix.cpp"]
+ elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "cocoa":
+ SOURCES += ["PlatformDNSMac.cpp"]
+ elif CONFIG["MOZ_WIDGET_TOOLKIT"] == "android":
+diff --git netwerk/dns/nsHostResolver.cpp netwerk/dns/nsHostResolver.cpp
+index 2ef4006a3b17..29c4c7cf5730 100644
+--- netwerk/dns/nsHostResolver.cpp
++++ netwerk/dns/nsHostResolver.cpp
+@@ -175,7 +175,7 @@ nsresult nsHostResolver::Init() MOZ_NO_THREAD_SAFETY_ANALYSIS {
+ #elif defined(MOZ_WIDGET_ANDROID)
+ // android_res_nquery only got added in API level 29
+ sNativeHTTPSSupported = jni::GetAPIVersion() >= 29;
+-#elif defined(XP_LINUX) || defined(XP_MACOSX)
++#elif defined(XP_LINUX) || defined(XP_MACOSX) || defined(XP_FREEBSD)
+ sNativeHTTPSSupported = true;
+ #endif
+ LOG(("Native HTTPS records supported=%d", bool(sNativeHTTPSSupported)));