mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2025-01-29 10:18:30 +00:00
Code Issues Releases Activity
7295a7f3d4
freebsd-ports/dns/bind96/Makefile

217 lines
6.7 KiB
Makefile
Raw Normal View History

Update to BIND version 9.0.0, now with better DNSSEC support among lots of other neat things like that. Sorry for the delay. Repo-copy by: asami
2000-10-29 04:45:17 +00:00
# $FreeBSD$
Update after repo-copy for BIND 9.6.0
2009-01-04 07:15:46 +00:00
PORTNAME= bind96
Update to 9.6-ESV-R9-P1 Security Fixes Prevents exploitation of a runtime_check which can crash named when satisfying a recursive query for particular malformed zones. (CVE-2013-3919) [RT #33690] Prevents a named assert (crash) when validating caused by using "Bad cache" data before it has been initialized. [CVE-2012-3817] [RT #30025] A condition has been corrected where improper handling of zero-length RDATA could cause undesirable behavior, including termination of the named process. [CVE-2012-1667] [RT #29644] See release notes for further features and bug fixes: https://kb.isc.org/article/AA-00968/0/BIND-9.6-ESV-R9-P1-Release-Notes.html Security: CVE-2013-3919 CVE-2012-3817 CVE-2012-1667
2013-06-05 11:46:54 +00:00
PORTVERSION= 9.6.3.2.ESV.R9
Upgrade to version 9.2.3rc4. The 9.2.3 code has many many bugs fixed from 9.2.2, check CHANGES for more information. The rc4 code has the delegation-only options. Check the ARM for information on how to enable it.
2003-09-25 05:08:39 +00:00
CATEGORIES= dns net ipv6
Heavy DNSSEC Validation Load Can Cause a "Bad Cache" Assertion Failure in BIND9 High numbers of queries with DNSSEC validation enabled can cause an assertion failure in named, caused by using a "bad cache" data structure before it has been initialized. CVE: CVE-2012-3817 Posting date: 24 July, 2012
2012-07-24 19:23:23 +00:00
MASTER_SITES= ${MASTER_SITE_ISC}
typo Submitted by: Kimura Fuyuki <fuyuki@hadaly.org>
2002-08-01 09:23:06 +00:00
MASTER_SITE_SUBDIR= bind9/${ISCVERSION}
DISTNAME is a slightly less painful way of dealing with wacky version numbers.
2004-03-14 23:06:52 +00:00
DISTNAME= bind-${ISCVERSION}
Update to BIND version 9.0.0, now with better DNSSEC support among lots of other neat things like that. Sorry for the delay. Repo-copy by: asami
2000-10-29 04:45:17 +00:00
Take maintainership of the BIND ports while I'm working on the latest security releases.
2012-10-10 09:11:41 +00:00
MAINTAINER= erwin@FreeBSD.org
Upgrade to the latest BIND patch level: Prevents a crash when queried for a record whose RDATA exceeds 65535 bytes. Prevents a crash when validating caused by using "Bad cache" data before it has been initialized. ISC_QUEUE handling for recursive clients was updated to address a race condition that could cause a memory leak. This rarely occurred with UDP clients, but could be a significant problem for a server handling a steady rate of TCP queries. A condition has been corrected where improper handling of zero-length RDATA could cause undesirable behavior, including termination of the named process. For more information: https://kb.isc.org/article/AA-00788
2012-09-19 03:46:35 +00:00
COMMENT= BIND DNS suite with updated DNSSEC and threads
Update to BIND version 9.0.0, now with better DNSSEC support among lots of other neat things like that. Sorry for the delay. Repo-copy by: asami
2000-10-29 04:45:17 +00:00
Add LICENSE.
2013-01-04 10:47:28 +00:00
LICENSE= ISCL
Complete the update for bind94 after the repocopy, and hook it up.
2007-01-28 22:45:54 +00:00
# ISC releases things like 9.4.0b3, which our versioning doesn't like
Update to 9.6-ESV-R9-P1 Security Fixes Prevents exploitation of a runtime_check which can crash named when satisfying a recursive query for particular malformed zones. (CVE-2013-3919) [RT #33690] Prevents a named assert (crash) when validating caused by using "Bad cache" data before it has been initialized. [CVE-2012-3817] [RT #30025] A condition has been corrected where improper handling of zero-length RDATA could cause undesirable behavior, including termination of the named process. [CVE-2012-1667] [RT #29644] See release notes for further features and bug fixes: https://kb.isc.org/article/AA-00968/0/BIND-9.6-ESV-R9-P1-Release-Notes.html Security: CVE-2013-3919 CVE-2012-3817 CVE-2012-1667
2013-06-05 11:46:54 +00:00
ISCVERSION= 9.6-ESV-R9-P1
Fix PORTVERSION so that wacky things don't happen down the road. In my previous commit I forgot to mention that 'pkg_add -r bind' is only half the rationale for changing PORTNAME. The other half is so that people who really want to can 'pkg_add -r bind9'.
2002-03-17 19:09:09 +00:00
- Flip from MAKE_JOBS_SAFE to MAKE_JOBS_UNSAFE, fails both on pointyhat and on my local machine
2009-04-12 21:33:23 +00:00
MAKE_JOBS_UNSAFE= yes
Where it matters, update regarding MAKE_JOBS_{UN}SAFE for my ports
2009-03-24 19:51:28 +00:00
Update to BIND version 9.0.0, now with better DNSSEC support among lots of other neat things like that. Sorry for the delay. Repo-copy by: asami
2000-10-29 04:45:17 +00:00
GNU_CONFIGURE= yes
Fix a long-standing problem that appears when users install openssl from ports, and do not use the option to have the port version overwrite the base version. Several folks have mentioned this problem in the past, but a good workaround (and more importantly, solid testing) were provided by the submitter. Submitted by: Uffe Vedenbrant <uffe@vedenbrant.se>
2005-11-27 01:03:06 +00:00
CONFIGURE_ARGS= --localstatedir=/var --disable-linux-caps \
Update to BIND 9.3.0, the latest from ISC. This version has several significant updates, not the least of which is the new and improved DNSSEC code based on the latest standards (including DS). Various updates to the port, including: 1. Download the PGP signature 2. If running on ${OSVERSION} >= 503000, configure with threads 3. Update pkg-descr re IPv6 RRs 4. Update pkg-message to reflect a world with 6-current There is also a patch to correct a man page installation error. This problem should be fixed in the next release. Approved by: portmgr (marcus)
2004-09-24 04:03:31 +00:00
--with-randomdev=/dev/random
Update to BIND version 9.0.0, now with better DNSSEC support among lots of other neat things like that. Sorry for the delay. Repo-copy by: asami
2000-10-29 04:45:17 +00:00
- Update CONFLICTS - Fix a typo in the OPTIONSNG conversion - Add FIXED_RRSET option - Add RPZ options (9.8 and 9.8 only) PR: 172586 Submitted by: Craig Leres <leres@ee.lbl.gov> Feature safe: yes
2012-11-27 10:05:32 +00:00
CONFLICTS= bind9*-9.[45789].* bind9*-sdb-9.[45789].* bind-tools-9.*
Update to 9.6-ESV-R9 and extend the EOL to January 2014
2013-05-31 09:31:58 +00:00
DEPRECATED= EOL in January 2014, consider moving to Bind 9.8 or 9.9
EXPIRATION_DATE= 2014-01-31
Add OPTIONS to the rest of my ports that need them. Add CONFLICTS to the bind* ports.
2006-08-28 06:03:13 +00:00
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
OPTIONS_DEFAULT= IPV6 SSL LINKS XML THREADS
OPTIONS_DEFINE= SSL LINKS XML IDN REPLACE_BASE LARGE_FILE \
- Use new OPTIONS_GROUP for DLZ options.[1] - This also allows more than one DLZ option to be set.[2] Submitted by: bapt [1] (as RADIO) Suggested by: az [2] (thus GROUP instead)
2012-12-14 10:43:35 +00:00
SIGCHASE IPV6 THREADS FIXED_RRSET
OPTIONS_GROUP= DLZ
OPTIONS_GROUP_DLZ= DLZ_POSTGRESQL DLZ_MYSQL DLZ_BDB \
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
DLZ_LDAP DLZ_FILESYSTEM DLZ_STUB
Improve the SSL option description Submitted by: Kazunori Fujiwara <fujiwara@jprs.co.jp> Feature safe: yes
2012-12-03 10:52:11 +00:00
SSL_DESC= Build with OpenSSL (Required for DNSSEC)
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
LINKS_DESC= Create conf file symlinks in ${PREFIX}
XML_DESC= Support for xml statistics output
REPLACE_BASE_DESC= Replace base BIND with this version
LARGE_FILE_DESC= 64-bit file support
SIGCHASE_DESC= dig/host/nslookup will do DNSSEC validation
- Update CONFLICTS - Fix a typo in the OPTIONSNG conversion - Add FIXED_RRSET option - Add RPZ options (9.8 and 9.8 only) PR: 172586 Submitted by: Craig Leres <leres@ee.lbl.gov> Feature safe: yes
2012-11-27 10:05:32 +00:00
FIXED_RRSET= Enable fixed rrset ordering
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
DLZ_DESC= Dynamically Loadable Zones
DLZ_POSTGRESQL_DESC= DLZ Postgres driver
Reduce lenght of the option description for DLZ_MYSQL to avoid problems with the older dialog(1) on FreeBSD 8.x Noticed by: Terry Kennedy <terry@tmk.com> Feature safe: yes
2012-10-26 08:37:10 +00:00
DLZ_MYSQL_DESC= DLZ MySQL driver (no threading)
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
DLZ_BDB_DESC= DLZ BDB driver
DLZ_LDAP_DESC= DLZ LDAP driver
DLZ_FILESYSTEM_DESC= DLZ filesystem driver
DLZ_STUB_DESC= DLZ stub driver
Add OPTIONS to the rest of my ports that need them. Add CONFLICTS to the bind* ports.
2006-08-28 06:03:13 +00:00
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.include <bsd.port.options.mk>
Add OPTIONS to the rest of my ports that need them. Add CONFLICTS to the bind* ports.
2006-08-28 06:03:13 +00:00
Upgrade to version 9.5.1 which includes numerous bug fixes and performance improvements, including, "Additional support for query port randomization including performance improvement and port range specification." When building on amd64 ports' configure doesn't properly recognize our arch, so help it along a bit. [1] Submitted by: ivan jr sy <ivan_jr@yahoo.com> [1]
2008-12-29 21:29:33 +00:00
.if (${ARCH} == "amd64")
ARCH= x86_64
.endif
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MSSL}
Update to the -P1 versions of the current BIND ports which contain the fix for the following vulnerability: https://www.isc.org/node/373 Description: Return values from OpenSSL library functions EVP_VerifyFinal() and DSA_do_verify() were not checked properly. Impact: It is theoretically possible to spoof answers returned from zones using the DNSKEY algorithms DSA (3) and NSEC3DSA (6). In short, if you're not using DNSSEC to verify signatures you have nothing to worry about. While I'm here, address the issues raised in the PR by adding a knob to disable building with OpenSSL altogether (which eliminates DNSSEC capability), and fix the configure arguments to better deal with the situation where the user has ssl bits in both the base and LOCALBASE. PR: ports/126297 Submitted by: Ronald F.Guilmette <rfg@tristatelogic.com>
2009-01-08 08:18:45 +00:00
CONFIGURE_ARGS+= --with-openssl=${OPENSSLBASE}
- Update CONFLICTS - Fix a typo in the OPTIONSNG conversion - Add FIXED_RRSET option - Add RPZ options (9.8 and 9.8 only) PR: 172586 Submitted by: Craig Leres <leres@ee.lbl.gov> Feature safe: yes
2012-11-27 10:05:32 +00:00
USE_OPENSSL= yes
Fix a long-standing problem that appears when users install openssl from ports, and do not use the option to have the port version overwrite the base version. Several folks have mentioned this problem in the past, but a good workaround (and more importantly, solid testing) were provided by the submitter. Submitted by: Uffe Vedenbrant <uffe@vedenbrant.se>
2005-11-27 01:03:06 +00:00
.else
Update to the -P1 versions of the current BIND ports which contain the fix for the following vulnerability: https://www.isc.org/node/373 Description: Return values from OpenSSL library functions EVP_VerifyFinal() and DSA_do_verify() were not checked properly. Impact: It is theoretically possible to spoof answers returned from zones using the DNSKEY algorithms DSA (3) and NSEC3DSA (6). In short, if you're not using DNSSEC to verify signatures you have nothing to worry about. While I'm here, address the issues raised in the PR by adding a knob to disable building with OpenSSL altogether (which eliminates DNSSEC capability), and fix the configure arguments to better deal with the situation where the user has ssl bits in both the base and LOCALBASE. PR: ports/126297 Submitted by: Ronald F.Guilmette <rfg@tristatelogic.com>
2009-01-08 08:18:45 +00:00
CONFIGURE_ARGS+= --disable-openssl-version-check
CONFIGURE_ARGS+= --without-openssl
Fix a long-standing problem that appears when users install openssl from ports, and do not use the option to have the port version overwrite the base version. Several folks have mentioned this problem in the past, but a good workaround (and more importantly, solid testing) were provided by the submitter. Submitted by: Uffe Vedenbrant <uffe@vedenbrant.se>
2005-11-27 01:03:06 +00:00
.endif
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MXML}
Update for 9.5.0 Some of the important features of BIND 9 are: DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests) IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA) Experimental IPv6 Resolver Library DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0 Improved standards conformance Views: One server process can provide multiple "views" of the DNS namespace, e.g. an "inside" view to certain clients, and an "outside" view to others. Multiprocessor Support, including working threads in this version BIND 9.5 has a number of new features over previous versions, including: GSS-TSIG support (RFC 3645), DHCID support Experimental http server and statistics support for named via xml More detailed statistics counters, compatible with the ones supported in BIND 8 Faster ACL processing Efficient LRU cache cleaning mechanism. NSID support (RFC 5001).
2008-07-03 07:26:14 +00:00
CONFIGURE_ARGS+= --with-libxml2=${LOCALBASE}
LIB_DEPENDS+= xml2.5:${PORTSDIR}/textproc/libxml2
.else
CONFIGURE_ARGS+= --without-libxml2
.endif
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MIDN}
Update for 9.5.0 Some of the important features of BIND 9 are: DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests) IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA) Experimental IPv6 Resolver Library DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0 Improved standards conformance Views: One server process can provide multiple "views" of the DNS namespace, e.g. an "inside" view to certain clients, and an "outside" view to others. Multiprocessor Support, including working threads in this version BIND 9.5 has a number of new features over previous versions, including: GSS-TSIG support (RFC 3645), DHCID support Experimental http server and statistics support for named via xml More detailed statistics counters, compatible with the ones supported in BIND 8 Faster ACL processing Efficient LRU cache cleaning mechanism. NSID support (RFC 5001).
2008-07-03 07:26:14 +00:00
CONFIGURE_ARGS+= --with-idn=${LOCALBASE} --with-libiconv=${LOCALBASE}
The dependency on idnkit should be a LIB_, not a BUILD_ PR: ports/137240 Submitted by: danger
2009-07-30 18:47:46 +00:00
LIB_DEPENDS+= idnkit.1:${PORTSDIR}/dns/idnkit
Update for 9.5.0 Some of the important features of BIND 9 are: DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests) IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA) Experimental IPv6 Resolver Library DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0 Improved standards conformance Views: One server process can provide multiple "views" of the DNS namespace, e.g. an "inside" view to certain clients, and an "outside" view to others. Multiprocessor Support, including working threads in this version BIND 9.5 has a number of new features over previous versions, including: GSS-TSIG support (RFC 3645), DHCID support Experimental http server and statistics support for named via xml More detailed statistics counters, compatible with the ones supported in BIND 8 Faster ACL processing Efficient LRU cache cleaning mechanism. NSID support (RFC 5001).
2008-07-03 07:26:14 +00:00
.else
CONFIGURE_ARGS+= --without-idn
.endif
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MLINKS} && empty(PORT_OPTIONS:MREPLACE_BASE)
For all: Add an OPTION (on by default) to install the appropriate symlinks for named.conf and rndc.key in /usr/local/etc and /var/named/usr/local/etc. For bind9[456]: Add OPTIONs (off by default) for the DLZ configure options, and their corresponding ports knobs. [1] The basic infrastructure for this was provided in the PR, but this version is slightly different in a few details so responsibility for bugs is mine. PR: ports/122974 [1] Submitted by: Michael Schout <mschout@gkg.net> [1]
2009-08-29 23:15:57 +00:00
PLIST_SUB+= LINKS=""
.else
PLIST_SUB+= LINKS="@comment "
.endif
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MLARGE_FILE}
Complete the update for bind94 after the repocopy, and hook it up.
2007-01-28 22:45:54 +00:00
CONFIGURE_ARGS+= --enable-largefile
.endif
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MSIGCHASE}
Add an OPTION to turn on the ability of dns/host/nslookup to do DNSSEC validation. This is off by default, so no PORTREVISION bump. Submitted by: Andrei V. Lavreniyuk <andy.lavr@reactor-xg.kiev.ua>
2008-07-16 20:39:24 +00:00
CONFIGURE_ARGS+= STD_CDEFINES="-DDIG_SIGCHASE=1"
.endif
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MIPV6}
Complete the update for bind94 after the repocopy, and hook it up.
2007-01-28 22:45:54 +00:00
CONFIGURE_ARGS+= --enable-ipv6
.endif
- Update CONFLICTS - Fix a typo in the OPTIONSNG conversion - Add FIXED_RRSET option - Add RPZ options (9.8 and 9.8 only) PR: 172586 Submitted by: Craig Leres <leres@ee.lbl.gov> Feature safe: yes
2012-11-27 10:05:32 +00:00
.if ${PORT_OPTIONS:MFIXED_RRSET}
CONFIGURE_ARGS+= --enable-fixed-rrset
.endif
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MDLZ_POSTGRESQL}
For all: Add an OPTION (on by default) to install the appropriate symlinks for named.conf and rndc.key in /usr/local/etc and /var/named/usr/local/etc. For bind9[456]: Add OPTIONs (off by default) for the DLZ configure options, and their corresponding ports knobs. [1] The basic infrastructure for this was provided in the PR, but this version is slightly different in a few details so responsibility for bugs is mine. PR: ports/122974 [1] Submitted by: Michael Schout <mschout@gkg.net> [1]
2009-08-29 23:15:57 +00:00
CONFIGURE_ARGS+= --with-dlz-postgres=yes
USE_PGSQL= yes
.endif
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MDLZ_MYSQL}
For all: Add an OPTION (on by default) to install the appropriate symlinks for named.conf and rndc.key in /usr/local/etc and /var/named/usr/local/etc. For bind9[456]: Add OPTIONs (off by default) for the DLZ configure options, and their corresponding ports knobs. [1] The basic infrastructure for this was provided in the PR, but this version is slightly different in a few details so responsibility for bugs is mine. PR: ports/122974 [1] Submitted by: Michael Schout <mschout@gkg.net> [1]
2009-08-29 23:15:57 +00:00
CONFIGURE_ARGS+= --with-dlz-mysql=yes
USE_MYSQL= yes
.endif
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MDLZ_BDB}
For all: Add an OPTION (on by default) to install the appropriate symlinks for named.conf and rndc.key in /usr/local/etc and /var/named/usr/local/etc. For bind9[456]: Add OPTIONs (off by default) for the DLZ configure options, and their corresponding ports knobs. [1] The basic infrastructure for this was provided in the PR, but this version is slightly different in a few details so responsibility for bugs is mine. PR: ports/122974 [1] Submitted by: Michael Schout <mschout@gkg.net> [1]
2009-08-29 23:15:57 +00:00
CONFIGURE_ARGS+= --with-dlz-bdb=yes
USE_BDB= yes
.endif
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MDLZ_LDAP}
For all: Add an OPTION (on by default) to install the appropriate symlinks for named.conf and rndc.key in /usr/local/etc and /var/named/usr/local/etc. For bind9[456]: Add OPTIONs (off by default) for the DLZ configure options, and their corresponding ports knobs. [1] The basic infrastructure for this was provided in the PR, but this version is slightly different in a few details so responsibility for bugs is mine. PR: ports/122974 [1] Submitted by: Michael Schout <mschout@gkg.net> [1]
2009-08-29 23:15:57 +00:00
CONFIGURE_ARGS+= --with-dlz-ldap=yes
USE_OPENLDAP= yes
.endif
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MDLZ_FILESYSTEM}
For all: Add an OPTION (on by default) to install the appropriate symlinks for named.conf and rndc.key in /usr/local/etc and /var/named/usr/local/etc. For bind9[456]: Add OPTIONs (off by default) for the DLZ configure options, and their corresponding ports knobs. [1] The basic infrastructure for this was provided in the PR, but this version is slightly different in a few details so responsibility for bugs is mine. PR: ports/122974 [1] Submitted by: Michael Schout <mschout@gkg.net> [1]
2009-08-29 23:15:57 +00:00
CONFIGURE_ARGS+= --with-dlz-filesystem=yes
.endif
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MDLZ_STUB}
For all: Add an OPTION (on by default) to install the appropriate symlinks for named.conf and rndc.key in /usr/local/etc and /var/named/usr/local/etc. For bind9[456]: Add OPTIONs (off by default) for the DLZ configure options, and their corresponding ports knobs. [1] The basic infrastructure for this was provided in the PR, but this version is slightly different in a few details so responsibility for bugs is mine. PR: ports/122974 [1] Submitted by: Michael Schout <mschout@gkg.net> [1]
2009-08-29 23:15:57 +00:00
CONFIGURE_ARGS+= --with-dlz-stub=yes
.endif
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MTHREADS} && empty(PORT_OPTIONS:MDLZ_MYSQL)
Update to BIND 9.3.0, the latest from ISC. This version has several significant updates, not the least of which is the new and improved DNSSEC code based on the latest standards (including DS). Various updates to the port, including: 1. Download the PGP signature 2. If running on ${OSVERSION} >= 503000, configure with threads 3. Update pkg-descr re IPv6 RRs 4. Update pkg-message to reflect a world with 6-current There is also a patch to correct a man page installation error. This problem should be fixed in the next release. Approved by: portmgr (marcus)
2004-09-24 04:03:31 +00:00
CONFIGURE_ARGS+= --enable-threads
.else
CONFIGURE_ARGS+= --disable-threads
.endif
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MREPLACE_BASE}
Upgrade to 9.2.2rc1. This version has been available for several months, and is widely considered to be more stable than 9.2.1. I would have preferred a -REL version, but better is better. * Clean up the Makefile a little * Just say no to threads * Add the PORT_REPLACES_BASE magic, similar to the bind8 port
2003-01-26 08:42:01 +00:00
PKGNAMESUFFIX= -base
PREFIX= /usr
BIND_DESTETC= /etc/namedb
CONFIGURE_ARGS+= --prefix=${PREFIX} \
- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script supports them. This is determined by running ``configure --help'' in do-configure target and set the shell variable _LATE_CONFIGURE_ARGS which is then passed to CONFIGURE_ARGS. - Remove --mandir and --infodir in ports' Makefile where applicable Few ports use REINPLACE_CMD to achieve the same effect, remove them too. - Correct some manual pages location from PREFIX/man to MANPREFIX/man - Define INFO_PATH where necessary - Document that .info files are installed in a subdirectory relative to PREFIX/INFO_PATH and slightly change add-plist-info to use INFO_PATH and subdirectory detection. PR: ports/111470 Approved by: portmgr Discussed with: stas (Mk/*), gerald (info related stuffs) Tested by: pointyhat exp run
2007-07-23 09:36:51 +00:00
--sysconfdir=${BIND_DESTETC}
Upgrade to the latest release candidate, 9.2.1rc1. Numerous 9.x bugs are fixed in this version, however BIND 9 is still recommended only for early adopters, and those that have time to closely monitor their name service. * Change PORTNAME to bind9 so that 'pkg_add -r bind' does the right thing * Use the local version of openssl, and disable threads on all but the most recent -current. Thread support is still considered experimental.
2002-03-17 06:47:25 +00:00
.else
Upgrade to 9.2.2rc1. This version has been available for several months, and is widely considered to be more stable than 9.2.1. I would have preferred a -REL version, but better is better. * Clean up the Makefile a little * Just say no to threads * Add the PORT_REPLACES_BASE magic, similar to the bind8 port
2003-01-26 08:42:01 +00:00
BIND_DESTETC= ${PREFIX}/etc
Upgrade to the latest release candidate, 9.2.1rc1. Numerous 9.x bugs are fixed in this version, however BIND 9 is still recommended only for early adopters, and those that have time to closely monitor their name service. * Change PORTNAME to bind9 so that 'pkg_add -r bind' does the right thing * Use the local version of openssl, and disable threads on all but the most recent -current. Thread support is still considered experimental.
2002-03-17 06:47:25 +00:00
.endif
For all: Add an OPTION (on by default) to install the appropriate symlinks for named.conf and rndc.key in /usr/local/etc and /var/named/usr/local/etc. For bind9[456]: Add OPTIONs (off by default) for the DLZ configure options, and their corresponding ports knobs. [1] The basic infrastructure for this was provided in the PR, but this version is slightly different in a few details so responsibility for bugs is mine. PR: ports/122974 [1] Submitted by: Michael Schout <mschout@gkg.net> [1]
2009-08-29 23:15:57 +00:00
PLIST_SUB+= BIND_DESTETC="${BIND_DESTETC}"
Upgrade to 9.2.2rc1. This version has been available for several months, and is widely considered to be more stable than 9.2.1. I would have preferred a -REL version, but better is better. * Clean up the Makefile a little * Just say no to threads * Add the PORT_REPLACES_BASE magic, similar to the bind8 port
2003-01-26 08:42:01 +00:00
Update to version 9.6.1, the latest from ISC. This version contains numerous bug fixes and updates, especially in the DNSSEC code, including the new NSEC3 protocol. Full details are available at: http://oldwww.isc.org/sw/bind/view/?release=9.6.1&noframes=1
2009-06-19 04:40:13 +00:00
MAN1= dig.1 host.1 isc-config.sh.1 nslookup.1 nsupdate.1
Upgrade to the latest release candidate, 9.2.1rc1. Numerous 9.x bugs are fixed in this version, however BIND 9 is still recommended only for early adopters, and those that have time to closely monitor their name service. * Change PORTNAME to bind9 so that 'pkg_add -r bind' does the right thing * Use the local version of openssl, and disable threads on all but the most recent -current. Thread support is still considered experimental.
2002-03-17 06:47:25 +00:00
MAN3= lwres.3 lwres_addr_parse.3 lwres_buffer.3 lwres_buffer_add.3 \
lwres_buffer_back.3 lwres_buffer_clear.3 lwres_buffer_first.3 \
lwres_buffer_forward.3 lwres_buffer_getmem.3 lwres_buffer_getuint16.3 \
lwres_buffer_getuint32.3 lwres_buffer_getuint8.3 lwres_buffer_init.3 \
lwres_buffer_invalidate.3 lwres_buffer_putmem.3 \
lwres_buffer_putuint16.3 lwres_buffer_putuint32.3 \
lwres_buffer_putuint8.3 lwres_buffer_subtract.3 lwres_conf_clear.3 \
lwres_conf_get.3 lwres_conf_init.3 lwres_conf_parse.3 \
lwres_conf_print.3 lwres_config.3 lwres_context.3 \
lwres_context_allocmem.3 lwres_context_create.3 \
lwres_context_destroy.3 lwres_context_freemem.3 \
lwres_context_initserial.3 lwres_context_nextserial.3 \
lwres_context_sendrecv.3 lwres_endhostent.3 lwres_endhostent_r.3 \
lwres_freeaddrinfo.3 lwres_freehostent.3 lwres_gabn.3 \
lwres_gabnrequest_free.3 lwres_gabnrequest_parse.3 \
lwres_gabnrequest_render.3 lwres_gabnresponse_free.3 \
lwres_gabnresponse_parse.3 lwres_gabnresponse_render.3 \
lwres_gai_strerror.3 lwres_getaddrinfo.3 lwres_getaddrsbyname.3 \
lwres_gethostbyaddr.3 lwres_gethostbyaddr_r.3 lwres_gethostbyname.3 \
lwres_gethostbyname2.3 lwres_gethostbyname_r.3 lwres_gethostent.3 \
lwres_gethostent_r.3 lwres_getipnode.3 lwres_getipnodebyaddr.3 \
lwres_getipnodebyname.3 lwres_getnamebyaddr.3 lwres_getnameinfo.3 \
lwres_getrrsetbyname.3 lwres_gnba.3 lwres_gnbarequest_free.3 \
lwres_gnbarequest_parse.3 lwres_gnbarequest_render.3 \
lwres_gnbaresponse_free.3 lwres_gnbaresponse_parse.3 \
lwres_gnbaresponse_render.3 lwres_herror.3 lwres_hstrerror.3 \
lwres_inetntop.3 lwres_lwpacket_parseheader.3 \
lwres_lwpacket_renderheader.3 lwres_net_ntop.3 lwres_noop.3 \
lwres_nooprequest_free.3 lwres_nooprequest_parse.3 \
lwres_nooprequest_render.3 lwres_noopresponse_free.3 \
lwres_noopresponse_parse.3 lwres_noopresponse_render.3 \
lwres_packet.3 lwres_resutil.3 lwres_sethostent.3 \
lwres_sethostent_r.3 lwres_string_parse.3
Update to BIND 9.3.0, the latest from ISC. This version has several significant updates, not the least of which is the new and improved DNSSEC code based on the latest standards (including DS). Various updates to the port, including: 1. Download the PGP signature 2. If running on ${OSVERSION} >= 503000, configure with threads 3. Update pkg-descr re IPv6 RRs 4. Update pkg-message to reflect a world with 6-current There is also a patch to correct a man page installation error. This problem should be fixed in the next release. Approved by: portmgr (marcus)
2004-09-24 04:03:31 +00:00
MAN5= named.conf.5 rndc.conf.5
Update after repo-copy for BIND 9.6.0
2009-01-04 07:15:46 +00:00
MAN8= dnssec-dsfromkey.8 dnssec-keyfromlabel.8 dnssec-keygen.8 \
dnssec-signzone.8 lwresd.8 named-checkconf.8 named-checkzone.8 \
named.8 rndc-confgen.8 rndc.8
Complete the update for bind94 after the repocopy, and hook it up.
2007-01-28 22:45:54 +00:00
MLINKS= named-checkzone.8 named-compilezone.8
Update to BIND version 9.0.0, now with better DNSSEC support among lots of other neat things like that. Sorry for the delay. Repo-copy by: asami
2000-10-29 04:45:17 +00:00
Major overhaul, including an updated man/plist, patching the man pages to make the location of etc/ files prefix-safe. Install a sample rndc.conf file. Since rndc won't start without one the user should have an example to work from. Add the installation of various docs wrapped in a NOPORTDOCS test. Last but not least, add a patch that turns off the debugging code ISC left on by default. This should help solve the problems with misbehaving assert's, related to nmap and other causes.
2001-02-07 12:36:27 +00:00
post-patch:
Upgrade to version 9.5.1 which includes numerous bug fixes and performance improvements, including, "Additional support for query port randomization including performance improvement and port range specification." When building on amd64 ports' configure doesn't properly recognize our arch, so help it along a bit. [1] Submitted by: ivan jr sy <ivan_jr@yahoo.com> [1]
2008-12-29 21:29:33 +00:00
.for FILE in check/named-checkconf.8 named/named.8 nsupdate/nsupdate.1 \
Upgrade to the latest release candidate, 9.2.1rc1. Numerous 9.x bugs are fixed in this version, however BIND 9 is still recommended only for early adopters, and those that have time to closely monitor their name service. * Change PORTNAME to bind9 so that 'pkg_add -r bind' does the right thing * Use the local version of openssl, and disable threads on all but the most recent -current. Thread support is still considered experimental.
2002-03-17 06:47:25 +00:00
rndc/rndc.8
Update to BIND 9.3.0, the latest from ISC. This version has several significant updates, not the least of which is the new and improved DNSSEC code based on the latest standards (including DS). Various updates to the port, including: 1. Download the PGP signature 2. If running on ${OSVERSION} >= 503000, configure with threads 3. Update pkg-descr re IPv6 RRs 4. Update pkg-message to reflect a world with 6-current There is also a patch to correct a man page installation error. This problem should be fixed in the next release. Approved by: portmgr (marcus)
2004-09-24 04:03:31 +00:00
@${MV} ${WRKSRC}/bin/${FILE} ${WRKSRC}/bin/${FILE}.Dist
@${SED} -e 's#/etc/named.conf#${BIND_DESTETC}/named.conf#g' \
Upgrade to 9.2.2rc1. This version has been available for several months, and is widely considered to be more stable than 9.2.1. I would have preferred a -REL version, but better is better. * Clean up the Makefile a little * Just say no to threads * Add the PORT_REPLACES_BASE magic, similar to the bind8 port
2003-01-26 08:42:01 +00:00
-e 's#/etc/rndc.conf#${BIND_DESTETC}/rndc.conf#g' \
Fix the location of the default pid file in named.8 Problem pointed out in the PR PR: conf/155006 Submitted by: Helmut Schneider <jumper99@gmx.de>
2011-07-17 04:08:59 +00:00
-e "s#/var\/run\/named\/named.pid#/var/run/named/pid#" \
Upgrade to 9.2.2rc1. This version has been available for several months, and is widely considered to be more stable than 9.2.1. I would have preferred a -REL version, but better is better. * Clean up the Makefile a little * Just say no to threads * Add the PORT_REPLACES_BASE magic, similar to the bind8 port
2003-01-26 08:42:01 +00:00
${WRKSRC}/bin/${FILE}.Dist > ${WRKSRC}/bin/${FILE}
Major overhaul, including an updated man/plist, patching the man pages to make the location of etc/ files prefix-safe. Install a sample rndc.conf file. Since rndc won't start without one the user should have an example to work from. Add the installation of various docs wrapped in a NOPORTDOCS test. Last but not least, add a patch that turns off the debugging code ISC left on by default. This should help solve the problems with misbehaving assert's, related to nmap and other causes.
2001-02-07 12:36:27 +00:00
.endfor
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MDOCS}
Update to version 9.6-ESV-R6, the latest from ISC, which contains numerous bug fixes. For the port, switch to using the PORTDOCS macro. Also, switch to the (identical) pkg-message in ../bind97 which was apparently missed when the other ports were converted. Feature safe: yes
2012-04-04 22:02:15 +00:00
PORTDOCS= *
Upgrade to the latest BIND patch level: Prevents a crash when queried for a record whose RDATA exceeds 65535 bytes. Prevents a crash when validating caused by using "Bad cache" data before it has been initialized. ISC_QUEUE handling for recursive clients was updated to address a race condition that could cause a memory leak. This rarely occurred with UDP clients, but could be a significant problem for a server handling a steady rate of TCP queries. A condition has been corrected where improper handling of zero-length RDATA could cause undesirable behavior, including termination of the named process. For more information: https://kb.isc.org/article/AA-00788
2012-09-19 03:46:35 +00:00
.endif
Update to BIND version 9.0.0, now with better DNSSEC support among lots of other neat things like that. Sorry for the delay. Repo-copy by: asami
2000-10-29 04:45:17 +00:00
post-install:
Major overhaul, including an updated man/plist, patching the man pages to make the location of etc/ files prefix-safe. Install a sample rndc.conf file. Since rndc won't start without one the user should have an example to work from. Add the installation of various docs wrapped in a NOPORTDOCS test. Last but not least, add a patch that turns off the debugging code ISC left on by default. This should help solve the problems with misbehaving assert's, related to nmap and other causes.
2001-02-07 12:36:27 +00:00
${INSTALL_DATA} ${WRKSRC}/bin/rndc/rndc.conf \
Upgrade to 9.2.2rc1. This version has been available for several months, and is widely considered to be more stable than 9.2.1. I would have preferred a -REL version, but better is better. * Clean up the Makefile a little * Just say no to threads * Add the PORT_REPLACES_BASE magic, similar to the bind8 port
2003-01-26 08:42:01 +00:00
${BIND_DESTETC}/rndc.conf.sample
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MDOCS}
Upgrade to 9.2.2rc1. This version has been available for several months, and is widely considered to be more stable than 9.2.1. I would have preferred a -REL version, but better is better. * Clean up the Makefile a little * Just say no to threads * Add the PORT_REPLACES_BASE magic, similar to the bind8 port
2003-01-26 08:42:01 +00:00
${MKDIR} ${DOCSDIR}/arm ${DOCSDIR}/misc
Complete the update for bind94 after the repocopy, and hook it up.
2007-01-28 22:45:54 +00:00
${INSTALL_DATA} ${WRKSRC}/doc/arm/*.html ${DOCSDIR}/arm
${INSTALL_DATA} ${WRKSRC}/doc/arm/Bv9ARM.pdf ${DOCSDIR}/
Upgrade to 9.2.2rc1. This version has been available for several months, and is widely considered to be more stable than 9.2.1. I would have preferred a -REL version, but better is better. * Clean up the Makefile a little * Just say no to threads * Add the PORT_REPLACES_BASE magic, similar to the bind8 port
2003-01-26 08:42:01 +00:00
${INSTALL_DATA} ${WRKSRC}/doc/misc/[a-z]* ${DOCSDIR}/misc
Major overhaul, including an updated man/plist, patching the man pages to make the location of etc/ files prefix-safe. Install a sample rndc.conf file. Since rndc won't start without one the user should have an example to work from. Add the installation of various docs wrapped in a NOPORTDOCS test. Last but not least, add a patch that turns off the debugging code ISC left on by default. This should help solve the problems with misbehaving assert's, related to nmap and other causes.
2001-02-07 12:36:27 +00:00
${CP} ${WRKSRC}/CHANGES ${WRKSRC}/COPYRIGHT ${WRKSRC}/FAQ \
Update to version 9.6-ESV-R6, the latest from ISC, which contains numerous bug fixes. For the port, switch to using the PORTDOCS macro. Also, switch to the (identical) pkg-message in ../bind97 which was apparently missed when the other ports were converted. Feature safe: yes
2012-04-04 22:02:15 +00:00
${WRKSRC}/NSEC3-NOTES ${WRKSRC}/README* ${DOCSDIR}/
For all: Add an OPTION (on by default) to install the appropriate symlinks for named.conf and rndc.key in /usr/local/etc and /var/named/usr/local/etc. For bind9[456]: Add OPTIONs (off by default) for the DLZ configure options, and their corresponding ports knobs. [1] The basic infrastructure for this was provided in the PR, but this version is slightly different in a few details so responsibility for bugs is mine. PR: ports/122974 [1] Submitted by: Michael Schout <mschout@gkg.net> [1]
2009-08-29 23:15:57 +00:00
.endif
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.if ${PORT_OPTIONS:MLINKS} && empty(PORT_OPTIONS:MREPLACE_BASE)
Update to version 9.6-ESV-R3, the latest from ISC, which addresses the following security vulnerabilities. For more information regarding these issues please see: http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories 1. Cache incorrectly allows ncache and rrsig for the same type http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3613 Affects resolver operators whose servers are open to potential attackers. Triggering the bug will cause the server to crash. This bug applies even if you do not have DNSSEC enabled. 2. Using "allow-query" in the "options" or "view" statements to restrict access to authoritative zones has no effect. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3615 Affects authoritative server operators who wish to generally restrict queries to their authoritative zones, and are running 9.6.2-P2 or any version of 9.7.x. The bug will allow unauthorized end users to receive answers to queries they should not. For the port: 1. Add CONFLICT for the ../bind-tools port 2. Remove CONFLICT for the removed ../bind9 port 3. Remove OPTION for threads on < RELENG_7 4. Switch to pkg-install to create the symlinks to /etc/namedb/ as requested in [1] PR: ports/151635 [1] Submitted by: Benjamin Lee <ben@b1c1l1.com> [1]
2010-12-03 23:21:31 +00:00
PKG_PREFIX=${PREFIX} ${SH} ${PKGINSTALL} ${PKGNAME} POST-INSTALL
Major overhaul, including an updated man/plist, patching the man pages to make the location of etc/ files prefix-safe. Install a sample rndc.conf file. Since rndc won't start without one the user should have an example to work from. Add the installation of various docs wrapped in a NOPORTDOCS test. Last but not least, add a patch that turns off the debugging code ISC left on by default. This should help solve the problems with misbehaving assert's, related to nmap and other causes.
2001-02-07 12:36:27 +00:00
.endif
Update to BIND version 9.0.0, now with better DNSSEC support among lots of other neat things like that. Sorry for the delay. Repo-copy by: asami
2000-10-29 04:45:17 +00:00
Display the new pkg-message after port build.
2003-06-07 22:56:34 +00:00
@${CAT} ${PKGMESSAGE}
- Convert to OPTIONSNG - Turn on IPv6 support by default Feature safe: yes
2012-10-25 10:53:57 +00:00
.include <bsd.port.mk>
Reference in New Issue Copy Permalink