GNATMake was used to clean up the WRKSRC after extraction, but the
problem is that it's not present at that point on a clean build; it
comes in later as a build dependency. Rather than a messy definition
of extract-depends, just remove the files manually without gnatmake.
IRONSIDES is an authoritative DNS server that is provably invulnerable to
many of the problems that plague other servers. It achieves this property
through the use of formal methods in its design, in particular the language
Ada and the SPARK formal methods tool set. Code validated in this way is
provably exception-free, contains no data flow errors, and terminates only
in the ways that its programmers explicitly say that it can. These are very
desirable properties from a computer security perspective.
IRONSIDES is not a complete implementation of DNS. In particular, it does
not support zone transfers or recursive queries. It does, however, support
a sufficient number of DNS records to be useful as an authoritative DNS
server for an enterprise.
Build the port as if it didn't support stage,
Just before installing, rebuild the install and instcheck binaries with a different prefix including the destdir prefix
To avoid everything to be rebuilt again becore conf-home has changed save the original files before building
install and instcheck with the new prefix and restore the file again before the do-install target is run
This is the trick used in debian
Obtained from: debian
ee41586 Use DS records as trust anchors, not DNSKEYs.
83349b8 Further tidying of AD and DO bit handling.
7fa836e Handle validation when more one key is needed.
1633e30 Fix Byte-order botch: broke DNSSEC on big-endian platforms.
c8ca33f Fix DNSSEC caching problems: incomplete RRSIG RRsets.
e243c07 AD bit in queries handled as RFC6840 p5.7
Added STAGING support
Added LICENSE (NSD3CLAUSE) statement
Other small changes to make portlint more happy
PR: 186631
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
OPTIONS_DEFINE. This policy has been implemented only recently that's why we
have many ports violating this policy.
This patch adds the default options specified in the Porter's Handbook to
OPTIONS_DEFINE where they are being used. Ports maintained by
gnome@FreeBSD.org, kde@FreeBSD.org and x11@FreeBSD.org have been excluded.
Approved by: portmgr (bapt)
- Add notice that support for nsd3 will stop in the future
FEATURES:
- Support for CAA RR type (RFC6844).
- EUI48 and EUI64 RR types (RFC7043) enabled by default.
BUG FIXES:
- Bugfix #509: USE_ZONE_STATS used initialised memory for statistics data.
- Bugfix #510: USE_ZONE_STATS use a different zone stats file per process.
- Bugfix #542: Match RRSIG TTL with SOA TTL in negative response.
PR: ports/186307
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
- Cleanup rc script
FEATURES:
- recognizes ip-address and interface as synonyms for convenience.
- Support for EUI48 and EUI64 RR types enabled by default (RFC 7043).
- Support for CAA RRtype (RFC 6844).
- NSID can be set with "ascii_somestring" in ascii.
BUG FIXES:
- Fix xfrd when zone transfer TCP contains zero length packets.
- Fix for NSEC3 zones where parent zone is co-hosted, also NSEC3,
because AXFRs overwrote nsec3 administration in the child zone.
- Fix that bad IXFR updates do not result in double SOA records,
and that an AXFR is started (attempted) when the zone state seems
to be inconsistent with the master's zone state.
- Log ip address for sendto and sendmmsg failures.
- Fix segfaults after read of zones with rr type WKS from zonefile.
- Seed PRNG for openssl at start of daemon, fixes SSL connection issue.
- Bugfix #534: IXFR query loop over UDP for zones that are unchanged.
- (same as in 3.2.16): fix wildcard cname to nxdomain repeated rrset.
- (same as in 3.2.16): Bugfix #542: Match RRSIG TTL with SOA TTL in
negative response.
- Check if configure in srcdir collides with outofdir build.
- Fix#546: output format errors in nsd_munin_ (Thanks Tom Hendrikx).
- Fix printout of high-chars in TXT on NetBSD.
PR: ports/186308
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Note the +AD flag may now be missing on the first response for a given domain,
re-querying within the cache TTL would deliver it. Bug has been reported.
while here
- Add stage support
- Remove the indefinite article from COMMENT
- Convert LICENSE from BSD to BSD3CLAUSE
- Convert USE_GMAKE to USES
PR: ports/185787
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
