Doug Barton 0a1b168539 Update to the -P1 versions of the current BIND ports which contain ... the fix for the following vulnerability: https://www.isc.org/node/373 Description: Return values from OpenSSL library functions EVP_VerifyFinal() and DSA_do_verify() were not checked properly. Impact: It is theoretically possible to spoof answers returned from zones using the DNSKEY algorithms DSA (3) and NSEC3DSA (6). In short, if you're not using DNSSEC to verify signatures you have nothing to worry about. While I'm here, address the issues raised in the PR by adding a knob to disable building with OpenSSL altogether (which eliminates DNSSEC capability), and fix the configure arguments to better deal with the situation where the user has ssl bits in both the base and LOCALBASE. PR: ports/126297 Submitted by: Ronald F.Guilmette <rfg@tristatelogic.com>		2009-01-08 08:18:45 +00:00
..
distinfo	Update to the -P1 versions of the current BIND ports which contain	2009-01-08 08:18:45 +00:00
Makefile	Update to the -P1 versions of the current BIND ports which contain	2009-01-08 08:18:45 +00:00
pkg-descr
pkg-message
pkg-plist	9.4.3 adds one additional file in doc/misc	2008-12-19 22:13:28 +00:00