head 1.4; access; symbols; locks; strict; comment @# @; 1.4 date 2026.08.26.10.19.08; author adam; state Exp; branches; next 1.3; commitid b98k6xNpes7hl8TG; 1.3 date 2026.08.05.15.59.30; author drixter; state Exp; branches; next 1.2; commitid 8ke7K5ar8HkTTsQG; 1.2 date 2026.07.22.20.38.03; author drixter; state Exp; branches; next 1.1; commitid SqpNVJyLibhhTGOG; 1.1 date 2026.06.27.20.39.03; author drixter; state Exp; branches; next ; commitid GtM266J3CFajHtLG; desc @@ 1.4 log @Revision bump after abseil update @ text @# $NetBSD: Makefile,v 1.3 2026/08/05 15:59:30 drixter Exp $ DISTNAME= knot-resolver-6.4.2 PKGREVISION= 1 CATEGORIES= net MASTER_SITES= https://secure.nic.cz/files/knot-resolver/ EXTRACT_SUFX= .tar.xz MAINTAINER= drixter@@e-utp.net HOMEPAGE= https://secure.nic.cz/files/knot-resolver/ COMMENT= Knot (resolver) DNS server LICENSE= gnu-gpl-v3 USE_TOOLS+= pkg-config USE_TOOLS+= cmake USE_TOOLS+= bash USE_LANGUAGES= c c++ USE_LIBTOOL= yes DEPENDS+= daemonize-[0-9]*:../../sysutils/daemonize RCD_SCRIPTS= kresd BUILD_DEFS+= KRESD_USER KRESD_GROUP VARBASE KRESD_USER?= kresd KRESD_GROUP?= kresd PKG_GROUPS+= ${KRESD_GROUP} PKG_USERS+= ${KRESD_USER}:${KRESD_GROUP} PKG_GECOS.${KRESD_USER}= kresd daemon user PKG_GROUPS_VARS+= KRESD_GROUP PKG_USERS_VARS= KRESD_USER CONF_FILES+= ${PREFIX}/share/examples/knot-resolver/icann-ca.pem ${PKG_SYSCONFDIR}/knot-resolver/icann-ca.pem CONF_FILES+= ${PREFIX}/share/examples/knot-resolver/root.hints ${PKG_SYSCONFDIR}/knot-resolver/root.hints CONF_FILES+= ${PREFIX}/share/examples/knot-resolver/root.keys ${PKG_SYSCONFDIR}/knot-resolver/root.keys AUTO_MKDIRS= yes OWN_DIRS_PERMS+= ${PKG_SYSCONFDIR}/knot-resolver ${KRESD_USER} ${KRESD_GROUP} 0755 post-install: ${MV} ${DESTDIR}${PREFIX}/etc/knot-resolver/icann-ca.pem ${DESTDIR}${PREFIX}/share/examples/knot-resolver/ ${MV} ${DESTDIR}${PREFIX}/etc/knot-resolver/root.hints ${DESTDIR}${PREFIX}/share/examples/knot-resolver/ ${MV} ${DESTDIR}${PREFIX}/etc/knot-resolver/root.keys ${DESTDIR}${PREFIX}/share/examples/knot-resolver/ ${RMDIR} ${DESTDIR}${PREFIX}/etc/knot-resolver .include "../../net/knot/buildlink3.mk" .include "../../devel/libuv/buildlink3.mk" .include "../../databases/lmdb/buildlink3.mk" .include "../../lang/LuaJIT2/buildlink3.mk" .include "../../devel/libidn/buildlink3.mk" .include "../../devel/userspace-rcu/buildlink3.mk" .include "../../devel/zlib/buildlink3.mk" .include "../../security/gnutls/buildlink3.mk" .include "../../devel/editline/buildlink3.mk" .include "../../devel/jemalloc/buildlink3.mk" .include "../../devel/cmocka/buildlink3.mk" .include "../../devel/meson/build.mk" .include "../../devel/protobuf-c/buildlink3.mk" .include "../../net/fstrm/buildlink3.mk" .include "../../mk/bsd.pkg.mk" @ 1.3 log @knot-resolver: Update to 6.4.2 Bugfixes cache: avoid excessive logging introduced in the last release (!1869) /options/serve-stale: avoid SIGSEGV from a LuaJIT bug (#957) Improvements DoH: add unencrypted mode for reverese proxies (alpha, !1877) deal with LMDB 1.0.0 switching format (!1880) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1 2026/06/27 20:39:03 drixter Exp $ d4 1 @ 1.2 log @knot-resolver: Update to 6.4.1 Knot Resolver 6.4.1 (2026-07-22) Security: DNS-over-QUIC (DoQ) had severe issues, allowing even RCE Many people reported (some of) these issues to us. DNSSEC correctness issues, acting mainly through the aggressive cache: * dealing with Labels field in RRSIGs being smaller than the signer’s * dealing with NSEC’s next-name pointing outside of the zone Special thanks to Qifan Zhang from Palo Alto Networks. Improvements: docker: upgrade to Debian 13 (!1856) update IANA’s certificate for root trust anchor bootstrapping (!1845) Bugfixes: /local-data/addresses*: make multiple addresses work (#808, #954) views: fix protocol-based matching for DoQ @ text @d3 1 a3 1 DISTNAME= knot-resolver-6.4.1 @ 1.1 log @knot-resolver: Adding version 6.4.0 Knot Resolver 6.4.0 (2026-06-17) Improvements packaging: rpm: require python3-setuptools (!1830, #952) packaging: rpm: provide user/group (!1837) controller: improved error handling when sending commands to workers (!1834) Bugfixes dns64: fix CNAME problems again (#797, !1840) @ text @d1 1 a1 1 # $NetBSD$ d3 1 a3 1 DISTNAME= knot-resolver-6.4.0 @