Skip site navigation (1)Skip section navigation (2) 
Date:      Thu, 30 Jun 2022 12:22:29 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 264961] dns/nsd: update to 4.6.0
Message-ID:  <bug-264961-7788@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help 
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D264961

            Bug ID: 264961
           Summary: dns/nsd: update to 4.6.0
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
               URL: https://www.nlnetlabs.nl/news/2022/Jun/30/nsd-4.6.0-re
                    leased/
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: jaap@NLnetLabs.nl
 Attachment #235002 maintainer-approval+
             Flags:

Created attachment 235002
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D235002&action=
=3Dedit
patch to update

This release adds the zone verification support from the CreDNS code.
There are also some bug fixes in the ixfr out code.

Zone verification can start a verifier program that reads the new zone
data. It can reject the update. Or process the new zone data. The intent
is for a DNSSEC verifier to inspect the zone before it is passed on with
zone transfer or served to clients.

The zone verification can be enabled with enable: yes in the verify
section in nsd.conf. You can then list the interfaces the NSD listens
on while the verifier is active, so it can send queries for the new
zone contents. With verify-zones: yes zones are verified by default.
The command that is executed can be set with the `verifier:=20
ldns-verify-zone` option. With verifier-count the max number of=20
concurrent verifiers can be set. With the verifier-feed-zone: yes option=20
the zone can be input on stdin to the verifier program. A timeout to=20
stop the verifier can be set with the verifier-timeout option.

Per zone options can also be set for a pattern or for a zone, for zone
verification. With verify-zone the zone verification can be enabled
per zone. The verifier can be set per zone. And the verifier-feed-zone
and verifier-timeout options can be controlled per zone.

FEATURES:
- Port zone-verification from CreDNS to NSD4.

BUG FIXES:
- Fix static analyzer reports on ixfrcreate temp file.
- Fixup wrong ixfrcreate fread return check.

--=20
You are receiving this mail because:
You are the assignee for the bug.=

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-264961-7788>