summaryrefslogtreecommitdiff
path: root/lib/bind
AgeCommit message (Collapse)Author
2013-09-30Remove BIND.Dag-Erling Smørgrav
Approved by: re (gjb) Notes: svn path=/head/; revision=255949
2013-08-22Update Bind to 9.9.3-P2Erwin Lansing
Notable new features: * Elliptic Curve Digital Signature Algorithm keys and signatures in DNSSEC are now supported per RFC 6605. [RT #21918] * Introduces a new tool "dnssec-verify" that validates a signed zone, checking for the correctness of signatures and NSEC/NSEC3 chains. [RT #23673] * BIND now recognizes the TLSA resource record type, created to support IETF DANE (DNS-based Authentication of Named Entities) [RT #28989] * The new "inline-signing" option, in combination with the "auto-dnssec" option that was introduced in BIND 9.7, allows named to sign zones completely transparently. Approved by: delphij (mentor) MFC after: 3 days Sponsored by: DK Hostmaster A/S Notes: svn path=/head/; revision=254651
2013-08-06Update Bind to 9.8.5-P2Erwin Lansing
New Features Adds a new configuration option, "check-spf"; valid values are "warn" (default) and "ignore". When set to "warn", checks SPF and TXT records in spf format, warning if either resource record type occurs without a corresponding record of the other resource record type. [RT #33355] Adds support for Uniform Resource Identifier (URI) resource records. [RT #23386] Adds support for the EUI48 and EUI64 RR types. [RT #33082] Adds support for the RFC 6742 ILNP record types (NID, LP, L32, and L64). [RT #31836] Feature Changes Changes timing of when slave zones send NOTIFY messages after loading a new copy of the zone. They now send the NOTIFY before writing the zone data to disk. This will result in quicker propagation of updates in multi-level server structures. [RT #27242] "named -V" can now report a source ID string. (This is will be of most interest to developers and troubleshooters). The source ID for ISC's production versions of BIND is defined in the "srcid" file in the build tree and is normally set to the most recent git hash. [RT #31494] Response Policy Zone performance enhancements. New "response-policy" option "min-ns-dots". "nsip" and "nsdname" now enabled by default with RPZ. [RT #32251] Approved by: delphij (mentor) Sponsored by: DK Hostmaster A/S Notes: svn path=/head/; revision=253983
2013-03-27Update to 9.8.4-P2Erwin Lansing
Removed the check for regex.h in configure in order to disable regex syntax checking, as it exposes BIND to a critical flaw in libregex on some platforms. [RT #32688] Security: CVE-2013-2266 Approved by: delphij (mentor) Sponsored by: DK Hostmaster A/S Notes: svn path=/head/; revision=248788
2012-12-07Re-disable GSSAPI, which does not build on several archs.Erwin Lansing
Approved by: delphij (mentor) Notes: svn path=/head/; revision=243987
2012-12-07Update to 9.8.4-P1.Erwin Lansing
Security Fixes Prevents named from aborting with a require assertion failure on servers with DNS64 enabled. These crashes might occur as a result of specific queries that are received. New Features * Elliptic Curve Digital Signature Algorithm keys and signatures in DNSSEC are now supported per RFC 6605. [RT #21918] Feature Changes * Improves OpenSSL error logging [RT #29932] * nslookup now returns a nonzero exit code when it is unable to get an answer. [RT #29492] Other critical bug fixes are included. Approved by: delphij (mentor) MFC after: 3 days Security: CVE-2012-5688 Sponsored by: DK Hostmaster A/S Notes: svn path=/head/; revision=243981
2012-05-28Upgrade to BIND version 9.8.3, the latest from ISC.Doug Barton
Feature Change * BIND now recognizes the TLSA resource record type, created to support IETF DANE (DNS-based Authentication of Named Entities) Bug Fix * The locking strategy around the handling of iterative queries has been tuned to reduce unnecessary contention in a multi- threaded environment. Other critical bug fixes are included. All BIND users are encouraged to upgrade. Notes: svn path=/head/; revision=236196
2012-04-05Update to version 9.8.2, the latest from ISC, which contains numerous bug fixes.Doug Barton
Notes: svn path=/head/; revision=233914
2011-09-03Upgrade to BIND version 9.8.1. Release notes at:Doug Barton
https://deepthought.isc.org/article/AA-00446/81/ or /usr/src/contrib/bind9/ Approved by: re (kib) Notes: svn path=/head/; revision=225361
2011-07-17Fixes to make the WITH_BIND_LIBS option functional with BIND 9.8.xDoug Barton
Notes: svn path=/head/; revision=224129
2011-07-16bmake and other updates necessary for the BIND 9.8.x upgrade.Doug Barton
This includes a structural change regarding atomic ops. Previously they were enabled on all platforms unless we had knowledge that they did not work. However both work performed by marius@ on sparc64 and the fact that the 9.8.x branch is fussier in this area has demonstrated that this is not a safe approach. So I've modified a patch provided by marius to enable them for i386, amd64, and ia64 only. Notes: svn path=/head/; revision=224093
2011-07-16Handle the MK_BIND_XML option more intelligentlyDoug Barton
Notes: svn path=/head/; revision=224076
2011-02-06Update to BIND 9.6.3, the latest from ISC on the 9.6 branch.Doug Barton
All 9.6 users with DNSSEC validation enabled should upgrade to this version, or the latest version in the 9.7 branch, prior to 2011-03-31 in order to avoid validation failures for names in .COM as described here: https://www.isc.org/announcement/bind-9-dnssec-validation-fails-new-ds-record In addition the fixes for this and other bugs, there are also the following: * Various fixes to kerberos support, including GSS-TSIG * Various fixes to avoid leaking memory, and to problems that could prevent a clean shutdown of named Notes: svn path=/head/; revision=218384
2011-01-09Revert part of r217071 so that us mere mortals can clearly seeDoug Barton
what this bit of code is intended to do. :) Approved by: imp Notes: svn path=/head/; revision=217213
2011-01-06Make this work on big endian MIPS, while not breaking it for smallWarner Losh
endian mips. This will also make it work automatically on all future big endian platforms. Notes: svn path=/head/; revision=217071
2010-10-31Prep for the 9.6-ESV-R2 updateDoug Barton
Notes: svn path=/head/; revision=214585
2010-07-10Since powerpc and powerpc64 share an instruction set, bind can and shouldNathan Whitehorn
use the 32-bit atomic operations unmodified. Accomplish this by switching some MACHINE_ARCH values to MACHINE_CPUARCH. Notes: svn path=/head/; revision=209886
2010-03-18Update to 9.6.2-P1, the latest patchfix release which deals withDoug Barton
the problems related to the handling of broken DNSSEC trust chains. This fix is only relevant for those who have DNSSEC validation enabled and configure trust anchors from third parties, either manually, or through a system like DLV. Notes: svn path=/head/; revision=205292
2010-03-03Upgrade to version 9.6.2. This version includes all previously releasedDoug Barton
security patches to the 9.6.1 version, as well as many other bug fixes. This version also incorporates a different fix for the problem we had patched in contrib/bind9/bin/dig/dighost.c, so that file is now back to being the same as the vendor version. Due to the fact that the DNSSEC algorithm that will be used to sign the root zone is only included in this version and in 9.7.x those who wish to do validation MUST upgrade to one of these prior to July 2010. Notes: svn path=/head/; revision=204619
2010-01-25Commit copyright-only changes to generated files as part of theDoug Barton
9.6.1-P3 update Notes: svn path=/head/; revision=202960
2009-11-30Update to BIND 9.6.1-P2. The vulnerability this is designed to fix isDoug Barton
related to DNSSEC validation on a resolving name server that allows access to untrusted users. If your system does not fall into all 3 of these categories you do not need to update immediately. Notes: svn path=/head/; revision=199958
2009-06-01Add support for the build options that are currently in the port:Doug Barton
WITH_BIND_IDN WITH_BIND_LARGE_FILE WITH_BIND_SIGCHASE WITH_BIND_XML Notes: svn path=/head/; revision=193280
2009-05-31Update BIND to version 9.6.1rc1. This version has better performance andDoug Barton
lots of new features compared to 9.4.x, including: Full NSEC3 support Automatic zone re-signing New update-policy methods tcp-self and 6to4-self DHCID support. More detailed statistics counters including those supported in BIND 8. Faster ACL processing. Efficient LRU cache-cleaning mechanism. NSID support. Notes: svn path=/head/; revision=193149
2009-05-30In preparation for the BIND 9.6.1rc1 import, remove this directory.Doug Barton
The libbind library is no longer distributed as part of the main BIND package, and we never built it in any case. Notes: svn path=/vendor/bind9/dist/; revision=193136
2008-12-23Updates for version 9.4.3Doug Barton
Notes: svn path=/head/; revision=186463
2008-12-23Vendor import of BIND 9.4.3Doug Barton
Notes: svn path=/vendor/bind9/dist/; revision=186451
2008-12-23Update copyrights and comments as of 9.4.3 (no functional changes)Doug Barton
Notes: svn path=/head/; revision=186450
2008-12-23Vendor import of BIND 9.4.3vendor/bind9/9.4.3Doug Barton
Notes: svn path=/vendor/bind9/dist/; revision=186448 svn path=/vendor/bind9/9.4.3/; revision=186449; tag=vendor/bind9/9.4.3
2008-12-08Add strndup(3) prototype to string.h.Konstantin Belousov
This change was erronously ommitted from the r185690, and attempt to simply add the prototype to string.h has revealed that several contributed programs defined local prototypes for strndup(), controlled by autoconfed config.h. So, manually change #undef HAVE_STRNDUP to #define HAVE_STRNDUP 1. Next import of the corresponding program would regenerate config.h, overriding the changes in this commit. No objections from: kan Notes: svn path=/head/; revision=185777
2008-09-01Update for version 9.4.2-P2Doug Barton
Notes: svn path=/head/; revision=182646
2008-09-01Vendor import of BIND 9.4.2-P2vendor/bind9/9.4.2-P2Doug Barton
Notes: svn path=/vendor/bind9/dist/; revision=182637 svn path=/vendor/bind9/9.4.2-P2/; revision=182638; tag=vendor/bind9/9.4.2-P2
2008-07-12These files are unused, and due to a more thorough FREEBSD-XlistDoug Barton
are no longer updated. Notes: svn path=/vendor/bind9/dist/; revision=180466
2008-07-12Flatten bind9 vendor work areaPeter Wemm
Notes: svn path=/vendor/bind9/dist/; revision=180456
2007-12-02One more glue update for BIND 9.4.2Doug Barton
Notes: svn path=/head/; revision=174198
2007-12-02Update glue for BIND 9.4.2Doug Barton
Notes: svn path=/head/; revision=174189
2007-06-05Remove the special atomic.h case for arm, and allow it to useDoug Barton
the platform specific file that imp provided. Notes: svn path=/head/; revision=170352
2007-06-03Fix the amd64 and pc98 versions of ISC_ATOMIC_ARCH with some helpDoug Barton
from ru@. Take a guess at what might work on arm to try and fix the build. Notes: svn path=/head/; revision=170241
2007-06-02Update generated files for BIND 9.4.1Doug Barton
Notes: svn path=/head/; revision=170224
2007-06-02Update bmake glue for the BIND 9.4.1 import.Doug Barton
This includes a return to building with threads, since one of the major focuses of the 9.4.x branch is to improve thread performance. Notes: svn path=/head/; revision=170221
2007-01-29Update generated files for BIND 9.3.4Doug Barton
Notes: svn path=/head/; revision=166335
2006-12-10Changes to generated files related to the 9.3.3 import.Doug Barton
Notes: svn path=/head/; revision=165077
2006-03-17Reimplementation of world/kernel build options. For details, see:Ruslan Ermilov
http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html The src.conf(5) manpage is to follow in a few days. Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine) Notes: svn path=/head/; revision=156813
2005-12-29Updated versions of header files generated per the instructionsDoug Barton
in src/contrib/bind9/FREEBSD-Upgrade for the 9.2.3 import Notes: svn path=/head/; revision=153821
2005-11-07Finish the removal of threads support in ../config.mk,v 1.15.Ruslan Ermilov
Notes: svn path=/head/; revision=152157
2005-07-25Disable thread support in BIND. It appears to reduce performance ratherDag-Erling Smørgrav
than increase it, and seems to be the cause of the memory leaks which some users have reported. Requested by: dougb MFC after: 5 days Notes: svn path=/head/; revision=148389
2005-03-17Regenerate for 9.3.1Doug Barton
Notes: svn path=/head/; revision=143737
2005-03-17bmake changes to handle the move of dns/sec and related filesDoug Barton
Notes: svn path=/head/; revision=143736
2004-12-21NOINET6 -> NO_INET6Ruslan Ermilov
Notes: svn path=/head/; revision=139115
2004-12-21NOCRYPT -> NO_CRYPTRuslan Ermilov
Notes: svn path=/head/; revision=139113
2004-12-21NOLIBC_R -> NO_LIBC_RRuslan Ermilov
NOLIBPTHREAD -> NO_LIBPTHREAD NOLIBTHR -> NO_LIBTHR Notes: svn path=/head/; revision=139104
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-21 00:16:07 +0000