net-dns/unbound: version bump
This commit is contained in:
parent
0306824803
commit
f8823e54cb
|
|
@ -1,2 +1,10 @@
|
|||
DIST unbound-1.5.10.tar.gz 4941299 SHA256 a39b8b4fcca2a2b35a2daa53fe35150cc3f09038dc9acede09c912fc248a9486 SHA512 1c413886a12d4b626e03e076da6b9ccbcc8fd4769649fef8895eca74199bc22aec33c026e777524e8fe0327045a194f79b52282fe40674a9fb15cac58c4493f6 WHIRLPOOL 4e4ef7e4a89a6d8cd7b359a38cfb8a5cd99ea4e59a89ab894181b149346cf1e2875ec6b2af0985925cc50ff1c2f50fbfe569569ead2913127631781003c84742
|
||||
EBUILD unbound-1.5.10.ebuild 3474 SHA256 7995e5c97af6bba343939baac70b8e45867aba2dc96179b7f15f1c3d1d3f4297 SHA512 7eec872aa424be1881af3c033e31476a7354c202e96a1bfa0d75be8ad313a757b27a0b9bbc741f5eec1b7aa7fb69023011b49f1d4e56003a30ae83d92bebc127 WHIRLPOOL fc2ed4c024984f80e65e899e30efa7032927f7e488bb78315dd872c078250d2b626055c05adcee9d587bf4e3fc691b04ee6ad6764e633d207265b1153026baa2
|
||||
AUX 0001-fix-fail-to-start-on-Linux-LTS-3.14.X-ignore.patch 2032 SHA256 b5312b80a37501198345214a7eeaf589340ab698dc3390e3addb146c35f2e9b6 SHA512 1a28fca9fa39cf4c07e2f9b75058ca1d00a176ab4f0b96130fbe4773f503f39f7f16518e82f58d289001dd468e53e54f1e208e99eec713fda0efd35517c4bcb3 WHIRLPOOL 7f630f1c7b0be788a4a288501fb47065b31a8afb9b4d462122e01c01f7be9f8575aa141502fc83d57c6f330a0d8a3f8423489452f878fb6314868c6e2586204c
|
||||
AUX unbound-1.4.12-gentoo.patch 639 SHA256 8223261764f067355a5c013b2c8b13384480c91782fc42ae339dcc8bed843448 SHA512 81292d898284c27e0b30a90816d283d2fffd5810afb38b5a79ff4acc94d82c91bd5414d177f11745c5ee7e56d1600a67bdc4d7395504ff6266103b4e018baf6c WHIRLPOOL 29fb59e16d8f3f4e4d6029f2b3ec6dfd3665c366f3842b318a80b5721a9770b7fd47ad5e0169ab9539f87ed49d03a282f47507754c09cf17ea0d99705f1860c0
|
||||
AUX unbound-1.5.7-trust-anchor-file.patch 632 SHA256 787630b5111e70daa7f6fe2c9a8c8524b94c1ee51b5f2c045cee4e4db778cfe6 SHA512 fe9cb259a17452ab84df98eb8caaaa389e40e149e4de6f1245e78c350d1c6af42d1b094be6779ec19ce5ea11f86e102ae9767c8785d54cfa9746390c73e0f329 WHIRLPOOL 8b044dc717461a8d321394d7668fbd338e957cd3f8dc3e0bb2c4e5b90b8ab83e349edc4a1955080d0724585f8fbe535a4edb5a943e6e36c8188c770b6d215fe5
|
||||
AUX unbound-anchor.service 263 SHA256 cbb233e37b5136ab089a909472bfb0b58185f138df974a8abc9121d86cf2ba17 SHA512 c0f8ff2df106d1f05786cf5d69b48cdf69ba2fd42645bf6b7fa2d34d6c3fdd1608fb470c4fb0216164386e8b22977292ae8932c784a6967774e3daae1b8aeb95 WHIRLPOOL 0fa95e2d8113f9940b89c3c26194b37ab99a85f7ffb699240e6bad32213565c614a4f41d88e08d4b0a15e5a8b0b6a81a029d0f8dac9f7b36763ed3c5b18b0b05
|
||||
AUX unbound.confd 171 SHA256 7da812ef83f8f8b9351363525ab6bebd5348faed76d0ae424dcbd7cb6a830dfd SHA512 e3e4c7f97c13d133724417a70e4f20dac6f1f4b5a4e2e573c410148059d9f722589249b3dd4668069d4e324abef60f5981f20b1797623f37db9c9422410dc13f WHIRLPOOL d88c7542891ea7420253598c1fb94982a01d378aacf26a75c28650acc6f0093f526e0fab51f8e1b60681809bd253f765f8f73aa205bef5c4949766861f410ca5
|
||||
AUX unbound.initd 1377 SHA256 f47e8fbd720622407670438173588780ffc1520736d6ec1bef3fc959cdd17002 SHA512 aae49d9af4d55c4c7251c3dbd296a3cbecb84a951c97a5556d7147788e2ad7bd5893f0a560c44fa7aaaacd51f22a563b155240da8017668028f8a03c8599da6d WHIRLPOOL f393b6d4e96c18d4108fee159a119e9f39e53086b9587a3bc76cd5401e7ae3bbe73b7eef9092eb97ad51fa21380334d6a8e7930d2703855a89ce119d7e7b53d5
|
||||
AUX unbound.service 247 SHA256 6c12373b61f136edd95bea3dc6b7f56499de83aae7c925aee30e6db99051d72d SHA512 7904225d0e9fb3ea5b97521ed24f24fcc4db650cfff8523b896ddd9edfccbd61e817775ad0449acf30d02dba5f714d633b60cace6010d472f438df7c22381dfc WHIRLPOOL c156a2b96e1c1a6d787ee7c143b8c5cd8bf00b9e8cb00f90a5113ecd502f4d5fa2f0249debd10ef7f15d38d33f5d1c9ac4c15c61485f227fa70cd42af696ee3d
|
||||
AUX unbound_at.service 304 SHA256 6d8dfaf740f47af87bf521e871d824aefa10c702f724ae57998656b443fb8675 SHA512 71bd8c422ffe57e448b66f97775075a407671757266d40294a670b41cd1a59f16b65488d30aa74b79b7536f0c4c50adb56e32377e8029fd6c327b85c022c5fe3 WHIRLPOOL c304eec4a9293b92499b6895c57b7553a3d0247a00eed7f8299f4d0b2b7d24a33ca383125270b0616d826f71fa5e800e1a0b32c38316f03d806a2399dfb3cbcd
|
||||
DIST unbound-1.6.1.tar.gz 5074713 SHA256 42df63f743c0fe8424aeafcf003ad4b880b46c14149d696057313f5c1ef51400 SHA512 f232da1387e557a5a5812b393bb84d8e4f5f616006c60435dfd38f373594621a9050b649fe8497c031acffd697d28f888201847b1d156d3435a42b8db62f17c2 WHIRLPOOL 9264b2c95b848fbee85cd76725782c6f296007da814d951dce4ed00e23ed7210645f86dc22322092cddf9dd63e45d56acaa1dc3c5bcb7e516362ba6dbd33cf4e
|
||||
EBUILD unbound-1.6.1.ebuild 3520 SHA256 c94795323dffde7850c2d577214424cd9fc9475370048088344f2f0ef5a4d201 SHA512 62b621abc04c96da0dc2407c49c77734655c86cb8dbc764ceaa89abb4a312f22fcd32ebd41ff3bb6bf7c0403855e3373e6c1a71854772ad0a454e59cb1002c97 WHIRLPOOL c9b48ebcaae13fb2ba30134ecb95e2ce219d99fa9fbc0e8108f9ca479c77920e250d68deab849ad648279b87ef443c56e8292e5d9f8b70af0f8c22d610d69dc9
|
||||
|
|
|
|||
|
|
@ -0,0 +1,72 @@
|
|||
From 858da540f70a4411ad8fbe7144cef6ce9da18f89 Mon Sep 17 00:00:00 2001
|
||||
From: wouter <wouter@be551aaa-1e26-0410-a405-d3ace91eadb9>
|
||||
Date: Mon, 5 Jan 2015 13:51:22 +0000
|
||||
Subject: [PATCH] - Fix #634: fix fail to start on Linux LTS 3.14.X, ignores
|
||||
missing IP_MTU_DISCOVER OMIT option.
|
||||
|
||||
--- a/services/listen_dnsport.c
|
||||
+++ b/services/listen_dnsport.c
|
||||
@@ -368,29 +368,47 @@ create_udp_sock(int family, int socktype, struct sockaddr* addr,
|
||||
* (and also uses the interface mtu to determine the size of the packets).
|
||||
* So there won't be any EMSGSIZE error. Against DNS fragmentation attacks.
|
||||
* FreeBSD already has same semantics without setting the option. */
|
||||
-# if defined(IP_PMTUDISC_OMIT)
|
||||
- int action = IP_PMTUDISC_OMIT;
|
||||
-# else
|
||||
- int action = IP_PMTUDISC_DONT;
|
||||
-# endif
|
||||
+ int omit_set = 0;
|
||||
+ int action;
|
||||
+# if defined(IP_PMTUDISC_OMIT)
|
||||
+ action = IP_PMTUDISC_OMIT;
|
||||
if (setsockopt(s, IPPROTO_IP, IP_MTU_DISCOVER,
|
||||
&action, (socklen_t)sizeof(action)) < 0) {
|
||||
- log_err("setsockopt(..., IP_MTU_DISCOVER, "
|
||||
-# if defined(IP_PMTUDISC_OMIT)
|
||||
- "IP_PMTUDISC_OMIT"
|
||||
+
|
||||
+ if (errno != EINVAL) {
|
||||
+ log_err("setsockopt(..., IP_MTU_DISCOVER, IP_PMTUDISC_OMIT...) failed: %s",
|
||||
+ strerror(errno));
|
||||
+
|
||||
+# ifndef USE_WINSOCK
|
||||
+ close(s);
|
||||
# else
|
||||
- "IP_PMTUDISC_DONT"
|
||||
+ closesocket(s);
|
||||
# endif
|
||||
- "...) failed: %s",
|
||||
- strerror(errno));
|
||||
+ *noproto = 0;
|
||||
+ *inuse = 0;
|
||||
+ return -1;
|
||||
+ }
|
||||
+ }
|
||||
+ else
|
||||
+ {
|
||||
+ omit_set = 1;
|
||||
+ }
|
||||
+# endif
|
||||
+ if (omit_set == 0) {
|
||||
+ action = IP_PMTUDISC_DONT;
|
||||
+ if (setsockopt(s, IPPROTO_IP, IP_MTU_DISCOVER,
|
||||
+ &action, (socklen_t)sizeof(action)) < 0) {
|
||||
+ log_err("setsockopt(..., IP_MTU_DISCOVER, IP_PMTUDISC_DONT...) failed: %s",
|
||||
+ strerror(errno));
|
||||
# ifndef USE_WINSOCK
|
||||
- close(s);
|
||||
+ close(s);
|
||||
# else
|
||||
- closesocket(s);
|
||||
+ closesocket(s);
|
||||
# endif
|
||||
- *noproto = 0;
|
||||
- *inuse = 0;
|
||||
- return -1;
|
||||
+ *noproto = 0;
|
||||
+ *inuse = 0;
|
||||
+ return -1;
|
||||
+ }
|
||||
}
|
||||
# elif defined(IP_DONTFRAG)
|
||||
int off = 0;
|
||||
12
net-dns/unbound/files/unbound-1.4.12-gentoo.patch
Normal file
12
net-dns/unbound/files/unbound-1.4.12-gentoo.patch
Normal file
|
|
@ -0,0 +1,12 @@
|
|||
diff -Naur unbound-1.4.12.orig/doc/example.conf.in unbound-1.4.12/doc/example.conf.in
|
||||
--- unbound-1.4.12.orig/doc/example.conf.in 2011-07-14 17:33:37.000000000 +0900
|
||||
+++ unbound-1.4.12/doc/example.conf.in 2011-07-16 10:01:06.644402341 +0900
|
||||
@@ -334,7 +334,7 @@
|
||||
# with several entries, one file per entry.
|
||||
# Zone file format, with DS and DNSKEY entries.
|
||||
# Note this gets out of date, use auto-trust-anchor-file please.
|
||||
- # trust-anchor-file: ""
|
||||
+ # trust-anchor-file: "@UNBOUND_ROOTKEY_FILE@"
|
||||
|
||||
# Trusted key for validation. DS or DNSKEY. specify the RR on a
|
||||
# single line, surrounded by "". TTL is ignored. class is IN default.
|
||||
12
net-dns/unbound/files/unbound-1.5.7-trust-anchor-file.patch
Normal file
12
net-dns/unbound/files/unbound-1.5.7-trust-anchor-file.patch
Normal file
|
|
@ -0,0 +1,12 @@
|
|||
diff -ur unbound-1.5.7.orig/doc/example.conf.in unbound-1.5.7/doc/example.conf.in
|
||||
--- unbound-1.5.7.orig/doc/example.conf.in 2015-12-10 08:59:18.000000000 +0100
|
||||
+++ unbound-1.5.7/doc/example.conf.in 2016-01-05 04:08:01.666760015 +0100
|
||||
@@ -378,7 +378,7 @@
|
||||
# with several entries, one file per entry.
|
||||
# Zone file format, with DS and DNSKEY entries.
|
||||
# Note this gets out of date, use auto-trust-anchor-file please.
|
||||
- # trust-anchor-file: ""
|
||||
+ # trust-anchor-file: "@UNBOUND_ROOTKEY_FILE@"
|
||||
|
||||
# Trusted key for validation. DS or DNSKEY. specify the RR on a
|
||||
# single line, surrounded by "". TTL is ignored. class is IN default.
|
||||
13
net-dns/unbound/files/unbound-anchor.service
Normal file
13
net-dns/unbound/files/unbound-anchor.service
Normal file
|
|
@ -0,0 +1,13 @@
|
|||
[Unit]
|
||||
Description=Update of the root trust anchor for DNSSEC validation
|
||||
After=network.target
|
||||
Before=nss-lookup.target
|
||||
Wants=nss-lookup.target
|
||||
Before=unbound.service
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
ExecStart=/usr/sbin/unbound-anchor
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
4
net-dns/unbound/files/unbound.confd
Normal file
4
net-dns/unbound/files/unbound.confd
Normal file
|
|
@ -0,0 +1,4 @@
|
|||
# Settings should normally not need any changes.
|
||||
|
||||
# Location of the unbound configuration file. Leave empty for the default.
|
||||
#UNBOUND_CONFFILE="/etc/unbound/unbound.conf"
|
||||
56
net-dns/unbound/files/unbound.initd
Normal file
56
net-dns/unbound/files/unbound.initd
Normal file
|
|
@ -0,0 +1,56 @@
|
|||
#!/sbin/openrc-run
|
||||
# Copyright 1999-2011 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
name="unbound daemon"
|
||||
extra_commands="configtest"
|
||||
extra_started_commands="reload"
|
||||
description="unbound is a Domain Name Server (DNS) that is used to resolve host names to IP address."
|
||||
description_configtest="Run syntax tests for configuration files only."
|
||||
description_reload="Kills all children and reloads the configuration."
|
||||
|
||||
|
||||
UNBOUND_BINARY=${UNBOUND_BINARY:-/usr/sbin/unbound}
|
||||
UNBOUND_CHECKCONF=${UNBOUND_CHECKCONF:-/usr/sbin/unbound-checkconf}
|
||||
UNBOUND_CONFFILE=${UNBOUND_CONFFILE:-/etc/unbound/${SVCNAME}.conf}
|
||||
|
||||
depend() {
|
||||
need net
|
||||
use logger
|
||||
provide dns
|
||||
after auth-dns
|
||||
}
|
||||
|
||||
checkconfig() {
|
||||
UNBOUND_PIDFILE=$("${UNBOUND_CHECKCONF}" -o pidfile "${UNBOUND_CONFFILE}")
|
||||
return $?
|
||||
}
|
||||
|
||||
configtest() {
|
||||
ebegin "Checking ${SVCNAME} configuration"
|
||||
checkconfig
|
||||
eend $?
|
||||
}
|
||||
|
||||
start() {
|
||||
checkconfig || return $?
|
||||
ebegin "Starting ${SVCNAME}"
|
||||
start-stop-daemon --start --pidfile "${UNBOUND_PIDFILE}" \
|
||||
--exec "${UNBOUND_BINARY}" -- -c "${UNBOUND_CONFFILE}"
|
||||
eend $?
|
||||
}
|
||||
|
||||
stop() {
|
||||
checkconfig || return $?
|
||||
ebegin "Stopping ${SVCNAME}"
|
||||
start-stop-daemon --stop --pidfile "${UNBOUND_PIDFILE}"
|
||||
eend $?
|
||||
}
|
||||
|
||||
reload() {
|
||||
checkconfig || return $?
|
||||
ebegin "Reloading ${SVCNAME}"
|
||||
start-stop-daemon --signal HUP --pidfile "${UNBOUND_PIDFILE}"
|
||||
eend $?
|
||||
}
|
||||
12
net-dns/unbound/files/unbound.service
Normal file
12
net-dns/unbound/files/unbound.service
Normal file
|
|
@ -0,0 +1,12 @@
|
|||
[Unit]
|
||||
Description=Unbound recursive Domain Name Server
|
||||
After=network.target
|
||||
Before=nss-lookup.target
|
||||
Wants=nss-lookup.target
|
||||
|
||||
[Service]
|
||||
ExecStartPre=/usr/sbin/unbound-checkconf
|
||||
ExecStart=/usr/sbin/unbound -d
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
13
net-dns/unbound/files/unbound_at.service
Normal file
13
net-dns/unbound/files/unbound_at.service
Normal file
|
|
@ -0,0 +1,13 @@
|
|||
[Unit]
|
||||
Description=Unbound recursive Domain Name Server
|
||||
After=network.target
|
||||
Before=nss-lookup.target
|
||||
Wants=nss-lookup.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
ExecStartPre=/usr/sbin/unbound-checkconf /etc/unbound/%i.conf
|
||||
ExecStart=/usr/sbin/unbound -d -c /etc/unbound/%i.conf
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
|
@ -1,6 +1,6 @@
|
|||
# Copyright 1999-2016 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
# $Id: b06288a256bfb0611b74c7f613162bae55133180 $
|
||||
|
||||
EAPI=5
|
||||
PYTHON_COMPAT=( python2_7 )
|
||||
|
|
@ -24,7 +24,7 @@ REQUIRED_USE="python? ( ${PYTHON_REQUIRED_USE} )"
|
|||
# is fixed.
|
||||
|
||||
CDEPEND=">=dev-libs/expat-2.1.0-r3[${MULTILIB_USEDEP}]
|
||||
>=dev-libs/libevent-2.0.21[${MULTILIB_USEDEP}]
|
||||
>=dev-libs/libevent-2.0.21:0=[${MULTILIB_USEDEP}]
|
||||
libressl? ( >=dev-libs/libressl-2.2.4:0[${MULTILIB_USEDEP}] )
|
||||
!libressl? ( >=dev-libs/openssl-1.0.1h-r2:0[${MULTILIB_USEDEP}] )
|
||||
dnstap? (
|
||||
Loading…
Reference in New Issue
Block a user