08e6ea976b
Notable new features: * Elliptic Curve Digital Signature Algorithm keys and signatures in DNSSEC are now supported per RFC 6605. [RT #21918] * Introduces a new tool "dnssec-verify" that validates a signed zone, checking for the correctness of signatures and NSEC/NSEC3 chains. [RT #23673] * BIND now recognizes the TLSA resource record type, created to support IETF DANE (DNS-based Authentication of Named Entities) [RT #28989] * The new "inline-signing" option, in combination with the "auto-dnssec" option that was introduced in BIND 9.7, allows named to sign zones completely transparently. Approved by: delphij (mentor) MFC after: 3 days Sponsored by: DK Hostmaster A/S
26 lines
521 B
Makefile
26 lines
521 B
Makefile
# $FreeBSD$
|
|
|
|
BIND_DIR= ${.CURDIR}/../../contrib/bind9
|
|
LIB_BIND_REL= ../../lib/bind
|
|
LIB_BIND_DIR= ${.CURDIR}/${LIB_BIND_REL}
|
|
SRCDIR= ${BIND_DIR}/bin/dnssec
|
|
|
|
.include "${LIB_BIND_DIR}/config.mk"
|
|
|
|
PROG= dnssec-verify
|
|
|
|
.PATH: ${SRCDIR}
|
|
SRCS+= dnssec-verify.c dnssectool.c
|
|
|
|
CFLAGS+= -I${SRCDIR}/unix/include -I${SRCDIR}/include
|
|
CFLAGS+= -fsigned-char
|
|
|
|
DPADD+= ${BIND_DPADD} ${CRYPTO_DPADD} ${PTHREAD_DPADD}
|
|
LDADD+= ${BIND_LDADD} ${CRYPTO_LDADD} ${PTHREAD_LDADD}
|
|
|
|
WARNS?= 3
|
|
|
|
MAN= dnssec-verify.8
|
|
|
|
.include <bsd.prog.mk>
|