Commit Graph

49 Commits

Author SHA1 Message Date
des
f6a79c1703 Merge upstream r4302 to support multiple concurrently valid anchors.
If an unpatched unbound-anchor is run without a preexisting root anchor
between 2017-09-11 and 2017-10-11, it will fail and Unbound will not be
able to start unless the validator is disabled.  An EN will be issued
with patches for existing systems and information on how to work around
the issue on new installations.
2017-08-31 12:02:14 +00:00
des
8443fee657 Upgrade to Unbound 1.5.10. 2016-09-29 18:24:29 +00:00
des
b8710acf41 Upgrade to Unbound 1.5.9. 2016-09-04 12:17:57 +00:00
des
2a21f7140f Apply upstream r3651: the IPv6 address of the L root has changed. 2016-03-11 14:57:40 +00:00
des
333413e33d Upgrade to Unbound 1.5.8. 2016-03-05 19:29:18 +00:00
des
a94c4c08ce Use the new insecure-lan-zones option instead of listing each AS112 zone
separately.

MFC after:	3 days
2016-02-11 17:37:02 +00:00
sobomax
fbaeae6294 Root out files that don't really belong here and could in fact screw
you over if you happen to use git for FreeBSD development, as it is
the case with the unbound/.gitignore, which lits files that are
actually required for the buildworld.

MFC after:	1 day
2016-02-02 19:04:40 +00:00
des
f2bca8d61d Upgrade to Unbound 1.5.7. 2015-12-14 13:01:51 +00:00
des
1bf9dc7fc4 Ask make(1) which compiler to use rather than rely on whatever is in $PATH. 2015-12-12 22:54:12 +00:00
des
a320991678 Apply r3505 (s/SIGQUIT/SIGTERM/ in man page)
PR:		203580
2015-10-14 18:08:38 +00:00
des
4350483166 Upgrade to Unbound 1.5.5. 2015-10-09 11:46:27 +00:00
des
870d2cd235 When chrooted, we need to strip the chroot directory from the front of
included paths.  Don't forget to do it for globs as well.
2015-09-17 16:19:36 +00:00
des
c5050a3b9f Upgrade to Unbound 1.5.4. 2015-09-17 16:10:11 +00:00
des
08fe3b61a6 Upgrade Unbound to 1.5.3. 2015-04-27 12:06:13 +00:00
des
84a33eb82c MFV (r277045): merge upstream version of the local socket patch. 2015-01-12 09:46:49 +00:00
des
266f3b9335 mfv (r276698): support for remote control over local sockets. 2015-01-05 14:59:18 +00:00
des
db2be144cc Add generated files. 2015-01-03 11:52:43 +00:00
des
7e4640559c Upgrade to Unbound 1.5.1. Almost all our local changes to date have been
adopted upstream, greatly reducing the diff.
2015-01-03 02:40:51 +00:00
des
5606bb1e5a Recognize the lexer and parser sources. 2015-01-03 00:31:52 +00:00
delphij
a526ff1d89 MFV r275844:
Fix unbound remote denial of service vulnerability.

Security:	FreeBSD-SA-14:30.unbound
Security:	CVE-2014-8602
2014-12-17 06:55:44 +00:00
des
d3e404ac25 Clean up the libunbound build to avoid accidentally regenerating the
configuration lexer and parser during buildworld.  Instead of being
included in the source as it is in the upstream distribution, the code is
now always generated (in ${.OBJDIR}) at build time.

PR:		190739
MFC after:	1 week
2014-07-19 18:38:48 +00:00
des
d96c67cabd Import unblock-lan-zones feature backported from upstream svn trunk.
This is a partial fix for reverse lookups in RFC 1918 networks.  With
this option enabled, unbound no longer ignores these queries; however,
it will still reject the answer it gets from the forwarder, because
the RFC 1918 reverse zones are signed.

Submitted by:	"W.C.A. Wijngaards" <wouter@nlnetlabs.nl>
2014-07-18 11:32:44 +00:00
des
702c9d2a00 Move libworker_event_done_cb() from libworker.h to worker.h. 2014-05-27 23:39:28 +00:00
des
710d2272e0 regenerate 2014-05-15 19:48:52 +00:00
des
18774ece8e diff reduction 2014-05-15 19:48:13 +00:00
des
f3c2b7869f Upgrade to latest ldns (1.6.17) and unbound (1.4.22).
MFC after:	3 weeks
2014-05-15 03:30:03 +00:00
des
384b4d5cae Regenerate
Approved by:	re (blanket)
2013-09-24 09:56:58 +00:00
des
da61ec806e Regenerate the configure script before running it.
Set the default config file to /var/unbound/unbound.conf.

Approved by:	re (blanket)
2013-09-24 09:56:10 +00:00
des
7a2a1b7d7f Don't include the build date or command-line arguments in the binary.
Approved by:	re (blanket)
2013-09-24 09:54:07 +00:00
des
bbab9202d3 Due to a missing command-line argument, yacc regenerated the parser but
not its header file, resulting in a mismatch between the lexer and parser
and strange errors when reading the configuration file.

Approved by:	re (blanket)
2013-09-22 19:09:43 +00:00
des
009954ae5c Set props and correct RCS ID tag.
Approved by:	re (blanket)
2013-09-21 23:29:02 +00:00
des
22333bfe67 Previous commit accidentally left out the umask change.
Approved by:	re (blanket)
2013-09-15 13:50:56 +00:00
des
aa06964ae8 Set the correct prefix and exec-prefix.
Approved by:	re (blanket)
2013-09-15 13:49:43 +00:00
des
b1bd51c588 Regenerate.
Approved by:	re (blanket)
2013-09-15 13:49:23 +00:00
des
520611afab The unbound-control-setup script needs to be generated so it knows where
to place the keys.  Also, the correct umask is 027, not 026, although it's
not likely to make any difference.

Approved by:	re (blanket)
2013-09-15 13:48:08 +00:00
des
375d53a581 Add unbound-control.
Approved by:	re (blanket)
2013-09-15 12:41:05 +00:00
des
4e951b0b3e Final #include tweak.
Approved by:	re (blanket)
2013-09-15 11:58:07 +00:00
des
9502928062 Massive constification + solve an alignment issue by using a union.
Approved by:	re (blanket)
2013-09-15 01:44:07 +00:00
des
4a13756c2f Add missing #includes and fix some incorrect definitions.
Approved by:	re (blanket)
2013-09-15 01:32:32 +00:00
des
afd37a4511 Wholesale constification.
Approved by:	re (blanket)
2013-09-15 01:31:55 +00:00
des
1c7b2ddc24 Move more prototypes around, and remove one that wasn't used.
Approved by:	re (blanket)
2013-09-15 01:29:00 +00:00
des
d0f47245e2 Regenerated lexer and parser
Approved by:	re (blanket)
2013-09-15 00:40:46 +00:00
des
52a4bf6eec Generated configuration and documentation
Approved by:	re (blanket)
2013-09-15 00:40:21 +00:00
des
f5152501e6 Forgotten in r255579: #include fixes.
Approved by:	re (blanket)
2013-09-15 00:37:30 +00:00
des
a4b7c5a2b8 Numerous fixes to make Unbound compile cleanly:
- cast through void * to silence alignment warnings (presumably false
   positives resulting from poor API design)

 - constify a few function arguments

 - move prototypes for callbacks into a common header

 - now that the prototypes are in scope, fix instances of function
   definitions that don't match the prototype or what the caller
   actually passes

 - hide a conditionally unused global variable behind the same #ifdef
   that controls its use

Approved by:	re (blanket)
2013-09-15 00:36:18 +00:00
des
aafb05a3bc Move prototypes into header.
Approved by:	re (blanket)
2013-09-15 00:07:51 +00:00
des
f5cbd4e274 Two helper scripts for porting Unbound:
- freebsd-configure.sh runs ./configure with the correct parameters
   and regenerates the lex and yacc code.

 - freebsd-sources.pl untangles the upstream Makefile and generates
   source lists for our Makefiles.

Approved by:	re (blanket)
2013-09-15 00:05:16 +00:00
des
977c6e8c41 Upgrade to 1.4.20. 2013-04-05 09:51:31 +00:00
des
b0cbd784b1 Minimal subset of the unbound sources. 2013-04-05 09:43:20 +00:00