===> The following configuration options are available for dnscrypt-proxy2-2.1.15_10:
DOCS=on: Build and/or install documentation
EXAMPLES=on: Build and/or install examples
===> Use 'make config' to modify these settings
go: Bump go124-dependent ports
Earlier I bumped the default Go to 1.24. Ports that specify a lower
version will still build with those lower version (for now), so they
don't need a bumping. Instead I'm bumping anything that (now) has go124
as a dependency.
dns/dnscrypt-proxy2: update 2.1.4 to 2.1.5
https://github.com/DNSCrypt/dnscrypt-proxy/releases/tag/2.1.5
- dnscrypt-proxy can be compiled with Go 1.21.0+
- Responses to blocked queries now include extended error codes
- Reliability of connections using HTTP/3 has been improved
- New configuration directive:
`tls_key_log_file` When defined, this is the path to a file where
TLS secret keys will be written to, so that DoH traffic can be
locally inspected.
dns/dnscrypt-proxy2: Pin Go version to 1.19
vendor/github.com/lucas-clemente/quic-go/internal/qtls/go120.go:6:13: cannot use
"The version of quic-go you're using can't be built on Go 1.20 yet.
quic-go doesn't support go1.20 yet, keep building this port with go1.19
for now.
PR: 269289
Reported by: exp-run
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
Go ports: cleanup, finish transition to USES=go started with r505321 (cat.
audio-mail)
- Remove custom build/install targets left in place after r505321
- Switch to the new GO_TARGET tuple syntax introduced in r512001
- Switch to go:modules when upstream already uses them
Reviewed by: tobik
Approved by: araujo (mentor), portmgr (adamw)
Differential Revision: https://reviews.freebsd.org/D21741
dns/dnscrypt-proxy2: update 2.0.22 to 2.0.23
- .onion servers are now automatically ignored,
if Tor routing is not enabled;
- caching of server addresses has been improved,
especially when using proxies;
- DNSCrypt communications are now automatically forced to using TCP,
when a SOCKS proxy has been set up.
https://raw.githubusercontent.com/jedisct1/dnscrypt-proxy/2.0.23/ChangeLog
Approved by: mentors (implicit)
dns/dnscrypt-proxy2: update 2.0.18 to 2.0.19
- The value for netprobe_timeout was read from the command-line,
but not from the configuration file any more. This is a regression
introduced in the previous version, that has been fixed;
- The default value for netprobe timeouts has been raised to 60 seconds;
- A hash of the body is added to query parameters when sending DoH
queries with the POST method in order to work around badly configured
proxies.
https://raw.githubusercontent.com/jedisct1/dnscrypt-proxy/2.0.19/ChangeLog
Approved by: araujo (mentor)
Differential Revision: https://reviews.freebsd.org/D18341
dns/dnscrypt-proxy2: update 2.0.17 to 2.0.18
- official builds now support TLS 1.3;
- timeout for the initial connectivity check can be set from the cli;
- an 'Accept:' header is now always sent with GET queries;
- BOM is now ignored in configuration files;
- HTTP and HTTPS proxies are now supported for DoH servers.
https://github.com/jedisct1/dnscrypt-proxy/blob/2.0.18/ChangeLog
Approved by: araujo (mentor)
Differential Revision: https://reviews.freebsd.org/D18005
dns/dnscrypt-proxy2: Add mac_portacl option in rc script
Version 2 of dnscrypt-proxy is written in Go and therefore isn't capable
of dropping privileges after binding to a low port on FreeBSD.
By default, this port's daemon will listen on port 5353 (TCP/UDP).
With this option it's possible to bind it and listen on port 53 (TCP/UDP)
with mac_portacl(4) kernel module (network port access control policy).
For this add dnscrypt_proxy_mac_portacl_enable=YES in your rc.conf.
The dnscrypt-proxy startup script will load mac_portacl and add a rule
where %%USER%% user will be able to bind on port 53 (TCP/UDP). This port
can be changed by dnscrypt_proxy_mac_portacl_port variable in your rc.conf.
You also need to change dnscrypt-proxy config file to use port 53.
Suggested by: feld
Approved by: egypcio@googlemail.com (maintainer)
Differential Revision: https://reviews.freebsd.org/D15151
dns/dnscrypt-proxy2: Update to 2.0.10
Main changes in the port:
- Improve instructions for using dnscrypt-proxy2 together with unbound. [1]
- Add dnscrypt_proxy_suexec option for users who want to run the daemon as
root.
- Move the configuration file from ${PREFIX}/etc/dnscrypt-proxy.toml to
${PREFIX}/etc/dnscrypt-proxy/dnscrypt-proxy.toml, because by default
temporary files will use the path of the config file.
This fixes a permission issue when fetching the public resolvers list.
Changes: https://raw.githubusercontent.com/jedisct1/dnscrypt-proxy/2.0.10/ChangeLog
PR: 227129 [1]
Submitted by: egypcio@googlemail.com (maintainer)
Reported by: erik@nordstroem.no [1]
Differential Revision: https://reviews.freebsd.org/D15024
Add dns/dnscrypt-proxy2: Flexible DNS proxy with support for encrypted protocols
A flexible DNS proxy, with support for modern encrypted DNS protocols such as
DNSCrypt v2 and DNS-over-HTTP/2.
WWW: https://github.com/jedisct1/dnscrypt-proxy
Without a repocopy because it's a new port, rewritten from scratch.
PR: 225821
Submitted by: Vinicius Zavam <egypcio@googlemail.com>
Differential Revision: https://reviews.freebsd.org/D14319
