Knot DNS is a high-performance authoritative-only DNS server which
supports all key features of the domain name system including zone
AXFR and IXFR, DDNS and DNSSEC. Its key features:
* Open source
* High-performance, multi-threaded, and mostly lock-free
implementation which scales well on SMPs
* Object-oriented design
* Support for all important DNS protocols:
- Full and incremental zone transfers
- EDNS0 and DNSSEC extensions, including NSEC3
- NSID
WWW: http://www.knot-dns.cz/
===> The following configuration options are available for knot-1.6.4_1:
DNSTAP=off: dnstap support (see dnstap.info)
IDN=off: International Domain Names support
LMDB=off: Enable LMDB backend
===> Use 'make config' to modify these settings
Move dns/knot to knot1 now knot2 no longer is in beta.
PR: 201257
Submitted by: Leo Vandewoestijne <freebsd@dns-lab.com> (maintainer)
Sponsored by: DK Hostmaster A/S
By default libtool replaces -export-symbols <file> with -retain-symbols-file
<file> on ELF systems, but this doesn't really do what -export-symbols is
meant to do. On GNU ELF systems it converts <file> to a simple version
script first and then uses -version-script instead of -retain-symbols-file.
Let USES=libtool patch libtool scripts to do this on all systems with GNU
ld(1).
Bump PORTREVISION on all ports where the build log contains -export-symbols.
audio/calf: This port builds a module that now exports only one function,
but it also builds a number of executables that link to this module and
expect to see other functions. Because it's already a bit dodgy to link to
a module (libtool warns about this) let the module continue to export only
one function and instead build an ordinary library from the same source that
the executables can link to. Fix a number of other issues in the same
(Only the first 15 lines of the commit message are shown above )
The upstream came with a different temporarily solution than the patch in PR
199298.
This one allows for GOST in DNSSEC.
Add conflict with upcoming knot2 port.
PR: 199866
Submitted by: Leo Vandewoestijne <freebsd@dns-lab.com> (maintainer)
- Update to version 1.6.3; remove "foo is" from COMMENT text
- Move bison(1) from BUILD_DEPENDS to USES
- Register CONFLICTS with knot-devel-1.*
- Enable compiler messages in batch (package building) mode
- Add new options (DNSTAP, GOST, LMDB)
- Rename IDNA option to our standard (shared) IDN
- Allow to build against `security/libressl' as OPENSSL_PORT
- Switch to using @sample keyword for knot.sample.conf
- Sort pkg-plist and reformat pkg-descr while I'm at it
- Update files/pkg-message.in to include instructions for both new
and legacy rc systems (e.g. FreeBSD 8.4 has service(8), but no
sysrc(8) utility)
PR: 199298
Submitted by: maintainer
- Update to 1.6.0
* Add persistent timers for slave zones (expire, refresh, and flush)
* Return minimal response for queries with unsupported EDNS version
* Fix DNSSEC compliant processing of letter case in RDATA domain names
* Fix interpretation of Extended RCODE in EDNS
* Fix forced zone retransfer on slave
* Fix zone expiration when transfer is being refused by master
PR: 194795
Submitted by: freebsd@dns-lab.com (maintainer)
Add USES=alias to several ports
Alias is a new USES tool that allows DragonFly to masquerade as FreeBSD
by setting CFLAGS+= -D__FreeBSD__. For some ports, this fixes the build
without the need for additional patches.
Approved by: portmgr (bapt, blanket)
Update to 1.5.3:
Bugfixes:
Some specific incoming IXFRs were causing server to crash
Rare sychronization error during reload caused read-after-free
Response synthetization module did not work properly with DNSSEC-enabled zones
If Knot sent AXFR when IXFR was requested, message ID and opcode were wrong
Knot failed to send large messages to remote control (present since 1.5.1)
Version: 1.5.2
Bugfixes:
Some RR parsing corner cases were not handled properly
AXFR-style IXFR was refused and had to be retransfered
Hash character (#) was not properly escaped when storing text zone file
PR: 193969
Submitted by: erwin
Approved by: freebsd@dns-lab.com (maintainer)
dns/libidn:
- Add USES=libtool and bump dependent ports
- Add INSTALL_TARGET=install-strip
- Always install libidn-components.png because it is used by libidn.info
- Add -lintl to Libs.private instead of Libs in libidn.pc
- Update from 1.4.3 to 1.4.6 [1]
- Add new options [2]
while here
- Add libtool to USES
- Silence mkdir and post-patch commands
Patch improved by Daniel Salzman <daniel.salzman@nic.cz> [2]
PR: ports/190370
Submitted by: Leo Vandewoestijne <freebsd@dns-lab.com> (maintainer) [1]
Make knotd startup script work again.
From the PR:
When submitting PR 183682 I was unaware the patch as in PR 182792 wasn't
committed yet. So to my amazing I just noticed the startup problem still
exists.
Enclosed patch is basicly the same as the uncommited one, but besides the
removal of the -w option, knotd now starts by default as a daemon (-d) in
stead of interactive (-i). So I could simplify the startup script a lot.
PR: ports/183891
Submitted by: Leo Vandewoestijne <freebsd@dns-lab.com> (maintainer)
- Fix build with clang. Patch was not updated in r309135
and no longer seems neccessary.
- Remove superfluous PORTVERSION and space
- Remove COPYING from PORTDOCS since LICENSE is defined
- Drop ABI version from LIB_DEPENDS
- Tab -> space in pkg-descr WWW line
- Remove FreeBSD keyword from pkg-plist
New port: dns/knot high-performance auth-only DNS server by NIC-CZ
PR: ports/165798
Submitted by: Leo Vandewoestijne <freebsd@dns-lab.com>
Approved by: Leo Vandewoestijne <freebsd@dns-lab.com> (maintainer)
Feature safe: yes
