[ 06:19 ohauer  ]

• 411142 dns/unbound/Makefile
• 411142 dns/unbound/distinfo
• 411142 dns/unbound/files/patch-contrib-aaaa-filter-iterator.patch
• 411142 dns/unbound/pkg-plist

- Update unbound to version 1.5.8

- add OPTION for DNSTAP logging support
- rename OPTION s/MUNIN/MUNIN_PLUGIN/ so it is consistent with nsd
- use OPTIONS_SUB
- use ${opt}_target
- use @sample macro for unbound.conf
- sort pkg-plist

Features
- ip-transparent option for FreeBSD with IP_BINDANY socket option.
- insecure-lan-zones: yesno config option, patch from Dag-Erling Smorgrav.
- RR Type CSYNC support RFC 7477, in debug printout and config input.
- RR Type OPENPGPKEY support (draft-ietf-dane-openpgpkey-07).
- [bugzilla: 731 ] tcp-mss, outgoing-tcp-mss options for unbound.conf, patch

(Only the first 15 lines of the commit message are shown above )

[ 15:58 erwin  ]

• 408047 dns/autotrust/Makefile
• 408047 dns/getdns/Makefile
• 408047 dns/unbound/Makefile
• 408047 dns/unbound/distinfo
• 408047 dns/unbound/files/patch-contrib-aaaa-filter-iterator.patch
• 408047 dns/unbound/pkg-plist
• 408047 mail/opendkim/Makefile
• 408047 security/gnutls/Makefile
• 408047 security/strongswan/Makefile

- Update unbound to 1.5.7
- Bump PORTREVISIOn on dependent ports

Some Upgrade Notes:

This release fixes a validation failure for nodata with wildcards and
emptynonterminals. Fixes OpenSSL Library compability. Fixes correct
response for malformed EDNS queries. For crypto in libunbound there is
libnettle support.

Qname minimisation is implemented. Use qname-minimisation: yes to
enable it. This version sends the full query name when an error is
found for intermediate names. It should therefore not fail for names
on nonconformant servers. It combines well with
harden-below-nxdomain: yes because those nxdomains are probed by the

(Only the first 15 lines of the commit message are shown above )

[ 15:49 sem  ]

• 394796 dns/unbound/Makefile
• 394796 dns/unbound/files/patch-configure.ac
• 394796 dns/unbound/files/patch-contrib-aaaa-filter-iterator.patch

- Fix LibreSSL issue (from upstream)
- Add autoreconf to USES
- Satisfy portlint -AC
- Add regress-test target
- Back FILTER_AAAA option

PR:		202407
Submitted by:	brnrd