aefd72cf8f
Use OpenSSL for digest operations ( #1611537 )
2018-08-02 12:57:04 +02:00
20ccb888af
Install manpages generated by build
...
Upstream code will always install manual pages of upstream.
Manuals generated on build will be again installed. Broken by
out-of-tree build to support export-lib.
2018-07-31 22:17:56 +02:00
a38c250807
Update to 9.11.4
...
- Use more recent kyua, upstream bind now requires parallelism.
- Make global so version variables for libraries with multiple builds.
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-07-13 14:14:38 +02:00
89e5350e43
Prevent errors on bind-chroot uninstall when running ( #1600583 )
2018-07-13 14:11:20 +02:00
572c587d29
Fix chroot devices verification ( #1592873 )
...
Moves creation of device files to setup instead of scriptlets.
Devices cleanup is left to RPM.
2018-07-13 14:11:20 +02:00
41d69089c7
Use new config named-chroot.files for chroot setup files ( #1429656 )
2018-07-13 14:11:20 +02:00
5c1f40d412
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-12 21:04:39 +00:00
626855668d
Remove needless use of %defattr
2018-07-10 00:26:47 -05:00
80b88039e8
Rebuilt for Python 3.7
2018-07-02 18:22:06 +02:00
3159fb6a8e
Require utils instead of library
2018-06-27 21:03:51 +02:00
ac50574b43
CVE-2018-5738
2018-06-27 18:18:57 +02:00
600bfd47ef
Remove named.iscdlv.key file ( #1595782 )
2018-06-27 18:18:57 +02:00
72c97d6c12
Rebuilt for Python 3.7
2018-06-19 10:40:25 +02:00
e3d0b186d1
Use selinux boolean to enable writing
...
Resolves: rhbz#1569466
2018-06-08 15:07:24 +02:00
5c4c792b8d
Change named shell to /bin/false
...
Related: rhbz#1569466
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-06-08 15:07:24 +02:00
0188ce47c6
Make named home writeable ( #1422680 )
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-06-08 15:07:18 +02:00
de74eb1feb
Require C++ on build when shipped atf library is used
2018-05-25 16:09:37 +02:00
f3f402d7f2
Run tests also without kyua
...
Support start of unit tests without kyua and system atf libraries.
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-04-10 16:53:59 +02:00
b8176e5eb4
Update named.ca
2018-04-05 16:38:16 +02:00
f17cd8fc68
Do not link libidn2 to all libraries ( #1098783 )
2018-04-05 16:38:16 +02:00
36ff6aebe6
Make +noidnout default
2018-04-03 11:26:44 +02:00
cc9419191f
Compile export libs without GSSAPI
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-04-03 10:54:13 +02:00
8c4729c436
Enable libidn2 support ( #1098783 )
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-04-03 10:53:35 +02:00
f505a47d9b
Add dig support for libidn2 ( #1098783 )
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-03-21 21:34:41 +01:00
86ff90b834
Rebase to 9.11.3
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-03-21 17:59:41 +01:00
029f0510e6
Fix build with disabled unittest
...
Recommend softhsm from pkcs11 variant
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-03-21 16:55:46 +01:00
40e8ab1f0c
- Conflict with bind99-devel
...
- Require openssl-devel and libcap-devel from bind-export-devel
2018-02-26 10:29:11 +01:00
9d24906d8d
Remove Group: from spec
2018-02-17 09:29:59 +01:00
5fe0b21885
- Use bcond_with to define optional features instead of %global
...
- Move export libs closer to PKCS11 libs, simplify soversion updates
- Remove unnecesary spec parts
2018-02-17 09:29:59 +01:00
56e7b0f856
Export libs should distribute own copy of license
2018-02-17 09:29:59 +01:00
cb2172301b
Rebase to 9.11.3b1
...
Remove merged upstream patches
Signed-off-by: Petr Menšík <pemensik@redhat.com>
Update new so names
2018-02-17 09:29:59 +01:00
128dd7c787
- Use versioned provides
...
- Use spaces instead of tabs and minor cleanup
2018-02-17 09:29:58 +01:00
3931fea548
Rename devel export package to bind-export-devel.
...
Matches name to bind-devel and bind-libs in similar manner.
2018-02-17 09:29:55 +01:00
9a235f827e
Forward export libs path to isc-config
2018-02-17 09:28:56 +01:00
6787c0592a
Skip pkcs11 unit tests in export library
...
Modify also export configure script to use real libraries
Make sure only the replaced library is changed to export
2018-02-17 09:28:56 +01:00
46c6c4cd84
- Correct path for running make unit
...
- Prepare always for unit test
- Prepare only main build for system test, export test does not build
named
- Copy the key also to lib/dns-pkcs11
- BuildRequire findutils always
2018-02-17 09:28:36 +01:00
4f517bd499
Prepare system and unit test files
...
Enable unit tests also for export library
2018-02-17 09:28:36 +01:00
21ad2a883e
Copy unit rules into build directories.
...
Run unittest for both build and export libs.
2018-02-17 09:28:36 +01:00
bd8ef642c3
Remove unneeded export header files for pk11 and pkcs11
2018-02-17 09:28:36 +01:00
7d67be0060
Install export isc-config.sh
...
Use bind9-export includes. Fix patching isc-export-config.sh
2018-02-17 09:28:36 +01:00
1d54148484
Create bind-export-devel package with headers for single-threaded.
2018-02-16 21:07:08 +01:00
f75d562486
Provide description to package. Disable most of autodetected features for export libraries.
2018-02-16 21:07:08 +01:00
539c207dc9
Fix indentation
2018-02-16 21:07:08 +01:00
687255db6e
Add forgotten ldconfig for export-libs
2018-02-14 21:36:43 +01:00
c117ea001f
Obsolete/provide bind99 package for smooth update
2018-02-14 21:36:43 +01:00
76e1f1a098
Add export-libs-devel package
2018-02-14 21:34:55 +01:00
cdabc47c40
Disable epoll/kqueue as untested
2018-02-14 21:32:44 +01:00
27e37d675a
Build man in builddir
2018-02-14 21:30:59 +01:00
028f8c2ce4
Build export libs and deprecate bind99
2018-02-14 21:30:59 +01:00
a10892eed8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-07 03:49:58 +00:00
3582b7047d
Note -z defs cannot be enabled until more work
2018-01-30 19:00:58 +01:00
358a6cb08d
Remove ldconfig calls where possible
2018-01-30 17:34:53 +01:00
da51426156
Remove already included patch adding Kyuafile
2018-01-16 23:57:12 +01:00
7556fb076a
Fix CVE-2017-3145, rebase to 9.11.2-P1
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-01-16 23:38:29 +01:00
db0b09231c
Proper fix for python3-bind subpackage directory ownership ( #1522944 )
2018-01-10 12:53:57 +01:00
9647ab2c58
Provide internal tool to prepare softhsm token storage
2018-01-10 12:34:53 +01:00
661d72987e
4776. [bug] Improve portability of ht_test. [RT #46333 ]
2018-01-09 19:07:42 +01:00
dd79d39eee
Fix machine portability issues, fixes unit tests on non-x86 architectures
2018-01-09 18:19:55 +01:00
e5f6b89e92
Enable unit tests with kyua tool ( #1532694 )
2018-01-09 18:19:43 +01:00
50d9fbf691
Make tsstsig system test pass again ( #1500017 )
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-12-15 16:31:14 +01:00
7536ed9d37
Own python3-bind isc directory ( #1522944 )
2017-12-15 15:20:27 +01:00
bdc5ebdfa5
Include protocols and services in chroot
2017-10-31 19:58:06 +01:00
f5cbbc1a87
Use hmac-sha256 for new RNDC keys ( #1508003 )
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-10-31 17:37:27 +01:00
4d8c709975
Fix dynamic symbols conflict with ldap ( #1205168 )
2017-10-31 17:11:44 +01:00
4645641491
include DNSKEY 20326 also in trusted-key.key ( #1505476 )
2017-10-23 18:35:00 +02:00
2dc24d7a28
build against mariadb-connector-c-devel ( #1493615 )
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-10-23 18:03:38 +02:00
1f8ab5c253
Fix nsupdate GSSAPI auth against AD server ( #1484451 )
2017-09-13 17:59:46 +02:00
0b15f32821
Add secroots and recursing path overrides, to write into data directory.
2017-09-13 17:48:11 +02:00
5d8eb8cf1d
Update named.ca, move named.conf out of config archive
2017-08-16 22:47:09 +02:00
e9f0f4543b
Optional LMDB support, disabled by default
2017-08-14 12:33:48 +02:00
7584e54e6c
Update to 9.11.2
2017-08-14 12:17:30 +02:00
79d28ed32a
Update to 9.11.2b1
2017-08-08 17:14:41 +02:00
c81a9f4bd4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
2017-08-02 18:13:28 +00:00
268c28154e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
2017-07-26 03:56:37 +00:00
84de79cc62
Fix different formating spaces
2017-07-14 17:07:00 +02:00
6bf59b0f11
Make comment how to use different config file
2017-07-14 17:02:15 +02:00
508d643480
Use distribution flags for modules
2017-07-14 16:49:47 +02:00
43f0ac7c91
Distribute DLZ modules in separate packages.
...
Optional feature not yet enabled.
2017-07-14 16:49:47 +02:00
f2fb8b7545
Use mysql_config for SDB variant
2017-07-14 16:49:47 +02:00
e42c700db9
Update to 9.11.1-P3
2017-07-10 10:21:43 +02:00
85d0fb613e
Update to 9.11.1-P2
2017-06-30 16:06:24 +02:00
b0ccd9af19
Make utils depend on python module
2017-06-30 13:58:39 +02:00
3c983e38ec
Fix build for bumped SO-names
2017-06-25 16:26:22 +02:00
102df25a21
Fix changed patches
2017-06-15 21:42:29 +02:00
08bdf0ebe6
Update to 9.11.1-P1
2017-06-15 17:19:36 +02:00
19b1efe0bb
Fix queries for TKEY in nsupdate, when using GSSAPI ( #1236087 )
2017-04-21 17:38:45 +02:00
09e4b5788e
- Update to 9.11.0-P5
...
- Use BINDVERSION for upstream version
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-04-18 10:51:38 +02:00
bbe4229562
Update to 9.11.0-P3
2017-02-10 09:20:33 +01:00
29088fe6b4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
2017-02-10 06:52:02 +00:00
7e15fd4b3f
Fix some rpm warnings
2017-01-18 17:26:26 +01:00
3d5ea105bd
RTLD_DEEPBIND conflicts with pkcs11 libraries, skip it for dyndb ( #1410433 )
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-01-18 17:22:50 +01:00
fdce4eb560
Fix manual pages generated by recent docbook-style-xsl (bz#1397186)
...
4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831 ]
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-01-16 13:12:32 +01:00
f696d69809
Update to 9.11.0-P2
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-01-12 16:09:05 +01:00
9775c204db
Rebuild for Python 3.6
2016-12-19 18:20:36 +01:00
a925732bd1
Split pk11 includes, include real functions only in pkcs11 variant
2016-11-22 19:36:32 +01:00
8afcc7945f
Merge branch 'rhbz1392538-chroot'
2016-11-16 13:54:14 +01:00
d886cd072d
Update to 9.11.0-P1
2016-11-16 08:46:09 +01:00
59793ad00a
Do not change lib permissions in chroot
2016-11-11 15:40:13 +01:00
20cebfb8c5
Build with OpenSSL 1.1
2016-11-08 20:39:14 +01:00
e94c66494e
Update to 9.10.4-P4
2016-11-08 16:31:48 +01:00
27a8e54aa7
Update to 9.10.4-P3
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-09-29 10:23:55 +02:00
02e0755d17
Update to 9.10.4-P2
...
Signed-off-by: Michal Ruprich <mruprich@redhat.com>
2016-07-20 13:51:14 +02:00
3fed71e579
Update to 9.10.4-P1
2016-05-26 17:23:15 +02:00
aeb3d0fc5d
(un)mount /var/named in -chroot packages as the last directory (Related: #1279188 )
2016-05-20 16:19:54 +02:00
d591319212
Replaced After=network-online.target with After=network.target in all unit files
...
BIND is able to react to network configuration changes and therefore it can start even before all interfaces are fully configured. There is no need to wait until interfaces are fully configured.
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-05-12 13:31:49 +02:00
379b90d05d
Remove NM dispatcher script, since it is not needed any more ( #1277257 )
2016-05-12 13:23:35 +02:00
03a1eba10d
Use HTTPS instead of FTP for Source0
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-03-21 12:41:27 +01:00
8ac7bef51e
Cleanup dependencies to reflect reality
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-03-21 12:38:15 +01:00
83466f11b9
Update to 9.10.3-P4 due to CVE-2016-1285 CVE-2016-1286 CVE-2016-2088
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-03-11 15:02:53 +01:00
d273b747cd
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
2016-02-03 17:01:35 +00:00
4f7493080f
Update to 9.10.3-P3 due to CVE-2015-8704 and CVE-2015-8705 ( #1300051 )
2016-01-21 09:51:24 +01:00
bbb4f1d9a7
Commented out bindkeys-file statement in default configuration (#1223365#c3)
...
- Removed unrecognized configure option --enable-developer
- Added configure option --enable-full-report to get report on enabled features
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-01-06 14:59:44 +01:00
1a8262dde0
Commented out bindkeys-file statement in default configuration (#1223365#c3)
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-01-06 14:46:32 +01:00
c009763d23
Added some comments and notes to operations and definitions in SPEC
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-01-06 14:42:27 +01:00
c94cea9133
- Remove unrecognized build options for %configure
...
- Own %{_includedir}/bind9 directory in -lite-devel
- Fixed building without (optional) PKCS#11 support
2015-12-27 00:17:45 +01:00
226577f014
bump release to maintain update path
2015-12-16 19:05:05 +01:00
703982aa78
Update to 9.10.3-P2
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-12-16 15:39:32 +01:00
b4715c5089
- Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5
2015-11-10 14:07:10 +00:00
c76f58f6ea
Fixed named-checkconf call in *-chroot.service files ( #1277820 )
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-11-04 17:34:38 +01:00
caf3603af7
Update to 9.10.3 stable
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-09-17 16:17:35 +02:00
a3771cee48
Update to 9.10.3rc1 ( #1259690 )
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-09-04 01:50:26 +02:00
d6c0550f5c
Update to 9.10.2-P3 to fix CVE-2015-5477
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-07-29 10:53:07 +02:00
1d29922e18
Update to 9.10.2-P2
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-07-09 12:13:13 +02:00
566e7ed5b9
Reintroduce the DISABLE_ZONE_CHECKING into /etc/sysconfig/named
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-06-29 13:33:28 +02:00
5196f25446
Update to 9.10.2-P1
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-06-19 20:48:19 +02:00
0a65866650
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
2015-06-17 01:48:25 +00:00
e09c558cc5
Don't copy /etc/localtime on -chroot package installation
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-05-27 12:54:51 +02:00
71f9fb4731
Utilize system-wide crypto-policies ( #1179925 )
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-05-22 19:09:39 +02:00
c501776f39
Don't use ISC's DLV by default ( #1223365 )
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-05-22 17:45:37 +02:00
ca42323df8
enable GeoIP access control feature
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-05-21 09:37:42 +02:00
c1e4a2fd32
enable tuning for large systems - increases hardcoded internal limits
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-05-21 09:31:01 +02:00
be760938ec
update to 9.10.2 stable
...
- remove parallel-build patch after discussion with upstream [ISC-Bugs #38739 ]
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-03-05 13:01:25 +01:00
548cd90fb3
Add build dependency on python3-devel
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-02-25 17:02:42 +01:00
7345adf157
Use Python3 by default ( #1186791 )
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-02-25 12:48:17 +01:00
f011164832
Call ldconfig for pkcs11 version of libraries
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-02-23 16:26:28 +01:00
a62625f0bd
Fix the libdns version
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-02-23 13:17:47 +01:00
f3967f6469
update to 9.10.2rc2
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-02-23 09:59:32 +01:00
d0351fe60b
Rebuilt for Fedora 23 Change
...
https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code
2015-02-21 21:23:38 +01:00
4e2098e221
update to 9.10.2rc1
...
- fix nsupdate server auto-detection (#1184151 )
- drop merged patch bind99-rh985918.patch
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-02-02 12:39:57 +01:00
407c2d38c0
Install config for tmpfiles under %{_tmpfilesdir} ( #1181020 )
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-01-16 15:16:06 +01:00
02be4819ea
Require systemd not systemd-units
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-01-16 14:58:12 +01:00
4fa9972d29
Update to 9.10.1-P1 stable
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-01-14 12:47:51 +01:00
e001c1a066
Drop downstream patch for nslookup/host rejected by upstream
...
Upstream response:
26337 nslookup fails to get answer from non-recursive auth server
There has been a lot of email back and forth with Adam on this.
We have decided we cannot accept it, we disagree on the appropriate DNS behavior.
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-12-12 14:17:08 +01:00
460bee9b36
Update to 9.9.6-P1 (CVE-2014-8500)
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-12-09 19:01:49 +01:00
c906894bd5
drop engine_pkcs11 dependency, since we use native PKCS#11 implementation
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-11-14 13:54:21 +01:00
075927bb1c
Fixed systemctl path in logrotate configuration ( #1148360 )
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-11-14 13:53:09 +01:00
b6d2bfe08a
Fix crash during GSS-TSIG processing introduced in 32:9.9.6-2
...
Resolves : #1155334 , #1155127
Signed-off-by: Petr Spacek <pspacek@redhat.com>
2014-10-22 11:36:11 -04:00
83a76bb0d8
Remove old Requires: bind in bind-sdb
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-10-14 14:38:48 +02:00
dce2d1bd1c
Added native PKCS#11 functionality
...
Resolves: rhbz#1097752
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-10-14 14:02:38 +02:00
23b1421845
Fix assert in dig when using +sigchase ( #985918 )
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2014-10-03 11:21:44 +02:00
Petr Menšík
Fedora Release Engineering
Jason Tibbitts
Miro Hrončok
Pavel Zhukov
Björn Esser
Michal Ruprich
Tomas Hozza
Michal Ruprich
Dennis Gilmore
Robert Scheck
Peter Robinson
Till Maas
Petr Spacek