9d1aaa502b
Recommend bind-dnssec-utils from bind-pkcs11-utils
...
Manual pages are just links to pages in bind-dnssec-utils. Do not copy
them, but suggest them for installation is possible. It would be handy
to have them available, but are not required for any function.
2019-09-03 18:34:04 +02:00
bf5bc99f81
Add GeoIP to bind-chroot ( #1497646 )
...
named can use ACLs defined by GeoIP of request. Such information is not
available by default under named-chroot service. Enable GeoIP databases
under chroot without explicit configuration.
2019-09-03 13:58:49 +02:00
0fa39c28ad
Move created empty directories to single define
...
Make it easier to manage list of used directories in chroot. Use
appropriate macros for system directories everywhere in chroot package.
Share common variable with -sdb-chroot and -chroot packages.
2019-09-03 13:58:31 +02:00
8cd5c11f0d
Move some administration utilities back to utils ( #1720380 )
...
Some utilities are not related DNSSEC at all, but are just bind related
tools. Because they do not require additional dependencies, they do not
save any space in containers.
2019-09-03 11:37:26 +02:00
c5d9a5c66a
Avoid conflicts between OpenSSL and native PKCS#11
...
Do not set default engine when native module should be used.
2019-08-27 21:39:46 +02:00
72f1dad845
Update to BIND 9.11.10
2019-08-27 21:39:46 +02:00
c92fe260ae
Rebuilt for Python 3.8
2019-08-19 10:10:45 +02:00
b75571c4df
Add changelog and bump spec
2019-08-09 12:39:58 +02:00
963c4b916b
Fix rpmlint warnings
...
Clean whitespace to satisfy rpmlint
2019-08-08 15:08:53 +02:00
dab22dd2c2
Permit explicit disabling of RSAMD5 in FIPS mode ( #1709553 )
...
When MD5 is disabled in library, it behaved like RSAMD5 were unknown.
But security-policy disables it explicitly. It failed to even start in
FIPS mode, because such algorithm were unknown. Fix disabled algorithm
to return disabled result code. Accept such algorithm only when
disabling it.
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2019-08-08 14:19:59 +02:00
fac5ed036c
Disable building of export-libs
...
DHCP no longer needs export libs, stop building them.
2019-08-08 14:19:59 +02:00
b4e74efbf2
Enable GeoLite2 support
...
Make GeoIP support controlled by bcond, defaults to off now.
Instead enable GeoLite2 support.
2019-08-08 12:16:51 +02:00
448b6647dc
Solve conflicting jsoncpp-devel and json-c-devel
2019-08-08 12:16:51 +02:00
afa1fa2af7
Update to 9.11.9
2019-08-08 12:16:51 +02:00
1050b1aed6
Use monotonic time in export library ( #1732883 )
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2019-08-08 12:16:51 +02:00
3a67af20ad
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-24 19:16:14 +00:00
16ecf0736f
Update to 9.11.8
...
Contains:
5244. [security] Fixed a race condition in dns_dispatch_getnext()
that could cause an assertion failure if a
significant number of incoming packets were
rejected. (CVE-2019-6471) [GL #942 ]
5241. [bug] Fix Ed448 private and public key ASN.1 prefix blobs.
[GL #225 ]
5237. [bug] Recurse to find the root server list with 'dig +trace'.
[GL #1028 ]
2019-07-02 11:10:03 +02:00
564c143a1b
Fix OpenSSL random generator initialization
...
Also fix warning in test.
2019-06-17 13:56:47 +02:00
ecef966359
Fix libisc so version
2019-06-11 14:56:08 +02:00
2a466330c5
Update patches to new sources
...
Modify current and remove already merged patches.
Adjust versions of so libs.
2019-06-11 12:08:54 +02:00
625ca235be
Update to BIND 9.11.7
...
Fixes trusted-keys and managed-keys using the same filename.
https://downloads.isc.org/isc/bind9/9.11.7/RELEASE-NOTES-bind-9.11.7.html
2019-06-10 10:41:28 +02:00
e97d036624
Fix also postun script
2019-05-06 14:04:12 +02:00
926c8e07af
Fix error in scriptlet condition
...
Selinux boolean is not correctly set, correct syntax of bash condition.
2019-05-06 13:05:44 +02:00
4b42a5c162
5200. [security] tcp-clients settings could be exceeded in some cases,
...
which could lead to exhaustion of file descriptors.
(CVE-2018-5743) [GL #615 ]
2019-05-02 14:49:56 +02:00
7232bc0a99
Attempt to use rich dependencies
...
Selinux boolean should be set only in case given selinux policy is
installed. Do not require it inside containers.
2019-04-09 22:18:22 +02:00
e2a32c8eca
Revert shell change to /bin/false
2019-04-09 20:27:00 +02:00
ae423dfbeb
Enable optional features by default
2019-03-15 17:48:06 +01:00
16bdca79ba
Workaround to broken kyua handling of empty test
...
Also filter used subdirectories, run tests only for compiled libraries
for export-libs.
2019-03-15 15:46:04 +01:00
812f6fb336
Fix dnstap unit test issue with pkcs11
2019-03-14 15:59:22 +01:00
395fbedb17
Use libcmocka instead of libatf
...
Upstream no longer ships bundled libatf library and no longer uses ATF
in sources. kyua and cmocka are mandatory for unit tests now. Removes
--with KYUA, use --with UNITTEST on different builds when cmocka and
kyua are available.
2019-03-14 11:41:44 +01:00
bcfdb893b9
So versions change
...
Requires rebuild of all dependent packages.
2019-03-05 21:50:48 +01:00
7bc8b1b992
Atf support was removed
...
cmocka is used instead. Unfortunately it is not packaged in Fedora yet.
2019-03-05 21:50:22 +01:00
1e4169114f
Adapted patches for new version
...
Removed merged upstream.
2019-03-05 21:49:26 +01:00
2aa49f0cec
Update to 9.11.6
...
Update lastest release, patches not yet adepted for it.
2019-03-05 14:35:50 +01:00
25e332108e
Make alternative named builds testable in system tests
...
Red Hat has alternative variant builds of named, which are not ever
tested by system tests. New variables make it relatively easy to test
alternative variants.
For sdb variant use:
export NAMED_VARIANT=-sdb DNSSEC_VARIANT=
For pkcs variant use:
export NAMED_VARIANT=-pkcs11 DNSSEC_VARIANT=-pkcs11
followed by make test in build directory.
Note: PKCS11 tests are still skipped, it requires SLOT variable
exported. Fails in some cases.
2019-03-04 14:18:15 +01:00
d0d728803b
Modify feature test to detect dlz support
...
System tests are failing for named, because it cannot detect it does not
support filesystem SDB. Move feature test to named directory, so it is
built for every variant.
2019-03-04 14:18:15 +01:00
321554b987
Update to BIND 9.11.5-P4
...
Add also PGP signature as part of repository.
2019-02-22 19:40:00 +01:00
d3fe8d6248
Enable json statistics format
...
Statistics channel would include also json format, use URL
http://localhost:80/v3/json/ . XML format is still supported.
2019-02-22 19:19:59 +01:00
ec6f94669a
Enable LMDB support
...
Provides faster adding and removing of dynamically created zones
runtime. Useful on higher number of zones used.
2019-02-22 19:18:45 +01:00
f0b6f15ced
Enable DNSTAP ( #1564776 )
...
Enable support for DNSTAP. It will introduce new linked libraries to
bind and its tools, including bind-utils.
2019-02-22 19:14:36 +01:00
bd6e8b8965
Fix spec usage of softhsm helper
...
Output produced by helper is multiline starting with comment. Unless it
is enclosed in quotes, it will be concatenated into single line.
Fixes commit fa1631eef7
2019-02-22 16:39:54 +01:00
ad76423202
Disable random_test in unit tests
...
It fails sometimes, but aborts whole build just because some fail. Keep
it disabled until fixed.
2019-02-21 22:50:12 +01:00
c2772a07e8
Disable ED448
...
It is breaking dnssec system test. Its implementation in BIND is broken.
2019-02-21 15:36:27 +01:00
fa1631eef7
Simplify pkcs11 token generation
...
Make default secure enough, no predefined pins are used. Generate pin
and save it into file protected by unix rights. HSM tools will probably
require it anyway. Use smart defaults.
2019-02-20 19:06:03 +01:00
6fee3d63e9
Remove revoked KSK 19164 from trusted root keys
2019-02-15 19:50:20 +01:00
6ecd16d458
Update project URL
2019-02-15 18:09:57 +01:00
1da60a891a
More fixes to compile DLZ
2019-02-12 22:21:31 +01:00
de8fa0799a
Improve descriptions for DLZ plugins
2019-02-12 20:46:17 +01:00
7a958a2a9f
Disable dig IDN output into scripts
...
Dig could be used to receive zone via AXFR. If IDN data are inside and
are decoded, it cannot be used as named zone file. Disable +idnout if
stdin is not a tty.
2019-02-07 10:46:05 +01:00
a699858667
dig prints ASCII name instead of failure ( #1647829 )
2019-02-07 10:46:05 +01:00
432a81aeff
Fix DLZ in oot builds
...
DLZ has no VPATH support. Just make duplicates in build directory
2019-02-06 22:08:27 +01:00
9a4b768e18
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-01-31 14:36:55 +00:00
b2a708808a
Remove unneeded %clean section
...
It is the behavior since EPEL5.
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2019-01-29 05:45:26 +01:00
13f8f23ec5
Update to 9.11.5-P1
2019-01-28 00:47:11 +01:00
32d91f12ca
Made RAND_status check optional (broke --disable-crypto-rand)
...
Unlike upstream, skip it also for DHCP.
Disable RAND_status also in non-threaded builds. DHCP is built without
threads and should not check RAND_status on dns library initialization.
Lack of entropy is possible state for dhclient, but it must not fail
even in this case. Because DHCP itself does not require custom random
generator, leave default RAND_OpenSSL configured. It should help TLS
connection to LDAP in single DHCP binary, while keeping secure random
data if needed.
Resolves : #1663318
(modified upstream commit 8a98277811ea50035ff37b744fa3dc5b75bee099)
2019-01-23 21:15:03 +01:00
219b0e889f
Remove conditional patch for alpha and ia64
...
It emits warning just because architectures no longer supported
2019-01-17 13:52:22 +01:00
2830e00b88
Move dnssec related tools to bind-dnssec-utils
...
Most often clients require just dig or host to lookup addresses.
Move dnssec and zone file into dedicated subpackage. For a limited time,
make bind-utils suggest bind-dnssec-utils, until all dependencies are
resolved. (#1649398 )
2019-01-17 13:52:22 +01:00
685f10cbfd
Reject invalid rbt file if header is corrupted
...
Resolves: rhbz#1666814
2019-01-16 17:43:33 +01:00
67a5cd83ff
Made RAND_status check optional (broke --disable-crypto-rand)
...
dhclient can terminate if not enough entropy, but it never requires
random data. On a new virtual machine, lack of entropy can be common.
Ensure it does not prevent DHCP client assigning an IP address.
2019-01-16 17:43:33 +01:00
ae36af4c9f
Add support for DNSTAP
...
Not enabled by default yet. Enables dumping of dns traffic.
Fix DNSTAP issues in build and unit tests.
Fool rpmlint to accept dnstap relative path. Rpmlint emited error
hardcoded-library-path on dnstap path. It is not system-wide library,
workaround by using variable.
Add dnstap-read utility to utils. When dnstap is enabled,
dnstap-read will be part of utils. Disadvantage is all utilities would have
dependency on protobuf library, including host and dig.
Resolves : #1564776
2018-11-05 18:28:47 +01:00
eba5779fc1
Add JSON statistics support
...
Optional support for HTTP statistics. For now it is still disabled.
2018-11-05 18:27:07 +01:00
ad7b3b8f12
Update to 9.11.5
...
Bump to higher version, update sources.
More fixes to rebased BIND. Many patches are affected by stdbool change.
Update libraries so versions.
2018-11-05 18:12:29 +01:00
c64b079c36
Add Requires to devel packages referenced by bind-devel
...
bind-devel requires openssl-devel to be installed for any digest
function. Prevent failures of depending packages if they do not depend
on other devel packages themselves. bind-dyndb-ldap is one such example.
2018-10-11 12:35:49 +02:00
5efb1da1ac
fixup export-libs macro logic
...
1 /sbin/ldconfig: relative path `1' used to build cache
2 warning: %postun(bind-export-libs-32:9.11.4-6.P1.fc29.x86_64) scriptlet failed, exit status 1
The reason for that is that macro defined below becomes part of
export-libs subpackage. %end will terminate post/postun immediately
without such side-effect.
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-09-29 09:53:22 +02:00
e665b7deb0
Reenable IDN output but allow turning it off
...
Remove invalid downstream patch that disabled IDN output by default.
Dig could enable it, but it could not be enabled in nslookup and host.
Fix instead broken disable.
Resolves : #1580200
2018-09-26 20:31:46 +02:00
135784d7f2
Include /dev/urandom in chroot
...
Changed feature using OpenSSL RAND function requires /dev/urandom. It
was not provided in chroot and caused failure. Bug #1631515
2018-09-24 18:06:04 +02:00
fdbf64ca93
Fix changelog entry
2018-09-20 11:40:32 +02:00
0b3ef49c00
Update to bind-9.11.4-P2
2018-09-20 11:38:06 +02:00
8c65390bb6
Add versioned depends to all library subpackages
2018-09-19 21:04:52 +02:00
2ac37f7a75
Fix multilib conflict after 9.11 rebase
...
Conflict with devel headers reappeared after rebase to 9.11. Fix
socklen_t in a way that would generate the same types on 32 and 64 bit
architectures.
2018-09-19 21:04:52 +02:00
aeea22afaa
Fix annobin failures
...
Replace isc_safe routines with their OpenSSL counter parts
(cherry picked from commit 66ba2fdad583d962a1f4971c85d58381f0849e4d)
Remove isc_safe_memcompare, it's not needed anywhere and can't be replaced with CRYPTO_memcmp()
(cherry picked from commit b105ccee68ccc3c18e6ea530063b3c8e5a42571c)
Fix the isc_safe_memwipe() usage with (NULL, >0)
(cherry picked from commit 083461d3329ff6f2410745848a926090586a9846)
Resolves: rhbz#1624100
2018-09-19 21:04:52 +02:00
cc69cd1e32
Use sed to modify generated Makefile
...
Custom patch application is not recognized by checking tools.
Use more readable and understandable way.
2018-09-19 21:04:52 +02:00
328fbf43a1
Add manual page for new comand dnssec-importkey
...
Pkcs11 variant did not have it, add a symlink also to real manual.
2018-09-19 21:04:52 +02:00
595af1f3d5
[master] completed and corrected the crypto-random change
...
4724. [func] By default, BIND now uses the random number
functions provided by the crypto library (i.e.,
OpenSSL or a PKCS#11 provider) as a source of
randomness rather than /dev/random. This is
suitable for virtual machine environments
which have limited entropy pools and lack
hardware random number generators.
This can be overridden by specifying another
entropy source via the "random-device" option
in named.conf, or via the -r command line option;
however, for functions requiring full cryptographic
strength, such as DNSSEC key generation, this
cannot be overridden. In particular, the -r
command line option no longer has any effect on
dnssec-keygen.
This can be disabled by building with
"configure --disable-crypto-rand".
[RT #31459 ] [RT #46047 ]
2018-09-19 21:04:52 +02:00
6e9104cae5
Add support for OpenSSL provided random data
...
Modified pkcs11 patch, problem with openssl/pkcs11 includes and
ISC_PLATFORM_CRYPTOLIB
2018-09-19 21:04:52 +02:00
0ae69e04e1
BuildRequires: s/postgresql-devel/libpq-devel/
...
That's because we moved libpq.so.5 into libpq package, per
devel list discussion:
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/U3XR5EGU2TPI2CDHBRBUD4M4LK5OHKU3/
Related: rhbz#1618698, rhbz#1623764
2018-09-05 14:55:41 +02:00
37943d075e
Do not print errors on configuration failure ( #1595782 )
2018-08-14 22:28:45 +02:00
95d8248d50
Automatically replace obsoleted ISC DLV key with root key ( #1595782 )
2018-08-14 22:13:44 +02:00
e1f8ad2217
Fix sdb-chroot devices upgrade ( #1592873 )
...
Move common part to rpm define, use similar parts with different
parameter. Correct /dev/zero instead of missing /dev/dev.
2018-08-14 17:43:33 +02:00
35334375ff
Update to 9.11.4-P1
...
- Fixes CVE-2018-5740
- Adds root key sentinel mechanism support
- incremental zone transfer limit to prevent journal corruption
- rndc reload memory leak
2018-08-09 13:13:02 +02:00
899014a8d1
Add support for disabled MD5
...
Do not crash named if MD5 function is not available. Instead gracefully
refuse to use such functions.
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-08-02 23:51:45 +02:00
aefd72cf8f
Use OpenSSL for digest operations ( #1611537 )
2018-08-02 12:57:04 +02:00
20ccb888af
Install manpages generated by build
...
Upstream code will always install manual pages of upstream.
Manuals generated on build will be again installed. Broken by
out-of-tree build to support export-lib.
2018-07-31 22:17:56 +02:00
a38c250807
Update to 9.11.4
...
- Use more recent kyua, upstream bind now requires parallelism.
- Make global so version variables for libraries with multiple builds.
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-07-13 14:14:38 +02:00
89e5350e43
Prevent errors on bind-chroot uninstall when running ( #1600583 )
2018-07-13 14:11:20 +02:00
572c587d29
Fix chroot devices verification ( #1592873 )
...
Moves creation of device files to setup instead of scriptlets.
Devices cleanup is left to RPM.
2018-07-13 14:11:20 +02:00
41d69089c7
Use new config named-chroot.files for chroot setup files ( #1429656 )
2018-07-13 14:11:20 +02:00
5c1f40d412
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-12 21:04:39 +00:00
626855668d
Remove needless use of %defattr
2018-07-10 00:26:47 -05:00
80b88039e8
Rebuilt for Python 3.7
2018-07-02 18:22:06 +02:00
3159fb6a8e
Require utils instead of library
2018-06-27 21:03:51 +02:00
ac50574b43
CVE-2018-5738
2018-06-27 18:18:57 +02:00
600bfd47ef
Remove named.iscdlv.key file ( #1595782 )
2018-06-27 18:18:57 +02:00
72c97d6c12
Rebuilt for Python 3.7
2018-06-19 10:40:25 +02:00
e3d0b186d1
Use selinux boolean to enable writing
...
Resolves: rhbz#1569466
2018-06-08 15:07:24 +02:00
5c4c792b8d
Change named shell to /bin/false
...
Related: rhbz#1569466
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-06-08 15:07:24 +02:00
0188ce47c6
Make named home writeable ( #1422680 )
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-06-08 15:07:18 +02:00
de74eb1feb
Require C++ on build when shipped atf library is used
2018-05-25 16:09:37 +02:00
f3f402d7f2
Run tests also without kyua
...
Support start of unit tests without kyua and system atf libraries.
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-04-10 16:53:59 +02:00
b8176e5eb4
Update named.ca
2018-04-05 16:38:16 +02:00
f17cd8fc68
Do not link libidn2 to all libraries ( #1098783 )
2018-04-05 16:38:16 +02:00
36ff6aebe6
Make +noidnout default
2018-04-03 11:26:44 +02:00
cc9419191f
Compile export libs without GSSAPI
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-04-03 10:54:13 +02:00
8c4729c436
Enable libidn2 support ( #1098783 )
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-04-03 10:53:35 +02:00
f505a47d9b
Add dig support for libidn2 ( #1098783 )
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-03-21 21:34:41 +01:00
86ff90b834
Rebase to 9.11.3
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-03-21 17:59:41 +01:00
029f0510e6
Fix build with disabled unittest
...
Recommend softhsm from pkcs11 variant
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-03-21 16:55:46 +01:00
40e8ab1f0c
- Conflict with bind99-devel
...
- Require openssl-devel and libcap-devel from bind-export-devel
2018-02-26 10:29:11 +01:00
9d24906d8d
Remove Group: from spec
2018-02-17 09:29:59 +01:00
5fe0b21885
- Use bcond_with to define optional features instead of %global
...
- Move export libs closer to PKCS11 libs, simplify soversion updates
- Remove unnecesary spec parts
2018-02-17 09:29:59 +01:00
56e7b0f856
Export libs should distribute own copy of license
2018-02-17 09:29:59 +01:00
cb2172301b
Rebase to 9.11.3b1
...
Remove merged upstream patches
Signed-off-by: Petr Menšík <pemensik@redhat.com>
Update new so names
2018-02-17 09:29:59 +01:00
128dd7c787
- Use versioned provides
...
- Use spaces instead of tabs and minor cleanup
2018-02-17 09:29:58 +01:00
3931fea548
Rename devel export package to bind-export-devel.
...
Matches name to bind-devel and bind-libs in similar manner.
2018-02-17 09:29:55 +01:00
9a235f827e
Forward export libs path to isc-config
2018-02-17 09:28:56 +01:00
6787c0592a
Skip pkcs11 unit tests in export library
...
Modify also export configure script to use real libraries
Make sure only the replaced library is changed to export
2018-02-17 09:28:56 +01:00
46c6c4cd84
- Correct path for running make unit
...
- Prepare always for unit test
- Prepare only main build for system test, export test does not build
named
- Copy the key also to lib/dns-pkcs11
- BuildRequire findutils always
2018-02-17 09:28:36 +01:00
4f517bd499
Prepare system and unit test files
...
Enable unit tests also for export library
2018-02-17 09:28:36 +01:00
21ad2a883e
Copy unit rules into build directories.
...
Run unittest for both build and export libs.
2018-02-17 09:28:36 +01:00
bd8ef642c3
Remove unneeded export header files for pk11 and pkcs11
2018-02-17 09:28:36 +01:00
7d67be0060
Install export isc-config.sh
...
Use bind9-export includes. Fix patching isc-export-config.sh
2018-02-17 09:28:36 +01:00
1d54148484
Create bind-export-devel package with headers for single-threaded.
2018-02-16 21:07:08 +01:00
f75d562486
Provide description to package. Disable most of autodetected features for export libraries.
2018-02-16 21:07:08 +01:00
539c207dc9
Fix indentation
2018-02-16 21:07:08 +01:00
687255db6e
Add forgotten ldconfig for export-libs
2018-02-14 21:36:43 +01:00
c117ea001f
Obsolete/provide bind99 package for smooth update
2018-02-14 21:36:43 +01:00
76e1f1a098
Add export-libs-devel package
2018-02-14 21:34:55 +01:00
cdabc47c40
Disable epoll/kqueue as untested
2018-02-14 21:32:44 +01:00
27e37d675a
Build man in builddir
2018-02-14 21:30:59 +01:00
028f8c2ce4
Build export libs and deprecate bind99
2018-02-14 21:30:59 +01:00
a10892eed8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-07 03:49:58 +00:00
3582b7047d
Note -z defs cannot be enabled until more work
2018-01-30 19:00:58 +01:00
358a6cb08d
Remove ldconfig calls where possible
2018-01-30 17:34:53 +01:00
da51426156
Remove already included patch adding Kyuafile
2018-01-16 23:57:12 +01:00
7556fb076a
Fix CVE-2017-3145, rebase to 9.11.2-P1
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-01-16 23:38:29 +01:00
db0b09231c
Proper fix for python3-bind subpackage directory ownership ( #1522944 )
2018-01-10 12:53:57 +01:00
9647ab2c58
Provide internal tool to prepare softhsm token storage
2018-01-10 12:34:53 +01:00
661d72987e
4776. [bug] Improve portability of ht_test. [RT #46333 ]
2018-01-09 19:07:42 +01:00
dd79d39eee
Fix machine portability issues, fixes unit tests on non-x86 architectures
2018-01-09 18:19:55 +01:00
e5f6b89e92
Enable unit tests with kyua tool ( #1532694 )
2018-01-09 18:19:43 +01:00
50d9fbf691
Make tsstsig system test pass again ( #1500017 )
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-12-15 16:31:14 +01:00
7536ed9d37
Own python3-bind isc directory ( #1522944 )
2017-12-15 15:20:27 +01:00
bdc5ebdfa5
Include protocols and services in chroot
2017-10-31 19:58:06 +01:00
f5cbbc1a87
Use hmac-sha256 for new RNDC keys ( #1508003 )
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-10-31 17:37:27 +01:00
4d8c709975
Fix dynamic symbols conflict with ldap ( #1205168 )
2017-10-31 17:11:44 +01:00
4645641491
include DNSKEY 20326 also in trusted-key.key ( #1505476 )
2017-10-23 18:35:00 +02:00
2dc24d7a28
build against mariadb-connector-c-devel ( #1493615 )
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-10-23 18:03:38 +02:00
1f8ab5c253
Fix nsupdate GSSAPI auth against AD server ( #1484451 )
2017-09-13 17:59:46 +02:00
0b15f32821
Add secroots and recursing path overrides, to write into data directory.
2017-09-13 17:48:11 +02:00
5d8eb8cf1d
Update named.ca, move named.conf out of config archive
2017-08-16 22:47:09 +02:00
e9f0f4543b
Optional LMDB support, disabled by default
2017-08-14 12:33:48 +02:00
7584e54e6c
Update to 9.11.2
2017-08-14 12:17:30 +02:00
79d28ed32a
Update to 9.11.2b1
2017-08-08 17:14:41 +02:00
c81a9f4bd4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
2017-08-02 18:13:28 +00:00
268c28154e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
2017-07-26 03:56:37 +00:00
84de79cc62
Fix different formating spaces
2017-07-14 17:07:00 +02:00
6bf59b0f11
Make comment how to use different config file
2017-07-14 17:02:15 +02:00
508d643480
Use distribution flags for modules
2017-07-14 16:49:47 +02:00
43f0ac7c91
Distribute DLZ modules in separate packages.
...
Optional feature not yet enabled.
2017-07-14 16:49:47 +02:00
f2fb8b7545
Use mysql_config for SDB variant
2017-07-14 16:49:47 +02:00
e42c700db9
Update to 9.11.1-P3
2017-07-10 10:21:43 +02:00
85d0fb613e
Update to 9.11.1-P2
2017-06-30 16:06:24 +02:00
b0ccd9af19
Make utils depend on python module
2017-06-30 13:58:39 +02:00
3c983e38ec
Fix build for bumped SO-names
2017-06-25 16:26:22 +02:00
102df25a21
Fix changed patches
2017-06-15 21:42:29 +02:00
08bdf0ebe6
Update to 9.11.1-P1
2017-06-15 17:19:36 +02:00
19b1efe0bb
Fix queries for TKEY in nsupdate, when using GSSAPI ( #1236087 )
2017-04-21 17:38:45 +02:00
09e4b5788e
- Update to 9.11.0-P5
...
- Use BINDVERSION for upstream version
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-04-18 10:51:38 +02:00
bbe4229562
Update to 9.11.0-P3
2017-02-10 09:20:33 +01:00
29088fe6b4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
2017-02-10 06:52:02 +00:00
7e15fd4b3f
Fix some rpm warnings
2017-01-18 17:26:26 +01:00
3d5ea105bd
RTLD_DEEPBIND conflicts with pkcs11 libraries, skip it for dyndb ( #1410433 )
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-01-18 17:22:50 +01:00
fdce4eb560
Fix manual pages generated by recent docbook-style-xsl (bz#1397186)
...
4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831 ]
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-01-16 13:12:32 +01:00
f696d69809
Update to 9.11.0-P2
...
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2017-01-12 16:09:05 +01:00
9775c204db
Rebuild for Python 3.6
2016-12-19 18:20:36 +01:00
a925732bd1
Split pk11 includes, include real functions only in pkcs11 variant
2016-11-22 19:36:32 +01:00
8afcc7945f
Merge branch 'rhbz1392538-chroot'
2016-11-16 13:54:14 +01:00
d886cd072d
Update to 9.11.0-P1
2016-11-16 08:46:09 +01:00
59793ad00a
Do not change lib permissions in chroot
2016-11-11 15:40:13 +01:00
20cebfb8c5
Build with OpenSSL 1.1
2016-11-08 20:39:14 +01:00
e94c66494e
Update to 9.10.4-P4
2016-11-08 16:31:48 +01:00
27a8e54aa7
Update to 9.10.4-P3
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-09-29 10:23:55 +02:00
02e0755d17
Update to 9.10.4-P2
...
Signed-off-by: Michal Ruprich <mruprich@redhat.com>
2016-07-20 13:51:14 +02:00
3fed71e579
Update to 9.10.4-P1
2016-05-26 17:23:15 +02:00
aeb3d0fc5d
(un)mount /var/named in -chroot packages as the last directory (Related: #1279188 )
2016-05-20 16:19:54 +02:00
d591319212
Replaced After=network-online.target with After=network.target in all unit files
...
BIND is able to react to network configuration changes and therefore it can start even before all interfaces are fully configured. There is no need to wait until interfaces are fully configured.
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-05-12 13:31:49 +02:00
379b90d05d
Remove NM dispatcher script, since it is not needed any more ( #1277257 )
2016-05-12 13:23:35 +02:00
03a1eba10d
Use HTTPS instead of FTP for Source0
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-03-21 12:41:27 +01:00
8ac7bef51e
Cleanup dependencies to reflect reality
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-03-21 12:38:15 +01:00
83466f11b9
Update to 9.10.3-P4 due to CVE-2016-1285 CVE-2016-1286 CVE-2016-2088
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-03-11 15:02:53 +01:00
d273b747cd
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
2016-02-03 17:01:35 +00:00
4f7493080f
Update to 9.10.3-P3 due to CVE-2015-8704 and CVE-2015-8705 ( #1300051 )
2016-01-21 09:51:24 +01:00
bbb4f1d9a7
Commented out bindkeys-file statement in default configuration (#1223365#c3)
...
- Removed unrecognized configure option --enable-developer
- Added configure option --enable-full-report to get report on enabled features
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-01-06 14:59:44 +01:00
1a8262dde0
Commented out bindkeys-file statement in default configuration (#1223365#c3)
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-01-06 14:46:32 +01:00
c009763d23
Added some comments and notes to operations and definitions in SPEC
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2016-01-06 14:42:27 +01:00
c94cea9133
- Remove unrecognized build options for %configure
...
- Own %{_includedir}/bind9 directory in -lite-devel
- Fixed building without (optional) PKCS#11 support
2015-12-27 00:17:45 +01:00
226577f014
bump release to maintain update path
2015-12-16 19:05:05 +01:00
703982aa78
Update to 9.10.3-P2
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-12-16 15:39:32 +01:00
b4715c5089
- Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5
2015-11-10 14:07:10 +00:00
c76f58f6ea
Fixed named-checkconf call in *-chroot.service files ( #1277820 )
...
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-11-04 17:34:38 +01:00
Petr Menšík
Miro Hrončok
Fedora Release Engineering
Igor Gnatenko
Pavel Raiskup
Jason Tibbitts
Pavel Zhukov
Björn Esser
Michal Ruprich
Tomas Hozza
Michal Ruprich
Dennis Gilmore
Robert Scheck
Peter Robinson