From 029e5f05249385c37e5f73f8ad70c19a553b5cadf55fac896c98203dd42cc5f7 Mon Sep 17 00:00:00 2001 From: Michal Hrusecky Date: Tue, 27 Aug 2024 19:03:08 +0000 Subject: [PATCH 1/2] - update to version 3.3.9, see https://www.knot-dns.cz/2024-08-26-version-339.html OBS-URL: https://build.opensuse.org/package/show/server:dns/knot?expand=0&rev=70 --- .gitattributes | 23 + .gitignore | 1 + knot-3.3.7.tar.xz | 3 + knot-3.3.7.tar.xz.asc | 16 + knot-3.3.8.tar.xz | 3 + knot-3.3.8.tar.xz.asc | 16 + knot-3.3.9.tar.xz | 3 + knot-3.3.9.tar.xz.asc | 16 + knot-tmp.conf | 3 + knot.changes | 1297 +++++++++++++++++++++++++++++++++++++++++ knot.keyring | 171 ++++++ knot.spec | 301 ++++++++++ system-user-knot.conf | 1 + 13 files changed, 1854 insertions(+) create mode 100644 .gitattributes create mode 100644 .gitignore create mode 100644 knot-3.3.7.tar.xz create mode 100644 knot-3.3.7.tar.xz.asc create mode 100644 knot-3.3.8.tar.xz create mode 100644 knot-3.3.8.tar.xz.asc create mode 100644 knot-3.3.9.tar.xz create mode 100644 knot-3.3.9.tar.xz.asc create mode 100644 knot-tmp.conf create mode 100644 knot.changes create mode 100644 knot.keyring create mode 100644 knot.spec create mode 100644 system-user-knot.conf diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9b03811 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..57affb6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.osc diff --git a/knot-3.3.7.tar.xz b/knot-3.3.7.tar.xz new file mode 100644 index 0000000..2e93f72 --- /dev/null +++ b/knot-3.3.7.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:18ceb398578342e9a3d5b75f2423945a2f8d1d7c730f24f4d2aa4a24b50e831d +size 1564920 diff --git a/knot-3.3.7.tar.xz.asc b/knot-3.3.7.tar.xz.asc new file mode 100644 index 0000000..c247915 --- /dev/null +++ b/knot-3.3.7.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEdC+k6VgptsXqxrhXELt69v671qsFAmZ6iQYACgkQELt69v67 +1quiRA//d9IwkFNWo1YlLo6KrnzRTRRkR70bGzJKOfA1KTrqFGN4oMlr872PSNy2 +mJgJmB4tPtW6BQb1Rqb6HRxMR8zshT/YslkFGe6GArdcJNlT93IYa9cB2fmnich2 +r8XBi9OQ0lJOcX+IWcjUbJavU1cDo3lehGUrNK41QX20a/40CrMNRS5YGjp3o5kB +r1WVWhzaVhGhHDVGBrz99cyNarmP+dCHzBwReh3TAyxSp6g8ubNzwBqqJQwH8pYq +xS61LuQJU/Y88JnaXNgVvv7hzlV+jTzcH/VQTI10aHVYs5lu9fU4tWnkLxf5E8wO +LUYRhXf6Nr2I9jm+8LT7oUXUaDjga7sRFDWs0y56dSjqNT5S3Nei+bCMiUrYzi9l +V72o2poqldyD+DG7UcYOyVhNLNgvo6a0wwiRnNk2dk5Ey6ZBW9+OpCqA0PQEtijM +GJ67JP1d2UDIW1wlzr25dofO9p1elGqGk7R42bfciAh7tZhH8JXrmtBL6PARu7/O +cRPQyEXbJov29LXmBtEHPO1YsHsyz53htjGmXjHvAFQuB2Nc+qeyI+IqVnne1xKL +u1ptxW6XJUxpO54SNwUJft9fca8AS3wQQhRcfjjPMjpEpqn5QaV1sQWiR8NtktGt +oMfDyrXoM/Nty43mxcAnAREXFKkQr3se2D+b+0ZROVikm1iRVIo= +=To30 +-----END PGP SIGNATURE----- diff --git a/knot-3.3.8.tar.xz b/knot-3.3.8.tar.xz new file mode 100644 index 0000000..2b6cb57 --- /dev/null +++ b/knot-3.3.8.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:498de8338489a625673797f7ecc921fa4490c826afbfa42fa66922b525089e6a +size 1608360 diff --git a/knot-3.3.8.tar.xz.asc b/knot-3.3.8.tar.xz.asc new file mode 100644 index 0000000..b519645 --- /dev/null +++ b/knot-3.3.8.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEdC+k6VgptsXqxrhXELt69v671qsFAmad/vIACgkQELt69v67 +1qsexg//fDv3BExMkpx7hPz5j0bncnXuWdpUKQVNAu/xs3dnTI/WsnmS8lnh4CTP +mWvcsoO5FxzK9Nda76YvMc06eVjvlFXy4Mvzkp/OHf4u+RGcDVq2KHCF33i9YzGd +cGbRDK2ERNvpdvsdSgR/p34XneqDwpGHfJin3U7BdyM7dSoSrPUwBR3KgApCppnr +53PxWGGuSa4tpNPxMpWPa5tP/w3PhCd31MGXGrk4UulhCPAQ1oZPzxE81LcBVlW+ +a0Checbg2ZW685h9hvZqQzeJEkFXa1q4uFsOBhVMhf262VTUYMJojKoolykOSMDV +QwirOUHAB32DpLpzhu8qdswCDcjFsXBr/ZrI08HivcMDFCj1XYkw57T94ZdJ+E6e +E81U0SbIwrJtWrms4jwa9v+7lmMgfdRXcdGy2jaEm5O/NtYmy2G7YQ8Uji+YZyc2 +tlxzF1ImO3X7eIu/2Lpb2ubhgU7VrQG0Ho1lzEFTebBh6Ywjrwwfh7L/YXEmvOHm +SXewwRDyhfValDCbF29AV4Nof/CLBqg5JD2DMLUMgyQ2mwDgTJky6tA5EgaxJPIM +q/vrU9fKsK1o/vP9tldZ/Gwuhip8dKpkw0xDHOuBrY1vstHZSn+FqnP8AaLTcmPs +6s6fj8orf7QD7CQ4b8uWi2T6IncPi4CnB2bvoUwqqHM4XFQK1bM= +=JelB +-----END PGP SIGNATURE----- diff --git a/knot-3.3.9.tar.xz b/knot-3.3.9.tar.xz new file mode 100644 index 0000000..375568a --- /dev/null +++ b/knot-3.3.9.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:7cf2bd93bf487179aca1d2acf7b462dc269e769944c3ea73c7f9a4570dde86ab +size 1608644 diff --git a/knot-3.3.9.tar.xz.asc b/knot-3.3.9.tar.xz.asc new file mode 100644 index 0000000..e762701 --- /dev/null +++ b/knot-3.3.9.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEdC+k6VgptsXqxrhXELt69v671qsFAmbMFLoACgkQELt69v67 +1qujvRAAo8qdiG9m3pCtNmecU7FHSF6UHPOerUTu/NDUTWvY6eBSHCjpE+/JOqQn +VI03r2sPQRgu6ihlRJLQi03o9FyflE8+VdvLAy/k4XgvvSf9x5yd76KaWECiveap +psuo0rzm0JPlg/Ee4SUiYdL9gldOLhHNjNxi1zqVxJRYwM1wc3lewKLO1Op+K+Ng +uJqHVnyBbPHGsuUuT4LKvYgBWnFRrFXJYPPYHFv7hpz3EdMzJpTPSBNNWk0unKv0 +HO7wdr3xxADfjMubv3GAnEYFvno7OjpqryF4L9iG8gZTVfYyEl9w+VxAWgcb/g/E +sZMGaxYRH1jtd7qX2eIvib4v8aykO3+Athml6O76sweoO4cn5GiJh4TtlIuH84Lc +shjYDbp1KNVeHzlFgAHHJxXifuvEsnEOCJqcJWI1j/G79kkAtclWXsAK0sLV+tQN +VLmfyeBuaNwVz5GKVx5oEyjJdu95kd4wWUBpaidfmQJHL5I8WclZjiHEKGWmJ9ei +v/monpU0WLw6tCAydoeh+cQ9TyNgaqrj/jVPJ2yoo6mt+Z+Mo259qlz0cuvPBUtT +czYqqFfKGrn6b+xAWQWyr3rw4UAGljmLKnpPQQWi4qEvqzCprpWE0mZ6w+K5llpi +3K4mdlGCYmUl4U4iU4yAd9Wfd9YfYH/xNKiRy34AhodAdvpXJ7s= +=O1la +-----END PGP SIGNATURE----- diff --git a/knot-tmp.conf b/knot-tmp.conf new file mode 100644 index 0000000..d2f1f91 --- /dev/null +++ b/knot-tmp.conf @@ -0,0 +1,3 @@ +# tmpfiles.d(5) runtime directory for knot-resolver (kresd) +#Type Path Mode UID GID Age Argument + d /run/knot 0751 knot knot - - diff --git a/knot.changes b/knot.changes new file mode 100644 index 0000000..efa9ca7 --- /dev/null +++ b/knot.changes @@ -0,0 +1,1297 @@ +------------------------------------------------------------------- +Tue Aug 27 18:12:50 UTC 2024 - Michal Hrusecky + +- update to version 3.3.9, see + https://www.knot-dns.cz/2024-08-26-version-339.html + +------------------------------------------------------------------- +Wed Jul 24 14:57:48 UTC 2024 - Michal Hrusecky + +- split knot-utils with kdig and friends + +------------------------------------------------------------------- +Tue Jul 23 20:59:22 UTC 2024 - Michal Hrusecky + +- update to version 3.3.8, see + https://www.knot-dns.cz/2024-07-22-version-338.html + +------------------------------------------------------------------- +Mon Jul 1 21:42:11 UTC 2024 - Michal Hrusecky + +- use distribution library on Tumbleweed for DoQ support + +------------------------------------------------------------------- +Mon Jul 1 21:26:34 UTC 2024 - Michal Hrusecky + +- enable DoH support (add dependency on libnghttp2) bsc#1225969 +- enable DoQ support using embedded library (libngtcp2) + +------------------------------------------------------------------- +Tue Jun 25 13:13:39 UTC 2024 - Michal Hrusecky + +- update to version 3.3.7, see + https://www.knot-dns.cz/2024-06-25-version-337.html + +------------------------------------------------------------------- +Thu Jun 13 07:24:56 UTC 2024 - Michal Hrusecky + +- update to version 3.3.6, see + https://www.knot-dns.cz/2024-06-12-version-336.html + +------------------------------------------------------------------- +Wed Mar 6 14:01:24 UTC 2024 - Michal Hrusecky + +- update to version 3.3.5, see + https://www.knot-dns.cz/2024-03-06-version-335.html + +------------------------------------------------------------------- +Wed Jan 24 16:59:49 UTC 2024 - Michal Hrusecky + +- update to version 3.3.4, see + https://www.knot-dns.cz/2024-01-24-version-334.html + +------------------------------------------------------------------- +Wed Dec 13 10:44:53 UTC 2023 - Michal Hrusecky + +- update to version 3.3.3, see + https://www.knot-dns.cz/2023-12-13-version-333.html + +------------------------------------------------------------------- +Thu Nov 16 09:59:21 UTC 2023 - Dominique Leuenberger + +- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: + allow OBS to shortcut through systemd-mini. + +------------------------------------------------------------------- +Mon Oct 23 13:12:26 UTC 2023 - Michal Hrusecky + +- update to version 3.3.2, see + https://www.knot-dns.cz/2023-10-20-version-332.html + +------------------------------------------------------------------- +Mon Sep 11 09:09:07 UTC 2023 - Michal Hrusecky + +- update to version 3.3.1, see: + https://www.knot-dns.cz/2023-09-11-version-331.html + +------------------------------------------------------------------- +Tue Aug 29 11:51:26 UTC 2023 - Michal Hrusecky + +- drop protobuf-c dependency and rely on libprotobuf-c-devel to provide protoc-gen-c + +------------------------------------------------------------------- +Mon Aug 28 15:20:55 UTC 2023 - Michal Hrusecky + +- update to version 3.3.0, see: + https://www.knot-dns.cz/2023-08-28-version-330.html + +------------------------------------------------------------------- +Thu Jul 27 13:50:22 UTC 2023 - Michal Hrusecky + +- update to version 3.2.9, see: + https://www.knot-dns.cz/2023-07-27-version-329.html + +------------------------------------------------------------------- +Mon Jun 26 07:33:49 UTC 2023 - Michal Hrusecky + +- update to version 3.2.8, see: + https://www.knot-dns.cz/2023-06-26-version-328.html + +------------------------------------------------------------------- +Wed Jun 7 10:57:04 UTC 2023 - Michal Hrusecky + +- update to version 3.2.7, see: + https://www.knot-dns.cz/2023-06-06-version-327.html + +------------------------------------------------------------------- +Tue Apr 4 14:16:53 UTC 2023 - Michal Hrusecky + +- update to version 3.2.6, see: + https://www.knot-dns.cz/2023-04-04-version-326.html + +------------------------------------------------------------------- +Thu Feb 2 12:46:53 UTC 2023 - Michal Hrusecky + +- update to version 3.2.5, see: + https://www.knot-dns.cz/2023-02-02-version-325.html + +------------------------------------------------------------------- +Mon Dec 12 08:05:34 UTC 2022 - Michal Hrusecky + +- update to version 3.2.4, see: + https://www.knot-dns.cz/2022-12-12-version-324.html + +------------------------------------------------------------------- +Sun Nov 20 10:46:52 UTC 2022 - Michal Hrusecky + +- update to version 3.2.3, see: + https://www.knot-dns.cz/2022-11-20-version-323.html + +------------------------------------------------------------------- +Tue Nov 1 09:52:45 UTC 2022 - Michal Hrusecky + +- update to version 3.2.2, see: + https://www.knot-dns.cz/2022-11-01-version-322.html + +------------------------------------------------------------------- +Thu Sep 22 11:40:39 UTC 2022 - Michal Hrusecky + +- update to version 3.2.1, see: + https://www.knot-dns.cz/2022-09-09-version-321.html + +------------------------------------------------------------------- +Tue Aug 30 19:26:25 UTC 2022 - Michal Hrusecky + +- add keyring to spec file as source to suppress factory-auto error + +------------------------------------------------------------------- +Tue Aug 23 09:51:40 UTC 2022 - Michal Hrusecky + +- use upstream service file that requires less privileges +- add keyring to actually verify the signature + +------------------------------------------------------------------- +Tue Aug 23 09:19:05 UTC 2022 - Michal Hrusecky + +- update to version 3.2.0, see: + https://www.knot-dns.cz/2022-08-22-version-320.html + +------------------------------------------------------------------- +Thu Apr 28 20:42:34 UTC 2022 - Michal Hrusecky + +- update to version 3.1.8, see: + https://www.knot-dns.cz/2022-04-28-version-318.html + +------------------------------------------------------------------- +Wed Mar 30 08:25:50 UTC 2022 - Michal Hrusecky + +- update to version 3.1.7, see: + https://www.knot-dns.cz/2022-03-30-version-317.html + +------------------------------------------------------------------- +Tue Feb 8 13:08:23 UTC 2022 - Michal Hrusecky + +- update to version 3.1.6, see: + https://www.knot-dns.cz/2022-02-08-version-316.html + +------------------------------------------------------------------- +Mon Dec 20 19:49:42 UTC 2021 - Michal Hrusecky + +- drop conditions for openSUSE 13 and older +- knot.conf is owned by knot as is it's parent directory + +------------------------------------------------------------------- +Mon Dec 20 19:34:16 UTC 2021 - Michal Hrusecky + +- update to version 3.1.5, see: + https://www.knot-dns.cz/2021-12-20-version-315.html + +------------------------------------------------------------------- +Thu Nov 4 19:43:56 UTC 2021 - Michal Hrusecky + +- update to version 3.1.4, see: + https://www.knot-dns.cz/2021-11-04-version-314.html + +------------------------------------------------------------------- +Tue Oct 19 20:37:52 UTC 2021 - Michal Hrusecky + +- update to version 3.1.3, see: + https://www.knot-dns.cz/2021-10-18-version-313.html + +------------------------------------------------------------------- +Fri Sep 17 19:15:39 UTC 2021 - Michal Hrusecky + +- migrate to user creation via sysuser-tools +- run spec-cleaner on spec file +- update to version 3.1.2, see: + https://www.knot-dns.cz/2021-09-08-version-312.html + +------------------------------------------------------------------- +Thu Aug 12 07:51:04 UTC 2021 - Michal Hrusecky + +- update to version 3.1.1, see: + https://www.knot-dns.cz/2021-08-10-version-311.html + +------------------------------------------------------------------- +Wed Aug 4 17:31:13 UTC 2021 - Michal Hrusecky + +- update to version 3.1.0, see: + https://www.knot-dns.cz/2021-08-02-version-310.html + +------------------------------------------------------------------- +Thu Jul 1 09:22:32 UTC 2021 - Michal Hrusecky + +- update to version 3.0.7, see: + https://www.knot-dns.cz/2021-06-16-version-307.html + +------------------------------------------------------------------- +Fri May 14 21:24:51 UTC 2021 - Michal Hrusecky + +- make sure we have getent and groupadd/useradd in pre + * added dependency on shadow and glibc + * might be related to bnc#1186023 + +------------------------------------------------------------------- +Wed May 12 12:43:44 UTC 2021 - Michal Hrusecky + +- update to version 3.0.6, see: + https://www.knot-dns.cz/2021-05-12-version-306.html + +------------------------------------------------------------------- +Tue May 11 09:24:39 UTC 2021 - Michal Hrusecky + +- Make /etc/knot directory owned by knot - fix reload action + +------------------------------------------------------------------- +Sat Mar 27 12:05:44 UTC 2021 - Jan Engelhardt + +- Update descriptions, remove unsubstantiated claims. + +------------------------------------------------------------------- +Thu Mar 25 12:56:29 UTC 2021 - Michal Hrusecky + +- update to version 3.0.5, see: + https://www.knot-dns.cz/2021-03-25-version-305.html +- Update description based on homepage + +------------------------------------------------------------------- +Mon Feb 1 13:19:02 UTC 2021 - Jan Engelhardt + +- Trim marketing wording from description. +- Drop old rpm constructs. + +------------------------------------------------------------------- +Mon Jan 25 22:30:39 UTC 2021 - Michal Hrusecky + +- version update to 3.0.4, see: + https://www.knot-dns.cz/2021-01-20-version-304.html + +------------------------------------------------------------------- +Mon Jan 4 16:48:21 UTC 2021 - Michal Hrusecky + +- add incompatibility warning about 1.6.X version when updateing +- rename back to knot + +------------------------------------------------------------------- +Mon Dec 28 16:24:32 UTC 2020 - pgajdos@suse.com + +- version update to 3.0.3 + +------------------------------------------------------------------- +Mon Nov 30 21:41:09 UTC 2020 - Michal Hrusecky + +- version update to 2.9.7, see: + https://www.knot-dns.cz/2020-08-31-version-296.html + https://www.knot-dns.cz/2020-10-09-version-297.html +- obsolete only pre-2.0 version + +------------------------------------------------------------------- +Tue Jul 21 10:52:20 UTC 2020 - Marcus Rueckert + +- remove rosedb conditional as lmdb is required in general now + +------------------------------------------------------------------- +Tue Jul 21 10:35:13 UTC 2020 - Marcus Rueckert + +- replace conflicts with Provides/Obsoletes + +------------------------------------------------------------------- +Wed Jun 24 15:12:35 UTC 2020 - Michal Hrusecky + +- fix dependency: python-Sphinx -> python3-Sphinx + +------------------------------------------------------------------- +Wed Jun 24 15:04:01 UTC 2020 - Michal Hrusecky + +- use upstream example config file with correct syntax + +------------------------------------------------------------------- +Wed Jun 24 08:55:33 UTC 2020 - Michal Hrusecky + +- version update to 2.9.5 + - Bugfixes + - Old ZSK can be withdrawn too early during a ZSK rollover if maximum zone + TTL is computed automatically + - Server responds SERVFAIL to ANY queries on empty non-terminal nodes + - Improvements + - Also module onlinesign returns minimized responses to ANY queries + - Linking against libcap-ng can be disabled via a configure option + +------------------------------------------------------------------- +Tue May 19 20:30:10 UTC 2020 - Michal Hrusecky + +- version update to 2.9.4 + see NEWS + +------------------------------------------------------------------- +Fri Dec 20 10:07:59 UTC 2019 - pgajdos@suse.com + +- version update to 2.9.2 + see NEWS + +------------------------------------------------------------------- +Wed Jan 23 13:26:51 UTC 2019 - Marcus Rueckert + +- update to 2.7.6 + - Improvements + - Zone status also shows when the zone load is scheduled + - Server workers status also shows background workers + utilization + - Default control timeout for knotc was increased to 10 seconds + - Pkg-config files contain auxiliary variable with library + filename + - Bugfixes + - Configuration commit or server reload can drop some pending + zone events + - Nonempty zone journal is created even though it's disabled + #635 + - Zone is completely re-signed during empty dynamic update + processing + - Server can crash when storing a big zone difference to the + journal + - Failed to link on FreeBSD 12 with Clang + +------------------------------------------------------------------- +Mon Jan 7 13:46:56 UTC 2019 - Marcus Rueckert + +- update to 2.7.5 + - Features: + - Keymgr supports NSEC3 salt handling + - Improvements: + - Zone history in journal is dropped apon AXFR-like zone update + - Libdnssec is no longer linked against libm #628 + - Libdnssec is explicitly linked against libpthread if PKCS #11 + enabled #629 + - Better support for libknot packaging in Python + - Manually generated KSK is 'ready' by default + - Kdig supports '+timeout' as an alias for '+time' + - Kdig supports '+nocomments' option + - Kdig no longer prints empty lines between retries + - Kdig returns failure if operations not successfully resolved + #632 + - Fixed repeating of the 'KSK submission, waiting for + confirmation' log + - Various improvements in documentation, Dockerfile, and tests + - Bugfixes: + - Knotc fails to unset huge configuration section + - Kjournalprint sometimes fails to display zone journal content + - Improper timing of ZSK removal during ZSK rollover + - Missing UTC time zone indication in the 'iso' keymgr list + output + - A race condition in the online signing module + +------------------------------------------------------------------- +Mon Dec 31 16:07:03 UTC 2018 - Petr Gajdos + +- update to 2.7.4 + Features: + --------- + - Added SNI configuration for TLS in kdig (Thanks to Alexander Schultz) + Improvements: + ------------- + - Added warning log when DNSSEC events not successfully scheduled + - New semantic check on timer values in keymgr + - DS query no longer asks other addresses if got a negative answer + - Reintroduced 'rollover' configuration option for CDS/CDNSKEY publication + - Extended logging for zone loading + - Various documentation improvements + Bugfixes: + --------- + - Failed to import module configuration #613 + - Improper Cflags value in libknot.pc if built with embedded LMDB #615 + - IXFR doesn't fall back to AXFR if malformed reply + - DNSSEC events not correctly scheduled for empty zone updates + - During algorithm rollover old keys get removed before DS TTL expires #617 + - Maximum zone's RRSIG TTL not considered during algorithm rollover #620 + +------------------------------------------------------------------- +Sun Nov 4 02:14:26 UTC 2018 - Marcus Rueckert + +- seems we no longer need jansson + +------------------------------------------------------------------- +Sun Nov 4 02:10:14 UTC 2018 - Marcus Rueckert + +- limit geoip support to opensuse + +------------------------------------------------------------------- +Sat Nov 3 22:23:36 UTC 2018 - Marcus Rueckert + +- update to 2.7.3 + - Features: + - New queryacl module for query access control + - Configurable answer rrset rotation #612 + - Configurable NSEC bitmap in online signing + - Improvements: + - Better error logging for KASP DB operations #601 + - Some documentation improvements + - Bugfixes: + - Keymgr "list" output doesn't show key size for ECDSA algorithms #602 + - Failed to link statically with embedded LMDB + - Configuration commit causes zone reload for all zones + - The statistics module overlooks TSIG record in a request + - Improper processing of an AXFR-style-IXFR response consisting of one-record messages + - Race condition in online signing during key rollover #600 + - Server can crash if geoip module is enabled in the geo mode +- changes from 2.7.2 + - Improvements: + - Keymgr list command displays also key size + - Kjournalprint displays total occupied size in the debug mode + - Server doesn't stop if failed to load a shared module from the module directory + - Libraries libcap-ng, pthread, and dl are linked selectively if needed + - Bugfixes: + - Sometimes incorrect result from dnssec_nsec_bitmap_contains (libdnssec) + - Server can crash when loading zone file difference and zone-in-journal is set + - Incorrect treatment of specific queries in the module RRL + - Failed to link module Cookies as a shared library +- changes from 2.7.1 + - Improvements: + - Added zone wire size information to zone loading log message + - Added debug log message for each unsuccessful remote address operation + - Various improvements for packaging + - Bugfixes: + - Incompatible handling of RRSIG TTL value when creating a DNS message + - Incorrect RRSIG TTL value in zone differences and knotc zone operation outputs + - Default configure prefix is ignored +- changes from 2.7.0 + - Features: + - New DNS Cookies module and related '+cookie' kdig option + - New module for response tailoring according to client's subnet or geographic location + - General EDNS Client Subnet support in the server + - OSS-Fuzz integration (Thanks to Jonathan Foote) + - New '+ednsopt' kdig option (Thanks to Jan Včelák) + - Online Signing support for automatic key rollover + - Non-normal file (e.g. pipe) loading support in zscanner #542 + - Automatic SOA serial incrementation if non-empty zone difference + - New zone file load option for ignoring zone file's SOA serial + - New build-time option for alternative malloc specification + - Structured logging for DNSSEC key submission event + - Empty QNAME support in kdig + - Improvements: + - Various library and server optimizations + - Reduced memory consumption of outgoing IXFR processing + - Linux capabilities use overhaul #546 (Thanks to Robert Edmonds) + - Online Signing properly signs delegations and CNAME records + - CDS/CDNSKEY rrset is signed with KSK instead of ZSK + - DNSSEC-related records are ignored when loading zone difference with signing enabled + - Minimum allowed RSA key length was increased to 1024 + - Bugfixes: + - Possible uninitialized address buffer use in zscanner + - Possible index overflow during multiline record parsing in zscanner + - kdig +tls sometimes consumes 100 % CPU #561 + - Single-Type Signing doesn't work with single ZSK key #566 + - Zone not flushed after re-signing during zone load #594 + - Server crashes when committing empty zone transaction + - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 + - Compatibility: + - Removed obsolete RRL configuration + - Removed obsolete module names 'mod-online-sign' and 'mod-synth-record' + - Removed obsolete 'ixfr-from-differences' configuration option + - Removed old journal migration + - Removed module rosedb +- changes from 2.6.9 + - Improvements: + - Added zone wire size to zone loading log message + - Added debug log message for each unsuccessful remote address operation + - Bugfixes: + - Zone not flushed after re-signing during zone load #594 + - Server crashes when committing empty zone transaction + - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 +- packaging changes: + - enabled geoip module: new BR: pkgconfig(libmaxminddb) + - enabled cookies module + - enabled queryacl module + +------------------------------------------------------------------- +Sat Jul 14 03:07:45 UTC 2018 - mrueckert@suse.de + +- update to 2.6.8 + - Features: + - New 'import-pkcs11' command in keymgr + - Improvements: + - Unixtime serial policy mimics Bind – increment if lower #593 + - Bugfixes: + - Creeping memory consuption upon server reload #584 + - Kdig incorrectly detects QNAME if 'notify' is a prefix + - Server crashes when zone sign fails #587 + - CSK->KZSK rollover retires CSK early #588 + - Server crashes when zone expires during outgoing + multi-message transfer + - Kjournalprint doesn't convert zone name argument to + lower-case + - Cannot switch to a previously used ksk-shared dnssec policy + #589 +- update to 2.6.7 + - Features: + - Added 'dateserial' (YYYYMMDDnn) serial policy configuration + (Thanks to Wolfgang Jung) + - Improvements: + - Trailing data indication from the packet parser (libknot) + - Better configuration check for a problematical option + combination + - Bugfixes: + - Incomplete configuration option item name check + - Possible buffer overflow in 'knot_dname_to_str' (libknot) + - Module dnsproxy doesn't preserve letter case of QNAME + - Module dnsproxy duplicates OPT and TSIG in the non-fallback + mode + +------------------------------------------------------------------- +Wed May 2 08:29:51 UTC 2018 - kbabioch@suse.com + +- Update to 2.6.6 + - Features: + - New EDNS option counters in the statistics module + - New '+orphan' filter for the 'zone-purge' operation + - Improvements: + - Reduced memory consuption of disabled statistics metrics + - Some spelling fixes (Thanks to Daniel Kahn Gillmor) + - Server no longer fails to start if MODULE_DIR doesn't exist + - Configuration include doesn't fail if empty wildcard match + - Added a configuration check for a problematical option combination + - Bugfixes: + - NSEC3 chain not re-created when SOA minimum TTL changed + - Failed to start server if no template is configured + - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing + - Inaccurate outgoing zone transfer size in the log message + - Invalid dname compression if empty question section + - Missing EDNS in EMALF responses + + +------------------------------------------------------------------- +Mon Apr 2 00:04:43 UTC 2018 - mrueckert@suse.de + +- update to 2.6.5 + - Features: + - New 'zone-notify' command in knotc + - Kdig uses '@server' as a hostname for TLS authenticaion if + '+tls-ca' is set + - Improvements: + - Better heap memory trimming for zone operations + - Added proper polling for TLS operations in kdig + - Configuration export uses stdout as a default output + - Simplified detection of atomic operations + - Added '--disable-modules' configure option + - Small documentation updates + - Bugfixes: + - Zone retransfer doesn't work well if more masters configured + - Kdig can leak or double free memory in corner cases + - Inconsistent error outputs from dynamic configuration + operations + +------------------------------------------------------------------- +Thu Jan 11 09:24:15 UTC 2018 - i@marguerite.su + +- update to 2.6.4 + see /usr/share/doc/packages/knot2/NEWS + +------------------------------------------------------------------- +Sun Aug 6 23:01:55 UTC 2017 - mrueckert@suse.de + +- fix tmpfiles scriptlet + +------------------------------------------------------------------- +Sun Aug 6 22:40:26 UTC 2017 - mrueckert@suse.de + +- package /var/lib/knot +- run tmpfiles scriptlet during install + +------------------------------------------------------------------- +Sun Aug 6 21:45:44 UTC 2017 - mrueckert@suse.de + +- update to 2.5.3 + see /usr/share/doc/packages/knot2/NEWS +- use libidn2 on TW and 42.3 +- following modules stay static: + - dnsproxy + - onlinesign +- moved modules to shared building: + - dnstap + - noudp + - rosedb + - rrl + - stats + - synthrecord + - whoami + +------------------------------------------------------------------- +Mon Feb 13 11:57:09 UTC 2017 - mrueckert@suse.de + +- update to 2.4.1 + see /usr/share/doc/packages/knot2/NEWS + +------------------------------------------------------------------- +Tue May 24 15:46:58 UTC 2016 - mrueckert@suse.de + +- update to 2.2.1 + - Bugfixes: + - Fix separate logging of server and zone events + - Fix concurrent zone file flushing with many zones + - Fix possible server crash with empty hostname on OpenWRT + - Fix control timeout parsing in knotc + - Fix "Environment maxreaders limit reached" error in knotc + - Don't apply journal changes on modified zone file + - Remove broken LTO option from configure script + - Enable multiple zone names completion in interactive knotc + - Set the TC flag in a response if a glue doesn't fit the + response + - Disallow server reload when there is an active configuration + transaction + - Improvements: + - Distinguish unavailable zones from zones with zero serial in + log messages + - Log warning and error messages to standard error output in + all utilities + - Document tested PKCS #11 devices + - Extended Python configuration interface + +------------------------------------------------------------------- +Tue May 10 22:14:14 UTC 2016 - mrueckert@suse.de + +- update to 2.2.0 + - Bugfixes: + - Fix build dependencies on FreeBSD + - Fix query/response message type setting in dnstap module + - Fix remote address retrieval from dnstap capture in kdig + - Fix global modules execution for queries hitting existing + zones + - Fix execution of semantic checks after an IXFR transfer + - Fix PKCS#11 support detection at build time + - Fix kdig failure when the first AXFR message contains just + the SOA record + - Exclude non-authoritative types from NSEC/NSEC3 bitmap at a + delegation + - Mark PKCS#11 generated keys as sensitive (required by Luna + SA) + - Fix error when removing the only zone from the server + - Don't abort knotc transaction when some check fails + - Features: + - URI and CAA resource record types support + - RRL client address based white list + - knotc interactive mode + - Improvements: + - Consistent IXFR error messages + - Various fixes for better compatibility with PKCS#11 devices + - Various keymgr user interface improvements + - Better zone event scheduler performance with many zones + - New server control interface + - kdig uses local resolver if resolv.conf is empty +- new BR libedit-devel for the interactive mode + +------------------------------------------------------------------- +Thu Feb 11 00:08:40 UTC 2016 - mrueckert@suse.de + +- update to 2.1.1 + - Bugfixes: + - DNSSEC: Allow import of duplicate private key into the KASP + - DNSSEC: Avoid duplicate NSEC for Wildcard No Data answer + - Fix server crash when an incomming transfer is in progress + and reload is issued + - Fix socket polling when configured with many interfaces and + threads + - Fix compilation against Nettle 3.2 + - Improvements: + - Select correct source address for UDP messages recieved on + ANY address + - Extend documentation of knotc commands +- drop knot-2.1.0_pkcs11_check.patch + +------------------------------------------------------------------- +Wed Jan 27 13:06:58 UTC 2016 - mrueckert@suse.de + +- enable libcap-ng + +------------------------------------------------------------------- +Wed Jan 27 13:02:40 UTC 2016 - mrueckert@suse.de + +- fix configure check for pkcs11 support: + adds knot-2.1.0_pkcs11_check.patch + +------------------------------------------------------------------- +Wed Jan 27 11:22:25 UTC 2016 - mrueckert@suse.de + +- fix soversions + +------------------------------------------------------------------- +Wed Jan 27 11:02:57 UTC 2016 - mrueckert@suse.de + +- update to 2.1.0 + - Features: + - Per-thread UDP socket binding using SO_REUSEPORT on Linux + - Support for dynamic configuration database + - DNSSEC: Support for cryptographic tokens via PKCS #11 + interface + - DNSSEC: Experimental support for online signing + - Improvements: + - Support for zone file name patterns + - Configurable location of zone timer database + - Non-blocking network operations and better timeout handling + - Caching of Critical configuration values for better + performance + - Logging of ACL failures + - RRL: Add rate-limit-slip zero support to drop all responses + - RRL: Document behavior for different rate-limit-slip options + - kdig: Warning instead of error on TSIG validation failure + - Cleanup of support libraries interfaces (libknot, + libzscanner, libdnssec) + - Remove possibly insecure server control over a network socket + - Remove implementation limit for the number of network + interfaces + - Bugfixes: + - synth-record module: Fix application of default configuration + options + - TSIG: Allow compressed TSIG name when forwarding DDNS updates + - Schedule zone bootstrap after slave zone fails to load from + disk +- avoid activating the intree copy of lmdb + +------------------------------------------------------------------- +Tue Nov 24 22:37:13 UTC 2015 - mrueckert@suse.de + +- update to 2.0.2 + - Out-of-bound read in packet parser for malformed NAPTR records + (LibFuzzer) + +------------------------------------------------------------------- +Wed Oct 14 18:20:11 UTC 2015 - mrueckert@suse.de + +- split out shared libraries, knot-resolver uses some of them and + atm we are forced to install the whole knot2 package. + +------------------------------------------------------------------- +Thu Sep 3 20:21:48 UTC 2015 - mrueckert@suse.de + +- lmdb seems no longer optional + +------------------------------------------------------------------- +Thu Sep 3 14:41:02 UTC 2015 - mrueckert@suse.de + +- create a new branch for knot 2.x starting with 2.0.1 + - Bugfixes: + - Do not reload expired zones on 'knotc reload' and server + startup + - Fix rare race-condition in event scheduling causing delayed + event execution + - Fix skipping of non-authoritative nodes in NSEC proofs + - Fix TC flag setting in RRL slipped answers + - Disable domain name compression for root label + - Log via journald only when running under systemd + - Fix CNAME following when quering for NSEC RR type + - Fix refreshing of DNSSEC signatures for zone keys + - Fix binding an unavailable IPv6 address on Linux + (IP_FREEBIND) + - Fix infinite loop in knotc zonestatus and memstats + - Fix memory leak in configuration on server shutdown + - Fix broken dnsproxy module + - Fix DNSSEC KASP timestamps parsing in strict POSIX + environment + - fix multi value parsing on big-endian + - Adapt to Nettle 3 API break causing base64 decoding failures + on big-endian + - Features: + - Add 'keymgr zone key ds' to show key's DS record + - Add 'keymgr tsig generate' to generate TSIG keys + - Add query module scoping to process either all queries or + zone queries only + - Add support for file name globbing in config file includes + - Add 'request-edns-option' config option to add custom EDNS0 + option into server initiated queries + - Improvements: + - Send minimal responses (remove NS from Authority section for + NOERROR) + - Update persistent timers only on shutdown for better + performance + - Allow change of RR TTL over DDNS + - Documentation fixes, updates, and improvements in formatting + - Install yparser and zscanner header files + - Improve lookup of libsystemd build dependencies + - Fix compilation warnings in endian conversion functions on + OpenBSD +- changes in knot 2.0.0 + - Bugfixes: + - Fix lost NOTIFY message if received during zone transfer + - Disable fast zone parser when compiled in Clang (workaround + for Clang bug) + - kdig: Record correct dnstap SocketProtocol when retrying + over TCP + - kdig: Hide TSIG section with +noall + - Do not set AA flag for AXFR/IXFR queries + - Features: + - DNSSEC: separate library, switch to GnuTLS, new utilities + - DNSSEC: basic KASP support (generate initial keys, ZSK + rollover) + - Configuration: New text format in YAML, binary store in LMDB + - Zone parser: Split long TXT/SPF strings into multiple + strings + - kdig: Add generic dump style option (+generic) + - Try all master servers in multi-master environment + - Improved remotes and ACLs (multiple addresses, multiple + keys) + - Basic support for zone file patterns (%s to substitute zone + name) + - Disable zone file synchronization by setting 'zonefile_sync' + to '-1' + - knsupdate: Add input prompt in interactive mode and 'quit' + command + - knsupdate: Allow TSIG algorithm specification in interactive + prompt + - Improvements: + - Zone dump: Do not write class for SOA record (unified with + other RR types) + - Zone dump: Do not write master server address into the zone + file + - Documentation: Manual pages are included in HTML and PDF +- drop patches which are included upstream: + 0001-loosen-openssl-dependency.patch + 0002-make-configure.ac-compatible-with-old-tools.patch + - also drop all buildrequires just needed for autoreconf +- new buildrequires: + pkgconfig(gnutls) >= 3 + pkgconfig(nettle) + pkgconfig(jansson) +- create devel subpackage +- enable rosedb and bash completion + +------------------------------------------------------------------- +Wed Apr 29 07:03:38 UTC 2015 - mrueckert@suse.de + +- local state dir should be just /var + +------------------------------------------------------------------- +Thu Apr 9 02:51:53 UTC 2015 - mrueckert@suse.de + +- enable dnstap support for factory and newer: + - new BR: protobuf-c and libfstrm-devel +- prepared lto support but not enabled yet, still need to find out + which distros support it + +------------------------------------------------------------------- +Thu Apr 9 02:17:01 UTC 2015 - mrueckert@suse.de + +- update to 1.6.3 + - Performance drop for NSEC-signed zones + - Proper handling of TCP short-writes + - Out-of-bound read in zone parser for long domain names in + origin (AFL fuzzer) + - Out-of-bound read in packet parser for TSIG RR without RDATA + (AFL fuzzer) + - Out-of-bound read in packet parser for malformed NAPTR RR (AFL + fuzzer) + - CDS and CDNSKEY support in zone parser + - Add defaults for TCP config options into documentation + - Detailed error message if zone reload fails +- refreshed patches to apply cleanly again: + 0002-make-configure.ac-compatible-with-old-tools.patch + +------------------------------------------------------------------- +Tue Mar 10 17:20:55 UTC 2015 - mrueckert@suse.de + +- update to 1.6.2 + - Limiting number of parallel TCP clients (max-tcp-clients config + option) + - Ignore refresh and transfer events on non-slave zones + - Compilation with Dnstap support on FreeBSD + - Possible file descriptor leak when terminating inactive TCP + clients +- refreshed patches to apply cleanly again: + 0002-make-configure.ac-compatible-with-old-tools.patch +- moved autoreconf -fi to %build so it wont be tried in quilt setup + or similar tools +- move up the %if case for systemd in for the preun scriptlet to + avoid warning about empty scripts on non systemd distributions. +- used xz tarball: new buildrequires xz + +------------------------------------------------------------------- +Thu Jan 8 10:07:50 UTC 2015 - tchvatal@suse.com + +- Add deps on the docu packages to regen documentation +- Enable systemd integration fully +- Add dep on libidn +- Cleanup with spec-cleaner + +------------------------------------------------------------------- +Wed Dec 31 10:49:27 UTC 2014 - ondrej@sury.org + +- Only require lmdb-devel on (Open)SUSE 13.2 and higher + +------------------------------------------------------------------- +Wed Dec 31 10:29:48 UTC 2014 - ondrej@sury.org + +- Updated to 1.6.1 + Bugfixes: + - Journal file would sometimes outgrow its set limit + - Fixed incompatibility with OpenSSL 0.9.8 + - Proper handling when machine hostname cannot be retreived + + Features: + - Support for DNSSEC Single Type Signing Scheme + +- Compile with lmdb-devel to add support for persistent timers + +------------------------------------------------------------------- +Tue Nov 18 15:49:27 UTC 2014 - pgajdos@suse.com + +- Updated to 1.6.0 + Bugfixes: + - Fix zone expiration when AXFR/IXFR is being refused by master + - Fix forced zone refresh on slave (knotc refresh -f) + - Persistent timers database opening after privileges has been dropped + - DNSSEC: RFC compliant processing of letter case in RDATA domain names + - EDNS: Return minimal error response for queries with unsupported version + - EDNS: Fix interpretation of Extended RCODE + + Improvements: + - Maximal size of persistent timers database increased from 10 MB to 100 MB + - Added logging of persistent timers database errors + + Features: + - Persistent timers for slave zones (expire, refresh, and flush) + +------------------------------------------------------------------- +Mon Sep 15 19:44:38 UTC 2014 - ondrej@sury.org + +- Updated to 1.5.3 + Bugfixes: + - Some specific incoming IXFRs were causing server to crash + - Rare sychronization error during reload caused read-after-free + - Response synthetization module did not work properly with DNSSEC-enabled zones + - When Knot sent AXFR when IXFR was requested, message ID and opcode were wrong + - Knot failed to send large messages to remote control (present since 1.5.1) + - Some RR parsing corner cases were not handled properly + - AXFR-style IXFR was refused and had to be retransfered + - Hash character (#) was not properly escaped when storing text zone file + - DNSSEC: DNAMEs in RDATA were not lowercased before signing + - EDNS: OPT RR were not put into responsing for some errors + - TSIG: DDNS responses were not signed with TSIG + - DDNS: Prerequisite checks failed for some inputs + - knsupdate: Zone origin was not used for deletions + + Features: + - Basic support for logging using systemd journal + - DDNS: Ability to process updates in bulk + + Improvements: + - Unified logging messages structure + - DNSSEC: More strict controls for signing keys + +- Refreshed patches on top of 1.5.3 release: + * 0001-loosen-openssl-dependency.patch + * 0002-make-configure.ac-compatible-with-old-tools.patch + +------------------------------------------------------------------- +Fri Jul 11 09:06:45 UTC 2014 - ondrej@sury.org + +- Squash 0002-remove-AM_SILENT_RULES.patch and 0003-no-dist-xz.patch + into 0002-make-configure.ac-compatible-with-old-tools.patch that + removes configure.ac options incompatible with SLES_11_SP[23]. + +- added patches: + * 0002-make-configure.ac-compatible-with-old-tools.patch + +- removed patches: + * 0002-remove-AM_SILENT_RULES.patch + * 0003-no-dist-xz.patch + +------------------------------------------------------------------- +Thu Jul 10 08:18:29 UTC 2014 - ondrej@sury.org + +- Updated to 1.5.0 + Features: + * DDNS forwarding reimplemented + * edns-client-subnet support in kdig + * Optional asynchronous startup (config "asynchronous-start") + * Pluggable query processing modules + * Synthetic IPv4/IPv6 reverse/forward records (optional module) + * dnstap support in both utilities & server (optional module) + * NOTIFY message support and new TSIG section in kdig + * Multi-master support + Improvements: + * Transfer sizes logged in bytes if needed + * Logging outgoing NOTIFY messages + * Logging unauthorized incoming NOTIFYs + * Preempt task queue for faster reload + * Lazy zone file write after zone transfer (governed by "zonefile-sync") + * Query processing and core functionality overhaul + * Performance and reduced memory footprint + * Faster zone events scheduling + * RFC compliant queries/responses in some corner cases + * Log messages + * New documentation (Sphinx) + Bugfixes: + * Zone flush planning after bootstrap + * Incorrect incoming AXFR message sizes + * DDNS signing changes were freed too soon, posibility of stale data + * knotc remote control key handling + * Close zone transfer after SERVFAIL response + * Incremental to full zone transfer fallback, wrong log message + * Zone events corner cases, reload replanning + +------------------------------------------------------------------- +Tue Jun 24 12:56:27 UTC 2014 - pgajdos@suse.com + +- updated to 1.4.7: + * Fixed DDNS corner cases + * Fixed zone EXPIRE timer + * Fixed semantic checks false positives + * Fixed sending malformed IXFR with automatic DNSSEC + * Fixed NAPTR record serialization + +------------------------------------------------------------------- +Mon May 12 12:38:02 UTC 2014 - ondrej@sury.org + +- Fixed the missing 1.4.5 tarball + +------------------------------------------------------------------- +Tue Apr 15 07:08:27 UTC 2014 - ondrej@sury.org + +- updated to 1.4.5 + Bugfixes: + * Fix possible weakness in TSIG signature checking + +------------------------------------------------------------------- +Fri Mar 28 10:56:24 UTC 2014 - pgajdos@suse.com + +- updated to 1.4.4 + Features: + * Server is logging remote control commands + * 'knotc reload' doesn't refresh unchanged zones + * 'knotc -f refresh' forces zone retransfer + Bugfixes: + * Missing notifications after DDNS/automatic resign + * Zone is rebootstrapped if the zone file is unreadable + * Progressive bootstrap retry backoff + * Zone file parser allows asterisk as part of the label + * Journal maximum entry size fixes + * Sign DNSKEYs in non-apex nodes as regular RR sets + +------------------------------------------------------------------- +Tue Feb 18 14:56:36 UTC 2014 - ondrej@sury.org + +- Enable recvmmsg support in the build to increase performance +- Update upstream config directory to /etc/knot (instead of /etc/knot/knot) +- Replace tar.xz with tar.gz to allow backporting to older releases +- Disable silent rules to have more verbose builds +- Add support to compile with OpenSSL << 1.0.0 + +- added patches: + * 0001-loosen-openssl-dependency.patch + +------------------------------------------------------------------- +Tue Feb 18 12:07:36 UTC 2014 - ondrej@sury.org + +- update to 1.4.3: + * Failure when expanding wildcard leading to apex and having DNSKEY records + * Failure for query to wildcard without wildcard expansion + * Bad cleanup when loading a faulty entry from a journal + * Zone file $ORIGIN and configuration comparison is case-insensitive + * Config "include" statement supports directory and includes all files within + +------------------------------------------------------------------- +Mon Jan 27 15:17:49 UTC 2014 - ondrej@sury.org + +- update to 1.4.2: + * AXFR/IXFR compatibility issues with tinydns/axfrdns + * Journal file is created only when needed + * Zone-related log messages are logged into correct category + * DNSSEC: Refresh signatures earlier (3 days before their expiration + with the default signature lifetime) + * Fixed RCU synchronization causing deadlock on 'knotc signzone' + * RRSIG not fitting in the additional records doesn't cause truncation + +------------------------------------------------------------------- +Tue Jan 14 15:14:06 UTC 2014 - ondrej@sury.org + +- update to 1.4.1: + * Empty APL record support + * 'zonestatus' when using immediate zone syncing + * Immediate zone syncing after reload + * Race condition writing time values to zone file + * Hard require OpenSSL >= 1.0.0 + +- removed patches: + * 0001-Add-support-for-OpenSSL-threads-in-OpenSSL-1.0.0.patch + * 0001-Check-the-OpenSSL-version-when-checking-for-GOST-alg.patch +------------------------------------------------------------------- +Wed Jan 8 08:58:19 UTC 2014 - ondrej@sury.org + +- Add support to compile with OpenSSL << 1.0.0 + +- added patches: + * 0001-Add-support-for-OpenSSL-threads-in-OpenSSL-1.0.0.patch + * 0001-Check-the-OpenSSL-version-when-checking-for-GOST-alg.patch +------------------------------------------------------------------- +Wed Jan 8 08:40:45 UTC 2014 - ondrej@sury.org + +- update to 1.4.0: + * Experimental automatic DNSSEC signing + * Fastest ragel parser enabled by default + * Reduced memory usage + * Zone SOA SERIAL policies (INCREMENT, UNIXTIME) for DDNS and + automatic DNSSEC signing + * IDN support in Knot utilities (kdig, knsupdate, ...) + * DNSSEC: support for GOST algorithm + * Support for DNSSEC key pre-publication + +------------------------------------------------------------------- +Mon Dec 16 09:46:03 UTC 2013 - ondrej@sury.org + +- update to 1.3.4: + * Bugfixes: + Crash in particular additionals processing + Race condition in event cancelation + Journal corruption after failed transactions + +------------------------------------------------------------------- +Tue Nov 26 13:36:54 UTC 2013 - pgajdos@suse.com + +- update to 1.3.3: + * New features: + Reduced memory usage + Improved performance + Experimental automatic DNSSEC signing + Refactored zone loading + Improved journal locking + * Bugfixes: + Fixed some race conditions + Various fixes in client utilities + +------------------------------------------------------------------- +Mon Sep 9 15:16:04 UTC 2013 - pgajdos@suse.com + +- update to 1.3.1 + * Faster zone parser + * Full support for EUI and ILNP resource records + * Lower memory footprint for large zones + * No compilation of zones + * Improved scheduling of zone transfers + * Logging of serials and timing information for zone transfers + * see NEWS or https://www.knot-dns.cz/ for details + +------------------------------------------------------------------- +Wed Apr 3 15:37:52 UTC 2013 - ondrej@sury.org + +- Update to 1.2.0 final + Bugfixes: + * Memory leaks + +------------------------------------------------------------------- +Fri Mar 22 15:32:38 UTC 2013 - ondrej@sury.org + +- Update to 1.2.0-rc4 + New features: + * knotc 'zonestatus' command + + Bugfixes: + * Changing logfile ownership before dropping privileges + * knotc respects 'control' section from configuration + * RRL: resolved bucket collisions + * RRL: updated bucket mapping to conform RRL technical memo + +------------------------------------------------------------------- +Tue Mar 12 08:37:55 UTC 2013 - ondrej@sury.org + +- Update to 1.2.0-rc3 + New features: + * Dynamic updates, including forwarding (limited on signed zones) + * Updated remote control utility + * Configurable TCP timeouts + * LOC RR support + * Response rate limiting (see documentation) + + Bugfixes: + * Fixed processing of some non-standard dnames. + * Correct checking of label length bounds in some cases. + * More compliant rcodes in case of DDNS/TSIG failures. + * Correct processing of malformed DDNS prereq section. + * Fixed OpenBSD build + * Responses to ANY should contain RRSIGs + +------------------------------------------------------------------- +Sat Nov 24 09:12:42 UTC 2012 - aj@suse.de + +- Documentation only needs makeinfo, thus require it instead of texinfo + where it's available as separate package. + +------------------------------------------------------------------- +Thu Nov 22 17:22:37 UTC 2012 - ondrej@sury.org + +- update to 1.1.2: + Bugfixes: + * Fixed crash on reload when config contained duplicate zones. + * Fixed scheduling of transfers. + * Fixed debug message. + +- merge some changes from fedora spec file +- remove unittest files, they don't belong in binary packages +- depend on texinfo package to build the documentation + +------------------------------------------------------------------- +Tue Nov 20 12:37:14 UTC 2012 - pgajdos@suse.com + +- update to 1.1.1: + New features: + * Optionally disable ANY queries for authoritative answers. + * Dropping identical records in zone and incoming transfers. + * Support for '/' in zone names. + * Generating journal from reloaded zone (EXPERIMENTAL). + * Outgoing-only interfaces in configuration file. + * Following DNAME if the synthetized name is in the same zone. + * Signing SOA with TSIG queries when checking zone version with master. + * Improved compression of packets. Out-of-zone dnames present in RDATA + were not compressed. + * Slave zones are now automatically refreshed after startup. + * Proper response to IXFR/UDP query (returns SOA in Authority section). + + Bugfixes: + * Crash when zone contained RRSIG signing a CNAME, but did not + contain the CNAME. + * Malformed packets parsing. + * Failed IXFR caused memory leaks. + * Failed IXFR might have resulted in inconsistent zone structures. + * Fixed answering to +dnssec queries when NSEC3 chain is corrupted. + * Fixed answering when transitioning from NSEC3 to NSEC. + * Fixed answering when zone contains multiple NSEC3 chains. + * Handling RRSets with different TTLs - TTL from the first RR is used. + * Synchronization of zone reload and zone transfers. + * Fixed build on NetBSD 5 and FreeBSD. + * Fixed binding to both IPv4 and IPv6 at the same time on special + interfaces. + * Fixed access rights of created files. + * Semantic checks corrupted RDATA domain names which are covered by + wildcard in the same zone. + * Fixed ixfr-from-differences journal generation in case of IPSECKEY + and APL records. + * Fixed possible leak on server shutdown with a pending transfer. + * Syncing journal to zone was not updating the compiled zone database. + * Crash after IXFR in certain cases when adding RRSIG in an IXFR. + * Fixed behaviour when incoming IXFR removes a zone cut. Previously + occluded names now become properly visible. Previously lead to a + crash when the server was asked for the previously occluded name. + * Fixed handling of zero-length strings in text zone dump. Caused the + compilation to fail. + * Fixed TSIG algorithm name comparison - the names should be in + canonical form. + * Fixed handling unknown RR types with type less than 251. + + Other improvements: + * IXFR-in optimized. + * Many zones loading optimized. + * More detailed log messages (mostly transfer-related). + * Copying Question section to error responses. + * Using zone name from config file as default origin in zone file. + * Additional records are now added to response also from + wildcard-covered names. + * Improved user manual. + * Better checks of corrupted zone database. + +------------------------------------------------------------------- +Tue Aug 28 10:02:40 UTC 2012 - pgajdos@suse.com + +- fix build for older distributions (dont user %{make_install} + macro) + +------------------------------------------------------------------- +Mon Jul 2 08:58:06 UTC 2012 - pgajdos@suse.com + +- initial version 1.0.6 + diff --git a/knot.keyring b/knot.keyring new file mode 100644 index 0000000..4c3726d --- /dev/null +++ b/knot.keyring @@ -0,0 +1,171 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: SKS 1.1.6 + +mQINBFljlBcBEACuCSBlN1vTS9eEDqowZcLAAF8NytcTlRjXTLWMQtjU+fXkz9Vz10n9TIFj +9Kcec0p0+8F+SowybecwhmYoUzhKI7S9M1ziUmaIhFs2KvZ1GzigE/W5L448P/7pugh875e1 +tIrkrbbcIp6+SxaLbgvXlFl630ILZl/gbYOa/Wk21sLu4RjQY39oHb0WTiwPnKhdMdwlnxm6 +HeWkHzlvI9N8tlDc6oVnUfqVI8gUyExLnEYjDpZforTVgHRq6RNyfTRZkh8zRsXSTnJlk/bV +EDW5i/VgIQugzkgpuTGWlCstryi/MRheNxU1YEUenT69okb96QStfr1J00n8L4VAs8V5IuFU +cSc8UqSpB+LgERRTMRFo9IrEXAW/gEKlEVR+501BvJ0/Qggxbgz4PEnKNaxXmAnykJzot2VD +KTzrr26a9LnrT0GWom9rg89Ih876PA53vUXBB+FWP9QOFDcOfz3nMjCrLbMzhTsAzrNFXxch +zLq+66CLqsQQytDVFpLI+X++sKRTOHkq6vV1bAPjlljrannLnn1y/DvkOOkiHOdYyjmR7Dfk +vxgcWh/3Gx4J9gipxZITOr7LamEYgHfElY/UWCtc1Vjt8Xvgt4dofDpvSwY9YzgRWxJKC5ew +YdqTCI+zxL1f0fjkeiRYNi959UMMjgdcY7Zpi8oPPQmlyBw15QARAQABiHUEExYKAB0WIQSc +DCLV4+zCjGNYJITz3gQA4UFO6QUCWWSzMQAKCRDz3gQA4UFO6QQaAQCmJnWiN4s7yGD6RZVL +Dg5AGCoy1xeqiSaRMjk9ecIA1QD/aMXd9ShcuSlv0M52oEkfpG4s99RHl/HXbJJKc6/4kgi0 +JkRhbmllbCBTYWx6bWFuIDxkYW5pZWwuc2Fsem1hbkBuaWMuY3o+iHUEExYKAB0WIQScDCLV +4+zCjGNYJITz3gQA4UFO6QUCWWSzMQAKCRDz3gQA4UFO6QQaAQCmJnWiN4s7yGD6RZVLDg5A +GCoy1xeqiSaRMjk9ecIA1QD/aMXd9ShcuSlv0M52oEkfpG4s99RHl/HXbJJKc6/4kgiJAjME +EAEIAB0WIQRKi6SMKu2TO9SVxQmh+6X374xIaQUCXEhgwAAKCRCh+6X374xIafHdEACNLSFq +qfD4L2lUCsAxeXUJknwOyBXeOQP4KRS6cQITnArKiL0KcekQDfJf/Rgib1ABDPNghrREt11o +LVe/2NFTmTiPwpqy3VhrTwAZP5udTg8KlSpTsgh5s6Kt6tFa9hF9ELN+AIu/p7q2ZBZnFk+h +SAqNY5WNgd9ww3Sb9ypyu6GdoEIAx/JQkWgmbAlIbkn2mz4y6S9lkx2ggroastdRRQGInM3z +mBGTj1LwX1kZnSoeA0j+dtBfUuP4eUzRAkECcdmi/dHL8CKG7LZled8ZYD2d4eC0D0VxaL7/ +kpVQe1VD74+XNNnCIjGMy/5CfIxB+t7mupn1EJzyEqrqSuzCyiSW0uRRLKEhKyVKbXGx1zV+ +pwoUzIQxdClU2vOdqovYkH5DNfDatrkXdpUMaDC/ABAFUsZ/4pT78alev6EdRn+Rg1tTULuI +adK1yXnffaF6GGS5KEQpl1D7Xf7IptkkGkRVinhUVMney2vE8B957wXEIvXrRqDELzWcoQht +atBBDlNJLVi1gPUc/k0KUjcr3vLN1H8w0pQagwoq8WfzcvrdJ3p8wiU1VOQ3TWBLsjqO5WsK +TPUBYfvxz1OVOqcy+KzJFsdZ+Pz1F4lPjaLnRwn7+yK0FmyAJ8HDaV61B7e02JmB31fNW9j2 +iy/TP8sezQegZx9ODhzX7h610gWEgYkCMwQTAQgAHRYhBNZp5QwG/PfN54VbSb7d3IgavTGm +BQJZa72EAAoJEL7d3IgavTGmOLcP/AqQ0v4vD/2RN39V+xIDpI/EH/u0amlXS8e37Lskz+pa +eFtjowfkmiHyeUiBzssjBk7w5TeA5YrdtOwlfJjdcdzjxvGf6/BQIJGk/aMdOML/lUxQCH2m +MhSLC6hlU/X5AadhDo79d6n3Xf1GZo9g1BFIAI7NZ27jxCJ9cKk8pUkV2UYbjmrLFSj5pfKk +NfMuuWblj3tDtRMzkxocdfGf6oBK3FbK8Abl2hi7g1ishjqhLR+RTFkDya5Sx24+AGkeLz99 +45ckoRIJxIAiNr3NqPivJNvez8bA37ftcSCzXOUEk2A1mnCEgyaQ7xp1Vdib/3y0ne06Ci3l +WujwN1+AgRiEX9J01zY4sBpDbo4M1smwQmzlHIbd1yGVP/tIAGj4d26Ht6wOisW9AhkFXdb0 +4BKVn9w1GAzU0c6EPIas2JCI/37kGdmkfXFWRbnYKsU1HC7VZes0O4wkAnsUlAjjR/HGUmRZ +7u4BrVdqxFefdvvmzpPF/YRewomXrYYjVWE++4D1dJw2Rw5ezcTCtSYg0Uh/zIKXxrORndwk +4rQ75lYPgHyo29aayxaOKu//i6HrI1ZLlqURBbAZkbJ0CIHSBeKQvPeC+0r52n87y5AlRWBX +YFhOo/H0TRLVYJDr8B+4BMk4TXLwSfcK9llpssdIfJrYk/EPxAjcMDRuP8HhyfAGiQIzBBMB +CgAdFiEEMLkz2A/OPZgaLTj7DJm3DvT8uwcFAllksywACgkQDJm3DvT8uwd7uRAAl3shy1KJ +S8/7lB22EuhDQE4hlHB2aJCmQQMnugp/NlJeFEc2KVuQJaDU/uh2I6+8v+bvkhnfLsOqWOqh +/y5JaoM63RZNSfOwnoRsaF8SsFrMRDLFYrvqBbKHgZn+Ec5KNd0WA/+buBk4rBz4VdqG+pEK +yojRO7hyAEt2YiF/UXtCLrxT+9rOHaX5s8nscOPxwxmLl+TTKP1sFnCNQmCYrDa0njmNfl0Y +RfW6gkhXbDMJ3CotHrh1u+3ts1p2IdWCLjMr2hYG/sc/hhtLTv9Hp0LdJQYLf3LAyDGWo1OS +Ni4Af28s1zQvkRnEXWSGdN8ZeWO7TkfjJSAxi44Bobo1y9j5pKIQPcwmTlPyLe4Tm2YUnKiv +uJDWBXIZ+4fbd0tiNKu+wU5UCW5VvQhVsGkkdgAC0RPiQwAMltknxXbIh8IlKffnZKmhxUTS +orRGbesojw0Ahp07szply4DUN8WWkibH8HOHoKOHfI/L7e+fXmtne9i8PEDOkm2UzHd11dTj +Mt21+4uAg+vXz64qBY+gadVeYDRn/NxNFBznz8uejyIzQZtrDS8AIHCLa2m9enfFyB6mriqo +MUAOPNOA8NlvfsH63zWWikBHJJY19Xq3teunXJXd9uvPsTA5KtkVh2ofcjuqdEFx+zDXU6sK +Vl0e48xHNeuixshoDKXTTvtIllyJAjMEEwEKAB0WIQS2vVPGkK0kXwCJ3le4+SsIqfdsZwUC +WWoVZgAKCRC4+SsIqfdsZxMJD/9F0Q01ww9BFeQS3yHJoF2Uq9M/HBvEzwoDkJzt5Iq6fZEx +S+6rPszlszcw4YHPnUAN6NkBTzxn8Bme/5OdVqouyc0GWIdl39fWhwdVKB66s+SGr6aVJEEP +8OlIZWBTS6Ko13tvpyAgHt99dHvg4hM15psN7NwlTSikPdBgfvGeTMxykkGoBDkZbbPbqhtG +LVnK7UKaHXHpcVDdf8pXxzlUhOKuZGRaR27turJeKiON638porkYDCXHcKN1YYx2Iu+R08LN +fsGziyAgFtoRp52o2pUaiwcQzSoHjDNofkorVf9ZmzbIup9rqKQIRvdMJb/VKWyYhHMx3J2g +9PkmS/5jJDws18K5ooPGpIUIotlWayKHrvF490w3Mo1Qhlm3/vG/Y1ZlxUqYIme6hDAw/Wfj +pNkEIPEe273DrPWBc7MgnWROiRdJaBqG5nrE0BksuGiz5ehczbWCvJl1R3DUNwRDMs4cDMsC +wmHELr6T3u7Y5yptIdck4nBOaTfI8i8zd0RKgXLazf+BhIxzx+QDRW+3m2fCAL+TyurpWDWi +8yOWs6BCpzzr9brXQQQCETq+lBJDIHfLPp2PAgC0duONbvUFDAP5qDQchsJZ11qmY/dYV+2p +zOfaVw708XGfcLPuTP5MUFMpSuNOkIalZscBy3bnppp66qTn5MRVsxIivo0aAokCMwQTAQoA +HRYhBN7zXRblrlnYIL33gKziTanuN6gyBQJZp8FvAAoJEKziTanuN6gyNqUQAMCK7gv9y3dR +NGNxB5hEW4e2iFYAtmL4/7leWgdW8XP/lXLCEAyvFiFpHmMJ46eQV23RwIhsjyH1bDBmPP2b +3FuQ3ztlfZ4B9jBaNWhWyuxAINgumxjkx3kFMD3+4FzNVHwNBABwA+iSCMuoaGCs5NnGyXrq +3LzfxAoZLfrjxjPY2TikvzLOaQg7gy+HUzbuNY6EpCcrUHfEBIYnvK0iF8E8FEgjLKws3gsD +l56fzW5D9wq1+VdEbf1IGUyaZroVfjgkQ2C+GVWmjNj56A8cNDM+FrIDqs8a4bBGvOucS8EU +PiPS+vFmPizA1rUdvQ+okoZCgikQ4bhUyQ858bofpgruPVNMnjoYrCnAKqE5YI3y97r5xLqd +owvljatjLdNpGae2v1MMPQGUHqTIstbHXuLNtNxB3aaXrYcXZ/YD0Hs9s33snwDh9YEyszIr +VdmIEAIXruFZ/1zhW31i1wUuLaM2KP6E/H+54+2+uywtZ5gjoZyOOxosP4CqZE+IBQYohZXO +7VOPFXXqQccouTvu5waW7znBaFe0ZVuR9c3J0ZQ2nbMARNEr/n91cizGUu+OkeFv1WMQ1igN +K2dWYEBLDRSXhrOlFbeVOG6t25QN50dyirD8Qh8xbA/FBWuG1HQI94TZ3RGBQ5q+5Z47/yxm +e88bozR320cYqwhuDfGsjGxbiQI9BBMBCgAnBQJZY5QXAhsDBQkDwmcABQsJCAcDBRUKCQgL +BRYCAwEAAh4BAheAAAoJEBC7evb+u9arX54QAKWE4QrYxk7P6fAlJ5fuIg0pvDjvtj4tK9iQ +obzWm977G1uVASfusjdxicOuqVRvdtd1swe6NiuDV8+hxykK9/p38m+U3pZcITblH4ZHq/Gv +q/uPJwd1I5sV7ixNzBx7ohWLCJaJKLOHhQKTPzbzkuMtx/cCdPa/oYnAeJls854xBQ0hGPo8 +RgtJCyrRmWoTHwsYotNzlSSuSiLiU3jhIjWvNLAM8iq+W+tWcNdwMHwzsTYiLnXNTz9NWT3b +Qp5rJR4I/GmaBBbdRIjjk2sT+MSDKh3LEwanmWDc6rMdPbC70FUtaRC9OMV8t8SxNrLgriRR +JtjNulL3dvfcn4jbStgsYEFiVOs3njXsiAXoFvw3PKt9XLVZ2qFyCAAQpfkSQ6Zkzyh25HGw +eqJEsL/EoXwapOjq3cYxLmLxEKU2+Z2rRZSRBS+V3hs6dcEJnZAtuNXuxeNyvnp576p2mK5F +CMSJ2MfOmJtwgE3wtW6lWBcBmX2WyIG2glc4ey9J1TdWAZadEa3MWNIfOXdNE8ixpVWoPtoL +NAN9cOOsaWaHOAN8zCSqYEaCyS7y1JHcCDQxECi4kVeJmtwzdcZ5hVsdPp23tQwAHbtdzl+h +zSQZGjm3OUrqtYbawkiVxAHu0q/Aj+0T2XAkOPD5c16QR0ilx1xDuZZrUI5iRxhOt7eg+Y37 +iQJUBBMBCgA+AhsDBQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAFiEEdC+k6VgptsXqxrhXELt6 +9v671qsFAlxmutMFCQbFjbwACgkQELt69v671qtTvxAAk5VK6XZhNd52LBxjVi2kCWIq0dyM +5Lk/Np7MHhz4Tz3HDrH9c7voosjr7sYWtwZqWU88IddB+x5CHkWaVnZUwxPn5/95Nj+z2TCF +7EBqtbwATwZ4pn96O3oCoKiSNsP/vlJ+TH4Xr/VWDbSQ6iZrxTJDIijOZQ657TPRVhHe4cnD +oEidwa2S7G3kgfNfDkCwC102qd65GDkhvHWCYmpb9dozdw+jZbAXkCuHomMZlORRqIFxziaJ +RLTyepPqG+bEVj1f0q9YyX814yKibT0dxX4kmeuN/WGhbi7LgPESjoy3fiJl12yMLDfHVCaC +zvQGicqkGMJjp8TopTrpzrKQ522/HRCupSc4Ogc4TI3nhNETD49kN+2R+ByHCDWc3VJB5a9D +0kZE0o65CEQatGrVbFodQfY3qtA/bzd+cVKsAEdOTWVqorBcMwjsh0YKFz9C2IeyjmCMKLY5 +1Wm5B+nX17rxTv5lZKrvUeEVaxH1jVCVd9XoAMRe16ZX+JcDk2jVNRO9Sa+jtPaTssGWtJZ3 +6AkzLEyf9pSuhWbYidTeM/BFQ/JJQlxfURmttaCL+xxspyvIlCgfkEQR06vvZX2823ujp2Uy +CdihKS/clWklbhPr49jwdqdUW4U1ao6Dl+DvEzkIIvuCpVK5YTErVfSt+q5p6rk++b3aQyvH +5eTOqoWJAlQEEwEKAD4CGwMFCwkIBwMFFQoJCAsFFgIDAQACHgECF4AWIQR0L6TpWCm2xerG +uFcQu3r2/rvWqwUCX6veUwUJCgqxPAAKCRAQu3r2/rvWq/+DD/4gtbsIC2DG44jWHrWxSrRi +uNBGediXJrfCTi1OVKqEFr7l9KNqwe/nBnxN25a333JYKYakOzRXF99v+NMorAjjQWBO2fMU +o9MW0TKYuALWxNNuiXd1yvOlfgm9cyVUN1KN2QKF2x3HqYVBYDVm929S0i8F5Ws/vqZ8NCLZ ++xUxZGgCT3wFJBPlKia9yW5z2Yw25VyOJFR2ZKozVNVlqtqZuSE1Z6VZZgk3WlqWO6Av/9MR +kpywVBYmlt8QJ0SfKpc+L38WLnf9aFL3GLsB1g7yvHyUK6tvQmlDCW0dddlybmZKv33D7teh +S+55+RKRbZjlcVenfl0/vHxB5nzOFJ4cvl3XzsbSrlgq0rYPYz6wTIQMX1YIfJrzHy1v6Yy/ +ctWQd/iaPYtA0ZZS04h3Txr4CB053jnAqob5n3YtezuX00ygMt0kbB+7jxEvYusd/IMfOjBQ +KGvTvraZ1wKImsEfsvCa3mPjBGGs8po+PVdxdAiLqysZwlFuEVrvoTniQ8A0NrjZXMnBL3/g +r5sDu4NhYKYyVcXpSH8SJKgTcItLogyCz0Fo4cLHhGrX7v9TQtAPCx4xPxRX4ArRiJh5el+c +Zf3qdL3I9m2XITn73qHlzpW2zpARmjyFxHUReVWx/Y0mV5nFgQt+9wtg+8h5Lep7lY2UI5JS +8MAyHt9HAyRYvYkCVAQTAQoAPgIbAwULCQgHAwUVCgkICwUWAgMBAAIeAQIXgBYhBHQvpOlY +KbbF6sa4VxC7evb+u9arBQJhp0QqBQkRkKUTAAoJEBC7evb+u9ardC8P/3MOFkzXxU2B40C9 +YHLH+VU5omunG9yIBGBYRuBhhtgfHAfYkYxmOvRcXPknNeR/43tjH3YPlXsbBf3R4aD59MDI +w0zhMB+TWyHML1P+p6PhxNRXCK6eaKRXW9d+/uaeMke46h6qtjVq3nPiBaKtfLIwqE2mD95u +ClxDt/4PGwuA0kWKFT7DV4gUwqcZqWtIGHrY0gglayT6F1Vo+x71cyGOKCiBDezv9LLuEANX +62fA+/+zrGPWMFX4FA10lnBiww5cQQUG81NurnuvObYLJPdEp8b2GnlJ0MNAebLHP3qEetli +XW/aHqofyiuzwSADvkjLaqwR58lJIRudIGgDKkCh/ZD2UCBTDVLBm5C/+Yui5sJWqLT0e5U5 +vLIosXHODIVEy9jC8mkMqYuG8CeqLiJeGolBNEzlolzWh2ycJoZQ7hGm97mNP2MQazgITbN4 +C7m8Y7WdJ5V1yKw8n6jyOLeEVS1b+0g2R9PKDC8taVH4o7xgzx5M5d4jybR23ic9vo17WzWL ++Km7iF5LtcPKO88HX+bmSmZYiCcLrBDIPVrtt4OHriwjJte8nOmZfRenUmI92oLuAflgWrR7 +OdnklT6PrAEO2X7nkjoP4iBRjYFXisZeNdLGGfz2BEoPyfFVQaFZjWWwbDRS2oYqIfr4aQ/a +kvaTszPfhbgsAq/AS2+cuQINBFljlBcBEADpGfFgbzb9f4Dj2yuAdH3IjGUepKroiE2f6IlD +mWlWl94Ei04bg0O7gCrlfjWkAnc0rGwI9XraARqV38LuAmtMjmtqD/zsZgUWjpBGvAaxZUY5 +Eaz0bWkEXtlnCE8nAPcx5qAZk19ZnNHFd58vU/eauk7d61IQTAQ0e0KoQw/rH8keHdIqicoC +UvjF+PcXnhoqPi6khyPEYEAkfy7rps3UaZiOy0HPNsPhNY1PB8qCnXlfGOtOBtOEXLsIGg6B +xoCmJhM8TsPmcHX4DKEaOc7dmU2DLVkgdUMWTocRqRqooz1CWQmdmwHb5xOpeVXR62YVCx50 +KDaxSJ6vSGEisQ460ZBtjU/7S+/5VGho3KbeuK2X7vREbxaCsc0sxEdUZ4tGreA4We353/eH +uZ4Aps5Fb9ljfRSnC2G2VliByIXOgMkJbwF7WLVfi2iJRoyQWHv2N3thO9nzv4/gOWUL0w2y +irlxj9scE1li1d/vLpepWpijYhsVRHdVcq3NI3l5iblikU9zPOaDVs2CXeLpYFw4XgQ8QkRW +Nn67Wvn0299UtDxdWH9CYugbvHygVy+FZy0zLXtV2bipmOlID4HWxChx6F2tr7FP49ZXSRyt +imyrCRh4VFCckaoi6lYeei2oY4E0DJBYhyMrornLQJ6Kglmk03k57leWgxexiaBexH6BNQAR +AQABiHUEExYKAB0WIQScDCLV4+zCjGNYJITz3gQA4UFO6QUCWWSzMQAKCRDz3gQA4UFO6QQa +AQCmJnWiN4s7yGD6RZVLDg5AGCoy1xeqiSaRMjk9ecIA1QD/aMXd9ShcuSlv0M52oEkfpG4s +99RHl/HXbJJKc6/4kgiJAiUEGAEKAA8FAlljlBcCGwwFCQPCZwAACgkQELt69v671qviEA// +YpGeTLXQzlS7VCz6l13j9+jrLNiHuP+CEO8ZFGWf1I4oNMda1vndtaPdla8h9bOCvp8giFt9 +a27XsSv9GueP8Gcso26n4ek4KPZ93+WzFfasrm2+PXH00in4M6DpBvF3XP0yDtSI1h8tTQQ5 +fBliidED2M+/EggpBBYlQgBQY7iELKD6gynGU7O5OutcNAO+ZHp/PCSS4FIH32SUUCtItXQs +PJEuHNqaptuEOndABeRHal59iBR/NqePT6eW0TGNy54m0S90qtMb17O4ub2PqCS7jwHaJohm +3RG8XC8rakNiorVXaxr652ScT7NeptLrk3jNOpK6Kw5YBgVxaefmfSW0KVYh5FaS6Pr3/xrk +/Vjllh/IBtK9eGS1UE7whl4gEeAI7u1uYzzD5lQyfsDKw3C7WtSb9FNPgJ1Xuu5kV29J+RP+ +5FbIQd63xs7pz0pak+ZBIjl6unyVgdpdJcwr9FrTbiDZlPVN2qdaGQRkmJfN78rkVCJcetf7 +ZZyb8LHgS9RZgElzoH3nQrMYxyJYBUlHknC8Zzksmqf+Hj6mdAu+jZL88eN0nzNSyVHgh8KJ +9KPi2b9hpQZpRKej23pEUE89YXsCwW3wHl2UZ8Mb5pEakz+AyQiFbtgBOO/q26lRIyWbhDuD +kZZCqAXSzldxzcVm32xu/p/4dnJ1MN6amx+JAjwEGAEKACYCGwwWIQR0L6TpWCm2xerGuFcQ +u3r2/rvWqwUCXGa64wUJBsWNzAAKCRAQu3r2/rvWq1ATD/93kuKrSw1lBeR0Cf7+UFr3uiGQ +o0x6AwHHr6uGggdEQLBmhCnFrbxgrLnQV7oNcR1MijtlbLGepu6RTuPNMoywAUBtLg4FBew9 +JmM6x9Db73ktDHCo0CS9tmrfOSdXinZAScR7NiWOW2xxXoGgVtpi+PkuJ0hCxa4x3bVo5iYz +CLa7sQCgqGcfGEb0c3yC5AF6+QnGVGknEVc49gXCT+di/Ox9JxtfiPYTIS6QGx7QIcdyYXi0 +fXTmqUJd4jKerkiRxvk/twC6IIKIfrNX182Z8WeUIrmrt1GXyxZLFyFgM12QQa98CyfDjwyn +WLBXhity2VVk513haho3PYLMfMe/nVu7ke42MMRgFCOuxpUxGQYr4bT6BRmCyM7Mk7yG/nXD +MVB3k+IHUCVx7OGJ1tne5OnpeopsfkFyKQU4BWuKkHknSkw4xp1a+GGCIbdNhTWx/rzRDwPT +H/yoMGY442ON1VfwgLLm0cIEX2oFi30F2etb2i/ZGB0DaknGDqcWY1buKP4w4bwKxHL+snXj +FZh+LG/IBNqN+ZbA690XBgNCStajzPtsoSZP9KUz8MCBR0ekr5mzks0iV5oO77yyoxwdIO99 +1m7acaaAg7KLQKV5WwXoSPyl5C+c2R9DeB+v3c2n7ecx7M+lGJ7POU1z2pajmKsWFNENz7cu +idj5qs4Ra4kCPAQYAQoAJgIbDBYhBHQvpOlYKbbF6sa4VxC7evb+u9arBQJfq95yBQkKCrFb +AAoJEBC7evb+u9aruSAP/i35XsXucjTAPDk4AMRfuxnRrH89YqrNhvOmoehvQXUjCp+USQZ0 +CSjrGq3HQJ6KFGQOB2ltAAeYc1w52+QdkjifPQDhkLnD6O8PF6bfWtN3wiaIiVqbK067YSLu +EJ2l4p4VtFNJjEB+Gugp7Q1c5ezoYA/q+mw4Oi4CojODVYZwaToPSBJPTM376dOAUV5vyz1T +QNcaEJ5tHFQJwhWMoCw9imdniaUE4kU8B1CcrtgsDryipliyUnGfEKvpptABhEFKlW+QfMhJ +ZlNOsKnJ2v4FPu6cLMF2aOpkkABkKdsHyCJb+ZOeJrcd8kPTYm8jUbnH6Ns4xtrR18oJJZtZ +NTIp4gIsL6j+GVdZ7VgOWiQQbjGAW6gXntDp2zlBPhOZaCeOl83eT/tvtpNa3pBBxjuPxhDP +hG9xXZdTHs/nYno4R098n2eIamWSCVtQHnJTIJ0iSJl7OXy2/hvV3pS91hEz/QpGLAgqctal +/ZMcFVHUj5vqIEl85KraAoyssXyYIfQMA0tYuG5/LbMvk9LCNia+nH/jdSWPe1BG/Z0tLpgB +yvr4/L99lpSR+Ik7WnGiJyxRyZsU4NtsqInGD7l3p6/L6IlhKW911yV9azYLNAJdgF4b9bdq +TmPjlvlLszIf5KJiknhS7hbgEqbtzATprxXY83wv8Zl3l62ObvibhM7TiQI8BBgBCgAmAhsM +FiEEdC+k6VgptsXqxrhXELt69v671qsFAmGnRF0FCRGQpUYACgkQELt69v671qtpnxAAjNYg +3w6FpPLJ4bjnU4Z67v7nGdia4/uNMaUW4/hDrhW3lYBznh2EgsLLalEiYyX/Qx+OrdY452pJ +BWJqgmkcWSCPLzP0wVf+FmosLnugOY2cjxf9sb8CkYxAPtSh4Afit5x/uOa2pHItR4N3bA4S +xJEgK3JzMf+bjdRy3iRKFc/a6LW+oA/yn1S190iaDI1ZX3UnflKPFKIW+n5gC42f6OycOJUH +NgkCWT+t03WHoT5wN+n8ZhpcONXEvLxuKm4Q3mJxkYwfbS2SJWy89Dkn74A5Kt4jzfQTrYgk +EpT2TBBr2JJtbG1yfEmY4RUEY3aAn7ZYB3a4D1kIIlp9NeJV7nshzF3Y/nNGqsOfRsCYjKXT +g0qdUCe2FAb5vqES65oqFOSPZO+GZeQfzgFwC8oLzbI0FzXOvPF8sj9Y9kmuHYhWFdZWFbXd +h3p5SapSTynSFDlmF0v0Pp9AlJfGR2Jq4wmi/UKeNH/74060REFKT7uFtNv3bWr9usxleAn3 +vW7fVvSxGh5/JttuMdJaM1VI/oQ2fjh5B9LToJSZzug3XxsaEeaWaErhrP2Ll5DgeVQTkr1/ +jPvJBFMzpd8inMOtY58V9pi9iRwLoJtHzGdv4s6WrAofMpXChYYtKt55KGo99rNASNHdXnZd +0WbJUiuW2PslHGK1bb2So7T0ARqVH2U= +=SVWL +-----END PGP PUBLIC KEY BLOCK----- diff --git a/knot.spec b/knot.spec new file mode 100644 index 0000000..fdc3204 --- /dev/null +++ b/knot.spec @@ -0,0 +1,301 @@ +# +# spec file for package knot +# +# Copyright (c) 2024 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +%define libdnssec libdnssec9 +%define libknot libknot14 +%define libzscanner libzscanner4 +%define pkg_name knot +%bcond_without dnstap +%bcond_without lto +%bcond_without systemd +%if 0%{?is_opensuse} +%bcond_without maxminddb +%else +%bcond_with maxminddb +%endif +%bcond_without docs +%if %{with systemd} +%define has_systemd 1 +BuildRequires: pkgconfig(libsystemd) +%{?systemd_requires} +%endif +Name: knot +Version: 3.3.9 +Release: 0 +Summary: An authoritative DNS daemon +License: GPL-3.0-or-later +Group: Productivity/Networking/DNS/Servers +URL: https://www.knot-dns.cz/ +Source0: https://secure.nic.cz/files/knot-dns/%{pkg_name}-%{version}.tar.xz +Source2: knot-tmp.conf +Source3: https://secure.nic.cz/files/knot-dns/%{pkg_name}-%{version}.tar.xz.asc +Source4: system-user-knot.conf +Source99: knot.keyring +Recommends: knot-utils +BuildRequires: libcap-ng-devel +BuildRequires: libedit-devel +BuildRequires: libnghttp2-devel +%if 0%{?suse_version} >= 1600 +BuildRequires: libngtcp2-devel +BuildRequires: libngtcp2_crypto_gnutls8 +%endif +BuildRequires: liburcu-devel +BuildRequires: lmdb-devel >= 0.9.15 +BuildRequires: openssl-devel +BuildRequires: pkgconfig +BuildRequires: sysuser-tools +BuildRequires: xz +BuildRequires: pkgconfig(gnutls) >= 3.3 +BuildRequires: pkgconfig(nettle) +Obsoletes: knot2 < %{version} +%sysusers_requires +%if 0%{?suse_version} > 1320 || 0%{?leap_version} == 420300 +BuildRequires: libidn2-devel +%else +BuildRequires: libidn-devel +%endif +%if %{with maxminddb} +BuildRequires: pkgconfig(libmaxminddb) +%endif +%if %{with docs} +BuildRequires: makeinfo +BuildRequires: python3-Sphinx +%endif +%if %{with dnstap} +BuildRequires: libfstrm-devel +BuildRequires: libprotobuf-c-devel >= 1.0.0 +%endif + +%description +Knot DNS is a DNS server. It implements only the authoritative domain +name service. It uses a multi-threaded and mostly lock-free +implementation and can operate non-stop during zone addition or +removal. + +%package devel +# +Summary: Development files for the knot libraries +Group: Development/Libraries/C and C++ +Requires: %{libdnssec} = %{version} +Requires: %{libknot} = %{version} +Requires: %{libzscanner} = %{version} +Requires: knot = %{version} + +%description devel +Knot DNS is a DNS server. It implements only the authoritative domain +name service. It uses a multi-threaded and mostly lock-free +implementation and can operate non-stop during zone addition or +removal. + +This package contains headers for knot. + +%package utils +# +Summary: Utilities to query and test DNS coming from Knot project +Group: Productivity/Networking/DNS/Utilities + +%description utils +Knot DNS is a DNS server. It implements only the authoritative domain +name service. It uses a multi-threaded and mostly lock-free +implementation and can operate non-stop during zone addition or +removal. + +This package contains tools to query and test DNS like kdig and knsupdate. + +%package -n %{libdnssec} +# +Summary: DNSSEC support functions for Knot DNS +Group: System/Libraries + +%description -n %{libdnssec} +Knot DNS is a DNS server. It implements only the authoritative domain +name service. It uses a multi-threaded and mostly lock-free +implementation and can operate non-stop during zone addition or +removal. + +This package contains a library for DNSSEC support functions. + +%package -n %{libknot} +# +Summary: Knot DNS support library +Group: System/Libraries + +%description -n %{libknot} +Knot DNS is a DNS server. It implements only the authoritative domain +name service. It uses a multi-threaded and mostly lock-free +implementation and can operate non-stop during zone addition or +removal. + +This package contains the essential core library for Knot services. + +%package -n %{libzscanner} +# +Summary: Zone record parsing functions for Knot DNS +Group: System/Libraries + +%description -n %{libzscanner} +Knot DNS is a DNS server. It implements only the authoritative domain +name service. It uses a multi-threaded and mostly lock-free +implementation and can operate non-stop during zone addition or +removal. + +This package contains a library for a zone record scanner. + +%prep +%autosetup -n %{pkg_name}-%{version} + +%build +%configure \ + --libexecdir=%{_libexecdir}/%{pkg_name} \ + --includedir=%{_includedir}/knot/ \ + --disable-static \ +%if 0%{?suse_version} < 1600 + --enable-quic \ +%endif + --enable-recvmmsg=yes \ +%if %{with lto} + --enable-lto=yes \ +%endif +%if %{with dnstap} + --enable-dnstap=yes \ + --with-module-dnstap=shared \ +%endif + --enable-rosedb \ + --with-module-rosedb=shared \ +%if %{with systemd} + --with-rundir=/run/knot/ \ + --enable-systemd=yes \ +%endif + --with-module-cookies=shared \ + --with-module-dnsproxy=yes \ +%if %{with maxminddb} + --with-module-geoip=shared \ +%endif + --with-module-noudp=shared \ + --with-module-onlinesign=yes \ + --with-module-queryacl=shared \ + --with-module-rrl=shared \ + --with-module-stats=shared \ + --with-module-synthrecord=shared \ + --with-module-whoami=shared \ + --with-bash-completions=%{_sysconfdir}/bash_completion.d \ + --disable-silent-rules +%make_build STRIP="/bin/true" +%sysusers_generate_pre %{SOURCE4} knot system-user-knot.conf + +%install +%make_install STRIP="/bin/true" +for i in kdig khost knsec3hash knsupdate; do + find %{buildroot} -name "$i*" | sed 's|%{buildroot}||' | while read fl; do + echo "$fl*" >> utils + echo "%exclude $fl*" >> no-utils + done +done +install -d %{buildroot}%{_docdir}/%{pkg_name} +install -d %{buildroot}%{_docdir}/%{pkg_name}/samples/ +rm %{buildroot}%{_sysconfdir}/%{pkg_name}/* +install -p -m644 samples/knot.sample.conf %{buildroot}%{_sysconfdir}/%{pkg_name}/%{pkg_name}.conf +%if %{with systemd} +install -d %{buildroot}%{_unitdir} %{buildroot}%{_tmpfilesdir} +install -p -m644 distro/common/knot.service %{buildroot}%{_unitdir}/%{pkg_name}.service +install -p -m644 %{SOURCE2} %{buildroot}%{_tmpfilesdir}/knot.conf +ln -s service %{buildroot}%{_sbindir}/rcknot +%endif +install -p -m644 COPYING NEWS README.md %{buildroot}%{_docdir}/%{pkg_name} +install -p -m644 samples/*.conf samples/*.zone* %{buildroot}%{_docdir}/%{pkg_name}/samples/ +find %{buildroot} -type f -name "*.la" -delete -print +install -d -m 0750 %{buildroot}%{_localstatedir}/lib/knot/ +mkdir -p %{buildroot}%{_sysusersdir} +install -m 0644 %{SOURCE4} %{buildroot}%{_sysusersdir}/ + +%pre -f knot.pre +%if %{with systemd} +%service_add_pre %{pkg_name}.service + +%preun +%service_del_preun %{pkg_name}.service + +%post +systemd-tmpfiles --create %{_tmpfilesdir}/knot.conf || : +%service_add_post %{pkg_name}.service +# Incompatibility warning +if grep -q '{' %{_sysconfdir}/%{pkg_name}/%{pkg_name}.conf; then +cat > %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release} << EOF +WARNING: You are upgrading from incompatible version of Knot DNS + +Your configuration file looks like you are upgrading from ancient version of Knot DNS. +Knot 1.6.x was deprecated quite some time ago: + +https://lists.nic.cz/pipermail/knot-dns-users/2017-April/001099.html + +Unfortunately, it used completely different format of configuration file and +you have to migrate your configuration manually. + +Please, see examples in %{_docdir}/%{pkg_name}/samples/ directory. +EOF +fi + +%postun +%service_del_postun %{pkg_name}.service +%endif + +%post -n %{libdnssec} -p /sbin/ldconfig +%post -n %{libknot} -p /sbin/ldconfig +%post -n %{libzscanner} -p /sbin/ldconfig +%postun -n %{libdnssec} -p /sbin/ldconfig +%postun -n %{libknot} -p /sbin/ldconfig +%postun -n %{libzscanner} -p /sbin/ldconfig + +%files -f no-utils +%dir %attr(750,knot,knot) %{_sysconfdir}/%{pkg_name} +%config(noreplace) %attr(640,knot,knot) %{_sysconfdir}/%{pkg_name}/%{pkg_name}.conf +%{_bindir}/* +%{_sbindir}/* +%{_mandir}/man?/* +%doc %{_docdir}/%{pkg_name} +%if %{with systemd} +%{_unitdir}/%{pkg_name}.service +%{_tmpfilesdir}/knot.conf +%{_sysusersdir}/system-user-knot.conf +%endif +%{_libdir}/knot/ +%dir %attr(-,knot,knot) %{_localstatedir}/lib/knot/ +%ghost %dir %(751,knot,knot) /run/knot + +%files -n %{libdnssec} +%{_libdir}/libdnssec.so.* + +%files -n %{libknot} +%{_libdir}/libknot.so.* + +%files -n %{libzscanner} +%{_libdir}/libzscanner.so.* + +%files utils -f utils + +%files devel +%{_includedir}/knot/ +%{_libdir}/libdnssec.so +%{_libdir}/libknot.so +%{_libdir}/libzscanner.so +%{_libdir}/pkgconfig/knotd.pc +%{_libdir}/pkgconfig/libdnssec.pc +%{_libdir}/pkgconfig/libknot.pc +%{_libdir}/pkgconfig/libzscanner.pc + +%changelog diff --git a/system-user-knot.conf b/system-user-knot.conf new file mode 100644 index 0000000..a905d00 --- /dev/null +++ b/system-user-knot.conf @@ -0,0 +1 @@ + u knot - "Knot DNS server" /var/lib/knot From 48a4ec7abc13976a05f42564ae5301f86ad9eb0aa9363f3d6d83d84f3c436533 Mon Sep 17 00:00:00 2001 From: Michal Hrusecky Date: Mon, 2 Sep 2024 19:49:54 +0000 Subject: [PATCH 2/2] - update to version 3.4.0, see https://www.knot-dns.cz/2024-09-02-version-340.html OBS-URL: https://build.opensuse.org/package/show/server:dns/knot?expand=0&rev=71 --- knot-3.3.9.tar.xz | 3 --- knot-3.3.9.tar.xz.asc | 16 ---------------- knot-3.4.0.tar.xz | 3 +++ knot-3.4.0.tar.xz.asc | 16 ++++++++++++++++ knot.changes | 6 ++++++ knot.spec | 4 ++-- 6 files changed, 27 insertions(+), 21 deletions(-) delete mode 100644 knot-3.3.9.tar.xz delete mode 100644 knot-3.3.9.tar.xz.asc create mode 100644 knot-3.4.0.tar.xz create mode 100644 knot-3.4.0.tar.xz.asc diff --git a/knot-3.3.9.tar.xz b/knot-3.3.9.tar.xz deleted file mode 100644 index 375568a..0000000 --- a/knot-3.3.9.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:7cf2bd93bf487179aca1d2acf7b462dc269e769944c3ea73c7f9a4570dde86ab -size 1608644 diff --git a/knot-3.3.9.tar.xz.asc b/knot-3.3.9.tar.xz.asc deleted file mode 100644 index e762701..0000000 --- a/knot-3.3.9.tar.xz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCgAdFiEEdC+k6VgptsXqxrhXELt69v671qsFAmbMFLoACgkQELt69v67 -1qujvRAAo8qdiG9m3pCtNmecU7FHSF6UHPOerUTu/NDUTWvY6eBSHCjpE+/JOqQn -VI03r2sPQRgu6ihlRJLQi03o9FyflE8+VdvLAy/k4XgvvSf9x5yd76KaWECiveap -psuo0rzm0JPlg/Ee4SUiYdL9gldOLhHNjNxi1zqVxJRYwM1wc3lewKLO1Op+K+Ng -uJqHVnyBbPHGsuUuT4LKvYgBWnFRrFXJYPPYHFv7hpz3EdMzJpTPSBNNWk0unKv0 -HO7wdr3xxADfjMubv3GAnEYFvno7OjpqryF4L9iG8gZTVfYyEl9w+VxAWgcb/g/E -sZMGaxYRH1jtd7qX2eIvib4v8aykO3+Athml6O76sweoO4cn5GiJh4TtlIuH84Lc -shjYDbp1KNVeHzlFgAHHJxXifuvEsnEOCJqcJWI1j/G79kkAtclWXsAK0sLV+tQN -VLmfyeBuaNwVz5GKVx5oEyjJdu95kd4wWUBpaidfmQJHL5I8WclZjiHEKGWmJ9ei -v/monpU0WLw6tCAydoeh+cQ9TyNgaqrj/jVPJ2yoo6mt+Z+Mo259qlz0cuvPBUtT -czYqqFfKGrn6b+xAWQWyr3rw4UAGljmLKnpPQQWi4qEvqzCprpWE0mZ6w+K5llpi -3K4mdlGCYmUl4U4iU4yAd9Wfd9YfYH/xNKiRy34AhodAdvpXJ7s= -=O1la ------END PGP SIGNATURE----- diff --git a/knot-3.4.0.tar.xz b/knot-3.4.0.tar.xz new file mode 100644 index 0000000..23e4796 --- /dev/null +++ b/knot-3.4.0.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:2730b11398944faa5151c51b0655cf26631090343c303597814f2a57df424736 +size 1628620 diff --git a/knot-3.4.0.tar.xz.asc b/knot-3.4.0.tar.xz.asc new file mode 100644 index 0000000..494f732 --- /dev/null +++ b/knot-3.4.0.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEdC+k6VgptsXqxrhXELt69v671qsFAmbVSP0ACgkQELt69v67 +1qswQhAAoKxR4OvhYUgEMe2JWOaxTpB+DBRJwx/2Hfsg2FKwYNUDMHXsuQfeTUyL +DCnnzfbZ352+781yuZCHLuhJ4/iK6xeddqtxdCa9vGote3ff4IcXiw4JZm9X6tuu +zEnigk2ZftqbxFBIT8INfk9HieVTfB3UgW8vo4Tz65Mp4mpfjWS1/iZGRlLivNWR +vIGBrufFWSSro+oH1uAQB98ISuAL0eCKTNeuGlFQvM2kZq+JZ4C8f2BcHravPLz8 +DVSBUN3RL3CupzO0dHOVaszGh4KSONvr1kiEsorGKHIxhBbk8aeHt3Dxs88OJL2V +cQIFbsnjlssn3SUmL3N0fl4b1zr2L2v+qSNT00x8S9k/PexkxqJ96K52/4dCOxnT +AZTIn/1uTJ1RZfhZkq2egUgka9iLKOs28VpO2Lc8DJO++eoQR9tNoZaQJ0wp8jzi +r1DTI4a1uDuJa4hSATCxs7aE9sD2Wi+W4s4cVmhdqB+6ZDWFr+n6tEkDCFdWYb7I +UI9rVjTxJAw/4WH7q0xFY1zZLVuXs7MZtYYonFE/CeVPLcQZRWGgalXOOBqUJKts +mXJrfu5XkUBo4A1HOd5EYAXYPERVg8B/hbtEqCC1tk8yokU4Y4vN1vT3fv1+mM85 +LOAXkWvP/VcEmqQ7mfFweD9/SMKuUr0CkfG6HBjsbzmwtSCv+2w= +=vUgr +-----END PGP SIGNATURE----- diff --git a/knot.changes b/knot.changes index efa9ca7..a5a38ce 100644 --- a/knot.changes +++ b/knot.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Mon Sep 2 17:15:38 UTC 2024 - Michal Hrusecky + +- update to version 3.4.0, see + https://www.knot-dns.cz/2024-09-02-version-340.html + ------------------------------------------------------------------- Tue Aug 27 18:12:50 UTC 2024 - Michal Hrusecky diff --git a/knot.spec b/knot.spec index fdc3204..ebb071e 100644 --- a/knot.spec +++ b/knot.spec @@ -17,7 +17,7 @@ %define libdnssec libdnssec9 -%define libknot libknot14 +%define libknot libknot15 %define libzscanner libzscanner4 %define pkg_name knot %bcond_without dnstap @@ -35,7 +35,7 @@ BuildRequires: pkgconfig(libsystemd) %{?systemd_requires} %endif Name: knot -Version: 3.3.9 +Version: 3.4.0 Release: 0 Summary: An authoritative DNS daemon License: GPL-3.0-or-later