Accepting request 709249 from home:adamm:branches:server:dns

- New upstream release 4.2.0:
  * Implement TCP fast open
  * Added DNS over TLS
  * TLS OCSP stapling support with the tls-service-ocsp option
  * New option hide-identity can be used in nsd.conf to stop NSD
    from responding with the hostname for probe queries that
    elicit the chaos class response, this is conform RFC4892
  * Disable TLS1.0, TLS1.1 and weak ciphers, enable CIPHER_SERVER_PREFERENCE

OBS-URL: https://build.opensuse.org/request/show/709249
OBS-URL: https://build.opensuse.org/package/show/server:dns/nsd?expand=0&rev=59

nsd-4.1.27.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:1bab5f30406cabac2f2cc95f8af6dfe20581646a75a70c091845e04d325f4eea
-size 1131881

nsd-4.1.27.tar.gz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIcBAABCAAGBQJcmMs5AAoJEJ9vHC1+BF+NpX8P/0MzhISbOFeM6HuISK+7Q2gJ
-NqVca8nIyFZmIOtOLFeDlpC8xWVW06/mmLyF09zAYkfUfiHd8CQFUyYrfsuZakkd
-lFCPNTiq5fzyXxRgUFl4xkUWx+IPNpsywNfhdWFLhcVn4McTIyKvx8dVH1/R/2Jj
-O1l/siAbV1qsCOdbioQIkwLm9e+npSizDJVIQNZHRyEHLn8hdLKseNR5tlY7QWbk
-BeJgvrk166N7V3qnYDJ0scQJaCrdS4E6rJ/AVUBthc6AjkS2y7XhgUmutY4l9WOg
-MDhCzvnlzyYtue/t1Kp5ogmuDQwNdStzO+/OF1BFVp/fJvUjHgcQV9KhBhjPA89Y
-bKHqbBt1n6R8z4ArD8HwV02EN+QFVu3UqqkpczFsAvPIvZnM4H1+qs1dnMcq+e99
-MKRCk4eCs+19/lkK2W+aHVjmYO1r3RsA3Ga8SAEqETRH0D2MOGoc45xT9MqEhNfx
-oPm+hPHIuNSbb49LRbmfmsYEKYlwz2fOhQ+FAebrlppKvJXq5Ju5KjfHYZn6fs6G
-RIp8LZlvZSj9KH75/qcWSgmsZyXpeLPYnK3cG5kzfg0WqBYo/hvr0Fdz8WKwhA6t
-FDZrq2oebnOr9QCSO94x9pnllsODYOaqlFU9qt9x4+/F8AFAMrNE2rmU/nQI7wB2
-TvuX5YqPd+quSxpDPCWr
-=YYE6
------END PGP SIGNATURE-----

nsd-4.2.0.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:51df1ca44a00e588c09ff0696e588c13566ce889b50d953896d8b6e507eda74c
+size 1141796

nsd-4.2.0.tar.gz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=Q354
+-----END PGP SIGNATURE-----

nsd.changes

@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Tue Jun 11 18:43:46 UTC 2019 - Adam Majer <amajer@suse.com>
+
+- New upstream release 4.2.0:
+  * Implement TCP fast open
+  * Added DNS over TLS
+  * TLS OCSP stapling support with the tls-service-ocsp option
+  * New option hide-identity can be used in nsd.conf to stop NSD
+    from responding with the hostname for probe queries that
+    elicit the chaos class response, this is conform RFC4892
+  * Disable TLS1.0, TLS1.1 and weak ciphers, enable CIPHER_SERVER_PREFERENCE
+
 -------------------------------------------------------------------
 Mon Mar 25 18:50:27 UTC 2019 - Michael Ströder <michael@stroeder.com>
 

nsd.spec

@@ -23,7 +23,7 @@
 %define zonesdir   %{configdir}/zones
 %define pidfile    %{_rundir}/nsd/nsd.pid
 Name:           nsd
-Version:        4.1.27
+Version:        4.2.0
 Release:        0
 #
 Summary:        An authoritative-only domain name server