From 0be9ff5267c375774ef62c9b019bb484915bfa7cfe8efeb4677faafefb9b3c94 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michael=20Str=C3=B6der?= Date: Tue, 1 Jun 2021 11:19:28 +0000 Subject: [PATCH 1/2] Accepting request 892306 from home:elvigia:branches:server:dns - Use --disable-explicit-port-randomisation, the linux kernel has source port randomization by default if port is 0 since ages. - Use --disable-explicit-port-randomisation, the linux kernel has source port randomization by default if port is 0 since ages. OBS-URL: https://build.opensuse.org/request/show/892306 OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=138 --- libunbound-devel-mini.changes | 6 ++++++ libunbound-devel-mini.spec | 5 +++-- unbound.changes | 6 ++++++ unbound.spec | 7 +++++-- 4 files changed, 20 insertions(+), 4 deletions(-) diff --git a/libunbound-devel-mini.changes b/libunbound-devel-mini.changes index 41b50fc..d5263f5 100644 --- a/libunbound-devel-mini.changes +++ b/libunbound-devel-mini.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Tue May 11 21:57:51 UTC 2021 - Cristian Rodríguez + +- Use --disable-explicit-port-randomisation, the linux kernel + has source port randomization by default if port is 0 since ages. + ------------------------------------------------------------------- Tue Feb 9 10:56:09 UTC 2021 - Michael Ströder diff --git a/libunbound-devel-mini.spec b/libunbound-devel-mini.spec index 652a060..77aaa25 100644 --- a/libunbound-devel-mini.spec +++ b/libunbound-devel-mini.spec @@ -36,8 +36,8 @@ BuildRequires: libexpat-devel BuildRequires: libsodium-devel BuildRequires: openssl-devel Requires: this-is-only-for-build-envs -Conflicts: unbound-devel Conflicts: libunbound8 +Conflicts: unbound-devel Provides: libunbound-devel = %{version}-%{release} # URL: https://www.unbound.net/ @@ -87,7 +87,8 @@ export CXXFLAGS="%{optflags}" --with-pidfile=%{piddir}%{name}/%{name}.pid \ --without-pythonmodule --without-pyunbound \ --with-libunbound-only \ - --with-rootkey-file=%{_sharedstatedir}/unbound/root.key + --with-rootkey-file=%{_sharedstatedir}/unbound/root.key \ + --disable-explicit-port-randomisation make %{?_smp_mflags} diff --git a/unbound.changes b/unbound.changes index dc9f630..3f5bd12 100644 --- a/unbound.changes +++ b/unbound.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Tue May 11 21:56:07 UTC 2021 - Cristian Rodríguez + +- Use --disable-explicit-port-randomisation, the linux kernel + has source port randomization by default if port is 0 since ages. + ------------------------------------------------------------------- Tue Feb 9 10:56:09 UTC 2021 - Michael Ströder diff --git a/unbound.spec b/unbound.spec index e1a376a..06632fb 100644 --- a/unbound.spec +++ b/unbound.spec @@ -108,6 +108,7 @@ DNSSEC (secure DNS) validation and stub-resolvers (that do not run as a server, but are linked into an application) are easily possible. %define libname libunbound8 + %package -n %{libname} Requires: %{name}-anchor >= %{version} # @@ -218,7 +219,8 @@ pushd ../p2 --with-conf-file=%{_sysconfdir}/%{name}/unbound.conf \ --with-pidfile=%{piddir}%{name}/%{name}.pid \ --with-pythonmodule --with-pyunbound PYTHON=%{__python2}\ - --with-rootkey-file=%{_sharedstatedir}/unbound/root.key + --with-rootkey-file=%{_sharedstatedir}/unbound/root.key \ + --disable-explicit-port-randomisation make %{?_smp_mflags} all streamtcp popd @@ -245,7 +247,8 @@ popd %if %{with python3} --with-pythonmodule --with-pyunbound PYTHON=%{__python3}\ %endif - --with-rootkey-file=%{_sharedstatedir}/unbound/root.key + --with-rootkey-file=%{_sharedstatedir}/unbound/root.key \ + --disable-explicit-port-randomisation make %{?_smp_mflags} all streamtcp From 413f89d9c542b58d7424177e752d0c42bb2053f932372e8e674ac8f152039c84 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michael=20Str=C3=B6der?= Date: Wed, 2 Jun 2021 09:51:39 +0000 Subject: [PATCH 2/2] Accepting request 896843 from home:toganm:branches:server:dns Enable DNS over HTTPS which is possible since 1.12.0 OBS-URL: https://build.opensuse.org/request/show/896843 OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=139 --- unbound.changes | 5 +++++ unbound.spec | 4 ++++ 2 files changed, 9 insertions(+) diff --git a/unbound.changes b/unbound.changes index 3f5bd12..c8e8ea4 100644 --- a/unbound.changes +++ b/unbound.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Sun May 30 19:28:48 UTC 2021 - Togan Muftuoglu + +- Enable DNS-over-HTTPS support + ------------------------------------------------------------------- Tue May 11 21:56:07 UTC 2021 - Cristian Rodríguez diff --git a/unbound.spec b/unbound.spec index 06632fb..de36c20 100644 --- a/unbound.spec +++ b/unbound.spec @@ -62,6 +62,8 @@ BuildRequires: python-rpm-macros BuildRequires: python3-devel BuildRequires: swig %endif +# needed for dns over https +BuildRequires: pkgconfig(libnghttp2) Requires: ldns >= %{ldns_version} # until we figured something else out for the unbound-anchor part in the systemd unit file @@ -206,6 +208,7 @@ pushd ../p2 --with-pthreads \ --disable-static \ --with-ldns=%{_prefix} \ + --with-libnghttp2 \ --enable-sha2 \ --enable-gost \ --enable-ecdsa \ @@ -232,6 +235,7 @@ popd --with-pthreads \ --disable-static \ --with-ldns=%{_prefix} \ + --with-libnghttp2 \ --enable-sha2 \ --enable-gost \ --enable-ecdsa \