diff --git a/ldns-1.6.11.tar.gz b/ldns-1.6.11.tar.gz deleted file mode 100644 index cca30d3..0000000 --- a/ldns-1.6.11.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:6891b8ea8e9ded3e7d2caaaf494a8c2459bab729cdd1716f6db2ba375f628888 -size 1018369 diff --git a/ldns-1.6.16.tar.bz2 b/ldns-1.6.16.tar.bz2 new file mode 100644 index 0000000..ebd04d5 --- /dev/null +++ b/ldns-1.6.16.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:f977c8c0be6de9f41a9c5eec9a4f27479b3f1a558aef9328ba77dc964ef1bbcc +size 952287 diff --git a/ldns.changes b/ldns.changes index 84c894f..df24747 100644 --- a/ldns.changes +++ b/ldns.changes @@ -1,4 +1,109 @@ ------------------------------------------------------------------- +Mon Jan 21 13:40:47 UTC 2013 - johann.luce@wanadoo.fr + +- Fix spec file for submit in Server:dns repos + +------------------------------------------------------------------- +Mon Dec 3 15:20:36 UTC 2012 - johann.luce@wanadoo.fr + +- Upgrade to 1.6.16 +1.6.16 2012-11-13 + * Fix Makefile to build pyldns with BSD make + * Fix typo in exporting b32_* symbols to make pyldns load again + * Allow leaving the RR owner name empty in ldns-testns datafiles. + * Fix fail to create NSEC3 bitmap for empty non-terminal (bug + introduced in 1.6.14). + +1.6.15 2012-10-25 + * Remove LDNS_STATUS_EXISTS_ERR from ldns/error.h to make ldns + binary compatible with earlier releases again. + +1.6.14 2012-10-23 + * DANE support (RFC6698), including ldns-dane example tool. + * Configurable default CA certificate repository for ldns-dane with + --with-ca-file=CAFILE and --with-ca-path=CAPATH + * Configurable default trust anchor with --with-trust-anchor=FILE + for drill, ldns-verify-zone and ldns-dane + * bugfix #474: Define socklen_t when undefined (like in Win32) + * bugfix #473: Dead code removal and resource leak fix in drill + * bugfix #471: Let ldns_resolver_push_dnssec_anchor accept DS RR's too. + * Various bugfixes from code reviews from CZ.NIC and Paul Wouters + * ldns-notify TSIG option argument checking + * Let ldns_resolver_nameservers_randomize keep nameservers and rtt's + in sync. + * Let ldns_pkt_push_rr now return false on (memory) errors. + * Make buffer_export comply to documentation and fix buffer2str + * Various improvements and fixes of pyldns from Katel Slany + now documented in their own Changelog. + * bugfix: Make ldns_resolver_pop_nameserver clear the array when + there was only one. + * bugfix #459: Remove ldns_symbols and export symbols based on regex + * bugfix #458: Track all newly created signatures when signing. + * bugfix #454: Only set -g and -O2 CFLAGS when no CFLAGS was given. + * bugfix #457: Memory leak fix for ldns_key_new_frm_algorithm. + * pyldns memory handling fixes and the python3/ldns-signzone.py + examples script contribution from Karel Slany. + * bugfix #450: Base # bytes for P, G and Y (T) on the guaranteed + to be bigger (or equal) P in ldns_key_dsa2bin. + * bugfix #449: Deep free cloned rdf's in ldns_tsig_mac_new. + * bugfix #448: Copy nameserver value (in stead of reference) of the + answering nameserver to the answer packet in ldns_send_buffer, so + the original value may be deep freed with the ldns_resolver struct. + * New -0 option for ldns-read-zone to replace inception, expiration + and signature rdata fields with (null). Thanks Paul Wouters. + * New -p option for ldns-read-zone to prepend-pad SOA serial to take + up ten characters. + * Return error if printing RR fails due to unknown/null RDATA. + +------------------------------------------------------------------- +Sun Jun 10 20:33:18 UTC 2012 - johann.luce@wanadoo.fr + +- Upgrade to 1.6.13 + * New -S option for ldns-verify-zone to chase signatures online. + * New -k option for ldns-verify-zone to validate using a trusted key. + * New inception and expiration margin options (-i and -e) to + ldns-verify-zone. + * New ldns_dnssec_zone_new_frm_fp and ldns_dnssec_zone_new_frm_fp_l + functions. + * New ldns_duration* functions (copied from OpenDNSSEC source) + * fix ldns-verify-zone to allow NSEC3 signatures to come before + the NSEC3 RR in all cases. Thanks Wolfgang Nagele. + * Zero the correct flag (opt-out) when creating NSEC3PARAMS. + Thanks Peter van Dijk. + * Canonicalize RRSIG's Signer's name too when validating, because + bind and unbound do that too. Thanks Peter van Dijk. + * bugfix #433: Allocate rdf using ldns_rdf_new in ldns_dname_label + * bugfix #432: Use LDNS_MALLOC & LDNS_FREE i.s.o. malloc & free + * bugfix #431: Added error message for LDNS_STATUS_INVALID_B32_EXT + * bugfix #427: Explicitely link ssl with the programs that use it. + * Fix reading \DDD: Error on values that are outside range (>255). + * bugfix #429: fix doxyparse.pl fails on NetBSD because specified + path to perl. + * New ECDSA support (RFC 6605), use --disable-ecdsa for older openssl. + * fix verifying denial of existence for DS's in NSEC3 Opt-Out zones. + Thanks John Barnitz + +------------------------------------------------------------------- +Thu Apr 19 14:05:39 UTC 2012 - johann.luce@wanadoo.fr + +- Upgrade in 1.6.12 + * bugfix #413: Fix manpage source for srcdir != builddir + * Canonicalize the signers name rdata field in RRSIGs when signing + * Ignore minor version of Private-key-format (so v1.3 may be used) + * Allow a check_time to be given in stead of always checking against + the current time. With ldns-verify-zone the check_time can be set + with the -t option. + * Added functions for updating and manipulating SOA serial numbers. + ldns-read-zone has an option -S for updating and manipulating the + serial numbers. + * The library Makefile is now GNU and BSD make compatible. + * bugfix #419: NSEC3 validation of a name covered by a wildcard with + no data. + * Two new options (--with-drill and --with-examples) to the main + configure script (in the root of the source tree) to build drill + and examples too. + * Fix days_since_epoch to year_yday calculation on 32bits systems. +------------------------------------------------------------------- Tue Jan 10 11:21:38 UTC 2012 - dimstar@opensuse.org - Add openssl-devel Requires to -devel package: dnssec.h includes diff --git a/ldns.spec b/ldns.spec index 336e448..944b0a4 100644 --- a/ldns.spec +++ b/ldns.spec @@ -17,7 +17,7 @@ Name: ldns -Version: 1.6.11 +Version: 1.6.16 Release: 0 # # @@ -30,7 +30,7 @@ BuildRequires: python-devel BuildRequires: swig # Url: http://www.nlnetlabs.nl/projects/ldns/ -Source: http://www.nlnetlabs.nl/downloads/ldns/ldns-%{version}.tar.gz +Source: http://www.nlnetlabs.nl/downloads/ldns/ldns-%{version}.tar.bz2 # Summary: A dns library License: BSD-3-Clause @@ -144,6 +144,7 @@ popd %{_bindir}/ldns-zcat %{_bindir}/ldns-zsplit %{_bindir}/ldnsd +%{_bindir}/ldns-dane %{_mandir}/man1/drill.1* %{_mandir}/man1/ldns*.1* @@ -164,3 +165,4 @@ popd %{python_sitearch}/* %changelog +