- update to 4.8.0:
* Fix unit test kill_from_pidfile function for nonexistent
files because the argument is evaluated before the test
expression.
* Fix rr-test to also convert the contents of the just written
output file.
* Fix test set to remove -f nsd.db and rm nsd.db commands.
* Fix test set to remove difffile option.
* Fix#14: Set timeout to 3s when servicing remaining TCP
connections.
* Fix: Always instate write handler after reading queries from
TCP.
* Answer first query on connections accepted just before
reload.
* Merge #305: faster stats. Statistics can be gathered while a
reload is in progress.
* Remove on-disk database.
* Fix processing of consolidated IXFRs.
* Fix for interprocess communication to set quit sync command
from main process explicitly.
* Merge #281: Proxy protocol. An implementation of PROXYv2 for
NSD.
* It can be configured with proxy-protocol-port: portnum with
the port number of the interface on which proxy traffic is
handled.
* The interface can support proxy traffic for UDP, TCP and
TLS.
* Fix autoconf 2.69 warnings in configure.
* Merge #287: Update nsd.conf.5.in.
* Fix unused variable warning in unit test of udb.
OBS-URL: https://build.opensuse.org/request/show/1142480
OBS-URL: https://build.opensuse.org/package/show/server:dns/nsd?expand=0&rev=109
- New upstream release 4.7.0
This release adds a script for bash autocompletion for nsd-control. Also
nsd-control can be configured to use unencrypted operation also when
compiled without openssl. There is also a systemd service unit example
file contributed. The dnstap log service can be contacted over TCP, with
the dnstap-ip: ip option. It is also possible to use TLS, with
dnstap-tls, it is enabled by default, and can be configured with the
dnstap-server-name, dnstap-cert-bundle, dnstap-client-key-file and
dnstap-client-cert-file options.
FEATURES:
* Fix#267: Allow unencrypted local operation of nsd-control.
* Fix#271: DNSTAP over TCP, with dnstap-ip: "127.0.0.1@3333".
* dnstap over TLS, default enabled. Configured with the
options dnstap-tls, dnstap-tls-server-name, dnstap-tls-cert-bundle,
dnstap-tls-client-key-file and dnstap-tls-client-cert-file.
BUGFIXES:
see https://github.com/NLnetLabs/nsd/releases/tag/NSD_4_7_0_REL
OBS-URL: https://build.opensuse.org/request/show/1095779
OBS-URL: https://build.opensuse.org/package/show/server:dns/nsd?expand=0&rev=101
- New upstream release 4.3.4
FEATURES:
- Merge PR #141: ZONEMD RR type.
BUG FIXES:
- Fix that symlink does not interfere with chown of pidfile
(bsc#1179191, CVE-2020-28935)
- Fix#129: ambiguous use of errno, in log message if sendmmsg fails.
- Fix#128: Fix that the invalid port number is logged for sendmmsg
failed: Invalid argument.
- Fix#127: two minor `-Wcast-qual` cleanups
- Fix#126: minor header hygiene
- Fix#125: include config.h in compat/setproctitle.c and fix
prototype of `setproctitle`
- Fix#133: fix 0-init of local ( stack ) buffer.
- Fix missing parenthesis on size of fix to init buffer.
- Fix#134: IPV4_MINIMAL_RESPONSE_SIZE vs EDNS_MAX_MESSAGE_LEN.
- Fix to add missing closest encloser NSEC3 for wildcard nodata type
DS answer.
- Remove unused init_cfg_parse routine from configlexer.
- Fix#138: NSD returns non-EDNS answer when QUESTION is empty.
- Fix#142: NODATA answers missin SOA in authority section after
CNAME chain.
OBS-URL: https://build.opensuse.org/request/show/852435
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nsd?expand=0&rev=19
- Update keyring as per https://nlnetlabs.nl/people/
- New upstream release 4.2.4
FEATURES:
- Fix#48: Add make distclean that removes config.h made by configure.
And add maintainer-clean that removes bison and flex output.
BUG FIXES:
- Detect fixed time memcmp for openssl 0.9.8 compatibility.
- Detect EC_KEY_new_by_curve_name for openssl 0.9.8.
- include limits.h for UINT_MAX.
- If no recvmmsg, dont use msg_flags member, but errno for error,
where our fallback function left it, msg_flags also does not exist
on some systems.
- Remove unused variable warning for portability.
- Fix#52: do not log transient network full errors unless higher
verbosity is set.
- Fix regressions in configparser.y where global variables were not
set for minimal-responses, round-robin and log-time-ascii.
OBS-URL: https://build.opensuse.org/request/show/756107
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nsd?expand=0&rev=14
