From 5fdc6f6a2345bb15e66c0dbaf9f093566dd553be Mon Sep 17 00:00:00 2001 From: zhengruoqin Date: Tue, 14 Sep 2021 08:01:40 +0800 Subject: unbound: upgrade 1.12.0 -> 1.13.2 Features Merge PR #317: ZONEMD Zone Verification, with RFC 8976 support. ZONEMD records are checked for zones loaded as auth-zone, with DNSSEC if available. There is an added option zonemd-permissive-mode that makes it log but not fail wrong zones. With zonemd-reject-absence for an auth-zone the presence of a zonemd can be mandated for specific zones. Fix: Resolve interface names on control-interface too. Merge #470 from edevil: Allow configuration of persistent TCP connections. Fix #474: always_null and others inside view. Add that log-servfail prints an IP address and more information about one of the last failures for that query. Merge #478: Allow configuration of TCP timeout while waiting for response. Add ./configure --with-deprecate-rsa-1024 that turns off RSA 1024. Move the NSEC3 max iterations count in line with the 150 value used by BIND, Knot and PowerDNS. This sets the default value for it in the configuration to 150 for all key sizes. zonemd-check: yesno option, default no, enables the processing of ZONEMD records for that zone. Merge #486 by fobster: Make VAL_MAX_RESTART_COUNT configurable. Merge PR #491: Add SVCB and HTTPS types and handling according to draft-ietf-dnsop-svcb-https. Introduce 'http-user-agent:' and 'hide-http-user-agent:' options. Signed-off-by: Zheng Ruoqin Signed-off-by: Khem Raj --- .../recipes-support/unbound/unbound_1.12.0.bb | 46 ---------------------- .../recipes-support/unbound/unbound_1.13.2.bb | 46 ++++++++++++++++++++++ 2 files changed, 46 insertions(+), 46 deletions(-) delete mode 100644 meta-networking/recipes-support/unbound/unbound_1.12.0.bb create mode 100644 meta-networking/recipes-support/unbound/unbound_1.13.2.bb (limited to 'meta-networking') diff --git a/meta-networking/recipes-support/unbound/unbound_1.12.0.bb b/meta-networking/recipes-support/unbound/unbound_1.12.0.bb deleted file mode 100644 index 8ab8b7b84f..0000000000 --- a/meta-networking/recipes-support/unbound/unbound_1.12.0.bb +++ /dev/null @@ -1,46 +0,0 @@ -SUMMARY = "Unbound is a validating, recursive, and caching DNS resolver" -DESCRIPTION = "Unbound's design is a set of modular components which incorporate \ - features including enhanced security (DNSSEC) validation, Internet Protocol \ - Version 6 (IPv6), and a client resolver library API as an integral part of the \ - architecture" - -HOMEPAGE = "https://www.unbound.net/" -SECTION = "net" -LICENSE = "BSD-3-Clause" -LIC_FILES_CHKSUM = "file://LICENSE;md5=5308494bc0590c0cb036afd781d78f06" - -SRC_URI = "git://github.com/NLnetLabs/unbound.git;protocol=http;branch=master \ - file://0001-contrib-add-yocto-compatible-init-script.patch \ -" -SRCREV="52b04806f4236c37acd10179ab465a54adc7e86a" - -inherit autotools pkgconfig systemd update-rc.d - -DEPENDS = "openssl libevent libtool-native bison-native expat" -RDEPENDS:${PN} = "bash openssl-bin daemonize" - -S = "${WORKDIR}/git" - -EXTRA_OECONF = "--with-libexpat=${STAGING_EXECPREFIXDIR} \ - --with-ssl=${STAGING_EXECPREFIXDIR} \ - libtool=${HOST_SYS}-libtool \ -" - - -PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'largefile systemd', d)}" -PACKAGECONFIG[dnscrypt] = "--enable-dnscrypt, --disable-dnscrypt, libsodium" -PACKAGECONFIG[largefile] = "--enable-largefile,--disable-largefile,," -PACKAGECONFIG[systemd] = "--enable-systemd,--disable-systemd,systemd" - -do_install:append() { - install -d ${D}${systemd_unitdir}/system - install -m 0644 ${B}/contrib/unbound.service ${D}${systemd_unitdir}/system - - install -d ${D}${sysconfdir}/init.d - install -m 0755 ${S}/contrib/unbound.init ${D}${sysconfdir}/init.d/unbound -} - -SYSTEMD_SERVICE:${PN} = "${BPN}.service" - -INITSCRIPT_NAME = "unbound" -INITSCRIPT_PARAMS = "defaults" diff --git a/meta-networking/recipes-support/unbound/unbound_1.13.2.bb b/meta-networking/recipes-support/unbound/unbound_1.13.2.bb new file mode 100644 index 0000000000..17f750c5f1 --- /dev/null +++ b/meta-networking/recipes-support/unbound/unbound_1.13.2.bb @@ -0,0 +1,46 @@ +SUMMARY = "Unbound is a validating, recursive, and caching DNS resolver" +DESCRIPTION = "Unbound's design is a set of modular components which incorporate \ + features including enhanced security (DNSSEC) validation, Internet Protocol \ + Version 6 (IPv6), and a client resolver library API as an integral part of the \ + architecture" + +HOMEPAGE = "https://www.unbound.net/" +SECTION = "net" +LICENSE = "BSD-3-Clause" +LIC_FILES_CHKSUM = "file://LICENSE;md5=5308494bc0590c0cb036afd781d78f06" + +SRC_URI = "git://github.com/NLnetLabs/unbound.git;protocol=http;branch=master \ + file://0001-contrib-add-yocto-compatible-init-script.patch \ +" +SRCREV = "8e538dcaa8df2d0fab8ff3dcf94ac1f972450b66" + +inherit autotools pkgconfig systemd update-rc.d + +DEPENDS = "openssl libevent libtool-native bison-native expat" +RDEPENDS:${PN} = "bash openssl-bin daemonize" + +S = "${WORKDIR}/git" + +EXTRA_OECONF = "--with-libexpat=${STAGING_EXECPREFIXDIR} \ + --with-ssl=${STAGING_EXECPREFIXDIR} \ + libtool=${HOST_SYS}-libtool \ +" + + +PACKAGECONFIG ??= "${@bb.utils.filter('DISTRO_FEATURES', 'largefile systemd', d)}" +PACKAGECONFIG[dnscrypt] = "--enable-dnscrypt, --disable-dnscrypt, libsodium" +PACKAGECONFIG[largefile] = "--enable-largefile,--disable-largefile,," +PACKAGECONFIG[systemd] = "--enable-systemd,--disable-systemd,systemd" + +do_install:append() { + install -d ${D}${systemd_unitdir}/system + install -m 0644 ${B}/contrib/unbound.service ${D}${systemd_unitdir}/system + + install -d ${D}${sysconfdir}/init.d + install -m 0755 ${S}/contrib/unbound.init ${D}${sysconfdir}/init.d/unbound +} + +SYSTEMD_SERVICE:${PN} = "${BPN}.service" + +INITSCRIPT_NAME = "unbound" +INITSCRIPT_PARAMS = "defaults" -- cgit 1.2.3-korg