Created attachment 220676 [details] Update PowerDNS Recursor to 4.4.2 Release notes: This release fixes a bug where the wrong type could be used while verifying DNSSEC signatures, causing domains to be incorrectly marked as Bogus. Additionally, the recursor no longer resolves unneeded names when chasing CNAME records if QName Minimization is enabled. The recursor now also logs more detailed information if a name is found to be Bogus during DNSSEC validation. Q&A: testport: builds OK (amd64; 12.2-RELEASE) portlint: OK (1 warning about pkg-plist length)
Build and package info is available at https://gitlab.com/swills/freebsd-ports/pipelines/231548418
Created attachment 220687 [details] Update PowerDNS Recursor to 4.4.2 and don't link to libsodium unconditionally Added the same fix as in dns/powerdns to set --with-libsodium=no on FreeBSD 12.0+
Created attachment 220689 [details] Update PowerDNS Recursor to 4.4.2 and don't link to libsodium unconditionally (and change --enable... to --with...) Sorry for missing the change from --enable-xxx to --with-xxx. It's early and my headache doesn't help.
Differential Revision: https://reviews.freebsd.org/D27679
A commit references this bug: Author: otis Date: Sat Dec 19 14:58:28 UTC 2020 New revision: 558454 URL: https://svnweb.freebsd.org/changeset/ports/558454 Log: dns/powerdns-recursor: Update to 4.4.2 - Improvements: - Use the non-cryptographic variant of the boost::uuid. - Keep a cached, valid entry over a fresher Bogus one. - Ensure socket-dir matches runtime directory on old systemd - Move to several distinct Bogus states, for easier debugging. - Do not chase CNAME during qname minimization step 4. - Bug Fixes: - Untangle the validation/resolving qnames and qtypes. - APL records: fix endianness problem. PR: 251923 Submitted by: Ralf van der Enden (maintainer) Reviewed by: osa (mentor) Approved by: osa (mentor) Differential Revision: https://reviews.freebsd.org/D27679 Changes: head/dns/powerdns-recursor/Makefile head/dns/powerdns-recursor/distinfo