Bug 282183 - dns/unbound Update to 1.22.0_1
Summary: dns/unbound Update to 1.22.0_1
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Many People
Assignee: Rodrigo Osorio
URL: https://nlnetlabs.nl/news/2024/Oct/17...
Keywords:
Depends on:
Blocks:
 
Reported: 2024-10-18 19:45 UTC by Jaap Akkerhuis
Modified: 2024-10-20 15:15 UTC (History)
2 users (show)

See Also:


Attachments
patch to fis unbound (756 bytes, application/mbox)
2024-10-18 19:45 UTC, Jaap Akkerhuis
jaap: maintainer-approval+
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Jaap Akkerhuis 2024-10-18 19:45:46 UTC
Created attachment 254344 [details]
patch to fis unbound

Correction to patch in bug #282172

There was a line missing in the Makefile for the port.
The next patch correct this and restores DNS over QUIC and HTTPS

Thanks to Herbert J. Skuhra for noticing
Comment 1 commit-hook freebsd_committer freebsd_triage 2024-10-18 20:36:51 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=23b8a311cb2db6336101362521b7f970be90534f

commit 23b8a311cb2db6336101362521b7f970be90534f
Author:     Rodrigo Osorio <rodrigo@FreeBSD.org>
AuthorDate: 2024-10-18 20:24:38 +0000
Commit:     Rodrigo Osorio <rodrigo@FreeBSD.org>
CommitDate: 2024-10-18 20:33:31 +0000

    dns/unbound: restores DNS over QUIC and HTTPS

    There was a line missing in the Makefile for the port.
    This commit correct it and restores DNS over QUIC and HTTPS

    PR:             282183
    Reported by:    Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)

 dns/unbound/Makefile | 2 ++
 1 file changed, 2 insertions(+)
Comment 2 Rodrigo Osorio freebsd_committer freebsd_triage 2024-10-18 20:37:37 UTC
committed, thanks
Comment 3 Herbert J. Skuhra 2024-10-20 15:15:31 UTC
1. The port builds/works fine without libnghttp2. There is no reason to enforce it, is there?
2. https://unbound.docs.nlnetlabs.nl/en/latest/topics/privacy/dns-over-quic.html#libraries

Unbound uses libngtcp2 for DNS over QUIC. This in turn requires a modified openssl library for quic support in the encryption for the quic transport. The modified openssl library is called openssl+quic. It is available for openssl versions 1.1.1 and 3.2.0, and so on.

The port doesn't use libngtcp2 (net/libngtcp2) and security/openssl(31)-quictls. So how does the commit restore "DNS over QUIC)?