[bugfix] allow DoT to work for dig from net/isc-bind

dig needs to access /etc/ssl/cert.pem, so add an unveil(). Index: Makefile === RCS file: /home/cvs/ports/net/isc-bind/Makefile,v diff -u -p -r1.199 Makefile --- Makefile19 Mar 2025 13:56:14 - 1.199 +++ Makefile20

Re: net/isc-bind segfaults after updating to 9.16.11 on 6.8

> On 25. Feb 2021, at 17:35, Stuart Henderson wrote: > > great, thanks for tracking that down Christian. > > I'm going to backport the commit that fixed that to 9.16.11, things > have been a real mess with the last couple of releases. Annoyingly > there have been security fixes mixed in with

Re: net/isc-bind segfaults after updating to 9.16.11 on 6.8

great, thanks for tracking that down Christian. I'm going to backport the commit that fixed that to 9.16.11, things have been a real mess with the last couple of releases. Annoyingly there have been security fixes mixed in with a stack of other changes that I am quite surprised have been made on w

Re: net/isc-bind segfaults after updating to 9.16.11 on 6.8

> On 24. Feb 2021, at 22:41, Stuart Henderson wrote: > > On 2021/02/24 15:29, Christian Gut wrote: >> >> Hi Ports, >> >> I am using OpenBSD 6.8. I just updated bind from isc-bind-9.16.9v0 to >> isc-bind-9.16.11v0. This was the corresponding change in CVS: >> https://marc.info/?l=openbsd-po

Re: net/isc-bind segfaults after updating to 9.16.11 on 6.8

On 2021/02/24 15:29, Christian Gut wrote: > > Hi Ports, > > I am using OpenBSD 6.8. I just updated bind from isc-bind-9.16.9v0 to > isc-bind-9.16.11v0. This was the corresponding change in CVS: > https://marc.info/?l=openbsd-ports-cvs&m=161383675808055&w=2 >

net/isc-bind segfaults after updating to 9.16.11 on 6.8

Hi Ports, I am using OpenBSD 6.8. I just updated bind from isc-bind-9.16.9v0 to isc-bind-9.16.11v0. This was the corresponding change in CVS: https://marc.info/?l=openbsd-ports-cvs&m=161383675808055&w=2 After that update, bind se

Re: net/isc-bind: configure: WARNING: unrecognized options?

On 2020/04/19 11:06, Claus Assmann wrote: > I'm probably doing something wrong, but just in case: > these warnings where displayed when I ran > make > in ports/net/isc-bind/ > > configure: WARNING: unrecognized options: --enable-filter-, > --enable-threads, --with-r

net/isc-bind: configure: WARNING: unrecognized options?

I'm probably doing something wrong, but just in case: these warnings where displayed when I ran make in ports/net/isc-bind/ configure: WARNING: unrecognized options: --enable-filter-, --enable-threads, --with-randomdev, --disable-silent-rules, --disable-gtk-doc Maybe those options are

net/isc-bind 9.15.8 update, tests wanted from BIND users

Index: Makefile === RCS file: /cvs/ports/net/isc-bind/Makefile,v retrieving revision 1.109 diff -u -p -r1.109 Makefile --- Makefile23 Jan 2020 22:08:08 - 1.109 +++ Makefile23 Jan 2020 22:11:17 - @@ -5,9 +5,9 @@ COMMENT=Berkele

Re: net/isc-bind

On 2015/05/15 23:26, Mark Kettenis wrote: > Use $CC to link shared library to make sure crtbeginS.o gets linked in. > > Guess the configure.in patch isn't really needed, but good for > completeness. What's the policy here? Generally it's preferred to patch only the input file/s (leave the genera

net/isc-bind

: Makefile === RCS file: /cvs/ports/net/isc-bind/Makefile,v retrieving revision 1.39 diff -u -p -r1.39 Makefile --- Makefile14 Mar 2015 22:26:21 - 1.39 +++ Makefile15 May 2015 21:23:10 - @@ -3,7 +3,7 @@ COMMENT= Berkeley Internet N

Re: new, net/isc-bind

On 2012/07/19 10:04, Giovanni Bechis wrote: > On Wed, Jul 18, 2012 at 04:28:26PM +0100, Stuart Henderson wrote: > > Updated following feedback from giovanni@. > > > > - use LOCALSTATEDIR rather than hardcoded /var. > > > added more LOCALSTATEDIR substitutions Thanks. (not that anyone's going to

Re: new, net/isc-bind

On Wed, Jul 18, 2012 at 04:28:26PM +0100, Stuart Henderson wrote: > Updated following feedback from giovanni@. > > - use LOCALSTATEDIR rather than hardcoded /var. > added more LOCALSTATEDIR substitutions I noticed that at startup I have this line in my log files: "the working directory is not wr

Re: new, net/isc-bind

Updated following feedback from giovanni@. - use LOCALSTATEDIR rather than hardcoded /var. - provide default daemon_flags ("-t ${LOCALSTATEDIR}/named" to chroot by default, "-u named" is the default anyway but I think it makes sense to spell it out explicitly here). - add rc_pre() section based

Re: new, net/isc-bind

On 2012/07/10 13:17, Stuart Henderson wrote: > here's a port of bind 9.9.1-P1, for people who need features not in > either unbound nor named in base (e.g. DNS64). note there is *not* a > sample config file, I didn't identify a suitable one in the tarball, > maybe I'll add one in ${FILESDIR}, but I

new, net/isc-bind

here's a port of bind 9.9.1-P1, for people who need features not in either unbound nor named in base (e.g. DNS64). note there is *not* a sample config file, I didn't identify a suitable one in the tarball, maybe I'll add one in ${FILESDIR}, but I think that can come later. comments? OK? isc-bi