Hello community, here is the log from the commit of package bind for openSUSE:Factory checked in at 2014-06-05 10:49:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/bind (Old) and /work/SRC/openSUSE:Factory/.bind.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "bind" Changes: -------- --- /work/SRC/openSUSE:Factory/bind/bind.changes 2014-05-22 20:37:51.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.bind.new/bind.changes 2014-06-05 10:49:44.000000000 +0200 @@ -1,0 +2,11 @@ +Sun Jun 1 13:30:10 UTC 2014 - [email protected] + +- add stuff for DNSSEC validation to named.conf + * dnssec-enable, dnssec-validation + +------------------------------------------------------------------- +Sun May 25 17:24:21 UTC 2014 - [email protected] + +- Build with LFS_CFLAGS in 32 bit systems. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ bind.spec ++++++ --- /var/tmp/diff_new_pack.BCBEDc/_old 2014-06-05 10:49:46.000000000 +0200 +++ /var/tmp/diff_new_pack.BCBEDc/_new 2014-06-05 10:49:46.000000000 +0200 @@ -254,7 +254,7 @@ #%{__aclocal} #%{__autoconf} #popd -export CFLAGS="$RPM_OPT_FLAGS -DNO_VERSION_DATE -fno-strict-aliasing" LDFLAGS="-L%{_libdir}" +export CFLAGS="$RPM_OPT_FLAGS -DNO_VERSION_DATE -fno-strict-aliasing $(getconf LFS_CFLAGS)" LDFLAGS="-L%{_libdir}" #export CFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing -DLDAP_DEPRECATED" LDFLAGS="-L%{_libdir}" #export CFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing -fpie" LDFLAGS="-L%{_libdir} -pie" CONFIGURE_OPTIONS="\ ++++++ vendor-files.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor-files/config/named.conf new/vendor-files/config/named.conf --- old/vendor-files/config/named.conf 2012-01-03 11:52:45.000000000 +0100 +++ new/vendor-files/config/named.conf 2014-06-01 15:29:46.000000000 +0200 @@ -19,6 +19,26 @@ # The directory statement defines the name server's working directory directory "/var__NSD__/named"; + + # enable DNSSEC validation + # + # If BIND logs error messages about the root key being expired, you + # will need to update your keys. See https://www.isc.org/bind-keys + # + # dnssec-enable yes (default), indicates that a secure DNS service + # is being used which may be one, or more, of TSIG + # (for securing zone transfers or DDNS updates), SIG(0) + # (for securing DDNS updates) or DNSSEC. + + #dnssec-enable yes; + + # dnssec-validation yes (default), indicates that a resolver + # (a caching or caching-only name server) will attempt to validate + # replies from DNSSEC enabled (signed) zones. To perform this task + # the server also needs either a valid trusted-keys clause + # (containing one or more trusted-anchors or a managed-keys clause. + + #dnssec-validation auto; managed-keys-directory "/var__NSD__/named/dyn/"; # Write dump and statistics file to the log subdirectory. The -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
