From e977454e8fed2d68adcee20f155d1497989a467a Mon Sep 17 00:00:00 2001 From: Jan Vcelak Date: Thu, 5 May 2016 14:18:06 +0200 Subject: [PATCH 001/126] package import --- .gitignore | 1 + config | 23 ++++++++ knot-resolver.spec | 136 +++++++++++++++++++++++++++++++++++++++++++++ kresd.service | 11 ++++ root.keys | 1 + sources | 1 + 6 files changed, 173 insertions(+) create mode 100644 config create mode 100644 knot-resolver.spec create mode 100644 kresd.service create mode 100644 root.keys diff --git a/.gitignore b/.gitignore index e69de29..a81dd0d 100644 --- a/.gitignore +++ b/.gitignore @@ -0,0 +1 @@ +/knot-resolver-*.tar.xz diff --git a/config b/config new file mode 100644 index 0000000..805b719 --- /dev/null +++ b/config @@ -0,0 +1,23 @@ +-- vim:syntax=lua: +-- Refer to manual: http://knot-resolver.readthedocs.org/en/latest/daemon.html#configuration + +-- Listen on local interfaces +net = { '127.0.0.1', '::1' } + +-- Drop root privileges (unprivileged after this point) +user('kresd', 'kresd') + +-- DNSSEC root TA +trust_anchors.file = 'root.keys' + +-- Load useful modules +modules = { + 'policy', -- Block queries to local zones/bad sites + 'cachectl', -- Cache control interface + 'hints', -- Load /etc/hosts and allow custom root hints + 'stats', -- Track internal statistics + 'predict', -- Prefetch expiring/frequent records +} + +-- Cache size +cache.size = 100 * MB diff --git a/knot-resolver.spec b/knot-resolver.spec new file mode 100644 index 0000000..40df8eb --- /dev/null +++ b/knot-resolver.spec @@ -0,0 +1,136 @@ +%global _hardened_build 1 +%global alphatag 4f463d7 + +Name: knot-resolver +Version: 1.0.0 +Release: 0.3.%{alphatag}%{?dist} +Summary: Caching full DNS Resolver + +License: GPLv3 +URL: https://www.knot-resolver.cz/ +# No tarballs have been published by the upstream yet. +# $ git clone https://gitlab.labs.nic.cz/knot/resolver.git knot-resolver +# $ cd knot-resolver +# $ git archive --format tar --prefix knot-resolver-1.0.0-alphatag/ alphatag | xz > knot-resolver-1.0.0-alphatag.tar.xz +Source0: knot-resolver-%{version}-%{alphatag}.tar.xz +Source1: kresd.service +Source2: config +Source3: root.keys + +BuildRequires: pkgconfig(libknot) >= 2.1 +BuildRequires: pkgconfig(libzscanner) +BuildRequires: pkgconfig(libdnssec) +BuildRequires: pkgconfig(libuv) >= 1.0 +BuildRequires: pkgconfig(luajit) + +BuildRequires: pkgconfig(libmemcached) >= 1.0 +BuildRequires: pkgconfig(hiredis) + +BuildRequires: pkgconfig(cmocka) +BuildRequires: pkgconfig(socket_wrapper) + +BuildRequires: systemd +# FIXME: documentation fails to build on Fedora 23 +#BuildRequires: doxygen +#BuildRequires: breathe +#BuildRequires: python-sphinx +#BuildRequires: python-sphinx_rtd_theme + +Requires(pre): shadow-utils +Requires(post): systemd +Requires(preun): systemd +Requires(postun): systemd + +%description +The Knot DNS Resolver is a caching full resolver implementation written in C +and LuaJIT, including both a resolver library and a daemon. Modular +architecture of the library keeps the core tiny and efficient, and provides +a state-machine like API for extensions. + +%package devel +Summary: Development headers for Knot DNS Resolver +Requires: %{name}%{?_isa} = %{version}-%{release} + +%description devel +The package contains development headers for Knot DNS Resolver. + +%prep +%setup -q -n %{name}-%{version}-%{alphatag} +rm -v scripts/bootstrap-depends.sh + +%build +%global build_paths PREFIX=%{_prefix} BINDIR=%{_bindir} LIBDIR=%{_libdir} INCLUDEDIR=%{_includedir} ETCDIR=%{_sysconfdir}/kresd +%global build_flags V=1 CFLAGS="%{optflags}" LDFLAGS="%{__global_ldflags}" %{build_paths} HAS_go=no + +make %{?_smp_mflags} %{build_flags} + +%install +%make_install %{build_flags} + +# move sample configuration files to documentation +install -m 0755 -d %{buildroot}%{_pkgdocdir} +mv %{buildroot}%{_sysconfdir}/kresd/config.* %{buildroot}%{_pkgdocdir} +chmod 0644 %{buildroot}%{_pkgdocdir}/config.* + +# install service +mkdir -p %{buildroot}%{_unitdir} +install -m 0644 -p %SOURCE1 %{buildroot}%{_unitdir}/kresd.service + +# install configuration file +install -m 0644 -p %SOURCE2 %{buildroot}%{_sysconfdir}/kresd/config + +# remove ICANN key +rm %{buildroot}%{_sysconfdir}/kresd/icann-ca.pem + +# create working directory +install -m 0755 -d %{buildroot}%{_sharedstatedir}/kresd +install -m 0644 -p %SOURCE3 %{buildroot}%{_sharedstatedir}/kresd/root.keys + +%check +LD_PRELOAD=lib/libkres.so make check %{build_flags} LDFLAGS="%{__global_ldflags} -ldl" + +%pre +getent group kresd >/dev/null || groupadd -r kresd +getent passwd kresd >/dev/null || useradd -r -g kresd -d %{_sysconfdir}/kresd -s /sbin/nologin -c "Knot DNS Resolver" kresd +exit 0 + +%post +%systemd_post kresd.service +/sbin/ldconfig + +%preun +%systemd_preun kresd.service + +%postun +%systemd_postun_with_restart kresd.service +/sbin/ldconfig + +%files +%license COPYING +%doc %{_pkgdocdir} +%attr(755,root,kresd) %dir %{_sysconfdir}/kresd +%attr(644,root,kresd) %config(noreplace) %{_sysconfdir}/kresd/config +%{_unitdir}/kresd.service +%{_bindir}/kresd +%{_libdir}/libkres.so.* +%{_libdir}/kdns_modules +%attr(755,kresd,kresd) %dir %{_sharedstatedir}/kresd +%attr(644,kresd,kresd) %config(noreplace) %{_sharedstatedir}/kresd/root.keys +%{_mandir}/man8/kresd.* + +%files devel +%{_includedir}/libkres +%{_libdir}/pkgconfig/libkres.pc +%{_libdir}/libkres.so + +%changelog +* Thu May 05 2016 Jan Vcelak - 1.0.0-0.3.4f463d7 +- update to latest git version +- re-enable unit-test + +* Sat Apr 09 2016 Jan Vcelak - 1.0.0-0.2.79a8440 +- update to latest git version +- fix package review issues + +* Tue Feb 02 2016 Jan Vcelak - 1.0.0-0.1.beta3 +- initial package diff --git a/kresd.service b/kresd.service new file mode 100644 index 0000000..360fb99 --- /dev/null +++ b/kresd.service @@ -0,0 +1,11 @@ +[Unit] +Description=Knot DNS Resolver daemon +After=network.target + +[Service] +Type=simple +ExecStart=/usr/bin/kresd -f1 -c /etc/kresd/config /var/lib/kresd +Restart=on-abort + +[Install] +WantedBy=multi-user.target diff --git a/root.keys b/root.keys new file mode 100644 index 0000000..aeadb85 --- /dev/null +++ b/root.keys @@ -0,0 +1 @@ +. 11579 IN TYPE48 \# 264 0101030803010001A80020A95566BA42E886BB804CDA84E47EF56DBD7AEC612615552CEC906D2116D0EF207028C51554144DFEAFE7C7CB8F005DD18234133AC0710A81182CE1FD14AD2283BC83435F9DF2F6313251931A176DF0DA51E54F42E604860DFB359580250F559CC543C4FFD51CBE3DE8CFD06719237F9FC47EE729DA06835FA452E825E9A18EBC2ECBCF563474652C33CF56A9033BCDF5D973121797EC8089041B6E03A1B72D0A735B984E03687309332324F27C2DBA85E9DB15E83A0143382E974B0621C18E625ECEC907577D9E7BADE95241A81EBBE8A901D4D3276E40B114C0A2E6FC38D19C2E6AAB02644B2813F575FC21601E0DEE49CD9EE96A43103E524D62873D ; Valid diff --git a/sources b/sources index e69de29..a906d53 100644 --- a/sources +++ b/sources @@ -0,0 +1 @@ +e1822adce9ae65cf853d53e128285bb4 knot-resolver-1.0.0-4f463d7.tar.xz From c865a09bfc4bda3879517e10a280c1be68180c86 Mon Sep 17 00:00:00 2001 From: Jan Vcelak Date: Tue, 31 May 2016 11:12:14 +0200 Subject: [PATCH 002/126] final release --- knot-resolver.spec | 10 ++++++---- sources | 2 +- 2 files changed, 7 insertions(+), 5 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 40df8eb..a0cab37 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -1,9 +1,8 @@ %global _hardened_build 1 -%global alphatag 4f463d7 Name: knot-resolver Version: 1.0.0 -Release: 0.3.%{alphatag}%{?dist} +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -12,7 +11,7 @@ URL: https://www.knot-resolver.cz/ # $ git clone https://gitlab.labs.nic.cz/knot/resolver.git knot-resolver # $ cd knot-resolver # $ git archive --format tar --prefix knot-resolver-1.0.0-alphatag/ alphatag | xz > knot-resolver-1.0.0-alphatag.tar.xz -Source0: knot-resolver-%{version}-%{alphatag}.tar.xz +Source0: knot-resolver-%{version}.tar.xz Source1: kresd.service Source2: config Source3: root.keys @@ -55,7 +54,7 @@ Requires: %{name}%{?_isa} = %{version}-%{release} The package contains development headers for Knot DNS Resolver. %prep -%setup -q -n %{name}-%{version}-%{alphatag} +%autosetup rm -v scripts/bootstrap-depends.sh %build @@ -124,6 +123,9 @@ exit 0 %{_libdir}/libkres.so %changelog +* Tue May 31 2016 Jan Vcelak - 1.0.0-1 +- final release + * Thu May 05 2016 Jan Vcelak - 1.0.0-0.3.4f463d7 - update to latest git version - re-enable unit-test diff --git a/sources b/sources index a906d53..ce1462b 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -e1822adce9ae65cf853d53e128285bb4 knot-resolver-1.0.0-4f463d7.tar.xz +096563b8a8bdeba081a412c9caec47cb knot-resolver-1.0.0.tar.xz From fd4eae67ecfede60cca0f0bdee16deae811512ac Mon Sep 17 00:00:00 2001 From: Jan Vcelak Date: Fri, 12 Aug 2016 23:52:18 +0200 Subject: [PATCH 003/126] new upstream release --- config | 12 ++----- knot-resolver.spec | 77 ++++++++++++++++++++++++++++++-------------- kresd-control.socket | 13 ++++++++ kresd-tls.socket | 12 +++++++ kresd.service | 14 +++++--- kresd.socket | 13 ++++++++ kresd.tmpfiles | 1 + sources | 2 +- 8 files changed, 103 insertions(+), 41 deletions(-) create mode 100644 kresd-control.socket create mode 100644 kresd-tls.socket create mode 100644 kresd.socket create mode 100644 kresd.tmpfiles diff --git a/config b/config index 805b719..bad2919 100644 --- a/config +++ b/config @@ -1,20 +1,12 @@ -- vim:syntax=lua: -- Refer to manual: http://knot-resolver.readthedocs.org/en/latest/daemon.html#configuration --- Listen on local interfaces -net = { '127.0.0.1', '::1' } - --- Drop root privileges (unprivileged after this point) -user('kresd', 'kresd') - --- DNSSEC root TA -trust_anchors.file = 'root.keys' +-- unmanaged DNSSEC root TA +trust_anchors.config('/etc/kresd/root.keys', true) -- Load useful modules modules = { 'policy', -- Block queries to local zones/bad sites - 'cachectl', -- Cache control interface - 'hints', -- Load /etc/hosts and allow custom root hints 'stats', -- Track internal statistics 'predict', -- Prefetch expiring/frequent records } diff --git a/knot-resolver.spec b/knot-resolver.spec index a0cab37..8ac0c8d 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -1,29 +1,32 @@ %global _hardened_build 1 Name: knot-resolver -Version: 1.0.0 +Version: 1.1.0 Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPLv3 URL: https://www.knot-resolver.cz/ -# No tarballs have been published by the upstream yet. -# $ git clone https://gitlab.labs.nic.cz/knot/resolver.git knot-resolver -# $ cd knot-resolver -# $ git archive --format tar --prefix knot-resolver-1.0.0-alphatag/ alphatag | xz > knot-resolver-1.0.0-alphatag.tar.xz -Source0: knot-resolver-%{version}.tar.xz -Source1: kresd.service -Source2: config -Source3: root.keys +Source0: https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz -BuildRequires: pkgconfig(libknot) >= 2.1 +Source1: config +Source2: root.keys + +Source100: kresd.service +Source101: kresd.socket +Source102: kresd-control.socket +Source103: kresd-tls.socket +Source104: kresd.tmpfiles + +BuildRequires: pkgconfig(libknot) >= 2.3 BuildRequires: pkgconfig(libzscanner) BuildRequires: pkgconfig(libdnssec) -BuildRequires: pkgconfig(libuv) >= 1.0 -BuildRequires: pkgconfig(luajit) +BuildRequires: pkgconfig(libuv) >= 1.7 +BuildRequires: pkgconfig(luajit) >= 2.0 BuildRequires: pkgconfig(libmemcached) >= 1.0 BuildRequires: pkgconfig(hiredis) +BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(cmocka) BuildRequires: pkgconfig(socket_wrapper) @@ -35,6 +38,9 @@ BuildRequires: systemd #BuildRequires: python-sphinx #BuildRequires: python-sphinx_rtd_theme +Requires: lua-socket +Requires: lua-sec + Requires(pre): shadow-utils Requires(post): systemd Requires(preun): systemd @@ -70,20 +76,29 @@ make %{?_smp_mflags} %{build_flags} install -m 0755 -d %{buildroot}%{_pkgdocdir} mv %{buildroot}%{_sysconfdir}/kresd/config.* %{buildroot}%{_pkgdocdir} chmod 0644 %{buildroot}%{_pkgdocdir}/config.* +rm -vr %{buildroot}%{_sysconfdir}/kresd -# install service +# install configuration files +mkdir -p %{buildroot}%{_sysconfdir} +install -m 0755 -d %{buildroot}%{_sysconfdir}/kresd +install -m 0644 -p %SOURCE1 %{buildroot}%{_sysconfdir}/kresd/config +install -m 0644 -p %SOURCE2 %{buildroot}%{_sysconfdir}/kresd/root.keys + +# install systemd units mkdir -p %{buildroot}%{_unitdir} -install -m 0644 -p %SOURCE1 %{buildroot}%{_unitdir}/kresd.service +install -m 0644 -p %SOURCE100 %{buildroot}%{_unitdir}/kresd.service +install -m 0644 -p %SOURCE101 %{buildroot}%{_unitdir}/kresd.socket +install -m 0644 -p %SOURCE102 %{buildroot}%{_unitdir}/kresd-control.socket +install -m 0644 -p %SOURCE103 %{buildroot}%{_unitdir}/kresd-tls.socket -# install configuration file -install -m 0644 -p %SOURCE2 %{buildroot}%{_sysconfdir}/kresd/config +# install tmpfiles.d +mkdir -p %{buildroot}%{_tmpfilesdir} +install -m 0644 -p %SOURCE104 %{buildroot}%{_tmpfilesdir}/kresd.conf +mkdir -p %{buildroot}%{_rundir} +install -m 0750 -d %{buildroot}%{_rundir}/kresd -# remove ICANN key -rm %{buildroot}%{_sysconfdir}/kresd/icann-ca.pem - -# create working directory -install -m 0755 -d %{buildroot}%{_sharedstatedir}/kresd -install -m 0644 -p %SOURCE3 %{buildroot}%{_sharedstatedir}/kresd/root.keys +# remove module with unsatisfied dependencies +rm -r %{buildroot}%{_libdir}/kdns_modules/{http,http.lua} %check LD_PRELOAD=lib/libkres.so make check %{build_flags} LDFLAGS="%{__global_ldflags} -ldl" @@ -109,12 +124,14 @@ exit 0 %doc %{_pkgdocdir} %attr(755,root,kresd) %dir %{_sysconfdir}/kresd %attr(644,root,kresd) %config(noreplace) %{_sysconfdir}/kresd/config +%attr(644,root,kresd) %config(noreplace) %{_sysconfdir}/kresd/root.keys +%attr(750,kresd,kresd) %dir %{_rundir}/kresd %{_unitdir}/kresd.service -%{_bindir}/kresd +%{_unitdir}/kresd*.socket +%{_tmpfilesdir}/kresd.conf +%{_sbindir}/kresd %{_libdir}/libkres.so.* %{_libdir}/kdns_modules -%attr(755,kresd,kresd) %dir %{_sharedstatedir}/kresd -%attr(644,kresd,kresd) %config(noreplace) %{_sharedstatedir}/kresd/root.keys %{_mandir}/man8/kresd.* %files devel @@ -123,6 +140,16 @@ exit 0 %{_libdir}/libkres.so %changelog +* Fri Aug 12 2016 Jan Vcelak - 1.1.0-1 +- new upstream release: + + RFC7873 DNS Cookies + + RFC7858 DNS over TLS + + Metrics exported in Prometheus + + DNS firewall module + + Explicit CNAME target fetching in strict mode + + Query minimisation improvements + + Improved integration with systemd + * Tue May 31 2016 Jan Vcelak - 1.0.0-1 - final release diff --git a/kresd-control.socket b/kresd-control.socket new file mode 100644 index 0000000..6a671a1 --- /dev/null +++ b/kresd-control.socket @@ -0,0 +1,13 @@ +[Unit] +Description=Knot DNS Resolver control socket +Documentation=man:kresd(8) +Before=sockets.target + +[Socket] +ListenStream=/run/kresd/control +FileDescriptorName=control +Service=kresd.service +SocketMode=0660 + +[Install] +WantedBy=sockets.target diff --git a/kresd-tls.socket b/kresd-tls.socket new file mode 100644 index 0000000..ad696be --- /dev/null +++ b/kresd-tls.socket @@ -0,0 +1,12 @@ +[Unit] +Description=Knot DNS Resolver TLS network listener +Documentation=man:kresd(8) +Before=sockets.target + +[Socket] +ListenStream=853 +FileDescriptorName=tls +Service=kresd.service + +[Install] +WantedBy=sockets.target diff --git a/kresd.service b/kresd.service index 360fb99..ad5e009 100644 --- a/kresd.service +++ b/kresd.service @@ -1,11 +1,15 @@ [Unit] Description=Knot DNS Resolver daemon -After=network.target +Documentation=man:kresd(8) +## This is a socket-activated service: +RefuseManualStart=true [Service] -Type=simple -ExecStart=/usr/bin/kresd -f1 -c /etc/kresd/config /var/lib/kresd -Restart=on-abort +Type=notify +WorkingDirectory=/run/kresd +ExecStart=/usr/sbin/kresd -c /etc/kresd/config +User=kresd +Restart=on-failure [Install] -WantedBy=multi-user.target +WantedBy=sockets.target diff --git a/kresd.socket b/kresd.socket new file mode 100644 index 0000000..7d8953c --- /dev/null +++ b/kresd.socket @@ -0,0 +1,13 @@ +[Unit] +Description=Knot DNS Resolver network listeners +Documentation=man:kresd(8) +Before=sockets.target + +[Socket] +ListenStream=[::1]:53 +ListenDatagram=[::1]:53 +ListenStream=127.0.0.1:53 +ListenDatagram=127.0.0.1:53 + +[Install] +WantedBy=sockets.target diff --git a/kresd.tmpfiles b/kresd.tmpfiles new file mode 100644 index 0000000..b35429d --- /dev/null +++ b/kresd.tmpfiles @@ -0,0 +1 @@ +d /run/kresd 0750 kresd kresd - - diff --git a/sources b/sources index ce1462b..2735b26 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -096563b8a8bdeba081a412c9caec47cb knot-resolver-1.0.0.tar.xz +1f2d7d4e511a863459dc7dfd234f8e55 knot-resolver-1.1.0.tar.xz From 8c88fb476f57c856154b807f394e9d0503f61245 Mon Sep 17 00:00:00 2001 From: Jan Vcelak Date: Mon, 15 Aug 2016 13:18:38 +0200 Subject: [PATCH 004/126] weaken libuv dependency - libuv 1.7 is preferred for SO_REUSEPORT support - older libuv will work in single-process mode --- knot-resolver.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 8ac0c8d..fabfec5 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -21,7 +21,7 @@ Source104: kresd.tmpfiles BuildRequires: pkgconfig(libknot) >= 2.3 BuildRequires: pkgconfig(libzscanner) BuildRequires: pkgconfig(libdnssec) -BuildRequires: pkgconfig(libuv) >= 1.7 +BuildRequires: pkgconfig(libuv) BuildRequires: pkgconfig(luajit) >= 2.0 BuildRequires: pkgconfig(libmemcached) >= 1.0 From b6eb3baeb997e1b0951795017e24d377942d9a95 Mon Sep 17 00:00:00 2001 From: Jan Vcelak Date: Wed, 24 Aug 2016 14:55:24 +0200 Subject: [PATCH 005/126] new upstream release --- knot-resolver.spec | 6 +++++- sources | 2 +- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index fabfec5..cbb47ba 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -1,7 +1,7 @@ %global _hardened_build 1 Name: knot-resolver -Version: 1.1.0 +Version: 1.1.1 Release: 1%{?dist} Summary: Caching full DNS Resolver @@ -140,6 +140,10 @@ exit 0 %{_libdir}/libkres.so %changelog +* Wed Aug 24 2016 Jan Vcelak - 1.1.1-1 +- new upstream release: + + fix name server fallback in case some of the servers are unreachable + * Fri Aug 12 2016 Jan Vcelak - 1.1.0-1 - new upstream release: + RFC7873 DNS Cookies diff --git a/sources b/sources index 2735b26..5d4d293 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -1f2d7d4e511a863459dc7dfd234f8e55 knot-resolver-1.1.0.tar.xz +e4a81beeaac80c75395d0ac8bc67efcb knot-resolver-1.1.1.tar.xz From 360be183150233a1e0e50e328da9312edb725c8a Mon Sep 17 00:00:00 2001 From: Igor Gnatenko Date: Mon, 29 Aug 2016 16:47:50 +0200 Subject: [PATCH 006/126] Rebuild for LuaJIT 2.1.0 Signed-off-by: Igor Gnatenko --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index cbb47ba..046f12c 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,7 +2,7 @@ Name: knot-resolver Version: 1.1.1 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -140,6 +140,9 @@ exit 0 %{_libdir}/libkres.so %changelog +* Mon Aug 29 2016 Igor Gnatenko - 1.1.1-2 +- Rebuild for LuaJIT 2.1.0 + * Wed Aug 24 2016 Jan Vcelak - 1.1.1-1 - new upstream release: + fix name server fallback in case some of the servers are unreachable From 1efd2a2a8d61d2de8efd8dad13fc889fb8bb743b Mon Sep 17 00:00:00 2001 From: Peter Robinson Date: Sat, 19 Nov 2016 18:56:54 +0000 Subject: [PATCH 007/126] Add ExclusiveArch for architectures with LuaJIT --- knot-resolver.spec | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 046f12c..74a97c4 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,13 +2,16 @@ Name: knot-resolver Version: 1.1.1 -Release: 2%{?dist} +Release: 3%{?dist} Summary: Caching full DNS Resolver License: GPLv3 URL: https://www.knot-resolver.cz/ Source0: https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz +# LuaJIT only on these arches +ExclusiveArch: %{arm} aarch64 %{ix86} x86_64 + Source1: config Source2: root.keys @@ -140,6 +143,9 @@ exit 0 %{_libdir}/libkres.so %changelog +* Sat Nov 19 2016 Peter Robinson 1.1.1-3 +- Add ExclusiveArch for architectures with LuaJIT + * Mon Aug 29 2016 Igor Gnatenko - 1.1.1-2 - Rebuild for LuaJIT 2.1.0 From 71d146391afe76b8d1f5401e662bad0cf6b3b619 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Mon, 23 Jan 2017 20:34:49 +0100 Subject: [PATCH 008/126] Explain why docs cannot be build on Fedora 25 --- knot-resolver.spec | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 74a97c4..4027275 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -35,7 +35,8 @@ BuildRequires: pkgconfig(cmocka) BuildRequires: pkgconfig(socket_wrapper) BuildRequires: systemd -# FIXME: documentation fails to build on Fedora 23 +# FIXME: documentation fails to build on Fedora 25 +# https://bugzilla.redhat.com/show_bug.cgi?id=1333391 #BuildRequires: doxygen #BuildRequires: breathe #BuildRequires: python-sphinx From b26d73e7bbadf85ee02eb2015bcadc4c0941b098 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Mon, 23 Jan 2017 20:35:21 +0100 Subject: [PATCH 009/126] Correct Lua library depedencies so they work with LuaJIT 5.1 --- knot-resolver.spec | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 4027275..768e2bc 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -42,8 +42,8 @@ BuildRequires: systemd #BuildRequires: python-sphinx #BuildRequires: python-sphinx_rtd_theme -Requires: lua-socket -Requires: lua-sec +Requires: lua-socket-compat +Requires: lua-sec-compat Requires(pre): shadow-utils Requires(post): systemd From b2d48e4902fe05eef31cd213b9dc097fa5eeddf0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Mon, 23 Jan 2017 20:36:21 +0100 Subject: [PATCH 010/126] Use standard %make_build macro --- knot-resolver.spec | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 768e2bc..4cbc18d 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -70,8 +70,7 @@ rm -v scripts/bootstrap-depends.sh %build %global build_paths PREFIX=%{_prefix} BINDIR=%{_bindir} LIBDIR=%{_libdir} INCLUDEDIR=%{_includedir} ETCDIR=%{_sysconfdir}/kresd %global build_flags V=1 CFLAGS="%{optflags}" LDFLAGS="%{__global_ldflags}" %{build_paths} HAS_go=no - -make %{?_smp_mflags} %{build_flags} +%make_build %{build_flags} %install %make_install %{build_flags} From 35ce4ae900f397b9a15258f6a0936f9e8aba90b5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Mon, 23 Jan 2017 20:51:17 +0100 Subject: [PATCH 011/126] Update to 1.2.0-rc1 and fix trust anchor auto-update. Update to latest upstream version & allow automatic trust anchor management to work. --- config | 2 +- knot-resolver.spec | 28 ++++++++++++++++++---------- 2 files changed, 19 insertions(+), 11 deletions(-) diff --git a/config b/config index bad2919..edf2e97 100644 --- a/config +++ b/config @@ -2,7 +2,7 @@ -- Refer to manual: http://knot-resolver.readthedocs.org/en/latest/daemon.html#configuration -- unmanaged DNSSEC root TA -trust_anchors.config('/etc/kresd/root.keys', true) +trust_anchors.config('/etc/kresd/root.keys', nil) -- Load useful modules modules = { diff --git a/knot-resolver.spec b/knot-resolver.spec index 4cbc18d..9ddf784 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -1,19 +1,22 @@ %global _hardened_build 1 +# comment out this define using #%% if it is not a pre-release version +%define PRERELEASE rc1 Name: knot-resolver -Version: 1.1.1 -Release: 3%{?dist} +Version: 1.2.0 +Release: %{PRERELEASE}%{?PRERELEASE:.}1%{?dist} Summary: Caching full DNS Resolver License: GPLv3 URL: https://www.knot-resolver.cz/ -Source0: https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz +Source0: https://secure.nic.cz/files/%{name}/%{name}-%{version}%{?PRERELEASE:-}%{PRERELEASE}.tar.xz +Source1: https://secure.nic.cz/files/%{name}/%{name}-%{version}%{?PRERELEASE:-}%{PRERELEASE}.tar.xz.asc # LuaJIT only on these arches ExclusiveArch: %{arm} aarch64 %{ix86} x86_64 -Source1: config -Source2: root.keys +Source2: config +Source3: root.keys Source100: kresd.service Source101: kresd.socket @@ -64,7 +67,7 @@ Requires: %{name}%{?_isa} = %{version}-%{release} The package contains development headers for Knot DNS Resolver. %prep -%autosetup +%setup -n %{name}-%{version}%{?PRERELEASE:-}%{PRERELEASE} rm -v scripts/bootstrap-depends.sh %build @@ -84,8 +87,8 @@ rm -vr %{buildroot}%{_sysconfdir}/kresd # install configuration files mkdir -p %{buildroot}%{_sysconfdir} install -m 0755 -d %{buildroot}%{_sysconfdir}/kresd -install -m 0644 -p %SOURCE1 %{buildroot}%{_sysconfdir}/kresd/config -install -m 0644 -p %SOURCE2 %{buildroot}%{_sysconfdir}/kresd/root.keys +install -m 0644 -p %SOURCE2 %{buildroot}%{_sysconfdir}/kresd/config +install -m 0664 -p %SOURCE3 %{buildroot}%{_sysconfdir}/kresd/root.keys # install systemd units mkdir -p %{buildroot}%{_unitdir} @@ -125,9 +128,9 @@ exit 0 %files %license COPYING %doc %{_pkgdocdir} -%attr(755,root,kresd) %dir %{_sysconfdir}/kresd +%attr(775,root,kresd) %dir %{_sysconfdir}/kresd %attr(644,root,kresd) %config(noreplace) %{_sysconfdir}/kresd/config -%attr(644,root,kresd) %config(noreplace) %{_sysconfdir}/kresd/root.keys +%attr(664,root,kresd) %config(noreplace) %{_sysconfdir}/kresd/root.keys %attr(750,kresd,kresd) %dir %{_rundir}/kresd %{_unitdir}/kresd.service %{_unitdir}/kresd*.socket @@ -143,6 +146,11 @@ exit 0 %{_libdir}/libkres.so %changelog +* Mon Jan 23 2017 Petr Spacek - 1.2.0-rc1 +- Update to latest upstream version +- Fix packaging bug: depend on proper Lua library versions +- Allow automatic trust anchor management to work + * Sat Nov 19 2016 Peter Robinson 1.1.1-3 - Add ExclusiveArch for architectures with LuaJIT From b8017605a5ee600f7dc643f1a9767f1e13572397 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Tue, 24 Jan 2017 13:42:11 +0100 Subject: [PATCH 012/126] Update to 1.2.0-rc3 --- knot-resolver.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 9ddf784..d4d466e 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -1,7 +1,7 @@ %global _hardened_build 1 # comment out this define using #%% if it is not a pre-release version -%define PRERELEASE rc1 +%define PRERELEASE rc3 Name: knot-resolver Version: 1.2.0 Release: %{PRERELEASE}%{?PRERELEASE:.}1%{?dist} From c235144a0ef10a8640c7536c7ee1200c1db5bbd5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Tue, 24 Jan 2017 14:17:44 +0100 Subject: [PATCH 013/126] Mention usage instructions in package description. --- knot-resolver.spec | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/knot-resolver.spec b/knot-resolver.spec index d4d466e..2eeaedf 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -59,6 +59,14 @@ and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. +The package is pre-configured as local caching resolver. +To start using it, just start the local DNS socket: +# systemctl start kresd.socket + +BEWARE: +Because of https://bugzilla.redhat.com/show_bug.cgi?id=1366968 +you need to switch your system SELinux permissive mode. + %package devel Summary: Development headers for Knot DNS Resolver Requires: %{name}%{?_isa} = %{version}-%{release} From 533f8c0ba5468b4ecff00244cae67d0bd00f9e89 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Tue, 24 Jan 2017 15:07:31 +0100 Subject: [PATCH 014/126] Upload 1.2.0-rc3 sources to Fedora lookaside cache. --- .gitignore | 1 + sources | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/.gitignore b/.gitignore index a81dd0d..c71e8e6 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1,2 @@ /knot-resolver-*.tar.xz +/knot-resolver-1.2.0-rc3.tar.xz.asc diff --git a/sources b/sources index 5d4d293..745ee6e 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -e4a81beeaac80c75395d0ac8bc67efcb knot-resolver-1.1.1.tar.xz +SHA512 (knot-resolver-1.2.0-rc3.tar.xz) = 5e23216cd8caeee33ac81e99e7bc4d51b6c9ecb679721b99d55d20bedc0178e642da64bfd4aa14f2b007c7d4b122e74f1c5e8fb18a2d6eb9e8cbb51f72319804 From 1071f3600dc3320d775e64d87b13f60aca09aeed Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Tue, 24 Jan 2017 15:12:09 +0100 Subject: [PATCH 015/126] Add PGP signature for the new sources to Fedora lookaside cache. --- sources | 1 + 1 file changed, 1 insertion(+) diff --git a/sources b/sources index 745ee6e..07b40c3 100644 --- a/sources +++ b/sources @@ -1 +1,2 @@ SHA512 (knot-resolver-1.2.0-rc3.tar.xz) = 5e23216cd8caeee33ac81e99e7bc4d51b6c9ecb679721b99d55d20bedc0178e642da64bfd4aa14f2b007c7d4b122e74f1c5e8fb18a2d6eb9e8cbb51f72319804 +SHA512 (knot-resolver-1.2.0-rc3.tar.xz.asc) = b314a343f8871f1378979c7c6de3ea6b73cb50bd4805f0fb8ef855598eb1c34f684c5d66fe2618d2cf4623dbe05bd0cb513c23191dc5e170bb95ec4f0f3172cb From 1f4067afcdb45618737b6af282a229bf906b6a6d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Fri, 27 Jan 2017 20:28:01 +0100 Subject: [PATCH 016/126] Update to 1.2.0 --- .gitignore | 1 + knot-resolver.spec | 26 ++++++++++++++++++++------ sources | 4 ++-- 3 files changed, 23 insertions(+), 8 deletions(-) diff --git a/.gitignore b/.gitignore index c71e8e6..00babab 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,3 @@ /knot-resolver-*.tar.xz /knot-resolver-1.2.0-rc3.tar.xz.asc +/knot-resolver-1.2.0.tar.xz.asc diff --git a/knot-resolver.spec b/knot-resolver.spec index 2eeaedf..1fe5428 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -1,16 +1,16 @@ %global _hardened_build 1 # comment out this define using #%% if it is not a pre-release version -%define PRERELEASE rc3 +# %% define PRERELEASE rc3 Name: knot-resolver Version: 1.2.0 -Release: %{PRERELEASE}%{?PRERELEASE:.}1%{?dist} +Release: %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist} Summary: Caching full DNS Resolver License: GPLv3 URL: https://www.knot-resolver.cz/ -Source0: https://secure.nic.cz/files/%{name}/%{name}-%{version}%{?PRERELEASE:-}%{PRERELEASE}.tar.xz -Source1: https://secure.nic.cz/files/%{name}/%{name}-%{version}%{?PRERELEASE:-}%{PRERELEASE}.tar.xz.asc +Source0: https://secure.nic.cz/files/%{name}/%{name}-%{version}%{?PRERELEASE:-}%{?PRERELEASE}.tar.xz +Source1: https://secure.nic.cz/files/%{name}/%{name}-%{version}%{?PRERELEASE:-}%{?PRERELEASE}.tar.xz.asc # LuaJIT only on these arches ExclusiveArch: %{arm} aarch64 %{ix86} x86_64 @@ -65,7 +65,7 @@ To start using it, just start the local DNS socket: BEWARE: Because of https://bugzilla.redhat.com/show_bug.cgi?id=1366968 -you need to switch your system SELinux permissive mode. +you need to switch your system to SELinux permissive mode. %package devel Summary: Development headers for Knot DNS Resolver @@ -75,7 +75,7 @@ Requires: %{name}%{?_isa} = %{version}-%{release} The package contains development headers for Knot DNS Resolver. %prep -%setup -n %{name}-%{version}%{?PRERELEASE:-}%{PRERELEASE} +%setup -n %{name}-%{version}%{?PRERELEASE:-}%{?PRERELEASE} rm -v scripts/bootstrap-depends.sh %build @@ -154,6 +154,20 @@ exit 0 %{_libdir}/libkres.so %changelog +* Fri Jan 27 2017 Petr Spacek - 1.2.0 +- new upstream release: + + fix: reworked DNSSEC Validation, that fixes several know problems with less standard DNS configurations + + fix: the resolver was setting AD flag when running in a forwarding mode + + fix: correctly return RCODE=NOTIMPL on meta-queries and non IN class queries + + fix: crash in hints module when hints file was empty + + fix: non-lowercase hints + + features: optional EDNS(0) Padding support for DNS over TLS + + features: support for debugging DNSSEC with CD bit + + features: DNS over TLS is now able to create ephemeral certs on the runtime (Thanks Daniel Kahn Gilmore for contributing to DNS over TLS implementation in Knot Resolver.) + + features: configurable minimum and maximum TTL (default 6 days) + + features: configurable pseudo-random reordering of RR sets + + features: new module 'version' that can call home and report new versions and security vulnerabilities to the log file + * Mon Jan 23 2017 Petr Spacek - 1.2.0-rc1 - Update to latest upstream version - Fix packaging bug: depend on proper Lua library versions diff --git a/sources b/sources index 07b40c3..307f08e 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-1.2.0-rc3.tar.xz) = 5e23216cd8caeee33ac81e99e7bc4d51b6c9ecb679721b99d55d20bedc0178e642da64bfd4aa14f2b007c7d4b122e74f1c5e8fb18a2d6eb9e8cbb51f72319804 -SHA512 (knot-resolver-1.2.0-rc3.tar.xz.asc) = b314a343f8871f1378979c7c6de3ea6b73cb50bd4805f0fb8ef855598eb1c34f684c5d66fe2618d2cf4623dbe05bd0cb513c23191dc5e170bb95ec4f0f3172cb +SHA512 (knot-resolver-1.2.0.tar.xz.asc) = 435e34d3cc6932b3d58256f78f2630446b47b4504a61fcaac2cf7bd331a0bc028163fb7542fdbd510ed675e7dc9ab39dfd7dad532a56ea588aa10fe5425d9f9f +SHA512 (knot-resolver-1.2.0.tar.xz) = 56440d3c3fbdfa8a43cefa334da7ec3c9bbc24291e3d342b3d50947876a39aea674de3c22cc331f63d3dd2c942fef75a57d01a2fc11377ba220acde510e0611f From 3709d6cf258c14d12760aa6b7f5356f8de38c4fb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Fri, 27 Jan 2017 22:57:36 +0100 Subject: [PATCH 017/126] rebuild against knot-2.4.0 --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 1fe5428..db4f29f 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -4,7 +4,7 @@ # %% define PRERELEASE rc3 Name: knot-resolver Version: 1.2.0 -Release: %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist} +Release: %{?PRERELEASE}%{?PRERELEASE:.}2%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -154,6 +154,9 @@ exit 0 %{_libdir}/libkres.so %changelog +* Fri Jan 27 2017 Petr Spacek - 1.2.0-2 +- rebuild against knot-2.4.0 + * Fri Jan 27 2017 Petr Spacek - 1.2.0 - new upstream release: + fix: reworked DNSSEC Validation, that fixes several know problems with less standard DNS configurations From b8d56466328ccb1e82e860207613563bd16ed6c1 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Fri, 10 Feb 2017 17:54:56 +0000 Subject: [PATCH 018/126] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index db4f29f..2a47754 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -4,7 +4,7 @@ # %% define PRERELEASE rc3 Name: knot-resolver Version: 1.2.0 -Release: %{?PRERELEASE}%{?PRERELEASE:.}2%{?dist} +Release: %{?PRERELEASE}%{?PRERELEASE:.}2%{?dist}.1 Summary: Caching full DNS Resolver License: GPLv3 @@ -154,6 +154,9 @@ exit 0 %{_libdir}/libkres.so %changelog +* Fri Feb 10 2017 Fedora Release Engineering - 1.2.0-2.1 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + * Fri Jan 27 2017 Petr Spacek - 1.2.0-2 - rebuild against knot-2.4.0 From f05d3077b950cc694a244962ce0984a9a493e2f9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Mon, 27 Feb 2017 20:13:04 +0100 Subject: [PATCH 019/126] new upstream release 1.2.3 --- .gitignore | 1 + knot-resolver.spec | 20 ++++++++++++++++++-- sources | 4 ++-- 3 files changed, 21 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index 00babab..368a55d 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,4 @@ /knot-resolver-*.tar.xz /knot-resolver-1.2.0-rc3.tar.xz.asc /knot-resolver-1.2.0.tar.xz.asc +/knot-resolver-1.2.3.tar.xz.asc diff --git a/knot-resolver.spec b/knot-resolver.spec index 2a47754..54fa5de 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -3,8 +3,8 @@ # comment out this define using #%% if it is not a pre-release version # %% define PRERELEASE rc3 Name: knot-resolver -Version: 1.2.0 -Release: %{?PRERELEASE}%{?PRERELEASE:.}2%{?dist}.1 +Version: 1.2.3 +Release: %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -154,6 +154,22 @@ exit 0 %{_libdir}/libkres.so %changelog +* Mon Feb 27 2017 Petr Spacek - 1.2.3-1 +- new upstream release + + security: a cached negative answer from a CD query would be reused + to construct response for non-CD queries, resulting in Insecure status + instead of Bogus. + + fix: lua: make the map command check its arguments + + fix: -k argument processing to avoid out-of-bounds memory accesses + + fix: lib/resolve: fix zonecut fetching for explicit DS queries + + fix: hints: more NULL checks + + fix: TA bootstrapping for multiple TAs in the IANA XML file + + fix: Disable storing GLUE records into the cache even in the + + fix: (non-default) QUERY_PERMISSIVE mode + + fix: iterate: skip answer RRs that don't match the query + + fix: layer/iterate: some additional processing for referrals + + fix: lib/resolve: zonecut fetching error was fixed + * Fri Feb 10 2017 Fedora Release Engineering - 1.2.0-2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild diff --git a/sources b/sources index 307f08e..3cc3035 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-1.2.0.tar.xz.asc) = 435e34d3cc6932b3d58256f78f2630446b47b4504a61fcaac2cf7bd331a0bc028163fb7542fdbd510ed675e7dc9ab39dfd7dad532a56ea588aa10fe5425d9f9f -SHA512 (knot-resolver-1.2.0.tar.xz) = 56440d3c3fbdfa8a43cefa334da7ec3c9bbc24291e3d342b3d50947876a39aea674de3c22cc331f63d3dd2c942fef75a57d01a2fc11377ba220acde510e0611f +SHA512 (knot-resolver-1.2.3.tar.xz.asc) = 57fe776805570f151106665a99e80197790a42abe6871086c7e904608bb139e63f488bdf20d14b176424739f16f3fb62cdb6fc2aa12a49d5bf89db6f56e211b7 +SHA512 (knot-resolver-1.2.3.tar.xz) = a37a3a996e5dd595c88ebc823eff55dad6d11fa0ea3ded1ae18aa7588c92260e1011d877b522fdc724045fbd27fda5eea6ea800b47bd7247790ad1bdac06a371 From dac5294c35935c11399746e66c90a24e45de1fde Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Thu, 9 Mar 2017 14:48:42 +0100 Subject: [PATCH 020/126] Support builds in EPEL --- knot-resolver.spec | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/knot-resolver.spec b/knot-resolver.spec index 54fa5de..0162b1c 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -45,8 +45,14 @@ BuildRequires: systemd #BuildRequires: python-sphinx #BuildRequires: python-sphinx_rtd_theme +# Lua 5.1 version of the libraries have different package names +%if 0%{?rhel} +Requires: lua-socket +Requires: lua-sec +%else Requires: lua-socket-compat Requires: lua-sec-compat +%endif Requires(pre): shadow-utils Requires(post): systemd From 1c462e9dac677a52f6d1bea38c66d892fd0925e0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Thu, 9 Mar 2017 14:52:38 +0100 Subject: [PATCH 021/126] Fix rpmlint warnings about mixed use of tabs and spaces --- knot-resolver.spec | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 0162b1c..6a99840 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -9,8 +9,8 @@ Summary: Caching full DNS Resolver License: GPLv3 URL: https://www.knot-resolver.cz/ -Source0: https://secure.nic.cz/files/%{name}/%{name}-%{version}%{?PRERELEASE:-}%{?PRERELEASE}.tar.xz -Source1: https://secure.nic.cz/files/%{name}/%{name}-%{version}%{?PRERELEASE:-}%{?PRERELEASE}.tar.xz.asc +Source0: https://secure.nic.cz/files/%{name}/%{name}-%{version}%{?PRERELEASE:-}%{?PRERELEASE}.tar.xz +Source1: https://secure.nic.cz/files/%{name}/%{name}-%{version}%{?PRERELEASE:-}%{?PRERELEASE}.tar.xz.asc # LuaJIT only on these arches ExclusiveArch: %{arm} aarch64 %{ix86} x86_64 @@ -18,11 +18,11 @@ ExclusiveArch: %{arm} aarch64 %{ix86} x86_64 Source2: config Source3: root.keys -Source100: kresd.service -Source101: kresd.socket -Source102: kresd-control.socket -Source103: kresd-tls.socket -Source104: kresd.tmpfiles +Source100: kresd.service +Source101: kresd.socket +Source102: kresd-control.socket +Source103: kresd-tls.socket +Source104: kresd.tmpfiles BuildRequires: pkgconfig(libknot) >= 2.3 BuildRequires: pkgconfig(libzscanner) From 72c5321f45b16c346fc2047b9640adbe71cb98b0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Thu, 9 Mar 2017 14:59:59 +0100 Subject: [PATCH 022/126] Use quiet mode for %setup as rpmlint wants --- knot-resolver.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 6a99840..6bbcf75 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -81,7 +81,7 @@ Requires: %{name}%{?_isa} = %{version}-%{release} The package contains development headers for Knot DNS Resolver. %prep -%setup -n %{name}-%{version}%{?PRERELEASE:-}%{?PRERELEASE} +%setup -q -n %{name}-%{version}%{?PRERELEASE:-}%{?PRERELEASE} rm -v scripts/bootstrap-depends.sh %build From 62060c9bc9a05a3e220ab1b0ba10fe6ebc33da65 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Thu, 9 Mar 2017 15:08:38 +0100 Subject: [PATCH 023/126] new upstream release 1.2.4 --- .gitignore | 1 + knot-resolver.spec | 26 +++++++++++++++++++++++++- sources | 4 ++-- 3 files changed, 28 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 368a55d..ad76052 100644 --- a/.gitignore +++ b/.gitignore @@ -2,3 +2,4 @@ /knot-resolver-1.2.0-rc3.tar.xz.asc /knot-resolver-1.2.0.tar.xz.asc /knot-resolver-1.2.3.tar.xz.asc +/knot-resolver-1.2.4.tar.xz.asc diff --git a/knot-resolver.spec b/knot-resolver.spec index 6bbcf75..4a1f0fa 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -3,7 +3,7 @@ # comment out this define using #%% if it is not a pre-release version # %% define PRERELEASE rc3 Name: knot-resolver -Version: 1.2.3 +Version: 1.2.4 Release: %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist} Summary: Caching full DNS Resolver @@ -160,6 +160,30 @@ exit 0 %{_libdir}/libkres.so %changelog +* Thu Mar 09 2017 Petr Spacek - 1.2.4-1 +- new upstream release + + security: Knot Resolver 1.2.0 and higher could return AD flag for insecure + answer if the daemon received answer with invalid RRSIG several + times in a row. + + fix: layer/iterate: some improvements in cname chain unrolling + + fix: layer/validate: fix duplicate records in AUTHORITY section in case + + fix: of WC expansion proof + + fix: lua: do *not* truncate cache size to unsigned + + fix: forwarding mode: correctly forward +cd flag + + fix: fix a potential memory leak + + fix: don't treat answers that contain DS non-existance proof as insecure + + fix: don't store NSEC3 and their signatures in the cache + + fix: layer/iterate: when processing delegations, + check if qname is at or below new authority + + enhancement: modules/policy: allow QTRACE policy to be chained + with other policies + + enhancement: hints.add_hosts(path): a new property + + enhancement: module: document the API and simplify the code + + enhancement: policy.MIRROR: support IPv6 link-local addresses + + enhancement: policy.FORWARD: support IPv6 link-local addresses + + enhancement: add net.outgoing_{v4,v6} to allow specifying address + to use for connections + * Mon Feb 27 2017 Petr Spacek - 1.2.3-1 - new upstream release + security: a cached negative answer from a CD query would be reused diff --git a/sources b/sources index 3cc3035..da2bf84 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-1.2.3.tar.xz.asc) = 57fe776805570f151106665a99e80197790a42abe6871086c7e904608bb139e63f488bdf20d14b176424739f16f3fb62cdb6fc2aa12a49d5bf89db6f56e211b7 -SHA512 (knot-resolver-1.2.3.tar.xz) = a37a3a996e5dd595c88ebc823eff55dad6d11fa0ea3ded1ae18aa7588c92260e1011d877b522fdc724045fbd27fda5eea6ea800b47bd7247790ad1bdac06a371 +SHA512 (knot-resolver-1.2.4.tar.xz) = 1afd363c64d4adf167544f1a94d1dcc509bd922d24ef99fac7d4222783492d507da0c65657d59aada961f7edb6d6b3986a2cfc876f548c6900092eebd49e56e0 +SHA512 (knot-resolver-1.2.4.tar.xz.asc) = 11dee4be02bfafdc53baac13542a0fa8f55bc4b76d518beaaf147a2f16c825d32f0c4872c596c4a94bfcb3473a6a1afba90cbab4387325c89d546a8734012470 From 46ab618a08f10a56e790b75481ba0fd51184f609 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Thu, 6 Apr 2017 07:30:12 +0200 Subject: [PATCH 024/126] new upstream release 1.2.5 --- .gitignore | 1 + knot-resolver.spec | 23 ++++++++++++++++++++++- sources | 4 ++-- 3 files changed, 25 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index ad76052..0671791 100644 --- a/.gitignore +++ b/.gitignore @@ -3,3 +3,4 @@ /knot-resolver-1.2.0.tar.xz.asc /knot-resolver-1.2.3.tar.xz.asc /knot-resolver-1.2.4.tar.xz.asc +/knot-resolver-1.2.5.tar.xz.asc diff --git a/knot-resolver.spec b/knot-resolver.spec index 4a1f0fa..7979858 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -3,7 +3,7 @@ # comment out this define using #%% if it is not a pre-release version # %% define PRERELEASE rc3 Name: knot-resolver -Version: 1.2.4 +Version: 1.2.5 Release: %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist} Summary: Caching full DNS Resolver @@ -150,6 +150,7 @@ exit 0 %{_unitdir}/kresd*.socket %{_tmpfilesdir}/kresd.conf %{_sbindir}/kresd +%{_sbindir}/kresc %{_libdir}/libkres.so.* %{_libdir}/kdns_modules %{_mandir}/man8/kresd.* @@ -160,6 +161,26 @@ exit 0 %{_libdir}/libkres.so %changelog +* Thu Apr 06 2017 Petr Spacek - 1.2.5-1 +- new upstream relase + + security: layer/validate: clear AD if closest encloser proof has opt-outed NSEC3 (#169) + + security: layer/validate: check if NSEC3 records in wildcard expansion proof has an opt-out + + security: dnssec/nsec: missed wildcard no-data answers validation has been implemented + + fix: trust anchors: Improve trust anchors storage format (#167) + + fix: trust anchors: support non-root TAs, one domain per file + + fix: policy.DENY: set AA flag and clear AD flag + + fix: lib/resolve: avoid unnecessary DS queries + + fix: lib/nsrep: don't treat servers with NOIP4 + NOIP6 flags as timeouted + + fix: layer/iterate: During packet classification (answer vs. referral) don't analyze + AUTHORITY section in authoritative answer if ANSWER section contains records + that have been requested + + enhancement: modules/dnstap: a DNSTAP support module (Contributed by Vicky Shrestha) + + enhancement: modules/workarounds: a module adding workarounds for known DNS protocol violators + + enhancement: layer/iterate: fix logging of glue addresses + + enhancement: kr_bitcmp: allow bits=0 and consequently 0.0.0.0/0 matches in view and renumber modules. + + enhancement: modules/padding: Improve default padding of responses (Contributed by Daniel Kahn Gillmor) + + enhancement: New kresc client utility (experimental; don't rely on the API yet) + * Thu Mar 09 2017 Petr Spacek - 1.2.4-1 - new upstream release + security: Knot Resolver 1.2.0 and higher could return AD flag for insecure diff --git a/sources b/sources index da2bf84..651ae09 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-1.2.4.tar.xz) = 1afd363c64d4adf167544f1a94d1dcc509bd922d24ef99fac7d4222783492d507da0c65657d59aada961f7edb6d6b3986a2cfc876f548c6900092eebd49e56e0 -SHA512 (knot-resolver-1.2.4.tar.xz.asc) = 11dee4be02bfafdc53baac13542a0fa8f55bc4b76d518beaaf147a2f16c825d32f0c4872c596c4a94bfcb3473a6a1afba90cbab4387325c89d546a8734012470 +SHA512 (knot-resolver-1.2.5.tar.xz) = 1e3f2eafeade1bac9b3cf45e9f992e30e9a5bbb2124465ea02d3eebf28bb8645d095db4fc58c707c841de13a2326601fca9682a631b60d9a5e2869b677a39da9 +SHA512 (knot-resolver-1.2.5.tar.xz.asc) = 52dbb7b5ae2040f6560a861043f44b312af5e07102c39ed13dcd677c692b6b6c88eac6eab174a702b3d00c1f4369ec17de8f85f87d2b9ab6a131c47363f16730 From 239782ee6895bfe68e23da83be5a83fd5f4b9e10 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Tue, 11 Jul 2017 10:12:23 +0200 Subject: [PATCH 025/126] new upstream release 1.3.1 socket_wrapper is not actually required because it is not used by unit tests --- .gitignore | 1 + knot-resolver.spec | 68 ++++++++++++++++++++++++++++++++++++++++++---- sources | 4 +-- 3 files changed, 66 insertions(+), 7 deletions(-) diff --git a/.gitignore b/.gitignore index 0671791..59e0acf 100644 --- a/.gitignore +++ b/.gitignore @@ -4,3 +4,4 @@ /knot-resolver-1.2.3.tar.xz.asc /knot-resolver-1.2.4.tar.xz.asc /knot-resolver-1.2.5.tar.xz.asc +/knot-resolver-1.3.1.tar.xz.asc diff --git a/knot-resolver.spec b/knot-resolver.spec index 7979858..9f31f52 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -3,7 +3,7 @@ # comment out this define using #%% if it is not a pre-release version # %% define PRERELEASE rc3 Name: knot-resolver -Version: 1.2.5 +Version: 1.3.1 Release: %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist} Summary: Caching full DNS Resolver @@ -24,9 +24,9 @@ Source102: kresd-control.socket Source103: kresd-tls.socket Source104: kresd.tmpfiles -BuildRequires: pkgconfig(libknot) >= 2.3 -BuildRequires: pkgconfig(libzscanner) -BuildRequires: pkgconfig(libdnssec) +BuildRequires: pkgconfig(libknot) >= 2.3.1 +BuildRequires: pkgconfig(libzscanner) >= 2.3.1 +BuildRequires: pkgconfig(libdnssec) >= 2.3.1 BuildRequires: pkgconfig(libuv) BuildRequires: pkgconfig(luajit) >= 2.0 @@ -35,7 +35,6 @@ BuildRequires: pkgconfig(hiredis) BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(cmocka) -BuildRequires: pkgconfig(socket_wrapper) BuildRequires: systemd # FIXME: documentation fails to build on Fedora 25 @@ -161,6 +160,65 @@ exit 0 %{_libdir}/libkres.so %changelog +* Tue Jul 11 2017 Petr Spacek - 1.3.1-1 +New upstream release: +Knot Resolver 1.3.1 (2017-06-23) +================================ + +Bugfixes +-------- +- modules/http: fix finding the static files (bug from 1.3.0) +- policy.FORWARD: fix some cases of CNAMEs obstructing search for zone cuts + + +Knot Resolver 1.3.0 (2017-06-13) +================================ + +Security +-------- +- Refactor handling of AD flag and security status of resource records. + In some cases it was possible for secure domains to get cached as + insecure, even for a TLD, leading to disabled validation. + It also fixes answering with non-authoritative data about nameservers. + +Improvements +------------ +- major feature: support for forwarding with validation (#112). + The old policy.FORWARD action now does that; the previous non-validating + mode is still avaliable as policy.STUB except that also uses caching (#122). +- command line: specify ports via @ but still support # for compatibility +- policy: recognize 100.64.0.0/10 as local addresses +- layer/iterate: *do* retry repeatedly if REFUSED, as we can't yet easily + retry with other NSs while avoiding retrying with those who REFUSED +- modules: allow changing the directory where modules are found, + and do not search the default library path anymore. + +Bugfixes +-------- +- validate: fix insufficient caching for some cases (relatively rare) +- avoid putting "duplicate" record-sets into the answer (#198) + + +Knot Resolver 1.2.6 (2017-04-24) +================================ + +Security +-------- +- dnssec: don't set AD flag for NODATA answers if wildcard non-existence + is not guaranteed due to opt-out in NSEC3 + +Improvements +------------ +- layer/iterate: don't retry repeatedly if REFUSED + +Bugfixes +-------- +- lib/nsrep: revert some changes to NS reputation tracking that caused + severe problems to some users of 1.2.5 (#178 and #179) +- dnssec: fix verification of wildcarded non-singleton RRsets +- dnssec: allow wildcards located directly under the root +- layer/rrcache: avoid putting answer records into queries in some cases + * Thu Apr 06 2017 Petr Spacek - 1.2.5-1 - new upstream relase + security: layer/validate: clear AD if closest encloser proof has opt-outed NSEC3 (#169) diff --git a/sources b/sources index 651ae09..bec8f63 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-1.2.5.tar.xz) = 1e3f2eafeade1bac9b3cf45e9f992e30e9a5bbb2124465ea02d3eebf28bb8645d095db4fc58c707c841de13a2326601fca9682a631b60d9a5e2869b677a39da9 -SHA512 (knot-resolver-1.2.5.tar.xz.asc) = 52dbb7b5ae2040f6560a861043f44b312af5e07102c39ed13dcd677c692b6b6c88eac6eab174a702b3d00c1f4369ec17de8f85f87d2b9ab6a131c47363f16730 +SHA512 (knot-resolver-1.3.1.tar.xz) = b561cead4dcebb53605e4c7b8d7deaac4308ec87688cabbbb56493aacf28fc4a4d1975cc001caf071a3beac6e9f2a2bc57177fda65e85a8ce246fd6bc5123606 +SHA512 (knot-resolver-1.3.1.tar.xz.asc) = 05a59961cbc3c5b76def5b0e3ab2b87a053361d169a87367505a0653262117ed889e070558124b43349018fa986d06aaaeed9e1a97d80357b05db69b31898fae From 8a62324c62087955525175a67ece0e4654197f69 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Tue, 11 Jul 2017 10:34:52 +0200 Subject: [PATCH 026/126] build experimental command line interface "kresc" --- knot-resolver.spec | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/knot-resolver.spec b/knot-resolver.spec index 9f31f52..df4bfc1 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -30,6 +30,7 @@ BuildRequires: pkgconfig(libdnssec) >= 2.3.1 BuildRequires: pkgconfig(libuv) BuildRequires: pkgconfig(luajit) >= 2.0 +BuildRequires: pkgconfig(libedit) BuildRequires: pkgconfig(libmemcached) >= 1.0 BuildRequires: pkgconfig(hiredis) BuildRequires: pkgconfig(libsystemd) @@ -160,6 +161,9 @@ exit 0 %{_libdir}/libkres.so %changelog +* Tue Jul 11 2017 Petr Spacek - 1.3.1-2 +- build experimental command line interface "kresc" + * Tue Jul 11 2017 Petr Spacek - 1.3.1-1 New upstream release: Knot Resolver 1.3.1 (2017-06-23) From d5833e9543808e520b9d8e36da4c9f3a827cde89 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 26 Jul 2017 17:54:09 +0000 Subject: [PATCH 027/126] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index df4bfc1..5ad852b 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -4,7 +4,7 @@ # %% define PRERELEASE rc3 Name: knot-resolver Version: 1.3.1 -Release: %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist} +Release: %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist}.1 Summary: Caching full DNS Resolver License: GPLv3 @@ -161,6 +161,9 @@ exit 0 %{_libdir}/libkres.so %changelog +* Wed Jul 26 2017 Fedora Release Engineering - 1.3.1-1.1 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + * Tue Jul 11 2017 Petr Spacek - 1.3.1-2 - build experimental command line interface "kresc" From 796c51059762681e65a445efb371ce75c2dc3f12 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Tue, 1 Aug 2017 10:29:07 +0200 Subject: [PATCH 028/126] Update root keys: prepare for KSK 2017 roll-over See https://www.icann.org/resources/pages/ksk-rollover --- knot-resolver.spec | 2 +- root.keys | 3 +- rootkeys/README | 3 + rootkeys/checksums-sha256.txt | 3 + rootkeys/icannbundle.pem | 237 ++++++++++++++++++++++++++++++++++ rootkeys/root-anchors.p7s | Bin 0 -> 4095 bytes rootkeys/root-anchors.xml | 16 +++ rootkeys/verify.sh | 5 + 8 files changed, 267 insertions(+), 2 deletions(-) create mode 100644 rootkeys/README create mode 100644 rootkeys/checksums-sha256.txt create mode 100644 rootkeys/icannbundle.pem create mode 100644 rootkeys/root-anchors.p7s create mode 100644 rootkeys/root-anchors.xml create mode 100755 rootkeys/verify.sh diff --git a/knot-resolver.spec b/knot-resolver.spec index 5ad852b..079d614 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -16,7 +16,7 @@ Source1: https://secure.nic.cz/files/%{name}/%{name}-%{version}%{?PRERELE ExclusiveArch: %{arm} aarch64 %{ix86} x86_64 Source2: config -Source3: root.keys +Source3: rootkeys/root.keys Source100: kresd.service Source101: kresd.socket diff --git a/root.keys b/root.keys index aeadb85..7578e04 100644 --- a/root.keys +++ b/root.keys @@ -1 +1,2 @@ -. 11579 IN TYPE48 \# 264 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 ; Valid +. IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5 +. IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D diff --git a/rootkeys/README b/rootkeys/README new file mode 100644 index 0000000..b65691c --- /dev/null +++ b/rootkeys/README @@ -0,0 +1,3 @@ +Content of the root-anchors.xml file must match DS records in file ../root.keys. + +Obtain these files from a trusted source! diff --git a/rootkeys/checksums-sha256.txt b/rootkeys/checksums-sha256.txt new file mode 100644 index 0000000..f6124b9 --- /dev/null +++ b/rootkeys/checksums-sha256.txt @@ -0,0 +1,3 @@ +053cbf806a57e7759b8b8ad9cb21d65229b53b4c2b73feece2c62a3aff153b87 icannbundle.pem +ca2cc5aad5af1b7cd853fe1f08c4925dcd8fd8816711821d9e76ad37a5ac52c4 root-anchors.p7s +1b2a628d1ff22d4dc7645cfc89f21b6a575526439c6706ecf853e6fff7099dc8 root-anchors.xml diff --git a/rootkeys/icannbundle.pem b/rootkeys/icannbundle.pem new file mode 100644 index 0000000..d76ce0b --- /dev/null +++ b/rootkeys/icannbundle.pem @@ -0,0 +1,237 @@ +Certificate: + Data: + Version: 3 (0x2) + Serial Number: 1 (0x1) + Signature Algorithm: sha256WithRSAEncryption + Issuer: O=ICANN, OU=ICANN Certification Authority, CN=ICANN Root CA, C=US + Validity + Not Before: Dec 23 04:19:12 2009 GMT + Not After : Dec 18 04:19:12 2029 GMT + Subject: O=ICANN, OU=ICANN Certification Authority, CN=ICANN Root CA, C=US + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public Key: (2048 bit) + Modulus (2048 bit): + 00:a0:db:70:b8:4f:34:da:9c:d4:d0:7e:bb:ea:15: + bc:e9:c9:11:2a:1f:61:2f:6a:b9:bd:3f:3d:76:a0: + 9a:0a:f7:ee:93:6e:6e:55:53:84:8c:f2:2c:f1:82: + 27:c8:0f:9a:cf:52:1b:54:da:28:d2:2c:30:8e:dd: + fb:92:20:33:2d:d6:c8:f1:0e:10:21:88:71:fa:84: + 22:4b:5d:47:56:16:7c:9b:9f:5d:c3:11:79:9c:14: + e2:ff:c0:74:ac:dd:39:d7:e0:38:d8:b0:73:aa:fb: + d1:db:84:af:52:22:a8:f6:d5:9b:94:f4:e6:5d:5e: + e8:3f:87:90:0b:c7:1a:77:f5:2e:d3:8f:1a:ce:02: + 1d:07:69:21:47:32:da:46:ae:00:4c:b6:a5:a2:9c: + 39:c1:c0:4a:f6:d3:1c:ae:d3:6d:bb:c7:18:f0:7e: + ed:f6:80:ce:d0:01:2e:89:de:12:ba:ee:11:cb:a6: + 7a:d7:0d:7c:f3:08:8d:72:9d:bf:55:75:13:70:bb: + 31:22:4a:cb:e8:c0:aa:a4:09:aa:36:68:40:60:74: + 9d:e7:19:81:43:22:52:fe:c9:2b:52:0f:41:13:36: + 09:72:65:95:cc:89:ae:6f:56:17:16:34:73:52:a3: + 04:ed:bd:88:82:8a:eb:d7:dc:82:52:9c:06:e1:52: + 85:41 + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: critical + CA:TRUE + X509v3 Key Usage: critical + Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement, Certificate Sign, CRL Sign + X509v3 Subject Key Identifier: + BA:52:E9:49:83:24:86:52:2F:C7:99:CD:FC:8D:6B:69:08:4D:C0:50 + Signature Algorithm: sha256WithRSAEncryption + 0f:f1:e9:82:a2:0a:87:9f:2d:94:60:5a:b2:c0:4b:a1:2f:2b: + 3b:47:d5:0a:99:86:38:b2:ec:c6:3b:89:e4:6e:07:cf:14:c7: + c7:e8:cf:99:8f:aa:30:c3:19:70:b9:e6:6d:d6:3f:c8:68:26: + b2:a0:a5:37:42:ca:d8:62:80:d1:a2:5a:48:2e:1f:85:3f:0c: + 7b:c2:c7:94:11:5f:19:2a:95:ac:a0:3a:03:d8:91:5b:2e:0d: + 9c:7c:1f:2e:fc:e9:44:e1:16:26:73:1c:45:4a:65:c1:83:4c: + 90:f3:f2:28:42:df:db:c4:e7:04:12:18:62:43:5e:bc:1f:6c: + 84:e6:bc:49:32:df:61:d7:99:ee:e4:90:52:7b:0a:c2:91:8a: + 98:62:66:b1:c8:e0:b7:5a:b5:46:7c:76:71:54:8e:cc:a4:81: + 5c:19:db:d2:6f:66:b5:bb:2b:ae:6b:c9:74:04:a8:24:de:e8: + c5:d3:fc:2c:1c:d7:8f:db:6a:8d:c9:53:be:5d:50:73:ac:cf: + 1f:93:c0:52:50:5b:a2:4f:fe:ad:65:36:17:46:d1:2d:e5:a2: + 90:66:05:db:29:4e:5d:50:5d:e3:4f:da:a0:8f:f0:6b:e4:16: + 70:dd:7f:f3:77:7d:b9:4e:f9:ec:c3:33:02:d7:e9:63:2f:31: + e7:40:61:a4 +-----BEGIN CERTIFICATE----- +MIIDdzCCAl+gAwIBAgIBATANBgkqhkiG9w0BAQsFADBdMQ4wDAYDVQQKEwVJQ0FO +TjEmMCQGA1UECxMdSUNBTk4gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxFjAUBgNV +BAMTDUlDQU5OIFJvb3QgQ0ExCzAJBgNVBAYTAlVTMB4XDTA5MTIyMzA0MTkxMloX +DTI5MTIxODA0MTkxMlowXTEOMAwGA1UEChMFSUNBTk4xJjAkBgNVBAsTHUlDQU5O +IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRYwFAYDVQQDEw1JQ0FOTiBSb290IENB +MQswCQYDVQQGEwJVUzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKDb +cLhPNNqc1NB+u+oVvOnJESofYS9qub0/PXagmgr37pNublVThIzyLPGCJ8gPms9S +G1TaKNIsMI7d+5IgMy3WyPEOECGIcfqEIktdR1YWfJufXcMReZwU4v/AdKzdOdfg +ONiwc6r70duEr1IiqPbVm5T05l1e6D+HkAvHGnf1LtOPGs4CHQdpIUcy2kauAEy2 +paKcOcHASvbTHK7TbbvHGPB+7faAztABLoneErruEcumetcNfPMIjXKdv1V1E3C7 +MSJKy+jAqqQJqjZoQGB0necZgUMiUv7JK1IPQRM2CXJllcyJrm9WFxY0c1KjBO29 +iIKK69fcglKcBuFShUECAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8B +Af8EBAMCAf4wHQYDVR0OBBYEFLpS6UmDJIZSL8eZzfyNa2kITcBQMA0GCSqGSIb3 +DQEBCwUAA4IBAQAP8emCogqHny2UYFqywEuhLys7R9UKmYY4suzGO4nkbgfPFMfH +6M+Zj6owwxlwueZt1j/IaCayoKU3QsrYYoDRolpILh+FPwx7wseUEV8ZKpWsoDoD +2JFbLg2cfB8u/OlE4RYmcxxFSmXBg0yQ8/IoQt/bxOcEEhhiQ168H2yE5rxJMt9h +15nu5JBSewrCkYqYYmaxyOC3WrVGfHZxVI7MpIFcGdvSb2a1uyuua8l0BKgk3ujF +0/wsHNeP22qNyVO+XVBzrM8fk8BSUFuiT/6tZTYXRtEt5aKQZgXbKU5dUF3jT9qg +j/Br5BZw3X/zd325TvnswzMC1+ljLzHnQGGk +-----END CERTIFICATE----- +Certificate: + Data: + Version: 3 (0x2) + Serial Number: 11 (0xb) + Signature Algorithm: sha256WithRSAEncryption + Issuer: O=ICANN, OU=ICANN Certification Authority, CN=ICANN Root CA, C=US + Validity + Not Before: Nov 8 23:39:47 2016 GMT + Not After : Nov 6 23:39:47 2026 GMT + Subject: O=ICANN, CN=ICANN EMAIL CA + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public Key: (2048 bit) + Modulus (2048 bit): + 00:d2:19:1e:22:69:33:f6:a4:d2:76:c5:80:11:75: + 8e:d0:e8:6f:bf:89:f8:2a:6a:da:8a:85:28:40:ba: + c5:23:5f:47:ed:72:e2:8e:d3:5c:c8:8a:3a:99:a9: + 57:2c:0a:2b:22:f3:54:7b:8b:f7:8c:21:a2:50:01: + 4f:8b:af:34:df:72:fc:78:31:d0:1d:eb:bc:9b:e6: + fa:c1:84:d0:05:07:8a:74:53:a5:60:9e:eb:75:9e: + a8:5d:32:c8:02:32:e4:bf:cb:97:9b:7a:fa:2c:f6: + 6a:1d:b8:57:ad:e3:03:22:93:d0:f4:4f:a8:b8:01: + db:82:33:98:b6:87:ed:3d:67:40:00:27:2e:d5:95: + d2:ad:36:46:14:c6:17:79:65:7f:65:f3:88:80:65: + 7c:22:67:08:23:3c:cf:a5:10:38:72:30:97:92:6f: + 20:4a:ba:24:4c:4a:c8:4a:a5:dc:2a:44:a1:29:78: + b4:9f:fe:84:ff:27:5b:3a:72:ea:31:c1:ad:06:22: + d6:44:a0:4a:57:32:9c:f2:46:47:d0:89:6e:20:23: + 2c:ea:b0:83:7e:c1:f3:ea:da:dd:e3:63:59:97:21: + fa:1b:11:39:27:cf:82:8b:56:15:d4:36:92:0c:a5: + 7e:80:e0:18:c9:50:08:42:0a:df:97:3c:9c:b8:0a: + 4d:b1 + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: critical + CA:TRUE + X509v3 Key Usage: critical + Certificate Sign, CRL Sign + X509v3 Authority Key Identifier: + keyid:BA:52:E9:49:83:24:86:52:2F:C7:99:CD:FC:8D:6B:69:08:4D:C0:50 + + X509v3 Subject Key Identifier: + 7B:3F:BA:CE:A1:B3:A6:13:2E:5A:82:84:D4:D2:EA:A5:24:F1:CD:B4 + Signature Algorithm: sha256WithRSAEncryption + 0e:8a:c9:ea:6f:9c:e9:23:b6:9c:a6:a4:c2:d1:b1:ee:25:18: + 24:2b:79:d4:a8:f2:99:b9:5c:91:4d:e6:2b:32:2e:01:f5:87: + 95:64:fc:6d:f1:87:fa:24:b4:43:4b:49:f3:84:54:44:eb:af: + 41:ab:49:ab:c8:b7:32:6c:14:83:5b:d7:2c:41:f9:89:d5:c4: + 2b:9a:55:c5:b6:ad:17:d5:4d:bc:41:58:56:72:0d:db:b7:7d: + 57:c6:a2:9c:7e:6b:67:ae:26:f8:26:45:bb:c4:95:2e:ea:71: + e3:b4:7a:69:95:a4:8a:80:f8:59:dc:88:6e:e1:a7:fc:bb:8e: + b2:aa:a8:b6:1b:2f:2c:97:a5:12:d5:82:ae:a0:e8:a6:15:fd: + d1:e0:5d:e4:84:b1:76:db:0a:e2:ca:58:2e:d3:df:48:4e:46: + ac:c6:35:79:17:99:ce:e9:be:2c:e4:c2:50:ff:5b:96:15:cd: + 64:ac:1b:db:fe:d2:ac:43:61:c8:5f:ee:24:b6:a4:3b:d2:ff: + 0a:f4:0c:88:58:a1:9d:a4:c1:1f:6a:6c:67:90:98:e8:1f:5e: + 2d:55:60:91:26:2a:b1:66:80:e4:e6:0e:05:2c:75:a9:ca:0b: + e4:a0:8f:e1:47:a8:8f:61:5d:7c:ce:09:60:88:48:c3:46:bf: + be:7e:36:be +-----BEGIN CERTIFICATE----- +MIIDZDCCAkygAwIBAgIBCzANBgkqhkiG9w0BAQsFADBdMQ4wDAYDVQQKEwVJQ0FO +TjEmMCQGA1UECxMdSUNBTk4gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxFjAUBgNV +BAMTDUlDQU5OIFJvb3QgQ0ExCzAJBgNVBAYTAlVTMB4XDTE2MTEwODIzMzk0N1oX +DTI2MTEwNjIzMzk0N1owKTEOMAwGA1UEChMFSUNBTk4xFzAVBgNVBAMTDklDQU5O +IEVNQUlMIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hkeImkz +9qTSdsWAEXWO0Ohvv4n4KmraioUoQLrFI19H7XLijtNcyIo6malXLAorIvNUe4v3 +jCGiUAFPi68033L8eDHQHeu8m+b6wYTQBQeKdFOlYJ7rdZ6oXTLIAjLkv8uXm3r6 +LPZqHbhXreMDIpPQ9E+ouAHbgjOYtoftPWdAACcu1ZXSrTZGFMYXeWV/ZfOIgGV8 +ImcIIzzPpRA4cjCXkm8gSrokTErISqXcKkShKXi0n/6E/ydbOnLqMcGtBiLWRKBK +VzKc8kZH0IluICMs6rCDfsHz6trd42NZlyH6GxE5J8+Ci1YV1DaSDKV+gOAYyVAI +QgrflzycuApNsQIDAQABo2MwYTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQE +AwIBBjAfBgNVHSMEGDAWgBS6UulJgySGUi/Hmc38jWtpCE3AUDAdBgNVHQ4EFgQU +ez+6zqGzphMuWoKE1NLqpSTxzbQwDQYJKoZIhvcNAQELBQADggEBAA6KyepvnOkj +tpympMLRse4lGCQredSo8pm5XJFN5isyLgH1h5Vk/G3xh/oktENLSfOEVETrr0Gr +SavItzJsFINb1yxB+YnVxCuaVcW2rRfVTbxBWFZyDdu3fVfGopx+a2euJvgmRbvE +lS7qceO0emmVpIqA+FnciG7hp/y7jrKqqLYbLyyXpRLVgq6g6KYV/dHgXeSEsXbb +CuLKWC7T30hORqzGNXkXmc7pvizkwlD/W5YVzWSsG9v+0qxDYchf7iS2pDvS/wr0 +DIhYoZ2kwR9qbGeQmOgfXi1VYJEmKrFmgOTmDgUsdanKC+Sgj+FHqI9hXXzOCWCI +SMNGv75+Nr4= +-----END CERTIFICATE----- +Certificate: + Data: + Version: 3 (0x2) + Serial Number: 10 (0xa) + Signature Algorithm: sha256WithRSAEncryption + Issuer: O=ICANN, OU=ICANN Certification Authority, CN=ICANN Root CA, C=US + Validity + Not Before: Nov 8 23:38:16 2016 GMT + Not After : Nov 6 23:38:16 2026 GMT + Subject: O=ICANN, CN=ICANN SSL CA + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public Key: (2048 bit) + Modulus (2048 bit): + 00:dd:c6:ab:bf:7c:66:9d:b3:2b:96:00:14:c7:60: + 7a:8d:62:5b:26:4b:30:d7:b3:4c:82:69:c6:4d:4d: + 73:f3:d4:91:21:5d:ab:35:f0:c8:04:0e:f4:a3:35: + e2:e1:18:a9:98:12:03:58:f8:9f:eb:77:54:5b:89: + 81:26:c9:aa:c2:f4:c9:0c:82:57:2a:5e:05:e9:61: + 17:cc:19:18:71:eb:35:83:c1:86:9d:ec:f1:6b:ca: + dd:a1:96:0b:95:d4:e1:0f:9e:24:6f:dc:3c:d0:28: + 9e:f2:53:47:2b:a1:ad:32:03:c8:3f:0d:80:80:7d: + f0:02:d2:6e:5a:2c:44:21:9b:09:50:15:3f:a1:3d: + d3:c9:c8:24:e7:ea:4e:92:2f:94:90:2e:de:e7:68: + f6:c6:b3:90:1f:bc:c9:7b:a2:65:d7:11:e9:8b:f0: + 3a:5a:b7:17:07:df:69:e3:6e:b9:54:6a:8e:3a:aa: + 94:7f:2c:0a:a1:ad:ba:b7:d9:60:62:27:a7:71:40: + 3b:8e:b0:84:7b:b8:c8:67:ef:66:ba:3d:ac:c3:85: + e5:86:bb:a7:9c:fd:b6:e1:c0:10:53:3d:d4:7e:1b: + 09:e6:9f:22:5c:a7:27:09:7e:27:12:33:fa:df:9b: + 20:2f:14:f7:17:c0:e4:1e:07:91:1f:f9:9a:cd:a8: + e2:c5 + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Basic Constraints: critical + CA:TRUE + X509v3 Key Usage: critical + Certificate Sign, CRL Sign + X509v3 Authority Key Identifier: + keyid:BA:52:E9:49:83:24:86:52:2F:C7:99:CD:FC:8D:6B:69:08:4D:C0:50 + + X509v3 Subject Key Identifier: + 6E:77:A8:40:10:4A:D8:9C:0C:F2:B7:5A:3A:A5:2F:79:4A:61:14:D8 + Signature Algorithm: sha256WithRSAEncryption + 47:46:4f:c7:5f:46:e3:d1:dc:fc:2b:f8:fc:65:ce:36:b1:f4: + 5f:ee:14:75:a3:d9:5f:de:75:4b:fa:7b:88:9f:10:8c:2e:97: + cc:35:1b:ce:24:d3:36:60:95:d5:ae:11:b6:3f:8b:f4:12:69: + 85:b5:3b:2a:b6:ab:7a:81:85:c2:55:57:ed:d0:b5:e7:4f:54: + 37:51:24:c9:d5:07:3a:ef:b6:c5:1a:3e:14:29:a7:a6:f8:08: + 2a:0b:26:79:f9:62:85:4a:e5:ea:90:ca:71:38:16:91:4e:7e: + fd:e3:b3:f3:55:8f:5a:d0:86:cf:33:94:88:f1:90:99:cb:81: + e2:81:92:68:2f:c3:61:d5:52:8d:e6:9a:5b:00:83:42:27:88: + f6:d9:fa:d1:bc:bb:b0:bc:b5:14:0b:4e:1a:54:ef:fa:d6:9d: + c4:0c:fc:ed:15:ab:21:4b:45:b5:d9:3b:ed:3c:d5:1e:2e:7a: + 83:6f:24:45:d4:4c:b4:ef:60:43:18:d0:84:5d:16:7b:f5:50: + 80:b1:a9:c2:8f:3b:c8:90:08:fd:aa:17:13:19:38:19:d1:8e: + 85:7c:1e:57:16:8c:f9:8a:e8:29:25:38:cd:bb:55:8e:4a:6a: + 6f:e5:7d:fc:d7:55:d6:ae:38:07:96:c1:97:ff:e5:2b:4f:99: + 2d:70:f2:08 +-----BEGIN CERTIFICATE----- +MIIDYjCCAkqgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBdMQ4wDAYDVQQKEwVJQ0FO +TjEmMCQGA1UECxMdSUNBTk4gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxFjAUBgNV +BAMTDUlDQU5OIFJvb3QgQ0ExCzAJBgNVBAYTAlVTMB4XDTE2MTEwODIzMzgxNloX +DTI2MTEwNjIzMzgxNlowJzEOMAwGA1UEChMFSUNBTk4xFTATBgNVBAMTDElDQU5O +IFNTTCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN3Gq798Zp2z +K5YAFMdgeo1iWyZLMNezTIJpxk1Nc/PUkSFdqzXwyAQO9KM14uEYqZgSA1j4n+t3 +VFuJgSbJqsL0yQyCVypeBelhF8wZGHHrNYPBhp3s8WvK3aGWC5XU4Q+eJG/cPNAo +nvJTRyuhrTIDyD8NgIB98ALSblosRCGbCVAVP6E908nIJOfqTpIvlJAu3udo9saz +kB+8yXuiZdcR6YvwOlq3FwffaeNuuVRqjjqqlH8sCqGturfZYGInp3FAO46whHu4 +yGfvZro9rMOF5Ya7p5z9tuHAEFM91H4bCeafIlynJwl+JxIz+t+bIC8U9xfA5B4H +kR/5ms2o4sUCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC +AQYwHwYDVR0jBBgwFoAUulLpSYMkhlIvx5nN/I1raQhNwFAwHQYDVR0OBBYEFG53 +qEAQSticDPK3WjqlL3lKYRTYMA0GCSqGSIb3DQEBCwUAA4IBAQBHRk/HX0bj0dz8 +K/j8Zc42sfRf7hR1o9lf3nVL+nuInxCMLpfMNRvOJNM2YJXVrhG2P4v0EmmFtTsq +tqt6gYXCVVft0LXnT1Q3USTJ1Qc677bFGj4UKaem+AgqCyZ5+WKFSuXqkMpxOBaR +Tn7947PzVY9a0IbPM5SI8ZCZy4HigZJoL8Nh1VKN5ppbAINCJ4j22frRvLuwvLUU +C04aVO/61p3EDPztFashS0W12TvtPNUeLnqDbyRF1Ey072BDGNCEXRZ79VCAsanC +jzvIkAj9qhcTGTgZ0Y6FfB5XFoz5iugpJTjNu1WOSmpv5X3811XWrjgHlsGX/+Ur +T5ktcPII +-----END CERTIFICATE----- diff --git a/rootkeys/root-anchors.p7s b/rootkeys/root-anchors.p7s new file mode 100644 index 0000000000000000000000000000000000000000..ee06fe59b56cd0d232b684cbc292c13d958eddaa GIT binary patch literal 4095 zcmchac{r3^AIImuXJafA#+GEs62rJ>NS4Y@*`Gm5DJq1RYzwnszvl~4v0qTk(xH1p7uWza zm`26Ehp5;w5CDiQ5HkviXNQBEkuZqmXAzJ_Wh;TGa2JRQTBN~200aRv#P*{AU_rtl zDIz<>ih^4pFkHxeS{la2L|%w{Rl~X1*R-&Xk;XnlVJ!`4D=!;Skw}D;Nb(9hh$Jgs zHWHCYgm!+HkpADM;)8hBrov%QxO#Zl9and>b+si>+#QHpp)Ehw!3^;H+7D3y(Tytw zkT5tEz``IZfB~rh04u>lp&^Y?E2>pB+1y_bF9g*x7d2F#@^-(SU;}Qc_Sti$DRtO? z(1sIVyMq;9Pq-OECzv)w`YB9}SJ*hDaGaa=i9Nk*CdeZ>zU%s_z*aW~RrYfNv!Q0C z_Cyx+nhPc_vG;>4ZOi4Y7sFtQVf>?<+tTcZxSAJkUv{@^8Ij+|5gdpxw42Ic-|>Jp zFzpa3eoZvP=n-?3U@^*+^TMr5C<>xjs*BA>^)tEg`OYoiT&(+xIl06DgNIQWl%CSw zQyln!UlENg`cSoXP0?f)$64&6H~ztFG%rGERQVBqpRyWb~V9OSN~ z4MoMaan~ms#K=7X;Q$P{c^*2qc6fqZ0I-4pAsEDtf?Eh;R}}&d!qOnYRV|L-fp91$ zJPJS}(Qw3%76=Kgc5g%QK|BFCU$v5^^!vBC2v*eKj<$&`vFXMK>*LuGJP6zkVVcf< zwYuhcXBF`tuc~6CY)13OBVt)QA^;X-FKmv%6}BwbjXEV+7E&KWXFigfF_gV1-n#4a zEnl;_^3S?uiS#rNDebLLPk1AKFd$>gOL|4_a16zv$6L=?n1#N~=m019VxED8eX0!DejJ*XNjwaxCSQMdL5ZU@f6n5SmPgVfk1JA7G|rELdrxENgh%l zDz8JTOe7JNzRQ36^S|RZjdA*si9%mWM~i>y1b5kZ9f!1#t(?>2Cu+OTq$Ob%K3sNn zwJ-~gnvt2NO46}O&13=dzU^%?P;~#7OTzN9UG!=8O(J1#OTnTB)_VJS{E}~2S8<$8 z!40jHd*=5mcMmA_-1W%)(#i-fB#Y+EcP7WrjanZWQ@aq$QoGsv6QMn3a}y|tb`;Sg z_30MC3~5;zDasY)`t$8u3ff&tYx$=9C+7p2S^z@$E6$P+9QC(+y4n0@nJ&7gKC|%R zI$cT>)vq5b&&_1cRXnL~@umgX9p6b#65wbqKqP-Ws<^2o3-%e?=GgwgJ5o^7y_Wu~4#HZDQl{MQ2AQ zqjJ+%r)FR-+>nj8vAS1okS>Q;)$7D0hAQ2AU!xj6;)-s@)z*$RC&uJL zRs5$PkGgcJ(N9X;OUv4+`J(4oKx>B8UV>1F8mn(*Z9K|@X)GQ*YAv*d2~Z&;9-778^yl36kp(6=ZVM>do@#CX zxaj4UIg^}60D~%jjdo#jw}U!NlF*sZc1KYcSHpYO?!4V>Sb&|Mr~}isUCmjWl-!}K zmng#eC1Qs9bp5QC(%R`#e?GYJEqF!pkc#^RvEmL&v`afp-;$IvqpQ~v?kc=ZX5wy; zf5q%XU;ps&gI7hC1UQr>o2ilexjPguv1a)P4Di*NGHGI7U)`1R2xC;Vj?r<*_IDVe z{$g?e2-2EGu36kaI^bX5OKY65N7PMFQpUH@Qf_5dwibO5=M%%9?Z}x)e0(_0XcSK( z0G}=-oLF|5zOW?rK+9m?Y_PfZyF!h;eR=eUq*J({L)|hOpTj$!`)-FD4|pOJb^IbHvGWHF(ES|VDaF~FxSEC<B^xi+>Iyl1sLDj z^0jQ~M?Z+sGF97FFmtS72hvkBD}{IXKufTA%Ha-`R9g;ABy6+oO9czq?JZ3xMM6C06OwkeS zb2oPk4f5T-#tA>Lc;lV7`JwPYiMrg%xjI&=rSuWxxGir3KcCyX9YGbLsqd$qU-YM6 zVM*v1#9kMpyxi5Y{rZfV9zOjJ2~JmI3kWzj1-7|b$!LotGn;a&rSER9ql>+rFuo)g zA4_=k_T+rc{aB&0I^PVtZjSNDDHW@Syy(}C!>*6bouXB8o z8htm|_YvLUqkYNl{Hl;Qp{3a=UulEoo6L51_zN(P-Vi;UEy?UJ$tl0|I$2l_x4>II zvK1XC^f{?9XQ=w$q0H4gM}3oiPYUbILo1amxwHDVxSn5b&>CfWx+b+pb%$GDF5?%M z?V1#e=8k^AdEM+i`pU~-$v5oArYOSIh8+S;V(p4H37rKTG_}Y%PREd9RcTtDPhd!; zh2>;R@mmw~oqvecb)r>1(yBM_!AWJ`T4a)DkvRMLScv|ciP#rzN<4AK{$Gdh&sxM- zwS+dy$A?YFCe{ZI1ztKSS7qBtzBrn62o|I%88+X$)LK@0x2zb)V!YY><5E}ZbJpca z?mQ6#o#I~A$z7dW2|hs-F`W*>2On*;_*#Okd3-;a1{B?{j8Ub>GJVbE<>FW3Z;cM| z+iJ-Z^*LfpN?fV2)FN8niSp*$a<@fSffD*k#nqKJc#}lg(=$v&D##2`K_mzO5aE9? zkJXU(GZ3Z)7D0SJqZXXFF(7UXVMro&J>LN? z4HoWBzYMs{rBd7>^3NhHQ3uk3Fes+=m_6Hd2*Ls&whbCkhtTV}bv2a!cMJ#u z+c(|@00~1-0T>GAKOMn-ElyLgMpG9IIn1Rq$*!DnO}x6;Zs-9?`FByH@qZ39D3EQiD%QZqr zw>p%(%wf~!v9pC+T+8hxEgBw=`66npb{rMhxgQ-m|Mp^dSY)SuA@7TTkh%dU`3o9( zLUoa1vYSeg5ruk}Q@r{e?H1mec6wYT^bgI2y{g$m1z0M(Lx`tZIrEpAJFDzmE^^Vu zZtK~ZcsCD_FMH9>--=e$>$WUzRAE^ZWHREpeLiASpi3zX!D7R>&(9E4ZkR@<4@F5~ M25;;Mz&T$34-lgYlK=n! literal 0 HcmV?d00001 diff --git a/rootkeys/root-anchors.xml b/rootkeys/root-anchors.xml new file mode 100644 index 0000000..bf84089 --- /dev/null +++ b/rootkeys/root-anchors.xml @@ -0,0 +1,16 @@ + + +. + +19036 +8 +2 +49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5 + + +20326 +8 +2 +E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D + + diff --git a/rootkeys/verify.sh b/rootkeys/verify.sh new file mode 100755 index 0000000..eac0d6e --- /dev/null +++ b/rootkeys/verify.sh @@ -0,0 +1,5 @@ +#!/usr/bin/bash +set -o errexit -o xtrace + +sha256sum -c checksums-sha256.txt +openssl smime -CAfile icannbundle.pem -verify -inform DER -in root-anchors.p7s -content root-anchors.xml From 43d3a583703fc6dda4686c8996ea421f8abcab52 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Tue, 1 Aug 2017 11:51:19 +0200 Subject: [PATCH 029/126] new upstream release 1.3.2 --- .gitignore | 1 + knot-resolver.spec | 28 ++++++++++++++++++++++++++-- sources | 4 ++-- 3 files changed, 29 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index 59e0acf..cd49150 100644 --- a/.gitignore +++ b/.gitignore @@ -5,3 +5,4 @@ /knot-resolver-1.2.4.tar.xz.asc /knot-resolver-1.2.5.tar.xz.asc /knot-resolver-1.3.1.tar.xz.asc +/knot-resolver-1.3.2.tar.xz.asc diff --git a/knot-resolver.spec b/knot-resolver.spec index 079d614..ecf1c4a 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -3,8 +3,8 @@ # comment out this define using #%% if it is not a pre-release version # %% define PRERELEASE rc3 Name: knot-resolver -Version: 1.3.1 -Release: %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist}.1 +Version: 1.3.2 +Release: %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -161,6 +161,30 @@ exit 0 %{_libdir}/libkres.so %changelog +* Tue Aug 01 2017 Petr Spacek - 1.3.2-1 +New upstream release: +Knot Resolver 1.3.2 (2017-07-28) +================================ + +Security +-------- +- fix possible opportunities to use insecure data from cache as keys + for validation + +Bugfixes +-------- +- daemon: check existence of config file even if rundir isn't specified +- policy.FORWARD and STUB: use RTT tracking to choose servers (#125, #208) +- dns64: fix CNAME problems (#203) It still won't work with policy.STUB. +- hints: better interpretation of hosts-like files (#204) + also, error out if a bad entry is encountered in the file +- dnssec: handle unknown DNSKEY/DS algorithms (#210) +- predict: fix the module, broken since 1.2.0 (#154) + +Improvements +------------ +- embedded LMDB fallback: update 0.9.18 -> 0.9.21 + * Wed Jul 26 2017 Fedora Release Engineering - 1.3.1-1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild diff --git a/sources b/sources index bec8f63..5743622 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-1.3.1.tar.xz) = b561cead4dcebb53605e4c7b8d7deaac4308ec87688cabbbb56493aacf28fc4a4d1975cc001caf071a3beac6e9f2a2bc57177fda65e85a8ce246fd6bc5123606 -SHA512 (knot-resolver-1.3.1.tar.xz.asc) = 05a59961cbc3c5b76def5b0e3ab2b87a053361d169a87367505a0653262117ed889e070558124b43349018fa986d06aaaeed9e1a97d80357b05db69b31898fae +SHA512 (knot-resolver-1.3.2.tar.xz) = 0fbafad8f4beecb090e2a95a1ce1e8521f51bd0fa43237b45cfec17e5724474c7f50c63c5581c7703b171f51367a279e7974d6dc4920fcdb15054e9c18252fbb +SHA512 (knot-resolver-1.3.2.tar.xz.asc) = 1d4fb734f97ec50056f32ac5612a905aa08479de1ab6b3fb1391c64cc475bd746d480efa37344987d26cc54dca3e3825977d46385b14d0cd9ff760b8a3ca77ef From c5029247be917e9c055b4e6265f356151a3ef360 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Tue, 7 Nov 2017 13:23:25 +0100 Subject: [PATCH 030/126] new upstream release 1.5.0 --- knot-resolver.spec | 68 ++++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 66 insertions(+), 2 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index ecf1c4a..56a0453 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -3,7 +3,7 @@ # comment out this define using #%% if it is not a pre-release version # %% define PRERELEASE rc3 Name: knot-resolver -Version: 1.3.2 +Version: 1.5.0 Release: %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist} Summary: Caching full DNS Resolver @@ -121,7 +121,8 @@ install -m 0750 -d %{buildroot}%{_rundir}/kresd rm -r %{buildroot}%{_libdir}/kdns_modules/{http,http.lua} %check -LD_PRELOAD=lib/libkres.so make check %{build_flags} LDFLAGS="%{__global_ldflags} -ldl" +# check-config requires installed version of kresd, do not attempt to run that +LD_PRELOAD=lib/libkres.so make check-unit %{build_flags} LDFLAGS="%{__global_ldflags} -ldl" %pre getent group kresd >/dev/null || groupadd -r kresd @@ -161,6 +162,69 @@ exit 0 %{_libdir}/libkres.so %changelog +* Mon Nov 06 2017 Petr Špaček - 1.5.0-1 +- New upstream release 1.5.0 + +Knot Resolver 1.5.0 (2017-11-02) +================================ + +Bugfixes +-------- +- fix loading modules on Darwin + +Improvements +------------ +- new module ta_signal_query supporting Signaling Trust Anchor Knowledge + using Keytag Query (RFC 8145 section 5); it is enabled by default +- attempt validation for more records but require it for fewer of them + (e.g. avoids SERVFAIL when server adds extra records but omits RRSIGs) + + +Knot Resolver 1.4.0 (2017-09-22) +================================ + +Incompatible changes +-------------------- +- lua: query flag-sets are no longer represented as plain integers. + kres.query.* no longer works, and kr_query_t lost trivial methods + 'hasflag' and 'resolved'. + You can instead write code like qry.flags.NO_0X20 = true. + +Bugfixes +-------- +- fix exiting one of multiple forks (#150) +- cache: change the way of using LMDB transactions. That in particular + fixes some cases of using too much space with multiple kresd forks (#240). + +Improvements +------------ +- policy.suffix: update the aho-corasick code (#200) +- root hints are now loaded from a zonefile; exposed as hints.root_file(). + You can override the path by defining ROOTHINTS during compilation. +- policy.FORWARD: work around resolvers adding unsigned NS records (#248) +- reduce unneeded records previously put into authority in wildcarded answers + + +Knot Resolver 1.3.3 (2017-08-09) +================================ + +Security +-------- +- Fix a critical DNSSEC flaw. Signatures might be accepted as valid + even if the signed data was not in bailiwick of the DNSKEY used to + sign it, assuming the trust chain to that DNSKEY was valid. + +Bugfixes +-------- +- iterate: skip RRSIGs with bad label count instead of immediate SERVFAIL +- utils: fix possible incorrect seeding of the random generator +- modules/http: fix compatibility with the Prometheus text format + +Improvements +------------ +- policy: implement remaining special-use domain names from RFC6761 (#205), + and make these rules apply only if no other non-chain rule applies + * Tue Aug 01 2017 Petr Spacek - 1.3.2-1 New upstream release: Knot Resolver 1.3.2 (2017-07-28) From 078525d4a028e75f8ba7d80d242500100ed99d41 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Tue, 7 Nov 2017 17:39:53 +0100 Subject: [PATCH 031/126] fixup! new upstream release 1.5.0 --- sources | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/sources b/sources index 5743622..8d91a58 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-1.3.2.tar.xz) = 0fbafad8f4beecb090e2a95a1ce1e8521f51bd0fa43237b45cfec17e5724474c7f50c63c5581c7703b171f51367a279e7974d6dc4920fcdb15054e9c18252fbb -SHA512 (knot-resolver-1.3.2.tar.xz.asc) = 1d4fb734f97ec50056f32ac5612a905aa08479de1ab6b3fb1391c64cc475bd746d480efa37344987d26cc54dca3e3825977d46385b14d0cd9ff760b8a3ca77ef +SHA512 (knot-resolver-1.5.0.tar.xz) = 4bc7cc52576ef6c43e89524a7b32bdf9e892c4a16316ade7f0e9ad8c342f3d2f7f1f6f5ce436336608c9951101ecadcab4c20a66dd24a98226df1cf8c14c0dfa +SHA512 (knot-resolver-1.5.0.tar.xz.asc) = 5c96a391ee70d670abcb010a88392e704665f2ae3c27287c95c3bf5b0c3a55417761becb72d352b61ec65d0d73c3ce86181226215fe4748a233ce82cef45ee22 From a77666b9c9dd154bfaaac16ac9fee013aefe1255 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Fri, 5 Jan 2018 13:15:47 +0100 Subject: [PATCH 032/126] configure GPG signature verification --- ...60B60A80E782062449E747DF1F9575A3AA.gpg.asc | 65 +++++++++++++++++++ ...B9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc | 63 ++++++++++++++++++ knot-resolver.spec | 10 +++ 3 files changed, 138 insertions(+) create mode 100644 gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc create mode 100644 gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc diff --git a/gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc b/gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc new file mode 100644 index 0000000..50ade25 --- /dev/null +++ b/gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc @@ -0,0 +1,65 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBFgDknYBEADHEQwLBlfqbVCzq7qYcBFFTc1WCAFtqiKehOrsITnKusZw4nhY +wlKQxcumgj01xJOhbfHBCBeGlDydYqemKg4IfY2nwSyPwZZYMJn7L7AGrCeytr4V +MvDJ7o7qDZjjim4ifv+GUwdk3plXx6oMF4nctesI8aAOuLUHAn0PfrGfNhWoaglO +KgdOI6DGjhI/aGkvy+jrI/+XsdMV+3f1RuEOfI+Yu4SXFjJyhAmqEOBRxxdHqKre +IIpz3Lg38yWwiVGfwgQT+nFIz9BpHH3lWg1uS8xM3ezceBmRYV8zT9PvbeZ57Bla +TR6rLae5RYwV397PSLBqqLkB5H0TDRUFBnwBsUobLebYHmJCOydvyNv5AFkLmLZ7 +O4j2jFo1WPSMt3ThM6wRwqrnB4Gi+6onyrZfE1DnVZMqbxZ3VXa+E4S5YwrfCLUE +rGEn+d40OtoRZmQXhRPVAsdjimMj9oFM9RoxSgUrDg6Ia3n0IrKFb++zHAFbqkR5 +g4qzXiOMEG621GYEex2sDEKz/PD4CVKlNI9eld4ToH592kAwzJmd+sAi+Rfos0NE +zxuFd0ekAOeWoURo0zoYTSWPlMOmFMvcpH6LP3leJmY7x4z/b1ng/+7UnKonVALV +PFbRbElOkIfAtLKcUEofwV1jr7DyYGPalJtiDJPomB041ZHCj2RxyXY/oQARAQAB +tCRWbGFkaW3DrXIgxIx1bsOhdCA8dmN1bmF0QGdtYWlsLmNvbT6JAlQEEwEIAD4C +GyMFCQlmAYAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AWIQS2AGRgtgqA54IGJEnn +R98flXWjqgUCWcjP6AAKCRDnR98flXWjqkwxD/4pscbvmho3115B1/1BCxhyMrzh +hDhEPN8qZWh8KLfcdcTFJqN+YnyVKpDYOWy8tOUSjPE+IeezqjdlwghoD5gqRfrW +1g8mB7het2sDIl2PrY67Rf+rYowwKLjNY3gGNfpVFrq4QbImF5F1+44FfE7PjsHS +ZGO6/E54ZbaSZ36g05kuNAQGOmo2teXMgk73aqQFJ2Jd1XNq5cXkr+LYlIXCuyWi +vLixNHACZBPipR8K2sbSlS65s2ueikUUocVUfe8wW8pDvaAuKixwgINyaZIz1dFn +uzN3J6wazN5/zu7g8uUFRZVVxG0+2Cx5D06Jt4HD6/mJPeY8sg7neQ1JcMe/5XIF +ecnNOzLuveqAQpb+RQGV0aQwhzaaZgPouWHNPRCgXhCrS3CAOnFXceg2T/1TUqnl +rhw0rfufb/V83Uv+RFUqQ9RMgFnIOAxlgVlWtBTfhQVPFkAKZiARDSroR6Vx2uc1 +A071pO0FFsqbvAS7a+gk+9cRvHp1+/L9W1ZIjYJg3rT3xLPXjYERGRzvVN08EIwj +zMRZqQQsU50yrLmE516aKIgnEnHnFRNV3X5sIJ5VZXVTBG+S8dzU4hUWrd71BOBW +32mH7/+EEBAWw5jisJP+rG+sltfh0gwk3oyEpsRBf3GKPu0bGyqQv/n7DXqC/umx +XOfSCvbh92m8pIm7PrQwVmxhZGltw61yIMSMdW7DoXQgKHdvcmspIDx2bGFkaW1p +ci5jdW5hdEBuaWMuY3o+iQJXBBMBCABBAhsjBQkJZgGABQsJCAcCBhUICQoLAgQW +AgMBAh4BAheAFiEEtgBkYLYKgOeCBiRJ50ffH5V1o6oFAlnIz+wCGQEACgkQ50ff +H5V1o6pvJRAAkxE4HWvOUgKZ2hgeXQc6QhX+HBi5QfPLgC5bC1BkCTcbXuPdKuZZ +Pdg5J/+0GGbtqWSJnXWXL1D1VZWs6lpgM9Aclsbn0XnsHSX4ukyafrR9v17CnUMM +XgXoggTs1a3jd4xva0QDQq9wDru94cZU6rsBsjimeNvfRkiG6buAHqZJPblCQ6VD +I9OPopHpk+rV93Bj3gLVnrbJAKNNHljcxFRV7D1XC19aFJjrGjEIYBCvxK26Mg3V +YMm/jo71nayFWyS6/ZaEPTCVQCqrgX6+4ACXo/tMTSyFQ8yUMXKmqMZXNKynjl7K +eRL08iC2sZ4B5e7ceuu95xv/4DzImQf5ETBbASxiyrSHRRb60tDskwjh7pFxZGHW +0G/HAT3Ss3wPbksPwxsMTIfgOLBqSiHw2ZS92Y3DQbU1KH1XWSYdhwCAm9qF3kKZ +yZYOiKDI9KZ3wbF0e7p29cvkmJ8DbXtxmLps7J7w5Oe5UIqVHr4GYovtSuzRS+Ax +UEpBWeQOnxKNe6/oEHmuLGddHcE6U8wUGGuz86gnhU+r9tfSkA/aFUcdBIiIiqYS +zMpqjqNGKD727k77DbJzbuOjCXF+cYiyCK/KvyYc3XMNK71XI7y9valWbt4zNyjg +kyKjiZScCaHv0A7LDalF7gOhspcevd0dapstkMv/HvJg890qO7Ox6Ny5Ag0EWAOS +dgEQAMh8MN4bixLbHcqoI4hjIbRCji5qe8hZeOdB2PaD3B0tNlOQQtd+9LLDUoa3 +TgotgAg23uNWccfOVnLmjtTlarp4Nrpl9OO5o9sULIkwBUQy2bELvHEBaBMvwwS9 +m5O04XytS4fjcmQLNFGj6Q5BqHUtA3vaLAPuE+jX+DzmGnmr22FRUnQykuJVG6Aa +gKSpw/08yhcRXKbhcehTfdpbXk2zqIxjIi6GbxC2POip/SrhWfBTNmUjR8dWe+Sq +Lrnxq3ZHgqGWFWIrs0/n57doreHSKSJZxfssTLeSwfzEq5hAgeQgBSbcc7jHHJus +g1GUEllovb1IMSCcL7ecNAiAU9+dwxnj+Fpx9K+WKASqEW4e4uH09JVrzF0xv1dp +asswXQpTHm8h33zIG2tuio+qHg8oA3wuWhrFWqsNVHv6kOUEakyXCVe8VS07UtRG +plapHysD0tM0356xdY0LZzvz+KpH4AUURvQVxhq8pB6Vzsqpl+mdMG1dj+I/qdNq +EnnA5eclV6ZSX7F320v8V52kpGjf+5glNvbpdunAFTcQ5Az7p87UhYvSvSzNk/11 +mCUBlzO9TqZjjUCRhduJce1qf5KG5x7W4xg84wzwuHki+zAOeqra1mizPuHjygDX +LdqtKunNLki7NENs6HIUuuDHINGMy9bIp1jzda1yw5N5cKSLABEBAAGJAiUEGAEI +AA8FAlgDknYCGwwFCQlmAYAACgkQ50ffH5V1o6p+MhAAgNH9VwQIPljGjT7SLdJN +echT34XWzoPRoQ3GBoLxSDsUbmhVsPUi1LezhrlJyKSsSkV7UCbLPfHx5Io6O9Dj +WFj7i4X0Riv8IPQKOjLhcORvJuN9QgUv2sK4nm+oj47wAEVyQj00wWZPzQvfPI4i +nQofD20whw7JfoEg8rT9eUFK3akn0tln+Oud3o+/o7bk48Wc5hoLzUouiQ5W/Sjb +ZgUCkAIKZzkDOOiLREpsxw55nXL4Ty1A7I8JKSCenJWrDs2jm8MSYm2u4hT3BsHA +pQksGIzDVxbZ3ghlJxAGuUQSMfovi1dYqgd1Ub0wurTCFLnqEO3HU8umnzZIcEGF +5uP6Q5jU/FDHZ88J5U6RUNAnoA0EQ1nPnSAwwRxhBBGAYdr0zhNOCq5mFKdW0LDX +oD37y8KB4m9IxL6ITzCdnybWQHdUiRJYMD2zPB+3pigYk7B8BfIC+xto6OwKBqam +I6l5AkUtLUi0za/qh4fuy7a5G7v2VU034eEP6sN1Wi2EIeAtLQZmv2Hr0MtTtnN0 +2V1xc9UBfG/fx4/97KtioE9QHGedRPsRvnG+nFKoJIoZoJt/ccduBj5TQHQkbqtN +foiC6JflqMejsBeoZqsdRDEpsXJhqFERK9K5DJxVbFngGHlaBOKuvPasQj7vYgjC +TCZ5EXtaPaEGEje5svkvfIA= +=LEjS +-----END PGP PUBLIC KEY BLOCK----- diff --git a/gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc b/gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc new file mode 100644 index 0000000..bc596a4 --- /dev/null +++ b/gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc @@ -0,0 +1,63 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBFhri/0BEADByTMkvpHcvPYwyhy0IDQ1B2+uU6AWP0QJQB3upM/YqxoJBeMQ +5SxpO+W6BsU0hTIF90AKIgiiDtMH1oNhHnzRXqePKORIgL3BbH5OxGcbqCYk1fIK +k43DliCN1RcbTyRVREnCRQGWMTUbRS/jQ3uyTAX4rT0NhPWhPy6TMLGEg6WJJz0I +zhBEw3TitvAlq6XHbi5EZYwUAHqIcuqr3sS+qkWqlIBlahu1hqhTcmYGz7ihjnWk +OFi1rjRfLfudAtgFpUSmsixh2tifdy+Cd8OBQbtF2kM7V1X5dUzw/nUBXm1Qex2q +ohRmCspwqivu7nlDMrLoilmPaeoR5evr5hpIDdfPcJAPTJk4n56q6MTHFJWkGa0y +q13AJHLANNjQ/dF+W6Dhw9w2KBpuw0iGZQBBf5G9SQ1xJ+tU9filaldsTAX1gMkV +so//kGEbuRIJnJr7Z8foE/zofFyoAv21VWy2vpgQ3CnEWOZMSmYH7/gZqcM7nfkj +k4zAijpjYA3qlXoWa44/nrkAGvt7sAMsxY1C2H7tr3h3/rwyfbBqQ9nMpNwYLXXa +Dil7uzyqlpKDjwWCzYd3sH7ATyT4htrd0BY5+IFimSfHyLwixhakH8E14YYyV9tz +krB7fiWdg7+zDThLtZMvtrehtkjVDPT50xg8TMr68hd3GRWBUJHszMTnlQARAQAB +tCJQZXRyIMWgcGHEjWVrIDxwZXRyLnNwYWNla0BuaWMuY3o+iQI9BBMBCAAnBQJY +a4wfAhsDBQkDwmcABQsJCAcCBhUICQoLAgQWAgMBAh4BAheAAAoJEM6N1qGlCiHk +jGoP/3fvimzczcaqPM8lgY9fKKcr2DhH42HF+fXsj0SvPeEoYDuWwIcsTGna6sdm +rhCD/mB6eCNivAOcZYDH7j3YDgdFX2xy1sRY0ylFuyfcOT1Qn1xNTglSaf00gUWD +gLBQB/USphB9Of6U1ka4gLJpCWKoZ3cLQe09cUpq9HOZYs/gWSNx9UTr06fcO0rt +gZpg+IZJN/R2ORhQBwk4n2Dtx5J+Xyoy7ht1Fwz07BWAGJ4P8oJOhsi1LukDD8ul +3+6IeoSbRvyGpP6boegaMwxPR10VgsrYU2t1cK58iRv/xJ3TClb0JBn5aI3Bmh1j +mPROrC55tvxRoeRLmxXHzbPZpWdbRjEcf9SEiAGNTgo9C+eXbubeSETWgisfJhZ4 +ebhkHnfze+e+hvbaTSoFyMbKeOlfoYCmaDRBgT53i72HIkvO+HrVcmulZytw/yyO +HuwObEFVgn3AeORvrb8I1kiv5W4wnZxDslhCeRR+wMGiKhc9ewU/mg3Rqo6GN+8m +T0DHnsHuq1lu3WYslfNYkBSonFcctFD2KXVozrwpn3vWJ4Qt6qu5XS1lDCD5WshZ +Xh7qoISWnnMqsMyBW/R7WyiABeIz4uOgSkRwT2wSUYr+JtBZIjREy2JQDVhjf18D +L1Qa7OxSes8YwWSx1pQAzwbfFx0gzRDyIT/39le4pX430yTQtCBQZXRyIFNwYWNl +ayA8cGV0ci5zcGFjZWtAbmljLmN6PokCPQQTAQgAJwUCWGuL/QIbAwUJA8JnAAUL +CQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRDOjdahpQoh5GIsD/9WlnEZKsuJaPxp +xuOcq5oxbhU/M+/K/OR8EZI2dNVk0p9sbwnUHK/Ag/N3d1KWjVIvuP1XNo+Cn8bO +WM/HUJqCwCh56nmrypg4atjfqYCObg0Z6NznXInhLQ6B4QSbjDU56Fm7sKPDYc6u +m0GniaywC4mxlltSxiTpGhQxO0PXGF9FA91x9GVikbmEjxt9LQTjaN+Qbva2teof +fUMuGiAaBHH/nhp62jpR2otw9hEIJKIEHTltXgD7wIsgmZV9BH6YMuCT9gDxqsgh +IXxKZEXrNEQksdyr1tYGyBbKDBsFPXh0+y0nVnuCLdDi2tFBqRZqJKiLBFGSsDKI +9T/9l/Yk9Cq7tcT0KYc7M9F7nzZAc5F2Odwp1MEY9iJXZI2QTSfmuBu6Xs4hibOz +UrkvRpos/4NPwuwigS9jTr5FzeXlSHMY//aHrNVkbdoyoI9ycbCj2DrXN9NsHjEN +YFsBQhR/LmPv+MufuEREUh1VheQQNRi+c8ox2ffjBv/laQHHkOJiNmIEZJMkDlR0 +YMKKwHSTflgycU3IOPl1ZAno6iZ/eVq9m29UeRw5ecZKjfLCtDj/jUIcNJDi8OXD +iHlOOh1lcY/6LF0C0u6tVtOTdBo4OE2mxruk5cPkEXr0TeVYL0T9lZ2mthTfuDk5 +5M4Oo9Bwr5JjpwFrdUIYfWE5iBQEabkCDQRYa4v9ARAAxaeGX8UqCkwGndCJBSvQ +laGelyssGCxTTz4c8PvoG7xy9hF+0KoRLKm7FjGKR+I3PyqueTmGFP5SHFC7g9GP +aA0dulxUKLtBXkjZ80Rm+tO1PDhTj0PnovdjJtWD0N9xj4/Bqm0KZAKd+bH4yeuE +x/xEGN/ETd947B0ZIcLVlP+sqPkWbO3BUboobi5fBbqD9AObv8fpTTXiAZPH9uy1 +WKxfNTUgww2I5zmwmofkC8xgMBg7Y1pAVWsKaB1sKufDkEseaYsMjgpxSXhTjUXE +0YDs9t/a7BAOS3mH5jhnJzcBugh6CeWXVicOTlfQaAO1ExxvecVR1eUIhJuquooC +OsCldkbRUu0aHtFrfB+4AuNSXqmik1LBpM+ria2hfJpiskvBPpkod3Y5qnSTRxda +SaisQMT2APWNIz52FnhB+Hz3jkdmLwY87bMnvZzr9QLijbtN3bs6HMlPeQ3z/5cD +Sa+Uh/dfFX9be1nCY/XYOifSXOSzsINd0K99U7mYo6zHajOyySgv9LTpEnlzaDJR +yTiKm6puzeNeCNB8rWxDX+wIsg8TQOU8ySpAdHgTy5thTEAhy32rCR4Gwq0Lrep2 +MN39xp9/jw8xhByPbH0L/5mLzu+6EUhsPtx8tU6MSJ3CIqwMkaWuSnTy5JQ6QA76 +X5F47i+iH2WdDiFii0kWvw0AEQEAAYkCJQQYAQgADwUCWGuL/QIbDAUJA8JnAAAK +CRDOjdahpQoh5J+eD/wIMs6332M0aune7x3xYXfB8xx61AbTivudfNgzBNSV/QKM +OQ8vZG38QH03OLWwmORJ4aFCAm5lQCecC+ZaxsUD0p7pSMhfDpiY3FZRiOs12Lz9 +FR2fy/HT3H/kT6oTAj6WsXtvoeV6T8bzpAy5Zwq7AOCdWwBluZKcXRp2OGka72io +bRjKoEsEsduZd0Z6DkTlP4Uw1eBBwrk5DEXyC5rLjU+yLeNIi+Z8g4ifKN6dQi40 +cFM1Z+K+IxPA14W1l2iidCkGaSokA1Ve6iXCSHgSb2aRX8SeOC8QXLfU5AuvUTp7 +WIXejO9N9Q09zyGFvVcjISzeXUX84RHRVHPtwJZ6DjinBsGIgpx9g8A72t2YnDgB +/NPfZlmXMFS/7IyimyRj6CW3U/Qt4Ep7KGt7gW7IgoUYQJ6PNCbJP4oG+EGjMOD7 +Et9t9JHwRpEP6ADzzNIifZJ/DVwf/YgXuXChFIomEH0p/cdR8htLE9/40mGqt6G5 +gTRyRNuMP0SlqD7Gio6MmiJwLlOS9HDWd9DlnXlhURCMZWoxZdr12/ZwnPNP4uj3 +HickosiYHeXGBC+IX5/wekV6YfZACckrKpSGaAYXMJ3hl5gEtDONYyY7iEHbeaZC +4TPV6F4wRTBhrQPwrYonBIIrSLSX1QsXSxuG2Tgq3z5nrzBi8aRJgRqLkPXVUA== +=59Rc +-----END PGP PUBLIC KEY BLOCK----- diff --git a/knot-resolver.spec b/knot-resolver.spec index 56a0453..fb44e9d 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -24,6 +24,13 @@ Source102: kresd-control.socket Source103: kresd-tls.socket Source104: kresd.tmpfiles +# PGP keys used to sign upstream releases +# Don't forget to update %prep section when adding/removing keys +Source1000: gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc +Source1001: gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc + +BuildRequires: gnupg2 + BuildRequires: pkgconfig(libknot) >= 2.3.1 BuildRequires: pkgconfig(libzscanner) >= 2.3.1 BuildRequires: pkgconfig(libdnssec) >= 2.3.1 @@ -81,6 +88,9 @@ Requires: %{name}%{?_isa} = %{version}-%{release} The package contains development headers for Knot DNS Resolver. %prep +gpg2 --import --import-options import-export,import-minimal %{SOURCE1000} %{SOURCE1001} > ./gpg-keyring.gpg +gpgv2 --keyring ./gpg-keyring.gpg %{SOURCE1} %{SOURCE0} + %setup -q -n %{name}-%{version}%{?PRERELEASE:-}%{?PRERELEASE} rm -v scripts/bootstrap-depends.sh From 867b52d5951a3ae0043067dd13208699003f20f7 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Fri, 5 Jan 2018 14:10:12 +0100 Subject: [PATCH 033/126] 1.5.0-2: generate documentation package --- knot-resolver.spec | 31 ++++++++++++++++++++++++------- 1 file changed, 24 insertions(+), 7 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index fb44e9d..c82bee9 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -4,7 +4,7 @@ # %% define PRERELEASE rc3 Name: knot-resolver Version: 1.5.0 -Release: %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist} +Release: %{?PRERELEASE}%{?PRERELEASE:.}2%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -45,12 +45,11 @@ BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(cmocka) BuildRequires: systemd -# FIXME: documentation fails to build on Fedora 25 -# https://bugzilla.redhat.com/show_bug.cgi?id=1333391 -#BuildRequires: doxygen -#BuildRequires: breathe -#BuildRequires: python-sphinx -#BuildRequires: python-sphinx_rtd_theme + +BuildRequires: doxygen +BuildRequires: breathe +BuildRequires: python-sphinx +BuildRequires: python-sphinx_rtd_theme # Lua 5.1 version of the libraries have different package names %if 0%{?rhel} @@ -87,6 +86,14 @@ Requires: %{name}%{?_isa} = %{version}-%{release} %description devel The package contains development headers for Knot DNS Resolver. +%package doc +Summary: Documentation for Knot DNS Resolver +BuildArch: noarch +Requires: %{name} = %{version}-%{release} + +%description doc +Documentation for Knot DNS Resolver + %prep gpg2 --import --import-options import-export,import-minimal %{SOURCE1000} %{SOURCE1001} > ./gpg-keyring.gpg gpgv2 --keyring ./gpg-keyring.gpg %{SOURCE1} %{SOURCE0} @@ -99,6 +106,9 @@ rm -v scripts/bootstrap-depends.sh %global build_flags V=1 CFLAGS="%{optflags}" LDFLAGS="%{__global_ldflags}" %{build_paths} HAS_go=no %make_build %{build_flags} +# build documentation +make doc + %install %make_install %{build_flags} @@ -171,7 +181,14 @@ exit 0 %{_libdir}/pkgconfig/libkres.pc %{_libdir}/libkres.so +%files doc +%doc doc/html + %changelog +* Fri Jan 05 2018 Tomas Krizek - 1.5.0-2 +- add doc package +- configure tarball signature verification + * Mon Nov 06 2017 Petr Špaček - 1.5.0-1 - New upstream release 1.5.0 From 15e19b08386ad885950895f36169483aa472655f Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Mon, 8 Jan 2018 17:27:47 +0100 Subject: [PATCH 034/126] add tests --- tests/test_manual_activation.yml | 23 +++++++++++++++++++++++ tests/test_socket_activation.yml | 23 +++++++++++++++++++++++ tests/tests.yml | 32 ++++++++++++++++++++++++++++++++ 3 files changed, 78 insertions(+) create mode 100644 tests/test_manual_activation.yml create mode 100644 tests/test_socket_activation.yml create mode 100644 tests/tests.yml diff --git a/tests/test_manual_activation.yml b/tests/test_manual_activation.yml new file mode 100644 index 0000000..750fb48 --- /dev/null +++ b/tests/test_manual_activation.yml @@ -0,0 +1,23 @@ +--- +- block: + - name: make sure kresd socket and service is off + service: + name: "{{ item }}" + state: stopped + with_items: + - kresd.socket + - kresd.service + + - name: start kresd.service + service: + name: kresd.service + state: started + + - name: check if query is answered + shell: dig @127.0.0.1 . + rescue: + - set_fact: + manual_activation_failed: true + always: + - name: collect journal + shell: journalctl --since -10m > {{ artifacts }}/test_manual_activation_journal.log diff --git a/tests/test_socket_activation.yml b/tests/test_socket_activation.yml new file mode 100644 index 0000000..ce76b69 --- /dev/null +++ b/tests/test_socket_activation.yml @@ -0,0 +1,23 @@ +--- +- block: + - name: make sure kresd socket and service is off + service: + name: "{{ item }}" + state: stopped + with_items: + - kresd.socket + - kresd.service + + - name: start kresd.socket + service: + name: kresd.socket + state: started + + - name: check if query is answered + shell: dig @127.0.0.1 . + rescue: + - set_fact: + socket_activation_failed: true + always: + - name: collect journal + shell: journalctl --since -10m > {{ artifacts }}/test_socket_activation_journal.log diff --git a/tests/tests.yml b/tests/tests.yml new file mode 100644 index 0000000..b9a81b8 --- /dev/null +++ b/tests/tests.yml @@ -0,0 +1,32 @@ +--- +- hosts: localhost + remote_user: root + pre_tasks: + # FIXME: Turn off SELinux until bug is resolved + # See https://bugzilla.redhat.com/show_bug.cgi?id=1366968 + - selinux: + state: permissive + policy: targeted + - package: # Install additional dependecies + name: bind-utils + state: latest + roles: + - role: standard-test-rpm + tags: + - classic + tasks: + - include_tasks: test_socket_activation.yml + - include_tasks: test_manual_activation.yml + + - set_fact: + tests_passed: '{{ socket_activation_failed is undefined and manual_activation_failed is undefined }}' + - name: report results + debug: + msg: | + test_socket_activation: {{ 'FAILED' if socket_activation_failed is defined else 'OK'}} + test_manual_activation: {{ 'FAILED' if manual_activation_failed is defined else 'OK'}} + + - name: fail playbook if tests failed + debug: + msg: --- {{ 'PASSED' if tests_passed else 'FAILED' }} --- + failed_when: not tests_passed From 5648f15f9b04e880440b77a8ad1aa14ab00c9a7d Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Wed, 10 Jan 2018 16:13:39 +0100 Subject: [PATCH 035/126] add root.hints file and update documentation --- knot-resolver.spec | 11 +++++++---- tests/README.md | 22 ++++++++++++++++++++++ 2 files changed, 29 insertions(+), 4 deletions(-) create mode 100644 tests/README.md diff --git a/knot-resolver.spec b/knot-resolver.spec index c82bee9..d91e795 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -25,6 +25,7 @@ Source103: kresd-tls.socket Source104: kresd.tmpfiles # PGP keys used to sign upstream releases +# Export with --armor using command from https://fedoraproject.org/wiki/PackagingDrafts:GPGSignatures # Don't forget to update %prep section when adding/removing keys Source1000: gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc Source1001: gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc @@ -116,7 +117,6 @@ make doc install -m 0755 -d %{buildroot}%{_pkgdocdir} mv %{buildroot}%{_sysconfdir}/kresd/config.* %{buildroot}%{_pkgdocdir} chmod 0644 %{buildroot}%{_pkgdocdir}/config.* -rm -vr %{buildroot}%{_sysconfdir}/kresd # install configuration files mkdir -p %{buildroot}%{_sysconfdir} @@ -150,11 +150,11 @@ getent passwd kresd >/dev/null || useradd -r -g kresd -d %{_sysconfdir}/kresd -s exit 0 %post -%systemd_post kresd.service +%systemd_post kresd.service kresd.socket /sbin/ldconfig %preun -%systemd_preun kresd.service +%systemd_preun kresd.service kresd.socket %postun %systemd_postun_with_restart kresd.service @@ -166,6 +166,8 @@ exit 0 %attr(775,root,kresd) %dir %{_sysconfdir}/kresd %attr(644,root,kresd) %config(noreplace) %{_sysconfdir}/kresd/config %attr(664,root,kresd) %config(noreplace) %{_sysconfdir}/kresd/root.keys +%attr(644,root,kresd) %config(noreplace) %{_sysconfdir}/kresd/root.hints +%attr(644,root,kresd) %{_sysconfdir}/kresd/icann-ca.pem %attr(750,kresd,kresd) %dir %{_rundir}/kresd %{_unitdir}/kresd.service %{_unitdir}/kresd*.socket @@ -188,6 +190,7 @@ exit 0 * Fri Jan 05 2018 Tomas Krizek - 1.5.0-2 - add doc package - configure tarball signature verification +- add root.hints file * Mon Nov 06 2017 Petr Špaček - 1.5.0-1 - New upstream release 1.5.0 @@ -443,7 +446,7 @@ Bugfixes + Metrics exported in Prometheus + DNS firewall module + Explicit CNAME target fetching in strict mode - + Query minimisation improvements + + Query minimisation improvements + Improved integration with systemd * Tue May 31 2016 Jan Vcelak - 1.0.0-1 diff --git a/tests/README.md b/tests/README.md new file mode 100644 index 0000000..295aeb7 --- /dev/null +++ b/tests/README.md @@ -0,0 +1,22 @@ +Package tests +============= + +These tests implement the standard test interface in Fedora CI. +See https://fedoraproject.org/wiki/CI/Tests for details. + +Manual execution +---------------- + +Run the following command on your machine. Please note, it will make +modifications to your system. It's best to run these on a clean, throw-away +testing system or a VM. + +ansible-playbook tests/tests.yml -e subjects=/path/to/knot-resolver.rpm -e artifacts=/path/to/artifacts + +Automatic execution +------------------- + +These tests should eventually be automatically executed by the Fedora CI +pipeline. As of 2018-01-10, it is not supported for packages that aren't part +of Fedora Atomic. Once it is implemented, the results of these tests should be +visible in dist-git commits on src.fedoraproject.org From 66ecb7d47cb3dd289c0f4d37e73e495b03bea73c Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Mon, 22 Jan 2018 17:26:16 +0100 Subject: [PATCH 036/126] make pgp signature verification EPEL7 compatible --- knot-resolver.spec | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index d91e795..dc3d10d 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -96,8 +96,10 @@ Requires: %{name} = %{version}-%{release} Documentation for Knot DNS Resolver %prep -gpg2 --import --import-options import-export,import-minimal %{SOURCE1000} %{SOURCE1001} > ./gpg-keyring.gpg -gpgv2 --keyring ./gpg-keyring.gpg %{SOURCE1} %{SOURCE0} +export GNUPGHOME=./gpg-keyring +mkdir ${GNUPGHOME} +gpg2 --import %{SOURCE1000} %{SOURCE1001} +gpg2 --verify %{SOURCE1} %{SOURCE0} %setup -q -n %{name}-%{version}%{?PRERELEASE:-}%{?PRERELEASE} rm -v scripts/bootstrap-depends.sh From 21e3326ebc261523256f4ca2fe22d8debcf7ffce Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Tue, 23 Jan 2018 14:44:45 +0100 Subject: [PATCH 037/126] systemd: fix kresd.service activation --- kresd.service | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/kresd.service b/kresd.service index ad5e009..8126014 100644 --- a/kresd.service +++ b/kresd.service @@ -1,15 +1,15 @@ [Unit] Description=Knot DNS Resolver daemon Documentation=man:kresd(8) -## This is a socket-activated service: -RefuseManualStart=true [Service] -Type=notify +Type=simple WorkingDirectory=/run/kresd -ExecStart=/usr/sbin/kresd -c /etc/kresd/config +ExecStart=/usr/sbin/kresd -c /etc/kresd/config --forks 1 User=kresd Restart=on-failure +# CAP_NET_BIND_SERVICE capability is needed for manual service activation +AmbientCapabilities=CAP_NET_BIND_SERVICE [Install] -WantedBy=sockets.target +WantedBy=multi-user.target From ca845e144747d852e049e6a0832001b08519c0e7 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Tue, 23 Jan 2018 14:59:55 +0100 Subject: [PATCH 038/126] 1.5.3-1: new upstream release --- .gitignore | 1 + knot-resolver.spec | 54 ++++++++++++++++++++++++++++++++++++++++++++-- sources | 4 ++-- 3 files changed, 55 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index cd49150..c7fcc7d 100644 --- a/.gitignore +++ b/.gitignore @@ -6,3 +6,4 @@ /knot-resolver-1.2.5.tar.xz.asc /knot-resolver-1.3.1.tar.xz.asc /knot-resolver-1.3.2.tar.xz.asc +/knot-resolver-1.5.3.tar.xz.asc diff --git a/knot-resolver.spec b/knot-resolver.spec index dc3d10d..cfeff21 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -3,8 +3,8 @@ # comment out this define using #%% if it is not a pre-release version # %% define PRERELEASE rc3 Name: knot-resolver -Version: 1.5.0 -Release: %{?PRERELEASE}%{?PRERELEASE:.}2%{?dist} +Version: 1.5.3 +Release: %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -189,6 +189,56 @@ exit 0 %doc doc/html %changelog +* Tue Jan 23 2018 Tomas Krizek - 1.5.3-1 +- New upstream release 1.5.3 + +Knot Resolver 1.5.3 (2018-01-23) +================================ + +Bugfixes +-------- +- fix the hints module on some systems, e.g. Fedora. + Symptom: `undefined symbol: engine_hint_root_file` + + +Knot Resolver 1.5.2 (2018-01-22) +================================ + +Security +-------- +- fix CVE-2018-1000002: insufficient DNSSEC validation, allowing + attackers to deny existence of some data by forging packets. + Some combinations pointed out in RFC 6840 sections 4.1 and 4.3 + were not taken into account. + +Bugfixes +-------- +- memcached: fix fallout from module rename in 1.5.1 + + +Knot Resolver 1.5.1 (2017-12-12) +================================ + +Incompatible changes +-------------------- +- script supervisor.py was removed, please migrate to a real process manager +- module ketcd was renamed to etcd for consistency +- module kmemcached was renamed to memcached for consistency + +Bugfixes +-------- +- fix SIGPIPE crashes (#271) +- tests: work around out-of-space for platforms with larger memory pages +- lua: fix mistakes in bindings affecting 1.4.0 and 1.5.0 (and 1.99.1-alpha), + potentially causing problems in dns64 and workarounds modules +- predict module: various fixes (!399) + +Improvements +------------ +- add priming module to implement RFC 8109, enabled by default (#220) +- add modules helping with system time problems, enabled by default; + for details see documentation of detect_time_skew and detect_time_jump + * Fri Jan 05 2018 Tomas Krizek - 1.5.0-2 - add doc package - configure tarball signature verification diff --git a/sources b/sources index 8d91a58..c58786e 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-1.5.0.tar.xz) = 4bc7cc52576ef6c43e89524a7b32bdf9e892c4a16316ade7f0e9ad8c342f3d2f7f1f6f5ce436336608c9951101ecadcab4c20a66dd24a98226df1cf8c14c0dfa -SHA512 (knot-resolver-1.5.0.tar.xz.asc) = 5c96a391ee70d670abcb010a88392e704665f2ae3c27287c95c3bf5b0c3a55417761becb72d352b61ec65d0d73c3ce86181226215fe4748a233ce82cef45ee22 +SHA512 (knot-resolver-1.5.3.tar.xz) = 9d301705ecc01b2c6a2f3084697a789406165c79444fdac96a3d58294f3288ea6d86be7002dff96cfbf597d9e771b8838a875afdfaae29b97eee173c08805c19 +SHA512 (knot-resolver-1.5.3.tar.xz.asc) = 0e266becbdb79fdbd785eaec8362833496f8cb668a5af4871ff5cb462e8b7ac62f9f5ecfb4cb71ac4a6db20aaa0b5ae795b95e33b0a5d38c3f215795f244b262 From 395c8b19b2e91ff17d23f4d04cd3c70c0f9e0a74 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Tue, 23 Jan 2018 16:44:26 +0100 Subject: [PATCH 039/126] don't create doc package in epel (broken) --- knot-resolver.spec | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/knot-resolver.spec b/knot-resolver.spec index cfeff21..badd654 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -87,6 +87,9 @@ Requires: %{name}%{?_isa} = %{version}-%{release} %description devel The package contains development headers for Knot DNS Resolver. +%if 0%{?fedora} +# Disable doc package in EPEL - it missing fonts in sphinx_rtd_theme +# https://bugzilla.redhat.com/show_bug.cgi?id=1492884 %package doc Summary: Documentation for Knot DNS Resolver BuildArch: noarch @@ -94,6 +97,7 @@ Requires: %{name} = %{version}-%{release} %description doc Documentation for Knot DNS Resolver +%endif %prep export GNUPGHOME=./gpg-keyring @@ -109,8 +113,10 @@ rm -v scripts/bootstrap-depends.sh %global build_flags V=1 CFLAGS="%{optflags}" LDFLAGS="%{__global_ldflags}" %{build_paths} HAS_go=no %make_build %{build_flags} +%if 0%{?fedora} # build documentation make doc +%endif %install %make_install %{build_flags} @@ -185,8 +191,10 @@ exit 0 %{_libdir}/pkgconfig/libkres.pc %{_libdir}/libkres.so +%if 0%{?fedora} %files doc %doc doc/html +%endif %changelog * Tue Jan 23 2018 Tomas Krizek - 1.5.3-1 From 3d4efe339e46cc8db28fdd292982bea1380fdb9e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20=C5=A0pa=C4=8Dek?= Date: Wed, 8 Nov 2017 14:04:50 +0100 Subject: [PATCH 040/126] support RHEL 7 build --- knot-resolver.spec | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/knot-resolver.spec b/knot-resolver.spec index badd654..72d267e 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -13,7 +13,12 @@ Source0: https://secure.nic.cz/files/%{name}/%{name}-%{version}%{?PRERELE Source1: https://secure.nic.cz/files/%{name}/%{name}-%{version}%{?PRERELEASE:-}%{?PRERELEASE}.tar.xz.asc # LuaJIT only on these arches +%if 0%{?rhel} +# RHEL 7 does not have aarch64 LuaJIT +ExclusiveArch: %{ix86} x86_64 +%else ExclusiveArch: %{arm} aarch64 %{ix86} x86_64 +%endif Source2: config Source3: rootkeys/root.keys From 8d4793173503a261d6e2ecd17b4319a089f39e28 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 7 Feb 2018 20:20:43 +0000 Subject: [PATCH 041/126] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 72d267e..0e979a8 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -4,7 +4,7 @@ # %% define PRERELEASE rc3 Name: knot-resolver Version: 1.5.3 -Release: %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist} +Release: %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist}.1 Summary: Caching full DNS Resolver License: GPLv3 @@ -202,6 +202,9 @@ exit 0 %endif %changelog +* Wed Feb 07 2018 Fedora Release Engineering - 1.5.3-1.1 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + * Tue Jan 23 2018 Tomas Krizek - 1.5.3-1 - New upstream release 1.5.3 From 75c2d9304cd1e1e04736c3ae00d2cd7437562463 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Thu, 11 Jan 2018 16:31:03 +0100 Subject: [PATCH 042/126] new upstream release 2.1.0 --- .gitignore | 9 +- ...8C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc | 177 ++++++++++++++ knot-resolver.spec | 220 +++++++++++++----- kresd-control.socket | 13 -- kresd-tls.socket | 12 - config => kresd.conf | 11 +- kresd.service | 15 -- kresd.socket | 13 -- kresd.tmpfiles | 1 - sources | 4 +- 10 files changed, 352 insertions(+), 123 deletions(-) create mode 100644 gpgkey-4A8BA48C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc delete mode 100644 kresd-control.socket delete mode 100644 kresd-tls.socket rename config => kresd.conf (54%) delete mode 100644 kresd.service delete mode 100644 kresd.socket delete mode 100644 kresd.tmpfiles diff --git a/.gitignore b/.gitignore index c7fcc7d..51e13d0 100644 --- a/.gitignore +++ b/.gitignore @@ -1,9 +1,2 @@ /knot-resolver-*.tar.xz -/knot-resolver-1.2.0-rc3.tar.xz.asc -/knot-resolver-1.2.0.tar.xz.asc -/knot-resolver-1.2.3.tar.xz.asc -/knot-resolver-1.2.4.tar.xz.asc -/knot-resolver-1.2.5.tar.xz.asc -/knot-resolver-1.3.1.tar.xz.asc -/knot-resolver-1.3.2.tar.xz.asc -/knot-resolver-1.5.3.tar.xz.asc +/knot-resolver-*.tar.xz.asc diff --git a/gpgkey-4A8BA48C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc b/gpgkey-4A8BA48C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc new file mode 100644 index 0000000..a3f5eea --- /dev/null +++ b/gpgkey-4A8BA48C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc @@ -0,0 +1,177 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBFhITjsBEACn+jYk59OSa7eul+bIaZERXTfhgfC6esfC5WPV0NmCig0W1Jbu +nWglYX3Bs1FJR4OCpchrbAQW3bEYDsddvy5rCbaG0IoOqNsd5GEhCmegDLNU/l36 +P83UUw8kkSJhlKr/U+EO+bFyKljmF+dE+OvIky1A+wd1zgRkcljr9DOfdLsAqL4n +Ib/LC99ZD27laSEAoaZagHXWMVP0EExM3+T4V5sPJ3ghrK1hAk5spAX9yHUSF242 +zo+5Sj/l/dGL/PXDeCJPHjfdQNUkKcRTVlbAIjfl5mk//73z3XmRSKp9R5HsCKQj +BC5Q38a/ZVDdaiSwIxw2sDLrI4+91ycsJ3gjtyiqyO43a4Y6mQHw9VZxudYG1hJ1 ++pAEPyLo/xIpGIlOo6BmmSz7gYgTPKB/dmGFOx/Qtrt8jNtiy3oyRRMPdQ2Vl/MR +AZ+OVSsSplf0uGFrhWOX6OPl6h7hu1mMbmHrQtgs835ZVfMf2IoK6QkFNFkn6Hbd +gF+4IZaX4br1WqZN2c51hKcIE4AHTSVSXwXRgdN/7Q2bmOH2IvfqTOX3HyfrIqUL +nqUuD4tZB5Q+z7V5H6vzG5GR2CFlwkSgaayoplLG7h4Xh6Hyman95tl/xS61TeSf +nv7NYIZj6fw4veUUALQlTwDkOh17wByJitvYfBkoiCY7ShAxYyBckGGFxQARAQAB +tCJUb21hcyBLcml6ZWsgPHRvbWFzLmtyaXpla0BuaWMuY3o+iQJXBBMBCABBAhsD +BQsJCAcCBhUICQoLAgQWAgMBAh4BAheAAhkBFiEESoukjCrtkzvUlcUJoful9++M +SGkFAlopsXsFCQPvacAACgkQoful9++MSGleYw/9FUdMWCHWrzeTcQwPUaB9TokC +cX6KIzcdA3GVtSNMKJWJc8nkEDmhcU6/X+F3+3HZ1pl6b4MGnzKJaYE0uXsYCtIC +6nen2FPEG6NKSF/uNbT8386zBFOkgjahuZXsxrmlNP6+KziQtWM00QTx4H34Yj9s +jqSEWZag/L5aw9/rLJ9YXBweWsNF+xXEcfUY3WTFW38zkzo/QyM734NU86U02tS4 +26LsaWGL/clSF1mSX/hD3oxwlApCHh40M9YsQ7T0kgDLcHFSMFQ7+mbvUjJPm7IX +Zkk9rdEOBTAgb003Giso0FPqkBsOqhtsUUFDnfoaD7JZ6Y54taxDJWQ7zOTM1Rqc +EfEyeoL5TPGeRCcrNLpPGi/gV3OI3Yos+zRSlUTLmDVPpaOb/Cl6K/oHN6Z8L2pj +ndA0tpxkIyOyx5bxUkkU7C3W78jGvshaAUGg5qTqogi48HjQJlwdnWVLxhBjIDa8 +73bgceoaMyxtkfDDj+6rPUbKf3A20Kv6Z4ZfKW+GcnJmdUW9MaHa48mImkKdaS5n +A2Wglk7CdNJhxGBGqXgQvbUUeZJXycq6u94pFDbaqKIPQ3I3FmbcQQnNUO9IPQxM +u+dbyJImthPlXLrALhq6eYkFnzHAlMMI06TacQcJPd3auXEgNkcAzlii8odYExPS +xRsESq2Y2VaDsMPQ6Ce0IVRvbWFzIEtyaXplayA8dGtyaXpla0ByZWRoYXQuY29t +PokCUQQwAQgAOxYhBEqLpIwq7ZM71JXFCaH7pffvjEhpBQJaOnWrHR0gZW1wbG95 +bWVudCBlbmRlZCAyMDE3LTEyLTIwAAoJEKH7pffvjEhphaYP/2u3wbyZ4Bs9W4yu +8x3/Ykb1GfY9j5LkscfN92NBWCVhI6I9ZapWN4SAZAlfl6L0UpJ92JHGMw3RvAIK +XvSk3YTpVTQHIn366r4Pfp7DizO4JGmPMKzzqexfrfXiVuqKSSAXhtPuzmJKbYbQ +miVybz2exUGkudkdJTk3ald1w+8yIoP6CbbGiuylAkPqke1vn1EvovyfnGr5vS15 +HK4PSqgsQ94UKnT8mlFS111JH0YfHdGcbxRRt2sk+mfcJfUKnx7LSuJHxizckQKo +Ih8LWpaIO6pLQfQa2h4O2dikWm6Hl3RGw0qZ3/Sgg2AsljvwTYtA8jZNuwDSoplf +sEK/kWIwWG47MyyjHtGpwVhCQT9WGo8GEgdHM0MH2hQV2keELrIiShoW2ntkB++I +VraEtwtH6zlNxw91E0l1NRmIbnXglbivP1b8ZQyZCMOmnFXkhKaTdJWtJ+OVZhPQ +I3PlwS6Divl81k2eM2D5h7YE7p075gsyZfjmuaFmeKwtUtk+PGqwPN3A+ZKAvEjp +RnP1KMIOewhg/KcA4Zn9fSPu9G5An9Civvm/Bze3XV8VdabegHuFSTINBmDRwbp4 +hcXh25bUMdcySdU30QiDkBU+irIp/+Kp+3Ipot4J6R/AbamWooS1ElAKNJ0fVfKJ +AXoyc+d/0UpPdMaHTCg5aushdmjkuQENBFhIUVwBCADIQ2ryTOUFwBufozEFvWts +PTyNYij/KOKP3VEDb66SoXYjA7rf5mC2GDSLI5xdk5a6gs66sizJfinPDwrI10EN +VBgVSedqKGukzyuLEmns7T0/e7KS7CqjykzfcxQuJ7E80FslTy4CYYo2nkaqkHvP +QyIgvEsvj241T6vqSBsRUxpCHxZMPQuhsJBNy3ma4JmbLob29VyvafI29OTjn2m+ +z8+KkfEmvuxt1URLaAJySaC2DTLc2NurW+ijEETOpB9wQekhOFIy4OrLTPIf8atM +YYfykrQyjrWrWLtq5ZspEofAJQOMNViq47CI7BxKsigp/Ziw7fKDkaapX/9tMM2d +ABEBAAGJAjYEKAEIACAWIQRKi6SMKu2TO9SVxQmh+6X374xIaQUCWl6A1wIdAQAK +CRCh+6X374xIaUkrEACIkcQUpUAMkWC0zFHWh/38xfT9cY/d1XYQ0hbjk4yqohjw +5V5PDO47CVYRGZUry55Btdf8xh0M48xxayLhA69BxhCFS6eRATYG2Rx9NjUD9xmp +xDuGFkTzOi8pItdgRvEH94CQtNbLoe2HXZJ1DZXnjEAb30Ai5m7/6NKUi9TtKZGA +/2+vsjRxlpCJyXj6kh+Hz3FFhBKUaSg+gAoeajH/3scAPcWyAUjavMiMfOxtTL6O +5CpWg7evi5oV9e27LNIWoonn/oY3r+ibTZZ48EsCwGQDhKAHhz5gmaVjSoZpC0JW +zcd5nN0/OrCs8AaIGMl6/5agn4M/cmaW8OMlbQfFw1OZ1IGvHW6NrXPkAHSNjj6f +nRMKtybdygxIoHAAazct+NaR+tWp1MjUnnPRnIJEk0abWRCU+5VKnKwP3P2Trm4Z +5veKle8OAjWcNbKJdC5P5C2cak8ZuTZ9x56trgpXnW2sz98R2nQCR4Nbfu8OUdrz +gl29aX2HQ6xEXLZqFCsyl+9PBksyJHAl4JKaBE/U0yIHE02Pz7MTbEWfovAABb4d +EFLd00ce0TE54H/JRnUEb9G3UoLVSH5g1ltuxdyPQ+gNEtHId/wjiL+LFlBmM1Gj +Md3BBsUMnNPZsszeDQDqfCO6w+dBzIX/UJdGft/nDC2SelyL4VbtpL/1i8OB1okD +RAQYAQgADwUCWEhRXAIbAgUJAg4GgAEpCRCh+6X374xIacBdIAQZAQgABgUCWEhR +XAAKCRAioqlLXklBWvQZB/9Gy/uJh6oRFUZnLjCLmsYs4WZDc409K34IsxiSgedF +dE3r53uyrishVQ6bfuFjiVDR2Yr8mjynzDT42wQaFJo4CQHqBQkd8iG/FA8BPqX1 +14vH9y2E7bu0AyY1LHGrT67Ym8ySxpSvS+ZztTdm2Xc8X92jRXz82SQgYJdPuhEE +EMq1JmszyYcXEJSb+qJ0F4q6wM18UR0oxZW/kJFuZ6z0JXG6Ka2cppVOtwcXCy/e +ECSTyUkI9tMm4I1RgNtWsAswCFBRCnAv5TQI3UtdoQCnuBmgef5Zr7uTmTtzHklQ +L9eDjKQ1ZDPO7MrcLyvxdvgevYE/peotjFNsMy4n1aApOk4QAJVdvvlqqTErA+kR +QBDkBGWeOf2pXKjle27wPx9l7w/EgEc1LQ1rTBnMKUeOiPF7o1WQj1n4brNn4aHG +xfTu12dVuV8BtxI/K/Fa1ZAMVGNO4kssbtqMMU8RPZ/LNLFtAp2VLkjVxsSVKoVP +2gxHmzTeHafySDR6d+D2vjCajDoP+wXL1OrgBuiOpAwcC3L4Uz4YJukNAYkSyTKH +d7y+chsqfdN4jXvjSIEPyvlhn4N7lHrfAw1ZnAyom7KtiKntVHVu0F7rbUaMFplk +22pS9lMwbLw/YJUwpMtX8/QQCOYuO5dyOsXHqfiDWYWnDgsR7556zWpotuAi2Dkz +84jGO9CWq1JnPzxi/hgikg1Jq0/QfvR2i2ZIiJKEjfPzs3CCoJrBpa3PV4mIvomk +l/SW5PqJgANHy2pTIQs+pqB0yeET7GvIsScSVIXWFCXCtq+po/G55u6APKXFj1VP ++I0yklumuRN1I05Qdsps/OUeaz6+ghFu/HfWA9IZK8C4imSykRFW1GPA0qs7qy3j +iLx42iMHzEvJzkvi2lasWIROExsPyNMceeRyjvpXw8fVpoMRziNR1f8w6qvPv8gM +N7hiqKp8ybC11uuYejqkJtLWNF1riKtvZQWKK0Jc8rp5jL4309a+rqUlVnZ148oM +bhYq/5JC494fWUnHsMhaMNJoTRLyuQENBFhIUgIBCADTT2Zpzau7YxkaNTMYNYu3 +021R82exKDP0tc4GhFL4osvSUj+bxW/rmKnwBDafsALfskzWrNrTzWQQuSFxsnMD +mb2KheQ+jtYa71yed2NhJoFqj72A6OmqN1wo0K0zYBdP3ccSfrZ7lJcxiko5TLWe +SHTcQ2y/TWn/8IdCJ1Lu/pD3k/IP5yyEaJ/oTaM9SjbuKkmPsMAhIRGEm/nvZMP9 +a6Wmg28a3wMtkQNbj5hFOzaUJ3//SRmSga0XdTUKEqZcTHRhL/26uSHdN4pKwhwO +qIgQeuUkym1TYAXdVLCoLH0Mq9xCgrc0MlCRuQhE+kM973X6u8xbR0DaChShwgEl +ABEBAAGJAjYEKAEIACAWIQRKi6SMKu2TO9SVxQmh+6X374xIaQUCWl6A3gIdAQAK +CRCh+6X374xIaexhD/9RYHmE0dYm6lIzfGAf3MuDrDpp10P8eILcuhYbqM4IIOu+ +sJD6I3vRek+w2vlNBmY2HthQcOv3VRRiD5/RK/tLzrrQrMX7BFNOKjF6FEwllXbc +7fLPUNcvta76igxMdy1CNXTgVQkXv/L7XCzi1Ua7UgpVuF36ea+fH6/tdqK5FLRZ +WgnaPaRZo3V44xRDPh0dG6VE4leamJWz0RWtttH9jCwxPXvkf7XCZCD9M0ZURlK/ +8Bl5ES01x+09G8FS9FZwcJsZUdO0hRh5ODs7kXWZphk4xYsnPyFmcKWnbnji485D +9C8Uk6cepCOOvozmlCs1VYYjh5V1p6Tz0qNOpFOWLm6Ns+j0O6AgeopNQBqj9tbU +Q0CLXhDJ5Db4epSe+A6uc6vBm4k66DYOLl5ofOX1Uc+VA76S3YjlYkF+y8ya39wq +lBBISEgLjJfbs4bihnwfZ43ECr7fUQukg6Abpz1RvWsQi+1JzDMufpRgfKVjy+Np +81GWIyaVVrxYvxFxQ1cvwieGZuIAU6LLSH38rzCQqotXAgHxgeUzRpTSohL+ROIF +/mAcA1hoG79PPV8rS8zS3r50jbv04Agdh0ZCxG5gXtZzc06rjdGDGE+PnGjwGvuz +sbIx/KVOA/nceZs8BT3mm65MB3ppBWm8g4f3PoyW1nSOUWkngwAChAAb3HPKaYkC +JQQYAQgADwUCWEhSAgIbDAUJAg4GgAAKCRCh+6X374xIab0kD/935YykgKCxAkch +HR+fu1RB9wyL88P6nDJ/zm/O3e/QZVGrfNtTMgAM9OduxzMEzibaPCpz8nS6a4Rp +E9QcAQD3KN6TttDkzwKdtj0DKi/q5dWllnp56jC/0I6WfRyGrrcR+1rNO4LscJiV +rXYoQnJPN2B72DWnQF/fvX8dnulGjBtwCTfNQBSU1TTWcSoxB2nPaWAi2PwCfG6r +9PikrEo1Ya6NacRAVFUU0jYaEnj8dfH2oIQDo3r0V5yEFI8ky5JNTHDr1+OoEr6E +H9vBxqsimhRQJpiIkiaE8qYKJcphEv970HAVeXKKVgan+hnFN5Tn92/hcrJoUh5D +sEwBgxrgU0INWMgyJdt3MQQknTSxSJmcKlka+abIvbr5JmSxHnZ/omdxfta2euaA +X3N8lr8cxPrFx5p6moFjHonLGJUZDpZ4CSmqpiPUEFTyrUeWz1hty9L6DpisRBec +7KqSxgvGwT9gBZnMHFvFDkBLjWE7sJYu0WpTS92qwr0PPe02DGfGaGg2FW5uR1B3 +/DaxUTg4M86u/pNHvOCeifR8krTxvf0u36EJ6c1qv+5SE0py9d/50RJBQhMZZTHC +SlW4x0Eo9k9Lw2yEKHsrsxeLH6l/RAN3JUEFhqkUXRRX6tvTY/TWTPBK94g+SWla +POSDjS7ikOy4FJ7rmjR5OUcpEdsU6LkCDQRaKbA4ARAA0iJ7vcMwHis7RYSYnipd +8mi2RkRWJfsxQyj6CHUZv7NwLTyCxjat21VfDJ2SMeKaT3Sq6kvRa8/ZxpikbJ5m +ufzh+6I2lvMNYzev8SECuLMZaCmISHwH0+nRDsrWZ4DtGTCToLU74mez1GFckUTY +o8g8EGrBYbms0gKGc8639mlKZD1+eqmUxP43zfF430YNT0TAQ9zDMuyr6cKBVwBq +bXMxRQYo16IeP2lyD5RN+9NE5IqRFDRQZMqbv69iL36NtAMZ5M1KgRSn/CqCd6vK +EohJ8E4NOoKfmaOgGpYmpAHe7wYqPRHVY0r+SaY0Dlw0NmbN/HbhrcjwMjXXQCgo +Ea8aSbNH5zUXdJyOsKsF/dx7jCPS0BW2mauHVmPwMD1ZprYzFiLYE1UfScl/abvG +tzsr82wILfN0wswvsoXygGaJUUwkLGjOVrV7WIOr8XxoKOR5fqq13Jx1i6VVxCqB +pdGl7zbXJhGt5OMB072PTkJJ+pDQJlSY+r8V/lgn3bwUkXisk5SDp2ObgJhoMf3/ +WRwiIBzOlS+93xTrjego6I3lwSigUqpze44tqJNAVzT2lmbX2sZjbCafuoRDoqgy +49eSsU4eQKnKq1bp18ccl6KYsFu/Eui11atRoy0qObAbrUy54oJE+XKxoDYdZxqp +CIAmTlTXp4pvYiaOk71QF6kAEQEAAYkEcgQYAQgAJhYhBEqLpIwq7ZM71JXFCaH7 +pffvjEhpBQJaKbA4AhsCBQkCDgaAAkAJEKH7pffvjEhpwXQgBBkBCAAdFiEEFe8t +8KwPEBnPn+loGFnIJjkFVmwFAlopsDgACgkQGFnIJjkFVmya5BAA0JPGtGHpCLnL +PjxdLnIpUbQbaKA7AiYskJReIEqPOXWb9WguXYa0j8PsO8d7sn/tBMqw7XdezjWc +JWKutipV9tw6bWQfsx37dyplLwQ6FvuaAMAEXBdxS2Zvf5ffnq1/Sy+TZSRzVH9G +kkP7LgjFfjt4sXTi6KT3zv25ILblJk/Am8qpBt5Iia6hLibDtaz54o3CmotHi2JQ +LayWwQZ6A1a4/hlI7DczsEZfANxd2AItQOQQHvoTEuxFR0ew0dIdv5pLWrW2HfPi +LCFUk2tPImpLvUsmHTQ0kRp5RunObplWIkb7MqCb8DhJ7rbU4eur+qW046pNxci9 +4m0zpEBhdsgC2P+gYSfohYvpEdVMmUOETdxbEUREF1aud72+onyPSvLR6nTwM3Br +/v1NK3o8t6K9zkUnBFDtjqXn7vsf0CA1eszcygsAi06CSgpv8qnU4j7YoBspbCjE +INhip5iNigI3SN49gA9ON+0+FszDZU3sokvIu2xfvePyZ7OhQD6lu+KITlwUH2ED +IVpirH1ubO3VhxY6M9qBWs49UuCQbBaGBwpHlhg7n+wggx+k6Z59kU+4cd1Q9XNf +bk2hVvYdCvHbtH78rh8maLBdGsiyoWrLvcDF+z3G/afej3QVAP2LdWkurAxhUp7s +Af7VBKvcXCQ0/PGrfRpgdofxmNcQG1vVJw/7BtNHys0WLcT5AKEa27o1BpvsNgZ6 +h7i0/4AxTwrjAqzFRBvqs/hSJ/8hF5alfJUKv42OpzzSzSqqQUOH8WjgXX6bWn77 +LkwKLzEAsMnE2HtWRnBUjNqYxN/C//jSDW5foOqwL00J9/Skk9n9RYDdXUyQXsRg +6JKx78oqcYvApEgqEEO1maW++pOq3KH/Q2FQNOSL2E4nmVBIv782K0xGBgS/zHWn +KWLPstihrj0S4SemlVmhKoL9rh01hHiTDVtGfcIMl1dsjNM+1dr4rv+P/a9s3pFn +YfiEt0LwCnE/PS/CfeB/j0HuVIyLZ3V988UzQHanUcoc4G7GCXQfuSHmeeMm6Q7K +KbDFHHxeF5xEWmjvBT+imM4KqVdwBU7PmFpjB2pSlkAGHrXWvg7MjFqmiw4xCDEO +Ij1HCfptxbQ72T5v35z8WVvI04fNNyYGELBfE1gnU7fTYBqJEP0ySY3H4G+kUNgw +zAEy7GhC1eBSHq7PgygxnmxsTDrTPIuV6YixFN+aOwj8ta6pdNgRVn+tOEZo5G9U +i1qsGx+ZaObfC+Wj0i3AOXEC4K+8iknp8lxYfbMiK2raQtcKKhkh7sG5SNnnAeV7 +yFPLxxJ+VYkQA19fKQBTXbx9QvcCmsfFlsQctmQtD8SFGSAGG7p1Wvn839/WgGN/ +DFk7OCejSkFxA/e5Ag0EWimwwgEQANMcgbXsj94aW4O0CCrmvINtdzarw0w1ai2w +0m+P0xtPqwI6ruDAcKuxs8zKXE9MCzP8sh9oXMXl4gomzgF9AmSAus083oOvjTOr +/6t+Xi2Ot+kTPEVFiupNEchUSFzZMRN0GRA1/fnUf50Ayty2MW8LOgSFqnQyivFa +a5u4ctep2w08ICacsKSfie4Gbj2oE+3Fk5qVspDHY6kHGSu+Ee9NiHTvxY2oEWLf +LYRbZFirFWsjm7h8vYDZvnTm5pq+6naBAg64iCydRyIjDWIZQNEeVC3XnDYfXLrD +SsjmpgMrBVs7xwzqDdEIKHUD6xhjJeE+3ECqT7NwKzBTXl+5p/g+Zx1LyOzsInFc +lV5QP/XGtcNUwtLKtMkIsNPkqL6MBOiq3xTMZ4PI/qRS/Pt/bk7Z55H6bLLzIPDx +0X8I8dAuischzN5A1HG9tYTC4GAwo0NC/IFPH2OmYCNn6gBzufp4AvBkXTqGWEC7 +5PtpODYMcKihsNJIbXFZ+/V6wE+NIyvhCm6tM40wlckEyIG5tUjuOwuW0AhqCmCC +KaZl8NM76WYj7+7r2Ir8tlN3Sv3rQeGLGaYdxw2RzvBaetImvSzrNM2Lt12xwt0v +7P36DrWDYu6dDN7jAc70F3nFygNZQ5jtNgpcrGTBql8cd0Eb2groXchk7+q+3gEA +uJLDT4otABEBAAGJAjwEGAEIACYWIQRKi6SMKu2TO9SVxQmh+6X374xIaQUCWimw +wgIbDAUJAg4GgAAKCRCh+6X374xIaXwOD/wPK32kWIyo9r61bG3rLEjpagge62w7 +Pi5m9Ak3ezojYA12JO3BXhOfNB26iIUwWqAcLXCIsuaMPzr+lRX1KXxkeWkwmUyF +/pUcQ2D3fMdcz1pnsOK3Ijxi3eYbD7tK91WZJbrFlNI2XzPr9ARzLfYF5oZN02k7 +qd5XdMqtEc6Z3KZaVC2StvpI0AbpY+xEYmsYabM7ahEWQnHGf3zY8VpH62SIx19B +xjziZH3gIuhxgmkpxfMS15fxTEI4Nrq+uszzmTFeNfBPpOu2+lFVGDVk54b5KKgQ +/TOGXnbHbvFmgyKI1g7bTkJderhhj/IWdKjmIYRECEslDvlV7kXqR2Rm2F8JyHvV +iL9QYXVs5kwTPjUjYSDiazK8Ya6r2QPZSeSf8gfh4IkxQu4uOgUm+OeVp6BmnXef +BKJS+c5PL2OLKiOWjiVJMhfZfsKIWqE16Og5Ebs4x5pd25fxfUj6XBTwAsSMMZYj +3XvgDuTBlKBO6x3JESMjZE5PtXEl/T7xpgO+tAa6eegjcWSE9ct+Iup0Os26vMvc +B8EV5oS4OUr1bYoOnSvkWzm6LQIsYnpSufiwwFMrhoUOcLxPYzRDNDgFy+jrEEIr +fvo8QJDBx+1mc7oeoIgVlgS+o6bcziU7Dy36RfMrwaHXiWJwli79QzVWdinwoLFI +wsbCpWeHFBg8a7gzBFplBcMWCSsGAQQB2kcPAQEHQPlBkrV9cmCpdkqXV5lecMos +lNi1+tPfqS8XVYhw0XrXiQI8BBgBCAAmFiEESoukjCrtkzvUlcUJoful9++MSGkF +AlplBcMCGyAFCQHhM4AACgkQoful9++MSGkf6w/6AsoN1I77tjqtblHYtEZhS8Oj +peNmmk7xFA7r8EhjXiAUVUaLxucQQlBIMySnmg5jc5PGdCafzFL5axeaqLEUrvty +AhluNN9/LaMFVX/tBla7tJqWa1sfn4gJL0kvTp1szMIpnzaLhdf+qQmgqFHrHjpg +ovbry9KPWbKGVfDKQmMd04qzEMai1AF8Jcsm5AROljzC6hOK81nZxz7/LOiZN+UW +xPy5OzkuCvlOyrEztDdZjlyhyWkAnp+Nk2leO0kGHqETNDXFvGLzEy8QDCWMetRg +BuXhpnXVYu1qnaZLmVmym0A8NxZkh8GDLllyVxrTdLwAeigZcvRL6Cs9nFL9AjU+ +dekTKe8pSPb8rQb0xau1nuP33Miy4sDe22JmgUsdGfEM+m8Vq70gUlnO+PjPDcqJ +EJ3aL0MVVIpYpwM6n/mFFKYY5+/DPW3bBFnpmVwG0mc0tIXk4v0gsYTBr1IXFgpE +ZRciTksLq/ulCs+aXRwZoNuDex13Ka1rfXyGk7WaYRZ3rzWL0k0BJI3jFniMnrCV +aYvutuHTNTEThA0sjBmvb2N7oDM3zjtwx50v+gMrrrHEUXBjAU8CI5RcHpouh6MS +4Vp7vtSmQy27sWesWVf2ehe9da27/WtIZvL6f+4RjjyMJbDvUr/qptvOgjVM93mB +bMkzQRvMkEcKnbcBjGE= +=lP30 +-----END PGP PUBLIC KEY BLOCK----- diff --git a/knot-resolver.spec b/knot-resolver.spec index 0e979a8..8a382e6 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -1,16 +1,17 @@ %global _hardened_build 1 -# comment out this define using #%% if it is not a pre-release version -# %% define PRERELEASE rc3 +%define GPG_CHECK 1 +%define VERSION 2.1.0 +%define repodir %{_builddir}/%{name}-%{version} + Name: knot-resolver -Version: 1.5.3 -Release: %{?PRERELEASE}%{?PRERELEASE:.}1%{?dist}.1 +Version: %{VERSION} +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPLv3 URL: https://www.knot-resolver.cz/ -Source0: https://secure.nic.cz/files/%{name}/%{name}-%{version}%{?PRERELEASE:-}%{?PRERELEASE}.tar.xz -Source1: https://secure.nic.cz/files/%{name}/%{name}-%{version}%{?PRERELEASE:-}%{?PRERELEASE}.tar.xz.asc +Source0: https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz # LuaJIT only on these arches %if 0%{?rhel} @@ -20,24 +21,21 @@ ExclusiveArch: %{ix86} x86_64 ExclusiveArch: %{arm} aarch64 %{ix86} x86_64 %endif -Source2: config -Source3: rootkeys/root.keys - -Source100: kresd.service -Source101: kresd.socket -Source102: kresd-control.socket -Source103: kresd-tls.socket -Source104: kresd.tmpfiles +Source2: kresd.conf +Source3: root.keys +%if 0%{GPG_CHECK} +Source1: https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz.asc # PGP keys used to sign upstream releases # Export with --armor using command from https://fedoraproject.org/wiki/PackagingDrafts:GPGSignatures -# Don't forget to update %prep section when adding/removing keys -Source1000: gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc -Source1001: gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc - +# Don't forget to update %%prep section when adding/removing keys +Source100: gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc +Source101: gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc +Source102: gpgkey-4A8BA48C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc BuildRequires: gnupg2 +%endif -BuildRequires: pkgconfig(libknot) >= 2.3.1 +BuildRequires: pkgconfig(libknot) >= 2.6.4 BuildRequires: pkgconfig(libzscanner) >= 2.3.1 BuildRequires: pkgconfig(libdnssec) >= 2.3.1 BuildRequires: pkgconfig(libuv) @@ -78,12 +76,13 @@ architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as local caching resolver. -To start using it, just start the local DNS socket: -# systemctl start kresd.socket +To start using it, start a single kresd instance: +# systemctl start kresd@1.service -BEWARE: -Because of https://bugzilla.redhat.com/show_bug.cgi?id=1366968 -you need to switch your system to SELinux permissive mode. +If you run into issues with activation of the service or its sockets, either +update your selinux-policy package or turn off selinux (setenforce 0). +https://bugzilla.redhat.com/show_bug.cgi?id=1366968 +https://bugzilla.redhat.com/show_bug.cgi?id=1543049 %package devel Summary: Development headers for Knot DNS Resolver @@ -96,25 +95,27 @@ The package contains development headers for Knot DNS Resolver. # Disable doc package in EPEL - it missing fonts in sphinx_rtd_theme # https://bugzilla.redhat.com/show_bug.cgi?id=1492884 %package doc -Summary: Documentation for Knot DNS Resolver -BuildArch: noarch -Requires: %{name} = %{version}-%{release} +Summary: Documentation for Knot DNS Resolver +BuildArch: noarch +Requires: %{name} = %{version}-%{release} %description doc Documentation for Knot DNS Resolver %endif %prep +%if 0%{GPG_CHECK} export GNUPGHOME=./gpg-keyring mkdir ${GNUPGHOME} -gpg2 --import %{SOURCE1000} %{SOURCE1001} +gpg2 --import %{SOURCE100} %{SOURCE101} %{SOURCE102} gpg2 --verify %{SOURCE1} %{SOURCE0} +%endif +%setup -q -n %{name}-%{version} -%setup -q -n %{name}-%{version}%{?PRERELEASE:-}%{?PRERELEASE} rm -v scripts/bootstrap-depends.sh %build -%global build_paths PREFIX=%{_prefix} BINDIR=%{_bindir} LIBDIR=%{_libdir} INCLUDEDIR=%{_includedir} ETCDIR=%{_sysconfdir}/kresd +%global build_paths PREFIX=%{_prefix} BINDIR=%{_bindir} LIBDIR=%{_libdir} INCLUDEDIR=%{_includedir} ETCDIR=%{_sysconfdir}/knot-resolver %global build_flags V=1 CFLAGS="%{optflags}" LDFLAGS="%{__global_ldflags}" %{build_paths} HAS_go=no %make_build %{build_flags} @@ -128,27 +129,41 @@ make doc # move sample configuration files to documentation install -m 0755 -d %{buildroot}%{_pkgdocdir} -mv %{buildroot}%{_sysconfdir}/kresd/config.* %{buildroot}%{_pkgdocdir} +mv %{buildroot}%{_sysconfdir}/knot-resolver/config.* %{buildroot}%{_pkgdocdir} chmod 0644 %{buildroot}%{_pkgdocdir}/config.* # install configuration files mkdir -p %{buildroot}%{_sysconfdir} -install -m 0755 -d %{buildroot}%{_sysconfdir}/kresd -install -m 0644 -p %SOURCE2 %{buildroot}%{_sysconfdir}/kresd/config -install -m 0664 -p %SOURCE3 %{buildroot}%{_sysconfdir}/kresd/root.keys +install -m 0755 -d %{buildroot}%{_sysconfdir}/knot-resolver +install -m 0644 -p %SOURCE2 %{buildroot}%{_sysconfdir}/knot-resolver/kresd.conf +install -m 0664 -p %SOURCE3 %{buildroot}%{_sysconfdir}/knot-resolver/root.keys -# install systemd units +# install systemd units and doc mkdir -p %{buildroot}%{_unitdir} -install -m 0644 -p %SOURCE100 %{buildroot}%{_unitdir}/kresd.service -install -m 0644 -p %SOURCE101 %{buildroot}%{_unitdir}/kresd.socket -install -m 0644 -p %SOURCE102 %{buildroot}%{_unitdir}/kresd-control.socket -install -m 0644 -p %SOURCE103 %{buildroot}%{_unitdir}/kresd-tls.socket +install -m 0644 -p %{repodir}/systemd/kresd@.service %{buildroot}%{_unitdir}/kresd@.service +mkdir -p %{buildroot}%{_mandir}/man7 +install -m 0644 -p %{repodir}/doc/kresd.systemd.7 %{buildroot}%{_mandir}/man7/kresd.systemd.7 + +%if 0%{?rhel} +mkdir -p %{buildroot}%{_unitdir}/kresd@.service.d +install -m 0644 -p %{repodir}/systemd/drop-in/systemd-compat.conf %{buildroot}%{_unitdir}/kresd@.service.d/override.conf +%endif +%if 0%{?fedora} +# no socket activation for CentOS 7 (requires systemd.227) +install -m 0644 -p %{repodir}/systemd/kresd.socket %{buildroot}%{_unitdir}/kresd.socket +install -m 0644 -p %{repodir}/systemd/kresd-control@.socket %{buildroot}%{_unitdir}/kresd-control@.socket +install -m 0644 -p %{repodir}/systemd/kresd-tls.socket %{buildroot}%{_unitdir}/kresd-tls.socket +%endif # install tmpfiles.d mkdir -p %{buildroot}%{_tmpfilesdir} -install -m 0644 -p %SOURCE104 %{buildroot}%{_tmpfilesdir}/kresd.conf +install -m 0644 -p %{repodir}/systemd/tmpfiles/knot-resolver.conf %{buildroot}%{_tmpfilesdir}/knot-resolver.conf mkdir -p %{buildroot}%{_rundir} -install -m 0750 -d %{buildroot}%{_rundir}/kresd +install -m 0751 -d %{buildroot}%{_rundir}/knot-resolver + +# install cache +mkdir -p %{buildroot}%{_localstatedir}/cache +install -m 0750 -d %{buildroot}%{_localstatedir}/cache/knot-resolver # remove module with unsatisfied dependencies rm -r %{buildroot}%{_libdir}/kdns_modules/{http,http.lua} @@ -158,38 +173,65 @@ rm -r %{buildroot}%{_libdir}/kdns_modules/{http,http.lua} LD_PRELOAD=lib/libkres.so make check-unit %{build_flags} LDFLAGS="%{__global_ldflags} -ldl" %pre -getent group kresd >/dev/null || groupadd -r kresd -getent passwd kresd >/dev/null || useradd -r -g kresd -d %{_sysconfdir}/kresd -s /sbin/nologin -c "Knot DNS Resolver" kresd -exit 0 +getent group knot-resolver >/dev/null || groupadd -r knot-resolver +getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysconfdir}/knot-resolver -s /sbin/nologin -c "Knot DNS Resolver" knot-resolver %post -%systemd_post kresd.service kresd.socket +%systemd_post system-kresd.slice /sbin/ldconfig +# TODO: can be removed when Fedora 27 is no longer supported and migration is no longer necessary +# Migration script +if [ -f "/etc/kresd/config" ]; then + echo -e '\n\n---------------------------------------------------------' + echo ' WARNING: Migrating to knot-resolver 2.0' + echo -e '---------------------------------------------------------\n' + echo 'Please check your configuration still works, it has been moved to' + echo '/etc/knot-resolver/kresd.conf' + echo -e "\nTo start or enable the service, please use 'kresd@1.service', e.g.:" + echo -e ' # systemctl start kresd@1.service\n\n' + systemctl stop kresd.service kresd{,-tls,-control}.socket &>/dev/null ||: + cp -r /etc/kresd/* /etc/knot-resolver/ + mv /etc/knot-resolver/config /etc/knot-resolver/kresd.conf + chown -R root:knot-resolver /etc/knot-resolver + sed -i 's#/etc/kresd#/etc/knot-resolver#' /etc/knot-resolver/kresd.conf +fi +if [ -d "/run/kresd" ]; then + rm -f /run/kresd/control + mv /run/kresd/* /var/cache/knot-resolver/ &>/dev/null + chown -R knot-resolver:knot-resolver /var/cache/knot-resolver +fi + %preun -%systemd_preun kresd.service kresd.socket +%systemd_preun system-kresd.slice %postun -%systemd_postun_with_restart kresd.service +%systemd_postun_with_restart system-kresd.slice /sbin/ldconfig %files %license COPYING %doc %{_pkgdocdir} -%attr(775,root,kresd) %dir %{_sysconfdir}/kresd -%attr(644,root,kresd) %config(noreplace) %{_sysconfdir}/kresd/config -%attr(664,root,kresd) %config(noreplace) %{_sysconfdir}/kresd/root.keys -%attr(644,root,kresd) %config(noreplace) %{_sysconfdir}/kresd/root.hints -%attr(644,root,kresd) %{_sysconfdir}/kresd/icann-ca.pem -%attr(750,kresd,kresd) %dir %{_rundir}/kresd -%{_unitdir}/kresd.service +%attr(775,root,knot-resolver) %dir %{_sysconfdir}/knot-resolver +%attr(644,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/kresd.conf +%attr(664,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/root.keys +%attr(644,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/root.hints +%attr(644,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/icann-ca.pem +%attr(750,knot-resolver,knot-resolver) %dir %{_localstatedir}/cache/knot-resolver +%{_unitdir}/kresd*.service +%if 0%{?rhel} +%{_unitdir}/kresd@.service.d/override.conf +%endif +%if 0%{?fedora} %{_unitdir}/kresd*.socket -%{_tmpfilesdir}/kresd.conf +%endif +%{_tmpfilesdir}/knot-resolver.conf %{_sbindir}/kresd %{_sbindir}/kresc %{_libdir}/libkres.so.* %{_libdir}/kdns_modules -%{_mandir}/man8/kresd.* +%{_mandir}/man8/kresd.8.gz +%{_mandir}/man7/kresd.systemd.7.gz %files devel %{_includedir}/libkres @@ -202,6 +244,67 @@ exit 0 %endif %changelog +* Fri Feb 16 2018 Tomas Krizek - 2.1.0-1 +- New upstream release 2.1.0 + +Knot Resolver 2.1.0 (2018-02-16) +================================ + +Incompatible changes +-------------------- +- stats: remove tracking of expiring records (predict uses another way) +- systemd: more chages in default unit files (TODO) +- ta_sentinel: implement protocol draft-ietf-dnsop-kskroll-sentinel-01 + (our draft-ietf-dnsop-kskroll-sentinel-00 implementation had inverted logic) +- libknot: require version 2.6.4 or newer to get bugfixes for DNS-over-TLS + +Bugfixes +-------- +- detect_time_jump module: don't clear cache on suspend-resume (#284) +- stats module: fix stats.list() returning nothing, regressed in 2.0.0 +- policy.TLS_FORWARD: refusal when configuring with multiple IPs (#306) +- cache: fix broken refresh of insecure records that were about to expire +- fix the hints module on some systems, e.g. Fedora (came back on 2.0.0) +- build with older gnutls (conditionally disable features) +- fix the predict module to work with insecure records & cleanup code + + +Knot Resolver 2.0.0 (2018-01-31) +================================ + +Incompatible changes +-------------------- +- systemd: change unit files to allow running multiple instances, + deployments with single instance now must use `kresd@1.service` + instead of `kresd.service`; see kresd.systemd(8) for details +- systemd: the directory for cache is now /var/cache/knot-resolver +- unify default directory and user to `knot-resolver` +- directory with trust anchor file specified by -k option must be writeable +- policy module is now loaded by default to enforce RFC 6761; + see documentation for policy.PASS if you use locally-served DNS zones +- drop support for alternative cache backends memcached, redis, + and for Lua bindings for some specific cache operations +- REORDER_RR option is not implemented (temporarily) + +New features +------------ +- aggressive caching of validated records (RFC 8198) for NSEC zones; + thanks to ICANN for sponsoring this work. +- forwarding over TLS, authenticated by SPKI pin or certificate. + policy.TLS_FORWARD pipelines queries out-of-order over shared TLS connection + Beware: Some resolvers do not support out-of-order query processing. + TLS forwarding to such resolvers will lead to slower resolution or failures. +- trust anchors: you may specify a read-only file via -K or --keyfile-ro +- trust anchors: at build-time you may set KEYFILE_DEFAULT (read-only) +- ta_sentinel module implements draft ietf-dnsop-kskroll-sentinel-00, + enabled by default +- serve_stale module is prototype, subject to change +- extended API for Lua modules + +Bugfixes +-------- +- fix build on osx - regressed in 1.5.3 (different linker option name) + * Wed Feb 07 2018 Fedora Release Engineering - 1.5.3-1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild @@ -259,6 +362,11 @@ Improvements - add doc package - configure tarball signature verification - add root.hints file +- use upstream systemd unit files, paths and user name + - migrate configuration to /etc/knot-resolver + - use user knot-resolver + - store cache in /var/cache/knot-resolver + - use systemd alias knot-resolver -> kresd * Mon Nov 06 2017 Petr Špaček - 1.5.0-1 - New upstream release 1.5.0 diff --git a/kresd-control.socket b/kresd-control.socket deleted file mode 100644 index 6a671a1..0000000 --- a/kresd-control.socket +++ /dev/null @@ -1,13 +0,0 @@ -[Unit] -Description=Knot DNS Resolver control socket -Documentation=man:kresd(8) -Before=sockets.target - -[Socket] -ListenStream=/run/kresd/control -FileDescriptorName=control -Service=kresd.service -SocketMode=0660 - -[Install] -WantedBy=sockets.target diff --git a/kresd-tls.socket b/kresd-tls.socket deleted file mode 100644 index ad696be..0000000 --- a/kresd-tls.socket +++ /dev/null @@ -1,12 +0,0 @@ -[Unit] -Description=Knot DNS Resolver TLS network listener -Documentation=man:kresd(8) -Before=sockets.target - -[Socket] -ListenStream=853 -FileDescriptorName=tls -Service=kresd.service - -[Install] -WantedBy=sockets.target diff --git a/config b/kresd.conf similarity index 54% rename from config rename to kresd.conf index edf2e97..81034c0 100644 --- a/config +++ b/kresd.conf @@ -1,15 +1,20 @@ -- vim:syntax=lua: -- Refer to manual: http://knot-resolver.readthedocs.org/en/latest/daemon.html#configuration --- unmanaged DNSSEC root TA -trust_anchors.config('/etc/kresd/root.keys', nil) - -- Load useful modules modules = { 'policy', -- Block queries to local zones/bad sites + 'hints', -- Load /etc/hosts and allow custom root hints 'stats', -- Track internal statistics 'predict', -- Prefetch expiring/frequent records } +-- See kresd.systemd(7) about configuring network interfaces when using systemd +-- Listen on localhost (default) +-- net = { '127.0.0.1', '::1' } + +-- Enable DNSSEC validation +trust_anchors.file = '/etc/knot-resolver/root.keys' + -- Cache size cache.size = 100 * MB diff --git a/kresd.service b/kresd.service deleted file mode 100644 index 8126014..0000000 --- a/kresd.service +++ /dev/null @@ -1,15 +0,0 @@ -[Unit] -Description=Knot DNS Resolver daemon -Documentation=man:kresd(8) - -[Service] -Type=simple -WorkingDirectory=/run/kresd -ExecStart=/usr/sbin/kresd -c /etc/kresd/config --forks 1 -User=kresd -Restart=on-failure -# CAP_NET_BIND_SERVICE capability is needed for manual service activation -AmbientCapabilities=CAP_NET_BIND_SERVICE - -[Install] -WantedBy=multi-user.target diff --git a/kresd.socket b/kresd.socket deleted file mode 100644 index 7d8953c..0000000 --- a/kresd.socket +++ /dev/null @@ -1,13 +0,0 @@ -[Unit] -Description=Knot DNS Resolver network listeners -Documentation=man:kresd(8) -Before=sockets.target - -[Socket] -ListenStream=[::1]:53 -ListenDatagram=[::1]:53 -ListenStream=127.0.0.1:53 -ListenDatagram=127.0.0.1:53 - -[Install] -WantedBy=sockets.target diff --git a/kresd.tmpfiles b/kresd.tmpfiles deleted file mode 100644 index b35429d..0000000 --- a/kresd.tmpfiles +++ /dev/null @@ -1 +0,0 @@ -d /run/kresd 0750 kresd kresd - - diff --git a/sources b/sources index c58786e..253c060 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-1.5.3.tar.xz) = 9d301705ecc01b2c6a2f3084697a789406165c79444fdac96a3d58294f3288ea6d86be7002dff96cfbf597d9e771b8838a875afdfaae29b97eee173c08805c19 -SHA512 (knot-resolver-1.5.3.tar.xz.asc) = 0e266becbdb79fdbd785eaec8362833496f8cb668a5af4871ff5cb462e8b7ac62f9f5ecfb4cb71ac4a6db20aaa0b5ae795b95e33b0a5d38c3f215795f244b262 +SHA512 (knot-resolver-2.1.0.tar.xz) = 3ad68cd160f818727b66c758d622d8e65db3782d6e075aeffd7c211f8eb49e6b393173455d439c1715e1d6f3a091f68b3479380b42db6a12e3fb9fa6122b1935 +SHA512 (knot-resolver-2.1.0.tar.xz.asc) = 9f08efc3e28d065051d7b6d0836d0ac90357cbdc86c320e6ef14fbbfbffcbf40b93c2257f93abad44481cedb1c77c3aa144b8726b9df4f96969e6652dc634086 From 7bdc9673cd89818ab40e3447c572865720701344 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Mon, 5 Feb 2018 15:33:35 +0100 Subject: [PATCH 043/126] update tests --- tests/test_manual_activation.yml | 11 ++++++----- tests/test_socket_activation.yml | 2 +- tests/tests.yml | 1 + 3 files changed, 8 insertions(+), 6 deletions(-) diff --git a/tests/test_manual_activation.yml b/tests/test_manual_activation.yml index 750fb48..cb61748 100644 --- a/tests/test_manual_activation.yml +++ b/tests/test_manual_activation.yml @@ -1,16 +1,17 @@ --- - block: - - name: make sure kresd socket and service is off + - name: make sure kresd@1 socket and service is off service: name: "{{ item }}" state: stopped with_items: - - kresd.socket - - kresd.service + - kresd@1.service + - kresd@1.socket + failed_when: false - - name: start kresd.service + - name: start kresd@1.service service: - name: kresd.service + name: kresd@1.service state: started - name: check if query is answered diff --git a/tests/test_socket_activation.yml b/tests/test_socket_activation.yml index ce76b69..43c4c5e 100644 --- a/tests/test_socket_activation.yml +++ b/tests/test_socket_activation.yml @@ -5,8 +5,8 @@ name: "{{ item }}" state: stopped with_items: + - kresd@1.service - kresd.socket - - kresd.service - name: start kresd.socket service: diff --git a/tests/tests.yml b/tests/tests.yml index b9a81b8..7bfc095 100644 --- a/tests/tests.yml +++ b/tests/tests.yml @@ -16,6 +16,7 @@ - classic tasks: - include_tasks: test_socket_activation.yml + when: ansible_distribution == 'Fedora' - include_tasks: test_manual_activation.yml - set_fact: From c202d17abe4898a81796c15f83cef8662dbb7f28 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Mon, 26 Feb 2018 12:19:41 +0100 Subject: [PATCH 044/126] new upstream release 2.1.1 --- knot-resolver.spec | 13 ++++++++++++- sources | 4 ++-- 2 files changed, 14 insertions(+), 3 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 8a382e6..608d94d 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -1,7 +1,7 @@ %global _hardened_build 1 %define GPG_CHECK 1 -%define VERSION 2.1.0 +%define VERSION 2.1.1 %define repodir %{_builddir}/%{name}-%{version} Name: knot-resolver @@ -244,6 +244,17 @@ fi %endif %changelog +* Mon Feb 26 2018 Tomas Krizek - 2.1.1-1 +Knot Resolver 2.1.1 (2018-02-23) +================================ + +Bugfixes +-------- +- when iterating, avoid unnecessary queries for NS in insecure parent. + This problem worsened in 2.0.0. (#246) +- prevent UDP packet leaks when using TLS forwarding +- fix the hints module also on some other systems, e.g. Gentoo. + * Fri Feb 16 2018 Tomas Krizek - 2.1.0-1 - New upstream release 2.1.0 diff --git a/sources b/sources index 253c060..5bfd8ec 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-2.1.0.tar.xz) = 3ad68cd160f818727b66c758d622d8e65db3782d6e075aeffd7c211f8eb49e6b393173455d439c1715e1d6f3a091f68b3479380b42db6a12e3fb9fa6122b1935 -SHA512 (knot-resolver-2.1.0.tar.xz.asc) = 9f08efc3e28d065051d7b6d0836d0ac90357cbdc86c320e6ef14fbbfbffcbf40b93c2257f93abad44481cedb1c77c3aa144b8726b9df4f96969e6652dc634086 +SHA512 (knot-resolver-2.1.1.tar.xz) = 8ba9a8ec9bfdfbcf27fe07cd6f3b7925ea8de53a873dc46b57e87637cfc920f07a8315d0de7c7c5228b521838aa5b4a780d42999e62ad07a80fc95b36186042e +SHA512 (knot-resolver-2.1.1.tar.xz.asc) = 19052562b1cd587e407ea34e63485b316aecebbae261c6c0a1abf59029ff3a82332d7e6c378bf284446cf514121db83af14693f316f19e9f65d569a8e464654b From 8db6171e685915960c2c5b6b777f3f8400db31f1 Mon Sep 17 00:00:00 2001 From: Daniel Aleksandersen Date: Sat, 10 Mar 2018 01:10:01 +0000 Subject: [PATCH 045/126] Don't advise people to disable SELinux --- knot-resolver.spec | 5 ----- 1 file changed, 5 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 608d94d..3bcfc29 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -79,11 +79,6 @@ The package is pre-configured as local caching resolver. To start using it, start a single kresd instance: # systemctl start kresd@1.service -If you run into issues with activation of the service or its sockets, either -update your selinux-policy package or turn off selinux (setenforce 0). -https://bugzilla.redhat.com/show_bug.cgi?id=1366968 -https://bugzilla.redhat.com/show_bug.cgi?id=1543049 - %package devel Summary: Development headers for Knot DNS Resolver Requires: %{name}%{?_isa} = %{version}-%{release} From 2aca1b464dbdfa4541813146df09e13d1762717f Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Mon, 12 Mar 2018 10:32:06 +0100 Subject: [PATCH 046/126] tests: don't turn off selinux --- tests/tests.yml | 5 ----- 1 file changed, 5 deletions(-) diff --git a/tests/tests.yml b/tests/tests.yml index 7bfc095..e42b12e 100644 --- a/tests/tests.yml +++ b/tests/tests.yml @@ -2,11 +2,6 @@ - hosts: localhost remote_user: root pre_tasks: - # FIXME: Turn off SELinux until bug is resolved - # See https://bugzilla.redhat.com/show_bug.cgi?id=1366968 - - selinux: - state: permissive - policy: targeted - package: # Install additional dependecies name: bind-utils state: latest From 0713c0e700dca319347cfe76816719496a6c7cf1 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Mon, 12 Mar 2018 10:33:12 +0100 Subject: [PATCH 047/126] fix missing shell command in description --- knot-resolver.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 3bcfc29..0977a61 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -77,7 +77,7 @@ a state-machine like API for extensions. The package is pre-configured as local caching resolver. To start using it, start a single kresd instance: -# systemctl start kresd@1.service +$ systemctl start kresd@1.service %package devel Summary: Development headers for Knot DNS Resolver From c0849b78e1710ddfdeef0cb99b30359ee1c34825 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Mon, 12 Mar 2018 10:37:19 +0100 Subject: [PATCH 048/126] spec update - libzscanner, rundir permissions --- knot-resolver.spec | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 0977a61..dc4795c 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -36,7 +36,7 @@ BuildRequires: gnupg2 %endif BuildRequires: pkgconfig(libknot) >= 2.6.4 -BuildRequires: pkgconfig(libzscanner) >= 2.3.1 +BuildRequires: pkgconfig(libzscanner) >= 2.4.2 BuildRequires: pkgconfig(libdnssec) >= 2.3.1 BuildRequires: pkgconfig(libuv) BuildRequires: pkgconfig(luajit) >= 2.0 @@ -140,11 +140,11 @@ mkdir -p %{buildroot}%{_mandir}/man7 install -m 0644 -p %{repodir}/doc/kresd.systemd.7 %{buildroot}%{_mandir}/man7/kresd.systemd.7 %if 0%{?rhel} +# no socket activation for CentOS 7 (requires systemd.227) mkdir -p %{buildroot}%{_unitdir}/kresd@.service.d install -m 0644 -p %{repodir}/systemd/drop-in/systemd-compat.conf %{buildroot}%{_unitdir}/kresd@.service.d/override.conf %endif %if 0%{?fedora} -# no socket activation for CentOS 7 (requires systemd.227) install -m 0644 -p %{repodir}/systemd/kresd.socket %{buildroot}%{_unitdir}/kresd.socket install -m 0644 -p %{repodir}/systemd/kresd-control@.socket %{buildroot}%{_unitdir}/kresd-control@.socket install -m 0644 -p %{repodir}/systemd/kresd-tls.socket %{buildroot}%{_unitdir}/kresd-tls.socket @@ -154,7 +154,7 @@ install -m 0644 -p %{repodir}/systemd/kresd-tls.socket %{buildroot}%{_unitdir}/k mkdir -p %{buildroot}%{_tmpfilesdir} install -m 0644 -p %{repodir}/systemd/tmpfiles/knot-resolver.conf %{buildroot}%{_tmpfilesdir}/knot-resolver.conf mkdir -p %{buildroot}%{_rundir} -install -m 0751 -d %{buildroot}%{_rundir}/knot-resolver +install -m 0750 -d %{buildroot}%{_rundir}/knot-resolver # install cache mkdir -p %{buildroot}%{_localstatedir}/cache From 3ee2f38db6f5682f85cbdd1073d55e80f091da18 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Wed, 28 Mar 2018 14:52:24 +0200 Subject: [PATCH 049/126] new upstream release 2.2.0 --- knot-resolver.spec | 20 +++++++++++++++++++- sources | 4 ++-- 2 files changed, 21 insertions(+), 3 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index dc4795c..0c44cbc 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -1,7 +1,7 @@ %global _hardened_build 1 %define GPG_CHECK 1 -%define VERSION 2.1.1 +%define VERSION 2.2.0 %define repodir %{_builddir}/%{name}-%{version} Name: knot-resolver @@ -239,6 +239,24 @@ fi %endif %changelog +* Wed Mar 28 2018 Tomas Krizek - 2.2.0-1 +Knot Resolver 2.2.0 (2018-03-28) +================================ + +New features +------------ +- cache server unavailability to prevent flooding unreachable servers + (Please note that caching algorithm needs further optimization + and will change in further versions but we need to gather operational + experience first.) + +Bugfixes +-------- +- don't magically -D_FORTIFY_SOURCE=2 in some cases +- allow large responses for outbound over TCP +- fix crash with RR sets with over 255 records + + * Mon Feb 26 2018 Tomas Krizek - 2.1.1-1 Knot Resolver 2.1.1 (2018-02-23) ================================ diff --git a/sources b/sources index 5bfd8ec..6350122 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-2.1.1.tar.xz) = 8ba9a8ec9bfdfbcf27fe07cd6f3b7925ea8de53a873dc46b57e87637cfc920f07a8315d0de7c7c5228b521838aa5b4a780d42999e62ad07a80fc95b36186042e -SHA512 (knot-resolver-2.1.1.tar.xz.asc) = 19052562b1cd587e407ea34e63485b316aecebbae261c6c0a1abf59029ff3a82332d7e6c378bf284446cf514121db83af14693f316f19e9f65d569a8e464654b +SHA512 (knot-resolver-2.2.0.tar.xz) = 397ae54cb5d1a838866175725b155862e54d5ff1191caab59641bcfd16cf4c965ea1b4f7f001d181c052941ff8df0d231be793a05383aa0abbd4a4130447e532 +SHA512 (knot-resolver-2.2.0.tar.xz.asc) = b42200f611564b8c98954a0a20444967bbe3d5df45d4e35630f5199949e6f8672463ab8312d95f43050a2b9ddb7b902ff4cdeaa2e544688a695baa6861766b6b From cb122c5447cff54f2711cabf07ab3cafe2dfd0e7 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Mon, 23 Apr 2018 14:07:08 +0200 Subject: [PATCH 050/126] new upstream release 2.3.0 --- knot-resolver.spec | 40 ++++++++++++++++++++++++++++++++++------ sources | 4 ++-- 2 files changed, 36 insertions(+), 8 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 0c44cbc..bf55bbe 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -1,7 +1,7 @@ %global _hardened_build 1 %define GPG_CHECK 1 -%define VERSION 2.2.0 +%define VERSION 2.3.0 %define repodir %{_builddir}/%{name}-%{version} Name: knot-resolver @@ -50,10 +50,14 @@ BuildRequires: pkgconfig(cmocka) BuildRequires: systemd +%if 0%{?fedora} +# dependencies for doc package; disable in EPEL (missing fonts) +# https://bugzilla.redhat.com/show_bug.cgi?id=1492884 BuildRequires: doxygen -BuildRequires: breathe -BuildRequires: python-sphinx -BuildRequires: python-sphinx_rtd_theme +BuildRequires: python2-breathe +BuildRequires: python2-sphinx +BuildRequires: python2-sphinx_rtd_theme +%endif # Lua 5.1 version of the libraries have different package names %if 0%{?rhel} @@ -87,8 +91,6 @@ Requires: %{name}%{?_isa} = %{version}-%{release} The package contains development headers for Knot DNS Resolver. %if 0%{?fedora} -# Disable doc package in EPEL - it missing fonts in sphinx_rtd_theme -# https://bugzilla.redhat.com/show_bug.cgi?id=1492884 %package doc Summary: Documentation for Knot DNS Resolver BuildArch: noarch @@ -239,6 +241,32 @@ fi %endif %changelog +* Mon Apr 23 2018 Tomas Krizek - 2.3.0-1 +Knot Resolver 2.3.0 (2018-04-23) +================================ + +Security +-------- +- fix CVE-2018-1110: denial of service triggered by malformed DNS messages + (!550, !558, security!2, security!4) +- increase resilience against slow lorris attack (security!5) + +Bugfixes +-------- +- validation: fix SERVFAIL in case of CNAME to NXDOMAIN in a single zone (!538) +- validation: fix SERVFAIL for DS . query (!544) +- lib/resolve: don't send unecessary queries to parent zone (!513) +- iterate: fix validation for zones where parent and child share NS (!543) +- TLS: improve error handling and documentation (!536, !555, !559) + +Improvements +------------ +- prefill: new module to periodically import root zone into cache + (replacement for RFC 7706, !511) +- network_listen_fd: always create end point for supervisor supplied file descriptor +- use CPPFLAGS build environment variable if set (!547) + + * Wed Mar 28 2018 Tomas Krizek - 2.2.0-1 Knot Resolver 2.2.0 (2018-03-28) ================================ diff --git a/sources b/sources index 6350122..012f7d0 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-2.2.0.tar.xz) = 397ae54cb5d1a838866175725b155862e54d5ff1191caab59641bcfd16cf4c965ea1b4f7f001d181c052941ff8df0d231be793a05383aa0abbd4a4130447e532 -SHA512 (knot-resolver-2.2.0.tar.xz.asc) = b42200f611564b8c98954a0a20444967bbe3d5df45d4e35630f5199949e6f8672463ab8312d95f43050a2b9ddb7b902ff4cdeaa2e544688a695baa6861766b6b +SHA512 (knot-resolver-2.3.0.tar.xz) = 030594d6b096092962ce5f5c09a4d3a429433837f26b8bbdbaeba3ae201dd12ab8511e8314bd0f1d6f1b6f08d1d57e978425798fe31da4451f798e08610cff36 +SHA512 (knot-resolver-2.3.0.tar.xz.asc) = 06dc8a3bc15d962c1a0eb819191f7b34ce3ef142c3d1b989c54a469f498b4240a8c4b3dfe4c33c7e99686589ef1c918192c991cc6dcf2c87aa180aab629a1035 From 399ff667c63b07f89216733c6c64f7e674539959 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Tue, 3 Jul 2018 12:14:27 +0200 Subject: [PATCH 051/126] new upstream release 2.4.0 --- knot-resolver.spec | 130 +++++++++++++++++++++++++++++---------------- sources | 4 +- 2 files changed, 87 insertions(+), 47 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index bf55bbe..57c8443 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -1,7 +1,7 @@ %global _hardened_build 1 %define GPG_CHECK 1 -%define VERSION 2.3.0 +%define VERSION 2.4.0 %define repodir %{_builddir}/%{name}-%{version} Name: knot-resolver @@ -16,9 +16,9 @@ Source0: https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz # LuaJIT only on these arches %if 0%{?rhel} # RHEL 7 does not have aarch64 LuaJIT -ExclusiveArch: %{ix86} x86_64 +ExclusiveArch: %{ix86} x86_64 %else -ExclusiveArch: %{arm} aarch64 %{ix86} x86_64 +ExclusiveArch: %{arm} aarch64 %{ix86} x86_64 %endif Source2: kresd.conf @@ -29,49 +29,47 @@ Source1: https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz.as # PGP keys used to sign upstream releases # Export with --armor using command from https://fedoraproject.org/wiki/PackagingDrafts:GPGSignatures # Don't forget to update %%prep section when adding/removing keys -Source100: gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc -Source101: gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc -Source102: gpgkey-4A8BA48C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc +Source100: gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc +Source101: gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc +Source102: gpgkey-4A8BA48C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc BuildRequires: gnupg2 %endif -BuildRequires: pkgconfig(libknot) >= 2.6.4 +BuildRequires: pkgconfig(cmocka) +BuildRequires: pkgconfig(gnutls) +BuildRequires: pkgconfig(libedit) +BuildRequires: pkgconfig(libknot) >= 2.6.7 BuildRequires: pkgconfig(libzscanner) >= 2.4.2 BuildRequires: pkgconfig(libdnssec) >= 2.3.1 +BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(libuv) BuildRequires: pkgconfig(luajit) >= 2.0 +BuildRequires: pkgconfig(systemd) -BuildRequires: pkgconfig(libedit) -BuildRequires: pkgconfig(libmemcached) >= 1.0 -BuildRequires: pkgconfig(hiredis) -BuildRequires: pkgconfig(libsystemd) - -BuildRequires: pkgconfig(cmocka) - -BuildRequires: systemd +%if 0%{?rhel} +BuildRequires: lmdb-devel +# Lua 5.1 version of the libraries have different package names +Requires: lua-socket +Requires: lua-sec +%else +BuildRequires: pkgconfig(lmdb) +Requires: lua-socket-compat +Requires: lua-sec-compat +%endif %if 0%{?fedora} # dependencies for doc package; disable in EPEL (missing fonts) # https://bugzilla.redhat.com/show_bug.cgi?id=1492884 BuildRequires: doxygen -BuildRequires: python2-breathe -BuildRequires: python2-sphinx -BuildRequires: python2-sphinx_rtd_theme +BuildRequires: python3-breathe +BuildRequires: python3-sphinx +BuildRequires: python3-sphinx_rtd_theme %endif -# Lua 5.1 version of the libraries have different package names -%if 0%{?rhel} -Requires: lua-socket -Requires: lua-sec -%else -Requires: lua-socket-compat -Requires: lua-sec-compat -%endif - -Requires(pre): shadow-utils -Requires(post): systemd -Requires(preun): systemd -Requires(postun): systemd +Requires(pre): shadow-utils +Requires(post): systemd +Requires(preun): systemd +Requires(postun): systemd %description The Knot DNS Resolver is a caching full resolver implementation written in C @@ -121,6 +119,9 @@ rm -v scripts/bootstrap-depends.sh make doc %endif +%check +make %{?_smp_mflags} check + %install %make_install %{build_flags} @@ -137,24 +138,27 @@ install -m 0664 -p %SOURCE3 %{buildroot}%{_sysconfdir}/knot-resolver/root.keys # install systemd units and doc mkdir -p %{buildroot}%{_unitdir} -install -m 0644 -p %{repodir}/systemd/kresd@.service %{buildroot}%{_unitdir}/kresd@.service +install -m 0644 -p %{repodir}/distro/common/systemd/kresd@.service %{buildroot}%{_unitdir}/kresd@.service +install -m 0644 -p %{repodir}/distro/common/systemd/kresd.target %{buildroot}%{_unitdir}/kresd.target +install -m 0755 -d %{buildroot}%{_unitdir}/multi-user.target.wants +ln -s ../kresd.target %{buildroot}%{_unitdir}/multi-user.target.wants/kresd.target mkdir -p %{buildroot}%{_mandir}/man7 -install -m 0644 -p %{repodir}/doc/kresd.systemd.7 %{buildroot}%{_mandir}/man7/kresd.systemd.7 +install -m 0644 -p %{repodir}/distro/common/systemd/kresd.systemd.7 %{buildroot}%{_mandir}/man7/kresd.systemd.7 %if 0%{?rhel} # no socket activation for CentOS 7 (requires systemd.227) mkdir -p %{buildroot}%{_unitdir}/kresd@.service.d -install -m 0644 -p %{repodir}/systemd/drop-in/systemd-compat.conf %{buildroot}%{_unitdir}/kresd@.service.d/override.conf +install -m 0644 -p %{repodir}/distro/common/systemd/drop-in/systemd-compat.conf %{buildroot}%{_unitdir}/kresd@.service.d/override.conf %endif %if 0%{?fedora} -install -m 0644 -p %{repodir}/systemd/kresd.socket %{buildroot}%{_unitdir}/kresd.socket -install -m 0644 -p %{repodir}/systemd/kresd-control@.socket %{buildroot}%{_unitdir}/kresd-control@.socket -install -m 0644 -p %{repodir}/systemd/kresd-tls.socket %{buildroot}%{_unitdir}/kresd-tls.socket +install -m 0644 -p %{repodir}/distro/common/systemd/kresd.socket %{buildroot}%{_unitdir}/kresd.socket +install -m 0644 -p %{repodir}/distro/common/systemd/kresd-control@.socket %{buildroot}%{_unitdir}/kresd-control@.socket +install -m 0644 -p %{repodir}/distro/common/systemd/kresd-tls.socket %{buildroot}%{_unitdir}/kresd-tls.socket %endif # install tmpfiles.d mkdir -p %{buildroot}%{_tmpfilesdir} -install -m 0644 -p %{repodir}/systemd/tmpfiles/knot-resolver.conf %{buildroot}%{_tmpfilesdir}/knot-resolver.conf +install -m 0644 -p %{repodir}/distro/common/tmpfiles/knot-resolver.conf %{buildroot}%{_tmpfilesdir}/knot-resolver.conf mkdir -p %{buildroot}%{_rundir} install -m 0750 -d %{buildroot}%{_rundir}/knot-resolver @@ -165,16 +169,12 @@ install -m 0750 -d %{buildroot}%{_localstatedir}/cache/knot-resolver # remove module with unsatisfied dependencies rm -r %{buildroot}%{_libdir}/kdns_modules/{http,http.lua} -%check -# check-config requires installed version of kresd, do not attempt to run that -LD_PRELOAD=lib/libkres.so make check-unit %{build_flags} LDFLAGS="%{__global_ldflags} -ldl" - %pre getent group knot-resolver >/dev/null || groupadd -r knot-resolver getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysconfdir}/knot-resolver -s /sbin/nologin -c "Knot DNS Resolver" knot-resolver %post -%systemd_post system-kresd.slice +%systemd_post 'kresd@*.service' /sbin/ldconfig # TODO: can be removed when Fedora 27 is no longer supported and migration is no longer necessary @@ -200,10 +200,11 @@ if [ -d "/run/kresd" ]; then fi %preun -%systemd_preun system-kresd.slice +%systemd_preun 'kresd@*.service' kresd.target kresd.socket kresd-tls.socket %postun -%systemd_postun_with_restart system-kresd.slice +# NOTE: this doesn't restart the services on CentOS 7 +%systemd_postun_with_restart 'kresd@*.service' /sbin/ldconfig %files @@ -216,6 +217,8 @@ fi %attr(644,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/icann-ca.pem %attr(750,knot-resolver,knot-resolver) %dir %{_localstatedir}/cache/knot-resolver %{_unitdir}/kresd*.service +%{_unitdir}/kresd.target +%{_unitdir}/multi-user.target.wants/kresd.target %if 0%{?rhel} %{_unitdir}/kresd@.service.d/override.conf %endif @@ -241,6 +244,43 @@ fi %endif %changelog +* Tue Jul 03 2018 Tomas Krizek - 2.4.0-1 +Knot Resolver 2.4.0 (2018-07-03) +================================ + +Incompatible changes +-------------------- +- minimal libknot version is now 2.6.7 to pull in latest fixes (#366) + +Security +-------- +- fix a rare case of zones incorrectly dowgraded to insecure status (!576) + +New features +------------ +- TLS session resumption (RFC 5077), both server and client (!585, #105) + (disabled when compiling with gnutls < 3.5) +- TLS_FORWARD policy uses system CA certificate store by default (!568) +- aggressive caching for NSEC3 zones (!600) +- optional protection from DNS Rebinding attack (module rebinding, !608) +- module bogus_log to log DNSSEC bogus queries without verbose logging (!613) + +Bugfixes +-------- +- prefill: fix ability to read certificate bundle (!578) +- avoid turning off qname minimization in some cases, e.g. co.uk. (#339) +- fix validation of explicit wildcard queries (#274) +- dns64 module: more properties from the RFC implemented (incl. bug #375) + +Improvements +------------ +- systemd: multiple enabled kresd instances can now be started using kresd.target +- ta_sentinel: switch to version 14 of the RFC draft (!596) +- support for glibc systems with a non-Linux kernel (!588) +- support per-request variables for Lua modules (!533) +- support custom HTTP endpoints for Lua modules (!527) + + * Mon Apr 23 2018 Tomas Krizek - 2.3.0-1 Knot Resolver 2.3.0 (2018-04-23) ================================ diff --git a/sources b/sources index 012f7d0..3999601 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-2.3.0.tar.xz) = 030594d6b096092962ce5f5c09a4d3a429433837f26b8bbdbaeba3ae201dd12ab8511e8314bd0f1d6f1b6f08d1d57e978425798fe31da4451f798e08610cff36 -SHA512 (knot-resolver-2.3.0.tar.xz.asc) = 06dc8a3bc15d962c1a0eb819191f7b34ce3ef142c3d1b989c54a469f498b4240a8c4b3dfe4c33c7e99686589ef1c918192c991cc6dcf2c87aa180aab629a1035 +SHA512 (knot-resolver-2.4.0.tar.xz) = bc40d39b1008e72ac747b8d2f3eb33c96819fe4c16ef2f46005cf523717f45ebb4c94927195e687d7243c870739d7db7901edc3ee47d768fbc52f9b4d4b742aa +SHA512 (knot-resolver-2.4.0.tar.xz.asc) = 4ebb37e95984375244ef2146a7283f571ee4164c0ffcaea1bd23ed0a2822e3261d365d7a43443ce596ddad771b995e97b1c7f311b090e72e8e97edc1b389d0de From c4beec31f842d17ace0e5fee7ed3c481e18eb582 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Fri, 13 Jul 2018 07:19:37 +0000 Subject: [PATCH 052/126] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 57c8443..c6d46d2 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,7 +6,7 @@ Name: knot-resolver Version: %{VERSION} -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -244,6 +244,9 @@ fi %endif %changelog +* Fri Jul 13 2018 Fedora Release Engineering - 2.4.0-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + * Tue Jul 03 2018 Tomas Krizek - 2.4.0-1 Knot Resolver 2.4.0 (2018-07-03) ================================ From 11dd3056a0a806a425b16435a141478ce16a91ff Mon Sep 17 00:00:00 2001 From: Igor Gnatenko Date: Tue, 24 Jul 2018 16:34:29 +0200 Subject: [PATCH 053/126] Add missing BuildRequires on gcc /bin/bash: cc: command not found References: https://bugzilla.redhat.com/show_bug.cgi?id=1604511 Signed-off-by: Igor Gnatenko --- knot-resolver.spec | 1 + 1 file changed, 1 insertion(+) diff --git a/knot-resolver.spec b/knot-resolver.spec index c6d46d2..cd7b594 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -32,6 +32,7 @@ Source1: https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz.as Source100: gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc Source101: gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc Source102: gpgkey-4A8BA48C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc +BuildRequires: gcc BuildRequires: gnupg2 %endif From 3cc696f4864a5335993d61d4d17344e3938932f9 Mon Sep 17 00:00:00 2001 From: Igor Gnatenko Date: Wed, 25 Jul 2018 11:23:49 +0200 Subject: [PATCH 054/126] add BR: gcc-c++ Signed-off-by: Igor Gnatenko --- knot-resolver.spec | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index cd7b594..acdcca5 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -32,10 +32,11 @@ Source1: https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz.as Source100: gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc Source101: gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc Source102: gpgkey-4A8BA48C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc -BuildRequires: gcc BuildRequires: gnupg2 %endif +BuildRequires: gcc +BuildRequires: gcc-c++ BuildRequires: pkgconfig(cmocka) BuildRequires: pkgconfig(gnutls) BuildRequires: pkgconfig(libedit) From 793ada766a4cfd33373ae5772c3eb8affffa0110 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Thu, 2 Aug 2018 14:59:33 +0200 Subject: [PATCH 055/126] new upstream release 2.4.1 --- knot-resolver.spec | 23 +++++++++++++++++++++-- sources | 4 ++-- 2 files changed, 23 insertions(+), 4 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index acdcca5..ef98bfa 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -1,12 +1,12 @@ %global _hardened_build 1 %define GPG_CHECK 1 -%define VERSION 2.4.0 +%define VERSION 2.4.1 %define repodir %{_builddir}/%{name}-%{version} Name: knot-resolver Version: %{VERSION} -Release: 2%{?dist} +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -246,6 +246,25 @@ fi %endif %changelog +* Thu Aug 02 2018 Tomas Krizek - 2.4.1-1 +Knot Resolver 2.4.1 (2018-08-02) +================================ + +Security +-------- +- fix CVE-2018-10920: Improper input validation bug in DNS resolver component + (security!7, security!9) + +Bugfixes +-------- +- cache: fix TTL overflow in packet due to min_ttl (#388, security!8) +- TLS session resumption: avoid bad scheduling of rotation (#385) +- HTTP module: fix a regression in 2.4.0 which broke custom certs (!632) +- cache: NSEC3 negative cache even without NS record (#384) + This fixes lower hit rate in NSEC3 zones (since 2.4.0). +- minor TCP and TLS fixes (!623, !624, !626) + + * Fri Jul 13 2018 Fedora Release Engineering - 2.4.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild diff --git a/sources b/sources index 3999601..ab8dc4f 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-2.4.0.tar.xz) = bc40d39b1008e72ac747b8d2f3eb33c96819fe4c16ef2f46005cf523717f45ebb4c94927195e687d7243c870739d7db7901edc3ee47d768fbc52f9b4d4b742aa -SHA512 (knot-resolver-2.4.0.tar.xz.asc) = 4ebb37e95984375244ef2146a7283f571ee4164c0ffcaea1bd23ed0a2822e3261d365d7a43443ce596ddad771b995e97b1c7f311b090e72e8e97edc1b389d0de +SHA512 (knot-resolver-2.4.1.tar.xz) = f033c39f9e5726c1db79780c80dc76f201a621f749bdaafec530919fad7e8b9b56b9e12389de72c69a9db0a7da57552c0c948570c9eadcd90e7d955b9da312c8 +SHA512 (knot-resolver-2.4.1.tar.xz.asc) = 25b3aa00296225d219580d8ff82e7a76078c2d5e18e825e93c73a66dff081467bcf5cc3adb4c0001bafcf889eac1f0d883fb1c207518549387d163a11f38c90c From d955512041fdcee148bfe00d38edd9f55c6f6944 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Mon, 20 Aug 2018 13:10:19 +0200 Subject: [PATCH 056/126] new upstream release 3.0.0 --- knot-resolver.spec | 59 ++++++++++++++++++++++++++++++++++++---------- sources | 4 ++-- 2 files changed, 48 insertions(+), 15 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index ef98bfa..70595d3 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -1,7 +1,7 @@ %global _hardened_build 1 %define GPG_CHECK 1 -%define VERSION 2.4.1 +%define VERSION 3.0.0 %define repodir %{_builddir}/%{name}-%{version} Name: knot-resolver @@ -21,9 +21,6 @@ ExclusiveArch: %{ix86} x86_64 ExclusiveArch: %{arm} aarch64 %{ix86} x86_64 %endif -Source2: kresd.conf -Source3: root.keys - %if 0%{GPG_CHECK} Source1: https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz.asc # PGP keys used to sign upstream releases @@ -40,7 +37,7 @@ BuildRequires: gcc-c++ BuildRequires: pkgconfig(cmocka) BuildRequires: pkgconfig(gnutls) BuildRequires: pkgconfig(libedit) -BuildRequires: pkgconfig(libknot) >= 2.6.7 +BuildRequires: pkgconfig(libknot) >= 2.7.1 BuildRequires: pkgconfig(libzscanner) >= 2.4.2 BuildRequires: pkgconfig(libdnssec) >= 2.3.1 BuildRequires: pkgconfig(libsystemd) @@ -74,7 +71,7 @@ Requires(preun): systemd Requires(postun): systemd %description -The Knot DNS Resolver is a caching full resolver implementation written in C +The Knot Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. @@ -84,20 +81,20 @@ To start using it, start a single kresd instance: $ systemctl start kresd@1.service %package devel -Summary: Development headers for Knot DNS Resolver +Summary: Development headers for Knot Resolver Requires: %{name}%{?_isa} = %{version}-%{release} %description devel -The package contains development headers for Knot DNS Resolver. +The package contains development headers for Knot Resolver. %if 0%{?fedora} %package doc -Summary: Documentation for Knot DNS Resolver +Summary: Documentation for Knot Resolver BuildArch: noarch Requires: %{name} = %{version}-%{release} %description doc -Documentation for Knot DNS Resolver +Documentation for Knot Resolver %endif %prep @@ -135,8 +132,8 @@ chmod 0644 %{buildroot}%{_pkgdocdir}/config.* # install configuration files mkdir -p %{buildroot}%{_sysconfdir} install -m 0755 -d %{buildroot}%{_sysconfdir}/knot-resolver -install -m 0644 -p %SOURCE2 %{buildroot}%{_sysconfdir}/knot-resolver/kresd.conf -install -m 0664 -p %SOURCE3 %{buildroot}%{_sysconfdir}/knot-resolver/root.keys +install -m 0644 -p %{repodir}/distro/common/kresd.conf %{buildroot}%{_sysconfdir}/knot-resolver/kresd.conf +install -m 0664 -p %{repodir}/distro/common/root.keys %{buildroot}%{_sysconfdir}/knot-resolver/root.keys # install systemd units and doc mkdir -p %{buildroot}%{_unitdir} @@ -173,7 +170,7 @@ rm -r %{buildroot}%{_libdir}/kdns_modules/{http,http.lua} %pre getent group knot-resolver >/dev/null || groupadd -r knot-resolver -getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysconfdir}/knot-resolver -s /sbin/nologin -c "Knot DNS Resolver" knot-resolver +getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysconfdir}/knot-resolver -s /sbin/nologin -c "Knot Resolver" knot-resolver %post %systemd_post 'kresd@*.service' @@ -246,6 +243,42 @@ fi %endif %changelog +* Mon Aug 20 2018 Tomas Krizek - 3.0.0-1 +Knot Resolver 3.0.0 (2018-08-20) +================================ + +Incompatible changes +-------------------- +- cache: fail lua operations if cache isn't open yet (!639) + By default cache is opened *after* reading the configuration, + and older versions were silently ignoring cache operations. + Valid configuration must open cache using `cache.open()` or `cache.size =` + before executing cache operations like `cache.clear()`. +- libknot >= 2.7.1 is required, which brings also larger API changes +- in case you wrote custom Lua modules, please consult + https://knot-resolver.readthedocs.io/en/latest/lib.html#incompatible-changes-since-3-0-0 +- in case you wrote custom C modules, please see compile against + Knot DNS 2.7 and adjust your module according to messages from C compiler +- DNS cookie module (RFC 7873) is not available in this release, + it will be later reworked to reflect development in IEFT dnsop working group +- version module was permanently removed because it was not really used by users; + if you want to receive notifications abou new releases please subscribe to + https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-resolver-announce + +Bugfixes +-------- +- fix multi-process race condition in trust anchor maintenance (!643) +- ta_sentinel: also consider static trust anchors not managed via RFC 5011 + +Improvements +------------ +- reorder_RR() implementation is brought back +- bring in performace improvements provided by libknot 2.7 +- cache.clear() has a new, more powerful API +- cache documentation was improved +- old name "Knot DNS Resolver" is replaced by unambiguous "Knot Resolver" + to prevent confusion with "Knot DNS" authoritative server + * Thu Aug 02 2018 Tomas Krizek - 2.4.1-1 Knot Resolver 2.4.1 (2018-08-02) ================================ diff --git a/sources b/sources index ab8dc4f..98c0324 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-2.4.1.tar.xz) = f033c39f9e5726c1db79780c80dc76f201a621f749bdaafec530919fad7e8b9b56b9e12389de72c69a9db0a7da57552c0c948570c9eadcd90e7d955b9da312c8 -SHA512 (knot-resolver-2.4.1.tar.xz.asc) = 25b3aa00296225d219580d8ff82e7a76078c2d5e18e825e93c73a66dff081467bcf5cc3adb4c0001bafcf889eac1f0d883fb1c207518549387d163a11f38c90c +SHA512 (knot-resolver-3.0.0.tar.xz) = 044b5269d69e1f9b502709910533f00b060a53524c1ad1d19b78ec6fd474edef5cddfcc6e3a4123d1ab67b3e21fcde5891b463cd67b78da2fa69226bf1d34fa1 +SHA512 (knot-resolver-3.0.0.tar.xz.asc) = 9370ed04c8b488954ae227d4aba085decf85d0cf18f7c5d6cc2832a6c9bb8fb8e43ec7229112eb2beb176287eda50cd3e0b91f0d5212dff6870fe326c0065e10 From 73cecf7f74404e8ae9a257a71b5c78230ebd569f Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Mon, 20 Aug 2018 13:21:50 +0200 Subject: [PATCH 057/126] remove unused files --- kresd.conf | 20 -------------------- root.keys | 2 -- 2 files changed, 22 deletions(-) delete mode 100644 kresd.conf delete mode 100644 root.keys diff --git a/kresd.conf b/kresd.conf deleted file mode 100644 index 81034c0..0000000 --- a/kresd.conf +++ /dev/null @@ -1,20 +0,0 @@ --- vim:syntax=lua: --- Refer to manual: http://knot-resolver.readthedocs.org/en/latest/daemon.html#configuration - --- Load useful modules -modules = { - 'policy', -- Block queries to local zones/bad sites - 'hints', -- Load /etc/hosts and allow custom root hints - 'stats', -- Track internal statistics - 'predict', -- Prefetch expiring/frequent records -} - --- See kresd.systemd(7) about configuring network interfaces when using systemd --- Listen on localhost (default) --- net = { '127.0.0.1', '::1' } - --- Enable DNSSEC validation -trust_anchors.file = '/etc/knot-resolver/root.keys' - --- Cache size -cache.size = 100 * MB diff --git a/root.keys b/root.keys deleted file mode 100644 index 7578e04..0000000 --- a/root.keys +++ /dev/null @@ -1,2 +0,0 @@ -. IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5 -. IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D From a9dc29afa871683b23715da4cae27def0ea04441 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Fri, 2 Nov 2018 17:10:46 +0100 Subject: [PATCH 058/126] new upstream release 3.1.0 --- knot-resolver.spec | 59 +++++++++++++++++++++++++++++++++++----------- sources | 4 ++-- 2 files changed, 47 insertions(+), 16 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 70595d3..53e274e 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -1,7 +1,8 @@ %global _hardened_build 1 +%{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 3.0.0 +%define VERSION 3.1.0 %define repodir %{_builddir}/%{name}-%{version} Name: knot-resolver @@ -37,35 +38,45 @@ BuildRequires: gcc-c++ BuildRequires: pkgconfig(cmocka) BuildRequires: pkgconfig(gnutls) BuildRequires: pkgconfig(libedit) -BuildRequires: pkgconfig(libknot) >= 2.7.1 -BuildRequires: pkgconfig(libzscanner) >= 2.4.2 -BuildRequires: pkgconfig(libdnssec) >= 2.3.1 +BuildRequires: pkgconfig(libknot) >= 2.7.2 +BuildRequires: pkgconfig(libzscanner) >= 2.7.2 +BuildRequires: pkgconfig(libdnssec) >= 2.7.2 BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(libuv) BuildRequires: pkgconfig(luajit) >= 2.0 BuildRequires: pkgconfig(systemd) +# Distro-dependent dependencies %if 0%{?rhel} BuildRequires: lmdb-devel # Lua 5.1 version of the libraries have different package names Requires: lua-socket Requires: lua-sec -%else +Requires(pre): shadow-utils +%endif +%if 0%{?fedora} BuildRequires: pkgconfig(lmdb) +BuildRequires: python3-sphinx Requires: lua-socket-compat Requires: lua-sec-compat +Requires(pre): shadow-utils +%endif +%if 0%{?suse_version} +BuildRequires: lmdb-devel +BuildRequires: python3-Sphinx +Requires: lua51-luasocket +Requires: lua51-luasec +Requires(pre): shadow %endif -%if 0%{?fedora} +%if "x%{?rhel}" == "x" # dependencies for doc package; disable in EPEL (missing fonts) # https://bugzilla.redhat.com/show_bug.cgi?id=1492884 BuildRequires: doxygen BuildRequires: python3-breathe -BuildRequires: python3-sphinx BuildRequires: python3-sphinx_rtd_theme %endif -Requires(pre): shadow-utils Requires(post): systemd Requires(preun): systemd Requires(postun): systemd @@ -87,7 +98,7 @@ Requires: %{name}%{?_isa} = %{version}-%{release} %description devel The package contains development headers for Knot Resolver. -%if 0%{?fedora} +%if "x%{?rhel}" == "x" %package doc Summary: Documentation for Knot Resolver BuildArch: noarch @@ -110,10 +121,10 @@ rm -v scripts/bootstrap-depends.sh %build %global build_paths PREFIX=%{_prefix} BINDIR=%{_bindir} LIBDIR=%{_libdir} INCLUDEDIR=%{_includedir} ETCDIR=%{_sysconfdir}/knot-resolver -%global build_flags V=1 CFLAGS="%{optflags}" LDFLAGS="%{__global_ldflags}" %{build_paths} HAS_go=no +%global build_flags V=1 CFLAGS="%{optflags}" LDFLAGS="%{?__global_ldflags}" %{build_paths} HAS_go=no %make_build %{build_flags} -%if 0%{?fedora} +%if "x%{?rhel}" == "x" # build documentation make doc %endif @@ -149,7 +160,7 @@ install -m 0644 -p %{repodir}/distro/common/systemd/kresd.systemd.7 %{buildroot} mkdir -p %{buildroot}%{_unitdir}/kresd@.service.d install -m 0644 -p %{repodir}/distro/common/systemd/drop-in/systemd-compat.conf %{buildroot}%{_unitdir}/kresd@.service.d/override.conf %endif -%if 0%{?fedora} +%if "x%{?rhel}" == "x" install -m 0644 -p %{repodir}/distro/common/systemd/kresd.socket %{buildroot}%{_unitdir}/kresd.socket install -m 0644 -p %{repodir}/distro/common/systemd/kresd-control@.socket %{buildroot}%{_unitdir}/kresd-control@.socket install -m 0644 -p %{repodir}/distro/common/systemd/kresd-tls.socket %{buildroot}%{_unitdir}/kresd-tls.socket @@ -221,7 +232,7 @@ fi %if 0%{?rhel} %{_unitdir}/kresd@.service.d/override.conf %endif -%if 0%{?fedora} +%if "x%{?rhel}" == "x" %{_unitdir}/kresd*.socket %endif %{_tmpfilesdir}/knot-resolver.conf @@ -237,12 +248,32 @@ fi %{_libdir}/pkgconfig/libkres.pc %{_libdir}/libkres.so -%if 0%{?fedora} +%if "x%{?rhel}" == "x" %files doc %doc doc/html %endif %changelog +* Fri Nov 02 2018 Tomas Krizek - 3.1.0-1 +Knot Resolver 3.1.0 (2018-11-02) +================================ + +Incompatible changes +-------------------- +- hints.use_nodata(true) by default; that's what most users want +- libknot >= 2.7.2 is required + +Improvements +------------ +- cache: handle out-of-space SIGBUS slightly better (#197) +- daemon: improve TCP timeout handling (!686) + +Bugfixes +-------- +- cache.clear('name'): fix some edge cases in API (#401) +- fix error handling from TLS writes (!669) +- avoid SERVFAILs due to certain kind of NS dependency cycles (#374) + * Mon Aug 20 2018 Tomas Krizek - 3.0.0-1 Knot Resolver 3.0.0 (2018-08-20) ================================ diff --git a/sources b/sources index 98c0324..136b416 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-3.0.0.tar.xz) = 044b5269d69e1f9b502709910533f00b060a53524c1ad1d19b78ec6fd474edef5cddfcc6e3a4123d1ab67b3e21fcde5891b463cd67b78da2fa69226bf1d34fa1 -SHA512 (knot-resolver-3.0.0.tar.xz.asc) = 9370ed04c8b488954ae227d4aba085decf85d0cf18f7c5d6cc2832a6c9bb8fb8e43ec7229112eb2beb176287eda50cd3e0b91f0d5212dff6870fe326c0065e10 +SHA512 (knot-resolver-3.1.0.tar.xz) = 511e8a02197ba9f87e8daafa150a2e0cf2a6ba64a9224fb4c02f7321cf9b8102030a2a79206289301ca2cbebb2df52089a661d4b28212e107e559d4debb5a368 +SHA512 (knot-resolver-3.1.0.tar.xz.asc) = 40e9207b88a948d59d1f9e34751011cf2d614bc3c4343f6db4689cc0da778b64fa8f5738d8fcb4fddfa8a7c65af5c15d0b2c75395ad71d05b075b7e3c123b529 From d280f712c43b7e9a3033f302b2ea2adf7508b0a4 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Mon, 17 Dec 2018 16:18:19 +0100 Subject: [PATCH 059/126] new upstream release 3.2.0 --- knot-resolver.spec | 71 ++++++++++++++++++++++++++++++---------------- sources | 4 +-- 2 files changed, 48 insertions(+), 27 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 53e274e..42b23a2 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,7 +2,7 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 3.1.0 +%define VERSION 3.2.0 %define repodir %{_builddir}/%{name}-%{version} Name: knot-resolver @@ -117,8 +117,6 @@ gpg2 --verify %{SOURCE1} %{SOURCE0} %endif %setup -q -n %{name}-%{version} -rm -v scripts/bootstrap-depends.sh - %build %global build_paths PREFIX=%{_prefix} BINDIR=%{_bindir} LIBDIR=%{_libdir} INCLUDEDIR=%{_includedir} ETCDIR=%{_sysconfdir}/knot-resolver %global build_flags V=1 CFLAGS="%{optflags}" LDFLAGS="%{?__global_ldflags}" %{build_paths} HAS_go=no @@ -187,28 +185,6 @@ getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysc %systemd_post 'kresd@*.service' /sbin/ldconfig -# TODO: can be removed when Fedora 27 is no longer supported and migration is no longer necessary -# Migration script -if [ -f "/etc/kresd/config" ]; then - echo -e '\n\n---------------------------------------------------------' - echo ' WARNING: Migrating to knot-resolver 2.0' - echo -e '---------------------------------------------------------\n' - echo 'Please check your configuration still works, it has been moved to' - echo '/etc/knot-resolver/kresd.conf' - echo -e "\nTo start or enable the service, please use 'kresd@1.service', e.g.:" - echo -e ' # systemctl start kresd@1.service\n\n' - systemctl stop kresd.service kresd{,-tls,-control}.socket &>/dev/null ||: - cp -r /etc/kresd/* /etc/knot-resolver/ - mv /etc/knot-resolver/config /etc/knot-resolver/kresd.conf - chown -R root:knot-resolver /etc/knot-resolver - sed -i 's#/etc/kresd#/etc/knot-resolver#' /etc/knot-resolver/kresd.conf -fi -if [ -d "/run/kresd" ]; then - rm -f /run/kresd/control - mv /run/kresd/* /var/cache/knot-resolver/ &>/dev/null - chown -R knot-resolver:knot-resolver /var/cache/knot-resolver -fi - %preun %systemd_preun 'kresd@*.service' kresd.target kresd.socket kresd-tls.socket @@ -254,6 +230,51 @@ fi %endif %changelog +* Mon Dec 17 2018 Tomas Krizek - 3.2.0-1 +Knot Resolver 3.2.0 (2018-12-17) +================================ + +New features +------------ +- module edns_keepalive to implement server side of RFC 7828 (#408) +- module nsid to implement server side of RFC 5001 (#289) +- module bogus_log provides .frequent() table (!629, credit Ulrich Wisser) +- module stats collects flags from answer messages (!629, credit Ulrich Wisser) +- module view supports multiple rules with identical address/TSIG specification + and keeps trying rules until a "non-chain" action is executed (!678) +- module experimental_dot_auth implements an DNS-over-TLS to auth protocol + (!711, credit Manu Bretelle) +- net.bpf bindings allow advanced users to use eBPF socket filters + +Bugfixes +-------- +- http module: only run prometheus in parent process if using --forks=N, + as the submodule collects metrics from all sub-processes as well. +- TLS fixes for corner cases (!700, !714, !716, !721, !728) +- fix build with -DNOVERBOSELOG (#424) +- policy.{FORWARD,TLS_FORWARD,STUB}: respect net.ipv{4,6} setting (!710) +- avoid SERVFAILs due to certain kind of NS dependency cycles, again + (#374) this time seen as 'circular dependency' in verbose logs +- policy and view modules do not overwrite result finished requests (!678) + +Improvements +------------ +- Dockerfile: rework, basing on Debian instead of Alpine +- policy.{FORWARD,TLS_FORWARD,STUB}: give advantage to IPv6 + when choosing whom to ask, just as for iteration +- use pseudo-randomness from gnutls instead of internal ISAAC (#233) +- tune the way we deal with non-responsive servers (!716, !723) +- documentation clarifies interaction between policy and view modules (!678, !730) + +Module API changes +------------------ +- new layer is added: answer_finalize +- kr_request keeps ::qsource.packet beyond the begin layer +- kr_request::qsource.tcp renamed to ::qsource.flags.tcp +- kr_request::has_tls renamed to ::qsource.flags.tls +- kr_zonecut_add(), kr_zonecut_del() and kr_nsrep_sort() changed parameters slightly + + * Fri Nov 02 2018 Tomas Krizek - 3.1.0-1 Knot Resolver 3.1.0 (2018-11-02) ================================ diff --git a/sources b/sources index 136b416..01c787c 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-3.1.0.tar.xz) = 511e8a02197ba9f87e8daafa150a2e0cf2a6ba64a9224fb4c02f7321cf9b8102030a2a79206289301ca2cbebb2df52089a661d4b28212e107e559d4debb5a368 -SHA512 (knot-resolver-3.1.0.tar.xz.asc) = 40e9207b88a948d59d1f9e34751011cf2d614bc3c4343f6db4689cc0da778b64fa8f5738d8fcb4fddfa8a7c65af5c15d0b2c75395ad71d05b075b7e3c123b529 +SHA512 (knot-resolver-3.2.0.tar.xz) = e80163a1790c5855921ae1536950b77fb74b73b75234920e49ffb956f799820b53ccacb5e6eafabe96fd0a7c1c67424a1cb687cadbe7e68db57294df7e461f3f +SHA512 (knot-resolver-3.2.0.tar.xz.asc) = 157596495faa22125d8515e3aae75479a1603c65b5fc0e7be7036bdbe4358114e6c68a955311d8f847617401fb6332c2f452a341ec9bd0a769251c7baa8788f1 From 50cb6eaae631b6b1a8b4ea6b2f9147b471838e6d Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Thu, 10 Jan 2019 15:32:36 +0100 Subject: [PATCH 060/126] new upstream relase 3.2.1 --- knot-resolver.spec | 25 ++++++++++++++++++++++++- sources | 4 ++-- 2 files changed, 26 insertions(+), 3 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 42b23a2..93d42b3 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,7 +2,7 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 3.2.0 +%define VERSION 3.2.1 %define repodir %{_builddir}/%{name}-%{version} Name: knot-resolver @@ -230,6 +230,29 @@ getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysc %endif %changelog +* Thu Jan 10 2019 Tomas Krizek - 3.2.1-1 +Knot Resolver 3.2.1 (2019-01-10) +================================ + +Bugfixes +-------- +- trust_anchors: respect validity time range during TA bootstrap (!748) +- fix TLS rehandshake handling (!739) +- make TLS_FORWARD compatible with GnuTLS 3.3 (!741) +- special thanks to Grigorii Demidov for his long-term work on Knot Resolver! + +Improvements +------------ +- improve handling of timeouted outgoing TCP connections (!734) +- trust_anchors: check syntax of public keys in DNSKEY RRs (!748) +- validator: clarify message about bogus non-authoritative data (!735) +- dnssec validation failures contain more verbose reasoning (!735) +- new function trust_anchors.summary() describes state of DNSSEC TAs (!737), + and logs new state of trust anchors after start up and automatic changes +- trust anchors: refuse revoked DNSKEY even if specified explicitly, + and downgrade missing the SEP bit to a warning + + * Mon Dec 17 2018 Tomas Krizek - 3.2.0-1 Knot Resolver 3.2.0 (2018-12-17) ================================ diff --git a/sources b/sources index 01c787c..f76543f 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-3.2.0.tar.xz) = e80163a1790c5855921ae1536950b77fb74b73b75234920e49ffb956f799820b53ccacb5e6eafabe96fd0a7c1c67424a1cb687cadbe7e68db57294df7e461f3f -SHA512 (knot-resolver-3.2.0.tar.xz.asc) = 157596495faa22125d8515e3aae75479a1603c65b5fc0e7be7036bdbe4358114e6c68a955311d8f847617401fb6332c2f452a341ec9bd0a769251c7baa8788f1 +SHA512 (knot-resolver-3.2.1.tar.xz) = 2ed79176183a685bf6365081706e68e4add05965a5f53a6f38ae4a5c204d29952eaf511ffbf18c646a0a843a032b425eb0592de27dafbf977d976946a3437351 +SHA512 (knot-resolver-3.2.1.tar.xz.asc) = a9e2b491e4b7e7e4e6c34f0e293fb6799a39c78a4a85c698549da0481e67c8b0ca7e14f66fb9e7f2281d661e9d21d15c3607724dd37ee0aa0aaa5cc7dbfa6f73 From 761d673f904ca42e67ff27aee4f5987b5c1de26c Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Fri, 1 Feb 2019 05:54:22 +0000 Subject: [PATCH 061/126] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 93d42b3..533da69 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: %{VERSION} -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -230,6 +230,9 @@ getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysc %endif %changelog +* Fri Feb 01 2019 Fedora Release Engineering - 3.2.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + * Thu Jan 10 2019 Tomas Krizek - 3.2.1-1 Knot Resolver 3.2.1 (2019-01-10) ================================ From 0befa7b4845b99030808ed0395e83fca5385ee3f Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Wed, 29 May 2019 17:16:15 +0200 Subject: [PATCH 062/126] rebase to new upstream version 4.0.0 --- knot-resolver.spec | 231 ++++++++++++++++++++++++++++++--------------- sources | 4 +- 2 files changed, 159 insertions(+), 76 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 533da69..7b169b8 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,12 +2,13 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 3.2.1 +%define VERSION 4.0.0 %define repodir %{_builddir}/%{name}-%{version} +%define NINJA ninja-build Name: knot-resolver Version: %{VERSION} -Release: 2%{?dist} +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -35,38 +36,47 @@ BuildRequires: gnupg2 BuildRequires: gcc BuildRequires: gcc-c++ +BuildRequires: meson BuildRequires: pkgconfig(cmocka) BuildRequires: pkgconfig(gnutls) BuildRequires: pkgconfig(libedit) -BuildRequires: pkgconfig(libknot) >= 2.7.2 -BuildRequires: pkgconfig(libzscanner) >= 2.7.2 -BuildRequires: pkgconfig(libdnssec) >= 2.7.2 +BuildRequires: pkgconfig(libknot) >= 2.8 +BuildRequires: pkgconfig(libzscanner) >= 2.8 +BuildRequires: pkgconfig(libdnssec) >= 2.8 BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(libuv) BuildRequires: pkgconfig(luajit) >= 2.0 -BuildRequires: pkgconfig(systemd) + +Requires: systemd # Distro-dependent dependencies %if 0%{?rhel} BuildRequires: lmdb-devel # Lua 5.1 version of the libraries have different package names +Requires: lua-basexx Requires: lua-socket Requires: lua-sec -Requires(pre): shadow-utils +Requires: lua-filesystem +Requires(pre): shadow-utils %endif %if 0%{?fedora} BuildRequires: pkgconfig(lmdb) BuildRequires: python3-sphinx +Requires: lua5.1-basexx +Requires: lua5.1-cqueues +Requires: lua-filesystem-compat Requires: lua-socket-compat Requires: lua-sec-compat -Requires(pre): shadow-utils +Requires(pre): shadow-utils %endif %if 0%{?suse_version} +%define NINJA ninja BuildRequires: lmdb-devel BuildRequires: python3-Sphinx +Requires: lua51-luafilesystem Requires: lua51-luasocket Requires: lua51-luasec -Requires(pre): shadow +Requires(pre): shadow %endif %if "x%{?rhel}" == "x" @@ -77,15 +87,11 @@ BuildRequires: python3-breathe BuildRequires: python3-sphinx_rtd_theme %endif -Requires(post): systemd -Requires(preun): systemd -Requires(postun): systemd - %description -The Knot Resolver is a caching full resolver implementation written in C -and LuaJIT, including both a resolver library and a daemon. Modular -architecture of the library keeps the core tiny and efficient, and provides -a state-machine like API for extensions. +The Knot Resolver is a DNSSEC-enabled caching full resolver implementation +written in C and LuaJIT, including both a resolver library and a daemon. +Modular architecture of the library keeps the core tiny and efficient, and +provides a state-machine like API for extensions. The package is pre-configured as local caching resolver. To start using it, start a single kresd instance: @@ -108,6 +114,24 @@ Requires: %{name} = %{version}-%{release} Documentation for Knot Resolver %endif +%if "x%{?suse_version}" == "x" +%package module-http +Summary: HTTP/2 module for Knot Resolver +Requires: knot-resolver +%if 0%{?fedora} +Requires: lua5.1-http +Requires: lua5.1-mmdb +%else +Requires: lua-http +Requires: lua-mmdb +%endif + +%description module-http +HTTP/2 module for Knot Resolver has multiple uses. It enables use of +DNS-over-HTTP, can serve as API ednpoint for other modules or provide a web +interface for local visualization of the resolver cache and queries. +%endif + %prep %if 0%{GPG_CHECK} export GNUPGHOME=./gpg-keyring @@ -118,72 +142,76 @@ gpg2 --verify %{SOURCE1} %{SOURCE0} %setup -q -n %{name}-%{version} %build -%global build_paths PREFIX=%{_prefix} BINDIR=%{_bindir} LIBDIR=%{_libdir} INCLUDEDIR=%{_includedir} ETCDIR=%{_sysconfdir}/knot-resolver -%global build_flags V=1 CFLAGS="%{optflags}" LDFLAGS="%{?__global_ldflags}" %{build_paths} HAS_go=no -%make_build %{build_flags} - +CFLAGS="%{optflags}" LDFLAGS="%{?__global_ldflags}" meson build_rpm \ %if "x%{?rhel}" == "x" -# build documentation -make doc + -Ddoc=enabled \ + -Dsystemd_files=enabled \ +%else + -Dsystemd_files=nosocket \ +%endif + -Dclient=enabled \ + -Dunit_tests=enabled \ + -Dmanaged_ta=enabled \ + -Dinstall_kresd_conf=enabled \ + --buildtype=plain \ + --prefix="%{_prefix}" \ + --sbindir="%{_sbindir}" \ + --libdir="%{_libdir}" \ + --includedir="%{_includedir}" \ + --sysconfdir="%{_sysconfdir}" \ + +%{NINJA} -v -C build_rpm +%if "x%{?rhel}" == "x" +%{NINJA} -v -C build_rpm doc %endif %check -make %{?_smp_mflags} check +meson test -C build_rpm %install -%make_install %{build_flags} +DESTDIR="${RPM_BUILD_ROOT}" %{NINJA} -v -C build_rpm install -# move sample configuration files to documentation -install -m 0755 -d %{buildroot}%{_pkgdocdir} -mv %{buildroot}%{_sysconfdir}/knot-resolver/config.* %{buildroot}%{_pkgdocdir} -chmod 0644 %{buildroot}%{_pkgdocdir}/config.* - -# install configuration files -mkdir -p %{buildroot}%{_sysconfdir} -install -m 0755 -d %{buildroot}%{_sysconfdir}/knot-resolver -install -m 0644 -p %{repodir}/distro/common/kresd.conf %{buildroot}%{_sysconfdir}/knot-resolver/kresd.conf -install -m 0664 -p %{repodir}/distro/common/root.keys %{buildroot}%{_sysconfdir}/knot-resolver/root.keys - -# install systemd units and doc -mkdir -p %{buildroot}%{_unitdir} -install -m 0644 -p %{repodir}/distro/common/systemd/kresd@.service %{buildroot}%{_unitdir}/kresd@.service -install -m 0644 -p %{repodir}/distro/common/systemd/kresd.target %{buildroot}%{_unitdir}/kresd.target +# add kresd.target to multi-user.target.wants to support enabling kresd services install -m 0755 -d %{buildroot}%{_unitdir}/multi-user.target.wants ln -s ../kresd.target %{buildroot}%{_unitdir}/multi-user.target.wants/kresd.target -mkdir -p %{buildroot}%{_mandir}/man7 -install -m 0644 -p %{repodir}/distro/common/systemd/kresd.systemd.7 %{buildroot}%{_mandir}/man7/kresd.systemd.7 -%if 0%{?rhel} -# no socket activation for CentOS 7 (requires systemd.227) -mkdir -p %{buildroot}%{_unitdir}/kresd@.service.d -install -m 0644 -p %{repodir}/distro/common/systemd/drop-in/systemd-compat.conf %{buildroot}%{_unitdir}/kresd@.service.d/override.conf -%endif -%if "x%{?rhel}" == "x" -install -m 0644 -p %{repodir}/distro/common/systemd/kresd.socket %{buildroot}%{_unitdir}/kresd.socket -install -m 0644 -p %{repodir}/distro/common/systemd/kresd-control@.socket %{buildroot}%{_unitdir}/kresd-control@.socket -install -m 0644 -p %{repodir}/distro/common/systemd/kresd-tls.socket %{buildroot}%{_unitdir}/kresd-tls.socket +# install .tmpfiles.d dirs +install -m 0750 -d %{buildroot}%{_localstatedir}/cache/%{name} +install -m 0750 -d %{buildroot}/run/%{name} + +# remove modules with missing dependencies +rm %{buildroot}%{_libdir}/knot-resolver/kres_modules/etcd.lua + +%if 0%{?suse_version} +rm %{buildroot}%{_libdir}/knot-resolver/kres_modules/experimental_dot_auth.lua +rm -r %{buildroot}%{_libdir}/knot-resolver/kres_modules/http +rm %{buildroot}%{_libdir}/knot-resolver/kres_modules/http*.lua +rm %{buildroot}%{_libdir}/knot-resolver/kres_modules/prometheus.lua +rm %{buildroot}%{_unitdir}/kresd@.service.d/module-http.conf +rm %{buildroot}%{_unitdir}/kresd-doh.socket +rm %{buildroot}%{_unitdir}/kresd-webmgmt.socket %endif -# install tmpfiles.d -mkdir -p %{buildroot}%{_tmpfilesdir} -install -m 0644 -p %{repodir}/distro/common/tmpfiles/knot-resolver.conf %{buildroot}%{_tmpfilesdir}/knot-resolver.conf -mkdir -p %{buildroot}%{_rundir} -install -m 0750 -d %{buildroot}%{_rundir}/knot-resolver - -# install cache -mkdir -p %{buildroot}%{_localstatedir}/cache -install -m 0750 -d %{buildroot}%{_localstatedir}/cache/knot-resolver - -# remove module with unsatisfied dependencies -rm -r %{buildroot}%{_libdir}/kdns_modules/{http,http.lua} +# rename doc directory for centos, opensuse +%if "x%{?fedora}" == "x" +install -m 755 -d %{buildroot}/%{_pkgdocdir} +mv %{buildroot}/%{_datadir}/doc/%{name}/* %{buildroot}/%{_pkgdocdir}/ +%endif %pre getent group knot-resolver >/dev/null || groupadd -r knot-resolver getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysconfdir}/knot-resolver -s /sbin/nologin -c "Knot Resolver" knot-resolver %post +%if 0%{?fedora} +# use daemon-reload to update changed kresd.socket file in Knot Resolver 4.0.0 +systemctl daemon-reload +%systemd_post 'system-kresd.slice' +# https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets +%else %systemd_post 'kresd@*.service' /sbin/ldconfig +%endif %preun %systemd_preun 'kresd@*.service' kresd.target kresd.socket kresd-tls.socket @@ -191,33 +219,69 @@ getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysc %postun # NOTE: this doesn't restart the services on CentOS 7 %systemd_postun_with_restart 'kresd@*.service' +%if 0%{?fedora} +# https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets +%else /sbin/ldconfig +%endif %files -%license COPYING -%doc %{_pkgdocdir} +%dir %{_pkgdocdir} +%license %{_pkgdocdir}/COPYING +%doc %{_pkgdocdir}/AUTHORS +%doc %{_pkgdocdir}/NEWS +%doc %{_pkgdocdir}/examples %attr(775,root,knot-resolver) %dir %{_sysconfdir}/knot-resolver %attr(644,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/kresd.conf %attr(664,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/root.keys %attr(644,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/root.hints %attr(644,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/icann-ca.pem -%attr(750,knot-resolver,knot-resolver) %dir %{_localstatedir}/cache/knot-resolver -%{_unitdir}/kresd*.service +%{_unitdir}/kresd@.service %{_unitdir}/kresd.target +%dir %{_unitdir}/multi-user.target.wants %{_unitdir}/multi-user.target.wants/kresd.target -%if 0%{?rhel} -%{_unitdir}/kresd@.service.d/override.conf -%endif %if "x%{?rhel}" == "x" -%{_unitdir}/kresd*.socket +%dir %{_unitdir}/kresd@.service.d +%{_unitdir}/kresd.socket +%{_unitdir}/kresd-tls.socket +%{_unitdir}/kresd-control@.socket +%ghost /run/%{name}/ +%{_mandir}/man7/kresd.systemd.7.gz +%else +%{_mandir}/man7/kresd.systemd.nosocket.7.gz %endif %{_tmpfilesdir}/knot-resolver.conf +%attr(750,knot-resolver,knot-resolver) %dir %{_localstatedir}/cache/%{name} %{_sbindir}/kresd %{_sbindir}/kresc %{_libdir}/libkres.so.* -%{_libdir}/kdns_modules +%dir %{_libdir}/knot-resolver +%{_libdir}/knot-resolver/*.so +%{_libdir}/knot-resolver/*.lua +%dir %{_libdir}/knot-resolver/kres_modules +%{_libdir}/knot-resolver/kres_modules/*.so +%{_libdir}/knot-resolver/kres_modules/daf +%{_libdir}/knot-resolver/kres_modules/daf.lua +%{_libdir}/knot-resolver/kres_modules/detect_time_jump.lua +%{_libdir}/knot-resolver/kres_modules/detect_time_skew.lua +%{_libdir}/knot-resolver/kres_modules/dns64.lua +%if "x%{?suse_version}" == "x" +%{_libdir}/knot-resolver/kres_modules/experimental_dot_auth.lua +%endif +%{_libdir}/knot-resolver/kres_modules/graphite.lua +%{_libdir}/knot-resolver/kres_modules/policy.lua +%{_libdir}/knot-resolver/kres_modules/predict.lua +%{_libdir}/knot-resolver/kres_modules/prefill.lua +%{_libdir}/knot-resolver/kres_modules/priming.lua +%{_libdir}/knot-resolver/kres_modules/rebinding.lua +%{_libdir}/knot-resolver/kres_modules/renumber.lua +%{_libdir}/knot-resolver/kres_modules/serve_stale.lua +%{_libdir}/knot-resolver/kres_modules/ta_sentinel.lua +%{_libdir}/knot-resolver/kres_modules/ta_signal_query.lua +%{_libdir}/knot-resolver/kres_modules/ta_update.lua +%{_libdir}/knot-resolver/kres_modules/view.lua +%{_libdir}/knot-resolver/kres_modules/workarounds.lua %{_mandir}/man8/kresd.8.gz -%{_mandir}/man7/kresd.systemd.7.gz %files devel %{_includedir}/libkres @@ -226,10 +290,29 @@ getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysc %if "x%{?rhel}" == "x" %files doc -%doc doc/html +%dir %{_pkgdocdir} +%doc %{_pkgdocdir}/html +%endif + +%if "x%{?suse_version}" == "x" +%files module-http +%if 0%{?fedora} +%{_unitdir}/kresd@.service.d/module-http.conf +%{_unitdir}/kresd-doh.socket +%{_unitdir}/kresd-webmgmt.socket +%endif +%{_libdir}/knot-resolver/kres_modules/http +%{_libdir}/knot-resolver/kres_modules/http*.lua +%{_libdir}/knot-resolver/kres_modules/prometheus.lua %endif %changelog +* Wed May 29 2019 Tomas Krizek - 4.0.0.-1 +- rebase to new upstream release 4.0.0 +- bump Knot DNS libraries to 2.8 (ABI compat) +- use new upstream build system - meson +- add knot-resolver-module-http package along with new lua dependecies + * Fri Feb 01 2019 Fedora Release Engineering - 3.2.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild diff --git a/sources b/sources index f76543f..44dcc08 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-3.2.1.tar.xz) = 2ed79176183a685bf6365081706e68e4add05965a5f53a6f38ae4a5c204d29952eaf511ffbf18c646a0a843a032b425eb0592de27dafbf977d976946a3437351 -SHA512 (knot-resolver-3.2.1.tar.xz.asc) = a9e2b491e4b7e7e4e6c34f0e293fb6799a39c78a4a85c698549da0481e67c8b0ca7e14f66fb9e7f2281d661e9d21d15c3607724dd37ee0aa0aaa5cc7dbfa6f73 +SHA512 (knot-resolver-4.0.0.tar.xz) = e4c7e21ec36b5a733adf9f8e3751bbc347ce9ce7af8d71e8d5f3a7a87da673db753490c5257466e8433cd5fff1651046c8500ee59e91be8e55b1a16614eaf53a +SHA512 (knot-resolver-4.0.0.tar.xz.asc) = 260cc43c5a7f87ba039012f18c67c6217c681b08d7b526f7376aeb06f89a64d0e9a3045a1b46293f2c23f6a5fd7c5fd13baa86f1f8b7643be1bda94772db0bcf From a13c2669704d2739ed130bdb7232ce489d1d1f80 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Wed, 10 Jul 2019 17:36:26 +0200 Subject: [PATCH 063/126] update to new upstream version 4.1.0 --- knot-resolver.spec | 16 +++++++++++----- sources | 4 ++-- 2 files changed, 13 insertions(+), 7 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 7b169b8..209e0ef 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,7 +2,7 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 4.0.0 +%define VERSION 4.1.0 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build @@ -80,8 +80,8 @@ Requires(pre): shadow %endif %if "x%{?rhel}" == "x" -# dependencies for doc package; disable in EPEL (missing fonts) -# https://bugzilla.redhat.com/show_bug.cgi?id=1492884 +# dependencies for doc package +# enable once CentOS 7.6 makes it into OBS buildroot BuildRequires: doxygen BuildRequires: python3-breathe BuildRequires: python3-sphinx_rtd_theme @@ -204,7 +204,7 @@ getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysc %post %if 0%{?fedora} -# use daemon-reload to update changed kresd.socket file in Knot Resolver 4.0.0 +# in case socket/service files are updated systemctl daemon-reload %systemd_post 'system-kresd.slice' # https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets @@ -214,7 +214,7 @@ systemctl daemon-reload %endif %preun -%systemd_preun 'kresd@*.service' kresd.target kresd.socket kresd-tls.socket +%systemd_preun 'kresd@*.service' kres-cache-gc.service kresd.target kresd.socket kresd-tls.socket %postun # NOTE: this doesn't restart the services on CentOS 7 @@ -237,6 +237,7 @@ systemctl daemon-reload %attr(644,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/root.hints %attr(644,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/icann-ca.pem %{_unitdir}/kresd@.service +%{_unitdir}/kres-cache-gc.service %{_unitdir}/kresd.target %dir %{_unitdir}/multi-user.target.wants %{_unitdir}/multi-user.target.wants/kresd.target @@ -254,6 +255,7 @@ systemctl daemon-reload %attr(750,knot-resolver,knot-resolver) %dir %{_localstatedir}/cache/%{name} %{_sbindir}/kresd %{_sbindir}/kresc +%{_sbindir}/kres-cache-gc %{_libdir}/libkres.so.* %dir %{_libdir}/knot-resolver %{_libdir}/knot-resolver/*.so @@ -307,6 +309,10 @@ systemctl daemon-reload %endif %changelog +* Wed Jul 10 2019 Tomas Krizek - 4.1.0-1 +- update to new upstream version 4.1.0 +- add kres-cache-gc.service + * Wed May 29 2019 Tomas Krizek - 4.0.0.-1 - rebase to new upstream release 4.0.0 - bump Knot DNS libraries to 2.8 (ABI compat) diff --git a/sources b/sources index 44dcc08..dfcfcf3 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-4.0.0.tar.xz) = e4c7e21ec36b5a733adf9f8e3751bbc347ce9ce7af8d71e8d5f3a7a87da673db753490c5257466e8433cd5fff1651046c8500ee59e91be8e55b1a16614eaf53a -SHA512 (knot-resolver-4.0.0.tar.xz.asc) = 260cc43c5a7f87ba039012f18c67c6217c681b08d7b526f7376aeb06f89a64d0e9a3045a1b46293f2c23f6a5fd7c5fd13baa86f1f8b7643be1bda94772db0bcf +SHA512 (knot-resolver-4.1.0.tar.xz) = d9e86cea160f15e92908193613887bb7b727d0125b9de03e16c7bc66c0c29288621dd09b7208599f1f80ccb659f47179722df481565530c4c2532d9bd81fdd91 +SHA512 (knot-resolver-4.1.0.tar.xz.asc) = ba75a5c4e239a224051ccf9677abceae38d53aeb0fdc4e8e2569073c788d3a8aa4625a3b0e4f46ec7c73718cc1e1eb2d7345a1550e295d4b72f425274dc054b1 From 0c52de4aea3d9ad0b9564dbee4a2d42a54bdcd67 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 25 Jul 2019 11:59:06 +0000 Subject: [PATCH 064/126] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 209e0ef..07e4475 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -8,7 +8,7 @@ Name: knot-resolver Version: %{VERSION} -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -309,6 +309,9 @@ systemctl daemon-reload %endif %changelog +* Thu Jul 25 2019 Fedora Release Engineering - 4.1.0-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + * Wed Jul 10 2019 Tomas Krizek - 4.1.0-1 - update to new upstream version 4.1.0 - add kres-cache-gc.service From d7e4af5338ec4609c3dc4bc99a1b555c0a59d104 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Wed, 21 Aug 2019 14:03:15 +0200 Subject: [PATCH 065/126] 4.2.0-1: new upstream release --- knot-resolver.spec | 10 ++++++++-- sources | 4 ++-- 2 files changed, 10 insertions(+), 4 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 07e4475..3e453d2 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,13 +2,13 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 4.1.0 +%define VERSION 4.2.0 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build Name: knot-resolver Version: %{VERSION} -Release: 2%{?dist} +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -54,6 +54,7 @@ Requires: systemd BuildRequires: lmdb-devel # Lua 5.1 version of the libraries have different package names Requires: lua-basexx +Requires: lua-psl Requires: lua-socket Requires: lua-sec Requires: lua-filesystem @@ -64,6 +65,7 @@ BuildRequires: pkgconfig(lmdb) BuildRequires: python3-sphinx Requires: lua5.1-basexx Requires: lua5.1-cqueues +Recommends: lua5.1-psl Requires: lua-filesystem-compat Requires: lua-socket-compat Requires: lua-sec-compat @@ -309,6 +311,10 @@ systemctl daemon-reload %endif %changelog +* Wed Aug 21 2019 Tomas Krizek - 4.2.0-1 +- update to new upstream version 4.2.0 +- added lua-psl dependency for policy.slice() functionality + * Thu Jul 25 2019 Fedora Release Engineering - 4.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild diff --git a/sources b/sources index dfcfcf3..0c1a5a4 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-4.1.0.tar.xz) = d9e86cea160f15e92908193613887bb7b727d0125b9de03e16c7bc66c0c29288621dd09b7208599f1f80ccb659f47179722df481565530c4c2532d9bd81fdd91 -SHA512 (knot-resolver-4.1.0.tar.xz.asc) = ba75a5c4e239a224051ccf9677abceae38d53aeb0fdc4e8e2569073c788d3a8aa4625a3b0e4f46ec7c73718cc1e1eb2d7345a1550e295d4b72f425274dc054b1 +SHA512 (knot-resolver-4.2.0.tar.xz) = 224efaced08365601ded9a613aa71530dc18d57488693b68c19cb014d72a0e8858034c1d11b87e3c4f193a307ed335747e9b903d57fef5b0c43b399150c09b3f +SHA512 (knot-resolver-4.2.0.tar.xz.asc) = 5efb04eed680c0fc158f8f162e949d4ae16fd5dfc1fba0ace071e6a6557e7d3f9c1f478514e5e22c34e7a53bd1a57078e185b584a292753593204906f7b5f9a9 From e034bccb4b878b047cfdabec2a21b62d75c7ecd0 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Thu, 26 Sep 2019 16:51:33 +0200 Subject: [PATCH 066/126] 4.2.1-1: new upstream release --- knot-resolver.spec | 5 ++++- sources | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 3e453d2..dd8a1e7 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,7 +2,7 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 4.2.0 +%define VERSION 4.2.1 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build @@ -311,6 +311,9 @@ systemctl daemon-reload %endif %changelog +* Thu Sep 26 2019 Tomas Krizek - 4.2.1-1 +- update to new upstream version 4.2.1 + * Wed Aug 21 2019 Tomas Krizek - 4.2.0-1 - update to new upstream version 4.2.0 - added lua-psl dependency for policy.slice() functionality diff --git a/sources b/sources index 0c1a5a4..1bf2fea 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-4.2.0.tar.xz) = 224efaced08365601ded9a613aa71530dc18d57488693b68c19cb014d72a0e8858034c1d11b87e3c4f193a307ed335747e9b903d57fef5b0c43b399150c09b3f -SHA512 (knot-resolver-4.2.0.tar.xz.asc) = 5efb04eed680c0fc158f8f162e949d4ae16fd5dfc1fba0ace071e6a6557e7d3f9c1f478514e5e22c34e7a53bd1a57078e185b584a292753593204906f7b5f9a9 +SHA512 (knot-resolver-4.2.1.tar.xz) = f0142c5e26e5757e9b4e7370a570b5bc148cfba960dd9ac7a5aa9e0c582e9e7da383ab9ee2c55878233cc11df91ce88cc7256f28c02760b1d2462ca783eebc7d +SHA512 (knot-resolver-4.2.1.tar.xz.asc) = c2dd7143448cd6e1fb0210011d502d8dde80b2e40769f13b5068e710b6b207392235f1398a7a7b5e0c840ca36f8008c564a5a04980acc05107b528062b2ca3f0 From dfaaabed44f600843ba7f040c579a7efeaf73dfd Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Mon, 7 Oct 2019 15:21:44 +0200 Subject: [PATCH 067/126] 4.2.2-1: new upstream release --- knot-resolver.spec | 5 ++++- sources | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index dd8a1e7..36530ea 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,7 +2,7 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 4.2.1 +%define VERSION 4.2.2 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build @@ -311,6 +311,9 @@ systemctl daemon-reload %endif %changelog +* Mon Oct 07 2019 Tomas Krizek - 4.2.2-1 +- update to new upstream version 4.2.2 + * Thu Sep 26 2019 Tomas Krizek - 4.2.1-1 - update to new upstream version 4.2.1 diff --git a/sources b/sources index 1bf2fea..0c04bbc 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-4.2.1.tar.xz) = f0142c5e26e5757e9b4e7370a570b5bc148cfba960dd9ac7a5aa9e0c582e9e7da383ab9ee2c55878233cc11df91ce88cc7256f28c02760b1d2462ca783eebc7d -SHA512 (knot-resolver-4.2.1.tar.xz.asc) = c2dd7143448cd6e1fb0210011d502d8dde80b2e40769f13b5068e710b6b207392235f1398a7a7b5e0c840ca36f8008c564a5a04980acc05107b528062b2ca3f0 +SHA512 (knot-resolver-4.2.2.tar.xz) = 53a7cb9419f090609c3ca31f606d40c6b023a1356de79899bc867b0511cc23474ac66af0dbd78cca0a48759ddf95cab6762bb17b24b4d1a376ad8cfdd4042fda +SHA512 (knot-resolver-4.2.2.tar.xz.asc) = ec7753832ad6b14ee78800222c60080287129e353b9fd38cead5ba51b8a2b9d5a4616ca292394c3549b9778389e3f0128c74973307904dddcd318e3e4b0c619b From 181d13c9ba959a7df12b9898fb0eb988bad8df14 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Tue, 12 Nov 2019 14:22:16 +0100 Subject: [PATCH 068/126] 4.2.2-2: rebuild for libknot10 --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 36530ea..c4eabb3 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -8,7 +8,7 @@ Name: knot-resolver Version: %{VERSION} -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -311,6 +311,9 @@ systemctl daemon-reload %endif %changelog +* Tue Nov 12 2019 Tomas Krizek - 4.2.2-2 +- rebuild for libknot10 (Knot DNS 2.9.1) + * Mon Oct 07 2019 Tomas Krizek - 4.2.2-1 - update to new upstream version 4.2.2 From 3300f4d2eacd45d34eb5a296b27db9a309f420bc Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Wed, 4 Dec 2019 17:57:30 +0100 Subject: [PATCH 069/126] 4.3.0-1: new upstream version --- knot-resolver.spec | 29 +++++++++++++++++++++++------ sources | 4 ++-- 2 files changed, 25 insertions(+), 8 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index c4eabb3..c38da04 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,13 +2,13 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 4.2.2 +%define VERSION 4.3.0 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build Name: knot-resolver Version: %{VERSION} -Release: 2%{?dist} +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -44,6 +44,7 @@ BuildRequires: pkgconfig(libknot) >= 2.8 BuildRequires: pkgconfig(libzscanner) >= 2.8 BuildRequires: pkgconfig(libdnssec) >= 2.8 BuildRequires: pkgconfig(libsystemd) +BuildRequires: pkgconfig(libcap-ng) BuildRequires: pkgconfig(libuv) BuildRequires: pkgconfig(luajit) >= 2.0 @@ -71,6 +72,12 @@ Requires: lua-socket-compat Requires: lua-sec-compat Requires(pre): shadow-utils %endif + +# we do not build HTTP module on SuSE so the build requires is not needed +%if "x%{?suse_version}" == "x" +BuildRequires: openssl-devel +%endif + %if 0%{?suse_version} %define NINJA ninja BuildRequires: lmdb-devel @@ -119,7 +126,7 @@ Documentation for Knot Resolver %if "x%{?suse_version}" == "x" %package module-http Summary: HTTP/2 module for Knot Resolver -Requires: knot-resolver +Requires: %{name} = %{version}-%{release} %if 0%{?fedora} Requires: lua5.1-http Requires: lua5.1-mmdb @@ -154,6 +161,8 @@ CFLAGS="%{optflags}" LDFLAGS="%{?__global_ldflags}" meson build_rpm \ -Dclient=enabled \ -Dunit_tests=enabled \ -Dmanaged_ta=enabled \ + -Dkeyfile_default="%{_sharedstatedir}/knot-resolver/root.keys" \ + -Dinstall_root_keys=enabled \ -Dinstall_kresd_conf=enabled \ --buildtype=plain \ --prefix="%{_prefix}" \ @@ -233,11 +242,12 @@ systemctl daemon-reload %doc %{_pkgdocdir}/AUTHORS %doc %{_pkgdocdir}/NEWS %doc %{_pkgdocdir}/examples -%attr(775,root,knot-resolver) %dir %{_sysconfdir}/knot-resolver +%attr(755,root,knot-resolver) %dir %{_sysconfdir}/knot-resolver %attr(644,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/kresd.conf -%attr(664,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/root.keys %attr(644,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/root.hints -%attr(644,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/icann-ca.pem +%attr(644,root,knot-resolver) %{_sysconfdir}/knot-resolver/icann-ca.pem +%attr(775,root,knot-resolver) %dir %{_sharedstatedir}/knot-resolver +%attr(664,root,knot-resolver) %{_sharedstatedir}/knot-resolver/root.keys %{_unitdir}/kresd@.service %{_unitdir}/kres-cache-gc.service %{_unitdir}/kresd.target @@ -284,6 +294,7 @@ systemctl daemon-reload %{_libdir}/knot-resolver/kres_modules/ta_signal_query.lua %{_libdir}/knot-resolver/kres_modules/ta_update.lua %{_libdir}/knot-resolver/kres_modules/view.lua +%{_libdir}/knot-resolver/kres_modules/watchdog.lua %{_libdir}/knot-resolver/kres_modules/workarounds.lua %{_mandir}/man8/kresd.8.gz @@ -305,12 +316,18 @@ systemctl daemon-reload %{_unitdir}/kresd-doh.socket %{_unitdir}/kresd-webmgmt.socket %endif +%{_libdir}/knot-resolver/debug_opensslkeylog.so %{_libdir}/knot-resolver/kres_modules/http %{_libdir}/knot-resolver/kres_modules/http*.lua %{_libdir}/knot-resolver/kres_modules/prometheus.lua %endif %changelog +* Wed Dec 04 2019 Tomas Krizek - 4.3.0-1 +- update to new upstream version 4.3.0 +- make config directory read-only for knot-resolver, relocate root.keys to /var/lib +- http module now depends on the exact same binary version of knot-resolver + * Tue Nov 12 2019 Tomas Krizek - 4.2.2-2 - rebuild for libknot10 (Knot DNS 2.9.1) diff --git a/sources b/sources index 0c04bbc..e878fe5 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-4.2.2.tar.xz) = 53a7cb9419f090609c3ca31f606d40c6b023a1356de79899bc867b0511cc23474ac66af0dbd78cca0a48759ddf95cab6762bb17b24b4d1a376ad8cfdd4042fda -SHA512 (knot-resolver-4.2.2.tar.xz.asc) = ec7753832ad6b14ee78800222c60080287129e353b9fd38cead5ba51b8a2b9d5a4616ca292394c3549b9778389e3f0128c74973307904dddcd318e3e4b0c619b +SHA512 (knot-resolver-4.3.0.tar.xz) = cb59b8bd3d12feeba0fbf45e021c8cd7736393377aa6c71d2d365d0ebb58122c440df3187ed4d3396dacfa5aba4bb752826b9d9da02aea4b626fcba3767c7c47 +SHA512 (knot-resolver-4.3.0.tar.xz.asc) = cbae77267438ca6928c159854fb385ef5e9f2419fcb82c396e14b5c0bb562563be203c3b141b992cdee02720c4c437e91457a9102e37c09dbb24dea47636ac0d From 0c7970f81daa0a8a647f10fdd61b29352676a55b Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Mon, 27 Jan 2020 15:28:46 +0100 Subject: [PATCH 070/126] 5.0.0-1: new upstream version --- knot-resolver.spec | 108 +++++++++++++++++++++++++-------------------- sources | 4 +- 2 files changed, 63 insertions(+), 49 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index c38da04..60c3f3e 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,7 +2,7 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 4.3.0 +%define VERSION 5.0.0 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build @@ -49,6 +49,7 @@ BuildRequires: pkgconfig(libuv) BuildRequires: pkgconfig(luajit) >= 2.0 Requires: systemd +Requires(post): systemd # Distro-dependent dependencies %if 0%{?rhel} @@ -56,9 +57,7 @@ BuildRequires: lmdb-devel # Lua 5.1 version of the libraries have different package names Requires: lua-basexx Requires: lua-psl -Requires: lua-socket -Requires: lua-sec -Requires: lua-filesystem +Requires: lua-http Requires(pre): shadow-utils %endif %if 0%{?fedora} @@ -66,10 +65,8 @@ BuildRequires: pkgconfig(lmdb) BuildRequires: python3-sphinx Requires: lua5.1-basexx Requires: lua5.1-cqueues +Requires: lua5.1-http Recommends: lua5.1-psl -Requires: lua-filesystem-compat -Requires: lua-socket-compat -Requires: lua-sec-compat Requires(pre): shadow-utils %endif @@ -82,15 +79,13 @@ BuildRequires: openssl-devel %define NINJA ninja BuildRequires: lmdb-devel BuildRequires: python3-Sphinx -Requires: lua51-luafilesystem -Requires: lua51-luasocket -Requires: lua51-luasec Requires(pre): shadow %endif %if "x%{?rhel}" == "x" # dependencies for doc package -# enable once CentOS 7.6 makes it into OBS buildroot +# NOTE: doc isn't possible to build on CentOS 7 +# python2-sphinx is too old and python36-breathe is broken BuildRequires: doxygen BuildRequires: python3-breathe BuildRequires: python3-sphinx_rtd_theme @@ -154,10 +149,8 @@ gpg2 --verify %{SOURCE1} %{SOURCE0} CFLAGS="%{optflags}" LDFLAGS="%{?__global_ldflags}" meson build_rpm \ %if "x%{?rhel}" == "x" -Ddoc=enabled \ - -Dsystemd_files=enabled \ -%else - -Dsystemd_files=nosocket \ %endif + -Dsystemd_files=enabled \ -Dclient=enabled \ -Dunit_tests=enabled \ -Dmanaged_ta=enabled \ @@ -186,10 +179,6 @@ DESTDIR="${RPM_BUILD_ROOT}" %{NINJA} -v -C build_rpm install install -m 0755 -d %{buildroot}%{_unitdir}/multi-user.target.wants ln -s ../kresd.target %{buildroot}%{_unitdir}/multi-user.target.wants/kresd.target -# install .tmpfiles.d dirs -install -m 0750 -d %{buildroot}%{_localstatedir}/cache/%{name} -install -m 0750 -d %{buildroot}/run/%{name} - # remove modules with missing dependencies rm %{buildroot}%{_libdir}/knot-resolver/kres_modules/etcd.lua @@ -198,9 +187,6 @@ rm %{buildroot}%{_libdir}/knot-resolver/kres_modules/experimental_dot_auth.lua rm -r %{buildroot}%{_libdir}/knot-resolver/kres_modules/http rm %{buildroot}%{_libdir}/knot-resolver/kres_modules/http*.lua rm %{buildroot}%{_libdir}/knot-resolver/kres_modules/prometheus.lua -rm %{buildroot}%{_unitdir}/kresd@.service.d/module-http.conf -rm %{buildroot}%{_unitdir}/kresd-doh.socket -rm %{buildroot}%{_unitdir}/kresd-webmgmt.socket %endif # rename doc directory for centos, opensuse @@ -213,26 +199,59 @@ mv %{buildroot}/%{_datadir}/doc/%{name}/* %{buildroot}/%{_pkgdocdir}/ getent group knot-resolver >/dev/null || groupadd -r knot-resolver getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysconfdir}/knot-resolver -s /sbin/nologin -c "Knot Resolver" knot-resolver +%if "x%{?rhel}" == "x" +# upgrade-4-to-5 +if [ -f %{_unitdir}/kresd.socket ] ; then + export UPG_DIR=%{_sharedstatedir}/knot-resolver/.upgrade-4-to-5 + mkdir -p ${UPG_DIR} + touch ${UPG_DIR}/.unfinished + + for sock in kresd.socket kresd-tls.socket kresd-webmgmt.socket kresd-doh.socket ; do + if systemctl is-enabled ${sock} 2>/dev/null | grep -qv masked ; then + systemctl show ${sock} -p Listen > ${UPG_DIR}/${sock} + case "$(systemctl show ${sock} -p BindIPv6Only)" in + *ipv6-only) + touch ${UPG_DIR}/${sock}.v6only + ;; + *default) + if cat /proc/sys/net/ipv6/bindv6only | grep -q 1 ; then + touch ${UPG_DIR}/${sock}.v6only + fi + ;; + esac + fi + done +fi +%endif + + %post -%if 0%{?fedora} -# in case socket/service files are updated -systemctl daemon-reload -%systemd_post 'system-kresd.slice' -# https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets -%else +# upgrade-4-to-5 +%if "x%{?rhel}" == "x" +export UPG_DIR=%{_sharedstatedir}/knot-resolver/.upgrade-4-to-5 +if [ -f ${UPG_DIR}/.unfinished ] ; then + rm -f ${UPG_DIR}/.unfinished + kresd -c %{_libdir}/knot-resolver/upgrade-4-to-5.lua &>/dev/null + echo -e "\n !!! WARNING !!!" + echo -e "Knot Resolver configuration file requires manual upgrade.\n" + cat ${UPG_DIR}/kresd.conf.net 2>/dev/null +fi +%endif + +# in case service files are updated +systemctl daemon-reload &>/dev/null ||: %systemd_post 'kresd@*.service' +%tmpfiles_create %{_tmpfilesdir}/knot-resolver.conf +%if "x%{?fedora}" == "x" /sbin/ldconfig %endif %preun -%systemd_preun 'kresd@*.service' kres-cache-gc.service kresd.target kresd.socket kresd-tls.socket +%systemd_preun kres-cache-gc.service kresd.target %postun -# NOTE: this doesn't restart the services on CentOS 7 %systemd_postun_with_restart 'kresd@*.service' -%if 0%{?fedora} -# https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets -%else +%if "x%{?fedora}" == "x" /sbin/ldconfig %endif @@ -253,18 +272,11 @@ systemctl daemon-reload %{_unitdir}/kresd.target %dir %{_unitdir}/multi-user.target.wants %{_unitdir}/multi-user.target.wants/kresd.target -%if "x%{?rhel}" == "x" -%dir %{_unitdir}/kresd@.service.d -%{_unitdir}/kresd.socket -%{_unitdir}/kresd-tls.socket -%{_unitdir}/kresd-control@.socket -%ghost /run/%{name}/ %{_mandir}/man7/kresd.systemd.7.gz -%else -%{_mandir}/man7/kresd.systemd.nosocket.7.gz -%endif %{_tmpfilesdir}/knot-resolver.conf -%attr(750,knot-resolver,knot-resolver) %dir %{_localstatedir}/cache/%{name} +%ghost /run/%{name} +%ghost %{_localstatedir}/cache/%{name} +%attr(750,knot-resolver,knot-resolver) %dir %{_libdir}/%{name} %{_sbindir}/kresd %{_sbindir}/kresc %{_sbindir}/kres-cache-gc @@ -311,11 +323,6 @@ systemctl daemon-reload %if "x%{?suse_version}" == "x" %files module-http -%if 0%{?fedora} -%{_unitdir}/kresd@.service.d/module-http.conf -%{_unitdir}/kresd-doh.socket -%{_unitdir}/kresd-webmgmt.socket -%endif %{_libdir}/knot-resolver/debug_opensslkeylog.so %{_libdir}/knot-resolver/kres_modules/http %{_libdir}/knot-resolver/kres_modules/http*.lua @@ -323,6 +330,13 @@ systemctl daemon-reload %endif %changelog +* Mon Jan 27 2020 Tomas Krizek - 5.0.0-1 +- update to new upstream version 5.0.0 +- removed systemd socket files (no longer supported) +- add upgrade scriptlets for 5.x +- remove lua-sec, lua-socket, lua-filesystem dependencies +- create tmpfiles dirs with macro + * Wed Dec 04 2019 Tomas Krizek - 4.3.0-1 - update to new upstream version 4.3.0 - make config directory read-only for knot-resolver, relocate root.keys to /var/lib diff --git a/sources b/sources index e878fe5..27c66d3 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-4.3.0.tar.xz) = cb59b8bd3d12feeba0fbf45e021c8cd7736393377aa6c71d2d365d0ebb58122c440df3187ed4d3396dacfa5aba4bb752826b9d9da02aea4b626fcba3767c7c47 -SHA512 (knot-resolver-4.3.0.tar.xz.asc) = cbae77267438ca6928c159854fb385ef5e9f2419fcb82c396e14b5c0bb562563be203c3b141b992cdee02720c4c437e91457a9102e37c09dbb24dea47636ac0d +SHA512 (knot-resolver-5.0.0.tar.xz) = e9bce51bc0f48d6ed4dd6e9c097f39579e5fa3d7fb630ce0d1bd86a9b494439ffa610f80034a2e4259a9326dc654d27b91e79ace2ddac6bb7edb89d7e5864095 +SHA512 (knot-resolver-5.0.0.tar.xz.asc) = 2ab341891d1433534de6a502a11aeb7581ba68ffec41a51d079d66d38e51958e6edcdd271cc7248131a0f7ae17d9f5af5f07c40c0b7f5c531b65945edaaf9efd From 13df8cf5f952dad5a48fa9c42a99aaf8d03174a6 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 29 Jan 2020 07:43:13 +0000 Subject: [PATCH 071/126] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 60c3f3e..30352bc 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -8,7 +8,7 @@ Name: knot-resolver Version: %{VERSION} -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -330,6 +330,9 @@ systemctl daemon-reload &>/dev/null ||: %endif %changelog +* Wed Jan 29 2020 Fedora Release Engineering - 5.0.0-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + * Mon Jan 27 2020 Tomas Krizek - 5.0.0-1 - update to new upstream version 5.0.0 - removed systemd socket files (no longer supported) From cdcf73036b56e240a0fca207f9fb2e5c29816257 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Wed, 5 Feb 2020 17:03:41 +0100 Subject: [PATCH 072/126] 5.0.1-1: new upstream version --- knot-resolver.spec | 23 ++++++++++++++++------- sources | 4 ++-- 2 files changed, 18 insertions(+), 9 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 30352bc..8e6a6c7 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,13 +2,13 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 5.0.0 +%define VERSION 5.0.1 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build Name: knot-resolver Version: %{VERSION} -Release: 2%{?dist} +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPLv3 @@ -132,7 +132,7 @@ Requires: lua-mmdb %description module-http HTTP/2 module for Knot Resolver has multiple uses. It enables use of -DNS-over-HTTP, can serve as API ednpoint for other modules or provide a web +DNS-over-HTTP, can serve as API endpoint for other modules or provide a web interface for local visualization of the resolver cache and queries. %endif @@ -238,9 +238,14 @@ if [ -f ${UPG_DIR}/.unfinished ] ; then fi %endif -# in case service files are updated -systemctl daemon-reload &>/dev/null ||: -%systemd_post 'kresd@*.service' +# 5.0.1 fix to force restart of kres-cache-gc.service, which was missing in systemd_postun_with_restart +# TODO: remove once most users upgrade to 5.0.1+ +systemctl daemon-reload >/dev/null 2>&1 || : +if [ $1 -ge 2 ] ; then + systemctl try-restart kres-cache-gc.service >/dev/null 2>&1 || : +fi + +# systemd_post macro is not needed for anything (calls systemctl preset) %tmpfiles_create %{_tmpfilesdir}/knot-resolver.conf %if "x%{?fedora}" == "x" /sbin/ldconfig @@ -250,7 +255,7 @@ systemctl daemon-reload &>/dev/null ||: %systemd_preun kres-cache-gc.service kresd.target %postun -%systemd_postun_with_restart 'kresd@*.service' +%systemd_postun_with_restart 'kresd@*.service' kres-cache-gc.service %if "x%{?fedora}" == "x" /sbin/ldconfig %endif @@ -330,6 +335,10 @@ systemctl daemon-reload &>/dev/null ||: %endif %changelog +* Wed Feb 05 2020 Tomas Krizek - 5.0.1-1 +- update to upstream version 5.0.1 +- ensure kres-cache-gc.service is restarted on upgrade + * Wed Jan 29 2020 Fedora Release Engineering - 5.0.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild diff --git a/sources b/sources index 27c66d3..cff097b 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.0.0.tar.xz) = e9bce51bc0f48d6ed4dd6e9c097f39579e5fa3d7fb630ce0d1bd86a9b494439ffa610f80034a2e4259a9326dc654d27b91e79ace2ddac6bb7edb89d7e5864095 -SHA512 (knot-resolver-5.0.0.tar.xz.asc) = 2ab341891d1433534de6a502a11aeb7581ba68ffec41a51d079d66d38e51958e6edcdd271cc7248131a0f7ae17d9f5af5f07c40c0b7f5c531b65945edaaf9efd +SHA512 (knot-resolver-5.0.1.tar.xz) = 9d5d77d3aff082d5f0132b39627fff5cd7af6e237ded219b7b8f2156de7acacb3bf94d5e278af4bb2c9e36ea80d9259d39ba33a18bb37a626a57c70fb9dc0931 +SHA512 (knot-resolver-5.0.1.tar.xz.asc) = af23db37daecaa84f3ba7b08981bcbbcfa183e57ac0d102602a258305d5495510c92c89093b9eb8eee22cc4f583d68eb3ad8839885d0b6015f9d793d9e1f447f From 10e72b2beab4bd5659b10363021b89f2fd54e885 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Thu, 2 Apr 2020 14:27:47 +0200 Subject: [PATCH 073/126] 5.0.1-2: fix strict aliasing --- 0001-fix-strict-aliasing.patch | 24 ++++++++++++++++++++++++ knot-resolver.spec | 7 ++++++- 2 files changed, 30 insertions(+), 1 deletion(-) create mode 100644 0001-fix-strict-aliasing.patch diff --git a/0001-fix-strict-aliasing.patch b/0001-fix-strict-aliasing.patch new file mode 100644 index 0000000..7bce640 --- /dev/null +++ b/0001-fix-strict-aliasing.patch @@ -0,0 +1,24 @@ +From 25c6247b43c5954da43c9b2f27e9a5e6bb1d651a Mon Sep 17 00:00:00 2001 +From: Tomas Krizek +Date: Thu, 2 Apr 2020 14:52:41 +0200 +Subject: [PATCH] fix strict aliasing + +--- + meson.build | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/meson.build b/meson.build +index a839eb23..8c584aaf 100644 +--- a/meson.build ++++ b/meson.build +@@ -111,6 +111,7 @@ add_project_arguments( + '-Wtype-limits', + '-Wshadow', + '-fvisibility=hidden', ++ '-fno-strict-aliasing', + language: 'c', + ) + +-- +2.26.0 + diff --git a/knot-resolver.spec b/knot-resolver.spec index 8e6a6c7..f08e593 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -8,12 +8,13 @@ Name: knot-resolver Version: %{VERSION} -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPLv3 URL: https://www.knot-resolver.cz/ Source0: https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz +Patch0: 0001-fix-strict-aliasing.patch # LuaJIT only on these arches %if 0%{?rhel} @@ -144,6 +145,7 @@ gpg2 --import %{SOURCE100} %{SOURCE101} %{SOURCE102} gpg2 --verify %{SOURCE1} %{SOURCE0} %endif %setup -q -n %{name}-%{version} +%patch0 -p1 %build CFLAGS="%{optflags}" LDFLAGS="%{?__global_ldflags}" meson build_rpm \ @@ -335,6 +337,9 @@ fi %endif %changelog +* Thu Apr 02 2020 Tomas Krizek - 5.0.1-2 +- add patch to fix strict aliasing (!971) until next release + * Wed Feb 05 2020 Tomas Krizek - 5.0.1-1 - update to upstream version 5.0.1 - ensure kres-cache-gc.service is restarted on upgrade From a5592897d1a6b7a430b8cda45ea82899f8d13139 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Wed, 29 Apr 2020 16:13:59 +0200 Subject: [PATCH 074/126] 5.1.0-1: new upstream version --- 0001-fix-strict-aliasing.patch | 24 ------------------------ knot-resolver.spec | 30 +++++++++++++++++------------- sources | 4 ++-- 3 files changed, 19 insertions(+), 39 deletions(-) delete mode 100644 0001-fix-strict-aliasing.patch diff --git a/0001-fix-strict-aliasing.patch b/0001-fix-strict-aliasing.patch deleted file mode 100644 index 7bce640..0000000 --- a/0001-fix-strict-aliasing.patch +++ /dev/null @@ -1,24 +0,0 @@ -From 25c6247b43c5954da43c9b2f27e9a5e6bb1d651a Mon Sep 17 00:00:00 2001 -From: Tomas Krizek -Date: Thu, 2 Apr 2020 14:52:41 +0200 -Subject: [PATCH] fix strict aliasing - ---- - meson.build | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/meson.build b/meson.build -index a839eb23..8c584aaf 100644 ---- a/meson.build -+++ b/meson.build -@@ -111,6 +111,7 @@ add_project_arguments( - '-Wtype-limits', - '-Wshadow', - '-fvisibility=hidden', -+ '-fno-strict-aliasing', - language: 'c', - ) - --- -2.26.0 - diff --git a/knot-resolver.spec b/knot-resolver.spec index f08e593..49a6bba 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,22 +2,21 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 5.0.1 +%define VERSION 5.1.0 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build Name: knot-resolver Version: %{VERSION} -Release: 2%{?dist} +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPLv3 URL: https://www.knot-resolver.cz/ Source0: https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz -Patch0: 0001-fix-strict-aliasing.patch # LuaJIT only on these arches -%if 0%{?rhel} +%if 0%{?rhel} == 7 # RHEL 7 does not have aarch64 LuaJIT ExclusiveArch: %{ix86} x86_64 %else @@ -53,7 +52,7 @@ Requires: systemd Requires(post): systemd # Distro-dependent dependencies -%if 0%{?rhel} +%if 0%{?rhel} == 7 BuildRequires: lmdb-devel # Lua 5.1 version of the libraries have different package names Requires: lua-basexx @@ -61,7 +60,7 @@ Requires: lua-psl Requires: lua-http Requires(pre): shadow-utils %endif -%if 0%{?fedora} +%if 0%{?fedora} || 0%{?rhel} > 7 BuildRequires: pkgconfig(lmdb) BuildRequires: python3-sphinx Requires: lua5.1-basexx @@ -85,8 +84,9 @@ Requires(pre): shadow %if "x%{?rhel}" == "x" # dependencies for doc package -# NOTE: doc isn't possible to build on CentOS 7 -# python2-sphinx is too old and python36-breathe is broken +# NOTE: doc isn't possible to build on CentOS 7, 8 +# python2-sphinx is too old and python36-breathe is broken on CentOS 7 +# python3-breathe isn't available for CentOS 8 (yet? rhbz#1808766) BuildRequires: doxygen BuildRequires: python3-breathe BuildRequires: python3-sphinx_rtd_theme @@ -123,7 +123,7 @@ Documentation for Knot Resolver %package module-http Summary: HTTP/2 module for Knot Resolver Requires: %{name} = %{version}-%{release} -%if 0%{?fedora} +%if 0%{?fedora} || 0%{?rhel} > 7 Requires: lua5.1-http Requires: lua5.1-mmdb %else @@ -145,7 +145,6 @@ gpg2 --import %{SOURCE100} %{SOURCE101} %{SOURCE102} gpg2 --verify %{SOURCE1} %{SOURCE0} %endif %setup -q -n %{name}-%{version} -%patch0 -p1 %build CFLAGS="%{optflags}" LDFLAGS="%{?__global_ldflags}" meson build_rpm \ @@ -191,8 +190,8 @@ rm %{buildroot}%{_libdir}/knot-resolver/kres_modules/http*.lua rm %{buildroot}%{_libdir}/knot-resolver/kres_modules/prometheus.lua %endif -# rename doc directory for centos, opensuse -%if "x%{?fedora}" == "x" +# rename doc directory for centos 7, opensuse +%if 0%{?suse_version} || 0%{?rhel} == 7 install -m 755 -d %{buildroot}/%{_pkgdocdir} mv %{buildroot}/%{_datadir}/doc/%{name}/* %{buildroot}/%{_pkgdocdir}/ %endif @@ -283,7 +282,7 @@ fi %{_tmpfilesdir}/knot-resolver.conf %ghost /run/%{name} %ghost %{_localstatedir}/cache/%{name} -%attr(750,knot-resolver,knot-resolver) %dir %{_libdir}/%{name} +%attr(770,root,knot-resolver) %dir %{_libdir}/%{name} %{_sbindir}/kresd %{_sbindir}/kresc %{_sbindir}/kres-cache-gc @@ -337,6 +336,11 @@ fi %endif %changelog +* Wed Apr 29 2020 Tomas Krizek - 5.1.0-1 +- update to upstream version 5.1.0 +- make spec compatible with EPEL 8 (rhbz#1783252) +- support documentation build with Sphinx v3.0.0+ (rhbz#1823534) + * Thu Apr 02 2020 Tomas Krizek - 5.0.1-2 - add patch to fix strict aliasing (!971) until next release diff --git a/sources b/sources index cff097b..56a5655 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.0.1.tar.xz) = 9d5d77d3aff082d5f0132b39627fff5cd7af6e237ded219b7b8f2156de7acacb3bf94d5e278af4bb2c9e36ea80d9259d39ba33a18bb37a626a57c70fb9dc0931 -SHA512 (knot-resolver-5.0.1.tar.xz.asc) = af23db37daecaa84f3ba7b08981bcbbcfa183e57ac0d102602a258305d5495510c92c89093b9eb8eee22cc4f583d68eb3ad8839885d0b6015f9d793d9e1f447f +SHA512 (knot-resolver-5.1.0.tar.xz) = 45ed8728eaf1911062a816f4197a7e57fa00f25120668550c994d4689c592d8627178f32abddd8903a58a76cfdacef2e14711ce72f30b16de807ec65d344ba79 +SHA512 (knot-resolver-5.1.0.tar.xz.asc) = 3eafbbef1b66f528c7b08c0132b4fd5b19d5d0bf8ddc3ddf95b5c2d8d39cc7a08921153fdf9fba8dea9e014b25afa4d0601540d44495aebf988ca233a94abb09 From f5d0adfc9e27ed45b2a26516c0797958378dd25f Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Tue, 19 May 2020 12:00:04 +0200 Subject: [PATCH 075/126] 5.1.1-1: new upstream version --- knot-resolver.spec | 5 ++++- sources | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 49a6bba..fbfdd29 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,7 +2,7 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 5.1.0 +%define VERSION 5.1.1 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build @@ -336,6 +336,9 @@ fi %endif %changelog +* Tue May 19 2020 Tomas Krizek - 5.1.1-1 +- update to upstream version 5.1.1 (fixes CVE-2020-12667) + * Wed Apr 29 2020 Tomas Krizek - 5.1.0-1 - update to upstream version 5.1.0 - make spec compatible with EPEL 8 (rhbz#1783252) diff --git a/sources b/sources index 56a5655..c286576 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.1.0.tar.xz) = 45ed8728eaf1911062a816f4197a7e57fa00f25120668550c994d4689c592d8627178f32abddd8903a58a76cfdacef2e14711ce72f30b16de807ec65d344ba79 -SHA512 (knot-resolver-5.1.0.tar.xz.asc) = 3eafbbef1b66f528c7b08c0132b4fd5b19d5d0bf8ddc3ddf95b5c2d8d39cc7a08921153fdf9fba8dea9e014b25afa4d0601540d44495aebf988ca233a94abb09 +SHA512 (knot-resolver-5.1.1.tar.xz) = c58bacac4fd2cc38015834309ef619edc22e04e198c1fdf900ff538431c83d2087ff61283068052a0038c6a1b325e551da9f5dc68f762a9a1f6f02ae579ad136 +SHA512 (knot-resolver-5.1.1.tar.xz.asc) = 61b2a093e42c3142639400e7384ce78c39dcd94613d4c6b16c07ac0c75932f005a5ff9f0a4e6dcdac6a84e327e351c53c65d7d717c3fb9ebde476e0b8663ac50 From 547c6de972cb6fcd7e2b80bcc47785354b9f0108 Mon Sep 17 00:00:00 2001 From: Tomas Krizek Date: Wed, 1 Jul 2020 16:07:09 +0200 Subject: [PATCH 076/126] 5.1.2-1: new upstream version --- knot-resolver.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index fbfdd29..c8477bf 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,7 +2,7 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 5.1.1 +%define VERSION 5.1.2 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build @@ -11,7 +11,7 @@ Version: %{VERSION} Release: 1%{?dist} Summary: Caching full DNS Resolver -License: GPLv3 +License: GPL-3.0-or-later URL: https://www.knot-resolver.cz/ Source0: https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz @@ -336,6 +336,9 @@ fi %endif %changelog +* Wed Jul 01 2020 Tomas Krizek - 5.1.2-1 +- update to upstream version 5.1.2 + * Tue May 19 2020 Tomas Krizek - 5.1.1-1 - update to upstream version 5.1.1 (fixes CVE-2020-12667) diff --git a/sources b/sources index c286576..851d55e 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.1.1.tar.xz) = c58bacac4fd2cc38015834309ef619edc22e04e198c1fdf900ff538431c83d2087ff61283068052a0038c6a1b325e551da9f5dc68f762a9a1f6f02ae579ad136 -SHA512 (knot-resolver-5.1.1.tar.xz.asc) = 61b2a093e42c3142639400e7384ce78c39dcd94613d4c6b16c07ac0c75932f005a5ff9f0a4e6dcdac6a84e327e351c53c65d7d717c3fb9ebde476e0b8663ac50 +SHA512 (knot-resolver-5.1.2.tar.xz) = 75e08b4709cd9cdd21ce8c116c7e232ed250b70b59716b5b33237f88cb615bfca05824726faf3d792d27ef8d81df7d8a7109de92e1d6988bba960c2eab9175d3 +SHA512 (knot-resolver-5.1.2.tar.xz.asc) = db9e7f7f2174498c3e574aae063a1fae783146738260181e21223b684d2e60edb8d10e92710d291fe9aad4c3771bbd861e501f42d852ff99d26a8e0368faba6c From 06b9e27613e629d718ff3f049a28d59c021d661c Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Tue, 28 Jul 2020 03:34:05 +0000 Subject: [PATCH 077/126] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index c8477bf..50f1b04 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -8,7 +8,7 @@ Name: knot-resolver Version: %{VERSION} -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -336,6 +336,9 @@ fi %endif %changelog +* Tue Jul 28 2020 Fedora Release Engineering - 5.1.2-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + * Wed Jul 01 2020 Tomas Krizek - 5.1.2-1 - update to upstream version 5.1.2 From 241e04cb00326f39b0f3a787255608d206edfa3d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Tue, 8 Sep 2020 13:50:54 +0000 Subject: [PATCH 078/126] knot-resolver-5.1.3-1: new upstream version Changelog: - update to upstream version 5.1.3 --- knot-resolver.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 50f1b04..d451cd3 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,13 +2,13 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 5.1.2 +%define VERSION 5.1.3 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build Name: knot-resolver Version: %{VERSION} -Release: 2%{?dist} +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -336,6 +336,9 @@ fi %endif %changelog +* Tue Sep 08 2020 Jakub Ružička 5.1.3-1 +- update to upstream version 5.1.3 + * Tue Jul 28 2020 Fedora Release Engineering - 5.1.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild diff --git a/sources b/sources index 851d55e..89ce04c 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.1.2.tar.xz) = 75e08b4709cd9cdd21ce8c116c7e232ed250b70b59716b5b33237f88cb615bfca05824726faf3d792d27ef8d81df7d8a7109de92e1d6988bba960c2eab9175d3 -SHA512 (knot-resolver-5.1.2.tar.xz.asc) = db9e7f7f2174498c3e574aae063a1fae783146738260181e21223b684d2e60edb8d10e92710d291fe9aad4c3771bbd861e501f42d852ff99d26a8e0368faba6c +SHA512 (knot-resolver-5.1.3.tar.xz) = 0d97a7094922cd02a47bb24f703186b167e04e8545e4c433821544643a9adc44e00f7c33c31ab852a402a5bc25f05742c8f3b955099a0bafd910496d5cca43e2 +SHA512 (knot-resolver-5.1.3.tar.xz.asc) = 5fe43f3001d4990e3f20c0e9d58d5c825f32693a56822e585f3a40a2b31e57c128686088428cb1e8be36e458620d57aaeab6d7995860f753df11fc9fbb946812 From 9e56f046e4e7a50a0c0391d7db892fb2b737843c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Wed, 23 Sep 2020 10:57:42 +0000 Subject: [PATCH 079/126] knot-resolver-5.1.3-2: rebuild Changelog: - rebuild for Knot DNS 3.0.0 --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index d451cd3..546b186 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -8,7 +8,7 @@ Name: knot-resolver Version: %{VERSION} -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -336,6 +336,9 @@ fi %endif %changelog +* Wed Sep 23 2020 Jakub Ružička 5.1.3-2 +- rebuild for Knot DNS 3.0.0 + * Tue Sep 08 2020 Jakub Ružička 5.1.3-1 - update to upstream version 5.1.3 From 87bf3cc2b7470529e3ebd272f611b82658981b59 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Tue, 29 Sep 2020 12:21:55 +0200 Subject: [PATCH 080/126] Enable package gating based on Fedora CI results as described in https://docs.fedoraproject.org/en-US/ci/gating/ --- gating.yml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 gating.yml diff --git a/gating.yml b/gating.yml new file mode 100644 index 0000000..f075ad7 --- /dev/null +++ b/gating.yml @@ -0,0 +1,15 @@ +--- !Policy +product_versions: + - fedora-* +decision_context: bodhi_update_push_testing +subject_type: koji_build +rules: + - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional} + +--- !Policy +product_versions: + - fedora-* +decision_context: bodhi_update_push_stable +subject_type: koji_build +rules: + - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional} From 7ab6eb4cb2b2d842f43f528b590ffe7bbd368cea Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Tue, 29 Sep 2020 21:33:23 +0200 Subject: [PATCH 081/126] tests: remove obsolete socket activation test --- tests/test_socket_activation.yml | 23 ----------------------- tests/tests.yml | 5 +---- 2 files changed, 1 insertion(+), 27 deletions(-) delete mode 100644 tests/test_socket_activation.yml diff --git a/tests/test_socket_activation.yml b/tests/test_socket_activation.yml deleted file mode 100644 index 43c4c5e..0000000 --- a/tests/test_socket_activation.yml +++ /dev/null @@ -1,23 +0,0 @@ ---- -- block: - - name: make sure kresd socket and service is off - service: - name: "{{ item }}" - state: stopped - with_items: - - kresd@1.service - - kresd.socket - - - name: start kresd.socket - service: - name: kresd.socket - state: started - - - name: check if query is answered - shell: dig @127.0.0.1 . - rescue: - - set_fact: - socket_activation_failed: true - always: - - name: collect journal - shell: journalctl --since -10m > {{ artifacts }}/test_socket_activation_journal.log diff --git a/tests/tests.yml b/tests/tests.yml index e42b12e..e504526 100644 --- a/tests/tests.yml +++ b/tests/tests.yml @@ -10,16 +10,13 @@ tags: - classic tasks: - - include_tasks: test_socket_activation.yml - when: ansible_distribution == 'Fedora' - include_tasks: test_manual_activation.yml - set_fact: - tests_passed: '{{ socket_activation_failed is undefined and manual_activation_failed is undefined }}' + tests_passed: '{{ manual_activation_failed is undefined }}' - name: report results debug: msg: | - test_socket_activation: {{ 'FAILED' if socket_activation_failed is defined else 'OK'}} test_manual_activation: {{ 'FAILED' if manual_activation_failed is defined else 'OK'}} - name: fail playbook if tests failed From b47a6bc76c7daa24c167193b5c084d387e9272b5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Tue, 29 Sep 2020 21:35:06 +0200 Subject: [PATCH 082/126] tests: replace standard-test-rpm with -basic Currently, tests fail with TASK [standard-test-rpm : Install the test subject RPMs] *********************** fatal: [/workDir/workspace/fedora-rawhide-pr-pipeline/images/test_subject.qcow2]: FAILED! => msg: '''subjects'' is undefined' 'subjects' should be a list of RPMs to install but it looks undefined in fedora-rawhide-pr-pipeline. Try replacing this with standard-test-basic as seen in Fedora CI docs: https://docs.fedoraproject.org/en-US/ci/how-to-add-dist-git-test/ Same doc describes standard-test-rpm as "A role for installing additional rpms" which I don't think is the use case here. --- tests/README.md | 10 +-------- tests/scripts/test_manual_activation.sh | 7 +++++++ tests/test_manual_activation.yml | 24 --------------------- tests/tests.yml | 28 ++++++++----------------- 4 files changed, 17 insertions(+), 52 deletions(-) create mode 100755 tests/scripts/test_manual_activation.sh delete mode 100644 tests/test_manual_activation.yml diff --git a/tests/README.md b/tests/README.md index 295aeb7..8f69da4 100644 --- a/tests/README.md +++ b/tests/README.md @@ -2,7 +2,7 @@ Package tests ============= These tests implement the standard test interface in Fedora CI. -See https://fedoraproject.org/wiki/CI/Tests for details. +See https://docs.fedoraproject.org/en-US/ci/tests/ for details. Manual execution ---------------- @@ -12,11 +12,3 @@ modifications to your system. It's best to run these on a clean, throw-away testing system or a VM. ansible-playbook tests/tests.yml -e subjects=/path/to/knot-resolver.rpm -e artifacts=/path/to/artifacts - -Automatic execution -------------------- - -These tests should eventually be automatically executed by the Fedora CI -pipeline. As of 2018-01-10, it is not supported for packages that aren't part -of Fedora Atomic. Once it is implemented, the results of these tests should be -visible in dist-git commits on src.fedoraproject.org diff --git a/tests/scripts/test_manual_activation.sh b/tests/scripts/test_manual_activation.sh new file mode 100755 index 0000000..c595e05 --- /dev/null +++ b/tests/scripts/test_manual_activation.sh @@ -0,0 +1,7 @@ +#!/bin/bash +set -ex + +systemctl stop kresd@1.service +systemctl start kresd@1.service + +dig @127.0.0.1 . diff --git a/tests/test_manual_activation.yml b/tests/test_manual_activation.yml deleted file mode 100644 index cb61748..0000000 --- a/tests/test_manual_activation.yml +++ /dev/null @@ -1,24 +0,0 @@ ---- -- block: - - name: make sure kresd@1 socket and service is off - service: - name: "{{ item }}" - state: stopped - with_items: - - kresd@1.service - - kresd@1.socket - failed_when: false - - - name: start kresd@1.service - service: - name: kresd@1.service - state: started - - - name: check if query is answered - shell: dig @127.0.0.1 . - rescue: - - set_fact: - manual_activation_failed: true - always: - - name: collect journal - shell: journalctl --since -10m > {{ artifacts }}/test_manual_activation_journal.log diff --git a/tests/tests.yml b/tests/tests.yml index e504526..1f4dc95 100644 --- a/tests/tests.yml +++ b/tests/tests.yml @@ -1,25 +1,15 @@ --- - hosts: localhost remote_user: root - pre_tasks: - - package: # Install additional dependecies - name: bind-utils - state: latest roles: - - role: standard-test-rpm + - role: standard-test-basic tags: - classic - tasks: - - include_tasks: test_manual_activation.yml - - - set_fact: - tests_passed: '{{ manual_activation_failed is undefined }}' - - name: report results - debug: - msg: | - test_manual_activation: {{ 'FAILED' if manual_activation_failed is defined else 'OK'}} - - - name: fail playbook if tests failed - debug: - msg: --- {{ 'PASSED' if tests_passed else 'FAILED' }} --- - failed_when: not tests_passed + required_packages: + - bind-utils + tests: + - kresd-show-version: + run: kresd --version + - manual-activation: + dir: scripts + run: ./test_manual_activation.sh From 89984c38a6e67f677b7183a70badb50227e22e91 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Wed, 11 Nov 2020 15:47:23 +0000 Subject: [PATCH 083/126] 5.2.0-1: new upstream version Changelog: - update to upstream version 5.2.0 - sync packaging from upstream --- knot-resolver.spec | 39 ++++++++++++++++++++++++++------------- sources | 4 ++-- 2 files changed, 28 insertions(+), 15 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 546b186..3626653 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,13 +2,13 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 5.1.3 +%define VERSION 5.2.0 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build Name: knot-resolver Version: %{VERSION} -Release: 2%{?dist} +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -43,6 +43,7 @@ BuildRequires: pkgconfig(libedit) BuildRequires: pkgconfig(libknot) >= 2.8 BuildRequires: pkgconfig(libzscanner) >= 2.8 BuildRequires: pkgconfig(libdnssec) >= 2.8 +BuildRequires: pkgconfig(libnghttp2) BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(libcap-ng) BuildRequires: pkgconfig(libuv) @@ -90,6 +91,7 @@ Requires(pre): shadow BuildRequires: doxygen BuildRequires: python3-breathe BuildRequires: python3-sphinx_rtd_theme +BuildRequires: texinfo %endif %description @@ -121,7 +123,7 @@ Documentation for Knot Resolver %if "x%{?suse_version}" == "x" %package module-http -Summary: HTTP/2 module for Knot Resolver +Summary: HTTP module for Knot Resolver Requires: %{name} = %{version}-%{release} %if 0%{?fedora} || 0%{?rhel} > 7 Requires: lua5.1-http @@ -132,9 +134,10 @@ Requires: lua-mmdb %endif %description module-http -HTTP/2 module for Knot Resolver has multiple uses. It enables use of -DNS-over-HTTP, can serve as API endpoint for other modules or provide a web -interface for local visualization of the resolver cache and queries. +HTTP module for Knot Resolver can serve as API endpoint for other modules or +provide a web interface for local visualization of the resolver cache and +queries. It can also serve DNS-over-HTTPS, but it is deprecated in favor of +native C implementation, which doesn't require this package. %endif %prep @@ -183,6 +186,9 @@ ln -s ../kresd.target %{buildroot}%{_unitdir}/multi-user.target.wants/kresd.targ # remove modules with missing dependencies rm %{buildroot}%{_libdir}/knot-resolver/kres_modules/etcd.lua +# remove unused sysusers +rm %{buildroot}%{_prefix}/lib/sysusers.d/knot-resolver.conf + %if 0%{?suse_version} rm %{buildroot}%{_libdir}/knot-resolver/kres_modules/experimental_dot_auth.lua rm -r %{buildroot}%{_libdir}/knot-resolver/kres_modules/http @@ -267,12 +273,12 @@ fi %doc %{_pkgdocdir}/AUTHORS %doc %{_pkgdocdir}/NEWS %doc %{_pkgdocdir}/examples -%attr(755,root,knot-resolver) %dir %{_sysconfdir}/knot-resolver -%attr(644,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/kresd.conf -%attr(644,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/root.hints -%attr(644,root,knot-resolver) %{_sysconfdir}/knot-resolver/icann-ca.pem -%attr(775,root,knot-resolver) %dir %{_sharedstatedir}/knot-resolver -%attr(664,root,knot-resolver) %{_sharedstatedir}/knot-resolver/root.keys +%dir %{_sysconfdir}/knot-resolver +%config(noreplace) %{_sysconfdir}/knot-resolver/kresd.conf +%config(noreplace) %{_sysconfdir}/knot-resolver/root.hints +%{_sysconfdir}/knot-resolver/icann-ca.pem +%attr(750,knot-resolver,knot-resolver) %dir %{_sharedstatedir}/knot-resolver +%attr(640,knot-resolver,knot-resolver) %{_sharedstatedir}/knot-resolver/root.keys %{_unitdir}/kresd@.service %{_unitdir}/kres-cache-gc.service %{_unitdir}/kresd.target @@ -282,7 +288,7 @@ fi %{_tmpfilesdir}/knot-resolver.conf %ghost /run/%{name} %ghost %{_localstatedir}/cache/%{name} -%attr(770,root,knot-resolver) %dir %{_libdir}/%{name} +%attr(750,knot-resolver,knot-resolver) %dir %{_libdir}/%{name} %{_sbindir}/kresd %{_sbindir}/kresc %{_sbindir}/kres-cache-gc @@ -325,6 +331,9 @@ fi %files doc %dir %{_pkgdocdir} %doc %{_pkgdocdir}/html +%doc %{_datadir}/info/knot-resolver.info* +%dir %{_datadir}/info/knot-resolver-figures +%doc %{_datadir}/info/knot-resolver-figures/* %endif %if "x%{?suse_version}" == "x" @@ -336,6 +345,10 @@ fi %endif %changelog +* Wed Nov 11 2020 Jakub Ružička 5.2.0-1 +- update to upstream version 5.2.0 +- sync packaging from upstream + * Wed Sep 23 2020 Jakub Ružička 5.1.3-2 - rebuild for Knot DNS 3.0.0 diff --git a/sources b/sources index 89ce04c..fe97fe8 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.1.3.tar.xz) = 0d97a7094922cd02a47bb24f703186b167e04e8545e4c433821544643a9adc44e00f7c33c31ab852a402a5bc25f05742c8f3b955099a0bafd910496d5cca43e2 -SHA512 (knot-resolver-5.1.3.tar.xz.asc) = 5fe43f3001d4990e3f20c0e9d58d5c825f32693a56822e585f3a40a2b31e57c128686088428cb1e8be36e458620d57aaeab6d7995860f753df11fc9fbb946812 +SHA512 (knot-resolver-5.2.0.tar.xz) = 9738f147b20a65571ffba88fa4faf4fe6ca8fc87270d426ed8ffb77860e7a21a9ac642c57117221aad62f037fedd7f77b5142e14447257621972b1c44e25588e +SHA512 (knot-resolver-5.2.0.tar.xz.asc) = 893e72ac48f558f5f6e1e2151eb4707d2fb76614445182e7c581d84fd59b4a58d47c82e1b4453411a439b6c8db8fdc6fef6fd35ce97de2ed1852c3932ecf57ed From 496b92285eb3b845134135e85714cc31f0c62b12 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Fri, 18 Dec 2020 11:27:34 +0000 Subject: [PATCH 084/126] knot-resolver-5.2.1-1: new upstream version Changelog: - update to upstream version 5.2.1 --- knot-resolver.spec | 5 ++++- sources | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 3626653..d37f8b3 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,7 +2,7 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 5.2.0 +%define VERSION 5.2.1 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build @@ -345,6 +345,9 @@ fi %endif %changelog +* Fri Dec 18 2020 Jakub Ružička - 5.2.1-1 +- update to upstream version 5.2.1 + * Wed Nov 11 2020 Jakub Ružička 5.2.0-1 - update to upstream version 5.2.0 - sync packaging from upstream diff --git a/sources b/sources index fe97fe8..b0d29ce 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.2.0.tar.xz) = 9738f147b20a65571ffba88fa4faf4fe6ca8fc87270d426ed8ffb77860e7a21a9ac642c57117221aad62f037fedd7f77b5142e14447257621972b1c44e25588e -SHA512 (knot-resolver-5.2.0.tar.xz.asc) = 893e72ac48f558f5f6e1e2151eb4707d2fb76614445182e7c581d84fd59b4a58d47c82e1b4453411a439b6c8db8fdc6fef6fd35ce97de2ed1852c3932ecf57ed +SHA512 (knot-resolver-5.2.1.tar.xz) = cf5bf5d6cdd336a0bc2fedc70730f58c31f79a37bccda46b3d45e4a34a79851e517445c427d3bb625ad6d2ad9f104e3176c04969bd44ee717457f5738937050c +SHA512 (knot-resolver-5.2.1.tar.xz.asc) = 1b2c7477c3876d66bd6328fb2da4e15a92de9afb13649eb0dbdba63b0a36e04829b2d64995459785e86882f9abbb8dca7a2026b93b0124161ae8d059961bbbc8 From a29ade8b91283b9ff7ab050d44808a2186b79aa6 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Tue, 26 Jan 2021 16:00:50 +0000 Subject: [PATCH 085/126] - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index d37f8b3..4c02bf9 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -8,7 +8,7 @@ Name: knot-resolver Version: %{VERSION} -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -345,6 +345,9 @@ fi %endif %changelog +* Tue Jan 26 2021 Fedora Release Engineering - 5.2.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + * Fri Dec 18 2020 Jakub Ružička - 5.2.1-1 - update to upstream version 5.2.1 From 6db37efb2a5d3bfe4287982e5c901d2c87adc9e7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Mon, 1 Mar 2021 16:23:33 +0000 Subject: [PATCH 086/126] knot-resolver-5.3.0-1: new upstream version Changelog: - update to upstream version 5.3.0 - add dnstap module subpackage - required Knot DNS >= 2.9 --- knot-resolver.spec | 48 ++++++++++++++++++++++++++++++++++++++++------ sources | 4 ++-- 2 files changed, 44 insertions(+), 8 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 4c02bf9..a9d0f51 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,13 +2,13 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 5.2.1 +%define VERSION 5.3.0 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build Name: knot-resolver Version: %{VERSION} -Release: 2%{?dist} +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -40,9 +40,9 @@ BuildRequires: meson BuildRequires: pkgconfig(cmocka) BuildRequires: pkgconfig(gnutls) BuildRequires: pkgconfig(libedit) -BuildRequires: pkgconfig(libknot) >= 2.8 -BuildRequires: pkgconfig(libzscanner) >= 2.8 -BuildRequires: pkgconfig(libdnssec) >= 2.8 +BuildRequires: pkgconfig(libknot) >= 2.9 +BuildRequires: pkgconfig(libzscanner) >= 2.9 +BuildRequires: pkgconfig(libdnssec) >= 2.9 BuildRequires: pkgconfig(libnghttp2) BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(libcap-ng) @@ -52,6 +52,13 @@ BuildRequires: pkgconfig(luajit) >= 2.0 Requires: systemd Requires(post): systemd +# dnstap module dependencies +# SUSE is missing protoc-c protobuf compiler +%if "x%{?suse_version}" == "x" +BuildRequires: pkgconfig(libfstrm) +BuildRequires: pkgconfig(libprotobuf-c) +%endif + # Distro-dependent dependencies %if 0%{?rhel} == 7 BuildRequires: lmdb-devel @@ -121,6 +128,17 @@ Requires: %{name} = %{version}-%{release} Documentation for Knot Resolver %endif +%if "x%{?suse_version}" == "x" +%package module-dnstap +Summary: dnstap module for Knot Resolver +Requires: %{name} = %{version}-%{release} + +%description module-dnstap +dnstap module for Knot Resolver supports logging DNS responses to a unix socket +in dnstap format using fstrm framing library. This logging is useful if you +need effectivelly log all DNS traffic. +%endif + %if "x%{?suse_version}" == "x" %package module-http Summary: HTTP module for Knot Resolver @@ -156,6 +174,9 @@ CFLAGS="%{optflags}" LDFLAGS="%{?__global_ldflags}" meson build_rpm \ %endif -Dsystemd_files=enabled \ -Dclient=enabled \ +%if "x%{?suse_version}" == "x" + -Ddnstap=enabled \ +%endif -Dunit_tests=enabled \ -Dmanaged_ta=enabled \ -Dkeyfile_default="%{_sharedstatedir}/knot-resolver/root.keys" \ @@ -297,7 +318,12 @@ fi %{_libdir}/knot-resolver/*.so %{_libdir}/knot-resolver/*.lua %dir %{_libdir}/knot-resolver/kres_modules -%{_libdir}/knot-resolver/kres_modules/*.so +%{_libdir}/knot-resolver/kres_modules/bogus_log.so +%{_libdir}/knot-resolver/kres_modules/edns_keepalive.so +%{_libdir}/knot-resolver/kres_modules/hints.so +%{_libdir}/knot-resolver/kres_modules/nsid.so +%{_libdir}/knot-resolver/kres_modules/refuse_nord.so +%{_libdir}/knot-resolver/kres_modules/stats.so %{_libdir}/knot-resolver/kres_modules/daf %{_libdir}/knot-resolver/kres_modules/daf.lua %{_libdir}/knot-resolver/kres_modules/detect_time_jump.lua @@ -336,6 +362,11 @@ fi %doc %{_datadir}/info/knot-resolver-figures/* %endif +%if "x%{?suse_version}" == "x" +%files module-dnstap +%{_libdir}/knot-resolver/kres_modules/dnstap.so +%endif + %if "x%{?suse_version}" == "x" %files module-http %{_libdir}/knot-resolver/debug_opensslkeylog.so @@ -345,6 +376,11 @@ fi %endif %changelog +* Mon Mar 01 2021 Jakub Ružička - 5.3.0-1 +- update to upstream version 5.3.0 +- add dnstap module subpackage +- required Knot DNS >= 2.9 + * Tue Jan 26 2021 Fedora Release Engineering - 5.2.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild diff --git a/sources b/sources index b0d29ce..4a2e2d5 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.2.1.tar.xz) = cf5bf5d6cdd336a0bc2fedc70730f58c31f79a37bccda46b3d45e4a34a79851e517445c427d3bb625ad6d2ad9f104e3176c04969bd44ee717457f5738937050c -SHA512 (knot-resolver-5.2.1.tar.xz.asc) = 1b2c7477c3876d66bd6328fb2da4e15a92de9afb13649eb0dbdba63b0a36e04829b2d64995459785e86882f9abbb8dca7a2026b93b0124161ae8d059961bbbc8 +SHA512 (knot-resolver-5.3.0.tar.xz) = 216b1b0fb43b31089207e8ec2b9ac6f41867fe00e33a02ac9b104c4c9527878d0be66466294395eacc8f4096863a0b1d0957f46f920ed04f52efe8f8cbb8e579 +SHA512 (knot-resolver-5.3.0.tar.xz.asc) = abe1f9b4edbab0ce4219511dab81437be4a87f2f5b0d73d38f24338758712e1139882ef401860505680e0979b9acd513b44bfe89ec8f8d6f140dea1496887a02 From 8e02a3b482056ff2641d1d4b1e9a8104231ee02a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Zbigniew=20J=C4=99drzejewski-Szmek?= Date: Tue, 2 Mar 2021 16:13:34 +0100 Subject: [PATCH 087/126] Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. --- knot-resolver.spec | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index a9d0f51..19038ac 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -8,7 +8,7 @@ Name: knot-resolver Version: %{VERSION} -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -376,6 +376,10 @@ fi %endif %changelog +* Tue Mar 02 2021 Zbigniew Jędrzejewski-Szmek - 5.3.0-2 +- Rebuilt for updated systemd-rpm-macros + See https://pagure.io/fesco/issue/2583. + * Mon Mar 01 2021 Jakub Ružička - 5.3.0-1 - update to upstream version 5.3.0 - add dnstap module subpackage From 2ca00cb416da77a06f4dee3711c2b4137eed5ea6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Thu, 1 Apr 2021 16:48:46 +0200 Subject: [PATCH 088/126] knot-resolver-5.3.1-1: new upstream version Changelog: - update to upstream version 5.3.1 --- knot-resolver.spec | 5 ++++- sources | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 19038ac..58dd90e 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,7 +2,7 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 5.3.0 +%define VERSION 5.3.1 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build @@ -376,6 +376,9 @@ fi %endif %changelog +* Thu Apr 01 2021 Jakub Ružička - 5.3.1-1 +- update to upstream version 5.3.1 + * Tue Mar 02 2021 Zbigniew Jędrzejewski-Szmek - 5.3.0-2 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. diff --git a/sources b/sources index 4a2e2d5..cfb25bb 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.3.0.tar.xz) = 216b1b0fb43b31089207e8ec2b9ac6f41867fe00e33a02ac9b104c4c9527878d0be66466294395eacc8f4096863a0b1d0957f46f920ed04f52efe8f8cbb8e579 -SHA512 (knot-resolver-5.3.0.tar.xz.asc) = abe1f9b4edbab0ce4219511dab81437be4a87f2f5b0d73d38f24338758712e1139882ef401860505680e0979b9acd513b44bfe89ec8f8d6f140dea1496887a02 +SHA512 (knot-resolver-5.3.1.tar.xz) = e7fe80376b35aad81b767d7727aaf72ad54e0546456d0b7dca405bfaa87bf4c7170bbc37693171c51d48a49e98318c3e1b41a8d58568eeef0ae630e36dd7c087 +SHA512 (knot-resolver-5.3.1.tar.xz.asc) = d862c7af76a59e8dc5e6c77f92f42edd98201a8673ee4fb88f94e96b6add74e975598988246e5a87e25695802c9dc4fccbb6f212d899e2a900ca1bd5c6af8292 From b4fce71bd05ee87cf13ca991b2523766ee2b829d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Fri, 7 May 2021 12:30:56 +0000 Subject: [PATCH 089/126] knot-resolver-5.3.2-1: new upstream version --- knot-resolver.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 58dd90e..d99a615 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,13 +2,13 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 5.3.1 +%define VERSION 5.3.2 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build Name: knot-resolver Version: %{VERSION} -Release: 2%{?dist} +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -376,6 +376,9 @@ fi %endif %changelog +* Fri May 07 2021 Jakub Ružička - 5.3.2-1 +- update to upstream version 5.3.2 + * Thu Apr 01 2021 Jakub Ružička - 5.3.1-1 - update to upstream version 5.3.1 diff --git a/sources b/sources index cfb25bb..a78e034 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.3.1.tar.xz) = e7fe80376b35aad81b767d7727aaf72ad54e0546456d0b7dca405bfaa87bf4c7170bbc37693171c51d48a49e98318c3e1b41a8d58568eeef0ae630e36dd7c087 -SHA512 (knot-resolver-5.3.1.tar.xz.asc) = d862c7af76a59e8dc5e6c77f92f42edd98201a8673ee4fb88f94e96b6add74e975598988246e5a87e25695802c9dc4fccbb6f212d899e2a900ca1bd5c6af8292 +SHA512 (knot-resolver-5.3.2.tar.xz) = 180490f058d90d15f336bbce28a175d6660a4a98e88956071f26a40e2b9a14f57eea6b62b992f88011f80acda9418813d53c7f00753c97bcf6b527cf41cc0b8a +SHA512 (knot-resolver-5.3.2.tar.xz.asc) = 0d73384f00c1cb7d9dcb27fac201d29cb1ebf4568f2ff6d0767296550fee7e753f15a69127d5f5e141d5739a8f0899e8ea63b44c50c6f7e7c1f58af7bfd9fe38 From 1ae4af9297823eee69e0f1ab40e0274d540e3188 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 22 Jul 2021 10:16:37 +0000 Subject: [PATCH 090/126] - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index d99a615..312dde3 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -8,7 +8,7 @@ Name: knot-resolver Version: %{VERSION} -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -376,6 +376,9 @@ fi %endif %changelog +* Thu Jul 22 2021 Fedora Release Engineering - 5.3.2-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild + * Fri May 07 2021 Jakub Ružička - 5.3.2-1 - update to upstream version 5.3.2 From 5e96ddaab6b962efa22530c3ab70b438cb28dd5f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Thu, 29 Jul 2021 16:52:22 +0200 Subject: [PATCH 091/126] knot-resolver-5.4.0-1: new upstream version --- knot-resolver.spec | 8 +++++--- sources | 4 ++-- 2 files changed, 7 insertions(+), 5 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 312dde3..747256c 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -2,13 +2,12 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}} %define GPG_CHECK 1 -%define VERSION 5.3.2 %define repodir %{_builddir}/%{name}-%{version} %define NINJA ninja-build Name: knot-resolver -Version: %{VERSION} -Release: 2%{?dist} +Version: 5.4.0 +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -376,6 +375,9 @@ fi %endif %changelog +* Thu Jul 29 2021 Jakub Ružička - 5.4.0-1 +- update to upstream version 5.4.0 + * Thu Jul 22 2021 Fedora Release Engineering - 5.3.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild diff --git a/sources b/sources index a78e034..d65256b 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.3.2.tar.xz) = 180490f058d90d15f336bbce28a175d6660a4a98e88956071f26a40e2b9a14f57eea6b62b992f88011f80acda9418813d53c7f00753c97bcf6b527cf41cc0b8a -SHA512 (knot-resolver-5.3.2.tar.xz.asc) = 0d73384f00c1cb7d9dcb27fac201d29cb1ebf4568f2ff6d0767296550fee7e753f15a69127d5f5e141d5739a8f0899e8ea63b44c50c6f7e7c1f58af7bfd9fe38 +SHA512 (knot-resolver-5.4.0.tar.xz) = f98086fa46969c3ca074cb15d7f4098778fc51bec4b08e2439b0ec4fca53ab66a8497dd49491bb180d48ed30104bf715c91d1bb42ed1b4756e6ca3abd3868e0e +SHA512 (knot-resolver-5.4.0.tar.xz.asc) = 3c7363ee424fc6002cb8b313a5cc5c220a107d4962ae6f93c44282ad8943f00befa952b96689c8c19991597ffd1ab8afe54f398759d39fee6abaab7cb87d0037 From 088640e80aaa50f9a4db5c430a3cf2cc7402f0fd Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Mon, 9 Aug 2021 14:00:56 +0200 Subject: [PATCH 092/126] knot-resolver-5.4.0-2: rebuild for Knot DNS 3.1 Changelog: - rebuild for Knot DNS 3.1 (#1990583) --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 747256c..1abf43f 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.4.0 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -375,6 +375,9 @@ fi %endif %changelog +* Mon Aug 09 2021 Jakub Ružička - 5.4.0-2 +- rebuild for Knot DNS 3.1 (#1990583) + * Thu Jul 29 2021 Jakub Ružička - 5.4.0-1 - update to upstream version 5.4.0 From f4bb7b5b145ae571bca88a11bb9dc08acdc4d79f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Thu, 19 Aug 2021 17:25:18 +0200 Subject: [PATCH 093/126] knot-resolver-5.4.1-1: new upstream version Changelog: - update to upstream version 5.4.1 --- knot-resolver.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 1abf43f..bfee219 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,8 +6,8 @@ %define NINJA ninja-build Name: knot-resolver -Version: 5.4.0 -Release: 2%{?dist} +Version: 5.4.1 +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -375,6 +375,9 @@ fi %endif %changelog +* Thu Aug 19 2021 Jakub Ružička - 5.4.1-1 +- update to upstream version 5.4.1 + * Mon Aug 09 2021 Jakub Ružička - 5.4.0-2 - rebuild for Knot DNS 3.1 (#1990583) diff --git a/sources b/sources index d65256b..e10ced1 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.4.0.tar.xz) = f98086fa46969c3ca074cb15d7f4098778fc51bec4b08e2439b0ec4fca53ab66a8497dd49491bb180d48ed30104bf715c91d1bb42ed1b4756e6ca3abd3868e0e -SHA512 (knot-resolver-5.4.0.tar.xz.asc) = 3c7363ee424fc6002cb8b313a5cc5c220a107d4962ae6f93c44282ad8943f00befa952b96689c8c19991597ffd1ab8afe54f398759d39fee6abaab7cb87d0037 +SHA512 (knot-resolver-5.4.1.tar.xz) = 1e96a1c15548a258fa70e3c821edb1176e1b93dba1c7883e3b8c7d82d7d25415f333eb7e5c8dc9e3a41f831cf82c71868ffaf6668d18402c1ea82e77bcbab455 +SHA512 (knot-resolver-5.4.1.tar.xz.asc) = d6676189a798b0a21eb4a62c344a419f626f4150dd54345ab10ab643b93dc697274c6088f40c8bc8584bc5bff5939e44584640e3f24b4ff9012c1936ab75641c From 58be731243bb3364131c166c0088228205583350 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Mon, 18 Oct 2021 13:26:06 +0200 Subject: [PATCH 094/126] knot-resolver-5.4.2-1: new upstream version Changelog: - update to upstream version 5.4.2 --- knot-resolver.spec | 5 ++++- sources | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index bfee219..46ba159 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,7 +6,7 @@ %define NINJA ninja-build Name: knot-resolver -Version: 5.4.1 +Version: 5.4.2 Release: 1%{?dist} Summary: Caching full DNS Resolver @@ -375,6 +375,9 @@ fi %endif %changelog +* Mon Oct 18 2021 Jakub Ružička - 5.4.2-1 +- update to upstream version 5.4.2 + * Thu Aug 19 2021 Jakub Ružička - 5.4.1-1 - update to upstream version 5.4.1 diff --git a/sources b/sources index e10ced1..a47ac53 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.4.1.tar.xz) = 1e96a1c15548a258fa70e3c821edb1176e1b93dba1c7883e3b8c7d82d7d25415f333eb7e5c8dc9e3a41f831cf82c71868ffaf6668d18402c1ea82e77bcbab455 -SHA512 (knot-resolver-5.4.1.tar.xz.asc) = d6676189a798b0a21eb4a62c344a419f626f4150dd54345ab10ab643b93dc697274c6088f40c8bc8584bc5bff5939e44584640e3f24b4ff9012c1936ab75641c +SHA512 (knot-resolver-5.4.2.tar.xz) = d8d4eeea1bf04496b930fe8984ebb5314ef6e0db0f8182f98db63b8508f4da6e0620c2b9c7eeecb3e5a4e7b15469798e0c2d1b8ef71a681ed7dd38d0089dea1d +SHA512 (knot-resolver-5.4.2.tar.xz.asc) = 098317d9761d1398cf334978367ce260fe49e877f2192fedd8cbd69f7c8ffa7cf32dd07eba4ca9a3fa70c148271459ef0edb154d4b161deec87de7c2fb4bff50 From ee3d93fccddb816b77b07f9accd248a6e7e30741 Mon Sep 17 00:00:00 2001 From: Adrian Reber Date: Tue, 26 Oct 2021 08:44:38 +0200 Subject: [PATCH 095/126] Rebuilt for protobuf 3.18.1 --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 46ba159..2d8209b 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.4.2 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -375,6 +375,9 @@ fi %endif %changelog +* Tue Oct 26 2021 Adrian Reber - 5.4.2-2 +- Rebuilt for protobuf 3.18.1 + * Mon Oct 18 2021 Jakub Ružička - 5.4.2-1 - update to upstream version 5.4.2 From 11a992fca0a04493dc8d799e75ae1270bd6fcc94 Mon Sep 17 00:00:00 2001 From: Adrian Reber Date: Sat, 6 Nov 2021 18:41:55 +0100 Subject: [PATCH 096/126] Rebuilt for protobuf 3.19.0 --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 2d8209b..627c417 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.4.2 -Release: 2%{?dist} +Release: 3%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -375,6 +375,9 @@ fi %endif %changelog +* Sat Nov 06 2021 Adrian Reber - 5.4.2-3 +- Rebuilt for protobuf 3.19.0 + * Tue Oct 26 2021 Adrian Reber - 5.4.2-2 - Rebuilt for protobuf 3.18.1 From 6e715965467a9fcef774491f9163088dafdb74a8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Wed, 1 Dec 2021 17:49:28 +0100 Subject: [PATCH 097/126] knot-resolver-5.4.3-1: new upstream version Changelog: - update to upstream version 5.4.3 --- knot-resolver.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 627c417..4919853 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,8 +6,8 @@ %define NINJA ninja-build Name: knot-resolver -Version: 5.4.2 -Release: 3%{?dist} +Version: 5.4.3 +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -375,6 +375,9 @@ fi %endif %changelog +* Wed Dec 01 2021 Jakub Ružička - 5.4.3-1 +- update to upstream version 5.4.3 + * Sat Nov 06 2021 Adrian Reber - 5.4.2-3 - Rebuilt for protobuf 3.19.0 diff --git a/sources b/sources index a47ac53..5979f3a 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.4.2.tar.xz) = d8d4eeea1bf04496b930fe8984ebb5314ef6e0db0f8182f98db63b8508f4da6e0620c2b9c7eeecb3e5a4e7b15469798e0c2d1b8ef71a681ed7dd38d0089dea1d -SHA512 (knot-resolver-5.4.2.tar.xz.asc) = 098317d9761d1398cf334978367ce260fe49e877f2192fedd8cbd69f7c8ffa7cf32dd07eba4ca9a3fa70c148271459ef0edb154d4b161deec87de7c2fb4bff50 +SHA512 (knot-resolver-5.4.3.tar.xz) = e1a513057dbeaea2ba3c09f878ce9ef9b0f8ba0308dae52ff5b2133c45d3fd5cbdd36c78dfef80be79d39f2c37db44f2ebd5a86c6781ccb2f3558c8209604cf8 +SHA512 (knot-resolver-5.4.3.tar.xz.asc) = 8484091b6c549ce6a4118eeeae4eea472d4f54f374dacaee25028597656ee8adff2147dc9db39e2d45c6f8add9718ccbfcfc41e4bf59433f37872dbc75da0af8 From a94d74614a6c2dc0db9844d34e4a32c69513a945 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Wed, 5 Jan 2022 18:49:45 +0100 Subject: [PATCH 098/126] knot-resolver-5.4.4-1 Changelog: - update to upstream version 5.4.4 --- knot-resolver.spec | 5 ++++- sources | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 4919853..fa4d524 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,7 +6,7 @@ %define NINJA ninja-build Name: knot-resolver -Version: 5.4.3 +Version: 5.4.4 Release: 1%{?dist} Summary: Caching full DNS Resolver @@ -375,6 +375,9 @@ fi %endif %changelog +* Wed Jan 05 2022 Jakub Ružička - 5.4.4-1 +- update to upstream version 5.4.4 + * Wed Dec 01 2021 Jakub Ružička - 5.4.3-1 - update to upstream version 5.4.3 diff --git a/sources b/sources index 5979f3a..1fe4161 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.4.3.tar.xz) = e1a513057dbeaea2ba3c09f878ce9ef9b0f8ba0308dae52ff5b2133c45d3fd5cbdd36c78dfef80be79d39f2c37db44f2ebd5a86c6781ccb2f3558c8209604cf8 -SHA512 (knot-resolver-5.4.3.tar.xz.asc) = 8484091b6c549ce6a4118eeeae4eea472d4f54f374dacaee25028597656ee8adff2147dc9db39e2d45c6f8add9718ccbfcfc41e4bf59433f37872dbc75da0af8 +SHA512 (knot-resolver-5.4.4.tar.xz) = 5c37b5513a05949b2e3c8555a29e7b95e2a623540038dd80178ec6dd61788749c3f2fd86bd901c52ad56bd2481021e3e712a21f3e03027cfbf11c4f131da083b +SHA512 (knot-resolver-5.4.4.tar.xz.asc) = 97302e03da8c7096e28c2b6f9920b4faa0f97f5c9763acd9a7ce8c76cb092c5b19a07d01061aa2bc34fc212b3f654230b4046fc7ba13327823174cda339dd484 From b612c55c1a31d1aee5f27bcc3de0e2b18686e105 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 20 Jan 2022 15:02:43 +0000 Subject: [PATCH 099/126] - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index fa4d524..7e4b7a9 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.4.4 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -375,6 +375,9 @@ fi %endif %changelog +* Thu Jan 20 2022 Fedora Release Engineering - 5.4.4-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild + * Wed Jan 05 2022 Jakub Ružička - 5.4.4-1 - update to upstream version 5.4.4 From 05540b1b4e0286c36f22e3ba5d6cd9ac36c49032 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Tue, 15 Mar 2022 19:53:01 +0100 Subject: [PATCH 100/126] knot-resolver-5.5.0-1 --- knot-resolver.spec | 15 +++++++++------ sources | 4 ++-- 2 files changed, 11 insertions(+), 8 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 7e4b7a9..9b5865c 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,8 +6,8 @@ %define NINJA ninja-build Name: knot-resolver -Version: 5.4.4 -Release: 2%{?dist} +Version: 5.5.0 +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -39,9 +39,9 @@ BuildRequires: meson BuildRequires: pkgconfig(cmocka) BuildRequires: pkgconfig(gnutls) BuildRequires: pkgconfig(libedit) -BuildRequires: pkgconfig(libknot) >= 2.9 -BuildRequires: pkgconfig(libzscanner) >= 2.9 -BuildRequires: pkgconfig(libdnssec) >= 2.9 +BuildRequires: pkgconfig(libknot) >= 3.0.2 +BuildRequires: pkgconfig(libzscanner) >= 3.0.2 +BuildRequires: pkgconfig(libdnssec) >= 3.0.2 BuildRequires: pkgconfig(libnghttp2) BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(libcap-ng) @@ -135,7 +135,7 @@ Requires: %{name} = %{version}-%{release} %description module-dnstap dnstap module for Knot Resolver supports logging DNS responses to a unix socket in dnstap format using fstrm framing library. This logging is useful if you -need effectivelly log all DNS traffic. +need effectively log all DNS traffic. %endif %if "x%{?suse_version}" == "x" @@ -375,6 +375,9 @@ fi %endif %changelog +* Tue Mar 15 2022 Jakub Ružička - 5.5.0-1 +- update to upstream version 5.5.0 + * Thu Jan 20 2022 Fedora Release Engineering - 5.4.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild diff --git a/sources b/sources index 1fe4161..99242c7 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.4.4.tar.xz) = 5c37b5513a05949b2e3c8555a29e7b95e2a623540038dd80178ec6dd61788749c3f2fd86bd901c52ad56bd2481021e3e712a21f3e03027cfbf11c4f131da083b -SHA512 (knot-resolver-5.4.4.tar.xz.asc) = 97302e03da8c7096e28c2b6f9920b4faa0f97f5c9763acd9a7ce8c76cb092c5b19a07d01061aa2bc34fc212b3f654230b4046fc7ba13327823174cda339dd484 +SHA512 (knot-resolver-5.5.0.tar.xz) = 765e3c22978b0faeb910d1f3442376240452b29c526ca22477e4ccc8f0ec6eb12a26869729d13e1cb9b306e06acf4aec213094f5ec097fc816ffac59645fd221 +SHA512 (knot-resolver-5.5.0.tar.xz.asc) = f19a6bbf2a81de40468294d7736ae4130ad94330fedf446eba1c170b5bf0c6d93217b7f8f7a4425bfa7b70658553a1255cd905416799f789b25ab75641fbd303 From 3bdb65b878bb194fadf38304e7faa4444d27248c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Wed, 16 Mar 2022 15:02:05 +0100 Subject: [PATCH 101/126] Update upstream signing GPG keys New kresd-keyblock.asc is downloaded from: https://secure.nic.cz/files/knot-resolver/kresd-keyblock.asc As listed in Knot Resolver Download page: https://www.knot-resolver.cz/download/ --- ...8C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc | 177 ------------------ ...60B60A80E782062449E747DF1F9575A3AA.gpg.asc | 65 ------- ...B9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc | 63 ------- knot-resolver.spec | 11 +- kresd-keyblock.asc | 126 +++++++++++++ 5 files changed, 132 insertions(+), 310 deletions(-) delete mode 100644 gpgkey-4A8BA48C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc delete mode 100644 gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc delete mode 100644 gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc create mode 100644 kresd-keyblock.asc diff --git a/gpgkey-4A8BA48C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc b/gpgkey-4A8BA48C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc deleted file mode 100644 index a3f5eea..0000000 --- a/gpgkey-4A8BA48C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc +++ /dev/null @@ -1,177 +0,0 @@ ------BEGIN PGP PUBLIC KEY BLOCK----- - -mQINBFhITjsBEACn+jYk59OSa7eul+bIaZERXTfhgfC6esfC5WPV0NmCig0W1Jbu -nWglYX3Bs1FJR4OCpchrbAQW3bEYDsddvy5rCbaG0IoOqNsd5GEhCmegDLNU/l36 -P83UUw8kkSJhlKr/U+EO+bFyKljmF+dE+OvIky1A+wd1zgRkcljr9DOfdLsAqL4n -Ib/LC99ZD27laSEAoaZagHXWMVP0EExM3+T4V5sPJ3ghrK1hAk5spAX9yHUSF242 -zo+5Sj/l/dGL/PXDeCJPHjfdQNUkKcRTVlbAIjfl5mk//73z3XmRSKp9R5HsCKQj -BC5Q38a/ZVDdaiSwIxw2sDLrI4+91ycsJ3gjtyiqyO43a4Y6mQHw9VZxudYG1hJ1 -+pAEPyLo/xIpGIlOo6BmmSz7gYgTPKB/dmGFOx/Qtrt8jNtiy3oyRRMPdQ2Vl/MR -AZ+OVSsSplf0uGFrhWOX6OPl6h7hu1mMbmHrQtgs835ZVfMf2IoK6QkFNFkn6Hbd -gF+4IZaX4br1WqZN2c51hKcIE4AHTSVSXwXRgdN/7Q2bmOH2IvfqTOX3HyfrIqUL -nqUuD4tZB5Q+z7V5H6vzG5GR2CFlwkSgaayoplLG7h4Xh6Hyman95tl/xS61TeSf -nv7NYIZj6fw4veUUALQlTwDkOh17wByJitvYfBkoiCY7ShAxYyBckGGFxQARAQAB -tCJUb21hcyBLcml6ZWsgPHRvbWFzLmtyaXpla0BuaWMuY3o+iQJXBBMBCABBAhsD -BQsJCAcCBhUICQoLAgQWAgMBAh4BAheAAhkBFiEESoukjCrtkzvUlcUJoful9++M -SGkFAlopsXsFCQPvacAACgkQoful9++MSGleYw/9FUdMWCHWrzeTcQwPUaB9TokC -cX6KIzcdA3GVtSNMKJWJc8nkEDmhcU6/X+F3+3HZ1pl6b4MGnzKJaYE0uXsYCtIC -6nen2FPEG6NKSF/uNbT8386zBFOkgjahuZXsxrmlNP6+KziQtWM00QTx4H34Yj9s -jqSEWZag/L5aw9/rLJ9YXBweWsNF+xXEcfUY3WTFW38zkzo/QyM734NU86U02tS4 -26LsaWGL/clSF1mSX/hD3oxwlApCHh40M9YsQ7T0kgDLcHFSMFQ7+mbvUjJPm7IX -Zkk9rdEOBTAgb003Giso0FPqkBsOqhtsUUFDnfoaD7JZ6Y54taxDJWQ7zOTM1Rqc -EfEyeoL5TPGeRCcrNLpPGi/gV3OI3Yos+zRSlUTLmDVPpaOb/Cl6K/oHN6Z8L2pj -ndA0tpxkIyOyx5bxUkkU7C3W78jGvshaAUGg5qTqogi48HjQJlwdnWVLxhBjIDa8 -73bgceoaMyxtkfDDj+6rPUbKf3A20Kv6Z4ZfKW+GcnJmdUW9MaHa48mImkKdaS5n -A2Wglk7CdNJhxGBGqXgQvbUUeZJXycq6u94pFDbaqKIPQ3I3FmbcQQnNUO9IPQxM -u+dbyJImthPlXLrALhq6eYkFnzHAlMMI06TacQcJPd3auXEgNkcAzlii8odYExPS -xRsESq2Y2VaDsMPQ6Ce0IVRvbWFzIEtyaXplayA8dGtyaXpla0ByZWRoYXQuY29t -PokCUQQwAQgAOxYhBEqLpIwq7ZM71JXFCaH7pffvjEhpBQJaOnWrHR0gZW1wbG95 -bWVudCBlbmRlZCAyMDE3LTEyLTIwAAoJEKH7pffvjEhphaYP/2u3wbyZ4Bs9W4yu -8x3/Ykb1GfY9j5LkscfN92NBWCVhI6I9ZapWN4SAZAlfl6L0UpJ92JHGMw3RvAIK -XvSk3YTpVTQHIn366r4Pfp7DizO4JGmPMKzzqexfrfXiVuqKSSAXhtPuzmJKbYbQ -miVybz2exUGkudkdJTk3ald1w+8yIoP6CbbGiuylAkPqke1vn1EvovyfnGr5vS15 -HK4PSqgsQ94UKnT8mlFS111JH0YfHdGcbxRRt2sk+mfcJfUKnx7LSuJHxizckQKo -Ih8LWpaIO6pLQfQa2h4O2dikWm6Hl3RGw0qZ3/Sgg2AsljvwTYtA8jZNuwDSoplf -sEK/kWIwWG47MyyjHtGpwVhCQT9WGo8GEgdHM0MH2hQV2keELrIiShoW2ntkB++I -VraEtwtH6zlNxw91E0l1NRmIbnXglbivP1b8ZQyZCMOmnFXkhKaTdJWtJ+OVZhPQ -I3PlwS6Divl81k2eM2D5h7YE7p075gsyZfjmuaFmeKwtUtk+PGqwPN3A+ZKAvEjp -RnP1KMIOewhg/KcA4Zn9fSPu9G5An9Civvm/Bze3XV8VdabegHuFSTINBmDRwbp4 -hcXh25bUMdcySdU30QiDkBU+irIp/+Kp+3Ipot4J6R/AbamWooS1ElAKNJ0fVfKJ -AXoyc+d/0UpPdMaHTCg5aushdmjkuQENBFhIUVwBCADIQ2ryTOUFwBufozEFvWts -PTyNYij/KOKP3VEDb66SoXYjA7rf5mC2GDSLI5xdk5a6gs66sizJfinPDwrI10EN -VBgVSedqKGukzyuLEmns7T0/e7KS7CqjykzfcxQuJ7E80FslTy4CYYo2nkaqkHvP -QyIgvEsvj241T6vqSBsRUxpCHxZMPQuhsJBNy3ma4JmbLob29VyvafI29OTjn2m+ -z8+KkfEmvuxt1URLaAJySaC2DTLc2NurW+ijEETOpB9wQekhOFIy4OrLTPIf8atM -YYfykrQyjrWrWLtq5ZspEofAJQOMNViq47CI7BxKsigp/Ziw7fKDkaapX/9tMM2d -ABEBAAGJAjYEKAEIACAWIQRKi6SMKu2TO9SVxQmh+6X374xIaQUCWl6A1wIdAQAK -CRCh+6X374xIaUkrEACIkcQUpUAMkWC0zFHWh/38xfT9cY/d1XYQ0hbjk4yqohjw -5V5PDO47CVYRGZUry55Btdf8xh0M48xxayLhA69BxhCFS6eRATYG2Rx9NjUD9xmp -xDuGFkTzOi8pItdgRvEH94CQtNbLoe2HXZJ1DZXnjEAb30Ai5m7/6NKUi9TtKZGA -/2+vsjRxlpCJyXj6kh+Hz3FFhBKUaSg+gAoeajH/3scAPcWyAUjavMiMfOxtTL6O -5CpWg7evi5oV9e27LNIWoonn/oY3r+ibTZZ48EsCwGQDhKAHhz5gmaVjSoZpC0JW -zcd5nN0/OrCs8AaIGMl6/5agn4M/cmaW8OMlbQfFw1OZ1IGvHW6NrXPkAHSNjj6f -nRMKtybdygxIoHAAazct+NaR+tWp1MjUnnPRnIJEk0abWRCU+5VKnKwP3P2Trm4Z -5veKle8OAjWcNbKJdC5P5C2cak8ZuTZ9x56trgpXnW2sz98R2nQCR4Nbfu8OUdrz -gl29aX2HQ6xEXLZqFCsyl+9PBksyJHAl4JKaBE/U0yIHE02Pz7MTbEWfovAABb4d -EFLd00ce0TE54H/JRnUEb9G3UoLVSH5g1ltuxdyPQ+gNEtHId/wjiL+LFlBmM1Gj -Md3BBsUMnNPZsszeDQDqfCO6w+dBzIX/UJdGft/nDC2SelyL4VbtpL/1i8OB1okD -RAQYAQgADwUCWEhRXAIbAgUJAg4GgAEpCRCh+6X374xIacBdIAQZAQgABgUCWEhR -XAAKCRAioqlLXklBWvQZB/9Gy/uJh6oRFUZnLjCLmsYs4WZDc409K34IsxiSgedF -dE3r53uyrishVQ6bfuFjiVDR2Yr8mjynzDT42wQaFJo4CQHqBQkd8iG/FA8BPqX1 -14vH9y2E7bu0AyY1LHGrT67Ym8ySxpSvS+ZztTdm2Xc8X92jRXz82SQgYJdPuhEE -EMq1JmszyYcXEJSb+qJ0F4q6wM18UR0oxZW/kJFuZ6z0JXG6Ka2cppVOtwcXCy/e -ECSTyUkI9tMm4I1RgNtWsAswCFBRCnAv5TQI3UtdoQCnuBmgef5Zr7uTmTtzHklQ -L9eDjKQ1ZDPO7MrcLyvxdvgevYE/peotjFNsMy4n1aApOk4QAJVdvvlqqTErA+kR -QBDkBGWeOf2pXKjle27wPx9l7w/EgEc1LQ1rTBnMKUeOiPF7o1WQj1n4brNn4aHG -xfTu12dVuV8BtxI/K/Fa1ZAMVGNO4kssbtqMMU8RPZ/LNLFtAp2VLkjVxsSVKoVP -2gxHmzTeHafySDR6d+D2vjCajDoP+wXL1OrgBuiOpAwcC3L4Uz4YJukNAYkSyTKH -d7y+chsqfdN4jXvjSIEPyvlhn4N7lHrfAw1ZnAyom7KtiKntVHVu0F7rbUaMFplk -22pS9lMwbLw/YJUwpMtX8/QQCOYuO5dyOsXHqfiDWYWnDgsR7556zWpotuAi2Dkz -84jGO9CWq1JnPzxi/hgikg1Jq0/QfvR2i2ZIiJKEjfPzs3CCoJrBpa3PV4mIvomk -l/SW5PqJgANHy2pTIQs+pqB0yeET7GvIsScSVIXWFCXCtq+po/G55u6APKXFj1VP -+I0yklumuRN1I05Qdsps/OUeaz6+ghFu/HfWA9IZK8C4imSykRFW1GPA0qs7qy3j -iLx42iMHzEvJzkvi2lasWIROExsPyNMceeRyjvpXw8fVpoMRziNR1f8w6qvPv8gM -N7hiqKp8ybC11uuYejqkJtLWNF1riKtvZQWKK0Jc8rp5jL4309a+rqUlVnZ148oM -bhYq/5JC494fWUnHsMhaMNJoTRLyuQENBFhIUgIBCADTT2Zpzau7YxkaNTMYNYu3 -021R82exKDP0tc4GhFL4osvSUj+bxW/rmKnwBDafsALfskzWrNrTzWQQuSFxsnMD -mb2KheQ+jtYa71yed2NhJoFqj72A6OmqN1wo0K0zYBdP3ccSfrZ7lJcxiko5TLWe -SHTcQ2y/TWn/8IdCJ1Lu/pD3k/IP5yyEaJ/oTaM9SjbuKkmPsMAhIRGEm/nvZMP9 -a6Wmg28a3wMtkQNbj5hFOzaUJ3//SRmSga0XdTUKEqZcTHRhL/26uSHdN4pKwhwO -qIgQeuUkym1TYAXdVLCoLH0Mq9xCgrc0MlCRuQhE+kM973X6u8xbR0DaChShwgEl -ABEBAAGJAjYEKAEIACAWIQRKi6SMKu2TO9SVxQmh+6X374xIaQUCWl6A3gIdAQAK -CRCh+6X374xIaexhD/9RYHmE0dYm6lIzfGAf3MuDrDpp10P8eILcuhYbqM4IIOu+ -sJD6I3vRek+w2vlNBmY2HthQcOv3VRRiD5/RK/tLzrrQrMX7BFNOKjF6FEwllXbc -7fLPUNcvta76igxMdy1CNXTgVQkXv/L7XCzi1Ua7UgpVuF36ea+fH6/tdqK5FLRZ -WgnaPaRZo3V44xRDPh0dG6VE4leamJWz0RWtttH9jCwxPXvkf7XCZCD9M0ZURlK/ -8Bl5ES01x+09G8FS9FZwcJsZUdO0hRh5ODs7kXWZphk4xYsnPyFmcKWnbnji485D -9C8Uk6cepCOOvozmlCs1VYYjh5V1p6Tz0qNOpFOWLm6Ns+j0O6AgeopNQBqj9tbU -Q0CLXhDJ5Db4epSe+A6uc6vBm4k66DYOLl5ofOX1Uc+VA76S3YjlYkF+y8ya39wq -lBBISEgLjJfbs4bihnwfZ43ECr7fUQukg6Abpz1RvWsQi+1JzDMufpRgfKVjy+Np -81GWIyaVVrxYvxFxQ1cvwieGZuIAU6LLSH38rzCQqotXAgHxgeUzRpTSohL+ROIF -/mAcA1hoG79PPV8rS8zS3r50jbv04Agdh0ZCxG5gXtZzc06rjdGDGE+PnGjwGvuz -sbIx/KVOA/nceZs8BT3mm65MB3ppBWm8g4f3PoyW1nSOUWkngwAChAAb3HPKaYkC -JQQYAQgADwUCWEhSAgIbDAUJAg4GgAAKCRCh+6X374xIab0kD/935YykgKCxAkch -HR+fu1RB9wyL88P6nDJ/zm/O3e/QZVGrfNtTMgAM9OduxzMEzibaPCpz8nS6a4Rp -E9QcAQD3KN6TttDkzwKdtj0DKi/q5dWllnp56jC/0I6WfRyGrrcR+1rNO4LscJiV -rXYoQnJPN2B72DWnQF/fvX8dnulGjBtwCTfNQBSU1TTWcSoxB2nPaWAi2PwCfG6r -9PikrEo1Ya6NacRAVFUU0jYaEnj8dfH2oIQDo3r0V5yEFI8ky5JNTHDr1+OoEr6E -H9vBxqsimhRQJpiIkiaE8qYKJcphEv970HAVeXKKVgan+hnFN5Tn92/hcrJoUh5D -sEwBgxrgU0INWMgyJdt3MQQknTSxSJmcKlka+abIvbr5JmSxHnZ/omdxfta2euaA -X3N8lr8cxPrFx5p6moFjHonLGJUZDpZ4CSmqpiPUEFTyrUeWz1hty9L6DpisRBec -7KqSxgvGwT9gBZnMHFvFDkBLjWE7sJYu0WpTS92qwr0PPe02DGfGaGg2FW5uR1B3 -/DaxUTg4M86u/pNHvOCeifR8krTxvf0u36EJ6c1qv+5SE0py9d/50RJBQhMZZTHC -SlW4x0Eo9k9Lw2yEKHsrsxeLH6l/RAN3JUEFhqkUXRRX6tvTY/TWTPBK94g+SWla -POSDjS7ikOy4FJ7rmjR5OUcpEdsU6LkCDQRaKbA4ARAA0iJ7vcMwHis7RYSYnipd -8mi2RkRWJfsxQyj6CHUZv7NwLTyCxjat21VfDJ2SMeKaT3Sq6kvRa8/ZxpikbJ5m -ufzh+6I2lvMNYzev8SECuLMZaCmISHwH0+nRDsrWZ4DtGTCToLU74mez1GFckUTY -o8g8EGrBYbms0gKGc8639mlKZD1+eqmUxP43zfF430YNT0TAQ9zDMuyr6cKBVwBq -bXMxRQYo16IeP2lyD5RN+9NE5IqRFDRQZMqbv69iL36NtAMZ5M1KgRSn/CqCd6vK -EohJ8E4NOoKfmaOgGpYmpAHe7wYqPRHVY0r+SaY0Dlw0NmbN/HbhrcjwMjXXQCgo -Ea8aSbNH5zUXdJyOsKsF/dx7jCPS0BW2mauHVmPwMD1ZprYzFiLYE1UfScl/abvG -tzsr82wILfN0wswvsoXygGaJUUwkLGjOVrV7WIOr8XxoKOR5fqq13Jx1i6VVxCqB -pdGl7zbXJhGt5OMB072PTkJJ+pDQJlSY+r8V/lgn3bwUkXisk5SDp2ObgJhoMf3/ -WRwiIBzOlS+93xTrjego6I3lwSigUqpze44tqJNAVzT2lmbX2sZjbCafuoRDoqgy -49eSsU4eQKnKq1bp18ccl6KYsFu/Eui11atRoy0qObAbrUy54oJE+XKxoDYdZxqp -CIAmTlTXp4pvYiaOk71QF6kAEQEAAYkEcgQYAQgAJhYhBEqLpIwq7ZM71JXFCaH7 -pffvjEhpBQJaKbA4AhsCBQkCDgaAAkAJEKH7pffvjEhpwXQgBBkBCAAdFiEEFe8t -8KwPEBnPn+loGFnIJjkFVmwFAlopsDgACgkQGFnIJjkFVmya5BAA0JPGtGHpCLnL -PjxdLnIpUbQbaKA7AiYskJReIEqPOXWb9WguXYa0j8PsO8d7sn/tBMqw7XdezjWc -JWKutipV9tw6bWQfsx37dyplLwQ6FvuaAMAEXBdxS2Zvf5ffnq1/Sy+TZSRzVH9G -kkP7LgjFfjt4sXTi6KT3zv25ILblJk/Am8qpBt5Iia6hLibDtaz54o3CmotHi2JQ -LayWwQZ6A1a4/hlI7DczsEZfANxd2AItQOQQHvoTEuxFR0ew0dIdv5pLWrW2HfPi -LCFUk2tPImpLvUsmHTQ0kRp5RunObplWIkb7MqCb8DhJ7rbU4eur+qW046pNxci9 -4m0zpEBhdsgC2P+gYSfohYvpEdVMmUOETdxbEUREF1aud72+onyPSvLR6nTwM3Br -/v1NK3o8t6K9zkUnBFDtjqXn7vsf0CA1eszcygsAi06CSgpv8qnU4j7YoBspbCjE -INhip5iNigI3SN49gA9ON+0+FszDZU3sokvIu2xfvePyZ7OhQD6lu+KITlwUH2ED -IVpirH1ubO3VhxY6M9qBWs49UuCQbBaGBwpHlhg7n+wggx+k6Z59kU+4cd1Q9XNf -bk2hVvYdCvHbtH78rh8maLBdGsiyoWrLvcDF+z3G/afej3QVAP2LdWkurAxhUp7s -Af7VBKvcXCQ0/PGrfRpgdofxmNcQG1vVJw/7BtNHys0WLcT5AKEa27o1BpvsNgZ6 -h7i0/4AxTwrjAqzFRBvqs/hSJ/8hF5alfJUKv42OpzzSzSqqQUOH8WjgXX6bWn77 -LkwKLzEAsMnE2HtWRnBUjNqYxN/C//jSDW5foOqwL00J9/Skk9n9RYDdXUyQXsRg -6JKx78oqcYvApEgqEEO1maW++pOq3KH/Q2FQNOSL2E4nmVBIv782K0xGBgS/zHWn -KWLPstihrj0S4SemlVmhKoL9rh01hHiTDVtGfcIMl1dsjNM+1dr4rv+P/a9s3pFn -YfiEt0LwCnE/PS/CfeB/j0HuVIyLZ3V988UzQHanUcoc4G7GCXQfuSHmeeMm6Q7K -KbDFHHxeF5xEWmjvBT+imM4KqVdwBU7PmFpjB2pSlkAGHrXWvg7MjFqmiw4xCDEO -Ij1HCfptxbQ72T5v35z8WVvI04fNNyYGELBfE1gnU7fTYBqJEP0ySY3H4G+kUNgw -zAEy7GhC1eBSHq7PgygxnmxsTDrTPIuV6YixFN+aOwj8ta6pdNgRVn+tOEZo5G9U -i1qsGx+ZaObfC+Wj0i3AOXEC4K+8iknp8lxYfbMiK2raQtcKKhkh7sG5SNnnAeV7 -yFPLxxJ+VYkQA19fKQBTXbx9QvcCmsfFlsQctmQtD8SFGSAGG7p1Wvn839/WgGN/ -DFk7OCejSkFxA/e5Ag0EWimwwgEQANMcgbXsj94aW4O0CCrmvINtdzarw0w1ai2w -0m+P0xtPqwI6ruDAcKuxs8zKXE9MCzP8sh9oXMXl4gomzgF9AmSAus083oOvjTOr -/6t+Xi2Ot+kTPEVFiupNEchUSFzZMRN0GRA1/fnUf50Ayty2MW8LOgSFqnQyivFa -a5u4ctep2w08ICacsKSfie4Gbj2oE+3Fk5qVspDHY6kHGSu+Ee9NiHTvxY2oEWLf -LYRbZFirFWsjm7h8vYDZvnTm5pq+6naBAg64iCydRyIjDWIZQNEeVC3XnDYfXLrD -SsjmpgMrBVs7xwzqDdEIKHUD6xhjJeE+3ECqT7NwKzBTXl+5p/g+Zx1LyOzsInFc -lV5QP/XGtcNUwtLKtMkIsNPkqL6MBOiq3xTMZ4PI/qRS/Pt/bk7Z55H6bLLzIPDx -0X8I8dAuischzN5A1HG9tYTC4GAwo0NC/IFPH2OmYCNn6gBzufp4AvBkXTqGWEC7 -5PtpODYMcKihsNJIbXFZ+/V6wE+NIyvhCm6tM40wlckEyIG5tUjuOwuW0AhqCmCC -KaZl8NM76WYj7+7r2Ir8tlN3Sv3rQeGLGaYdxw2RzvBaetImvSzrNM2Lt12xwt0v -7P36DrWDYu6dDN7jAc70F3nFygNZQ5jtNgpcrGTBql8cd0Eb2groXchk7+q+3gEA -uJLDT4otABEBAAGJAjwEGAEIACYWIQRKi6SMKu2TO9SVxQmh+6X374xIaQUCWimw -wgIbDAUJAg4GgAAKCRCh+6X374xIaXwOD/wPK32kWIyo9r61bG3rLEjpagge62w7 -Pi5m9Ak3ezojYA12JO3BXhOfNB26iIUwWqAcLXCIsuaMPzr+lRX1KXxkeWkwmUyF -/pUcQ2D3fMdcz1pnsOK3Ijxi3eYbD7tK91WZJbrFlNI2XzPr9ARzLfYF5oZN02k7 -qd5XdMqtEc6Z3KZaVC2StvpI0AbpY+xEYmsYabM7ahEWQnHGf3zY8VpH62SIx19B -xjziZH3gIuhxgmkpxfMS15fxTEI4Nrq+uszzmTFeNfBPpOu2+lFVGDVk54b5KKgQ -/TOGXnbHbvFmgyKI1g7bTkJderhhj/IWdKjmIYRECEslDvlV7kXqR2Rm2F8JyHvV -iL9QYXVs5kwTPjUjYSDiazK8Ya6r2QPZSeSf8gfh4IkxQu4uOgUm+OeVp6BmnXef -BKJS+c5PL2OLKiOWjiVJMhfZfsKIWqE16Og5Ebs4x5pd25fxfUj6XBTwAsSMMZYj -3XvgDuTBlKBO6x3JESMjZE5PtXEl/T7xpgO+tAa6eegjcWSE9ct+Iup0Os26vMvc -B8EV5oS4OUr1bYoOnSvkWzm6LQIsYnpSufiwwFMrhoUOcLxPYzRDNDgFy+jrEEIr -fvo8QJDBx+1mc7oeoIgVlgS+o6bcziU7Dy36RfMrwaHXiWJwli79QzVWdinwoLFI -wsbCpWeHFBg8a7gzBFplBcMWCSsGAQQB2kcPAQEHQPlBkrV9cmCpdkqXV5lecMos -lNi1+tPfqS8XVYhw0XrXiQI8BBgBCAAmFiEESoukjCrtkzvUlcUJoful9++MSGkF -AlplBcMCGyAFCQHhM4AACgkQoful9++MSGkf6w/6AsoN1I77tjqtblHYtEZhS8Oj -peNmmk7xFA7r8EhjXiAUVUaLxucQQlBIMySnmg5jc5PGdCafzFL5axeaqLEUrvty -AhluNN9/LaMFVX/tBla7tJqWa1sfn4gJL0kvTp1szMIpnzaLhdf+qQmgqFHrHjpg -ovbry9KPWbKGVfDKQmMd04qzEMai1AF8Jcsm5AROljzC6hOK81nZxz7/LOiZN+UW -xPy5OzkuCvlOyrEztDdZjlyhyWkAnp+Nk2leO0kGHqETNDXFvGLzEy8QDCWMetRg -BuXhpnXVYu1qnaZLmVmym0A8NxZkh8GDLllyVxrTdLwAeigZcvRL6Cs9nFL9AjU+ -dekTKe8pSPb8rQb0xau1nuP33Miy4sDe22JmgUsdGfEM+m8Vq70gUlnO+PjPDcqJ -EJ3aL0MVVIpYpwM6n/mFFKYY5+/DPW3bBFnpmVwG0mc0tIXk4v0gsYTBr1IXFgpE -ZRciTksLq/ulCs+aXRwZoNuDex13Ka1rfXyGk7WaYRZ3rzWL0k0BJI3jFniMnrCV -aYvutuHTNTEThA0sjBmvb2N7oDM3zjtwx50v+gMrrrHEUXBjAU8CI5RcHpouh6MS -4Vp7vtSmQy27sWesWVf2ehe9da27/WtIZvL6f+4RjjyMJbDvUr/qptvOgjVM93mB -bMkzQRvMkEcKnbcBjGE= -=lP30 ------END PGP PUBLIC KEY BLOCK----- diff --git a/gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc b/gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc deleted file mode 100644 index 50ade25..0000000 --- a/gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc +++ /dev/null @@ -1,65 +0,0 @@ ------BEGIN PGP PUBLIC KEY BLOCK----- - -mQINBFgDknYBEADHEQwLBlfqbVCzq7qYcBFFTc1WCAFtqiKehOrsITnKusZw4nhY -wlKQxcumgj01xJOhbfHBCBeGlDydYqemKg4IfY2nwSyPwZZYMJn7L7AGrCeytr4V -MvDJ7o7qDZjjim4ifv+GUwdk3plXx6oMF4nctesI8aAOuLUHAn0PfrGfNhWoaglO -KgdOI6DGjhI/aGkvy+jrI/+XsdMV+3f1RuEOfI+Yu4SXFjJyhAmqEOBRxxdHqKre -IIpz3Lg38yWwiVGfwgQT+nFIz9BpHH3lWg1uS8xM3ezceBmRYV8zT9PvbeZ57Bla -TR6rLae5RYwV397PSLBqqLkB5H0TDRUFBnwBsUobLebYHmJCOydvyNv5AFkLmLZ7 -O4j2jFo1WPSMt3ThM6wRwqrnB4Gi+6onyrZfE1DnVZMqbxZ3VXa+E4S5YwrfCLUE -rGEn+d40OtoRZmQXhRPVAsdjimMj9oFM9RoxSgUrDg6Ia3n0IrKFb++zHAFbqkR5 -g4qzXiOMEG621GYEex2sDEKz/PD4CVKlNI9eld4ToH592kAwzJmd+sAi+Rfos0NE -zxuFd0ekAOeWoURo0zoYTSWPlMOmFMvcpH6LP3leJmY7x4z/b1ng/+7UnKonVALV -PFbRbElOkIfAtLKcUEofwV1jr7DyYGPalJtiDJPomB041ZHCj2RxyXY/oQARAQAB -tCRWbGFkaW3DrXIgxIx1bsOhdCA8dmN1bmF0QGdtYWlsLmNvbT6JAlQEEwEIAD4C -GyMFCQlmAYAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AWIQS2AGRgtgqA54IGJEnn -R98flXWjqgUCWcjP6AAKCRDnR98flXWjqkwxD/4pscbvmho3115B1/1BCxhyMrzh -hDhEPN8qZWh8KLfcdcTFJqN+YnyVKpDYOWy8tOUSjPE+IeezqjdlwghoD5gqRfrW -1g8mB7het2sDIl2PrY67Rf+rYowwKLjNY3gGNfpVFrq4QbImF5F1+44FfE7PjsHS -ZGO6/E54ZbaSZ36g05kuNAQGOmo2teXMgk73aqQFJ2Jd1XNq5cXkr+LYlIXCuyWi -vLixNHACZBPipR8K2sbSlS65s2ueikUUocVUfe8wW8pDvaAuKixwgINyaZIz1dFn -uzN3J6wazN5/zu7g8uUFRZVVxG0+2Cx5D06Jt4HD6/mJPeY8sg7neQ1JcMe/5XIF -ecnNOzLuveqAQpb+RQGV0aQwhzaaZgPouWHNPRCgXhCrS3CAOnFXceg2T/1TUqnl -rhw0rfufb/V83Uv+RFUqQ9RMgFnIOAxlgVlWtBTfhQVPFkAKZiARDSroR6Vx2uc1 -A071pO0FFsqbvAS7a+gk+9cRvHp1+/L9W1ZIjYJg3rT3xLPXjYERGRzvVN08EIwj -zMRZqQQsU50yrLmE516aKIgnEnHnFRNV3X5sIJ5VZXVTBG+S8dzU4hUWrd71BOBW -32mH7/+EEBAWw5jisJP+rG+sltfh0gwk3oyEpsRBf3GKPu0bGyqQv/n7DXqC/umx -XOfSCvbh92m8pIm7PrQwVmxhZGltw61yIMSMdW7DoXQgKHdvcmspIDx2bGFkaW1p -ci5jdW5hdEBuaWMuY3o+iQJXBBMBCABBAhsjBQkJZgGABQsJCAcCBhUICQoLAgQW -AgMBAh4BAheAFiEEtgBkYLYKgOeCBiRJ50ffH5V1o6oFAlnIz+wCGQEACgkQ50ff -H5V1o6pvJRAAkxE4HWvOUgKZ2hgeXQc6QhX+HBi5QfPLgC5bC1BkCTcbXuPdKuZZ -Pdg5J/+0GGbtqWSJnXWXL1D1VZWs6lpgM9Aclsbn0XnsHSX4ukyafrR9v17CnUMM -XgXoggTs1a3jd4xva0QDQq9wDru94cZU6rsBsjimeNvfRkiG6buAHqZJPblCQ6VD -I9OPopHpk+rV93Bj3gLVnrbJAKNNHljcxFRV7D1XC19aFJjrGjEIYBCvxK26Mg3V -YMm/jo71nayFWyS6/ZaEPTCVQCqrgX6+4ACXo/tMTSyFQ8yUMXKmqMZXNKynjl7K -eRL08iC2sZ4B5e7ceuu95xv/4DzImQf5ETBbASxiyrSHRRb60tDskwjh7pFxZGHW -0G/HAT3Ss3wPbksPwxsMTIfgOLBqSiHw2ZS92Y3DQbU1KH1XWSYdhwCAm9qF3kKZ -yZYOiKDI9KZ3wbF0e7p29cvkmJ8DbXtxmLps7J7w5Oe5UIqVHr4GYovtSuzRS+Ax -UEpBWeQOnxKNe6/oEHmuLGddHcE6U8wUGGuz86gnhU+r9tfSkA/aFUcdBIiIiqYS -zMpqjqNGKD727k77DbJzbuOjCXF+cYiyCK/KvyYc3XMNK71XI7y9valWbt4zNyjg -kyKjiZScCaHv0A7LDalF7gOhspcevd0dapstkMv/HvJg890qO7Ox6Ny5Ag0EWAOS -dgEQAMh8MN4bixLbHcqoI4hjIbRCji5qe8hZeOdB2PaD3B0tNlOQQtd+9LLDUoa3 -TgotgAg23uNWccfOVnLmjtTlarp4Nrpl9OO5o9sULIkwBUQy2bELvHEBaBMvwwS9 -m5O04XytS4fjcmQLNFGj6Q5BqHUtA3vaLAPuE+jX+DzmGnmr22FRUnQykuJVG6Aa -gKSpw/08yhcRXKbhcehTfdpbXk2zqIxjIi6GbxC2POip/SrhWfBTNmUjR8dWe+Sq -Lrnxq3ZHgqGWFWIrs0/n57doreHSKSJZxfssTLeSwfzEq5hAgeQgBSbcc7jHHJus -g1GUEllovb1IMSCcL7ecNAiAU9+dwxnj+Fpx9K+WKASqEW4e4uH09JVrzF0xv1dp -asswXQpTHm8h33zIG2tuio+qHg8oA3wuWhrFWqsNVHv6kOUEakyXCVe8VS07UtRG -plapHysD0tM0356xdY0LZzvz+KpH4AUURvQVxhq8pB6Vzsqpl+mdMG1dj+I/qdNq -EnnA5eclV6ZSX7F320v8V52kpGjf+5glNvbpdunAFTcQ5Az7p87UhYvSvSzNk/11 -mCUBlzO9TqZjjUCRhduJce1qf5KG5x7W4xg84wzwuHki+zAOeqra1mizPuHjygDX -LdqtKunNLki7NENs6HIUuuDHINGMy9bIp1jzda1yw5N5cKSLABEBAAGJAiUEGAEI -AA8FAlgDknYCGwwFCQlmAYAACgkQ50ffH5V1o6p+MhAAgNH9VwQIPljGjT7SLdJN -echT34XWzoPRoQ3GBoLxSDsUbmhVsPUi1LezhrlJyKSsSkV7UCbLPfHx5Io6O9Dj -WFj7i4X0Riv8IPQKOjLhcORvJuN9QgUv2sK4nm+oj47wAEVyQj00wWZPzQvfPI4i -nQofD20whw7JfoEg8rT9eUFK3akn0tln+Oud3o+/o7bk48Wc5hoLzUouiQ5W/Sjb -ZgUCkAIKZzkDOOiLREpsxw55nXL4Ty1A7I8JKSCenJWrDs2jm8MSYm2u4hT3BsHA -pQksGIzDVxbZ3ghlJxAGuUQSMfovi1dYqgd1Ub0wurTCFLnqEO3HU8umnzZIcEGF -5uP6Q5jU/FDHZ88J5U6RUNAnoA0EQ1nPnSAwwRxhBBGAYdr0zhNOCq5mFKdW0LDX -oD37y8KB4m9IxL6ITzCdnybWQHdUiRJYMD2zPB+3pigYk7B8BfIC+xto6OwKBqam -I6l5AkUtLUi0za/qh4fuy7a5G7v2VU034eEP6sN1Wi2EIeAtLQZmv2Hr0MtTtnN0 -2V1xc9UBfG/fx4/97KtioE9QHGedRPsRvnG+nFKoJIoZoJt/ccduBj5TQHQkbqtN -foiC6JflqMejsBeoZqsdRDEpsXJhqFERK9K5DJxVbFngGHlaBOKuvPasQj7vYgjC -TCZ5EXtaPaEGEje5svkvfIA= -=LEjS ------END PGP PUBLIC KEY BLOCK----- diff --git a/gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc b/gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc deleted file mode 100644 index bc596a4..0000000 --- a/gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc +++ /dev/null @@ -1,63 +0,0 @@ ------BEGIN PGP PUBLIC KEY BLOCK----- - -mQINBFhri/0BEADByTMkvpHcvPYwyhy0IDQ1B2+uU6AWP0QJQB3upM/YqxoJBeMQ -5SxpO+W6BsU0hTIF90AKIgiiDtMH1oNhHnzRXqePKORIgL3BbH5OxGcbqCYk1fIK -k43DliCN1RcbTyRVREnCRQGWMTUbRS/jQ3uyTAX4rT0NhPWhPy6TMLGEg6WJJz0I -zhBEw3TitvAlq6XHbi5EZYwUAHqIcuqr3sS+qkWqlIBlahu1hqhTcmYGz7ihjnWk -OFi1rjRfLfudAtgFpUSmsixh2tifdy+Cd8OBQbtF2kM7V1X5dUzw/nUBXm1Qex2q -ohRmCspwqivu7nlDMrLoilmPaeoR5evr5hpIDdfPcJAPTJk4n56q6MTHFJWkGa0y -q13AJHLANNjQ/dF+W6Dhw9w2KBpuw0iGZQBBf5G9SQ1xJ+tU9filaldsTAX1gMkV -so//kGEbuRIJnJr7Z8foE/zofFyoAv21VWy2vpgQ3CnEWOZMSmYH7/gZqcM7nfkj -k4zAijpjYA3qlXoWa44/nrkAGvt7sAMsxY1C2H7tr3h3/rwyfbBqQ9nMpNwYLXXa -Dil7uzyqlpKDjwWCzYd3sH7ATyT4htrd0BY5+IFimSfHyLwixhakH8E14YYyV9tz -krB7fiWdg7+zDThLtZMvtrehtkjVDPT50xg8TMr68hd3GRWBUJHszMTnlQARAQAB -tCJQZXRyIMWgcGHEjWVrIDxwZXRyLnNwYWNla0BuaWMuY3o+iQI9BBMBCAAnBQJY -a4wfAhsDBQkDwmcABQsJCAcCBhUICQoLAgQWAgMBAh4BAheAAAoJEM6N1qGlCiHk -jGoP/3fvimzczcaqPM8lgY9fKKcr2DhH42HF+fXsj0SvPeEoYDuWwIcsTGna6sdm -rhCD/mB6eCNivAOcZYDH7j3YDgdFX2xy1sRY0ylFuyfcOT1Qn1xNTglSaf00gUWD -gLBQB/USphB9Of6U1ka4gLJpCWKoZ3cLQe09cUpq9HOZYs/gWSNx9UTr06fcO0rt -gZpg+IZJN/R2ORhQBwk4n2Dtx5J+Xyoy7ht1Fwz07BWAGJ4P8oJOhsi1LukDD8ul -3+6IeoSbRvyGpP6boegaMwxPR10VgsrYU2t1cK58iRv/xJ3TClb0JBn5aI3Bmh1j -mPROrC55tvxRoeRLmxXHzbPZpWdbRjEcf9SEiAGNTgo9C+eXbubeSETWgisfJhZ4 -ebhkHnfze+e+hvbaTSoFyMbKeOlfoYCmaDRBgT53i72HIkvO+HrVcmulZytw/yyO -HuwObEFVgn3AeORvrb8I1kiv5W4wnZxDslhCeRR+wMGiKhc9ewU/mg3Rqo6GN+8m -T0DHnsHuq1lu3WYslfNYkBSonFcctFD2KXVozrwpn3vWJ4Qt6qu5XS1lDCD5WshZ -Xh7qoISWnnMqsMyBW/R7WyiABeIz4uOgSkRwT2wSUYr+JtBZIjREy2JQDVhjf18D -L1Qa7OxSes8YwWSx1pQAzwbfFx0gzRDyIT/39le4pX430yTQtCBQZXRyIFNwYWNl -ayA8cGV0ci5zcGFjZWtAbmljLmN6PokCPQQTAQgAJwUCWGuL/QIbAwUJA8JnAAUL -CQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRDOjdahpQoh5GIsD/9WlnEZKsuJaPxp -xuOcq5oxbhU/M+/K/OR8EZI2dNVk0p9sbwnUHK/Ag/N3d1KWjVIvuP1XNo+Cn8bO -WM/HUJqCwCh56nmrypg4atjfqYCObg0Z6NznXInhLQ6B4QSbjDU56Fm7sKPDYc6u -m0GniaywC4mxlltSxiTpGhQxO0PXGF9FA91x9GVikbmEjxt9LQTjaN+Qbva2teof -fUMuGiAaBHH/nhp62jpR2otw9hEIJKIEHTltXgD7wIsgmZV9BH6YMuCT9gDxqsgh -IXxKZEXrNEQksdyr1tYGyBbKDBsFPXh0+y0nVnuCLdDi2tFBqRZqJKiLBFGSsDKI -9T/9l/Yk9Cq7tcT0KYc7M9F7nzZAc5F2Odwp1MEY9iJXZI2QTSfmuBu6Xs4hibOz -UrkvRpos/4NPwuwigS9jTr5FzeXlSHMY//aHrNVkbdoyoI9ycbCj2DrXN9NsHjEN -YFsBQhR/LmPv+MufuEREUh1VheQQNRi+c8ox2ffjBv/laQHHkOJiNmIEZJMkDlR0 -YMKKwHSTflgycU3IOPl1ZAno6iZ/eVq9m29UeRw5ecZKjfLCtDj/jUIcNJDi8OXD -iHlOOh1lcY/6LF0C0u6tVtOTdBo4OE2mxruk5cPkEXr0TeVYL0T9lZ2mthTfuDk5 -5M4Oo9Bwr5JjpwFrdUIYfWE5iBQEabkCDQRYa4v9ARAAxaeGX8UqCkwGndCJBSvQ -laGelyssGCxTTz4c8PvoG7xy9hF+0KoRLKm7FjGKR+I3PyqueTmGFP5SHFC7g9GP -aA0dulxUKLtBXkjZ80Rm+tO1PDhTj0PnovdjJtWD0N9xj4/Bqm0KZAKd+bH4yeuE -x/xEGN/ETd947B0ZIcLVlP+sqPkWbO3BUboobi5fBbqD9AObv8fpTTXiAZPH9uy1 -WKxfNTUgww2I5zmwmofkC8xgMBg7Y1pAVWsKaB1sKufDkEseaYsMjgpxSXhTjUXE -0YDs9t/a7BAOS3mH5jhnJzcBugh6CeWXVicOTlfQaAO1ExxvecVR1eUIhJuquooC -OsCldkbRUu0aHtFrfB+4AuNSXqmik1LBpM+ria2hfJpiskvBPpkod3Y5qnSTRxda -SaisQMT2APWNIz52FnhB+Hz3jkdmLwY87bMnvZzr9QLijbtN3bs6HMlPeQ3z/5cD -Sa+Uh/dfFX9be1nCY/XYOifSXOSzsINd0K99U7mYo6zHajOyySgv9LTpEnlzaDJR -yTiKm6puzeNeCNB8rWxDX+wIsg8TQOU8ySpAdHgTy5thTEAhy32rCR4Gwq0Lrep2 -MN39xp9/jw8xhByPbH0L/5mLzu+6EUhsPtx8tU6MSJ3CIqwMkaWuSnTy5JQ6QA76 -X5F47i+iH2WdDiFii0kWvw0AEQEAAYkCJQQYAQgADwUCWGuL/QIbDAUJA8JnAAAK -CRDOjdahpQoh5J+eD/wIMs6332M0aune7x3xYXfB8xx61AbTivudfNgzBNSV/QKM -OQ8vZG38QH03OLWwmORJ4aFCAm5lQCecC+ZaxsUD0p7pSMhfDpiY3FZRiOs12Lz9 -FR2fy/HT3H/kT6oTAj6WsXtvoeV6T8bzpAy5Zwq7AOCdWwBluZKcXRp2OGka72io -bRjKoEsEsduZd0Z6DkTlP4Uw1eBBwrk5DEXyC5rLjU+yLeNIi+Z8g4ifKN6dQi40 -cFM1Z+K+IxPA14W1l2iidCkGaSokA1Ve6iXCSHgSb2aRX8SeOC8QXLfU5AuvUTp7 -WIXejO9N9Q09zyGFvVcjISzeXUX84RHRVHPtwJZ6DjinBsGIgpx9g8A72t2YnDgB -/NPfZlmXMFS/7IyimyRj6CW3U/Qt4Ep7KGt7gW7IgoUYQJ6PNCbJP4oG+EGjMOD7 -Et9t9JHwRpEP6ADzzNIifZJ/DVwf/YgXuXChFIomEH0p/cdR8htLE9/40mGqt6G5 -gTRyRNuMP0SlqD7Gio6MmiJwLlOS9HDWd9DlnXlhURCMZWoxZdr12/ZwnPNP4uj3 -HickosiYHeXGBC+IX5/wekV6YfZACckrKpSGaAYXMJ3hl5gEtDONYyY7iEHbeaZC -4TPV6F4wRTBhrQPwrYonBIIrSLSX1QsXSxuG2Tgq3z5nrzBi8aRJgRqLkPXVUA== -=59Rc ------END PGP PUBLIC KEY BLOCK----- diff --git a/knot-resolver.spec b/knot-resolver.spec index 9b5865c..988d83e 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -27,9 +27,8 @@ Source1: https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz.as # PGP keys used to sign upstream releases # Export with --armor using command from https://fedoraproject.org/wiki/PackagingDrafts:GPGSignatures # Don't forget to update %%prep section when adding/removing keys -Source100: gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc -Source101: gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc -Source102: gpgkey-4A8BA48C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc +# This key is from: https://secure.nic.cz/files/knot-resolver/kresd-keyblock.asc +Source100: kresd-keyblock.asc BuildRequires: gnupg2 %endif @@ -160,8 +159,8 @@ native C implementation, which doesn't require this package. %prep %if 0%{GPG_CHECK} export GNUPGHOME=./gpg-keyring -mkdir ${GNUPGHOME} -gpg2 --import %{SOURCE100} %{SOURCE101} %{SOURCE102} +mkdir -m 700 ${GNUPGHOME} +gpg2 --import %{SOURCE100} gpg2 --verify %{SOURCE1} %{SOURCE0} %endif %setup -q -n %{name}-%{version} @@ -319,6 +318,7 @@ fi %dir %{_libdir}/knot-resolver/kres_modules %{_libdir}/knot-resolver/kres_modules/bogus_log.so %{_libdir}/knot-resolver/kres_modules/edns_keepalive.so +%{_libdir}/knot-resolver/kres_modules/extended_error.so %{_libdir}/knot-resolver/kres_modules/hints.so %{_libdir}/knot-resolver/kres_modules/nsid.so %{_libdir}/knot-resolver/kres_modules/refuse_nord.so @@ -377,6 +377,7 @@ fi %changelog * Tue Mar 15 2022 Jakub Ružička - 5.5.0-1 - update to upstream version 5.5.0 +- update upstream signing keys * Thu Jan 20 2022 Fedora Release Engineering - 5.4.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild diff --git a/kresd-keyblock.asc b/kresd-keyblock.asc new file mode 100644 index 0000000..1b34475 --- /dev/null +++ b/kresd-keyblock.asc @@ -0,0 +1,126 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBGImJYQBEACoQzmvkGLYGeltnY2MzvjZlpZk/M670+vxI6e7ofto4AQQmvGW +0eann8bUl8qZnliOvqq57akCRTYLaT9ArFjfaaYs60qFD7KCFTAe4GHry/J4aWiP +Q7jftfpDerTLr+LvikJ9dJrMLV/TA79fgEb3DcGOtuZMventwJbZKS5iiAgaN/mW +ZZIh/kQNvylKy4aTm21yx2XFx4eVDRd1aucJWTrR9DmM3Nm02rpNvQxjxWfDU0cg +ne6iWFHseUDA40B5r/hwaEYD4cDOXh+adI0WkH5662TkrewzxE1LE+uyScTEL57i +zTHyeEW+1DHSyprtTZggUThRay4RLPIW4PVV+kkv/9kwtk1LWIbHbzilbKkKKoea +uIzTGJnxGGbV0uyRbH3QJTtddags5rBskemqPgg9momwMIgUtBSQn10zMX/s5bUF +yP9MwKVNzEkgtxeWvjSmKCpqmmD8oiXO1iL5bcZsJfJH1p9nHqDVG4+EJjSbu+wr +eM424BxXap+bdvoxKr5ofTswEyvlwn47aejQQVciDDb+AN8nufJeOrfyYQ798DXj +PhkR3CFVGfLCGkAAoTrhEePmn1DqKJMxlDB8YSZKTvF+TNBLVpVExu/MsVMX7mMh +uG+OFrDn/mCFe+q0fqMEQOpa5XFzhzaRd93khifR+sYnF5fiE92nG60psQARAQAB +tCBBbGVzIE1yYXplayA8YWxlcy5tcmF6ZWtAbmljLmN6PokCVAQTAQgAPhYhBDBX +7ppEjzYtdCBad5qxINoKdvbeBQJiJiWEAhsDBQkDwmcABQsJCAcCBhUKCQgLAgQW +AgMBAh4BAheAAAoJEJqxINoKdvbe5tsQAI4KnAGf+YkPGLdCTQo7bi9eww3zVoJk +m0WKTf67zLd7JC8puCGPWRVaVSBsuUKDrp57I3h736+Jx0XiwRA6xlFmgvVIWrFr +swGXlLbdutezXE2ke5y+86uj6k5TQKn3jEWfmkRigFLlUy5U+VJEt6b/i7e9EmMb +T9dI4d7JW7MPY74jYlFJ4klZvp/BL5ldz9R2yprOnwBX4Bjwm4FFR71NPC/iK2Dn +19pSH+YeRpsTU1I1vBMzz4qlEkhhE1+pqYbxYpyfkmSxJxGvD7FFr8GHnFwcnqqv +zZuinIz+eGf7iSql6yxz7OxDnVhBYnSQpCkSWtGdhHEVtQo0uA7gcxcdz5URBScQ +ofR/Zs/fvEvWqRXKm+I/qC1nK/glfaoA81xI6OGOPkrYEoLi9WKGK0nWSbnux9qY +/vyzVAKUDjEtYFm/Nk/23D4tBcC0/tZfuVFedWa6rcqKVNoeRdu2Nol9L4quL601 +vm/kIQDhUsQmWbvIkwx6pHZoFw+9COY1NFINOqguBYzyMIlVJpo6Xns+1gldJ7vI +0w6F+wpmUkFNnEACQ3dG/uf6WNzEbgEdKFQ2xgLN4zY7nJI3QLRlrXntk6BzG7Lj +iQe7ZS4uhaQQ9bzTuvhi3qKJEJUGaPQRvYJoCoDQs1gLR/rep0qQpRsUt7Tzb0uZ +xeeZHSvvhDq5uQINBGImJYQBEADaE8cZEkr06+TnlQ+8qSBHRFJSEunNKjUr8t0y +zwPgFZhRIRtw3mCFqDEv/eBPw9tsQeW6aJz5+VI5t7Ifkt8krHPE8GT5N33MyUKj +8sRk1oQNt/2JdDCOy5ZigyqFj31/9XeIWvlQbBLUTL0V3EPAmcipegEx9VFD81FW +qH4TbBer0oLsa7zFnZ455FIn1a76UNC+73DE3+eV1V51euhx3TIgn76SXe8Qf+jg +Asv7Ylfe++g3Smkt5UAgEZQOFwPbYMjS4U5sRq8hpJw+nBkI2n/vHoLeSKWZjt6J +/yth+tLQmsQRwyYk97Tp8mzPpmWSMWIGPDrfyBdV1DmToQkWDozuBs5Mz8gVvrMu +2mNe4O0m5Xv7e80Gm/OJxSeB/o8tEXFE12JEM1c88OZ8Iz/PcfSgotbcS5zVxRcm +yU/ZqMRNvJHtG932DIhZ/s0NdAxnsAeCz9gaR6Z4orVXb8G7/S1pe0ab66k19VX5 +wFoPIz92SUq91VbrCsjfHi4FeE7h2OL9QP10Liv9qOxJFYvy2fvWG9EXuknjaZsD +igmC1DuX/7uWJbrGbp9spnuNsgm7wYG5nFH8fTnNKtaMl2/D8D5WbB0k+MJnBDeW +MyDKPsaCStX2ih90DGSOkWlZy1k3X+v+PTPPxu1ry/MePSo0UHud9L2oWLbnz27I +bBRymwARAQABiQI8BBgBCAAmFiEEMFfumkSPNi10IFp3mrEg2gp29t4FAmImJYQC +GwwFCQPCZwAACgkQmrEg2gp29t7Trw//cN9UEaN1WaH4jFDKIST+xdLnSLvk0Izt +hHqJzzW9sRQYINvqz89EkTUrjelbW3Ib41YVNNk3S7hOm5OJm/fRHdQtItzuY/9E +RafF5+PUiDj5TRDa8bRV7sCAQLoztfr1ozadbGE7e8HrrZv4DcZ10joCpLRZm04j +QMBeZcaaEa2Wh7Xf9VW4aBJ/DU5DevsKeTRpCuwtw2lEf+NMl3PogPa9glm7liQu +DKU4Zlf/31ZCudAb80PugOzWM2i1DG26G/b7z+8N59m6dBYWeSvcqU7Z9Q4rU7bV +R/6nST8GyLIU/PsDalvKm2B3NDcXerN8lT9zU1QBzT3OyL6Uy/UzXl6YnpxFT8m/ +Gm4uiLS+gWD2TXh5BKGsuU4zIHakjglA7Gtb6PJ56+Pkz95apx7vAhmnJxgw7qAX +KAH0Rng7IxEeL8Fj67tzWTQPs0PuAty7qIgbeft8hvhtk9vfFZb8k3bhX59b/+TO +tbTOCjVhmq9bZdaw60SBl3LuyUlnlGmrqvPzVUdcAc2zvnxjEt9yVioS/M8zNRC/ +SmWbagZ/xyf2iiEAbo0y12t3heztdG8jMoMrImmUEubfPiAfCN2ys5zPiXW2jio5 +vvopiu23y37ew3zoAZrnfmFW0D8A8iD2g0kl/Ysb2dXIYocQ423ADN1Em/+1f8j5 +3P6DgfI04ROZAg0EWAOSdgEQAMcRDAsGV+ptULOruphwEUVNzVYIAW2qIp6E6uwh +Ocq6xnDieFjCUpDFy6aCPTXEk6Ft8cEIF4aUPJ1ip6YqDgh9jafBLI/Bllgwmfsv +sAasJ7K2vhUy8MnujuoNmOOKbiJ+/4ZTB2TemVfHqgwXidy16wjxoA64tQcCfQ9+ +sZ82FahqCU4qB04joMaOEj9oaS/L6Osj/5ex0xX7d/VG4Q58j5i7hJcWMnKECaoQ +4FHHF0eoqt4ginPcuDfzJbCJUZ/CBBP6cUjP0GkcfeVaDW5LzEzd7Nx4GZFhXzNP +0+9t5nnsGVpNHqstp7lFjBXf3s9IsGqouQHkfRMNFQUGfAGxShst5tgeYkI7J2/I +2/kAWQuYtns7iPaMWjVY9Iy3dOEzrBHCqucHgaL7qifKtl8TUOdVkypvFndVdr4T +hLljCt8ItQSsYSf53jQ62hFmZBeFE9UCx2OKYyP2gUz1GjFKBSsODohrefQisoVv +77McAVuqRHmDirNeI4wQbrbUZgR7HawMQrP88PgJUqU0j16V3hOgfn3aQDDMmZ36 +wCL5F+izQ0TPG4V3R6QA55ahRGjTOhhNJY+Uw6YUy9ykfos/eV4mZjvHjP9vWeD/ +7tScqidUAtU8VtFsSU6Qh8C0spxQSh/BXWOvsPJgY9qUm2IMk+iYHTjVkcKPZHHJ +dj+hABEBAAG0KVZsYWRpbcOtciDEjHVuw6F0IChwZXJzb25hbCkgPHZAY3VuYXQu +Y3o+iQJUBBMBCAA+FiEEtgBkYLYKgOeCBiRJ50ffH5V1o6oFAmFmsBgCGyMFCRTR +36EFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQ50ffH5V1o6r5GBAAxkNaB8zi +TVWBZ5geqcQeoqCeTrZjDZ1pY32BbjefGb0z0fmRzH9ESQBGH+b46PO7cibOt3sY +d4ZX8GxG/vnwsU3dOspaIQfHH99yXr+sCRkcr2k7DWTMFSX/5JkhlrouAURpIRN8 +y4+OO/TkWFY3HAIEy3VkhwIoJSUEDfSINb1KHnotNzHc7s1Z3yb14K14XV/LnQL/ +/NTz32NBGSDAt3C3+w4h5WKhg+kPcuno1VVUHM4AcqqLkhEbNN/QwQULWbrQMqcB ++JJWlEgSqkhn2nrw/i8q+tlK7FBi4DhID99xRljt2HcPt7gqhnZ/2OxfoHGHui/f +FPgmeK+c/wHZ22FH4ly0XwsSdIjskhRf/XPTaBlgeorfyIEBFBeFkgjdFUNSpl1M +Tso6ZYxXkLg1UxEFtI+X5Eh7zpirfs6jwc44aMHKabJY3V/MBmYqUBRR3H6xnIFd +gfjVeFAR65w7MElJXRx2kvJ5ixpV5W2+U//MvhkpN6Vk1Y2G9NXmQeGXz2l+2A9V +4qpTn/nVAIchYFtVPzsAJlyPAqB7I45uNMQOcsGdn4W5lLgD4MNdgwIUce9jQ1Oo +F0BnZSCJGLjU0ZxVUOd7fwF+P+Y8RBxBIhVcvxaluI3YmT0roqCXaJaYGAWgXZCF +9g0NnfvR0dRRZRUeT/qLxJNZksK+iFtLIlu0MFZsYWRpbcOtciDEjHVuw6F0ICh3 +b3JrKSA8dmxhZGltaXIuY3VuYXRAbmljLmN6PokCVAQTAQgAPgIbIwUJFNHfoQUL +CQgHAgYVCAkKCwIEFgIDAQIeAQIXgBYhBLYAZGC2CoDnggYkSedH3x+VdaOqBQJh +ZrAYAAoJEOdH3x+VdaOqVjIP/1N5v2soWf7T2OcromFmL76QDqAIwzYtuwookFK8 +UBiGEAw+lz8dHSPqiQF8IiaVxroWeKp7vHKjSeRCr2a9eKsYzTdz3jStwPnKZGpP +5OMJb2x5dZNxyKaL1Fyidq0N9LDIkxanMORPYVA2c1tHmFJFJoj8EmUhIYN8iAl5 +ZG2u3vELI9B3ZvNJb8OJUxAOcvPVyuxKMzpJY2C8K4Ec2joLugG+aCoZh7DTi4EO +tqAOxr/jfCPEdPHEIKEOdqXy5DtoiA5e6uHA+DpseBC/jM2jrvO+IRqnFvr7M7+Q +yfv0ZbkFefsJp5tjojCv6xJPtz/BKwh9wxNtUJrZfFL71Otz4/0YAwiX4z+kljop +x0i4ALVUOiWb7i/2PiP23n4JnPAfLdlClk9CeTkCOu0CAgBvrKi1w/7eEnGqOgTu +4OaGfFaOtTjuFqKS0wOdBRGST5h3pKjxrDxN8HgI+ZpF1EfMd6ovfLWpMVIwE9cV +ueimcpAqfSubQECTjwnsDSmzc26apaCHL8FaXf2pG9J5uDczxdcUzVWfgb+16Wdg +bFoqJ82O2SCysTcEkrNH8m2R5i7iCaO5WlQFLf2FHOBWLd3RjV1ztCImv4di5skw +QLwgW2+wi0QowVPgPc38JAPa73INRhaPK3JUcwqNEr9JUNfRGyL+eTwTX4b5YKHd +dJ9KtCRWbGFkaW3DrXIgxIx1bsOhdCA8dmN1bmF0QGdtYWlsLmNvbT6JAlcEEwEI +AEECGyMFCRTR36EFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AWIQS2AGRgtgqA54IG +JEnnR98flXWjqgUCYWawGAIZAQAKCRDnR98flXWjqjpMEACClbUGJ3e0p1Nty0Lf +kRsoWZMoyeWSoBA0owUsQOyquKKaSj+40qHMDOhbNfJoLpwFsU5zJL4I2rhDlW+z +Y5Het5x1afS0lExzXK3RMPWwhUwMmWevUpW+VFjvPyBhdlEP8E0Ayj6z/p5GEN9Z +9yruZfz9ru48KDvwUYz/f2V0cAPqOIcSM6euGLXnK4ExML+8Wiqgmht8qBozD0Lo +odyAWMR1D+XkAMR+ugwUfs449+x7zzzfkRh8CfggB9mgMK0i2b66MdWFHYW2c9jc +3SIEaWZM56pEG9BCZpcoiiGgCOMWQ7CEn2dOfH2Ah1ZiICyDnL9XvESYJBoRLiNG +cLrD31GJzUrDPRLzK9f8j4AlWN7bNECw5pmPYE2vizFOuasojBV6hlg+c0bXpQSK +ybg1eQb0rE5yOWrA0pP5yNc6ZIBxtjbYLbwmWltb9mWMznVSNfcjvA7QXe3srYYL +AOW1KPz2Ly8qCTZXcpXx2Z2mk4FTNDIj4maQxLTIURHWHckHrXxENxMXNcbaZ4d4 +LVz5f1RBhsFfmAXpVu/FTvXIPlIWaNVlQDWBMxlVidpeztB4XgPUqKWmtMNyCTsN +PeuxrRiyIm2ccXE+fcuPDstLIeQdX+U/rijx1f588i6nt2oD0vy9tEchFeiczql1 +YzYNM5U8u/rCYiOxmQWf7gZecbkCDQRYA5J2ARAAyHww3huLEtsdyqgjiGMhtEKO +Lmp7yFl450HY9oPcHS02U5BC1370ssNShrdOCi2ACDbe41Zxx85WcuaO1OVqung2 +umX047mj2xQsiTAFRDLZsQu8cQFoEy/DBL2bk7ThfK1Lh+NyZAs0UaPpDkGodS0D +e9osA+4T6Nf4POYaeavbYVFSdDKS4lUboBqApKnD/TzKFxFcpuFx6FN92lteTbOo +jGMiLoZvELY86Kn9KuFZ8FM2ZSNHx1Z75KouufGrdkeCoZYVYiuzT+fnt2it4dIp +IlnF+yxMt5LB/MSrmECB5CAFJtxzuMccm6yDUZQSWWi9vUgxIJwvt5w0CIBT353D +GeP4WnH0r5YoBKoRbh7i4fT0lWvMXTG/V2lqyzBdClMebyHffMgba26Kj6oeDygD +fC5aGsVaqw1Ue/qQ5QRqTJcJV7xVLTtS1EamVqkfKwPS0zTfnrF1jQtnO/P4qkfg +BRRG9BXGGrykHpXOyqmX6Z0wbV2P4j+p02oSecDl5yVXplJfsXfbS/xXnaSkaN/7 +mCU29ul26cAVNxDkDPunztSFi9K9LM2T/XWYJQGXM71OpmONQJGF24lx7Wp/kobn +HtbjGDzjDPC4eSL7MA56qtrWaLM+4ePKANct2q0q6c0uSLs0Q2zochS64Mcg0YzL +1sinWPN1rXLDk3lwpIsAEQEAAYkCWgQYAQgADwUCYWawGAIbDAUJFNHfoQA/CRDn +R98flXWjqgkQ50ffH5V1o6oJEOdH3x+VdaOqCRDnR98flXWjqhYhBLYAZGC2CoDn +ggYkSedH3x+VdaOqtBgQALeChWgHEGe/8nwKWrC8CMQyKyiJRlSfvERi5M40PYxw +KC7IHo+ekMdlLc8kVkv5WSq3zQcNoRMjHutZlCVpGJat5PwiCine6I3Z5JfKsU7f +JE4KXPD0jr9kCy/IHlCWsKLZTHH0LOk98tqZcFQwFM5nQEzu8Us86BxlZs5IaN0j +ILD2qUC+EYeg0hd0kya+16UNao9NxCeUEoSwxhtB4IIMCJTUPx0pWErCHxeCUjvx +Pd2h5A106DT/3fa8uhPHr9goHtfreV0soGuxu1rqGrMn7XcorsGdt9XX4tyPHcXD +XCZMLedjYTu7OcYQ63hi+ZWUXJPvcIrB4StCumaFECwLodpdDWB7n6OF8r+X//eP +bjS8qt++A20LGD4l7BrWxDeymrnqLmWN8RBf2xV4ytVfcRx1ercFMGiNRUvGSh+k +gP6J7D4yT4xGTq+fCtS6BHyWMB0loXcWv0Im/6znpIpUcvXyL68s4Jiqukt94rKl +wb/IB6MSWannxk8UzWfGgFXeGUrR8YWLuQSo26AceNOyu2gMW+k9kYi0sqkBzMPk +1zWZN/gSNpDyu7AWGpv4RtOKhJhaux8zwtwqozqSx+plpnYz5ifwCNMuznM6T0j4 +msKQiK1N7lIwKBGaT2P8SJ/ecaJyudIz4ds2+GUl6fxqSR27Egs+EUY0BmS7wESr +=dRuR +-----END PGP PUBLIC KEY BLOCK----- From 74feea29d72f020c48b24b58a9a0df700fb9042f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Tue, 14 Jun 2022 15:53:31 +0200 Subject: [PATCH 102/126] knot-resolver-5.5.1-1 --- knot-resolver.spec | 5 ++++- sources | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 988d83e..c66c1a9 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,7 +6,7 @@ %define NINJA ninja-build Name: knot-resolver -Version: 5.5.0 +Version: 5.5.1 Release: 1%{?dist} Summary: Caching full DNS Resolver @@ -375,6 +375,9 @@ fi %endif %changelog +* Tue Jun 14 2022 Jakub Ružička - 5.5.1-1 +- update to upstream version 5.5.1 + * Tue Mar 15 2022 Jakub Ružička - 5.5.0-1 - update to upstream version 5.5.0 - update upstream signing keys diff --git a/sources b/sources index 99242c7..f4274fe 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.5.0.tar.xz) = 765e3c22978b0faeb910d1f3442376240452b29c526ca22477e4ccc8f0ec6eb12a26869729d13e1cb9b306e06acf4aec213094f5ec097fc816ffac59645fd221 -SHA512 (knot-resolver-5.5.0.tar.xz.asc) = f19a6bbf2a81de40468294d7736ae4130ad94330fedf446eba1c170b5bf0c6d93217b7f8f7a4425bfa7b70658553a1255cd905416799f789b25ab75641fbd303 +SHA512 (knot-resolver-5.5.1.tar.xz) = 544c427c1156774e865071061b72bce2e647b62c99e2bcee5e5af340e34f05a6b333aa2c6e3b66d4ed3a3d6136f69c0e32299f42be30d47b144c5f017b6ccf96 +SHA512 (knot-resolver-5.5.1.tar.xz.asc) = 473f5a8850deab1b71386c6f42dde3357aee103a9e4f276e3e973d88e0aa1fc1d867a28db6deb178cec33756397f32befc3da86b5a78e2ded04a5ec4fdb17950 From 61d44c4d90ff39ac7ae906b4c2171eb32dbb7a68 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 21 Jul 2022 16:29:43 +0000 Subject: [PATCH 103/126] Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index c66c1a9..bf2a594 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.5.1 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -375,6 +375,9 @@ fi %endif %changelog +* Thu Jul 21 2022 Fedora Release Engineering - 5.5.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild + * Tue Jun 14 2022 Jakub Ružička - 5.5.1-1 - update to upstream version 5.5.1 From fd2883c1ad868ae78b28d06c20980eacfa0f8372 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Wed, 24 Aug 2022 13:34:39 +0200 Subject: [PATCH 104/126] knot-resolver-5.5.2-1 --- knot-resolver.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index bf2a594..c65ed38 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,8 +6,8 @@ %define NINJA ninja-build Name: knot-resolver -Version: 5.5.1 -Release: 2%{?dist} +Version: 5.5.2 +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -375,6 +375,9 @@ fi %endif %changelog +* Wed Aug 24 2022 Jakub Ružička - 5.5.2-1 +- update to upstream version 5.5.2 + * Thu Jul 21 2022 Fedora Release Engineering - 5.5.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild diff --git a/sources b/sources index f4274fe..2a995bd 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.5.1.tar.xz) = 544c427c1156774e865071061b72bce2e647b62c99e2bcee5e5af340e34f05a6b333aa2c6e3b66d4ed3a3d6136f69c0e32299f42be30d47b144c5f017b6ccf96 -SHA512 (knot-resolver-5.5.1.tar.xz.asc) = 473f5a8850deab1b71386c6f42dde3357aee103a9e4f276e3e973d88e0aa1fc1d867a28db6deb178cec33756397f32befc3da86b5a78e2ded04a5ec4fdb17950 +SHA512 (knot-resolver-5.5.2.tar.xz) = 6eae5287931d22281cd2af468c72cd13402ed1a5d096c8f6d460e561950399f5a8cfc788450b4e951d8baac2d9cda7eee19fdb97235b83a28074e39ede7aaa06 +SHA512 (knot-resolver-5.5.2.tar.xz.asc) = 514839b0cbde4ac2d8181eae8ad7acc583b1380f0c85387435fa4049f9753a3ad1d83973b63138a62fdec6dd2a479ea4631ecbbfd9024d36d3e34f23fac916ad From 03a0f556de629a03ec7e1e24dd8d68d09720ce0f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Fri, 26 Aug 2022 13:16:26 +0200 Subject: [PATCH 105/126] add BuildRequires: systemd-rpm-macros This seems to be needed on fedora >= 37. Thanks bleve :) --- knot-resolver.spec | 2 ++ 1 file changed, 2 insertions(+) diff --git a/knot-resolver.spec b/knot-resolver.spec index c65ed38..69046f8 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -46,6 +46,7 @@ BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(libcap-ng) BuildRequires: pkgconfig(libuv) BuildRequires: pkgconfig(luajit) >= 2.0 +BuildRequires: systemd-rpm-macros Requires: systemd Requires(post): systemd @@ -377,6 +378,7 @@ fi %changelog * Wed Aug 24 2022 Jakub Ružička - 5.5.2-1 - update to upstream version 5.5.2 +- add BuildRequires: systemd-rpm-macros * Thu Jul 21 2022 Fedora Release Engineering - 5.5.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild From ec4331b71340283af97350c02c8a8e47f7b8f202 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Thu, 22 Sep 2022 07:46:42 +0200 Subject: [PATCH 106/126] Release 5.5.3-1 --- knot-resolver.spec | 5 ++++- sources | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 69046f8..d1fc3a1 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,7 +6,7 @@ %define NINJA ninja-build Name: knot-resolver -Version: 5.5.2 +Version: 5.5.3 Release: 1%{?dist} Summary: Caching full DNS Resolver @@ -376,6 +376,9 @@ fi %endif %changelog +* Thu Sep 22 2022 Jakub Ružička - 5.5.3-1 +- update to upstream version 5.5.3 + * Wed Aug 24 2022 Jakub Ružička - 5.5.2-1 - update to upstream version 5.5.2 - add BuildRequires: systemd-rpm-macros diff --git a/sources b/sources index 2a995bd..4a362f7 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.5.2.tar.xz) = 6eae5287931d22281cd2af468c72cd13402ed1a5d096c8f6d460e561950399f5a8cfc788450b4e951d8baac2d9cda7eee19fdb97235b83a28074e39ede7aaa06 -SHA512 (knot-resolver-5.5.2.tar.xz.asc) = 514839b0cbde4ac2d8181eae8ad7acc583b1380f0c85387435fa4049f9753a3ad1d83973b63138a62fdec6dd2a479ea4631ecbbfd9024d36d3e34f23fac916ad +SHA512 (knot-resolver-5.5.3.tar.xz) = 7bf29bbf82e71727c1f47095a04a12712ca89a6f34d3a325337625ad116f49a47a90cb402525fdbf59cb0889b64d7083b908c335d65429b24d776603a3a8f28a +SHA512 (knot-resolver-5.5.3.tar.xz.asc) = 1e95fffdb1c78a225b5bf861f978c1c18a9935ecd495e8f708ed4a241308b9302d2cf5a5ec51334dbecf50950af5f775bfff78995663cf1681a3dbc354d3a686 From 8aa609a4d97280f2605433272ab1d023ca4784f0 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 19 Jan 2023 15:00:44 +0000 Subject: [PATCH 107/126] Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index d1fc3a1..7817b1f 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.5.3 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -376,6 +376,9 @@ fi %endif %changelog +* Thu Jan 19 2023 Fedora Release Engineering - 5.5.3-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild + * Thu Sep 22 2022 Jakub Ružička - 5.5.3-1 - update to upstream version 5.5.3 From 7c9dda8448a31673dce454781af422a49468dea3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Thu, 26 Jan 2023 22:01:49 +0100 Subject: [PATCH 108/126] Release 5.6.0-1 --- knot-resolver.spec | 9 +++++++-- sources | 4 ++-- 2 files changed, 9 insertions(+), 4 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 7817b1f..59cff2a 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,8 +6,8 @@ %define NINJA ninja-build Name: knot-resolver -Version: 5.5.3 -Release: 2%{?dist} +Version: 5.6.0 +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -46,6 +46,7 @@ BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(libcap-ng) BuildRequires: pkgconfig(libuv) BuildRequires: pkgconfig(luajit) >= 2.0 +BuildRequires: pkgconfig(jemalloc) BuildRequires: systemd-rpm-macros Requires: systemd @@ -181,6 +182,7 @@ CFLAGS="%{optflags}" LDFLAGS="%{?__global_ldflags}" meson build_rpm \ -Dkeyfile_default="%{_sharedstatedir}/knot-resolver/root.keys" \ -Dinstall_root_keys=enabled \ -Dinstall_kresd_conf=enabled \ + -Dmalloc=jemalloc \ --buildtype=plain \ --prefix="%{_prefix}" \ --sbindir="%{_sbindir}" \ @@ -376,6 +378,9 @@ fi %endif %changelog +* Thu Jan 26 2023 Jakub Ružička - 5.6.0-1 +- update to upstream version 5.6.0 + * Thu Jan 19 2023 Fedora Release Engineering - 5.5.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild diff --git a/sources b/sources index 4a362f7..4edce11 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.5.3.tar.xz) = 7bf29bbf82e71727c1f47095a04a12712ca89a6f34d3a325337625ad116f49a47a90cb402525fdbf59cb0889b64d7083b908c335d65429b24d776603a3a8f28a -SHA512 (knot-resolver-5.5.3.tar.xz.asc) = 1e95fffdb1c78a225b5bf861f978c1c18a9935ecd495e8f708ed4a241308b9302d2cf5a5ec51334dbecf50950af5f775bfff78995663cf1681a3dbc354d3a686 +SHA512 (knot-resolver-5.6.0.tar.xz) = efa978a8885e9aa6459bad8016e872ded5923d6c4367bb9586764ebfbad903923583ede9cab6339107d32450bf0846a40b8ab72ba7011d57827a86d822b95840 +SHA512 (knot-resolver-5.6.0.tar.xz.asc) = 1c3ebe636b8295b31fffe08bd1ffade9d6c83a0584ef5cf84cb9f3951260b2e77272c4524789f244cd209381c7adb8c2e4b140e2fae616927a7d037cb187b165 From ca7908c5db2a17da3de341d9299484c8ffb2feb0 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 20 Jul 2023 09:25:28 +0000 Subject: [PATCH 109/126] Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 59cff2a..baf2948 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.6.0 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -378,6 +378,9 @@ fi %endif %changelog +* Thu Jul 20 2023 Fedora Release Engineering - 5.6.0-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild + * Thu Jan 26 2023 Jakub Ružička - 5.6.0-1 - update to upstream version 5.6.0 From e5f3491ebd8d210ebe3b1c7143d1ac9e4597fed9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Tue, 22 Aug 2023 16:25:39 +0200 Subject: [PATCH 110/126] Release 5.7.0-1 --- knot-resolver.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index baf2948..1e04490 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,8 +6,8 @@ %define NINJA ninja-build Name: knot-resolver -Version: 5.6.0 -Release: 2%{?dist} +Version: 5.7.0 +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -378,6 +378,9 @@ fi %endif %changelog +* Tue Aug 22 2023 Jakub Ružička - 5.7.0-1 +- New upstream version 5.7.0 + * Thu Jul 20 2023 Fedora Release Engineering - 5.6.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild diff --git a/sources b/sources index 4edce11..01e00a9 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.6.0.tar.xz) = efa978a8885e9aa6459bad8016e872ded5923d6c4367bb9586764ebfbad903923583ede9cab6339107d32450bf0846a40b8ab72ba7011d57827a86d822b95840 -SHA512 (knot-resolver-5.6.0.tar.xz.asc) = 1c3ebe636b8295b31fffe08bd1ffade9d6c83a0584ef5cf84cb9f3951260b2e77272c4524789f244cd209381c7adb8c2e4b140e2fae616927a7d037cb187b165 +SHA512 (knot-resolver-5.7.0.tar.xz) = 38095b94ef341717ba99f1dd354fe184acdce05cb234ff685d2ff84992d8cba6ca1b8b3623998dfd3ffe9d728282963c6973c30996b836060c75e1d2ac3ee544 +SHA512 (knot-resolver-5.7.0.tar.xz.asc) = a0403af705ac39d80ec0a3a608e0210f50bc647c078a8dc74a3c814b6c3541a777a2c83ce11c448a10ac9bfa8f96b38537c5a54c2d4cd15ba3ee402793eb92a4 From 85c3d04f41f838d215358ae534559a19f06b98a8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Tue, 29 Aug 2023 17:01:47 +0200 Subject: [PATCH 111/126] Rebuild for Knot DNS 3.3 --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 1e04490..fc823c7 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.7.0 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -378,6 +378,9 @@ fi %endif %changelog +* Tue Aug 29 2023 Jakub Ružička - 5.7.0-2 +- Rebuilt for Knot DNS 3.3 + * Tue Aug 22 2023 Jakub Ružička - 5.7.0-1 - New upstream version 5.7.0 From f05d71748e4997d5d54377907920ae9c6c02db11 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Thu, 9 Nov 2023 19:03:47 +0100 Subject: [PATCH 112/126] Release 5.7.0-3 Rebuild for F40, Knot DNS 3.3.2 (Closes: rhbz#2238522) --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index fc823c7..1602d10 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.7.0 -Release: 2%{?dist} +Release: 3%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -378,6 +378,9 @@ fi %endif %changelog +* Thu Nov 09 2023 Jakub Ružička - 5.7.0-3 +- Rebuild for Fedora 40, Knot DNS 3.3.2 + * Tue Aug 29 2023 Jakub Ružička - 5.7.0-2 - Rebuilt for Knot DNS 3.3 From 1cab890369b6e237ac46da54e50679b7ae23ccc3 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Sun, 21 Jan 2024 01:11:45 +0000 Subject: [PATCH 113/126] Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 1602d10..6a16a7b 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.7.0 -Release: 3%{?dist} +Release: 4%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -378,6 +378,9 @@ fi %endif %changelog +* Sun Jan 21 2024 Fedora Release Engineering - 5.7.0-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + * Thu Nov 09 2023 Jakub Ružička - 5.7.0-3 - Rebuild for Fedora 40, Knot DNS 3.3.2 From 0633c047993f20035725b278ea6ff349646d9470 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 25 Jan 2024 00:45:12 +0000 Subject: [PATCH 114/126] Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 6a16a7b..b5924e5 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.7.0 -Release: 4%{?dist} +Release: 5%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -378,6 +378,9 @@ fi %endif %changelog +* Thu Jan 25 2024 Fedora Release Engineering - 5.7.0-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + * Sun Jan 21 2024 Fedora Release Engineering - 5.7.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild From 320268ff267978198b587a6e4471a0a57cc5c1dc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Wed, 14 Feb 2024 15:43:08 +0100 Subject: [PATCH 115/126] Release 5.7.1-1 --- knot-resolver.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index b5924e5..e7cb076 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,8 +6,8 @@ %define NINJA ninja-build Name: knot-resolver -Version: 5.7.0 -Release: 5%{?dist} +Version: 5.7.1 +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -378,6 +378,9 @@ fi %endif %changelog +* Wed Feb 14 2024 Jakub Ružička - 5.7.1-1 +- New upstream version 5.7.1 + * Thu Jan 25 2024 Fedora Release Engineering - 5.7.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild diff --git a/sources b/sources index 01e00a9..266a0c7 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.7.0.tar.xz) = 38095b94ef341717ba99f1dd354fe184acdce05cb234ff685d2ff84992d8cba6ca1b8b3623998dfd3ffe9d728282963c6973c30996b836060c75e1d2ac3ee544 -SHA512 (knot-resolver-5.7.0.tar.xz.asc) = a0403af705ac39d80ec0a3a608e0210f50bc647c078a8dc74a3c814b6c3541a777a2c83ce11c448a10ac9bfa8f96b38537c5a54c2d4cd15ba3ee402793eb92a4 +SHA512 (knot-resolver-5.7.1.tar.xz) = 89ebff7e239ea09d9d180386f4551952fb59a3f1d0ca01a172acf27d2eade16ae578142d811333e49ad3a2f629cf5b23d038043c0768469078fcfd5cbfb5020b +SHA512 (knot-resolver-5.7.1.tar.xz.asc) = 0ec86e0aba583383df4f1ed909ef71a3473bc1412970b91d184372b53c5471ac41e6bf60e9a817c184501113f2d8272c3b0d2c379f80dfe2476ef32c861dd235 From 889658ebd928086f9da60182c59be1c2c4199da3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Wed, 3 Apr 2024 15:48:07 +0200 Subject: [PATCH 116/126] Release 5.7.2-1 --- knot-resolver.spec | 5 ++++- sources | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index e7cb076..35884b0 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,7 +6,7 @@ %define NINJA ninja-build Name: knot-resolver -Version: 5.7.1 +Version: 5.7.2 Release: 1%{?dist} Summary: Caching full DNS Resolver @@ -378,6 +378,9 @@ fi %endif %changelog +* Wed Apr 03 2024 Jakub Ružička - 5.7.2-1 +- New upstream version 5.7.2 + * Wed Feb 14 2024 Jakub Ružička - 5.7.1-1 - New upstream version 5.7.1 diff --git a/sources b/sources index 266a0c7..6190686 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.7.1.tar.xz) = 89ebff7e239ea09d9d180386f4551952fb59a3f1d0ca01a172acf27d2eade16ae578142d811333e49ad3a2f629cf5b23d038043c0768469078fcfd5cbfb5020b -SHA512 (knot-resolver-5.7.1.tar.xz.asc) = 0ec86e0aba583383df4f1ed909ef71a3473bc1412970b91d184372b53c5471ac41e6bf60e9a817c184501113f2d8272c3b0d2c379f80dfe2476ef32c861dd235 +SHA512 (knot-resolver-5.7.2.tar.xz) = 973e9a541b54cee0d230247d279785a83ce2127216b12ee9f314a49adedac3e23e8369900d6f0985b0a666e9bcae7772f29224565e6208ed4988b13530e4ff0b +SHA512 (knot-resolver-5.7.2.tar.xz.asc) = cf05ceca455400004cf249b1029b93619a1d5fcf839bca1259a7b411a1ddef1da0aff187ea0023c587de1981e91a8d26af3bb22341cf426e5055e8ca1c4024e2 From f10b0e61c61f9a42f82d2130d8eb90263e19d5bb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Tue, 4 Jun 2024 20:58:28 +0200 Subject: [PATCH 117/126] Release 5.7.3-1 --- knot-resolver.spec | 5 ++++- sources | 4 ++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 35884b0..5690984 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,7 +6,7 @@ %define NINJA ninja-build Name: knot-resolver -Version: 5.7.2 +Version: 5.7.3 Release: 1%{?dist} Summary: Caching full DNS Resolver @@ -378,6 +378,9 @@ fi %endif %changelog +* Tue Jun 04 2024 Jakub Ružička - 5.7.3-1 +- New upstream version 5.7.3 + * Wed Apr 03 2024 Jakub Ružička - 5.7.2-1 - New upstream version 5.7.2 diff --git a/sources b/sources index 6190686..6253203 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.7.2.tar.xz) = 973e9a541b54cee0d230247d279785a83ce2127216b12ee9f314a49adedac3e23e8369900d6f0985b0a666e9bcae7772f29224565e6208ed4988b13530e4ff0b -SHA512 (knot-resolver-5.7.2.tar.xz.asc) = cf05ceca455400004cf249b1029b93619a1d5fcf839bca1259a7b411a1ddef1da0aff187ea0023c587de1981e91a8d26af3bb22341cf426e5055e8ca1c4024e2 +SHA512 (knot-resolver-5.7.3.tar.xz) = e3d52cce589c0c1bbd8360daae3004ce3150a418eb69e47bde3344867bcba3d434363c10e2833a5ebaf484770612b2697bd0cf464bce51c432f54e5a7cd446f8 +SHA512 (knot-resolver-5.7.3.tar.xz.asc) = 013653dfc7b6d8a4234fd0f04d69c3a7c0fe197fb4c32f8687e199d4f3df28d88b6683f46bb9ddeeaeac0a89919446e4539ffee954be1e87c0bdc0a5b05cef32 From 30eb94794e71858906f6ee49240eb47bbfd98f51 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 18 Jul 2024 12:31:39 +0000 Subject: [PATCH 118/126] Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 5690984..27f806e 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.7.3 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -378,6 +378,9 @@ fi %endif %changelog +* Thu Jul 18 2024 Fedora Release Engineering - 5.7.3-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild + * Tue Jun 04 2024 Jakub Ružička - 5.7.3-1 - New upstream version 5.7.3 From a8390cd29f8effafa83bb3d51c3cd47bf97634ad Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Wed, 24 Jul 2024 17:55:46 +0200 Subject: [PATCH 119/126] Release 5.7.4-1 --- knot-resolver.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 27f806e..35809b2 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,8 +6,8 @@ %define NINJA ninja-build Name: knot-resolver -Version: 5.7.3 -Release: 2%{?dist} +Version: 5.7.4 +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -378,6 +378,9 @@ fi %endif %changelog +* Wed Jul 24 2024 Jakub Ružička - 5.7.4-1 +- New upstream version 5.7.4 + * Thu Jul 18 2024 Fedora Release Engineering - 5.7.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild diff --git a/sources b/sources index 6253203..9f73da1 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.7.3.tar.xz) = e3d52cce589c0c1bbd8360daae3004ce3150a418eb69e47bde3344867bcba3d434363c10e2833a5ebaf484770612b2697bd0cf464bce51c432f54e5a7cd446f8 -SHA512 (knot-resolver-5.7.3.tar.xz.asc) = 013653dfc7b6d8a4234fd0f04d69c3a7c0fe197fb4c32f8687e199d4f3df28d88b6683f46bb9ddeeaeac0a89919446e4539ffee954be1e87c0bdc0a5b05cef32 +SHA512 (knot-resolver-5.7.4.tar.xz) = 5d8ea5b5b0cba5a1058aaa6e04573c838895d6b2c204e8d09c9ad898fb074c52ef7589afdad164b007edf151167d31fd0f940466edfeec597f96e5bc1cd72171 +SHA512 (knot-resolver-5.7.4.tar.xz.asc) = d34a0e1fd8be372c325199ace5bb6f20b2b395a4fb5a6f6f4c2c89f29741ecfd36234900b0e836c174df831716012589231551b13426a6728e37aba6c74c197f From 858b0c02673d72db65386679a986f9a879462311 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Tue, 26 Nov 2024 13:47:40 +0100 Subject: [PATCH 120/126] Release 5.7.4-2 --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 35809b2..617cdac 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.7.4 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -378,6 +378,9 @@ fi %endif %changelog +* Tue Nov 26 2024 Jakub Ružička - 5.7.4-2 +- Rebuilt for Knot DNS 3.4 + * Wed Jul 24 2024 Jakub Ružička - 5.7.4-1 - New upstream version 5.7.4 From d4cfa4def375c2249d43d8dbb60b5894a7b3c92b Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Fri, 17 Jan 2025 09:38:45 +0000 Subject: [PATCH 121/126] Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 617cdac..7e2e1a0 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.7.4 -Release: 2%{?dist} +Release: 3%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -378,6 +378,9 @@ fi %endif %changelog +* Fri Jan 17 2025 Fedora Release Engineering - 5.7.4-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild + * Tue Nov 26 2024 Jakub Ružička - 5.7.4-2 - Rebuilt for Knot DNS 3.4 From 4b0a4b0b31406bc1d7e7938652374e0e3c9ccc50 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Zbigniew=20J=C4=99drzejewski-Szmek?= Date: Tue, 11 Feb 2025 15:35:23 +0100 Subject: [PATCH 122/126] Add sysusers.d config file to allow rpm to create users/groups automatically See https://fedoraproject.org/wiki/Changes/RPMSuportForSystemdSysusers. --- knot-resolver.spec | 18 ++++++++++++------ 1 file changed, 12 insertions(+), 6 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 7e2e1a0..2e0bf86 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.7.4 -Release: 3%{?dist} +Release: 4%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -66,7 +66,6 @@ BuildRequires: lmdb-devel Requires: lua-basexx Requires: lua-psl Requires: lua-http -Requires(pre): shadow-utils %endif %if 0%{?fedora} || 0%{?rhel} > 7 BuildRequires: pkgconfig(lmdb) @@ -75,7 +74,6 @@ Requires: lua5.1-basexx Requires: lua5.1-cqueues Requires: lua5.1-http Recommends: lua5.1-psl -Requires(pre): shadow-utils %endif # we do not build HTTP module on SuSE so the build requires is not needed @@ -167,6 +165,11 @@ gpg2 --verify %{SOURCE1} %{SOURCE0} %endif %setup -q -n %{name}-%{version} +# Create a sysusers.d config file +cat >knot-resolver.sysusers.conf </dev/null || groupadd -r knot-resolver -getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysconfdir}/knot-resolver -s /sbin/nologin -c "Knot Resolver" knot-resolver +install -m0644 -D knot-resolver.sysusers.conf %{buildroot}%{_sysusersdir}/knot-resolver.conf +%pre %if "x%{?rhel}" == "x" # upgrade-4-to-5 if [ -f %{_unitdir}/kresd.socket ] ; then @@ -349,6 +351,7 @@ fi %{_libdir}/knot-resolver/kres_modules/watchdog.lua %{_libdir}/knot-resolver/kres_modules/workarounds.lua %{_mandir}/man8/kresd.8.gz +%{_sysusersdir}/knot-resolver.conf %files devel %{_includedir}/libkres @@ -378,6 +381,9 @@ fi %endif %changelog +* Tue Feb 11 2025 Zbigniew Jędrzejewski-Szmek - 5.7.4-4 +- Add sysusers.d config file to allow rpm to create users/groups automatically + * Fri Jan 17 2025 Fedora Release Engineering - 5.7.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild From 6aa2093bde6914bb1a3b72904c9cf968ae81e4c0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Thu, 24 Apr 2025 14:33:47 +0200 Subject: [PATCH 123/126] Release 5.7.5-1 --- knot-resolver.spec | 9 ++++++--- sources | 4 ++-- 2 files changed, 8 insertions(+), 5 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 2e0bf86..06fb685 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,8 +6,8 @@ %define NINJA ninja-build Name: knot-resolver -Version: 5.7.4 -Release: 4%{?dist} +Version: 5.7.5 +Release: 1%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -317,7 +317,6 @@ fi %{_sbindir}/kresc %{_sbindir}/kres-cache-gc %{_libdir}/libkres.so.* -%dir %{_libdir}/knot-resolver %{_libdir}/knot-resolver/*.so %{_libdir}/knot-resolver/*.lua %dir %{_libdir}/knot-resolver/kres_modules @@ -381,6 +380,10 @@ fi %endif %changelog +* Thu Apr 24 2025 Jakub Ružička - 5.7.5-1 +- New upstream version 5.7.5 +- Remove duplicate file listing + * Tue Feb 11 2025 Zbigniew Jędrzejewski-Szmek - 5.7.4-4 - Add sysusers.d config file to allow rpm to create users/groups automatically diff --git a/sources b/sources index 9f73da1..c63e839 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.7.4.tar.xz) = 5d8ea5b5b0cba5a1058aaa6e04573c838895d6b2c204e8d09c9ad898fb074c52ef7589afdad164b007edf151167d31fd0f940466edfeec597f96e5bc1cd72171 -SHA512 (knot-resolver-5.7.4.tar.xz.asc) = d34a0e1fd8be372c325199ace5bb6f20b2b395a4fb5a6f6f4c2c89f29741ecfd36234900b0e836c174df831716012589231551b13426a6728e37aba6c74c197f +SHA512 (knot-resolver-5.7.5.tar.xz) = b9ade76accf60c7eee173cfff18e1881e79bcd63d85ef583973244bf37f40c4c57fed00d840c61643b65b82b1f93f85480c4f10334416cab87fae3da46918fc3 +SHA512 (knot-resolver-5.7.5.tar.xz.asc) = df06eb244fa051a5f71385424b2da2479203019c6824344ec2226bc4851a3eb12eb3bb0f6f5a3e5ccce8c5875b6867924fa46b6939545cb35b24ef799f9ef6b0 From 0d682e47498c5d01f35d5923673b50e8d77e39c6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Fri, 18 Jul 2025 14:53:19 +0200 Subject: [PATCH 124/126] Release 5.7.6-1 --- knot-resolver.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 06fb685..60a1238 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -6,7 +6,7 @@ %define NINJA ninja-build Name: knot-resolver -Version: 5.7.5 +Version: 5.7.6 Release: 1%{?dist} Summary: Caching full DNS Resolver @@ -53,7 +53,7 @@ Requires: systemd Requires(post): systemd # dnstap module dependencies -# SUSE is missing protoc-c protobuf compiler +# SUSE is missing protoc protobuf compiler %if "x%{?suse_version}" == "x" BuildRequires: pkgconfig(libfstrm) BuildRequires: pkgconfig(libprotobuf-c) @@ -380,6 +380,9 @@ fi %endif %changelog +* Fri Jul 18 2025 Jakub Ružička - 5.7.6-1 +- New upstream version 5.7.6 + * Thu Apr 24 2025 Jakub Ružička - 5.7.5-1 - New upstream version 5.7.5 - Remove duplicate file listing diff --git a/sources b/sources index c63e839..0ed2cdf 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (knot-resolver-5.7.5.tar.xz) = b9ade76accf60c7eee173cfff18e1881e79bcd63d85ef583973244bf37f40c4c57fed00d840c61643b65b82b1f93f85480c4f10334416cab87fae3da46918fc3 -SHA512 (knot-resolver-5.7.5.tar.xz.asc) = df06eb244fa051a5f71385424b2da2479203019c6824344ec2226bc4851a3eb12eb3bb0f6f5a3e5ccce8c5875b6867924fa46b6939545cb35b24ef799f9ef6b0 +SHA512 (knot-resolver-5.7.6.tar.xz) = 4dcaff56b0368bc147e04ffbf6ce4a3595fa3a59e99e73b516edc7813142abcb20823b987824b11a31e3eca3cc62fa176caf4408361daeac67b6f0587f9a0268 +SHA512 (knot-resolver-5.7.6.tar.xz.asc) = 478449d96dddaff9aff134a2a3bc991d8e50423f38a00e7256b54be9ab89d85d66eaa8e83815f4b31700b16fd94f8017493db6347e57d0583feec38bb35655f6 From 0cae76a02470d4d502533ddcaa5b9b848895bff6 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 24 Jul 2025 18:52:23 +0000 Subject: [PATCH 125/126] Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 60a1238..0b65597 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.7.6 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -380,6 +380,9 @@ fi %endif %changelog +* Thu Jul 24 2025 Fedora Release Engineering - 5.7.6-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild + * Fri Jul 18 2025 Jakub Ružička - 5.7.6-1 - New upstream version 5.7.6 From 7340647acbbbe2c3b465e7949ee068fdee54086c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Ru=C5=BEi=C4=8Dka?= Date: Mon, 20 Oct 2025 13:35:55 +0200 Subject: [PATCH 126/126] Rebuilt for Knot DNS 3.5 --- knot-resolver.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/knot-resolver.spec b/knot-resolver.spec index 0b65597..6dcd618 100644 --- a/knot-resolver.spec +++ b/knot-resolver.spec @@ -7,7 +7,7 @@ Name: knot-resolver Version: 5.7.6 -Release: 2%{?dist} +Release: 3%{?dist} Summary: Caching full DNS Resolver License: GPL-3.0-or-later @@ -380,6 +380,9 @@ fi %endif %changelog +* Mon Oct 20 2025 Jakub Ružička - 5.7.6-3 +- Rebuilt for Knot DNS 3.5 + * Thu Jul 24 2025 Fedora Release Engineering - 5.7.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild