[dnssec-tools/f17] Patch to support NSEC3 records from newer versions of bind
Wes Hardaker
hardaker at fedoraproject.org
Thu Apr 18 19:39:34 UTC 2013
commit 00a190ea6bc01d1b3f4bd8a6c19c31469c15c3be
Author: Wes Hardaker <opensource at hardakers.net>
Date: Thu Apr 18 12:39:17 2013 -0700
Patch to support NSEC3 records from newer versions of bind
dnssec-tools-zonefile-fast-nsec3-1.20.patch | 92 +--------------------------
dnssec-tools.spec | 7 ++-
2 files changed, 8 insertions(+), 91 deletions(-)
---
diff --git a/dnssec-tools-zonefile-fast-nsec3-1.20.patch b/dnssec-tools-zonefile-fast-nsec3-1.20.patch
index 9a2f8cb..b24d7b2 100644
--- a/dnssec-tools-zonefile-fast-nsec3-1.20.patch
+++ b/dnssec-tools-zonefile-fast-nsec3-1.20.patch
@@ -2,47 +2,11 @@ diff --git a/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm b/dnssec-tools/too
index 268538c..0c931a2 100644
--- a/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
+++ b/dnssec-tools/tools/modules/ZoneFile-Fast/Fast.pm
-@@ -32,6 +32,35 @@
- # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
- # OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
- # ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-+# ----------------------------------------------------------------------------
-+# Copyright (c) 2013-2013 PARSONS, Inc.
-+# All rights reserved.
-+#
-+# Redistribution and use in source and binary forms, with or without
-+# modification, are permitted provided that the following conditions are met:
-+#
-+# * Redistributions of source code must retain the above copyright notice,
-+# this list of conditions and the following disclaimer.
-+#
-+# * Redistributions in binary form must reproduce the above copyright
-+# notice, this list of conditions and the following disclaimer in the
-+# documentation and/or other materials provided with the distribution.
-+#
-+# * Neither the name of SPARTA, Inc nor the names of its contributors may
-+# be used to endorse or promote products derived from this software
-+# without specific prior written permission.
-+#
-+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ``AS
-+# IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-+# THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-+# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR
-+# CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
-+# EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
-+# PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
-+# OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-+# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
-+# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
-+# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
- #
- # $Id$
- #
@@ -46,7 +75,7 @@ use Net::DNS;
use Net::DNS::RR;
use MIME::Base64;
--$VERSION = '1.19';
+-$VERSION = '1.18';
+$VERSION = '1.20';
my $MAXIMUM_TTL = 0x7fffffff;
@@ -52,9 +16,9 @@ index 268538c..0c931a2 100644
my $dnskey;
my $ds;
+my $nsec3;
- my $tlsa;
my $on_error;
my $quiet;
+ my $soft_errors;
@@ -953,14 +983,38 @@ sub parse_line
} elsif (/\G(nsec3)[ \t]+/igc) {
error ("You are missing required modules for NSEC3 support")
@@ -152,55 +116,3 @@ index 268538c..0c931a2 100644
sub parse_soa_number
{
error("parse_soa_number: internal error, no \$soa") unless $soa;
-@@ -1582,7 +1656,36 @@ Copyright 2003 by Anton Berezin and catpipe Systems ApS
-
- Anton Berezin
-
--Copyright (c) 2004-2013 SPARTA, Inc.
-+Copyright (c) 2004-2011 SPARTA, Inc.
-+ All rights reserved.
-+
-+ Redistribution and use in source and binary forms, with or without
-+ modification, are permitted provided that the following conditions are met:
-+
-+ * Redistributions of source code must retain the above copyright notice,
-+ this list of conditions and the following disclaimer.
-+
-+ * Redistributions in binary form must reproduce the above copyright
-+ notice, this list of conditions and the following disclaimer in the
-+ documentation and/or other materials provided with the distribution.
-+
-+ * Neither the name of SPARTA, Inc nor the names of its contributors may
-+ be used to endorse or promote products derived from this software
-+ without specific prior written permission.
-+
-+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ``AS
-+ IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-+ THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-+ PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR
-+ CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
-+ EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
-+ PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
-+ OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
-+ WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
-+ OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
-+ ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-+
-+Copyright (c) 2013-2013 PARSONS, Inc.
- All rights reserved.
-
- Redistribution and use in source and binary forms, with or without
-diff --git a/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t b/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t
-index 8bbe036..ef050de 100644
---- a/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t
-+++ b/dnssec-tools/tools/modules/ZoneFile-Fast/t/rr-dnssec.t
-@@ -31,6 +31,9 @@ BEGIN {
- q{nospace.dnssec-tools.org. 86400 RRSIG SOA 5 2 86400 20060429134027 20060330134027 42869 dnssec-tools.org. QZzAz5sVC5+n7vJhkXfFaN/sdjKXVpT/nv22 NJI+sDde180Sj1pDXW6mFt+Efg4uUAuyLQup jLv20EVM8/oBPA7DjNu2CZHGe8UDeuAoqIth Q/79Ltw4NtP7W1zWAs/ms/oSKiKYrAUHqt0U UskiXkCA1GKn6RNqVT4+IuSUgALLYSMLjlaA 2kE/KaffqeGnynIO2AC5BMFzUlxCSMDSxus3 bJm2xAIxMiUYomw9XfbGfrkCtfIrH+H/LVG/ X2K/kKxjcFcQhkukMUxjzzmAP3xJHq6vgwVM tpm/qaR0g5jH5B46iJefGYzwcMAyexbLOQEW uv1Xs6i/lBwQo9T7xw= },
- q{dnssec-tools.org. 10800 NSEC cvs.dnssec-tools.org A DNSKEY MX NS NSEC RRSIG SOA TXT},
- q{THA2IPMDLT9RU307BO9LQ6MF5K565A6M.example.com. 10800 IN NSEC3 1 0 100 610b88f0d9f42c74 QIVB7DNNE2T5J9HLI4FRE9PN61F754CK A RRSIG},
-+ q{THA2IPMDLT9RU307BO9LQ6MF5K565A6M.example.com. 10800 IN NSEC3 1 0 100 610b88f0d9f42c74 (
-+ QIVB7DNNE2T5J9HLI4FRE9PN61F754CK
-+ A RRSIG )},
-
- q{example.com 0 NSEC3PARAM 1 0 100 610b88f0d9f42c74},
-
diff --git a/dnssec-tools.spec b/dnssec-tools.spec
index 73378ec..05d4d41 100644
--- a/dnssec-tools.spec
+++ b/dnssec-tools.spec
@@ -1,7 +1,7 @@
Summary: A suite of tools for managing dnssec aware DNS usage
Name: dnssec-tools
Version: 1.13
-Release: 10%{?dist}
+Release: 11%{?dist}
License: BSD
Group: System Environment/Base
URL: http://www.dnssec-tools.org/
@@ -23,6 +23,7 @@ Patch8: dnssec-tools-zonefile-fast-fixes-1.13.patch
Patch9: dnssec-tools-zonefile-fast-fixes-1.14.patch
Patch10: dnssec-tools-1.13-zonesigner-soa-rewrite.patch
Patch11: dnssec-tools-1.14-zonesigner-soa-rewrite.patch
+Patch12: dnssec-tools-zonefile-fast-nsec3-1.20.patch
%description
@@ -66,6 +67,7 @@ C-based libraries useful for developing dnssec aware tools.
%patch8 -p0 -d tools/modules/ZoneFile-Fast/
#%patch9 -p0 -d tools/modules/ZoneFile-Fast/
%patch10 -p0 -d tools/scripts
+%patch12 -p2
%build
%configure --with-validator-testcases-file=%{_datadir}/dnssec-tools/validator-testcases --with-perl-build-args="INSTALLDIRS=vendor OPTIMIZE='$RPM_OPT_FLAGS'" --sysconfdir=/etc --with-root-hints=/etc/dnssec-tools/root.hints --with-resolv-conf=/etc/dnssec-tools/resolv.conf --disable-static --with-nsec3 --with-ipv6 --with-dlv --disable-bind-checks
@@ -342,6 +344,9 @@ rm -rf %{buildroot}
%{_mandir}/man3/val_freeaddrinfo.3.gz
%changelog
+* Thu Apr 18 2013 Wes Hardaker <wjhns174 at hardakers.net> - 1.13-11
+- Fixed NSEC3 parsing for new versions of bind
+
* Wed Mar 6 2013 Wes Hardaker <wjhns174 at hardakers.net> - 1.13-10
- added ownership of the dnssec-tools directory
More information about the scm-commits
mailing list