summaryrefslogtreecommitdiff
path: root/dns
diff options
context:
space:
mode:
Diffstat (limited to 'dns')
-rw-r--r--dns/Makefile1
-rw-r--r--dns/bind9-devel/Makefile102
-rw-r--r--dns/bind918/Makefile84
-rw-r--r--dns/bind920/Makefile100
-rw-r--r--dns/dnsmasq-devel/Makefile2
-rw-r--r--dns/dnsmasq-devel/distinfo6
-rw-r--r--dns/dnssec-rr/Makefile46
-rw-r--r--dns/dnssec-rr/distinfo3
-rw-r--r--dns/dnssec-rr/files/patch-Makefile10
-rw-r--r--dns/dnssec-rr/files/patch-zone.c10
-rw-r--r--dns/dnssec-rr/pkg-descr9
-rw-r--r--dns/kf6-kdnssd/distinfo6
12 files changed, 244 insertions, 135 deletions
diff --git a/dns/Makefile b/dns/Makefile
index bb1bcc5070ee..acf599c08636 100644
--- a/dns/Makefile
+++ b/dns/Makefile
@@ -42,6 +42,7 @@
SUBDIR += dnsproxy
SUBDIR += dnsrecon
SUBDIR += dnsreflector
+ SUBDIR += dnssec-rr
SUBDIR += dnstable
SUBDIR += dnstable-convert
SUBDIR += dnstop
diff --git a/dns/bind9-devel/Makefile b/dns/bind9-devel/Makefile
index ecd0df1c85cc..3d15cab52ec7 100644
--- a/dns/bind9-devel/Makefile
+++ b/dns/bind9-devel/Makefile
@@ -20,12 +20,12 @@ PKGNAMESUFFIX= 9-devel
.endif
MAINTAINER= mat@FreeBSD.org
-WWW= https://www.isc.org/bind/
.if defined(BIND_TOOLS_SLAVE)
COMMENT= Command line tools from BIND: delv, dig, host, nslookup...
.else
COMMENT= BIND DNS suite with updated DNSSEC and DNS64
.endif
+WWW= https://www.isc.org/bind/
# Uncomment when bind9xx comes of age. +3 years if ESV, +1year otherwise, see
# https://kb.isc.org/docs/aa-00896
@@ -35,29 +35,40 @@ COMMENT= BIND DNS suite with updated DNSSEC and DNS64
LICENSE= MPL20
LICENSE_FILE= ${WRKSRC}/COPYRIGHT
-LIB_DEPENDS= libuv.so:devel/libuv \
- libnghttp2.so:www/libnghttp2 \
- liburcu.so:sysutils/liburcu
+LIB_DEPENDS= libnghttp2.so:www/libnghttp2 \
+ liburcu.so:sysutils/liburcu \
+ libuv.so:devel/libuv
.if !defined(BIND_TOOLS_SLAVE)
RUN_DEPENDS= bind-tools>0:dns/bind-tools
.endif
-USES= autoreconf compiler:c11 cpe gnome libedit libtool pkgconfig ssl tar:xz
+USES= autoreconf compiler:c11 cpe gnome libedit libtool pkgconfig ssl \
+ tar:xz
CPE_VENDOR= isc
CPE_VERSION= ${DISTVERSION:C/-.*//}
.if ${DISTVERSION:M*-*}
CPE_UPDATE= ${DISTVERSION:C/.*-//:tl}
.endif
-USE_GNOME= libxml2
+
+.if !defined(BIND_TOOLS_SLAVE)
+USE_RC_SUBR= named
+.endif # !BIND_TOOLS_SLAVE
GNU_CONFIGURE= yes
GNU_CONFIGURE_MANPREFIX= ${PREFIX}/share
CONFIGURE_ARGS= --localstatedir=/var \
--sysconfdir=${ETCDIR} \
- --with-libxml2 \
--with-openssl=${OPENSSLBASE}
+
+MAKE_JOBS_UNSAFE= yes
+
+.if !defined(BIND_TOOLS_SLAVE)
+# XXX: Add -devel
+CONFLICTS= bind9[0-9][0-9]
+.endif # !BIND_TOOLS_SLAVE
+
ETCDIR= ${PREFIX}/etc/namedb
# FIXME: figure out why build fails if enabled
@@ -67,33 +78,28 @@ CONFIGURE_ARGS+= --disable-tracing
EXTRA_PATCHES= ${PATCHDIR}/extrapatch-bind-tools
CONFIGURE_ARGS+= --libdir=${PREFIX}/lib/bind-tools
.else
-USE_RC_SUBR= named
# XXX: remove the big warning about it being a development version from pkg-message
SUB_FILES= named.conf pkg-message
EXTRA_PATCHES= ${PATCHDIR}/extrapatch-no-bind-tools
PORTDOCS= *
+.endif # BIND_TOOLS_SLAVE
-# XXX: Add -devel
-CONFLICTS= bind9[0-9][0-9]
-.endif # BIND_TOOLS_SLAVE
-
-MAKE_JOBS_UNSAFE= yes
+OPTIONS_DEFINE= DNSTAP DOCS GEOIP IDN LARGE_FILE LMDB OVERRIDECACHE \
+ QUERYTRACE START_LATE TCP_FASTOPEN
+OPTIONS_DEFAULT= DNSTAP GSSAPI_NONE IDN LMDB STATS_JSON STATS_XML \
+ TCP_FASTOPEN
-OPTIONS_DEFAULT= GSSAPI_NONE IDN JSON LMDB \
- TCP_FASTOPEN DNSTAP
-OPTIONS_DEFINE= DNSTAP DOCS GEOIP IDN JSON LARGE_FILE LMDB \
- OVERRIDECACHE QUERYTRACE \
- START_LATE TCP_FASTOPEN
+OPTIONS_GROUP= STATS
+OPTIONS_GROUP_STATS= STATS_JSON STATS_XML
OPTIONS_SINGLE= GSSAPI
OPTIONS_SINGLE_GSSAPI= GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE
.if defined(BIND_TOOLS_SLAVE)
-OPTIONS_EXCLUDE= DOCS GEOIP LMDB \
- OVERRIDECACHE QUERYTRACE START_LATE \
- TCP_FASTOPEN
-.endif # BIND_TOOLS_SLAVE
+OPTIONS_EXCLUDE= DOCS GEOIP LMDB OVERRIDECACHE QUERYTRACE START_LATE \
+ STATS_JSON STATS_XML TCP_FASTOPEN
+.endif # BIND_TOOLS_SLAVE
OPTIONS_SUB= yes
@@ -107,49 +113,48 @@ LMDB_DESC= Use LMDB for zone management
OVERRIDECACHE_DESC= Use the override-cache patch
QUERYTRACE_DESC= Enable the very verbose query tracelogging
START_LATE_DESC= Start BIND late in the boot process (see help)
+STATS_DESC= Statistics channels
+STATS_JSON_DESC= Enable JSON statistics channel
+STATS_XML_DESC= Enable XML statistics channel
TCP_FASTOPEN_DESC= RFC 7413 support
-DOCS_ALL_TARGET= all html
-DOCS_BUILD_DEPENDS= sphinx-build:textproc/py-sphinx \
- ${PYTHON_PKGNAMEPREFIX}sphinx_rtd_theme>0:textproc/py-sphinx_rtd_theme@${PY_FLAVOR}
-DOCS_USES= gmake python:env
-
-DNSTAP_CONFIGURE_ENABLE= dnstap
DNSTAP_LIB_DEPENDS= libfstrm.so:devel/fstrm \
libprotobuf-c.so:devel/protobuf-c
+DNSTAP_CONFIGURE_ENABLE= dnstap
+
+DOCS_BUILD_DEPENDS= ${PYTHON_PKGNAMEPREFIX}sphinx_rtd_theme>0:textproc/py-sphinx_rtd_theme@${PY_FLAVOR} \
+ sphinx-build:textproc/py-sphinx
+DOCS_USES= gmake python:env
+DOCS_ALL_TARGET= all html
+GEOIP_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb
GEOIP_CONFIGURE_ENABLE= geoip
GEOIP_CONFIGURE_WITH= maxminddb
-GEOIP_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb
-GSSAPI_BASE_CONFIGURE_ON= --with-gssapi="${KRB5CONFIG}" \
- ${GSSAPI_CONFIGURE_ARGS}
GSSAPI_BASE_USES= gssapi
+GSSAPI_BASE_CONFIGURE_ON= ${GSSAPI_CONFIGURE_ARGS} \
+ --with-gssapi="${KRB5CONFIG}"
-GSSAPI_HEIMDAL_CONFIGURE_ON= --with-gssapi="${KRB5CONFIG}" \
- ${GSSAPI_CONFIGURE_ARGS}
GSSAPI_HEIMDAL_USES= gssapi:heimdal
+GSSAPI_HEIMDAL_CONFIGURE_ON= ${GSSAPI_CONFIGURE_ARGS} \
+ --with-gssapi="${KRB5CONFIG}"
-GSSAPI_MIT_CONFIGURE_ON= --with-gssapi="${KRB5CONFIG}" \
- ${GSSAPI_CONFIGURE_ARGS}
GSSAPI_MIT_USES= gssapi:mit
+GSSAPI_MIT_CONFIGURE_ON= ${GSSAPI_CONFIGURE_ARGS} \
+ --with-gssapi="${KRB5CONFIG}"
GSSAPI_NONE_CONFIGURE_ON= --without-gssapi
-IDN_CONFIGURE_OFF= --without-libidn2
-IDN_CONFIGURE_ON= ${ICONV_CONFIGURE_BASE} \
- --with-libidn2=${LOCALBASE}
IDN_LIB_DEPENDS= libidn2.so:dns/libidn2
IDN_USES= iconv
-
-JSON_CONFIGURE_WITH= json-c
-JSON_LIB_DEPENDS= libjson-c.so:devel/json-c
-JSON_LDFLAGS= -L${LOCALBASE}/lib -ljson-c
+IDN_CONFIGURE_ON= ${ICONV_CONFIGURE_BASE} \
+ --with-libidn2=${LOCALBASE}
+IDN_CONFIGURE_OFF= --without-libidn2
LARGE_FILE_CONFIGURE_ENABLE= largefile
-LMDB_CONFIGURE_WITH= lmdb=${LOCALBASE}
LMDB_LIB_DEPENDS= liblmdb.so:databases/lmdb
+LMDB_CONFIGURE_WITH= lmdb=${LOCALBASE}
OVERRIDECACHE_EXTRA_PATCHES= ${FILESDIR}/extrapatch-bind-min-override-ttl
@@ -160,6 +165,13 @@ START_LATE_SUB_LIST= NAMED_BEFORE="LOGIN" \
START_LATE_SUB_LIST_OFF= NAMED_BEFORE="SERVERS" \
NAMED_REQUIRE="NETWORKING ldconfig syslogd"
+STATS_JSON_LIB_DEPENDS= libjson-c.so:devel/json-c
+STATS_JSON_CONFIGURE_WITH= json-c
+STATS_JSON_LDFLAGS= -L${LOCALBASE}/lib -ljson-c
+
+STATS_XML_USE= GNOME=libxml2
+STATS_XML_CONFIGURE_WITH= libxml2
+
TCP_FASTOPEN_CONFIGURE_ENABLE= tcp-fastopen
.include <bsd.port.options.mk>
@@ -172,7 +184,7 @@ BUILD_DEPENDS+= cmocka>0:sysutils/cmocka
.endif
.if !${PORT_OPTIONS:MDOCS}
-CONFIGURE_ENV+= ac_cv_path_SPHINX_BUILD=
+CONFIGURE_ENV+= ac_cv_path_SPHINX_BUILD=
.endif
.include <bsd.port.pre.mk>
@@ -219,6 +231,6 @@ do-install:
done
@${RM} -r ${STAGEDIR}${PREFIX}/include
-.endif # BIND_TOOLS_SLAVE
+.endif # BIND_TOOLS_SLAVE
.include <bsd.port.post.mk>
diff --git a/dns/bind918/Makefile b/dns/bind918/Makefile
index 8253a8129744..6372aeb31964 100644
--- a/dns/bind918/Makefile
+++ b/dns/bind918/Makefile
@@ -8,8 +8,8 @@ MASTER_SITES= ISC/bind9/${DISTVERSION}
PKGNAMESUFFIX= 918
MAINTAINER= mat@FreeBSD.org
-WWW= https://www.isc.org/bind/
COMMENT= BIND DNS suite with updated DNSSEC and DNS64
+WWW= https://www.isc.org/bind/
# Uncomment when bind920 comes of age. +3 years if ESV, +1year otherwise, see
# https://kb.isc.org/docs/aa-00896
@@ -19,14 +19,13 @@ COMMENT= BIND DNS suite with updated DNSSEC and DNS64
LICENSE= MPL20
LICENSE_FILE= ${WRKSRC}/LICENSE
-LIB_DEPENDS= libuv.so:devel/libuv \
- libnghttp2.so:www/libnghttp2
+LIB_DEPENDS= libnghttp2.so:www/libnghttp2 \
+ libuv.so:devel/libuv
RUN_DEPENDS= bind-tools>0:dns/bind-tools
USES= autoreconf compiler:c11 cpe gnome libedit libtool pkgconfig ssl \
tar:xz
-USE_GNOME= libxml2
CPE_VENDOR= isc
CPE_VERSION= ${DISTVERSION:C/-.*//}
@@ -34,33 +33,36 @@ CPE_VERSION= ${DISTVERSION:C/-.*//}
CPE_UPDATE= ${DISTVERSION:C/.*-//:tl}
.endif
+USE_RC_SUBR= named
+
GNU_CONFIGURE= yes
GNU_CONFIGURE_MANPREFIX= ${PREFIX}/share
CONFIGURE_ARGS= --disable-linux-caps \
+ --enable-dnsrps \
--localstatedir=/var \
--sysconfdir=${ETCDIR} \
--with-dlopen=yes \
- --with-libxml2 \
--with-openssl=${OPENSSLBASE} \
- --enable-dnsrps \
--with-readline=libedit
CONFIGURE_ENV= READLINE_CFLAGS="-L${LOCALBASE}/lib"
+
+MAKE_JOBS_UNSAFE= yes
+
+CONFLICTS= bind9-devel bind920
+
ETCDIR= ${PREFIX}/etc/namedb
-USE_RC_SUBR= named
-SUB_FILES= named.conf pkg-message
+SUB_FILES= named.conf pkg-message
PORTDOCS= *
-CONFLICTS= bind920 bind9-devel
-
-MAKE_JOBS_UNSAFE= yes
+OPTIONS_DEFINE= DNSTAP DOCS FIXED_RRSET GEOIP IDN LARGE_FILE LMDB \
+ OVERRIDECACHE QUERYTRACE START_LATE TCP_FASTOPEN
+OPTIONS_DEFAULT= DNSTAP GSSAPI_NONE IDN LMDB STATS_JSON STATS_XML \
+ TCP_FASTOPEN
-OPTIONS_DEFAULT= GSSAPI_NONE IDN JSON LMDB \
- TCP_FASTOPEN DNSTAP
-OPTIONS_DEFINE= DNSTAP DOCS FIXED_RRSET GEOIP IDN JSON LARGE_FILE LMDB \
- OVERRIDECACHE QUERYTRACE \
- START_LATE TCP_FASTOPEN
+OPTIONS_GROUP= STATS
+OPTIONS_GROUP_STATS= STATS_JSON STATS_XML
OPTIONS_SINGLE= GSSAPI
OPTIONS_SINGLE_GSSAPI= GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE
@@ -78,51 +80,50 @@ LMDB_DESC= Use LMDB for zone management
OVERRIDECACHE_DESC= Use the override-cache patch
QUERYTRACE_DESC= Enable the very verbose query tracelogging
START_LATE_DESC= Start BIND late in the boot process (see help)
+STATS_DESC= Statistics channels
+STATS_JSON_DESC= Enable JSON statistics channel
+STATS_XML_DESC= Enable XML statistics channel
TCP_FASTOPEN_DESC= RFC 7413 support
-DOCS_ALL_TARGET= all html
-DOCS_BUILD_DEPENDS= sphinx-build:textproc/py-sphinx \
- ${PYTHON_PKGNAMEPREFIX}sphinx_rtd_theme>0:textproc/py-sphinx_rtd_theme@${PY_FLAVOR}
-DOCS_USES= gmake python:env
-
-DNSTAP_CONFIGURE_ENABLE= dnstap
DNSTAP_LIB_DEPENDS= libfstrm.so:devel/fstrm \
libprotobuf-c.so:devel/protobuf-c
+DNSTAP_CONFIGURE_ENABLE= dnstap
+
+DOCS_BUILD_DEPENDS= ${PYTHON_PKGNAMEPREFIX}sphinx_rtd_theme>0:textproc/py-sphinx_rtd_theme@${PY_FLAVOR} \
+ sphinx-build:textproc/py-sphinx
+DOCS_USES= gmake python:env
+DOCS_ALL_TARGET= all html
FIXED_RRSET_CONFIGURE_ENABLE= fixed-rrset
+GEOIP_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb
GEOIP_CONFIGURE_ENABLE= geoip
GEOIP_CONFIGURE_WITH= maxminddb
-GEOIP_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb
-GSSAPI_BASE_CONFIGURE_ON= --with-gssapi="${KRB5CONFIG}" \
- ${GSSAPI_CONFIGURE_ARGS}
GSSAPI_BASE_USES= gssapi
+GSSAPI_BASE_CONFIGURE_ON= ${GSSAPI_CONFIGURE_ARGS} \
+ --with-gssapi="${KRB5CONFIG}"
-GSSAPI_HEIMDAL_CONFIGURE_ON= --with-gssapi="${KRB5CONFIG}" \
- ${GSSAPI_CONFIGURE_ARGS}
GSSAPI_HEIMDAL_USES= gssapi:heimdal
+GSSAPI_HEIMDAL_CONFIGURE_ON= ${GSSAPI_CONFIGURE_ARGS} \
+ --with-gssapi="${KRB5CONFIG}"
-GSSAPI_MIT_CONFIGURE_ON= --with-gssapi="${KRB5CONFIG}" \
- ${GSSAPI_CONFIGURE_ARGS}
GSSAPI_MIT_USES= gssapi:mit
+GSSAPI_MIT_CONFIGURE_ON= ${GSSAPI_CONFIGURE_ARGS} \
+ --with-gssapi="${KRB5CONFIG}"
GSSAPI_NONE_CONFIGURE_ON= --without-gssapi
-IDN_CONFIGURE_OFF= --without-libidn2
-IDN_CONFIGURE_ON= ${ICONV_CONFIGURE_BASE} \
- --with-libidn2=${LOCALBASE}
IDN_LIB_DEPENDS= libidn2.so:dns/libidn2
IDN_USES= iconv
-
-JSON_CONFIGURE_WITH= json-c
-JSON_LIB_DEPENDS= libjson-c.so:devel/json-c
-JSON_LDFLAGS= -L${LOCALBASE}/lib -ljson-c
+IDN_CONFIGURE_ON= ${ICONV_CONFIGURE_BASE} \
+ --with-libidn2=${LOCALBASE}
+IDN_CONFIGURE_OFF= --without-libidn2
LARGE_FILE_CONFIGURE_ENABLE= largefile
-LMDB_CONFIGURE_WITH= lmdb=${LOCALBASE}
LMDB_LIB_DEPENDS= liblmdb.so:databases/lmdb
+LMDB_CONFIGURE_WITH= lmdb=${LOCALBASE}
OVERRIDECACHE_EXTRA_PATCHES= ${FILESDIR}/extrapatch-bind-min-override-ttl
@@ -133,6 +134,13 @@ START_LATE_SUB_LIST= NAMED_BEFORE="LOGIN" \
START_LATE_SUB_LIST_OFF= NAMED_BEFORE="SERVERS" \
NAMED_REQUIRE="NETWORKING ldconfig syslogd"
+STATS_JSON_LIB_DEPENDS= libjson-c.so:devel/json-c
+STATS_JSON_CONFIGURE_WITH= json-c
+STATS_JSON_LDFLAGS= -L${LOCALBASE}/lib -ljson-c
+
+STATS_XML_USE= GNOME=libxml2
+STATS_XML_CONFIGURE_WITH= libxml2
+
TCP_FASTOPEN_CONFIGURE_ENABLE= tcp-fastopen
.include <bsd.port.options.mk>
@@ -146,7 +154,7 @@ BUILD_DEPENDS+= cmocka>0:sysutils/cmocka
.endif
.if !${PORT_OPTIONS:MDOCS}
-CONFIGURE_ENV+= ac_cv_path_SPHINX_BUILD=
+CONFIGURE_ENV+= ac_cv_path_SPHINX_BUILD=
.endif
.include <bsd.port.pre.mk>
diff --git a/dns/bind920/Makefile b/dns/bind920/Makefile
index cca7769848ef..0255d13cec36 100644
--- a/dns/bind920/Makefile
+++ b/dns/bind920/Makefile
@@ -19,12 +19,12 @@ PKGNAMESUFFIX= 920
.endif
MAINTAINER= mat@FreeBSD.org
-WWW= https://www.isc.org/bind/
.if defined(BIND_TOOLS_SLAVE)
COMMENT= Command line tools from BIND: delv, dig, host, nslookup...
.else
COMMENT= BIND DNS suite with updated DNSSEC and DNS64
.endif
+WWW= https://www.isc.org/bind/
# Uncomment when bind922 comes of age. +3 years if ESV, +1year otherwise, see
# https://kb.isc.org/docs/aa-00896
@@ -34,10 +34,9 @@ COMMENT= BIND DNS suite with updated DNSSEC and DNS64
LICENSE= MPL20
LICENSE_FILE= ${WRKSRC}/COPYRIGHT
-LIB_DEPENDS= libuv.so:devel/libuv \
- libnghttp2.so:www/libnghttp2 \
+LIB_DEPENDS= libnghttp2.so:www/libnghttp2 \
liburcu.so:sysutils/liburcu \
- libxml2.so:textproc/libxml2
+ libuv.so:devel/libuv
.if !defined(BIND_TOOLS_SLAVE)
RUN_DEPENDS= bind-tools>0:dns/bind-tools
@@ -51,16 +50,25 @@ CPE_VERSION= ${DISTVERSION:C/-.*//}
.if ${DISTVERSION:M*-*}
CPE_UPDATE= ${DISTVERSION:C/.*-//:tl}
.endif
-USE_GNOME= libxml2
+
+.if !defined(BIND_TOOLS_SLAVE)
+USE_RC_SUBR= named
+.endif # !BIND_TOOLS_SLAVE
GNU_CONFIGURE= yes
GNU_CONFIGURE_MANPREFIX= ${PREFIX}/share
-CONFIGURE_ARGS= --localstatedir=/var \
+CONFIGURE_ARGS= --enable-dnsrps \
+ --localstatedir=/var \
--sysconfdir=${ETCDIR} \
- --with-libxml2 \
--with-openssl=${OPENSSLBASE} \
- --enable-dnsrps \
--with-readline=libedit
+
+MAKE_JOBS_UNSAFE= yes
+
+.if !defined(BIND_TOOLS_SLAVE)
+CONFLICTS= bind9-devel bind918
+.endif # !BIND_TOOLS_SLAVE
+
ETCDIR= ${PREFIX}/etc/namedb
# FIXME: figure out why build fails if enabled
@@ -70,31 +78,27 @@ CONFIGURE_ARGS+= --disable-tracing
EXTRA_PATCHES= ${PATCHDIR}/extrapatch-bind-tools
CONFIGURE_ARGS+= --libdir=${PREFIX}/lib/bind-tools
.else
-USE_RC_SUBR= named
SUB_FILES= named.conf pkg-message
EXTRA_PATCHES= ${PATCHDIR}/extrapatch-no-bind-tools
PORTDOCS= *
+.endif # BIND_TOOLS_SLAVE
-CONFLICTS= bind918 bind9-devel
-.endif # BIND_TOOLS_SLAVE
-
-MAKE_JOBS_UNSAFE= yes
+OPTIONS_DEFINE= DNSTAP DOCS FIXED_RRSET GEOIP IDN LARGE_FILE LMDB \
+ OVERRIDECACHE QUERYTRACE START_LATE TCP_FASTOPEN
+OPTIONS_DEFAULT= DNSTAP GSSAPI_NONE IDN LMDB STATS_JSON STATS_XML \
+ TCP_FASTOPEN
-OPTIONS_DEFAULT= GSSAPI_NONE IDN JSON LMDB \
- TCP_FASTOPEN DNSTAP
-OPTIONS_DEFINE= DNSTAP DOCS FIXED_RRSET GEOIP IDN JSON LARGE_FILE LMDB \
- OVERRIDECACHE QUERYTRACE \
- START_LATE TCP_FASTOPEN
+OPTIONS_GROUP= STATS
+OPTIONS_GROUP_STATS= STATS_JSON STATS_XML
OPTIONS_SINGLE= GSSAPI
OPTIONS_SINGLE_GSSAPI= GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE
.if defined(BIND_TOOLS_SLAVE)
-OPTIONS_EXCLUDE= DOCS GEOIP LMDB \
- OVERRIDECACHE QUERYTRACE START_LATE \
- TCP_FASTOPEN
-.endif # BIND_TOOLS_SLAVE
+OPTIONS_EXCLUDE= DOCS GEOIP LMDB OVERRIDECACHE QUERYTRACE START_LATE \
+ STATS_JSON STATS_XML TCP_FASTOPEN
+.endif # BIND_TOOLS_SLAVE
OPTIONS_SUB= yes
@@ -109,51 +113,50 @@ LMDB_DESC= Use LMDB for zone management
OVERRIDECACHE_DESC= Use the override-cache patch
QUERYTRACE_DESC= Enable the very verbose query tracelogging
START_LATE_DESC= Start BIND late in the boot process (see help)
+STATS_DESC= Statistics channels
+STATS_JSON_DESC= Enable JSON statistics channel
+STATS_XML_DESC= Enable XML statistics channel
TCP_FASTOPEN_DESC= RFC 7413 support
-DOCS_ALL_TARGET= all html
-DOCS_BUILD_DEPENDS= sphinx-build:textproc/py-sphinx \
- ${PYTHON_PKGNAMEPREFIX}sphinx_rtd_theme>0:textproc/py-sphinx_rtd_theme@${PY_FLAVOR}
-DOCS_USES= gmake python:env
-
-DNSTAP_CONFIGURE_ENABLE= dnstap
DNSTAP_LIB_DEPENDS= libfstrm.so:devel/fstrm \
libprotobuf-c.so:devel/protobuf-c
+DNSTAP_CONFIGURE_ENABLE= dnstap
+
+DOCS_BUILD_DEPENDS= ${PYTHON_PKGNAMEPREFIX}sphinx_rtd_theme>0:textproc/py-sphinx_rtd_theme@${PY_FLAVOR} \
+ sphinx-build:textproc/py-sphinx
+DOCS_USES= gmake python:env
+DOCS_ALL_TARGET= all html
FIXED_RRSET_CONFIGURE_ENABLE= fixed-rrset
+GEOIP_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb
GEOIP_CONFIGURE_ENABLE= geoip
GEOIP_CONFIGURE_WITH= maxminddb
-GEOIP_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb
-GSSAPI_BASE_CONFIGURE_ON= --with-gssapi="${KRB5CONFIG}" \
- ${GSSAPI_CONFIGURE_ARGS}
GSSAPI_BASE_USES= gssapi
+GSSAPI_BASE_CONFIGURE_ON= ${GSSAPI_CONFIGURE_ARGS} \
+ --with-gssapi="${KRB5CONFIG}"
-GSSAPI_HEIMDAL_CONFIGURE_ON= --with-gssapi="${KRB5CONFIG}" \
- ${GSSAPI_CONFIGURE_ARGS}
GSSAPI_HEIMDAL_USES= gssapi:heimdal
+GSSAPI_HEIMDAL_CONFIGURE_ON= ${GSSAPI_CONFIGURE_ARGS} \
+ --with-gssapi="${KRB5CONFIG}"
-GSSAPI_MIT_CONFIGURE_ON= --with-gssapi="${KRB5CONFIG}" \
- ${GSSAPI_CONFIGURE_ARGS}
GSSAPI_MIT_USES= gssapi:mit
+GSSAPI_MIT_CONFIGURE_ON= ${GSSAPI_CONFIGURE_ARGS} \
+ --with-gssapi="${KRB5CONFIG}"
GSSAPI_NONE_CONFIGURE_ON= --without-gssapi
-IDN_CONFIGURE_OFF= --without-libidn2
-IDN_CONFIGURE_ON= ${ICONV_CONFIGURE_BASE} \
- --with-libidn2=${LOCALBASE}
IDN_LIB_DEPENDS= libidn2.so:dns/libidn2
IDN_USES= iconv
-
-JSON_CONFIGURE_WITH= json-c
-JSON_LIB_DEPENDS= libjson-c.so:devel/json-c
-JSON_LDFLAGS= -L${LOCALBASE}/lib -ljson-c
+IDN_CONFIGURE_ON= ${ICONV_CONFIGURE_BASE} \
+ --with-libidn2=${LOCALBASE}
+IDN_CONFIGURE_OFF= --without-libidn2
LARGE_FILE_CONFIGURE_ENABLE= largefile
-LMDB_CONFIGURE_WITH= lmdb=${LOCALBASE}
LMDB_LIB_DEPENDS= liblmdb.so:databases/lmdb
+LMDB_CONFIGURE_WITH= lmdb=${LOCALBASE}
OVERRIDECACHE_EXTRA_PATCHES= ${FILESDIR}/extrapatch-bind-min-override-ttl
@@ -164,6 +167,13 @@ START_LATE_SUB_LIST= NAMED_BEFORE="LOGIN" \
START_LATE_SUB_LIST_OFF= NAMED_BEFORE="SERVERS" \
NAMED_REQUIRE="NETWORKING ldconfig syslogd"
+STATS_JSON_LIB_DEPENDS= libjson-c.so:devel/json-c
+STATS_JSON_CONFIGURE_WITH= json-c
+STATS_JSON_LDFLAGS= -L${LOCALBASE}/lib -ljson-c
+
+STATS_XML_USE= GNOME=libxml2
+STATS_XML_CONFIGURE_WITH= libxml2
+
TCP_FASTOPEN_CONFIGURE_ENABLE= tcp-fastopen
.include <bsd.port.options.mk>
@@ -176,7 +186,7 @@ BUILD_DEPENDS+= cmocka>0:sysutils/cmocka
.endif
.if !${PORT_OPTIONS:MDOCS}
-CONFIGURE_ENV+= ac_cv_path_SPHINX_BUILD=
+CONFIGURE_ENV+= ac_cv_path_SPHINX_BUILD=
.endif
.include <bsd.port.pre.mk>
@@ -223,6 +233,6 @@ do-install:
done
@${RM} -r ${STAGEDIR}${PREFIX}/include
-.endif # BIND_TOOLS_SLAVE
+.endif # BIND_TOOLS_SLAVE
.include <bsd.port.post.mk>
diff --git a/dns/dnsmasq-devel/Makefile b/dns/dnsmasq-devel/Makefile
index d1889c18e436..79e3d4a4d0a0 100644
--- a/dns/dnsmasq-devel/Makefile
+++ b/dns/dnsmasq-devel/Makefile
@@ -1,5 +1,5 @@
PORTNAME= dnsmasq
-DISTVERSION= 2.92test13 # remember to bump PORTEPOCH when going from test to rc!
+DISTVERSION= 2.92test14 # remember to bump PORTEPOCH when going from test to rc!
# Leave the PORTREVISION in even if 0 to avoid accidental PORTEPOCH bumps:
PORTREVISION= 0
PORTEPOCH= 6
diff --git a/dns/dnsmasq-devel/distinfo b/dns/dnsmasq-devel/distinfo
index 83ac6d911bd3..bf9c91d33cbb 100644
--- a/dns/dnsmasq-devel/distinfo
+++ b/dns/dnsmasq-devel/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1749509231
-SHA256 (dnsmasq-2.92test13.tar.xz) = ee47735aeabb9f19cac70d103bec2f26f63fb66fdd50ffa6f6a18df80f00deb6
-SIZE (dnsmasq-2.92test13.tar.xz) = 582912
+TIMESTAMP = 1750716872
+SHA256 (dnsmasq-2.92test14.tar.xz) = cacd60d76b11ead7eacc1bbf3e7ed48cd667989af49b48f1fe4872946dbad51b
+SIZE (dnsmasq-2.92test14.tar.xz) = 583132
diff --git a/dns/dnssec-rr/Makefile b/dns/dnssec-rr/Makefile
new file mode 100644
index 000000000000..96d05c9969da
--- /dev/null
+++ b/dns/dnssec-rr/Makefile
@@ -0,0 +1,46 @@
+PORTNAME= dnssec-rr
+DISTVERSION= 0.2
+CATEGORIES= dns security
+MASTER_SITES= https://git.sr.ht/~mcf/dnssec-rr/refs/download/${DISTVERSION}/
+
+MAINTAINER= dch@FreeBSD.org
+COMMENT= Set of C programs for working with DNSSEC
+WWW= https://git.sr.ht/~mcf/dnssec-rr
+
+LICENSE= ISCL
+LICENSE_FILE= ${WRKSRC}/LICENSE
+
+LIB_DEPENDS= libbearssl.so:security/bearssl
+
+USES= localbase:ldflags
+
+PLIST_FILES= bin/dnskey \
+ bin/ds \
+ bin/nsec \
+ bin/rrsig \
+ bin/tlsa \
+ share/man/man1/dnskey.1.gz \
+ share/man/man1/ds.1.gz \
+ share/man/man1/nsec.1.gz \
+ share/man/man1/rrsig.1.gz \
+ share/man/man1/tlsa.1.gz
+
+PORTDOCS= README.md
+
+OPTIONS_DEFINE= DOCS
+
+do-install:
+ ${MKDIR} ${STAGEDIR}${MANDIRS}/man1
+.for i in dnskey ds nsec rrsig tlsa
+ ${INSTALL_MAN} ${WRKSRC}/$i.1 \
+ ${STAGEDIR}${MANDIRS}/man1
+ ${INSTALL_PROGRAM} ${WRKSRC}/$i \
+ ${STAGEDIR}${PREFIX}/bin
+.endfor
+
+do-install-DOCS-on:
+ ${MKDIR} ${STAGEDIR}${DOCSDIR}
+ ${INSTALL_DATA} ${WRKSRC}/README.md \
+ ${STAGEDIR}${DOCSDIR}
+
+.include <bsd.port.mk>
diff --git a/dns/dnssec-rr/distinfo b/dns/dnssec-rr/distinfo
new file mode 100644
index 000000000000..871b3d94cb5b
--- /dev/null
+++ b/dns/dnssec-rr/distinfo
@@ -0,0 +1,3 @@
+TIMESTAMP = 1750592067
+SHA256 (dnssec-rr-0.2.tar.gz) = 658699a0c094ae1715c7b6bc2b638dac24f21f25c889aaf4c27359a4cf40bdaf
+SIZE (dnssec-rr-0.2.tar.gz) = 19425
diff --git a/dns/dnssec-rr/files/patch-Makefile b/dns/dnssec-rr/files/patch-Makefile
new file mode 100644
index 000000000000..94e2a03ba201
--- /dev/null
+++ b/dns/dnssec-rr/files/patch-Makefile
@@ -0,0 +1,10 @@
+--- Makefile.orig 2025-06-21 08:07:07 UTC
++++ Makefile
+@@ -1,7 +1,5 @@
+ .PHONY: all install clean
+
+--include config.mk
+-
+ PREFIX?=/usr/local
+ BINDIR?=$(PREFIX)/bin
+ MANDIR?=$(PREFIX)/share/man
diff --git a/dns/dnssec-rr/files/patch-zone.c b/dns/dnssec-rr/files/patch-zone.c
new file mode 100644
index 000000000000..448e52f8b919
--- /dev/null
+++ b/dns/dnssec-rr/files/patch-zone.c
@@ -0,0 +1,10 @@
+--- zone.c.orig 2025-06-21 08:09:31 UTC
++++ zone.c
+@@ -4,6 +4,7 @@
+ #include <stdio.h>
+ #include <stdlib.h>
+ #include <arpa/inet.h>
++#include <sys/socket.h>
+ #include "dnssec.h"
+
+ struct input {
diff --git a/dns/dnssec-rr/pkg-descr b/dns/dnssec-rr/pkg-descr
new file mode 100644
index 000000000000..ff114db05955
--- /dev/null
+++ b/dns/dnssec-rr/pkg-descr
@@ -0,0 +1,9 @@
+A set of tools for working with DNSSEC, using BearSSL for cryptography.
+
+- dnskey: generate DNSKEY records from private keys
+- ds: generate DS records for parent zones
+- nsec: generate NSEC records for zones
+- rrsig: sign records in zones, generating RRSIG records
+- tlsa: generate DANE TLSA records for certificates
+
+See also https://mforney.org/blog/2020-05-21-securing-your-zone-with-dnssec-and-dane.html
diff --git a/dns/kf6-kdnssd/distinfo b/dns/kf6-kdnssd/distinfo
index 79584417d53a..8b72ef83a820 100644
--- a/dns/kf6-kdnssd/distinfo
+++ b/dns/kf6-kdnssd/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1746358557
-SHA256 (KDE/frameworks/6.14/kdnssd-6.14.0.tar.xz) = ce903952b908566b99d50a4a549825ea4ef95d7544686cdccccf693b81106199
-SIZE (KDE/frameworks/6.14/kdnssd-6.14.0.tar.xz) = 2269284
+TIMESTAMP = 1749476623
+SHA256 (KDE/frameworks/6.15/kdnssd-6.15.0.tar.xz) = 192164a395ce9f0667184cae78f369a7c0b8acab0e0d073cdedb2a54bc7c4d5a
+SIZE (KDE/frameworks/6.15/kdnssd-6.15.0.tar.xz) = 2246100