Hi, NSD 4.7.0rc1 pre-release is available: https://nlnetlabs.nl/downloads/nsd/nsd-4.7.0rc1.tar.gz sha256 ecff133ea4f78b8476ce71811cd7fee6844e4c34d5e64115822ca5b53ada2360 pgp https://nlnetlabs.nl/downloads/nsd/nsd-4.7.0rc1.tar.gz.asc This release adds a script for bash autocompletion for nsd-control. Also nsd-control can be configured to use unencrypted operation also when compiled without openssl. There is also a systemd service unit example file contributed. The dnstap log service can be contacted over TCP, with the dnstap-ip: ip option. It is also possible to use TLS, with dnstap-tls, it is enabled by default, and can be configured with the dnstap-server-name, dnstap-cert-bundle, dnstap-client-key-file and dnstap-client-cert-file options. The configure option `--enable-root-server` is obsolete, it is no longer used and defaults to on. In addition, the build file should support multicore build with flex and bison more easily. 4.7.0 ===============FEATURES: - Merge #263: Add bash autocompletion script for nsd-control. - Fix #267: Allow unencrypted local operation of nsd-control. - Merge #269 from Fale: Add systemd service unit. - Fix #271: DNSTAP over TCP, with dnstap-ip: "127.0.0.1 at 3333". - dnstap over TLS, default enabled. Configured with the options dnstap-tls, dnstap-tls-server-name, dnstap-tls-cert-bundle, dnstap-tls-client-key-file and dnstap-tls-client-cert-file. BUG FIXES: - Fix #239: -Wincompatible-pointer-types warning in remote.c. - Fix configure for -Wstrict-prototypes. - Fix #262: Zone(s) not synchronizing properly via TLS. - Fix for #262: More error logging for SSL read failures for zone transfers. - Merge #265: Fix C99 compatibility issue. - Fix #266: Fix build with --without-ssl. - Fix for #267: neater variable definitions. - Fix #270: reserved identifier violation. - Fix to clean more memory on exit of dnstap collector. - Fix dnstap to not check socket path when using IP address. - Fix to compile without ssl with dnstap-tls code. - Dnstap tls code fixes. - Fix include brackets for ssl.h include statements, instead of quotes. - Fix static analyzer warning about nsd_event_method initialization. - Fix #273: Large TXT record breaks AXFR. - Fix ixfr create from adding too many record types. - Fix cirrus script for submit to coverity scan to libtoolize the configure script components config.guess and config.sub. - Fix readme status badge links. - make depend. - Fix for build to run flex and bison before compiling code that needs the headers. - Fix to remove unused whitespace from acx_nlnetlabs.m4 and config.h. - For #279: Note that autoreconf -fi creates the configure script and also the needed auxiliary files, for autoconf 2.69 and 2.71. - Fix unused variable warning in unit test, from clang compile. - Fix #240: Prefix messages originating from verifier. - Fix #275: Drop unnecessary root server checks. Best regards, Wouter
Hi, this might be a case of "I broke it, I get to keep both pieces." Commit 36ae6811f8633c7df32fff40a15e4b05b328c8a9 [1] adds a built dependency on compat/cpuset.h to every .o file, even if that is not needed on the OS one tries to build. In OpenBSD we do not carry the compat/ folder at all because we don't want to accidentally pick up alternative implementations over our own libc. Having a dependency on compat/cpuset.h breaks the build thusly: make: don't know how to make /usr/src/usr.sbin/nsd/compat/cpuset.h (prerequisite of: answer.o) HAVE_CPUSET_T guards the cpu affinity feature in nsd.c, server.c and util.c just fine. So if the OS does not support cpu affinity compat/cpuset.h is not needed at all. Was that "make depend" change intentional or was that picked up because make depend was run on a system with cpu affinity and then committed? I'm fine with an answer along the lines of "this is OpenBSD's problem". I just want to make sure. Thanks, Florian [1] https://github.com/NLnetLabs/nsd/commit/36ae6811f8633c7df32fff40a15e4b05b328c8a9 -- In my defence, I have been left unsupervised.
On 31/05/2023 15:07, Wouter Wijngaards via nsd-users wrote: Hi Wouter,> NSD 4.7.0rc1 pre-release is available:This builds just fine on CentOS 7 and Oracle Linux 9. The only warning emitted during the build is: xfrd.c: In function 'xfrd_process_soa_info_task': xfrd.c:573:16: warning: variable 'before' set but not used [-Wunused-but-set-variable] Regards, Anand
Am 31.05.23 um 15:07 schrieb Wouter Wijngaards via nsd-users:> NSD 4.7.0rc1 pre-release is available:build without warnings on Debian 11 and run in my lab environment Andreas
Hi> Am 31.05.2023 um 15:07 schrieb Wouter Wijngaards via nsd-users <nsd-users at lists.nlnetlabs.nl>: > > NSD 4.7.0rc1 pre-release is available: > https://nlnetlabs.nl/downloads/nsd/nsd-4.7.0rc1.tar.gz > sha256 ecff133ea4f78b8476ce71811cd7fee6844e4c34d5e64115822ca5b53ada2360 > pgp https://nlnetlabs.nl/downloads/nsd/nsd-4.7.0rc1.tar.gz.ascBuilds fine on Solaris 10. Regards Ihsan -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 4018 bytes Desc: not available URL: <http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20230601/3144c9cf/attachment-0001.bin>
Hi, NSD 4.7.0 is available: https://nlnetlabs.nl/downloads/nsd/nsd-4.7.0.tar.gz sha256 8faca44e299ad2915fa000887ab1632631ea68709c62ce35f110bfe721ecf214 pgp https://nlnetlabs.nl/downloads/nsd/nsd-4.7.0.tar.gz.asc This release adds a script for bash autocompletion for nsd-control. Also nsd-control can be configured to use unencrypted operation also when compiled without openssl. There is also a systemd service unit example file contributed. The dnstap log service can be contacted over TCP, with the dnstap-ip: ip option. It is also possible to use TLS, with dnstap-tls, it is enabled by default, and can be configured with the dnstap-server-name, dnstap-cert-bundle, dnstap-client-key-file and dnstap-client-cert-file options. The configure option `--enable-root-server` is obsolete, it is no longer used and defaults to on. In addition, the build file should support multicore build with flex and bison more easily. 4.7.0 ===============FEATURES: - Merge #263: Add bash autocompletion script for nsd-control. - Fix #267: Allow unencrypted local operation of nsd-control. - Merge #269 from Fale: Add systemd service unit. - Fix #271: DNSTAP over TCP, with dnstap-ip: "127.0.0.1 at 3333". - dnstap over TLS, default enabled. Configured with the options dnstap-tls, dnstap-tls-server-name, dnstap-tls-cert-bundle, dnstap-tls-client-key-file and dnstap-tls-client-cert-file. BUG FIXES: - Fix #239: -Wincompatible-pointer-types warning in remote.c. - Fix configure for -Wstrict-prototypes. - Fix #262: Zone(s) not synchronizing properly via TLS. - Fix for #262: More error logging for SSL read failures for zone transfers. - Merge #265: Fix C99 compatibility issue. - Fix #266: Fix build with --without-ssl. - Fix for #267: neater variable definitions. - Fix #270: reserved identifier violation. - Fix to clean more memory on exit of dnstap collector. - Fix dnstap to not check socket path when using IP address. - Fix to compile without ssl with dnstap-tls code. - Dnstap tls code fixes. - Fix include brackets for ssl.h include statements, instead of quotes. - Fix static analyzer warning about nsd_event_method initialization. - Fix #273: Large TXT record breaks AXFR. - Fix ixfr create from adding too many record types. - Fix cirrus script for submit to coverity scan to libtoolize the configure script components config.guess and config.sub. - Fix readme status badge links. - make depend. - Fix for build to run flex and bison before compiling code that needs the headers. - Fix to remove unused whitespace from acx_nlnetlabs.m4 and config.h. - For #279: Note that autoreconf -fi creates the configure script and also the needed auxiliary files, for autoconf 2.69 and 2.71. - Fix unused variable warning in unit test, from clang compile. - Fix #240: Prefix messages originating from verifier. - Fix #275: Drop unnecessary root server checks. Best regards, Wouter