svn commit: r492694 - in head/dns/unbound: . files
Renato Botelho
garga at FreeBSD.org
Mon Feb 11 13:58:10 UTC 2019
Author: garga
Date: Mon Feb 11 13:58:08 2019
New Revision: 492694
URL: https://svnweb.freebsd.org/changeset/ports/492694
Log:
dns/unbound: Import patch to fix hostname verification with OpenSSL 1.0.2
PR: 235571
Approved by: Jaap Akkerhuis <jaap at NLnetLabs.nl> (maintainer)
Obtained from: https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=4206#c5
https://github.com/pfsense/FreeBSD-ports/commit/af2c493a0dfa99e2afc6e3f9236aad10021d6b39
Sponsored by: Rubicon Communications, LLC (Netgate)
Added:
head/dns/unbound/files/patch-daemon_remote.c (contents, props changed)
head/dns/unbound/files/patch-iterator_iter__fwd.c (contents, props changed)
head/dns/unbound/files/patch-iterator_iter__hints.c (contents, props changed)
Modified:
head/dns/unbound/Makefile
Modified: head/dns/unbound/Makefile
==============================================================================
--- head/dns/unbound/Makefile Mon Feb 11 13:25:36 2019 (r492693)
+++ head/dns/unbound/Makefile Mon Feb 11 13:58:08 2019 (r492694)
@@ -3,6 +3,7 @@
PORTNAME= unbound
PORTVERSION= 1.9.0
+PORTREVISION= 1
CATEGORIES= dns
MASTER_SITES= https://www.nlnetlabs.nl/downloads/unbound/ \
https://distfiles.crux.guru/
Added: head/dns/unbound/files/patch-daemon_remote.c
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ head/dns/unbound/files/patch-daemon_remote.c Mon Feb 11 13:58:08 2019 (r492694)
@@ -0,0 +1,11 @@
+--- daemon/remote.c.orig 2019-01-23 09:35:52 UTC
++++ daemon/remote.c
+@@ -1987,7 +1987,7 @@ parse_delegpt(RES* ssl, char* args, uint8_t* nm, int a
+ return NULL;
+ }
+ } else {
+-#ifndef HAVE_SSL_SET1_HOST
++#if ! defined(HAVE_SSL_SET1_HOST) && ! defined(HAVE_X509_VERIFY_PARAM_SET1_HOST)
+ if(auth_name)
+ log_err("no name verification functionality in "
+ "ssl library, ignored name for %s", todo);
Added: head/dns/unbound/files/patch-iterator_iter__fwd.c
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ head/dns/unbound/files/patch-iterator_iter__fwd.c Mon Feb 11 13:58:08 2019 (r492694)
@@ -0,0 +1,11 @@
+--- iterator/iter_fwd.c.orig 2018-08-09 12:44:40 UTC
++++ iterator/iter_fwd.c
+@@ -239,7 +239,7 @@ read_fwds_addr(struct config_stub* s, struct delegpt*
+ s->name, p->str);
+ return 0;
+ }
+-#ifndef HAVE_SSL_SET1_HOST
++#if ! defined(HAVE_SSL_SET1_HOST) && ! defined(HAVE_X509_VERIFY_PARAM_SET1_HOST)
+ if(tls_auth_name)
+ log_err("no name verification functionality in "
+ "ssl library, ignored name for %s", p->str);
Added: head/dns/unbound/files/patch-iterator_iter__hints.c
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ head/dns/unbound/files/patch-iterator_iter__hints.c Mon Feb 11 13:58:08 2019 (r492694)
@@ -0,0 +1,11 @@
+--- iterator/iter_hints.c.orig 2018-08-09 12:44:40 UTC
++++ iterator/iter_hints.c
+@@ -252,7 +252,7 @@ read_stubs_addr(struct config_stub* s, struct delegpt*
+ s->name, p->str);
+ return 0;
+ }
+-#ifndef HAVE_SSL_SET1_HOST
++#if ! defined(HAVE_SSL_SET1_HOST) && ! defined(HAVE_X509_VERIFY_PARAM_SET1_HOST)
+ if(auth_name)
+ log_err("no name verification functionality in "
+ "ssl library, ignored name for %s", p->str);
More information about the svn-ports-all
mailing list