Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Apr 2014 16:01:28 +0000 (UTC)
From:      Mathieu Arnold <mat@FreeBSD.org>
To:        ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org
Subject:   svn commit: r350819 - in head/dns: . bind910 bind910/files
Message-ID:  <201404101601.s3AG1S8g011625@svn.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: mat
Date: Thu Apr 10 16:01:27 2014
New Revision: 350819
URL: http://svnweb.freebsd.org/changeset/ports/350819
QAT: https://qat.redports.org/buildarchive/r350819/

Log:
  Introduce BIND 9.10.0rc1
  
  BIND 9.10 includes a number of changes from earlier releases, including:
  - DNS Response-rate limiting (DNS RRL)
  - A new "prefetch" option can improve recursive resolver performance
  - ACLs can now be specified based on geographic location using the
    MaxMind GeoIP databases.
  - A new compile-time option, NATIVE_PKCS11 allows the BIND 9
    cryptography functions to use the PKCS#11 API natively.
  
                                 *NOTE*
            This is a release candidate, it may contain bugs.
                                 *NOTE*
  
  Changes:	https://lists.isc.org/pipermail/bind-announce/2014-April/000906.html
  Sponsored by:	Absolight

Added:
  head/dns/bind910/
     - copied from r350801, head/dns/bind99/
  head/dns/bind910/files/patch-bin__tests__system__dlzexternal__Makefile.in   (contents, props changed)
  head/dns/bind910/files/patch-lib__dns__include__dns__Makefile.in   (contents, props changed)
  head/dns/bind910/files/patch-lib__isc__include__isc__Makefile.in   (contents, props changed)
  head/dns/bind910/files/patch-lib__isc__unix__include__isc__Makefile.in   (contents, props changed)
  head/dns/bind910/pkg-help   (contents, props changed)
Deleted:
  head/dns/bind910/files/patch-configure
  head/dns/bind910/files/patch-lib__isc__include__isc__file.h
Modified:
  head/dns/Makefile
  head/dns/bind910/Makefile
  head/dns/bind910/distinfo
  head/dns/bind910/files/named.in
  head/dns/bind910/files/patch-bin__dnssec__Makefile.in
  head/dns/bind910/pkg-plist

Modified: head/dns/Makefile
==============================================================================
--- head/dns/Makefile	Thu Apr 10 15:50:37 2014	(r350818)
+++ head/dns/Makefile	Thu Apr 10 16:01:27 2014	(r350819)
@@ -9,6 +9,7 @@
     SUBDIR += autotrust
     SUBDIR += bind-tools
     SUBDIR += bind10
+    SUBDIR += bind910
     SUBDIR += bind98
     SUBDIR += bind99
     SUBDIR += bindgraph

Modified: head/dns/bind910/Makefile
==============================================================================
--- head/dns/bind99/Makefile	Thu Apr 10 12:37:05 2014	(r350801)
+++ head/dns/bind910/Makefile	Thu Apr 10 16:01:27 2014	(r350819)
@@ -1,12 +1,11 @@
 # $FreeBSD$
 
 PORTNAME=	bind
-PORTVERSION=	9.9.5
-PORTREVISION=	9
+PORTVERSION=	9.10.0rc1
 CATEGORIES=	dns net ipv6
 MASTER_SITES=	${MASTER_SITE_ISC}
 MASTER_SITE_SUBDIR=	bind9/${ISCVERSION}
-PKGNAMESUFFIX?=	99
+PKGNAMESUFFIX=	910
 DISTNAME=	${PORTNAME}-${ISCVERSION}
 
 MAINTAINER=	mat@FreeBSD.org
@@ -15,7 +14,7 @@ COMMENT=	BIND DNS suite with updated DNS
 LICENSE=	ISCL
 
 # ISC releases things like 9.8.0-P1, which our versioning doesn't like
-ISCVERSION=	9.9.5
+ISCVERSION=	9.10.0rc1
 
 MAKE_JOBS_UNSAFE=	yes
 
@@ -29,13 +28,18 @@ CONFIGURE_ARGS=	--localstatedir=/var --d
 		--without-python
 ETCDIR=		${PREFIX}/etc/namedb
 
-CONFLICTS=	bind9*-9.[45678].* bind9*-sdb-9.[45678].* bind-tools-9.*
+CONFLICTS=	bind9*-9.[456789].* bind9*-sdb-9.[456789].* bind-tools-9.*
 
-OPTIONS_DEFAULT=	IPV6 SSL THREADS
-OPTIONS_DEFINE=		SSL IDN REPLACE_BASE LARGE_FILE \
+OPTIONS_SUB=	yes
+OPTIONS_DEFAULT=	IPV6 SSL THREADS SIGCHASE IDN
+OPTIONS_DEFINE=		IDN REPLACE_BASE LARGE_FILE \
 			FIXED_RRSET SIGCHASE IPV6 THREADS GSSAPI FILTER_AAAA
+OPTIONS_RADIO=	CRYPTO
+OPTIONS_RADIO_CRYPTO=	SSL NATIVE_PKCS11
+
 .if !defined(BIND_TOOLS_SLAVE)
-OPTIONS_DEFINE+=	LINKS RPZ_NSIP RPZ_NSDNAME RRL DOCS RPZ_PATCH NEWSTATS
+OPTIONS_DEFAULT+=	RRL
+OPTIONS_DEFINE+=	LINKS RPZ_NSIP RPZ_NSDNAME RRL DOCS NEWSTATS GEOIP
 OPTIONS_GROUP=		DLZ
 OPTIONS_GROUP_DLZ=	DLZ_POSTGRESQL DLZ_MYSQL DLZ_BDB \
 			DLZ_LDAP DLZ_FILESYSTEM DLZ_STUB
@@ -47,12 +51,14 @@ LARGE_FILE_DESC=	64-bit file support
 FIXED_RRSET_DESC=	Enable fixed rrset ordering
 SIGCHASE_DESC=		dig/host/nslookup will do DNSSEC validation
 FILTER_AAAA_DESC=	Enable filtering of AAAA records
+CRYPTO_DESC=		Choose which crypto engine to use
+NATIVE_PKCS11_DESC=	Use PKCS\#11 native API (**READ HELP**)
+GEOIP_DESC=		Allow geographically based ACL.
 
 LINKS_DESC=		Create conf file symlinks in ${PREFIX}
 NEWSTATS_DESC=		Enable alternate xml statistics channel format
 RPZ_NSIP_DESC=		Enable RPZ NSIP trigger rules
 RPZ_NSDNAME_DESC=	Enable RPZ NSDNAME policy records
-RPZ_PATCH_DESC=		RPZ improvements
 RRL_DESC=		Response Rate Limiting
 DLZ_DESC=		Dynamically Loadable Zones
 DLZ_POSTGRESQL_DESC=	DLZ Postgres driver
@@ -85,6 +91,11 @@ IPV6_CONFIGURE_ENABLE=	ipv6
 
 FILTER_AAAA_CONFIGURE_ENABLE=	filter-aaaa
 
+NATIVE_PKCS11_CONFIGURE_ENABLE=	native-pkcs11
+
+GEOIP_CONFIGURE_WITH=	geoip
+GEOIP_LIB_DEPENDS=	libGeoIP.so:${PORTSDIR}/net/GeoIP
+
 DLZ_POSTGRESQL_CONFIGURE_ON=	--with-dlz-postgres=yes
 DLZ_POSTGRESQL_USE=		pgsql=yes
 
@@ -94,9 +105,6 @@ RPZ_NSIP_CONFIGURE_ENABLE=	rpz-nsip
 
 RPZ_NSDNAME_CONFIGURE_ENABLE=	rpz-nsdname
 
-RPZ_PATCH_PATCHFILES=	9.9.5-rpz2+rl.14038.05.patch:vix
-RPZ_PATCH_PATCH_SITES=	http://ss.vix.su/~vjs/:vix
-
 RRL_CONFIGURE_ENABLE=	rrl
 
 DLZ_MYSQL_CONFIGURE_ON=	--with-dlz-mysql=yes
@@ -167,6 +175,9 @@ USE_RC_SUBR+=	named
 SUB_FILES+=	named.conf
 .else
 PLIST_SUB+=	NOBASE="@comment " BASE=""
+.if ${PORT_OPTIONS:MSSL}
+WITH_OPENSSL_PORT=	yes
+.endif
 .endif
 
 .if !defined(BIND_TOOLS_SLAVE)

Modified: head/dns/bind910/distinfo
==============================================================================
--- head/dns/bind99/distinfo	Thu Apr 10 12:37:05 2014	(r350801)
+++ head/dns/bind910/distinfo	Thu Apr 10 16:01:27 2014	(r350819)
@@ -1,4 +1,2 @@
-SHA256 (bind-9.9.5.tar.gz) = d4b64c1dde442145a316679acff2df4008aa117ae52dfa3a6bc69efecc7840d1
-SIZE (bind-9.9.5.tar.gz) = 7729695
-SHA256 (9.9.5-rpz2+rl.14038.05.patch) = b8c47738912fdf9311c0251368f036eb56cfbfb47d15f199e1112bddae5a0aa8
-SIZE (9.9.5-rpz2+rl.14038.05.patch) = 238938
+SHA256 (bind-9.10.0rc1.tar.gz) = a529d80d4ea474440f079a4f7407e37407387fcf06b81a534ebc9fb8d1c6019a
+SIZE (bind-9.10.0rc1.tar.gz) = 8285665

Modified: head/dns/bind910/files/named.in
==============================================================================
--- head/dns/bind99/files/named.in	Thu Apr 10 12:37:05 2014	(r350801)
+++ head/dns/bind910/files/named.in	Thu Apr 10 16:01:27 2014	(r350819)
@@ -31,6 +31,7 @@ named_wait=${named_wait:-"NO"}			# Wait 
 named_wait_host=${named_wait_host:-"localhost"}	# Hostname to check if named_wait is enabled
 named_auto_forward=${named_auto_forward:-"NO"}	# Set up forwarders from /etc/resolv.conf
 named_auto_forward_only=${named_auto_forward_only:-"NO"}	# Do "forward only" instead of "forward first"
+%%NATIVE_PKCS11%%named_pkcs11_engine=${named_pkcs11_engine:-""}	# Path to the PKCS#11 library to use.
 named_confdir="${named_conf%/*}" 		# Not a configuration directive but makes rclint happy.
 
 named_poststart()
@@ -98,6 +99,14 @@ named_prestart()
 
 	command_args="-u ${named_uid:=root} -c $named_conf $command_args"
 
+%%NATIVE_PKCS11%%	if [ -z "$named_pkcs11_engine"]; then
+%%NATIVE_PKCS11%%	  err 3 "named_pkcs11_engine has to be set to the PKCS#11 engine's library you want to use"
+%%NATIVE_PKCS11%%	elif [ ! -f $named_pkcs11_engine ]; then
+%%NATIVE_PKCS11%%	  err 3 "named_pkcs11_engine the PKCS#11 engine's library you want to use doesn't exist"
+%%NATIVE_PKCS11%%	else
+%%NATIVE_PKCS11%%	  command_args="-E $named_pkcs11_engine $command_args"
+%%NATIVE_PKCS11%%	fi
+%%NATIVE_PKCS11%%
 	local line nsip firstns
 
 	# Create an rndc.key file for the user if none exists

Modified: head/dns/bind910/files/patch-bin__dnssec__Makefile.in
==============================================================================
--- head/dns/bind99/files/patch-bin__dnssec__Makefile.in	Thu Apr 10 12:37:05 2014	(r350801)
+++ head/dns/bind910/files/patch-bin__dnssec__Makefile.in	Thu Apr 10 16:01:27 2014	(r350819)
@@ -1,6 +1,6 @@
---- ./bin/dnssec/Makefile.in.orig	2014-01-27 19:58:24.000000000 +0100
-+++ ./bin/dnssec/Makefile.in	2014-04-09 15:42:28.000000000 +0200
-@@ -55,12 +55,12 @@
+--- ./bin/dnssec/Makefile.in.orig	2014-04-08 00:02:19.000000000 +0200
++++ ./bin/dnssec/Makefile.in	2014-04-10 15:49:49.000000000 +0200
+@@ -56,12 +56,12 @@
  
  MANPAGES =	dnssec-dsfromkey.8 dnssec-keyfromlabel.8 dnssec-keygen.8 \
  		dnssec-revoke.8 dnssec-settime.8 dnssec-signzone.8 \

Added: head/dns/bind910/files/patch-bin__tests__system__dlzexternal__Makefile.in
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/dns/bind910/files/patch-bin__tests__system__dlzexternal__Makefile.in	Thu Apr 10 16:01:27 2014	(r350819)
@@ -0,0 +1,11 @@
+--- ./bin/tests/system/dlzexternal/Makefile.in.orig	2014-04-08 00:02:19.000000000 +0200
++++ ./bin/tests/system/dlzexternal/Makefile.in	2014-04-10 15:49:49.000000000 +0200
+@@ -43,7 +43,7 @@
+ @BIND9_MAKE_RULES@
+ 
+ CFLAGS =	@CFLAGS@ @SO_CFLAGS@
+-SO_LDFLAGS =	@LDFLAGS@ @SO_LDFLAGS@
++SO_LDFLAGS =	@SO_LDFLAGS@
+ 
+ dlopen@EXEEXT@: ${DLOPENOBJS}
+ 	${LIBTOOL_MODE_LINK} ${PURIFY} ${CC} ${CFLAGS} ${LDFLAGS} \

Added: head/dns/bind910/files/patch-lib__dns__include__dns__Makefile.in
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/dns/bind910/files/patch-lib__dns__include__dns__Makefile.in	Thu Apr 10 16:01:27 2014	(r350819)
@@ -0,0 +1,11 @@
+--- ./lib/dns/include/dns/Makefile.in.orig	2014-04-08 00:02:19.000000000 +0200
++++ ./lib/dns/include/dns/Makefile.in	2014-04-10 15:49:49.000000000 +0200
+@@ -28,7 +28,7 @@
+ 		ecdb.h events.h fixedname.h forward.h geoip.h iptable.h \
+ 		journal.h keydata.h keyflags.h keytable.h keyvalues.h \
+ 		lib.h lookup.h log.h master.h masterdump.h message.h \
+-		name.h nsec3.h ncache.h nsec.h opcode.h \
++		name.h ncache.h nsec.h nsec3.h opcode.h order.h \
+ 		peer.h portlist.h private.h \
+ 		rbt.h rcode.h rdata.h rdataclass.h rdatalist.h \
+ 		rdataset.h rdatasetiter.h rdataslab.h rdatatype.h request.h \

Added: head/dns/bind910/files/patch-lib__isc__include__isc__Makefile.in
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/dns/bind910/files/patch-lib__isc__include__isc__Makefile.in	Thu Apr 10 16:01:27 2014	(r350819)
@@ -0,0 +1,11 @@
+--- ./lib/isc/include/isc/Makefile.in.orig	2014-04-08 00:02:19.000000000 +0200
++++ ./lib/isc/include/isc/Makefile.in	2014-04-10 15:49:49.000000000 +0200
+@@ -32,7 +32,7 @@
+ 		eventclass.h file.h formatcheck.h fsaccess.h \
+ 		hash.h heap.h hex.h hmacmd5.h hmacsha.h httpd.h \
+ 		interfaceiter.h @ISC_IPV6_H@ iterated_hash.h json.h \
+-		keyboard.h lang.h lex.h lfsr.h lib.h list.h log.h \
++		lang.h lex.h lfsr.h lib.h list.h log.h \
+ 		magic.h md5.h mem.h msgcat.h msgs.h mutexblock.h \
+ 		netaddr.h netscope.h ondestroy.h os.h parseint.h \
+ 		pool.h portset.h print.h queue.h quota.h \

Added: head/dns/bind910/files/patch-lib__isc__unix__include__isc__Makefile.in
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/dns/bind910/files/patch-lib__isc__unix__include__isc__Makefile.in	Thu Apr 10 16:01:27 2014	(r350819)
@@ -0,0 +1,13 @@
+--- ./lib/isc/unix/include/isc/Makefile.in.orig	2014-04-08 00:02:19.000000000 +0200
++++ ./lib/isc/unix/include/isc/Makefile.in	2014-04-10 15:49:49.000000000 +0200
+@@ -21,8 +21,8 @@
+ 
+ @BIND9_VERSION@
+ 
+-HEADERS =	dir.h int.h net.h netdb.h offset.h stat.h stdtime.h \
+-		strerror.h syslog.h time.h
++HEADERS =	dir.h int.h keyboard.h net.h netdb.h offset.h stat.h \
++		stdtime.h strerror.h syslog.h time.h
+ 
+ SUBDIRS =
+ TARGETS =

Added: head/dns/bind910/pkg-help
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ head/dns/bind910/pkg-help	Thu Apr 10 16:01:27 2014	(r350819)
@@ -0,0 +1,13 @@
+When using the NATIVE_PKCS11 option, BIND will use the PKCS#11
+engine specified by the named_pkcss11_engine variable in
+/etc/rc.conf for *all* crypto operations.
+
+This is primarily intended to be used in an authoritative
+case.
+
+If BIND will also be operating as a validating resolver,
+NATIVE_PKCS11 should not be used, because the HSM will be
+used for DNSSEC validations, and the HSM is likely to be
+slower than the CPU for this purpose.  Additionally, the HSM
+might not support all of the PKCS#11 API functions needed
+for signature verification.

Modified: head/dns/bind910/pkg-plist
==============================================================================
--- head/dns/bind99/pkg-plist	Thu Apr 10 12:37:05 2014	(r350801)
+++ head/dns/bind910/pkg-plist	Thu Apr 10 16:01:27 2014	(r350819)
@@ -1,4 +1,5 @@
 bin/bind9-config
+bin/delve
 bin/dig
 bin/host
 bin/isc-config.sh
@@ -7,8 +8,10 @@ bin/nsupdate
 include/bind9/check.h
 include/bind9/getaddresses.h
 include/bind9/version.h
+include/dns/acache.h
 include/dns/acl.h
 include/dns/adb.h
+include/dns/bit.h
 include/dns/byaddr.h
 include/dns/cache.h
 include/dns/callbacks.h
@@ -22,25 +25,36 @@ include/dns/dbtable.h
 include/dns/diff.h
 include/dns/dispatch.h
 include/dns/dlz.h
+include/dns/dlz_dlopen.h
+include/dns/dns64.h
 include/dns/dnssec.h
 include/dns/ds.h
+include/dns/dsdigest.h
+include/dns/ecdb.h
 include/dns/enumclass.h
 include/dns/enumtype.h
 include/dns/events.h
 include/dns/fixedname.h
+include/dns/forward.h
+include/dns/geoip.h
 include/dns/iptable.h
 include/dns/journal.h
+include/dns/keydata.h
 include/dns/keyflags.h
 include/dns/keytable.h
 include/dns/keyvalues.h
 include/dns/lib.h
 include/dns/log.h
+include/dns/lookup.h
 include/dns/master.h
 include/dns/masterdump.h
 include/dns/message.h
 include/dns/name.h
 include/dns/ncache.h
 include/dns/nsec.h
+include/dns/nsec3.h
+include/dns/opcode.h
+include/dns/order.h
 include/dns/peer.h
 include/dns/portlist.h
 include/dns/private.h
@@ -59,19 +73,24 @@ include/dns/resolver.h
 include/dns/result.h
 include/dns/rootns.h
 include/dns/rpz.h
+include/dns/rriterator.h
+include/dns/rrl.h
 include/dns/sdb.h
 include/dns/sdlz.h
 include/dns/secalg.h
 include/dns/secproto.h
 include/dns/soa.h
 include/dns/ssu.h
+include/dns/stats.h
 include/dns/tcpmsg.h
 include/dns/time.h
+include/dns/timer.h
 include/dns/tkey.h
 include/dns/tsec.h
 include/dns/tsig.h
 include/dns/ttl.h
 include/dns/types.h
+include/dns/update.h
 include/dns/validator.h
 include/dns/version.h
 include/dns/view.h
@@ -83,17 +102,27 @@ include/dst/dst.h
 include/dst/gssapi.h
 include/dst/lib.h
 include/dst/result.h
+include/irs/context.h
+include/irs/dnsconf.h
+include/irs/netdb.h
+include/irs/platform.h
+include/irs/resconf.h
+include/irs/types.h
+include/irs/version.h
+include/isc/aes.h
 include/isc/app.h
 include/isc/assertions.h
 include/isc/atomic.h
+include/isc/backtrace.h
+include/isc/base32.h
 include/isc/base64.h
 include/isc/bind9.h
-include/isc/bitstring.h
 include/isc/boolean.h
 include/isc/buffer.h
 include/isc/bufferlist.h
 include/isc/commandline.h
 include/isc/condition.h
+include/isc/crc64.h
 include/isc/dir.h
 include/isc/entropy.h
 include/isc/error.h
@@ -111,6 +140,8 @@ include/isc/httpd.h
 include/isc/int.h
 include/isc/interfaceiter.h
 include/isc/iterated_hash.h
+include/isc/json.h
+include/isc/keyboard.h
 include/isc/lang.h
 include/isc/lex.h
 include/isc/lfsr.h
@@ -124,17 +155,20 @@ include/isc/msgcat.h
 include/isc/msgs.h
 include/isc/mutex.h
 include/isc/mutexblock.h
-include/isc/namespace.h
 include/isc/net.h
 include/isc/netaddr.h
 include/isc/netdb.h
+include/isc/netscope.h
 include/isc/offset.h
 include/isc/once.h
 include/isc/ondestroy.h
 include/isc/os.h
 include/isc/parseint.h
 include/isc/platform.h
+include/isc/pool.h
+include/isc/portset.h
 include/isc/print.h
+include/isc/queue.h
 include/isc/quota.h
 include/isc/radix.h
 include/isc/random.h
@@ -153,9 +187,11 @@ include/isc/sha2.h
 include/isc/sockaddr.h
 include/isc/socket.h
 include/isc/stat.h
+include/isc/stats.h
 include/isc/stdio.h
 include/isc/stdlib.h
 include/isc/stdtime.h
+include/isc/strerror.h
 include/isc/string.h
 include/isc/symtab.h
 include/isc/syslog.h
@@ -184,6 +220,7 @@ include/isccc/util.h
 include/isccc/version.h
 include/isccfg/aclconf.h
 include/isccfg/cfg.h
+include/isccfg/dnsconf.h
 include/isccfg/grammar.h
 include/isccfg/log.h
 include/isccfg/namedconf.h
@@ -200,18 +237,30 @@ include/lwres/net.h
 include/lwres/netdb.h
 include/lwres/platform.h
 include/lwres/result.h
+include/lwres/stdlib.h
 include/lwres/version.h
+include/pk11/constants.h
+include/pk11/internal.h
+include/pk11/pk11.h
+include/pk11/result.h
+include/pkcs11/cryptoki.h
+include/pkcs11/pkcs11.h
+include/pkcs11/pkcs11f.h
+include/pkcs11/pkcs11t.h
 lib/libbind9.a
 lib/libdns.a
+lib/libirs.a
 lib/libisc.a
 lib/libisccc.a
 lib/libisccfg.a
 lib/liblwres.a
 %%SHARE_MAN%%man/man1/arpaname.1.gz
 %%SHARE_MAN%%man/man1/bind9-config.1.gz
+%%SHARE_MAN%%man/man1/delve.1.gz
 %%SHARE_MAN%%man/man1/dig.1.gz
 %%SHARE_MAN%%man/man1/host.1.gz
 %%SHARE_MAN%%man/man1/isc-config.sh.1.gz
+%%SHARE_MAN%%man/man1/named-rrchecker.1.gz
 %%SHARE_MAN%%man/man1/nslookup.1.gz
 %%SHARE_MAN%%man/man1/nsupdate.1.gz
 %%SHARE_MAN%%man/man3/lwres.3.gz
@@ -319,6 +368,11 @@ lib/liblwres.a
 %%SHARE_MAN%%man/man8/named-journalprint.8.gz
 %%SHARE_MAN%%man/man8/named.8.gz
 %%SHARE_MAN%%man/man8/nsec3hash.8.gz
+%%SHARE_MAN%%man/man8/tsig-keygen.8.gz
+%%NATIVE_PKCS11%%%%SHARE_MAN%%man/man8/pkcs11-destroy.8.gz
+%%NATIVE_PKCS11%%%%SHARE_MAN%%man/man8/pkcs11-keygen.8.gz
+%%NATIVE_PKCS11%%%%SHARE_MAN%%man/man8/pkcs11-list.8.gz
+%%NATIVE_PKCS11%%%%SHARE_MAN%%man/man8/pkcs11-tokens.8.gz
 %%SHARE_MAN%%man/man8/rndc-confgen.8.gz
 %%SHARE_MAN%%man/man8/rndc.8.gz
 sbin/arpaname
@@ -339,9 +393,15 @@ sbin/named-checkconf
 sbin/named-checkzone
 sbin/named-compilezone
 sbin/named-journalprint
+sbin/named-rrchecker
 sbin/nsec3hash
+%%NATIVE_PKCS11%%sbin/pkcs11-destroy
+%%NATIVE_PKCS11%%sbin/pkcs11-keygen
+%%NATIVE_PKCS11%%sbin/pkcs11-list
+%%NATIVE_PKCS11%%sbin/pkcs11-tokens
 sbin/rndc
 sbin/rndc-confgen
+sbin/tsig-keygen
 %%BASE%%@unexec rm -f %%BIND_DESTETC%%/rndc.conf.sample
 %%NOBASE%%@unexec if cmp -s %D/%%ETCDIR%%/rndc.conf.sample %D/%%ETCDIR%%/rndc.conf; then rm -f %D/%%ETCDIR%%/rndc.conf; fi
 %%NOBASE%%%%ETCDIR%%/rndc.conf.sample
@@ -366,10 +426,13 @@ sbin/rndc-confgen
 %%NOBASE%%@exec chown bind:bind %D/%%ETCDIR%%/working
 %%NOBASE%%@dirrmtry %%ETCDIR%%/working
 %%NOBASE%%@dirrmtry %%ETCDIR%%
-@dirrm include/bind9
-@dirrm include/dns
-@dirrm include/dst
-@dirrmtry include/isc
-@dirrm include/isccc
-@dirrm include/isccfg
+@dirrm include/pkcs11
+@dirrm include/pk11
 @dirrm include/lwres
+@dirrm include/isccfg
+@dirrm include/isccc
+@dirrmtry include/isc
+@dirrm include/irs
+@dirrm include/dst
+@dirrm include/dns
+@dirrm include/bind9



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201404101601.s3AG1S8g011625>