diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-05-05 18:37:15 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-05-05 18:37:15 +0000 |
| commit | 55ad72d44a94298a96b8f05488ca5ed97ef04736 (patch) | |
| tree | 8aaa712c1d8b8d191b77a7eef4dc42c770e3b3d0 | |
| parent | Adding upstream version 1:9.11.5.P4+dfsg. (diff) | |
| download | bind9-55ad72d44a94298a96b8f05488ca5ed97ef04736.tar.xz bind9-55ad72d44a94298a96b8f05488ca5ed97ef04736.zip | |
Adding debian version 1:9.11.5.P4+dfsg-5.1+deb10u7.debian/1%9.11.5.P4+dfsg-5.1+deb10u7debian
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
144 files changed, 17942 insertions, 0 deletions
diff --git a/debian/README.Debian b/debian/README.Debian new file mode 100644 index 0000000..297c52a --- /dev/null +++ b/debian/README.Debian @@ -0,0 +1,178 @@ +DNSSEC validation turned on by default as of BIND 9.8.1 +------------------------------------------------------- +As of version 9.8.1.dfsg-1, BIND ships with DNSSEC validation turned on +by default. As the keys get changed over time, this means that a fresh +install of BIND will require that the admin manually upgrade bind.keys +to account for the change, before BIND will be able to resolve hosts in +DNSSEC validated zones. + + +Upgrading from BIND 8.X: +----------------------- + +If you are upgrading an authoritative server from BIND 8.X, please install +the bind9-doc package and read /usr/share/doc/bind9-doc/misc/migration.gz, +which contains a set of notes from the BIND maintainers on what changed +that is likely to need your attention during an upgrade. + + +Upgrading from earlier bind9 packages: +------------------------------------- + +If you installed an early version of the Debian bind9 packages, prior to +version 1:9.2.0-2 to be more precise, you may have an /etc/bind/rndc.conf +configuration file still on your system. There's nothing wrong with that, +and if you've explicitly configured keys for using rndc you may well want to +leave things exactly as they are! + +However, since 9.2.0 BIND 9.X has supported an rndc.key file that both named +and rndc will read to obtain a shared key for rndc use against a daemon on +the same host. The rndc-confgen program will easily create a suitable key +file. To take advantage of this mechanism, you may want to: + + remove the /etc/bind/rndc.conf file + remove the rndc key specification in the /etc/bind/named.conf file + + rndc-confgen -r /dev/urandom -a + +Alternatively, you can 'purge' the bind9 packages and reinstall them and you +will end up with the new behavior since it is now the default. + +This is more secure than using a static key that isn't generated on a per-host +basis, and is an easy alternative to more complex key schemes if you only need +to use rndc to talk to named on the same host. + + +Known Issues: +------------ + +I've had a report that lwresd, at least, fails to work with some recent 2.5 +kernels. If you see something in your logs like + + loading configuration from '/etc/bind/lwresd.conf' + none:0: open: /etc/bind/lwresd.conf: permission denied + +Try rebuilding with --disable-linux-caps added to the configure call in the +rules file. I'm hoping this is a temporary problem in the 2.5 kernel series, +but we'll see. + + +Configuration Schema: +-------------------- + +The Debian BIND package ships with a config that will work for the majority +of leaf servers with no user input required. + +The named configuration file named.conf is located in /etc/bind, so that all +static configuration files relating to bind are in one place. If you really +don't want named.conf in /etc/bind, then the best way to handle it is probably +to replace /etc/bind/named.conf with a symlink to the location you want to use. +You could also use an option to named in the init.d script, but that only works +for named, not for things like ndc. + +Zone data files for the root servers, and the forward and reverse localhost +zones are also provided in /etc/bind. + +The working directory for named is now /var/cache/bind. Thus, any transient +files generated by named, such as database files for zones the daemon is +secondary for, will be written to the /var filesystem, where they belong. + +To make this work, the named.conf provided uses explicitly fully-qualified +pathnames to reference the files in /etc/bind. + +Unlike previous BIND packages for Debian, the named.conf and provided db.* +files are tagged as conffiles. Thus, if you just want a "caching mostly" +server configuration for a server that does not need to be authoritative for +anything else, you can run the provided configuration as-is. If you want to +hack on named.conf, or even the init.d fragment, you can feel free to. Future +package upgrades will treat your configuration changes sanely, as all Debian +packages should. + +While you are free to craft whatever structure you wish for servers which need +to be authoritative for additional zones, what we suggest is that you put the +db files for any zones you are master for in /etc/bind (perhaps even in a +subdirectory structure depending on complexity), using full pathnames in the +named.conf file. Any zones you are secondary for should be configured in +named.conf with simple filenames (relative to /var/cache/bind), so the data +files will be stored in BIND's working directory (defaults to /var/cache/bind). +Zones subject to automatic updates (such as via DHCP and/or nsupdate) should be +stored in /var/lib/bind, and specified with full pathnames. + + +Running Chroot'ed: +----------------- + +Several users have asked for Debian BIND to run in a "chroot jail". There are +various issues associated with making this the default configuration for the +package in Debian. In the meantime, reasonable instructions on how to do +this yourself are available on the web from: + + http://www.tldp.org/HOWTO/Chroot-BIND-HOWTO.html + + +Running Non-Root: +----------------- + +Recent versions of named can be invoked with options that specify a non-root +user and/or group for named. Read the named man page for more information. +Note that when running named as a user other than root, it will not be able +to find new interfaces that appear dynamically, such as during a PCMCIA card +insertion, or if you're running some flavors of IPSEC and/or IP over IP +tunnels. If you cannot live with those limitations, feel free to edit the +/etc/init.d/bind9 script to change the invocation of named. + +The default is now to run as the user 'bind' (which is automatically created +in the group 'bind', if it doesn't exist), unless named.conf has been changed. +To change this, edit /etc/default/bind9 + +Please note that 'ndc restart' doesn't honor all the original command line +options to named, so we explicitly don't use it in the init.d script provided +with the package, and you should be careful about using it if you decide to +run named non-root. + + +PPP Control Script: +----------------- + +Unfortunately, 'ndc reload' will not honor any command line options that were +fed to named on the initial invocation. If you can live with that, and +want to wiggle your DNS configuration when your PPP link goes up or down, the +following script fragment from Francesco Potorti` <pot@gnu.org> may be helpful +to you: + + I suggest adding this as bot /etc/ppp/ip-up.d/bind and + /etc/ppp/ip-down.d/bind: + + ================================================================ + #!/bin/sh + if [ -x /usr/sbin/ndc -a -x /usr/sbin/named ] + then + /usr/sbin/ndc reload > /dev/null + fi + ================================================================ + + This should cause no harm in any case, and should be helpful in these + cases: + - you configure bind as a forwarder. When ppp is down, it cannot access + the network. As soon as ppp is up, it is forced by the script to try + again, and it succeeds. + - someone writes a clever script that, coupled with the `usepeerdns' + command of pppd, makes a forwarding-only bind use the right servers by + rewriting the configuration file after ppp goes up. Then the script + above makes bind reload the configuration. + + Now, someone should write that clever script :-) + + By the way, this is a badly wanted feature, that should help setting up + a ppp connection automatically. Currently, setting up a ppp connection + is much easier on a windows system than on linux, and there is really no + reason why it should be so, given that all the tools are there. + + +Apparmor Profile +---------------- +If your system uses apparmor, please note that the shipped enforcing profile +works with the default installation, and changes in your configuration may +require changes to the installed apparmor profile. Please see +https://wiki.ubuntu.com/DebuggingApparmor before filing a bug against this +software. diff --git a/debian/README.source b/debian/README.source new file mode 100644 index 0000000..d0e527d --- /dev/null +++ b/debian/README.source @@ -0,0 +1,12 @@ +Just a crude notes about the source handling (it needs cleanup). + +- The source has been converted to git-buildpackage structure to allow + easy team work + +- uscan can be used to download new upstream sources + +- d/copyright has been converted to machine readable format (TODO) and + has Files-Excludes section for generation upstream tarball using + mk-origtarball (via uscan) to remove contrib/ directory + + -- Ondřej Surý <ondrej@debian.org>, Fri, 8 Sep 2017 12:18:26 +0200 diff --git a/debian/apply-export-patch b/debian/apply-export-patch new file mode 100644 index 0000000..36be293 --- /dev/null +++ b/debian/apply-export-patch @@ -0,0 +1,20 @@ +#!/bin/sh + +# This pile of horror converts the makefiles into expecting the -export +# version of the libraries. + +set -e +cd build-udeb + +for lib in dns irs isc isccc isccfg lwres; do + sed -i "s/lib${lib}\./lib${lib}-export./g" lib/${lib}/Makefile +done + +sed -i 's/ -lisc -ldns -lisccfg$/ -lisc-export -ldns-export -lisccfg-export/' \ + lib/irs/Makefile + +patch -p0 < ../debian/export.diff + +for lib in dns irs isc isccc isccfg lwres; do + sed -i 's/\(lib'${lib}'\).la/\1-export.la/g' $(find . -name Makefile) +done diff --git a/debian/bind9-doc.dirs b/debian/bind9-doc.dirs new file mode 100644 index 0000000..3d13cf8 --- /dev/null +++ b/debian/bind9-doc.dirs @@ -0,0 +1 @@ +usr/share/doc/bind9-doc/arm diff --git a/debian/bind9-doc.docs b/debian/bind9-doc.docs new file mode 100644 index 0000000..86d3a6d --- /dev/null +++ b/debian/bind9-doc.docs @@ -0,0 +1 @@ +doc/misc diff --git a/debian/bind9-doc.install b/debian/bind9-doc.install new file mode 100644 index 0000000..3fe53ec --- /dev/null +++ b/debian/bind9-doc.install @@ -0,0 +1 @@ +doc/arm/*.html /usr/share/doc/bind9-doc/arm diff --git a/debian/bind9-host.install b/debian/bind9-host.install new file mode 100644 index 0000000..f07a04d --- /dev/null +++ b/debian/bind9-host.install @@ -0,0 +1,2 @@ +usr/bin/host +usr/share/man/man1/host.1* diff --git a/debian/bind9-pkcs11.service b/debian/bind9-pkcs11.service new file mode 100644 index 0000000..75f7f63 --- /dev/null +++ b/debian/bind9-pkcs11.service @@ -0,0 +1,15 @@ +[Unit] +Description=BIND Domain Name Server with native PKCS#11 +Documentation=man:named(8) +After=network.target + +[Service] +EnvironmentFile=-/etc/default/bind9 +Environment=KRB5_KTNAME=/etc/bind/named.keytab + +ExecStart=/usr/sbin/named-pkcs11 -f -u bind +ExecReload=/usr/sbin/rndc reload +ExecStop=/usr/sbin/rndc stop + +[Install] +WantedBy=multi-user.target diff --git a/debian/bind9-resolvconf.service b/debian/bind9-resolvconf.service new file mode 100644 index 0000000..b0f01a0 --- /dev/null +++ b/debian/bind9-resolvconf.service @@ -0,0 +1,15 @@ +[Unit] +Description=local BIND via resolvconf +Documentation=man:named(8) man:resolvconf(8) +PartOf=bind9.service +After=bind9.service +ConditionFileIsExecutable=/sbin/resolvconf + +[Service] +Type=oneshot +RemainAfterExit=yes +ExecStart=/bin/sh -c 'echo nameserver 127.0.0.1 | /sbin/resolvconf -a lo.named' +ExecStop=/sbin/resolvconf -d lo.named + +[Install] +WantedBy=bind9.service diff --git a/debian/bind9.NEWS b/debian/bind9.NEWS new file mode 100644 index 0000000..d235da6 --- /dev/null +++ b/debian/bind9.NEWS @@ -0,0 +1,14 @@ +bind9 (1:9.4.0-1) experimental; urgency=low + + As of bind 9.4, allow-query-cache and allow-recursion default to the + builtin acls 'localnets' and 'localhost'. If you are setting up a + name server for a network, you will almost certainly need to change + this. + + The change in default has been done to make caching servers less + attractive as reflective amplifying targets for spoofed traffic. + This still leaves authoritative servers exposed. + + The best fix is for full BCP 38 deployment to remove spoofed traffic. + + -- LaMont Jones <lamont@debian.org> Wed, 03 Oct 2007 00:52:44 -0600 diff --git a/debian/bind9.apport b/debian/bind9.apport new file mode 100644 index 0000000..e484b94 --- /dev/null +++ b/debian/bind9.apport @@ -0,0 +1,36 @@ +#!/usr/bin/python + +'''apport hook for bind9 + +(c) 2010 Andres Rodriguez. +Author: Andres Rodriguez <andreserl@ubuntu.com> + +This program is free software; you can redistribute it and/or modify it +under the terms of the GNU General Public License as published by the +Free Software Foundation; either version 2 of the License, or (at your +option) any later version. See http://www.gnu.org/copyleft/gpl.html for +the full text of the license. +''' + +from apport.hookutils import * +import re + +def add_info(report, ui): + response = ui.yesno("The contents of your /etc/bind/named.conf file " + "may help developers diagnose your bug more " + "quickly. However, it may contain sensitive " + "information. Do you want to include it in your " + "bug report?") + + if response == None: # user cancelled + raise StopIteration + elif response == True: + attach_conffiles(report,'bind9') + + # getting syslog stuff + report['SyslogBind9'] = recent_syslog(re.compile(r'named\[')) + + # Attaching related packages info + attach_related_packages(report, ['bind9utils', 'apparmor']) + + attach_mac_events(report, '/usr/sbin/named') diff --git a/debian/bind9.config b/debian/bind9.config new file mode 100644 index 0000000..e7f85c5 --- /dev/null +++ b/debian/bind9.config @@ -0,0 +1,14 @@ +#!/bin/sh + +set -e + +. /usr/share/debconf/confmodule + +db_input low bind9/start-as-user || true +db_go + +db_input low bind9/different-configuration-file || true +db_go + +db_input low bind9/run-resolvconf || true +db_go diff --git a/debian/bind9.dirs b/debian/bind9.dirs new file mode 100644 index 0000000..6fc1596 --- /dev/null +++ b/debian/bind9.dirs @@ -0,0 +1,13 @@ +etc/apparmor.d/force-complain +etc/apparmor.d/local +etc/bind +etc/insserv.conf.d +etc/network/if-down.d +etc/network/if-up.d +etc/ppp/ip-down.d +etc/ppp/ip-up.d +etc/ufw/applications.d +usr/bin +usr/sbin +usr/share/bind9 +var/cache/bind diff --git a/debian/bind9.docs b/debian/bind9.docs new file mode 100644 index 0000000..e845566 --- /dev/null +++ b/debian/bind9.docs @@ -0,0 +1 @@ +README diff --git a/debian/bind9.init b/debian/bind9.init new file mode 100644 index 0000000..59d8e3d --- /dev/null +++ b/debian/bind9.init @@ -0,0 +1,145 @@ +#!/bin/sh -e + +### BEGIN INIT INFO +# Provides: bind9 +# Required-Start: $remote_fs +# Required-Stop: $remote_fs +# Should-Start: $network $syslog +# Should-Stop: $network $syslog +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: Start and stop bind9 +# Description: bind9 is a Domain Name Server (DNS) +# which translates ip addresses to and from internet names +### END INIT INFO + +PATH=/sbin:/bin:/usr/sbin:/usr/bin + +# for a chrooted server: "-u bind -t /var/lib/named" +# Don't modify this line, change or create /etc/default/bind9. +OPTIONS="" +RESOLVCONF=no + +test -f /etc/default/bind9 && . /etc/default/bind9 + +test -x /usr/sbin/rndc || exit 0 + +. /lib/lsb/init-functions +PIDFILE=/run/named/named.pid + +check_network() { + if [ -x /usr/bin/uname ] && [ "X$(/usr/bin/uname -o)" = XSolaris ]; then + IFCONFIG_OPTS="-au" + else + IFCONFIG_OPTS="" + fi + if [ -z "$(/sbin/ifconfig $IFCONFIG_OPTS)" ]; then + #log_action_msg "No networks configured." + return 1 + fi + return 0 +} + +case "$1" in + start) + log_daemon_msg "Starting domain name service..." "bind9" + + modprobe capability >/dev/null 2>&1 || true + + # dirs under /run can go away on reboots. + mkdir -p /run/named + chmod 775 /run/named + chown root:bind /run/named >/dev/null 2>&1 || true + + if [ ! -x /usr/sbin/named ]; then + log_action_msg "named binary missing - not starting" + log_end_msg 1 + fi + + if ! check_network; then + log_action_msg "no networks configured" + log_end_msg 1 + fi + + if start-stop-daemon --start --oknodo --quiet --exec /usr/sbin/named \ + --pidfile ${PIDFILE} -- $OPTIONS; then + if [ "X$RESOLVCONF" != "Xno" ] && [ -x /sbin/resolvconf ] ; then + echo "nameserver 127.0.0.1" | /sbin/resolvconf -a lo.named + fi + log_end_msg 0 + else + log_end_msg 1 + fi + ;; + + stop) + log_daemon_msg "Stopping domain name service..." "bind9" + if ! check_network; then + log_action_msg "no networks configured" + log_end_msg 1 + fi + + if [ "X$RESOLVCONF" != "Xno" ] && [ -x /sbin/resolvconf ] ; then + /sbin/resolvconf -d lo.named + fi + pid=$(/usr/sbin/rndc stop -p | awk '/^pid:/ {print $2}') || true + if [ -z "$pid" ]; then # no pid found, so either not running, or error + pid=$(pgrep -f ^/usr/sbin/named) || true + start-stop-daemon --stop --oknodo --quiet --exec /usr/sbin/named \ + --pidfile ${PIDFILE} -- $OPTIONS + fi + if [ -n "$pid" ]; then + sig=0 + n=1 + while kill -$sig $pid 2>/dev/null; do + if [ $n -eq 1 ]; then + echo "waiting for pid $pid to die" + fi + if [ $n -eq 11 ]; then + echo "giving up on pid $pid with kill -0; trying -9" + sig=9 + fi + if [ $n -gt 20 ]; then + echo "giving up on pid $pid" + break + fi + n=$(($n+1)) + sleep 1 + done + fi + log_end_msg 0 + ;; + + reload|force-reload) + log_daemon_msg "Reloading domain name service..." "bind9" + if ! check_network; then + log_action_msg "no networks configured" + log_end_msg 1 + fi + + /usr/sbin/rndc reload >/dev/null && log_end_msg 0 || log_end_msg 1 + ;; + + restart) + if ! check_network; then + log_action_msg "no networks configured" + exit 1 + fi + + $0 stop + $0 start + ;; + + status) + ret=0 + status_of_proc -p ${PIDFILE} /usr/sbin/named bind9 2>/dev/null || ret=$? + exit $ret + ;; + + *) + log_action_msg "Usage: /etc/init.d/bind9 {start|stop|reload|restart|force-reload|status}" + exit 1 + ;; +esac + +exit 0 diff --git a/debian/bind9.install b/debian/bind9.install new file mode 100644 index 0000000..26d595e --- /dev/null +++ b/debian/bind9.install @@ -0,0 +1,38 @@ +debian/extras/apparmor.d/* /etc/apparmor.d/ +debian/extras/etc/* /etc/bind/ +debian/extras/if-reconfig.d/* /etc/network/if-down.d +debian/extras/if-reconfig.d/* /etc/network/if-up.d/ +debian/extras/if-reconfig.d/* /etc/ppp/ip-down.d/ +debian/extras/if-reconfig.d/* /etc/ppp/ip-up.d/ +debian/extras/insserv.conf.d/* /etc/insserv.conf.d/ +debian/extras/ufw/* /etc/ufw/applications.d/ +etc/bind/bind.keys +usr/bin/arpaname +usr/bin/bind9-config +usr/bin/named-rrchecker +usr/sbin/ddns-confgen +usr/sbin/dnssec-importkey +usr/sbin/genrandom +usr/sbin/isc-hmac-fixup +usr/sbin/named +usr/sbin/named-journalprint +usr/sbin/named-nzd2nzf +usr/sbin/named-pkcs11 +usr/sbin/nsec3hash +usr/sbin/tsig-keygen +usr/share/man/man1/arpaname.1 +usr/share/man/man1/bind9-config.1 +usr/share/man/man1/isc-config.sh.1 +usr/share/man/man1/named-rrchecker.1 +usr/share/man/man5/named.conf.5 +usr/share/man/man5/rndc.conf.5 +usr/share/man/man8/ddns-confgen.8 +usr/share/man/man8/dnssec-coverage.8 +usr/share/man/man8/dnssec-importkey.8 +usr/share/man/man8/genrandom.8 +usr/share/man/man8/isc-hmac-fixup.8 +usr/share/man/man8/named-journalprint.8 +usr/share/man/man8/named-nzd2nzf.8 +usr/share/man/man8/named.8 +usr/share/man/man8/nsec3hash.8 +usr/share/man/man8/tsig-keygen.8 diff --git a/debian/bind9.postinst b/debian/bind9.postinst new file mode 100644 index 0000000..d1fa83f --- /dev/null +++ b/debian/bind9.postinst @@ -0,0 +1,133 @@ +#!/bin/sh + +set -e + +. /usr/share/debconf/confmodule + +if [ "$1" = configure ]; then + lastversion="$2"; + + # lets give them a bind user/group in all cases. + getent group bind >/dev/null 2>&1 || addgroup --system bind + getent passwd bind >/dev/null 2>&1 || + adduser --system --home /var/cache/bind --no-create-home \ + --disabled-password --ingroup bind bind + + if [ -z "$lastversion" ] || dpkg --compare-versions "$lastversion" lt 1:9.4.2-2 ; then + mkdir -p /var/lib/bind + chown root:bind /var/lib/bind + chmod 775 /var/lib/bind + fi + + if [ ! -s /etc/bind/rndc.key ] && [ ! -s /etc/bind/rndc.conf ]; then + rndc-confgen -r /dev/urandom -a + fi + + # no sumfile means you get the default + [ -f /var/lib/bind/bind9-default.md5sum ] || + echo "2cfcfb7bf1b99c7930fd475907e38be7 /etc/default/bind9" > /var/lib/bind/bind9-default.md5sum + + if [ -f /etc/default/bind9 ] && \ + [ "$(cat /var/lib/bind/bind9-default.md5sum)" = "$(md5sum /etc/default/bind9)" ]; then + config="/etc/default/bind9" + elif [ ! -e /etc/default/bind9 ]; then + config="/etc/default/bind9" + else + config="/etc/default/bind9.dpkg-dist" + fi + + localconf="" + if [ ! -f $config ]; then + CONF=/etc/bind/named.conf + for file in ${CONF} ${CONF}.local ${CONF}.default-zones; do + if [ -f ${file} ]; then + theirs=$(md5sum $file | sed 's/ .*$//') + mine=$(dpkg --status bind9 | grep "^ $file " | sed -n 's/.* //p') + if [ "$mine" != "$theirs" ]; then + localconf="y" + fi + else + localconf="y" + fi + done + if [ -n "$localconf" ]; then + db_reset bind9/start-as-user + else + db_set bind9/start-as-user bind || true + fi + + echo '#' >> $config + echo '# run resolvconf?' >> $config + db_get bind9/run-resolvconf + if [ ! -z "$RET" ] && [ "$RET" = "true" ]; then + echo "RESOLVCONF=yes" >> $config + else + echo "RESOLVCONF=no" >> $config + fi + + db_get bind9/start-as-user + USER=$RET + db_get bind9/different-configuration-file + CONFFILE=$RET + + echo '' >> $config + echo '# startup options for the server' >> $config + if [ ! -z "$USER" ] && [ ! -z "$CONFFILE" ]; then + echo "OPTIONS=\"-u $USER -c $CONFFILE\"" >> $config + elif [ ! -z "$USER" ]; then + echo "OPTIONS=\"-u $USER\"" >> $config + elif [ ! -z "$CONFFILE" ]; then + echo "OPTIONS=\"-c $CONFFILE\"" >> $config + else + echo "OPTIONS=\"\"" >> $config + fi + else + db_get bind9/run-resolvconf + if [ ! -z "$RET" ] && [ "$RET" = "true" ]; then + sed -e "s#^\([[:space:]]*\)\(RESOLVCONF=[[:space:]]*\)[^ ]*#\1\2yes#g" -i $config + else + sed -e "s#^\([[:space:]]*\)\(RESOLVCONF=[[:space:]]*\)[^ ]*#\1\2no#g" -i $config + fi + db_get bind9/start-as-user + if [ ! -z "$RET" ]; then + if [ ! -z "`grep OPTIONS $config`" ]; then + if [ ! -z "`grep OPTIONS $config | grep '\-u'`" ]; then + sed -e "s#\([[:space:]]*OPTIONS[[:space:]]*\)=\"\([^\"]*\)-u[[:space:]]*[^\" ]*\([^\"]*\)\"#\1=\"\2-u $RET\3\"#g" -i $config + else + sed -e "s#\([[:space:]]*OPTIONS[[:space:]]*\)=\"\([^\"]*\)\"#\1=\"\2 -u $RET\"#g" -i $config + fi + else + echo "OPTIONS=\"-u $RET\"" >> $config + fi + fi + db_get bind9/different-configuration-file + if [ ! -z "$RET" ]; then + if [ ! -z "`grep OPTIONS $config | grep '\-c'`" ]; then + sed -e "s#\([[:space:]]*OPTIONS[[:space:]]*\)=\"\([^\"]*\)-c[[:space:]]*[^\" ]*\([^\"]*\)\"#\1=\"\2-c $RET\3\"#g" -i $config + else + sed -e "s#\([[:space:]]*OPTIONS[[:space:]]*\)=\"\([^\"]*\)\"#\1=\"\2 -c $RET\"#g" -i $config + fi + fi + fi + + if [ "$config" = "/etc/default/bind9" ]; then + md5sum /etc/default/bind9 > /var/lib/bind/bind9-default.md5sum + fi + + uid=$(ls -ln /etc/bind/rndc.key | awk '{print $3}') + if [ "$uid" = "0" ]; then + [ -n "$localconf" ] || chown bind /etc/bind/rndc.key + chgrp bind /etc/bind + chmod g+s /etc/bind + chgrp bind /etc/bind/rndc.key /var/cache/bind + chgrp bind /etc/bind/named.conf* || true + chmod g+r /etc/bind/rndc.key /etc/bind/named.conf* || true + chmod g+rwx /var/cache/bind + fi +fi + +db_stop + +#DEBHELPER# + +exit 0 diff --git a/debian/bind9.postrm b/debian/bind9.postrm new file mode 100644 index 0000000..8e28807 --- /dev/null +++ b/debian/bind9.postrm @@ -0,0 +1,19 @@ +#!/bin/sh + +set -e + +#DEBHELPER# + +if [ "$1" = "purge" ]; then + rm -f /etc/bind/rndc.key /etc/default/bind9 + rmdir /etc/bind >/dev/null 2>&1 || true + rm -f /etc/apparmor.d/force-complain/usr.sbin.named >/dev/null 2>&1 || true + rm -f /var/lib/bind/bind9-default.md5sum + rmdir /var/lib/bind || true + # delete bind daemon user, if it exists + if getent passwd bind > /dev/null ; then + deluser --quiet bind > /dev/null || true + fi +fi + +exit 0 diff --git a/debian/bind9.preinst b/debian/bind9.preinst new file mode 100644 index 0000000..66b06ab --- /dev/null +++ b/debian/bind9.preinst @@ -0,0 +1,57 @@ +#!/bin/sh +# preinst script for bind9 +# +# see: dh_installdeb(1) + +set -e + +# summary of how this script can be called: +# * <new-preinst> `install' +# * <new-preinst> `install' <old-version> +# * <new-preinst> `upgrade' <old-version> +# * <old-preinst> `abort-upgrade' <new-version> +# for details, see https://www.debian.org/doc/debian-policy/ or +# the debian-policy package + + +case "$1" in + install|upgrade) + if [ -n "$2" ] && dpkg --compare-versions "$2" lt "1:9.11.2+dfsg-6"; then + theirs=$(md5sum /etc/bind/named.conf.options | sed 's/ .*$//') + mine=56919cbc0d819c9a303a8bdeb306b5f1 + if [ "$mine" = "$theirs" ]; then + if [ -n "$(dpkg-query -f '${Conffiles}' -W bind9 | grep /etc/bind/named.conf.options)" ]; then + # dpkg knows /etc/bind/named.conf.options as a conffile (from squeeze or older) + # cannot move the outdated file aside to avoid dpkg noticing deleted-by-local-admin + # therefore edit it in place to make it match the to-be-installed version + cp -p /etc/bind/named.conf.options /etc/bind/named.conf.options.dpkg-old + sed -i '26{/^$/d}; 23{/auth-nxdomain no;/d}' /etc/bind/named.conf.options + else + mv /etc/bind/named.conf.options /etc/bind/named.conf.options.dpkg-old + fi + fi + fi + ;; + + abort-upgrade) + if [ ! -f "/etc/bind/named.conf.options" ] && [ -f "/etc/bind/named.conf.options.dpkg-old" ]; then + theirs=$(md5sum /etc/bind/named.conf.options.dpkg-old | sed 's/ .*$//') + mine=56919cbc0d819c9a303a8bdeb306b5f1 + if [ "$mine" = "$theirs" ]; then + mv /etc/bind/named.conf.options.dpkg-old /etc/bind/named.conf.options + fi + fi + ;; + + *) + echo "preinst called with unknown argument \`$1'" >&2 + exit 1 + ;; +esac + +# dh_installdeb will replace this with shell code automatically +# generated by other debhelper scripts. + +#DEBHELPER# + +exit 0 diff --git a/debian/bind9.prerm b/debian/bind9.prerm new file mode 100644 index 0000000..12afbea --- /dev/null +++ b/debian/bind9.prerm @@ -0,0 +1,30 @@ +#!/bin/sh +set -e + +case "$1" in + remove) + # if bind is running, stop it before removing + if pidof named >/dev/null 2>&1; then + # test if invoke-rc.d command is present on this system + if command -v invoke-rc.d >/dev/null 2>&1; then + invoke-rc.d bind9 stop + # if really not, use initscript + else + /etc/init.d/bind9 stop + fi + fi + ;; + + upgrade) + # leave bind running during the upgrade + ;; + + *) + echo "prerm called with unknown argument \`$1'" >&2 + exit 1 + ;; +esac + +#DEBHELPER# + +exit 0 diff --git a/debian/bind9.service b/debian/bind9.service new file mode 100644 index 0000000..3b91a17 --- /dev/null +++ b/debian/bind9.service @@ -0,0 +1,16 @@ +[Unit] +Description=BIND Domain Name Server +Documentation=man:named(8) +After=network.target +Wants=nss-lookup.target +Before=nss-lookup.target + +[Service] +Type=forking +EnvironmentFile=-/etc/default/bind9 +ExecStart=/usr/sbin/named $OPTIONS +ExecReload=/usr/sbin/rndc reload +ExecStop=/usr/sbin/rndc stop + +[Install] +WantedBy=multi-user.target diff --git a/debian/bind9.tmpfile b/debian/bind9.tmpfile new file mode 100644 index 0000000..36fc91d --- /dev/null +++ b/debian/bind9.tmpfile @@ -0,0 +1 @@ +d /run/named 0775 root bind - - diff --git a/debian/bind9utils.install b/debian/bind9utils.install new file mode 100644 index 0000000..12fcc2f --- /dev/null +++ b/debian/bind9utils.install @@ -0,0 +1,46 @@ +usr/lib/python3/dist-packages/ +usr/sbin/dnssec-checkds +usr/sbin/dnssec-coverage +usr/sbin/dnssec-dsfromkey +usr/sbin/dnssec-dsfromkey-pkcs11 +usr/sbin/dnssec-importkey-pkcs11 +usr/sbin/dnssec-keyfromlabel +usr/sbin/dnssec-keyfromlabel-pkcs11 +usr/sbin/dnssec-keygen +usr/sbin/dnssec-keygen-pkcs11 +usr/sbin/dnssec-keymgr +usr/sbin/dnssec-revoke +usr/sbin/dnssec-revoke-pkcs11 +usr/sbin/dnssec-settime +usr/sbin/dnssec-settime-pkcs11 +usr/sbin/dnssec-signzone +usr/sbin/dnssec-signzone-pkcs11 +usr/sbin/dnssec-verify +usr/sbin/dnssec-verify-pkcs11 +usr/sbin/named-checkconf +usr/sbin/named-checkzone +usr/sbin/named-compilezone +usr/sbin/pkcs11-destroy +usr/sbin/pkcs11-keygen +usr/sbin/pkcs11-list +usr/sbin/pkcs11-tokens +usr/sbin/rndc +usr/sbin/rndc-confgen +usr/share/man/man8/dnssec-checkds.8 +usr/share/man/man8/dnssec-dsfromkey.8 +usr/share/man/man8/dnssec-keyfromlabel.8 +usr/share/man/man8/dnssec-keygen.8 +usr/share/man/man8/dnssec-keymgr.8 +usr/share/man/man8/dnssec-revoke.8 +usr/share/man/man8/dnssec-settime.8 +usr/share/man/man8/dnssec-signzone.8 +usr/share/man/man8/dnssec-verify.8 +usr/share/man/man8/named-checkconf.8 +usr/share/man/man8/named-checkzone.8 +usr/share/man/man8/named-compilezone.8 +usr/share/man/man8/pkcs11-destroy.8 +usr/share/man/man8/pkcs11-keygen.8 +usr/share/man/man8/pkcs11-list.8 +usr/share/man/man8/pkcs11-tokens.8 +usr/share/man/man8/rndc-confgen.8 +usr/share/man/man8/rndc.8 diff --git a/debian/changelog b/debian/changelog new file mode 100644 index 0000000..4a0cfd0 --- /dev/null +++ b/debian/changelog @@ -0,0 +1,2965 @@ +bind9 (1:9.11.5.P4+dfsg-5.1+deb10u7) buster-security; urgency=high + + * CVE-2021-25220: The rules for acceptance of records into the cache + have been tightened to prevent the possibility of poisoning if + forwarders send records outside the configured bailiwick. + + -- Ondřej Surý <ondrej@debian.org> Mon, 14 Mar 2022 15:21:48 +0100 + +bind9 (1:9.11.5.P4+dfsg-5.1+deb10u6) buster-security; urgency=high + + * CVE-2021-25219: The "lame-ttl" option is now forcibly set to 0. This + effectively disables the lame server cache, as it could previously be + abused by an attacker to significantly degrade resolver performance. + + -- Ondřej Surý <ondrej@debian.org> Mon, 25 Oct 2021 13:42:31 +0200 + +bind9 (1:9.11.5.P4+dfsg-5.1+deb10u5) buster-security; urgency=high + + * CVE-2021-25214: A malformed incoming IXFR transfer could trigger + an assertion failure in ``named``, causing it to quit abnormally. + * CVE-2021-25215: ``named`` crashed when a DNAME record placed in + the ANSWER section during DNAME chasing turned out to be the final + answer to a client query. + * CVE-2021-25216: Compile with system provided SPNEGO + * Ensure all resources are properly cleaned up when a call to + gss_accept_sec_context() fails. + + -- Ondřej Surý <ondrej@debian.org> Thu, 29 Apr 2021 12:42:26 +0200 + +bind9 (1:9.11.5.P4+dfsg-5.1+deb10u3) buster-security; urgency=high + + * Non-maintainer upload by the Security Team. + * Buffer overflow in GSSAPI security policy negotiation (CVE-2020-8625) + + -- Salvatore Bonaccorso <carnil@debian.org> Mon, 15 Feb 2021 08:51:28 +0100 + +bind9 (1:9.11.5.P4+dfsg-5.1+deb10u2) buster-security; urgency=high + + [ Salvatore Bonaccorso ] + * [CVE-2020-8622] Properly handle malformed truncated responses to TSIG + queries + * [CVE-2020-8623] Fix crash in pk11_numbits() with crafted packet when + native-pkcs11 is used + * Wait more than 1 second for NSEC3 chain changes + * [CVE-2020-8624] Fix processing of "update-policy" rules of type + "subdomain" (Closes: #966497) + + [ Ondřej Surý ] + * [CVE-2020-8619]: It was possible to trigger a INSIST when a zone with + interior (non-leaf) wildcard label + + -- Salvatore Bonaccorso <carnil@debian.org> Tue, 25 Aug 2020 10:10:23 +0200 + +bind9 (1:9.11.5.P4+dfsg-5.1+deb10u1) buster-security; urgency=high + + * [CVE-2019-6477]: TCP-pipelined queries can bypass tcp-clients limit. + (Closes: #945171) + * [CVE-2020-8616]: Fix NXNSATTACK amplification attack on BIND 9 + * [CVE-2020-8617]: Fix assertion failure in TSIG processing code + + -- Ondřej Surý <ondrej@debian.org> Mon, 18 May 2020 10:02:41 +0200 + +bind9 (1:9.11.5.P4+dfsg-5.1) unstable; urgency=high + + * Non-maintainer upload. + * move item_out test inside lock in dns_dispatch_getnext() (CVE-2019-6471) + (Closes: #930746) + + -- Salvatore Bonaccorso <carnil@debian.org> Fri, 21 Jun 2019 11:24:31 +0200 + +bind9 (1:9.11.5.P4+dfsg-5) unstable; urgency=medium + + * AppArmor: Allow /var/tmp/krb5_* (owner-only) for Samba AD DLZ. + Thanks to Steven Monai (Closes: 928398) + + -- Bernhard Schmidt <berni@debian.org> Fri, 03 May 2019 19:44:57 +0200 + +bind9 (1:9.11.5.P4+dfsg-4) unstable; urgency=medium + + [ Bernhard Schmidt ] + * AppArmor: Also add /var/lib/samba/bind-dns/dns/** (Closes: #927827) + + [ Ondřej Surý ] + * [CVE-2018-5743]: Limiting simultaneous TCP clients is ineffective + (Closes: #927932) + * Update symbols file for new symbol in libisc + * Enable EDDSA again, but disable broken Ed448 support (Closes: #927962) + + -- Ondřej Surý <ondrej@debian.org> Fri, 26 Apr 2019 08:33:13 +0000 + +bind9 (1:9.11.5.P4+dfsg-3) unstable; urgency=medium + + * More fixes to the AppArmor policy for Samba AD DLZ + - allow access to /dev/urandom + - allow locking for dns.keytab + - fix path to smb.conf + + -- Bernhard Schmidt <berni@debian.org> Mon, 22 Apr 2019 22:31:06 +0200 + +bind9 (1:9.11.5.P4+dfsg-2) unstable; urgency=medium + + [ Ondřej Surý ] + * Update d/gbp.conf for Debian Buster + + [ Bernhard Schmidt ] + * Cherry-Pick upstream commit to prevent dnssec-keymgr from immediately + expiring and deleting old DNSSEC keys when being run for the first + time (Closes: #923984) + * Update AppArmor policy for Samba AD DLZ + - Add changed default location for named.conf + - Allow read/mmap on some Samba libraries + Thanks to Steven Monai (Closes: #920530) + + [ Andreas Beckmann ] + * bind9.preinst: cope with ancient conffile named.conf.options + (Closes: #905177) + + -- Bernhard Schmidt <berni@debian.org> Tue, 02 Apr 2019 21:12:50 +0200 + +bind9 (1:9.11.5.P4+dfsg-1) unstable; urgency=high + + [ Bernhard Schmidt ] + * New upstream version 9.11.5.P4+dfsg + - CVE-2018-5744: A specially crafted packet can cause named to leak memory + - CVE-2018-5745: An assertion failure can occur if a trust anchor rolls over + to an unsupported key algorithm when using managed-keys + - CVE-2019-6465: Controls for zone transfers might not be properly applied + to Dynamically Loadable Zones (DLZs) if the zones are writable. + * d/watch: Do not use beta or RC versions + * d/libdns1104.symbols: fix symbols-file-contains-debian-revision for dnstap + symbols + + [ Ondřej Surý ] + * Add new upstream GPG signing-key + + -- Bernhard Schmidt <berni@debian.org> Fri, 22 Feb 2019 17:54:10 +0100 + +bind9 (1:9.11.5.P1+dfsg-2) unstable; urgency=medium + + [ Dominik George ] + * Support dyndb modules with apparmor. (Closes: #900879) + + [ Bernhard Schmidt ] + * apparmor-policy: permit locking of the allow-new-zones database + (Closes: #922065) + * apparmor-policy: allow access to Samba DLZ files (Closes: #920530) + + -- Bernhard Schmidt <berni@debian.org> Tue, 12 Feb 2019 00:34:21 +0100 + +bind9 (1:9.11.5.P1+dfsg-1) unstable; urgency=medium + + * New upstream version 9.11.5.P1+dfsg + + -- Ondřej Surý <ondrej@debian.org> Tue, 18 Dec 2018 13:59:25 +0000 + +bind9 (1:9.11.5+dfsg-1) unstable; urgency=medium + + * Use team+dns@tracker.debian.org as Maintainer address + * New upstream version 9.11.5+dfsg + * Add EXTENSIONS= to version file programmatically, not with the patch + * Rebase patches for BIND 9.11.5 + * Adjust package names for new SONAMEs + + -- Ondřej Surý <ondrej@debian.org> Mon, 22 Oct 2018 10:30:28 +0000 + +bind9 (1:9.11.4.P2+dfsg-3) unstable; urgency=medium + + * Also avoid OpenSSL 1.1.1 in udebs. + Thanks to KiBi for the hint + * autopkgtest: Make an external query and check for DNSSEC + + -- Bernhard Schmidt <berni@debian.org> Wed, 26 Sep 2018 11:21:35 +0200 + +bind9 (1:9.11.4.P2+dfsg-2) unstable; urgency=medium + + * Temporarily disable EDDSA to relax OpenSSL version requirement + + -- Bernhard Schmidt <berni@debian.org> Mon, 24 Sep 2018 11:08:15 +0200 + +bind9 (1:9.11.4.P2+dfsg-1) unstable; urgency=medium + + [ Bernhard Schmidt ] + * Add a very simple autopkgtest (dig @127.0.0.1) + + [ Ondřej Surý ] + * New upstream version 9.11.4.P2+dfsg + * Rebase patches for BIND 9.11.4-P2 + + -- Ondřej Surý <ondrej@debian.org> Mon, 10 Sep 2018 08:36:06 +0000 + +bind9 (1:9.11.4.P1+dfsg-1) unstable; urgency=medium + + [ Timo Aaltonen ] + * skip-rtld-deepbind-for-dyndb.diff: Add a patch to fix named-pkcs11 + crashing on startup. (LP: #1769440) + + [ Bernhard Schmidt ] + * Add gbp.conf for pristine-tar usage + * d/watch: Properly deal with -P patch releases + + [ Ondřej Surý ] + * Don't fail to start if /etc/default/bind9 doesn't exist + * New upstream version 9.11.4.P1+dfsg + * Rebase patches for BIND 9.11.4-P1 + * Add new dst__openssleddsa_init optional symbol (it depends on OpenSSL version) (Closes: #897643) + * Put aside named.conf.option from stretch when upgrading (Closes: #905177) + + -- Ondřej Surý <ondrej@debian.org> Fri, 31 Aug 2018 09:53:27 +0000 + +bind9 (1:9.11.4+dfsg-4) unstable; urgency=medium + + * Brown-paper-bag release :-( + * Fix missing colon in AppArmor profile (Closes: #904983) + + -- Bernhard Schmidt <berni@debian.org> Mon, 30 Jul 2018 16:28:21 +0200 + +bind9 (1:9.11.4+dfsg-3) unstable; urgency=medium + + * Enable IDN support for dig+host using libidn2 (Closes: #459010) + * Use root.hints from dns-root-data (Closes: #888491) + + -- Bernhard Schmidt <berni@debian.org> Sun, 29 Jul 2018 23:26:09 +0200 + +bind9 (1:9.11.4+dfsg-2) unstable; urgency=medium + + * Enable dnstap support (Courtesy of Richard James Salts) (Closes: #890483) + * Remove auth-nxdomain no; from named.conf.options (Closes: #896889) + + -- Ondřej Surý <ondrej@debian.org> Mon, 16 Jul 2018 18:49:50 +0000 + +bind9 (1:9.11.4+dfsg-1) unstable; urgency=medium + + [ Bernhard Schmidt ] + * Use systemd Type=forking to signal daemon init. + Thanks to Elie Roudninski (Closes: #900788) + + [ Ondřej Surý ] + * New upstream version 9.11.4+dfsg + * Rebase patches for 9.11.4+dfsg release + * Bump libdns SONAME to libdns.so.1102 + * Add a SONAME version check early in a build process + * Use debian/getapi to dynamically pick soversions for dh_makeshlibs + * Update the symbols in libdns and libisccfg packages + + -- Ondřej Surý <ondrej@debian.org> Sat, 14 Jul 2018 12:27:56 +0000 + +bind9 (1:9.11.3+dfsg-2) unstable; urgency=medium + + * [CVE-2018-5738]: Add upstream fix to close the default open recursion + (Closes: #901483) + * Change the maintainer address (Closes: #899959) + + -- Ondřej Surý <ondrej@debian.org> Thu, 14 Jun 2018 13:01:47 +0000 + +bind9 (1:9.11.3+dfsg-1) unstable; urgency=medium + + [ Bernhard Schmidt ] + * New upstream version 9.11.3+dfsg + (Closes: #867570, #888463) + - Refresh patches + - Drop stdatomic.h patches applied upstream + * Follow SONAME bump of libdns + * Follow SONAME bump of libisc + * Add missing symbols for libisccfg160 + * Add python3-distutils Build-Dependency + * Drop Priority: standard for library packages + * Fix apparmor profile name (Closes: #893005) + Thanks to Andreas Hasenack + * Update bind9-host description (Closes: #729561) + * Add flags=(attach_disconnected) to AppArmor profile to prepare + to use more systemd hardening options, see #863841 + * Add myself to Uploaders + + [ Ondřej Surý ] + * Update Vcs-* links to salsa.d.o + + -- Bernhard Schmidt <berni@debian.org> Fri, 23 Mar 2018 00:09:58 +0100 + +bind9 (1:9.11.2.P1-1) unstable; urgency=medium + + * New upstream version 9.11.2-P1 + * Refresh patches for new release + + -- Ondřej Surý <ondrej@debian.org> Wed, 17 Jan 2018 06:06:04 +0000 + +bind9 (1:9.11.2+dfsg-10) unstable; urgency=medium + + * Disable lmdb usage in export version of libraries (Closes: #887407) + + -- Ondřej Surý <ondrej@debian.org> Tue, 16 Jan 2018 05:59:31 +0000 + +bind9 (1:9.11.2+dfsg-9) unstable; urgency=medium + + * Fix various mistakes in bind9 conffiles (Closes: #887398) + + -- Ondřej Surý <ondrej@debian.org> Mon, 15 Jan 2018 23:12:43 +0000 + +bind9 (1:9.11.2+dfsg-8) unstable; urgency=medium + + * Pull more stdatomic patch to fix builds on 32-bit architectures + * Remove extra native pkcs11 patch (it has been replaced by sed rules) + + -- Ondřej Surý <ondrej@debian.org> Mon, 15 Jan 2018 21:02:30 +0000 + +bind9 (1:9.11.2+dfsg-7) unstable; urgency=medium + + * Pull upstream patch to use C11 stdatomic where available (Closes: #778720) + + -- Ondřej Surý <ondrej@debian.org> Mon, 15 Jan 2018 15:59:48 +0000 + +bind9 (1:9.11.2+dfsg-6) unstable; urgency=medium + + * Add named-nzd2nzf to bind9 package + * Simplify installation rules + * Enable lmdb (to actually build named-nzd2nzf) + * Move delv from bind9 to dnsutils package (Closes: #887326) + + -- Ondřej Surý <ondrej@debian.org> Mon, 15 Jan 2018 14:19:31 +0000 + +bind9 (1:9.11.2+dfsg-5) unstable; urgency=medium + + * Remove duplicate invoke-rc.d start invocation (Closes: #883575) + * Don't fail in postrm when /var/lib/bind cannot be removed (Closes: #882999) + * Use dh-apparmor for profile management + * apparmor-profile: allow changing thread name (Closes: #883228) + * Bump debhelper compat level to 10 + * Bump Standards-Version to 4.1.2, no changes necessary + + -- Bernhard Schmidt <berni@debian.org> Sun, 10 Dec 2017 20:23:12 +0100 + +bind9 (1:9.11.2+dfsg-4) unstable; urgency=medium + + * Team upload. + * Fix symlinks in libbind-export-dev to point to /lib (Closes: #883536) + + -- Bernhard Schmidt <berni@debian.org> Tue, 05 Dec 2017 00:09:25 +0100 + +bind9 (1:9.11.2+dfsg-3) unstable; urgency=medium + + * Team upload. + * Only install files into bind9:any on arch-any builds (Closes: #883448) + * Adjust dependencies for udeb packages (Closes: #883449) + + -- Bernhard Schmidt <berni@debian.org> Mon, 04 Dec 2017 10:56:58 +0100 + +bind9 (1:9.11.2+dfsg-2) unstable; urgency=medium + + * Team upload. + * Workaround for FTBFS on binary-any builds (Closes: #883159) + + -- Bernhard Schmidt <berni@debian.org> Sun, 03 Dec 2017 20:36:32 +0100 + +bind9 (1:9.11.2+dfsg-1) unstable; urgency=low + + * d/watch: Bump the BIND version to 9.11.x + * Remove 'order random_1' patch, it was a horrible deviation from standards + * Modernize d/rules using debhelper + * New upstream version 9.11.2+dfsg + * Delete dyndb patch, as dyndb is now included in upstream sources + * Rebase patches for new upstream release. + * Add python3-ply to Build-Depends + * Restore the native pkcs11 patch + * Fix the Debian version parsing + * Remove lwresd as it has been deprecated by upstream anyway + * Add new tools: mdig to dnsutils and dnssec-keymgr to bind9utils + * Update the SONAMEs of BIND libraries + * Fix python3 packaging errors + * Bump the standards version to 4.1.1.1 (no change) + * Add support for dh_missing + + -- Ondřej Surý <ondrej@debian.org> Tue, 28 Nov 2017 22:59:30 +0000 + +bind9 (1:9.10.6+dfsg-5) unstable; urgency=medium + + [ Chris Lamb ] + * Make the build reproducible (Closes: #828012) + + [ Micah Cowan ] + * Try not to be fragile to varying value of LIBS make var. (Closes: #833307) + + [ Ondřej Surý ] + * Update the softhsm2.so non-MA path (Closes: #860722) + * Enable JSON output in the statistics channel (Closes: #860722) + * Merge NMUs' changelogs (Closes: #880077) + * Use /dev/urandom to avoid blocking in the server process. (Closes: #854243) + + -- Ondřej Surý <ondrej@debian.org> Thu, 02 Nov 2017 10:31:01 +0000 + +bind9 (1:9.10.6+dfsg-4) unstable; urgency=medium + + [ Michael Biebl ] + * Improve bind9-resolvconf.service (Closes: #826353) + + [ Ondřej Surý ] + * Add insserv.conf.d configuration (Closes: #650538) + * Change bind9-resolvconf.server to Type=oneshot + RemainAfterExit=yes (Closes: #832040) + * Only add static and development symlinks for *-export.{a,so} libraries (Closes: #857522) + * Update Vcs-* fields to standard variants + * Rebuild with newer debhelper (Closes: #879542) + + -- Ondřej Surý <ondrej@debian.org> Mon, 23 Oct 2017 07:02:50 +0000 + +bind9 (1:9.10.6+dfsg-3) unstable; urgency=medium + + * Make lwresd hard depend on bind9 package (Closes: #879127) + + -- Ondřej Surý <ondrej@debian.org> Sun, 22 Oct 2017 11:08:20 +0000 + +bind9 (1:9.10.6+dfsg-2) unstable; urgency=medium + + [ Timo Aaltonen ] + * d/copyright: Add Bv9ARM.pdf to Files-Excluded. + + [ Ondřej Surý ] + * Replace lwresd with symlink instead of hard copy (Closes: #868538) + * Fix the symbols file to compensate for missing bsdcompat symbol on kFreeBSD (Closes: #879017) + * Re-enable threading support on kFreeBSD (Closes: #879018) + * Drop Multi-Arch: same header from libbind-dev (Closes: #874232) + * Remove transitional host package (Closes: #645437, #878228) + + -- Ondřej Surý <ondrej@debian.org> Thu, 19 Oct 2017 09:35:03 +0000 + +bind9 (1:9.10.6+dfsg-1) unstable; urgency=medium + + * New upstream version 9.10.6+dfsg + * Use OpenSSL 1.1.0 for crypto + * Add support for downloading upstream sources using d/watch + + Make d/copyright machine readable for Files-Excluded: support + + Update Files-Exclude: * to remove obsolete software dropped in + contrib/, but not really used + * Add initial README.source + * Limit the d/watch to 9.10.x (aka stable) for now + * Update patches for BIND 9.10.6 release + * Update PKCS11 patch + * Move under pkg-dns umbrella + * Reformat files in debian/ with wrap-and-sort -a for better maintainability + * Update the d/export.diff for BIND 9.10.6 + * Remove FAQ from d/bind9.docs + * Bump SONAME versions for BIND libraries + * Add symbols files for libraries and enable strict symbol checks + * arpaname and named-rrchecker has been moved to /usr/bin + * Install required python library into bind9utils to accompany + dnssec-checkds and dnssec-coverage + * Change Vcs-* to pkg-dns/bind9 + * Also exclude idnkit from upstream tarball + * Finish the debian/copyright update into machine readable format + * Enable Multi-Arch on libirs-export189 + * Cleanup maintainer scripts + * Add lintian override for false positive on full-path command + * Remove unnecessary complexity when generating ${Description} to d/control + + -- Ondřej Surý <ondrej@debian.org> Fri, 06 Oct 2017 06:18:21 +0000 + +bind9 (1:9.10.3.dfsg.P4-12.3+deb9u3) stretch; urgency=medium + + [ Bernhard Schmidt ] + * Import upcoming DNSSEC KSK-2017 from 9.10.5 + + [ Ondřej Surý ] + * Non-maintainer upload. + + -- Ondřej Surý <ondrej@debian.org> Mon, 28 Aug 2017 09:36:28 +0200 + +bind9 (1:9.10.3.dfsg.P4-12.3+deb9u2) stretch-security; urgency=high + + * Non-maintainer upload by the Security Team. + * debian/patches: + - CVE-2017-3142_regression added, fix a regression introduced in with the + correction for CVE-2017-3142. + + -- Yves-Alexis Perez <corsac@debian.org> Sat, 22 Jul 2017 21:24:54 +0200 + +bind9 (1:9.10.3.dfsg.P4-12.3+deb9u1) stretch-security; urgency=high + + * Non-maintainer upload by the Security Team. + * debian/patches: + - debian/patches/CVE-2017-3142+CVE-2017-3143 added, fix TSIG bypasses + CVE-2017-3142: error in TSIG authentication can permit unauthorized zone + transfers. An attacker may be able to circumvent TSIG authentication of + AXFR and Notify requests. + CVE-2017-3143: error in TSIG authentication can permit unauthorized + dynamic updates. An attacker may be able to forge a valid TSIG or SIG(0) + signature for a dynamic update. + + -- Yves-Alexis Perez <corsac@debian.org> Fri, 30 Jun 2017 16:20:29 +0200 + +bind9 (1:9.10.3.dfsg.P4-12.3) unstable; urgency=high + + * Non-maintainer upload. + * Dns64 with "break-dnssec yes;" can result in a assertion failure + (CVE-2017-3136) (Closes: #860224) + * Some chaining (CNAME or DNAME) responses to upstream queries could trigger + assertion failures (CVE-2017-3137) (Closes: #860225) + * 'rndc ""' could trigger a assertion failure in named (CVE-2017-3138) + (Closes: #860226) + + -- Salvatore Bonaccorso <carnil@debian.org> Sun, 07 May 2017 15:22:46 +0200 + +bind9 (1:9.10.3.dfsg.P4-12.2) unstable; urgency=medium + + * Non-maintainer upload. + * Replace 32_mips_atomic.diff with a version that uses C11 atomics. Fixes + hangs and crashes on MIPS. (Closes: #778720) + + -- James Cowgill <jcowgill@debian.org> Tue, 18 Apr 2017 16:42:50 +0100 + +bind9 (1:9.10.3.dfsg.P4-12.1) unstable; urgency=medium + + * Non-maintainer upload. + * Use /dev/urandom to avoid blocking in the server process. + (closes: #854243) + + -- Bastian Blank <waldi@debian.org> Fri, 17 Mar 2017 19:07:16 +0100 + +bind9 (1:9.10.3.dfsg.P4-12) unstable; urgency=high + + * Merge and accept the non-maintainer upload. + * Fix regression caused by the fix for CVE-2016-8864 (closes: #855540). + * Fix CVE-2017-3135: a malicously crafted query can cause named to crash if + both DNS64 and RPZ are being used (closes: #855520). + + -- Michael Gilbert <mgilbert@debian.org> Sun, 19 Feb 2017 22:39:32 +0000 + +bind9 (1:9.10.3.dfsg.P4-11.1) unstable; urgency=medium + + * Non-maintainer upload. + * Disable GOST to prevent ENGINE_by_id failed (crypto failure) in chroot. + Patch by Marc Haber <mh+debian-bugs@zugschlus.de> (Closes: #820974). + + -- Arturo Borrero Gonzalez <arturo@debian.org> Tue, 07 Feb 2017 10:42:00 +0100 + +bind9 (1:9.10.3.dfsg.P4-11) unstable; urgency=medium + + * Fix some lintian warnings. + * Add lsb-base dependency to lwresd (closes: #848519). + * Fix CVE-2016-2775: crash in lwresd due to a long query name + (closes: #831796). + * Fix CVE-2016-2776: maliciously crafted query can cause named to crash + (closes: #839010). + * Fix CVE-2016-8864: incorrect handling of a DNAME record can cause + named to crash (closes: #842858). + * Fix CVE-2016-9131: maliciously crafted response to an ANY query can + cause named to crash (closes: #851065). + * Fix CVE-2016-9147: query with contradictory DNSSEC information can + cause named to crash (closes: #851063). + * Fix CVE-2016-9444: maliciously formed DNSSEC Delegation Signer (DS) + record can cause named to crash (closes: #851062). + * Openssl 1.1 is not yet supported, so build with openssl 1.0 for now + (closes: #828082). + + [ LaMont Jones ] + * Update VCS fields in control. + * -DDIG_SIGCHASE got dropped by the change in hardening. + + [ Stefan Bader ] + * Use the defaults file in systemd. + + -- Michael Gilbert <mgilbert@debian.org> Thu, 19 Jan 2017 04:03:28 +0000 + +bind9 (1:9.10.3.dfsg.P4-10.1) unstable; urgency=medium + + * Non-maintainer upload. + * Add explicit ordering for nss-lookup.target in bind9.service, + lwresd.service. Patches by Michael Biebl <biebl@debian.org>. + (Closes: #826243, #826245) + + -- Christian Hofstaedtler <zeha@debian.org> Sat, 02 Jul 2016 14:32:50 +0200 + +bind9 (1:9.10.3.dfsg.P4-10) unstable; urgency=medium + + * Use python3 + + -- LaMont Jones <lamont@debian.org> Tue, 03 May 2016 17:39:49 -0600 + +bind9 (1:9.10.3.dfsg.P4-9) unstable; urgency=medium + + * Fix bad patch from when we switched to quilt. Closes: #820847 LP: + #1552801, #1549788, #1553460 + * freshen patch to remove fuzz. + + -- LaMont Jones <lamont@debian.org> Tue, 26 Apr 2016 15:17:58 -0600 + +bind9 (1:9.10.3.dfsg.P4-8) unstable; urgency=medium + + [Timo Aaltonen] + + * Fix bind9-resolvconf.service installation. + * Add support for native pkcs11. LP: #1565392 + + [Samuel Thibault] + + * Detect in6_pktinfo on hurd-i386. Closes: #820404 + + -- LaMont Jones <lamont@debian.org> Wed, 13 Apr 2016 13:19:37 -0600 + +bind9 (1:9.10.3.dfsg.P4-7) unstable; urgency=medium + + * Fix libisccc-export dependencies. Closes: #820043 + + -- Michael Gilbert <mgilbert@debian.org> Tue, 05 Apr 2016 02:53:22 +0000 + +bind9 (1:9.10.3.dfsg.P4-6) unstable; urgency=medium + + * Upload 9.10 to unstable. Closes: #781739 + * Add -DNO_VERSION_DATE to CFLAGS. Closes: #783885 + + -- Michael Gilbert <mgilbert@debian.org> Mon, 04 Apr 2016 00:39:57 +0000 + +bind9 (1:9.10.3.dfsg.P4-5) experimental; urgency=medium + + * Drop dead code in bind9.preinst. + * move from /var/run to /run for policy. + + -- LaMont Jones <lamont@debian.org> Sat, 19 Mar 2016 19:52:04 -0600 + +bind9 (1:9.10.3.dfsg.P4-4) experimental; urgency=medium + + * use multiarch path in udebs + * Updated root cache file. Closes: #806954 + + -- LaMont Jones <lamont@debian.org> Fri, 18 Mar 2016 20:50:49 -0600 + +bind9 (1:9.10.3.dfsg.P4-3) experimental; urgency=medium + + * Fix vcs links + * build in debian/tmp, use bind9.install + + -- LaMont Jones <lamont@debian.org> Fri, 18 Mar 2016 14:46:30 -0600 + +bind9 (1:9.10.3.dfsg.P4-2) experimental; urgency=medium + + * updated precise_time patch + * add RT#s to some patches + * Merge ubuntu changes + * Fix debian/rules to properly remove files from bind9 that are delivered + elsewhere. LP: #1559090 + + -- LaMont Jones <lamont@canonical.com> Fri, 18 Mar 2016 10:58:07 -0600 + +bind9 (1:9.10.3.dfsg.P4-1ubuntu2) xenial; urgency=medium + + * Bump debhelper to v9 to use dh-exec. + * libbind-export-dev: Fix the libbind.so symlink. + * Move static libs to the multiarch libdir again. + + -- Matthias Klose <doko@ubuntu.com> Fri, 18 Mar 2016 13:30:03 +0100 + +bind9 (1:9.10.3.dfsg.P4-1ubuntu1) xenial; urgency=medium + + * Fix udeb dependencies. + + -- Matthias Klose <doko@ubuntu.com> Fri, 18 Mar 2016 12:47:02 +0100 + +bind9 (1:9.10.3.dfsg.P4-1) experimental; urgency=medium + + [ ISC ] + * New upstream: 9.10.3-P3 + - Specific APL data could trigger a INSIST. (CVE-2015-8704) [RT #41396] + - render_ecs errors were mishandled when printing out a OPT record + resulting in a assertion failure. (CVE-2015-8705) [RT #41397] + - Fixed a regression in resolver.c:possibly_mark() which caused + known-bogus servers to be queried anyway. [RT #41321] + * New upstream: 9.10.3-P4 + - Malformed control messages can trigger assertions in named and rndc. + (CVE-2016-1285) [RT #41666] + - Fix resolver assertion failure due to improper DNAME handling when + parsing fetch reply messages. (CVE-2016-1286) [RT #41753] + - Duplicate EDNS COOKIE options in a response could trigger an + assertion failure. (CVE-2016-2088) [RT #41809] + + [LaMont Jones] + + * Do not build -export libs for libbind90 and liblwres. Relates in part + to, and is the last fix to LP: #1551351 + * update patches for 9.10.3.dfsg.P4. Drop 50_CVE_2015-8704.diff + + [ Stefan Bader ] + + * Do not modify signal handlers for external apps. LP: #1556175 + + -- LaMont Jones <lamont@debian.org> Thu, 17 Mar 2016 14:53:36 -0600 + +bind9 (1:9.10.3.dfsg.P2-7) experimental; urgency=medium + + * Fix my bad merge of autoreconf workaround. + * Re-implement -export libraries. LP: #1556175 + * Deliver libisccc-export library. + + -- LaMont Jones <lamont@debian.org> Wed, 16 Mar 2016 15:14:48 -0600 + +bind9 (1:9.10.3.dfsg.P2-5) experimental; urgency=medium + + [Timo Aaltonen] + + * Sync 30_dynamic_db.diff from Fedora. + * rules: Backup some files which dh_autoreconf_clean would remove, restore + on clean. + + [Jamie Strandboge] + + * apparmor: use @{PROC} instead of /proc, allow read on + sys.net.ipv4.ip_local_port_range. LP: #1552441 + + [LaMont Jones] + + * Return nanosecond-precise time for files, so that we more-correctly know + when we can skip loading a zonefile. (Bug introduced 9.9.3b2) + + -- LaMont Jones <lamont@debian.org> Thu, 03 Mar 2016 18:17:06 -0700 + +bind9 (1:9.10.3.dfsg.P2-4) experimental; urgency=medium + + [Matthias Klose] + + * Fix .so symlinks. + * libbind-dev: Depend on libirs141. + * For the udeb's, use a separate build with a reduced feature set, drop the + name difference, and do both builds in a separate directory. + + [Filip Pytloun] + + * Add apparmor rules needed by freeipa-server. Closes: #814314 + + [LaMont Jones] + + * Do not deliver libraries (left in /lib) as part of bind9. LP: #1547052 + * clean up library path for libirs. + + -- LaMont Jones <lamont@debian.org> Fri, 19 Feb 2016 14:26:08 -0700 + +bind9 (1:9.10.3.dfsg.P2-3ubuntu3) xenial; urgency=medium + + * For the udeb's, use a separate build with a reduced feature set. + * Don't call the reduced build "export"; it was used by isc-dhcp as well. + * Do both builds in a separate builddir. + + -- Matthias Klose <doko@ubuntu.com> Fri, 19 Feb 2016 15:01:16 +0100 + +bind9 (1:9.10.3.dfsg.P2-3~ubuntu2) xenial; urgency=medium + + * libbind-dev: Depend on libirs141. + * Ship libirs.{a,so} in libbind-dev. + * Remove obsolete debian/*.dirs files. + + -- Matthias Klose <doko@ubuntu.com> Fri, 19 Feb 2016 15:01:16 +0100 + +bind9 (1:9.10.3.dfsg.P2-3~ubuntu1) xenial; urgency=medium + + * Fix .so symlinks. + + -- Matthias Klose <doko@ubuntu.com> Thu, 18 Feb 2016 13:55:19 +0100 + +bind9 (1:9.10.3.dfsg.P2-3) experimental; urgency=medium + + [Marc Deslauriers] + + * SECURITY UPDATE: denial of service via string formatting operations. + CVE-2015-8704 + + [Matthias Klose] + + * Add multiarch support. Closes: #802584. + * Standards cleanup. + + [LaMont Jones] + + * Properly finish converting to 3.0 (quilt) format. + * Drop geoip_acl patch temporarily while we evaluate the upstream geoip + changes. + * Prechroot init appears to have been taken upstream. + + -- LaMont Jones <lamont@debian.org> Wed, 17 Feb 2016 10:34:24 -0700 + +bind9 (1:9.10.3.dfsg.P2-1) experimental; urgency=medium + + * New upstream, no need for export packages with 9.10 + * Fix sonames + * Update how we do hardening. + * Add Robie Basak as an uploader + * Migrate quilt patches from 9.9.5 branch, and incorporate Michael Gilbert's + changes. + + -- LaMont Jones <lamont@debian.org> Thu, 31 Dec 2015 18:41:31 -0700 + +bind9 (1:9.9.5.dfsg-12.1) unstable; urgency=high + + * Non-maintainer upload. + * Add patch to fix CVE-2015-8000. + CVE-2015-8000: Insufficient testing when parsing a message allowed + records with an incorrect class to be accepted, triggering a REQUIRE + failure when those records were subsequently cached. (Closes: #808081) + + -- Salvatore Bonaccorso <carnil@debian.org> Wed, 16 Dec 2015 15:01:39 +0100 + +bind9 (1:9.9.5.dfsg-12) unstable; urgency=high + + * Fix CVE-2015-5722: maliciously crafted DNSSEC key can cause named to crash. + + -- Michael Gilbert <mgilbert@debian.org> Thu, 03 Sep 2015 01:16:32 +0000 + +bind9 (1:9.9.5.dfsg-11) unstable; urgency=high + + * Fix CVE-2015-5477: maliciously crafted TKEY query can cause named to exit + (closes: #793903). + + -- Michael Gilbert <mgilbert@debian.org> Wed, 29 Jul 2015 23:46:48 +0000 + +bind9 (1:9.9.5.dfsg-10) unstable; urgency=high + + * Fix CVE-2015-4620: DNSSEC validation of a malicously crafted zone can + cause the resolver to crash (closes: #791715). + + -- Michael Gilbert <mgilbert@debian.org> Thu, 09 Jul 2015 00:43:38 +0000 + +bind9 (1:9.9.5.dfsg-9) unstable; urgency=high + + * Fix CVE-2015-1349: named crash due to managed key rollover, primarily only + affecting setups using DNSSEC (closes: #778733). + + -- Michael Gilbert <mgilbert@debian.org> Thu, 19 Feb 2015 03:42:21 +0000 + +bind9 (1:9.9.5.dfsg-8) unstable; urgency=medium + + * Launch rndc command in the background in networking scripts to avoid a + hang in named from bringing down the entire network (closes: #760555). + + -- Michael Gilbert <mgilbert@debian.org> Thu, 01 Jan 2015 17:51:52 +0000 + +bind9 (1:9.9.5.dfsg-7) unstable; urgency=medium + + * Fix CVE-2014-8500: limit recursion in order to avoid memory consuption + issues that can lead to denial-of-service (closes: #772610). + + -- Michael Gilbert <mgilbert@debian.org> Sun, 14 Dec 2014 05:05:48 +0000 + +bind9 (1:9.9.5.dfsg-6) unstable; urgency=medium + + * Include dlz_dlopen.h in libbind-dev (closes: #769117). + + -- Michael Gilbert <mgilbert@debian.org> Sun, 30 Nov 2014 22:53:50 +0000 + +bind9 (1:9.9.5.dfsg-6) unstable; urgency=medium + + * Include dlz_dlopen.h in libbind-dev (closes: #769117). + + -- Michael Gilbert <mgilbert@debian.org> Sun, 30 Nov 2014 22:53:50 +0000 + +bind9 (1:9.9.5.dfsg-5) unstable; urgency=medium + + * Avoid libnsl dependency on non-linux architectures. Closes: #766430 + * Install export libraries to /lib instead of /usr/lib. Closes: #766544 + * Add myself to the maintainer team with approval from LaMont and Bdale. + + -- Michael Gilbert <mgilbert@debian.org> Thu, 30 Oct 2014 02:42:17 +0000 + +bind9 (1:9.9.5.dfsg-4.3) unstable; urgency=medium + + * Non-maintainer upload. + * Mark critical section as not parallel in the makefile. Closes: #762766 + + -- Michael Gilbert <mgilbert@debian.org> Mon, 13 Oct 2014 04:37:55 +0000 + +bind9 (1:9.9.5.dfsg-4.2) unstable; urgency=low + + * Non-maintainer upload. + * Fix intermittent parallel build failure. Closes: #762766 + * Set -fno-delete-null-pointer-checks. Closes: #750760 + * Use separate packages for the udebs. Closes: #762762 + * Don't install configuration files to /usr. Closes: #762948 + + -- Michael Gilbert <mgilbert@debian.org> Mon, 06 Oct 2014 01:23:57 +0000 + +bind9 (1:9.9.5.dfsg-4.1) unstable; urgency=low + + * Non-maintainer upload. + * Add support for hurd. Closes: #746540 + * Provide shared libraries for isc-dhcp. Closes: #656150 + + -- Michael Gilbert <mgilbert@debian.org> Sun, 14 Sep 2014 00:58:06 +0000 + +bind9 (1:9.9.5.dfsg-4) unstable; urgency=low + + [Julien Cristau] + + * FTBFS on kfreebsd. Closes: #741285 + + [LaMont Jones] + + * revert aclocal.m4 expansion from earlier merge + + -- LaMont Jones <lamont@debian.org> Tue, 29 Apr 2014 14:48:50 -0600 + +bind9 (1:9.9.5.dfsg-3) unstable; urgency=low + + * Re-enable rrl (now a configure option). Closes: #741059 LP: #1288823 + + -- LaMont Jones <lamont@debian.org> Mon, 24 Mar 2014 06:55:55 -0600 + +bind9 (1:9.9.5.dfsg-2) unstable; urgency=low + + * merge in ubuntu 1:9.9.3.dfsg.P2-4ubuntu3 + * move dnssec-coverage to bind9utils. Closes: #739994 + * dnssec-{checkds,verify} manpages in wrong package. Closes: #739995 + + -- LaMont Jones <lamont@debian.org> Wed, 26 Feb 2014 09:30:31 -0700 + +bind9 (1:9.9.5.dfsg-1) experimental; urgency=low + + [Internet Software Consortium, Inc] + + * New upstream version: 9.9.5 Closes: #735190 + + [Martin Nagy] + + * dynamic loading of database backends. See: + http://pkgs.fedoraproject.org/cgit/bind.git/tree/bind-96-dyndb.patch. + Closes: #722669 + + [LaMont Jones] + + * fix sonames + * merge ubuntu changes + * Deliver dns/rrl.h. Closes: #724844 + * rules tweak to make backports to pre-dh-systemd releases easier + + -- LaMont Jones <lamont@debian.org> Tue, 11 Feb 2014 09:16:05 -0700 + +bind9 (1:9.9.4.dfsg-0.3) experimental; urgency=low + + [Internet Software Consortium, Inc] + + * Upstream version 9.9.4 + + [LaMont Jones] + + * fix sonames + * merge ubuntu change + * Deliver dns/rrl.h. Closes: #724844 + + -- LaMont Jones <lamont@debian.org> Wed, 06 Nov 2013 13:27:37 -0700 + +bind9 (1:9.9.3.dfsg.P2-4ubuntu3) trusty; urgency=low + + * SECURITY UPDATE: denial of service when processing NSEC3-signed zone + queries + - debian/patches/CVE-2014-0591.patch: don't call memcpy with + overlapping ranges in bin/named/query.c. + - patch backported from 9.9.4-P2. + - CVE-2014-0591 + + -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Fri, 10 Jan 2014 09:36:55 -0500 + +bind9 (1:9.9.3.dfsg.P2-4ubuntu2) trusty; urgency=medium + + * Use dh-autoreconf to update libtool and configure for new ports. + + -- Adam Conrad <adconrad@ubuntu.com> Wed, 18 Dec 2013 04:42:22 -0700 + +bind9 (1:9.9.3.dfsg.P2-4ubuntu1) saucy; urgency=low + + * Use dh_autotools-dev to update config.{sub,guess} for new ports. + + -- Adam Conrad <adconrad@ubuntu.com> Mon, 07 Oct 2013 23:09:45 -0600 + +bind9 (1:9.9.3.dfsg.P2-4) unstable; urgency=low + + [Peter Marschall] + + * If rndc.conf exists, skip creation of rndc.key. Closes: #620394 + + [Al Tarakanoff] + + * properly quote check of pid in bind9 init.d. LP: #1092243 + + [LaMont Jones] + + * include distro and package version in version string + * apparmor: allow GeoIP data file access. LP: #834901 + * enable filter-aaaa. Closes: #701704 LP: #1115168 + + -- LaMont Jones <lamont@debian.org> Thu, 29 Aug 2013 16:22:29 -0600 + +bind9 (1:9.9.3.dfsg.P2-3) unstable; urgency=low + + [Michael Stapelberg] + + * add systemd service file. Closes: #718212 + + [LaMont Jones] + + * deliver more dnssec-* tools in bind9utils. Closes: #713026 + * support parallel=N DEB_BUILD_OPTIONS, fix -j build. Closes: #713025 + * deliver rrl.h and stat.h Closes: #692483, #720813 + + -- LaMont Jones <lamont@debian.org> Tue, 27 Aug 2013 10:06:37 -0600 + +bind9 (1:9.9.3.dfsg.P2-2build1) saucy; urgency=low + + [Marc Deslauriers] + + * 9.9.2.dfsg.P1-2ubuntu1: fixed in 9.9.3b1 + * 9.9.2.dfsg.P1-2ubuntu3: fixed in 9.9.3-P2 + + [Robie Basak] + + * 9.9.2.dfsg.P1-2ubuntu2: fixed in 9.9.3b1 + + [LaMont Jones] + + * Merge ubuntu changes, except: autoconf files are generated as part + of the source packagee creation, not on the build host. NAK + * deliver more dnssec-* tools in bind9utils. Closes: #713026 + * support parallel=N DEB_BUILD_OPTIONS, fix -j build + + [Michael Stapelberg] + + * add systemd service file. Closes: #718212 + + -- LaMont Jones <lamont@debian.org> Thu, 22 Aug 2013 10:57:17 -0600 + +bind9 (1:9.9.3.dfsg.P2-2) unstable; urgency=low + + * ack NMUs of 9.8.4 + - upstream 9.9.3-P2 fixes: CVE-2013-4854, CVE-2012-5689, + CVE-2013-2266 + - deliver rrl.h + + [LaMont Jones] + + * Use ISC's bin/tests + * Diff cleanup and rationalization to 9.9.3 upstream + + -- LaMont Jones <lamont@debian.org> Sat, 17 Aug 2013 07:09:54 -0600 + +bind9 (1:9.9.3.dfsg.P2-1) unstable; urgency=low + + + [Internet Software Consortium, Inc] + + * 9.9.3-P2 + + [Ben Hutchings] + + * Initialise OpenSSL before calling chroot(). Closes: #696661 + + [LaMont Jones] + + * soname changes + + [Paul Vixie] + + * Reapply rpz/rrl patches from http://www.redbarn.org/dns/ratelimits + + -- LaMont Jones <lamont@debian.org> Wed, 14 Aug 2013 10:38:59 -0600 + +bind9 (1:9.9.2.dfsg.P1-3) experimental; urgency=low + + [LaMont Jones] + + * Merge 1:9.8.4.dfsg.P1-6 + + [Ben Hutchings] + + * Initialise OpenSSL before calling chroot(). Closes: #696661 + + -- LaMont Jones <lamont@debian.org> Mon, 04 Mar 2013 09:30:50 -0700 + +bind9 (1:9.9.2.dfsg.P1-2ubuntu3) saucy; urgency=low + + * SECURITY UPDATE: denial of service via incorrect bounds checking on + private type 'keydata' + - lib/dns/rdata/generic/keydata_65533.c: check for correct length. + - Patch backported from 9.9.3-P2 + - CVE-2013-4854 + + -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Sun, 28 Jul 2013 10:13:06 -0400 + +bind9 (1:9.9.2.dfsg.P1-2ubuntu2) raring; urgency=low + + * configure.in: detect libxml 2.9 as well as 2.[678] (LP: #1164475). + * debian/control: add Build-Depends on dh-autoreconf. + * debian/rules: use dh_autoreconf and dh_autoreconf_clean. + + -- Robie Basak <robie.basak@canonical.com> Wed, 10 Apr 2013 16:50:28 +0000 + +bind9 (1:9.9.2.dfsg.P1-2ubuntu1) raring; urgency=low + + * SECURITY UPDATE: denial of service via regex syntax checking + - configure,configure.in,config.h.in: remove check for regex.h to + disable regex syntax checking. + - CVE-2013-2266 + + -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 28 Mar 2013 15:04:57 -0400 + +bind9 (1:9.9.2.dfsg.P1-2) experimental; urgency=low + + [Michael Gilbert] + + * Use /var/lib/bind for state file. Closes: #689332 + + [LaMont Jones] + + * zone transfers now involve link(), update the apparmor profile + * Update db.root with new IP for D.root-servers.net. Closes: #697352 + * re-drop dlzexternal test + * Reduce log level for "sucessfully validated after lower casing" dnssec + based on mail from Mark Andrews. Closes: #697681 + * remove /var/lib/bind/bind9-default.md5sum in postrm + * remove /etc/bind/named.conf.options on purge. Closes: #668801 + + [Sebastian Wiesinger] + + * Build and deliver dnssec-checkds and dnssec-verify in bind9utils + + -- LaMont Jones <lamont@debian.org> Wed, 09 Jan 2013 10:09:40 -0700 + +bind9 (1:9.8.4.dfsg.P1-6+nmu3) unstable; urgency=high + + * Non-maintainer upload by the Security Team. + * CVE-2013-4854: A specially crafted query that includes malformed rdata can + cause named to terminate with an assertion failure while rejecting the + malformed query. (Closes: #717936). + + -- Salvatore Bonaccorso <carnil@debian.org> Sat, 27 Jul 2013 10:24:07 +0200 + +bind9 (1:9.8.4.dfsg.P1-6+nmu2) unstable; urgency=medium + + * Non-maintainer upload. + * Install /usr/include/dns/rrl.h (closes: #699834). + + -- Michael Gilbert <mgilbert@debian.org> Tue, 16 Apr 2013 01:59:05 +0000 + +bind9 (1:9.8.4.dfsg.P1-6+nmu1) unstable; urgency=high + + * Non-maintainer upload by the Security Team. + * Fix cve-2012-5689: issue in nameservers using DNS64 to perform a AAAA + lookup for a record with an A record overwrite rule in a Response Policy + Zone (closes: #699145). + * Fix cve-2013-2266: issues in regular expression handling (closes: #704174). + + -- Michael Gilbert <mgilbert@debian.org> Fri, 29 Mar 2013 00:47:25 +0000 + +bind9 (1:9.8.4.dfsg.P1-6) unstable; urgency=low + + [Ben Hutchings] + + * Initialise OpenSSL before calling chroot(). Closes: #696661 + + -- LaMont Jones <lamont@debian.org> Fri, 01 Mar 2013 08:23:27 -0700 + +bind9 (1:9.8.4.dfsg.P1-5) unstable; urgency=low + + [LaMont Jones] + + * Properly acknowledge 1:9.8.1.dfsg.P1-4.4: [Philipp Kern] + - Fix CVE-2012-4244. Thanks to Moritz Mühlenhoff for providing the patch. + + [Paul Vixie] + + * Include rpz/rrl patches from http://www.redbarn.org/dns/ratelimits. + Closes: #698641 + + -- LaMont Jones <lamont@debian.org> Wed, 30 Jan 2013 14:04:35 -0700 + +bind9 (1:9.8.4.dfsg.P1-4) unstable; urgency=high + + * The rest of the dnssec validation logspam removal. Closes: #697681 + + -- LaMont Jones <lamont@debian.org> Mon, 21 Jan 2013 13:18:53 -0700 + +bind9 (1:9.8.4.dfsg.P1-3) unstable; urgency=low + + [Marc Deslauriers] + + * debian/bind9.apport: Add AppArmor info and logs to apport hook. + + [LaMont Jones] + + * Reduce log level for "sucessfully validated after lower casing" dnssec + based on mail from Mark Andrews. Closes: #697681 + * remove /var/lib/bind/bind9-default.md5sum in postrm + * remove /etc/bind/named.conf.options on purge. Closes: #668801 + + -- LaMont Jones <lamont@debian.org> Wed, 09 Jan 2013 09:47:24 -0700 + +bind9 (1:9.9.2.dfsg.P1-1) experimental; urgency=low + + * Named could die on specific queries with dns64 enabled. + [Addressed in change #3388 for BIND 9.8.5 and 9.9.3.] + CVE-2012-5688 Closes: #695192 + + -- LaMont Jones <lamont@debian.org> Wed, 05 Dec 2012 05:27:18 -0700 + +bind9 (1:9.8.4.dfsg.P1-2) unstable; urgency=low + + [Michael Gilbert] + + * Use /var/lib/bind for state file. Closes: #689332 + + [LaMont Jones] + + * Re-enable dlopen, do not build the test that fails. Closes: #692416 + * Update db.root with new IP for D.root-servers.net. Closes: #697352 + + -- LaMont Jones <lamont@debian.org> Mon, 07 Jan 2013 06:50:25 -0700 + +bind9 (1:9.8.4.dfsg.P1-1) unstable; urgency=low + + * Named could die on specific queries with dns64 enabled. + [Addressed in change #3388 for BIND 9.8.5 and 9.9.3.] + CVE-2012-5688 Closes: #695192 + + -- LaMont Jones <lamont@debian.org> Wed, 05 Dec 2012 05:22:06 -0700 + +bind9 (1:9.9.2.dfsg-1) experimental; urgency=low + + [Matthew Grant] + + * Turn off dlopen as it was causing test compile failures. + * Add missing library .postrm files for debhelper + + [LaMont Jones] + + * New upstream version 9.9.2 + * soname fixes + + -- LaMont Jones <lamont@debian.org> Thu, 01 Nov 2012 08:59:57 -0600 + +bind9 (1:9.9.1.dfsg.P1-1) unstable; urgency=low + + [LaMont Jones] + + * New upstream 9.9.1-P1 + + -- LaMont Jones <lamont@debian.org> Wed, 13 Jun 2012 08:22:15 -0600 + +bind9 (1:9.9.0.dfsg-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * 9.9.0 release + + [Christoph Egger] + + * define _GNU_SOURCE on kfreebsd et al. Closes: #658201 + + [LaMont Jones] + + * chmod typo in postinst. LP: #980798 + * Correctly order debhelper bits in postrm. Closes: #661040 + + -- LaMont Jones <lamont@debian.org> Mon, 23 Apr 2012 09:52:51 -0600 + +bind9 (1:9.9.0.dfsg~rc4-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * New upstream release + + [LaMont Jones] + + * soname changes for new release + + -- LaMont Jones <lamont@debian.org> Fri, 17 Feb 2012 17:51:39 -0700 + +bind9 (1:9.8.4.dfsg-1ubuntu2) raring; urgency=low + + * SECURITY UPDATE: denial of service via DNS64 and crafted query + - bin/named/query.c: init rdataset before cleanup. + - Patch backported from 9.8.4-P1 + - CVE-2012-5688 + + -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Wed, 05 Dec 2012 15:42:08 -0500 + +bind9 (1:9.8.4.dfsg-1ubuntu1) raring; urgency=low + + * Merge from Debian unstable. Remaining changes: + - debian/bind9.apport: Add AppArmor info and logs to apport hook. + + -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Fri, 23 Nov 2012 08:13:50 -0500 + +bind9 (1:9.8.4.dfsg-1) unstable; urgency=low + + [Matthew Grant] + + * Turn off dlopen as it was causing test compile failures. + * Add missing library .postrm files for debhelper + + [LaMont Jones] + + * New upstream version + * soname fixup + * Ack NMUs + + -- LaMont Jones <lamont@debian.org> Mon, 29 Oct 2012 08:37:49 -0600 + +bind9 (1:9.8.1.dfsg.P1-4.4) testing-proposed-updates; urgency=low + + * Non-maintainer upload. + * Fix CVE-2012-4244. Thanks to Moritz Mühlenhoff for providing + the patch. + + -- Philipp Kern <pkern@debian.org> Sat, 03 Nov 2012 20:43:43 +0100 + +bind9 (1:9.8.1.dfsg.P1-4.3) unstable; urgency=medium + + [ Philipp Kern ] + * Non-maintainer upload. + + [ Marc Deslauriers ] + * SECURITY UPDATE: denial of service via specific combinations of RDATA + - bin/named/query.c: fix logic + - Patch backported from 9.8.3-P4 + - CVE-2012-5166 + + -- Philipp Kern <pkern@debian.org> Sun, 28 Oct 2012 20:28:11 +0100 + +bind9 (1:9.8.1.dfsg.P1-4.2) unstable; urgency=high + + * Non-maintainer upload by the Security Team. + * Fix denial of service vulnerability triggered + through an assert because of using bad cache + (CVE-2012-3817; Closes: #683259). + + -- Nico Golde <nion@debian.org> Mon, 30 Jul 2012 20:56:10 +0200 + +bind9 (1:9.8.1.dfsg.P1-4.1) unstable; urgency=high + + * Non-maintainer upload by the Security Team. + * SECURITY UPDATE: ghost domain names attack + - lib/dns/rbtdb.c: Restrict the TTL of NS RRset to no more than that + of the old NS RRset when replacing it. + - Patch backported from 9.8.2. + - CVE-2012-1033 + * SECURITY UPDATE: denial of service via zero length rdata handling + - lib/dns/rdata.c,lib/dns/rdataslab.c: use sentinel pointer for + duplicate rdata. + - Patch backported from 9.8.3-P1. + - CVE-2012-1667 + + -- Luk Claes <luk@debian.org> Wed, 20 Jun 2012 15:26:09 -0400 + +bind9 (1:9.8.1.dfsg.P1-4) unstable; urgency=low + + [Christoph Egger] + + * define _GNU_SOURCE on kfreebsd et al. Closes: #658201 + + [LaMont Jones] + + * chmod typo in postinst. LP: #980798 + * Correctly order debhelper bits in postrm. Closes: #661040 + + -- LaMont Jones <lamont@debian.org> Fri, 13 Apr 2012 12:09:24 -0600 + +bind9 (1:9.8.1.dfsg.P1-3) unstable; urgency=low + + [Zlatan Todoric] + + * fixed Serbian latin translation of debconf template. Closes: #634951 + + [Peter Eisentraut] + + * Add support for "status" action to lwresd init script. Closes: #651540 + + [Bjørn Steensrud] + + * NB Translations. Closes: #654454 + + [LaMont Jones] + + * Default to run_resolvconf=false. LP: #933723 + * Deliver named.conf.options on fresh install. Closes: #657042 LP: #920202 + * Do not deliver /usr/share/bind9/bind9-default.md5sum in the bind9 deb. + Closes: #620007 LP: #681536 + * Deliver and use /etc/apparmor.d/local/usr.sbin.named for local overrides. + LP: #929563 + + -- LaMont Jones <lamont@debian.org> Fri, 17 Feb 2012 14:40:29 -0800 + +bind9 (1:9.8.1.dfsg.P1-2) unstable; urgency=low + + * Deliver named.conf.options on fresh install. Closes: #657042 LP: #920202 + + -- LaMont Jones <lamont@debian.org> Wed, 25 Jan 2012 03:55:21 -0700 + +bind9 (1:9.8.1.dfsg.P1-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * 9.8.1-P1 + - Cache lookup could return RRSIG data associated with nonexistent + records, leading to an assertion failure. + + [LaMont Jones] + + * add a readme entry for DNSSEC-by-default + * Failed to install due to chgrp on non-existant directory. Closes: #647598 + * ack NMU: l10n issues + + -- LaMont Jones <lamont@debian.org> Wed, 18 Jan 2012 10:44:14 -0700 + +bind9 (1:9.8.1.dfsg-1.1) unstable; urgency=low + + * Non-maintainer upload. + * Fix pending l10n issues. Debconf translations: + - Danish (Joe Hansen). Closes: #619302 + - Korean (강민지). Closes: #632006, #632016 + - Serbian (FULL NAME). Closes: #634886 + + -- Christian Perrier <bubulle@debian.org> Sat, 03 Dec 2011 17:22:12 +0100 + +bind9 (1:9.8.1.dfsg-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * New upstream release + + [LaMont Jones] + + * cleanup the messages around killing named + * enable dnssec validation: deliver named.conf.options outside of + conffiledom, and update if able, complain and do not update if not + Closes: #516979 + * typo in min-ncache-ttl processing + * disable dlz until we get a patch to make it build again + + [Jay Ford] + + * Fix "waiting for pid $pid to die" loop to not be infinite. Closes: #570852 + + -- LaMont Jones <lamont@debian.org> Tue, 01 Nov 2011 16:39:19 -0600 + +bind9 (1:9.8.0.dfsg.P1-0) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * 9.8.0-P1 + + [LaMont Jones] + + * soname changes + + -- LaMont Jones <lamont@debian.org> Fri, 13 May 2011 03:46:22 -0600 + +bind9 (1:9.7.4.dfsg-0) unstable; urgency=low + + * New upstream + + -- LaMont Jones <lamont@debian.org> Sun, 21 Aug 2011 04:43:16 -0600 + +bind9 (1:9.7.3.dfsg-1ubuntu4) oneiric; urgency=low + + * debian/apparmor-profile: Allow /var/run and /run. (LP: #810270) + + -- Martin Pitt <martin.pitt@ubuntu.com> Thu, 14 Jul 2011 15:15:45 +0200 + +bind9 (1:9.7.3.dfsg-1ubuntu3) oneiric; urgency=low + + * SECURITY UPDATE: denial of service via specially crafted packet + - lib/dns/include/dns/rdataset.h, lib/dns/{masterdump,message,ncache, + nsec3,rbtdb,rdataset,resolver,validator}.c: Use an rdataset attribute + flag to indicate negative-cache records rather than using rrtype 0. + - Patch backported from 9.7.3-P3. + - CVE-2011-2464 + + -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Tue, 05 Jul 2011 08:33:30 -0400 + +bind9 (1:9.7.3.dfsg-1ubuntu2.1) natty-security; urgency=low + + * SECURITY UPDATE: denial of service via off-by-one + - lib/dns/ncache.c: correctly validate length. + - Patch backported from 9.7.3-P1. + - CVE-2011-1910 + + -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Fri, 27 May 2011 12:50:40 -0400 + +bind9 (1:9.7.3.dfsg-1ubuntu2) natty; urgency=low + + * debian/rules, configure, contrib/dlz/config.dlz.in: use + DEB_HOST_MULTIARCH so we can find multiarch libraries and fix FTBFS. + (LP: #745642) + + -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Wed, 30 Mar 2011 10:19:37 -0400 + +bind9 (1:9.7.3.dfsg-1ubuntu1) natty; urgency=low + + * debian/bind9-default.md5sum: + - updated to reflect the default md5sum in maverick and natty, this + avoids a bogus /etc/default/bind9.dpkg-dist file + (LP: #556332) + + -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 29 Mar 2011 10:13:11 +0200 + +bind9 (1:9.7.3.dfsg-1) unstable; urgency=low + + [Peter Palfrader] + + * Add db-4.6 to bdb_libnames in dlz/config.dlz.in so that it finds the right + db. + + [Internet Systems Consortium, Inc] + + * 9.7.3 - Closes: #612287 + + [Mahyuddin Susanto] + + * Updated Indonesian debconf templates. Closes: #608559 + + [LaMont Jones] + + * soname changes + + -- LaMont Jones <lamont@debian.org> Wed, 23 Feb 2011 09:14:36 -0700 + +bind9 (1:9.7.3.dfsg~rc1-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * New upstream + + [Peter Palfrader] + + * Add db-4.6 to bdb_libnames in dlz/config.dlz.in so that it finds the right + db. + + [Mahyuddin Susanto] + + * Updated Indonesian debconf templates. Closes: #608559 + + [LaMont Jones] + + * soname changes for new upstream + + -- LaMont Jones <lamont@debian.org> Fri, 04 Feb 2011 21:20:05 -0700 + +bind9 (1:9.7.2.dfsg.P3-1) unstable; urgency=high + + [ISC] + * Fix denial of service via ncache entry and a rrsig for the + same type (CVE-2010-3613) + * answers were incorrectly marked as insecure during key algorithm + rollover (CVE-2010-3614) + * Using "allow-query" in the "options" or "view" statements to + restrict access to authoritative zones had no effect. + (CVE-2010-3615) + + [LaMont Jones] + + * Adjust indentation for dpkg change. Closes: #597171 + + -- LaMont Jones <lamont@debian.org> Wed, 01 Dec 2010 16:32:48 -0700 + +bind9 (1:9.7.2.dfsg.P2-3) unstable; urgency=low + + [LaMont Jones] + + * Adjust indentation for dpkg change. Closes: #597171 + * acknowledge and incorporate ubuntu change. + + -- LaMont Jones <lamont@debian.org> Fri, 26 Nov 2010 05:18:43 -0700 + +bind9 (1:9.7.2.dfsg.P2-2ubuntu1) natty; urgency=low + + [ Andres Rodriguez ] + * Add apport hook (LP: #533601): + - debian/bind9.apport: Added. + + [ Martin Pitt ] + * debian/rules: Install Apport hook when building on Ubuntu. + + -- Martin Pitt <martin.pitt@ubuntu.com> Fri, 26 Nov 2010 10:50:17 +0100 + +bind9 (1:9.7.2.dfsg.P2-2) unstable; urgency=low + + [Roy Jamison] + + * lib/isc/unix/resource.c was missing inttypes.h include. LP: #674199 + + -- LaMont Jones <lamont@debian.org> Fri, 12 Nov 2010 10:52:32 -0700 + +bind9 (1:9.7.2.dfsg.P2-1) unstable; urgency=low + + [Joe Dalton] + + * Add Danish translation of debconf templates. Closes: #599431 + + [Internet Software Consortium, Inc] + + * v9.7.2-P2 + + [José Figueiredo] + + * Add Brazilian Portuguese debconf templates translation. Closes: #597616 + + [LaMont Jones] + + * drop this v3 (quilt) source format idea. Closes: #589916 + + -- LaMont Jones <lamont@debian.org> Sun, 10 Oct 2010 19:01:57 -0600 + +bind9 (1:9.7.1.dfsg.P2-2) unstable; urgency=low + + * Correct conflicts for bind9-host + + -- LaMont Jones <lamont@debian.org> Fri, 16 Jul 2010 05:24:38 -0600 + +bind9 (1:9.7.1.dfsg.P2-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * Temporarily and partially disable change 2864 because it would cause + inifinite attempts of RRSIG queries. This is an urgent care fix; we'll + revisit the issue and complete the fix later. [RT #21710] + * Temporarially rollback change 2748. [RT #21594] + * Named failed to accept uncachable negative responses from insecure zones. + [RT# 21555] + + [LaMont Jones] + + * freshen copyright file + + -- LaMont Jones <lamont@debian.org> Thu, 15 Jul 2010 15:07:54 -0600 + +bind9 (1:9.7.1.dfsg.0-1) unstable; urgency=low + + * Repack to drop zkt/doc/{draft,rfc}* Closes: #588055 + + -- LaMont Jones <lamont@debian.org> Mon, 05 Jul 2010 07:21:34 -0600 + +bind9 (1:9.7.1.dfsg-2) unstable; urgency=low + + [Regid Ichira] + + * explicitly add nsupdate to dynamic updates in README.Debian. + Closes: #577398 + + [LaMont Jones] + + * Cleanup bind9-host description. Closes: #579421 + * switch to 3.0 (quilt) source format, but not to quilt. Closes: #578210 + + [Stephen Gran] + + * updated geoip patch for ipv6, based on work by John 'Warthog9' Hawley + <warthog9@eaglescrag.net>. Closes: #584603 + + -- LaMont Jones <lamont@debian.org> Fri, 02 Jul 2010 08:19:29 -0600 + +bind9 (1:9.7.1.dfsg-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * 9.7.1 + + [LaMont Jones] + + * Add freebsd support. Closes: #578447 + * soname changes + * freshen root cache. LP: #596363 + + -- LaMont Jones <lamont@debian.org> Mon, 21 Jun 2010 09:53:30 -0600 + +bind9 (1:9.7.0.dfsg.P1-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * 9.7.0-P1 + - 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] + + -- LaMont Jones <lamont@debian.org> Wed, 17 Mar 2010 08:06:42 -0600 + +bind9 (1:9.7.0.dfsg.1-1) unstable; urgency=low + + [Niko Tyni] + + * fix mips/mipsel startup. Closes: #516616 + + [LaMont Jones] + + * ignore failures due to a lack of /etc/bind/named.conf*. LP: #422968 + * ldap API changed regarding % sign. LP: #227344 + * Drop more rfc and draft files. Closes: #572606 + * update config.guess, config.sub. Closes: #572528 + + -- LaMont Jones <lamont@debian.org> Fri, 12 Mar 2010 14:56:08 -0700 + +bind9 (1:9.7.0.dfsg-2) unstable; urgency=low + + [Aurelien Jarno] + + * kfreebsd has linux threads. Closes: #470500 + + [LaMont Jones] + + * do not error out on initial install. Closes: #572443 + + -- LaMont Jones <lamont@debian.org> Thu, 04 Mar 2010 09:32:13 -0700 + +bind9 (1:9.7.0.dfsg-1) unstable; urgency=low + + * New upstream release + + -- LaMont Jones <lamont@debian.org> Wed, 17 Feb 2010 14:53:36 -0700 + +bind9 (1:9.7.0.dfsg~rc2-1) experimental; urgency=low + + * New upstream release + + -- LaMont Jones <lamont@debian.org> Thu, 28 Jan 2010 05:46:50 -0700 + +bind9 (1:9.7.0.dfsg~b3-2) experimental; urgency=low + + * merge changes from 9.6.1.dfsg.P2-1 + * meta: drop verisoned depends from library packages, for less upgrade pain + * apparmor: allow named to create /var/run/named/session.key + + -- LaMont Jones <lamont@debian.org> Sun, 06 Dec 2009 11:46:17 -0700 + +bind9 (1:9.7.0.dfsg~b3-1) experimental; urgency=low + + [Internet Software Consortium, Inc] + + * 9.7.0b3 + + [LaMont Jones] + + * Merge remote branch 'origin/master' + * soname changes + + -- LaMont Jones <lamont@debian.org> Mon, 30 Nov 2009 21:07:58 -0700 + +bind9 (1:9.6.1.dfsg.P2-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * 9.6.1-P2 + - When validating, track whether pending data was from the + additional section or not and only return it if validates + as secure. [RT #20438] CVE-2009-4022 + + [LaMont Jones] + + * prerm: do not stop named on upgrade. Closes: #542888 + * Drop some RFCs that crept into the diff. + * meta: add ${misc:Depends} + * lintian: update config.guess, config.sub in idnkit-1.0 tree + * dnsutils: remove pre-sarge dpkg-divert calls in postinst + * meta: soname changes + * l10n: missing newline in pofile. + + -- LaMont Jones <lamont@debian.org> Fri, 27 Nov 2009 10:07:10 -0700 + +bind9 (1:9.7.0.dfsg~b2-2) experimental; urgency=low + + * dnsutils: remove pre-sarge dpkg-divert calls in postinst + + -- LaMont Jones <lamont@debian.org> Tue, 17 Nov 2009 22:42:40 -0600 + +bind9 (1:9.7.0.dfsg~b2-1) experimental; urgency=low + + [Internet Software Consortium, Inc] + + * 9.7.0b2 + + [LaMont Jones] + + * /etc/bind/bind.keys need not be executable. + * bind9: drop old stale code from postinst + * prerm: do not stop named on upgrade. Closes: #542888 + * Drop some RFCs that crept into the diff. + * meta: add ${misc:Depends} + * lintian: update config.guess, config.sub in idnkit-1.0 tree + * l10n: missing newline in pofile. + + -- LaMont Jones <lamont@debian.org> Mon, 16 Nov 2009 18:53:24 -0700 + +bind9 (1:9.7.0~a1.dfsg-0) experimental; urgency=low + + [Internet Software Consortium, Inc] + + * 9.7.0a1 + + -- LaMont Jones <lamont@debian.org> Wed, 24 Jun 2009 15:10:08 -0600 + +bind9 (1:9.6.1.dfsg.P1-3) unstable; urgency=low + + * Build-Depend on the fixed libgeoip-dev. Closes: #540973 + + -- LaMont Jones <lamont@debian.org> Mon, 17 Aug 2009 06:53:11 -0600 + +bind9 (1:9.6.1.dfsg.P1-2) unstable; urgency=low + + [Jamie Strandboge] + + * reload individual named profile, not all of apparmor. LP: #412751 + + [Guillaume Delacour] + + * bind9 did not purge cleanly. Closes: #497959 + + [LaMont Jones] + + * postinst: do not append a blank line to /etc/default/bind9. + Closes: #541469 + * init.d stop needs to not error out. LP: #398033 + * meta: fix build-depends. Closes: #539230 + + -- LaMont Jones <lamont@debian.org> Fri, 14 Aug 2009 17:03:31 -0600 + +bind9 (1:9.6.1.dfsg.P1-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * A specially crafted update packet will cause named to exit. + CVE-2009-0696, CERT VU#725188. Closes: #538975 + + [InterNIC] + + * Update db.root hints file. + + [LaMont Jones] + + * Move default zone definitions from named.conf to named.conf.default-zones. + Closes: #492308 + * use start-stop-daemon if rndc stop fails. Closes: #536487 + * lwresd: pidfile name was wrong in init script. Closes: #527137 + + -- LaMont Jones <lamont@debian.org> Tue, 28 Jul 2009 22:03:14 -0600 + +bind9 (1:9.6.1.dfsg-2) unstable; urgency=low + + * ia64: fix atomic.h + + -- LaMont Jones <lamont@debian.org> Tue, 23 Jun 2009 01:56:35 -0600 + +bind9 (1:9.6.1.dfsg-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * 9.6.1 + + -- LaMont Jones <lamont@debian.org> Mon, 22 Jun 2009 14:33:20 -0600 + +bind9 (1:9.6.0.dfsg.P1-3) unstable; urgency=low + + [Martin Zobel-Helas] + + * GEO-IP Patch from + git://git.kernel.org/pub/scm/network/bind/bind-geodns.git. Closes: #395191 + + [LaMont Jones] + + * Remove /var/lib/bind on purge. Closes: #527613 + * Build-Depend: libdb-dev (>4.6). Closes: #527877, #528772 + * init.d: detect rndc errors better. LP: #380962 + * init.d: clean up exit status. Closes: #523454 + * Enable pkcs11 support, and then Revert - causes assertion failures + c.f.: #516552 + + -- LaMont Jones <lamont@debian.org> Mon, 22 Jun 2009 13:58:32 -0600 + +bind9 (1:9.6.0.dfsg.P1-2) unstable; urgency=low + + * random_1 broke memory usage assertions. + + -- LaMont Jones <lamont@debian.org> Thu, 23 Apr 2009 05:15:45 -0600 + +bind9 (1:9.6.0.dfsg.P1-1) experimental; urgency=low + + [Michael Milligan] + + * Add min-cache-ttl and min-ncache-ttl keywords + + [LaMont Jones] + + * Fix merge errors from 9.6.0.dfsg.P1-0 + + -- LaMont Jones <lamont@debian.org> Fri, 20 Mar 2009 15:50:50 -0600 + +bind9 (1:9.6.0.dfsg.P1-0) experimental; urgency=low + + [Internet Software Consortium, Inc] + + * 9.6.0-P1 + + [LaMont Jones] + + * meta: fix override disparity + * meta: soname package fixups for 9.6.0 + * meta: update Standards-Version: 3.7.3.0 + * upstream now uses a bind subdir. Closes: #212659 + + [Sven Joachim] + + * meta: pass host and build into configure for hybrid build machines. + Closes: #515110 + + -- LaMont Jones <lamont@debian.org> Fri, 20 Mar 2009 11:54:55 -0600 + +bind9 (1:9.5.1.dfsg.P1-3) unstable; urgency=low + + * package -2 for unstable + + -- LaMont Jones <lamont@debian.org> Wed, 18 Mar 2009 09:40:18 -0600 + +bind9 (1:9.5.1.dfsg.P1-2) stable; urgency=low + + [Juhana Helovuo] + + * fix atomic operations on alpha. Closes: #512285 + + [Dann Frazier] + + * fix atomic operations on ia64. Closes: #520179 + + [LaMont Jones] + + * build-conflict: libdb4.2-dev. Closes: #515074, #507013 + + [localization folks] + + * l10n: Basque debconf template. Closes: #516549 (Piarres Beobide) + + -- LaMont Jones <lamont@debian.org> Wed, 18 Mar 2009 05:30:22 -0600 + +bind9 (1:9.5.1.dfsg.P1-1) unstable; urgency=low + + * New upstream patch release + - supportable version of fix from 9.5.0.dfsg.P2-5.1 + - CVE-2009-0025: Closes: #511936 + - 2475: Overly agressive cache entry removal. Closes: #511768 + - other bug fixes worthy of patch-release inclusion + + -- LaMont Jones <lamont@debian.org> Mon, 26 Jan 2009 10:33:42 -0700 + +bind9 (1:9.5.0.dfsg.P2-5.1) unstable; urgency=low + + * Non-maintainer upload. + * Apply upstream ACL fixes from 9.5.1 to fix RC bug. Patch was provided + by Evan Hunt (upstream bind9 developer) after Emmanuel Bouthenot + contacted him. Closes: #496954, #501800. + * Remove obsolete dh_installmanpages invocation which was adding + unwanted manual pages to bind9. Closes: #486196. + + -- Ben Hutchings <ben@decadent.org.uk> Fri, 02 Jan 2009 16:51:42 +0000 + +bind9 (1:9.5.0.dfsg.P2-5) unstable; urgency=low + + [ISC] + + * 2463: IPv6 Advanced Socket API broken on linux. LP: #249824 + + [Jamie Strandboge] + + * apparmor: add capability sys_resource + * apparmor: add krb keytab access. LP: #277370 + + [LaMont Jones] + + * apparmor: allow proc/*/net/if_inet6 read access too. LP: #289060 + * apparmor: add /var/log/named/* entries. LP: #294935 + + [Ben Hutchings] + + * meta: Add dependency of bind9 on net-tools (ifconfig used in init script) + * meta: Fix bind9utils Depends. + * meta: fix typo in package description + + [localization folks] + + * l10n: add polish debconf translations. Closes: #506856 (L) + + -- LaMont Jones <lamont@debian.org> Sun, 07 Dec 2008 21:03:29 -0700 + +bind9 (1:9.5.0.dfsg.P2-4) unstable; urgency=low + + * meta: fix typo in Depends: lsb-base. Closes: #501365 + + -- LaMont Jones <lamont@debian.org> Tue, 07 Oct 2008 17:20:11 -0600 + +bind9 (1:9.5.0.dfsg.P2-3) unstable; urgency=low + + [LaMont Jones] + + * enable largefile support. Closes: #497040 + + [localization folks] + + * l10n: Dutch translation. Closes: #499977 (Paul Gevers) + * l10n: simplified chinese debconf template. Closes: #501103 (LI Daobing) + * l10n: Update spanish template. Closes: #493775 (Ignacio Mondino) + + -- LaMont Jones <lamont@debian.org> Sun, 05 Oct 2008 20:20:00 -0600 + +bind9 (1:9.5.0.dfsg.P2-2) unstable; urgency=low + + [Kees Cook] + + * debian/{control,rules}: enable PIE hardening (from -1ubuntu1) + + [Nicolas Valcárcel] + + * Add ufw integration (from -1ubuntu2) + + [Dustin Kirkland] + + * use pid file in init.d/bind9 status. LP: #247084 + + [LaMont Jones] + + * dig: add -DDIG_SIGCHASE to compile options. LP: #257682 + * apparmor profile: add /var/log/named + + [Nikita Ofitserov] + + * ipv6 support requires _GNU_SOURCE definition. LP: #249824 + + -- LaMont Jones <lamont@debian.org> Thu, 28 Aug 2008 23:08:36 -0600 + +bind9 (1:9.5.0.dfsg.P2-1) unstable; urgency=low + + [LaMont Jones] + + * default to using resolvconf if it is installed + * fix sonames and dependencies. Closes: #149259, #492418 + * Do not build-depend libcap2-dev on non-linux. Closes: #493392 + * drop unused query-loc manpage. Closes: #492564 + * lwresd: Deliver /etc/bind directory. Closes: #490027 + * fix query-source comment in default install + + [Internet Software Consortium, Inc] + + * 9.5.0-P2. Closes: #492949 + + [localization folks] + + * l10n: Spanish debconf translation. Closes: #492425 (Ignacio Mondino) + * l10n: Swedish debconf templates. Closes: #491369 (Martin Ågren) + * l10n: Japanese debconf translations. Closes: #492048 (Hideki Yamane + (Debian-JP)) + * l10n: Finnish translation. Closes: #490630 (Esko Arajärvi) + * l10n: Italian debconf translations. Closes: #492587 (Alessandro Vietta) + + -- LaMont Jones <lamont@debian.org> Sat, 02 Aug 2008 14:20:20 -0600 + +bind9 (1:9.5.0.dfsg.P1-2) unstable; urgency=low + + * Revert "meta: merge the mess of single-lib packages back into one large + one." - That way lies madness and pain. + * init.d/bind9: implement status function. LP: #203169 + + -- LaMont Jones <lamont@debian.org> Tue, 08 Jul 2008 21:56:58 -0600 + +bind9 (1:9.5.0.dfsg.P1-1) unstable; urgency=low + + * Repackage 9.5.0.dfsg-5 with the -P1 tarball. + + -- LaMont Jones <lamont@debian.org> Tue, 08 Jul 2008 15:06:07 -0600 + +bind9 (1:9.5.0.dfsg-5) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * Randomize UDP query source ports to improve forgery resilience. + (CVE-2008-1447) + + [LaMont Jones] + + * add build-depends: texlive-latex-base, xsltproc, remove Bv9ARM.pdf in clean + * fix sonames + * drop unneeded build-deps, since we do not actually deliver B9vARM.pdf + * meta: cleanup libbind9-41 Provides/Conflicts + * build: fix sonames for new libraries + * postinst: really restart bind/lwresd in postinst + + -- LaMont Jones <lamont@debian.org> Sun, 06 Jul 2008 21:34:18 -0600 + +bind9 (1:9.5.0.dfsg-4) unstable; urgency=low + + [LaMont Jones] + + * control: fix dnsutils description to avoid list reformatting. + Closes: #480317 + * lwresd: restart in postinst. Closes: #486481 + * meta: merge the mess of single-lib packages back into one large one. + * apparmor: allow bind to create files in /var/{lib,cache}/bind + * build: drop .la files. Closes: #486969 + * build: drop the extra lib path from the library-package merge + * meta: liblwres40 does not conflict with the libbind9-40-provided libbind0 + + [localization folks] + + * l10n: German debconf translation. Closes: #486547 (Helge Kreutzmann) + * l10n: Indonesian debconf translations. Closes: #486503 (Arief S Fitrianto) + * l10n: Slovak po-debconf translation Closes: #488905 (helix84) + * l10n: Turkish debconf template. Closes: #486479 (Mert Dirik) + + -- LaMont Jones <lamont@debian.org> Mon, 30 Jun 2008 11:22:05 -0600 + +bind9 (1:9.4.2-12) unstable; urgency=low + + * apparmor: allow bind to create files in /var/{lib,cache}/bind + + -- LaMont Jones <lamont@debian.org> Mon, 30 Jun 2008 11:17:53 -0600 + +bind9 (1:9.4.2-11) unstable; urgency=low + + * apparmor: add dnscvsutil package files + * lwresd Depends: adduser + * control: fix dnsutils description to avoid list reformatting. + Closes: #480317 + + -- LaMont Jones <lamont@debian.org> Tue, 17 Jun 2008 21:30:12 -0600 + +bind9 (1:9.5.0.dfsg-3) unstable; urgency=low + + [LaMont Jones] + + * bind9utils Depends: libbind9-40. Closes: #486194 + * bind9 should not deliver manpages for nonexistant binaries. + Closes: #486196 + + [localization folks] + + * l10n: Vietnamese debconf templates translation update. Closes: #486185 + (Clytie Siddall) + * l10n: Russian debconf templates translation. Closes: #486191 (Yuri Kozlov) + * l10n: Galician debconf template. Closes: #486215 (Jacobo Tarrio) + * l10n: French debconf templates. Closes: #486325 (CALARESU Luc) + * l10n: Czech debconf translation. Closes: #486337 (Miroslav Kure) + * l10n: Updated Portuguese translation. Closes: #486267 (Traduz - + Portuguese Translation Team) + + -- LaMont Jones <lamont@debian.org> Sun, 15 Jun 2008 18:25:02 -0600 + +bind9 (1:9.5.0.dfsg-2) unstable; urgency=low + + [Tim Spriggs] + + * init.d: Nexenta has different ifconfig arguments + + [LaMont Jones] + + * templates rework from debian-l10n-english + * reload named when an interface goes up or down. LP: #226495 + * build: need to create the directories for interface restart triggering + * Build-Depends: libcap2-dev. Closes: #485747 + * Leave named running during update. Closes: #453765 + * Fix path to uname, cleaning up the nexenta checks. + * l10n: avoid double-question in templates. + + [localization folks] + + * l10n: Vietnamese debconf translations. Closes: #483911 (Clytie Siddall) + * l10n: Portuguese debconf translations. Closes: #483872 (Traduz - + Portuguese Translation Team) + + -- LaMont Jones <lamont@debian.org> Fri, 13 Jun 2008 16:54:42 -0600 + +bind9 (1:9.5.0.dfsg-1) unstable; urgency=low + + [LaMont Jones] + + * manpages: fix references that should say /etc/bind + * meta: build-depend libxml2-dev for statistics support + + -- LaMont Jones <lamont@debian.org> Sat, 31 May 2008 12:17:21 -0600 + +bind9 (1:9.5.0.dfsg-0) experimental; urgency=low + + [Internet Software Consortium, Inc] + + * 9.5.0 release + + [LaMont Jones] + + * Only use capabilities if they are present: reprise. Closes: #360339, #212226 + * control: fix dnsutils description to avoid list reformatting. Closes: #480317 + * build: use the correct directories in dh_shlibdeps invocation + * build: turn on dlz. No pgsql or mysql support yet. LP: #227344 + + -- LaMont Jones <lamont@debian.org> Thu, 29 May 2008 22:05:19 -0600 + +bind9 (1:9.5.0~rc1-2~0ubuntu2) intrepid; urgency=low + + * build: use the correct directories in dh_shlibdeps invocation + * build: turn on dlz. LP: #227344 + + -- LaMont Jones <lamont@ubuntu.com> Tue, 27 May 2008 21:43:06 -0600 + +bind9 (1:9.5.0~rc1-2~0ubuntu1) intrepid; urgency=low + + * Upload what will become (maybe an ancestor of) -2 to intrepid. + - Only use capabilities if they are present: reprise. Closes: #360339, #212226 + - control: fix dnsutils description to avoid list reformatting. Closes: #480317 + + -- LaMont Jones <lamont@ubuntu.com> Mon, 26 May 2008 11:46:27 -0600 + +bind9 (1:9.5.0~rc1-1) experimental; urgency=low + + [Patrick Winnertz] + + * postinst: make add debconf support. Closes: #473460 + + [Jamie Strandboge] + + * debian/bind9.preinst: Apparmor force-complain on upgrade without + existing profile. LP: #204658 + + [LaMont Jones] + + * bind9utils: fix typos in .install + * host: manpage inaccurately describes default query. LP: #203087 + * apparmor: add dnscvsutil package files + * Revert "Only use capabilities if they are present." for merge of 9.5.0rc1. + * soname: libdns41 -> 42 + * fix typos in debconf patch, #473460 + * cleanup more files in clean target + * lwresd Depends: adduser + + -- LaMont Jones <lamont@debian.org> Thu, 15 May 2008 17:59:54 -0600 + +bind9 (1:9.5.0~b2-2) experimental; urgency=low + + * meta: add bind9utils binary package, with various useful utilities. Closes: #151957, #130445, #160483 + + -- LaMont Jones <lamont@debian.org> Thu, 03 Apr 2008 07:01:42 -0600 + +bind9 (1:9.4.2-10) unstable; urgency=low + + [Jamie Strandboge] + + * debian/bind9.preinst: AA force-complain on upgrade without existing + profile. LP: #204658 + + [LaMont Jones] + + * host: manpage inaccurately describes default query. LP: #203087 + + -- LaMont Jones <lamont@debian.org> Tue, 08 Apr 2008 22:45:57 -0600 + +bind9 (1:9.4.2-9) unstable; urgency=low + + * apparmor: allow subdirs in {/etc,/var/cache,/var/lib}/bind + * apparmor: make profile match README.Debian + + -- LaMont Jones <lamont@debian.org> Tue, 01 Apr 2008 21:13:05 -0600 + +bind9 (1:9.4.2-8) unstable; urgency=low + + [ISC] + + * CVE-2008-0122: off by one error in (unused) inet_network function. + Closes: #462783 LP: #203476 + + [Michael Milligan] + + * Fix min-cache-ttl and min-ncache-ttl keywords + + [Jamie Strandboge] + + * apparmor: force complain-mode for apparmor on certain upgrades. LP: #203528 + * debian/bind9.postrm: purge /etc/apparmor.d/force-complain/usr.sbin.named + + -- LaMont Jones <lamont@debian.org> Tue, 18 Mar 2008 18:35:15 -0600 + +bind9 (1:9.4.2-7) unstable; urgency=low + + [Jamie Strandboge] + + * Allow rw access to /var/lib/bind/* in apparmor-profile. LP: #201954 + + [LaMont Jones] + + * Drop root-delegation comments from named.conf. Closes: #217829, #297219 + + -- LaMont Jones <lamont@debian.org> Sat, 15 Mar 2008 09:48:10 -0600 + +bind9 (1:9.4.2-6) unstable; urgency=low + + * Correct apparmor profile filename. LP: #200739 + + -- LaMont Jones <lamont@debian.org> Mon, 10 Mar 2008 14:28:01 -0600 + +bind9 (1:9.4.2-5) unstable; urgency=low + + * add "order random_1" support (return one random RR) + * Fix doc pathnames in README.Debian. Closes: #266891 + * Add AAAA ::1 entry to db.local. Closes: #230088 + + -- LaMont Jones <lamont@debian.org> Mon, 10 Mar 2008 13:51:28 -0600 + +bind9 (1:9.5.0~b2-1) experimental; urgency=low + + [Thiemo Seufer] + + * mips:atomic.h: improve implementation of atomic ops, fix mips{el,64} + + [LaMont Jones] + + * manpages: call it /etc/bind/named.conf throughout, and typos. Closes: #419750 + * named.conf.5: correct filename. Closes: #428015 + * manpages: fix typo errors. Closes: #395834 + * Makefile.in: be explicit about library paths + * build: Turn on GSS-TSIG support. LP: #158197 + * build: soname changes + * db.root: include AAAA RRs. Closes: #464111 + * soname: lib{dns,isc}40 -> 41 + * meta: use binary:Version instead of Source-Version + + [Andreas John] + + * Only use capabilities if they are present. Closes: #360339, #212226 + + -- LaMont Jones <lamont@debian.org> Sat, 23 Feb 2008 08:06:17 -0700 + +bind9 (1:9.4.2-4) unstable; urgency=low + + * incorporate ubuntu apparmor change from Jamie Strandboge, + with changes: + - Add apparmor profile, reload apparmor profile on config + - Add a note about apparmor to README.Debian + - conflicts/replaces old apparmor versions + * db.root: include AAAA RRs. Closes: #464111 + * Don't die when /var/lib/bind already exists. LP: #191685 + * build: turn on optimization. Closes: #435194 + + -- LaMont Jones <lamont@debian.org> Fri, 22 Feb 2008 22:05:25 -0700 + +bind9 (1:9.4.2-3ubuntu1) hardy; urgency=low + + * add AppArmor profile + + debian/apparmor-profile + + debian/bind9.postinst: Reload AA profile on configuration + * updated debian/README.Debian for note on AppArmor + * debian/control: Replaces apparmor-profiles << 2.1+1075-0ubuntu4 as we + should now take control + * debian/control: Conflicts with apparmor-profiles << 2.1+1075-0ubuntu4 + to make sure that if earlier version of apparmor-profiles gets installed + it won't overwrite our profile + * Modify Maintainer value to match the DebianMaintainerField + specification. + + -- Jamie Strandboge <jamie@ubuntu.com> Wed, 13 Feb 2008 17:30:45 +0000 + +bind9 (1:9.4.2-3) unstable; urgency=low + + * don't run rndc-confgen when it's not there. Closes: #459551 + * control: drop use of ${Source-Version} + + -- LaMont Jones <lamont@debian.org> Mon, 07 Jan 2008 10:16:06 -0700 + +bind9 (1:9.4.2-2) unstable; urgency=low + + * init.d: add --oknodo to start-stop-daemon. Closes: #411881 + * init: LSB dependency info. Closes: #459421, #448006 + * meta: bind9 Suggests: resolvconf. Closes: #252285 + * bind9: deliver /var/lib/bind directory, and document. + Closes: #248771, #200253, #202981, #209022 + * lwresd: create bind user/group and rndc key if needed, at install. + Closes: #190742 + * dnsutils: update long description. Closes: #236901 + + -- LaMont Jones <lamont@debian.org> Sun, 06 Jan 2008 12:25:31 -0700 + +bind9 (1:9.4.2-1) unstable; urgency=low + + [Mike O'Connor] + + * bind9.init: LSB compliance. Closes: #448006 + + [Internet Software Consortium, Inc] + + * New release: 9.4.2 + + [LaMont Jones] + + * soname shifts for new release + + -- LaMont Jones <lamont@debian.org> Sat, 17 Nov 2007 10:50:07 -0700 + +bind9 (1:9.4.2~rc2-1) experimental; urgency=low + + * New upstream release + + -- LaMont Jones <lamont@debian.org> Fri, 12 Oct 2007 18:33:57 -0600 + +bind9 (1:9.4.1-P1-4) unstable; urgency=low + + [Thomas Antepoth] + + * unix/socket.c: don't send to a socket with pending_send. Closes: #430065 + + [LaMont Jones] + + * document git repositories + * db.root: l.root-servers.net changed IP address. Closes: #449148 LP: #160176 + * init.d: if there are no networks configured, error out quickly + + -- LaMont Jones <lamont@debian.org> Thu, 08 Nov 2007 21:31:55 -0700 + +bind9 (1:9.4.1-P1-3) unstable; urgency=low + + * Only deliver upstream changes with bind9-doc + + -- LaMont Jones <lamont@debian.org> Thu, 04 Oct 2007 08:30:55 -0600 + +bind9 (1:9.4.1-P1-2) unstable; urgency=low + + * manpages: fix typo errors. Closes: #395834 + * manpages: call it /etc/bind/named.conf throughout, and typos. Closes: #419750 + * named.conf.5: correct filename. Closes: #428015 + * bind9.NEWS: update version for ACL change doc. Closes: #435225 + * build: don't have dnsutils deliver man pages that it shouldn't. LP: #82178 + * nslookup.1: some of the manpage was not visible. LP: #131415 + * document git repositories + * unix/socket.c: don't send to a socket with pending_send. Closes: #430065 + + -- LaMont Jones <lamont@debian.org> Wed, 03 Oct 2007 01:10:59 -0600 + +bind9 (1:9.4.1-P1-1) unstable; urgency=high + + * New upstream version, addresses CVE-2007-2926 and CVE-2007-2925 + + -- Bdale Garbee <bdale@gag.com> Thu, 26 Jul 2007 16:41:50 -0600 + +bind9 (1:9.4.1-1) unstable; urgency=low + + * New upstream version + + -- LaMont Jones <lamont@debian.org> Mon, 30 Apr 2007 16:59:05 -0600 + +bind9 (1:9.4.0-2) unstable; urgency=low + + * upload to unstable + + -- LaMont Jones <lamont@debian.org> Tue, 10 Apr 2007 11:12:16 -0600 + +bind9 (1:9.4.0-1) experimental; urgency=low + + * New upstream version + * more mipsel patch. Closes: #406409 + + -- LaMont Jones <lamont@debian.org> Sun, 25 Feb 2007 11:44:11 -0700 + +bind9 (1:9.4.0~rc2-1) experimental; urgency=low + + * New upstream version. Addresses CVE-2007-0493 CVE-2007-0494 + + -- LaMont Jones <lamont@debian.org> Thu, 25 Jan 2007 14:26:12 -0700 + +bind9 (1:9.4.0~rc1.0-3) experimental; urgency=low + + * add NEWS file talking about the change in defaults: + As of bind 9.4, allow-query-cache and allow-recursion default to the + builtin acls 'localnets' and 'localhost'. If you are setting up a + name server for a network, you will almost certainly need to change + this. + + The change in default has been done to make caching servers less + attractive as reflective amplifying targets for spoofed traffic. + This still leaves authoritative servers exposed. + + -- LaMont Jones <lamont@debian.org> Wed, 24 Jan 2007 09:35:06 -0700 + +bind9 (1:9.4.0~rc1.0-2) experimental; urgency=low + + * Fix mips64. Closes: #406409 + + -- LaMont Jones <lamont@debian.org> Sun, 21 Jan 2007 15:32:27 -0700 + +bind9 (1:9.4.0~rc1.0-1) experimental; urgency=low + + * Broken orig.tar.gz. + + -- LaMont Jones <lamont@debian.org> Thu, 28 Dec 2006 23:04:05 -0700 + +bind9 (1:9.4.0~rc1-1) experimental; urgency=low + + * New upstream + + -- LaMont Jones <lamont@debian.org> Thu, 28 Dec 2006 19:00:37 -0700 + +bind9 (1:9.3.4-2etch2) stable-proposed-updates; urgency=low + + [Thomas Antepoth] + + * unix/socket.c: don't send to a socket with pending_send. Closes: #430065 + + [LaMont Jones] + + * document git repositories + * db.root: l.root-servers.net changed IP address. Closes: #449148 + + -- LaMont Jones <lamont@debian.org> Mon, 05 Nov 2007 19:48:23 -0700 + +bind9 (1:9.3.4-2etch1) stable-security; urgency=high + + * Fix DNS cache poisoning through predictable query IDs. (CVE-2007-2926) + + -- Moritz Muehlenhoff <jmm@debian.org> Tue, 24 Jul 2007 22:09:35 +0000 + +bind9 (1:9.3.4-2) unstable; urgency=high + + * Actually really do the merge of 9.3.4. Sigh. Closes: #408925 + + -- LaMont Jones <lamont@debian.org> Mon, 29 Jan 2007 06:09:03 -0700 + +bind9 (1:9.3.4-1) unstable; urgency=high + + * New upstream version. Addresses CVE-2007-0493 CVE-2007-0494 + + -- LaMont Jones <lamont@debian.org> Thu, 25 Jan 2007 14:31:09 -0700 + +bind9 (1:9.3.3-1) unstable; urgency=low + + * New upstream version + + -- LaMont Jones <lamont@debian.org> Tue, 12 Dec 2006 23:31:51 -0700 + +bind9 (1:9.3.2-P1.0-1) unstable; urgency=low + + * Fix README.Debian to point to the URL. Closes: #387437 + * Strip rfc's from orig.tar.gz. Closes: #393359 + + -- LaMont Jones <lamont@mmjgroup.com> Mon, 16 Oct 2006 06:38:22 -0600 + +bind9 (1:9.3.2-P1-2) unstable; urgency=low + + * Fix init script output. Closes: #354192 + Thanks to Joey Hess for the patch. + * Default install should listen on ipv6 interfaces. Closes: #382438 + + -- LaMont Jones <lamont@debian.org> Sat, 9 Sep 2006 19:01:53 -0600 + +bind9 (1:9.3.2-P1-1) unstable; urgency=high + + * New upstream, fixes CVE-2006-4095 and CVE-2006-4096. + Closes: #386237, #386245 + * Drop gcc-3.4 [powerpc] dependency. Closes: #342957, #372203 + * Add -fno-strict-aliasing for type-punned pointer aliasing issues + Closes: #386224 + * Use getent in postinst instead of chown/chgrp. Closes: #386091, #239665 + * Drop redundant update-rc.d calls. Closes: #356914 + + -- LaMont Jones <lamont@debian.org> Wed, 6 Sep 2006 08:07:13 -0600 + +bind9 (1:9.3.2-2) unstable; urgency=low + + * correct force-reload. Closes: #333841 + * Fix init.d's usage message. Closes: #331090 + * resolvconf tweaks. Closes: #252232, #275412 + + -- LaMont Jones <lamont@debian.org> Mon, 16 Jan 2006 15:17:04 -0700 + +bind9 (1:9.3.2-1) unstable; urgency=low + + * New upstream + * use lsb-base for start/stop messages in init.d. + * switch to debhelper 4 + + -- LaMont Jones <lamont@debian.org> Thu, 5 Jan 2006 12:29:28 -0700 + +bind9 (1:9.3.1-2) unstable; urgency=low + + * Getting good reports from experimental, uploading to sid. + Release team, please consider this package for sarge. Thanks. + * correct pidfile name in init.d/lwresd. Closes: #298100 + + -- LaMont Jones <lamont@debian.org> Sat, 19 Mar 2005 17:46:31 -0700 + +bind9 (1:9.3.1-1) experimental; urgency=low + + * Build with gcc-3.4 on powerpc, to work around #292958. + + -- LaMont Jones <lamont@debian.org> Sat, 19 Mar 2005 11:40:06 -0700 + +bind9 (1:9.3.1-0) experimental; urgency=low + + * New upstream version. + + -- LaMont Jones <lamont@debian.org> Sun, 13 Mar 2005 21:44:57 -0700 + +bind9 (1:9.3.0+9.3.1beta2-1) experimental; urgency=low + + * new upstream version + + -- LaMont Jones <lamont@debian.org> Tue, 25 Jan 2005 14:21:51 -0700 + +bind9 (1:9.3.0-1) experimental; urgency=low + + * New upstream version + + -- LaMont Jones <lamont@debian.org> Sat, 25 Sep 2004 21:35:46 -0600 + +bind9 (1:9.2.4-1) unstable; urgency=high + + * New upstream version. Closes: #269157 and others. + * Version debhelper build-dep. Closes: #262720 + + -- LaMont Jones <lamont@mmjgroup.com> Thu, 23 Sep 2004 09:11:37 -0600 + +bind9 (1:9.2.3+9.2.4-rc7-1) unstable; urgency=low + + * New upstream + + -- LaMont Jones <lamont@mmjgroup.com> Wed, 1 Sep 2004 00:04:55 -0600 + +bind9 (1:9.2.3+9.2.4-rc6-1) unstable; urgency=low + + * New upstream. + * Comment out delegation-only directives in named.conf + + -- LaMont Jones <lamont@debian.org> Mon, 2 Aug 2004 10:00:38 -0600 + +bind9 (1:9.2.3+9.2.4-rc5-1) unstable; urgency=low + + * New upstream release candidate + + -- LaMont Jones <lamont@debian.org> Thu, 17 Jun 2004 19:50:37 -0600 + +bind9 (1:9.2.3+9.2.4-rc2-1) unstable; urgency=low + + * New upstream release candidate + * Remove shared library symlinks in clean. Closes: #243109 + * Deal with capset being a module. Closes: #245043, #240874, #241605 + * deliver /var/run/bind/run in lwresd as well. Closes: #186569 + + -- LaMont Jones <lamont@debian.org> Thu, 22 Apr 2004 12:20:05 -0600 + +bind9 (1:9.2.3-3) unstable; urgency=low + + * new IP for b.root-servers.net. Closes: #234278 + * Fix RC linkages to match bind8. Closes: #218007 + + -- LaMont Jones <lamont@debian.org> Mon, 1 Mar 2004 15:00:44 -0700 + +bind9 (1:9.2.3-2) unstable; urgency=low + + * Rebuild autoconf files for mips. Closes: #221419 + + -- LaMont Jones <lamont@debian.org> Tue, 18 Nov 2003 06:33:34 -0700 + +bind9 (1:9.2.3-1) unstable; urgency=low + + * New upstream. + * cleanup zones.rfc1918/db.empty stuff. + * Fix Makefiles to work even if the build environment is unclean. + Closes: #211503 + * Add comments about root-delegation-only to named.conf. Closes: #212243 + * Add resolvconf support. Closes: #199255 + * more SO_BSDCOMPAT hacks for linux. Closes: #220735, #214460 + + -- LaMont Jones <lamont@debian.org> Mon, 17 Nov 2003 21:30:33 -0700 + +bind9 (1:9.2.2+9.2.3rc4-1) unstable; urgency=low + + * Yet another new upstream release. + + -- LaMont Jones <lamont@debian.org> Mon, 22 Sep 2003 09:39:50 -0600 + +bind9 (1:9.2.2+9.2.3rc3-1) unstable; urgency=low + + * New upstream. Closes: #211752. #211503. #211496, #211520 + + -- LaMont Jones <lamont@debian.org> Sat, 20 Sep 2003 12:22:59 -0600 + +bind9 (1:9.2.2+9.2.3rc2-4) unstable; urgency=low + + * Really fix versioned depends. Closes: #211590 + + -- LaMont Jones <lamont@debian.org> Thu, 18 Sep 2003 17:29:47 -0600 + +bind9 (1:9.2.2+9.2.3rc2-3) unstable; urgency=low + + * Version depends for all the libraries. sigh. Closes: #211412,#210293 + + -- LaMont Jones <lamont@debian.org> Wed, 17 Sep 2003 10:56:36 -0600 + +bind9 (1:9.2.2+9.2.3rc2-2) unstable; urgency=low + + * Need a versioned depend. sigh. + + -- LaMont Jones <lamont@debian.org> Wed, 17 Sep 2003 10:25:35 -0600 + +bind9 (1:9.2.2+9.2.3rc2-1) unstable; urgency=low + + * New upstream release. Closes: #211373 + * Remove RFC's from package, per policy. + * Make com and net zones delegation-only by default. + + -- LaMont Jones <lamont@debian.org> Wed, 17 Sep 2003 07:15:37 -0600 + +bind9 (1:9.2.2+9.2.3rc1-3) unstable; urgency=low + + * A bit more cleanup of descriptions. + * fix package sections + * Fix b0rkage with dependencies. + + -- LaMont Jones <lamont@debian.org> Sun, 14 Sep 2003 09:05:10 -0600 + +bind9 (1:9.2.2+9.2.3rc1-2) unstable; urgency=low + + * Explicitly link libraries. Closes: #210653 + * Fix descriptions. Closes: #209563, #209853, #210063 + + -- LaMont Jones <lamont@debian.org> Sat, 13 Sep 2003 19:29:05 -0600 + +bind9 (1:9.2.2+9.2.3rc1-1) unstable; urgency=low + + * New upstream release candidate. + * Quit using SO_BSDCOMPAT (why is it still in the header files??) so + that the kernel will shut up about it's advertised, obsolete option. + Closes: #201293, #204282, #205590 + + -- LaMont Jones <lamont@debian.org> Thu, 28 Aug 2003 14:44:28 -0600 + +bind9 (1:9.2.2-2) unstable; urgency=low + + * Fix libtool.m4. Closes: #183791 + * move lib packages into Section: libs. Closes: #184788 + * make sure it's libssl0.9.7. Closes: #182363 + * Add /etc/default/lwresd. Closes: #169727 + * Add fakeroot dir to dh_shlibdeps. Closes: #169622 + * Fix rndc manpage. Closes: #179353 + * Deliver /usr/bin/isc-config.sh (in libbind-dev). Closes: #178186 + + -- LaMont Jones <lamont@debian.org> Sat, 15 Mar 2003 16:34:15 -0700 + +bind9 (1:9.2.2-1) unstable; urgency=low + + * New upstream version + * Document /etc/default/bind9 in init.d script. Closes: #170267 + + -- LaMont Jones <lamont@debian.org> Tue, 4 Mar 2003 22:43:58 -0700 + +bind9 (1:9.2.1-7) unstable; urgency=low + + * One more overrides disparity. + * Fix bashism in postinst. Closes: #169531 + + -- LaMont Jones <lamont@debian.org> Sun, 17 Nov 2002 19:22:58 -0700 + +bind9 (1:9.2.1-6) unstable; urgency=low + + * The "I give up for now" release. + * Only convert to running as bind if named.conf hasn't been modified. + * Closes: #163552, #164352 + * Fix overrides + * Cleanup README.Debian wrt non-root-by-default. + * Make sure that /var/run/bind/run exists in init.d script. Closes: #168912 + * New IP for j.root-servers.net. Closes: #167818 + * Check for 2.2.18 kernel in preinst. Closes: #164349 + * Move local options to /etc/default/bind9. Closes: #169132, #163073 + * Cleanup old bugs (fixed in -5, really). Closes: #165864 + * Add /etc/bind/named.conf.local, included from named.conf. Closes: #129576 + * Do options definitions in /etc/bind/named.conf.options, makes life + easier in the face of named.conf changes from upstream. + * Add missing Depends: adduser + + -- LaMont Jones <lamont@debian.org> Sat, 16 Nov 2002 17:05:45 -0700 + +bind9 (1:9.2.1-5) unstable; urgency=low + + * Run named a non-privileged user by default. Closes: #149059 + + -- LaMont Jones <lamont@debian.org> Thu, 12 Sep 2002 16:57:37 -0600 + +bind9 (1:9.2.1-4) unstable; urgency=low + + * swap maintainer/uploader status so LaMont is primary and Bdale is backup + * Deal with bind/bind9 collisions better. Closes: #149580 + * Fix some documentation. Closes: #151579 + + -- LaMont Jones <lamont@debian.org> Wed, 4 Sep 2002 23:25:33 -0600 + +bind9 (1:9.2.1-3) unstable; urgency=high + + * fold in lib/bind/resolv from 8.3.3 to resolve buffer overlow issue in + resolver library, closes: #151342, #151431 + + -- Bdale Garbee <bdale@gag.com> Mon, 1 Jul 2002 00:16:31 -0600 + +bind9 (1:9.2.1-1.woody.1) testing-security woody-proposed-updates; urgency=high + + * backport to woody (simple rebuild) since 9.2.1 resolves a security issue + + -- Bdale Garbee <bdale@gag.com> Tue, 4 Jun 2002 10:30:57 -0600 + +bind9 (1:9.2.1-2) unstable; urgency=low + + * don't include nslint man page, closes: #148695 + * fix typo in rndc.8, closes: #139602 + * add a section to README.Debian explaining the rndc key mode that has been + our default since 9.2.0-2, closes: #129849 + * fix paths for named.conf in named.8 to reflect our default, closes: #143443 + * upstream fixed the nsupdate man page at some point, closes: #121108 + + -- Bdale Garbee <bdale@gag.com> Mon, 3 Jun 2002 15:44:37 -0600 + +bind9 (1:9.2.1-1) unstable; urgency=medium + + * new upstream version + * have bind9-host provide host, closes: #140174 + * move bind9-host to priority standard since dnsutils depends on it or host, + and we prefer bind9-host over host. + * move libdns5 and libisc4 to priority standard since dnsutils depends on + them and is priority standard + + -- Bdale Garbee <bdale@gag.com> Thu, 30 May 2002 10:38:39 -0600 + +bind9 (1:9.2.0-6) unstable; urgency=low + + * move to US main! Yippee! Closes: #123969 + * add info to README.Debian about 2.5 kernels vs --disable-linux-caps + + -- Bdale Garbee <bdale@gag.com> Sat, 23 Mar 2002 00:18:05 -0700 + +bind9 (1:9.2.0-5) unstable; urgency=medium + + * clean up various issues in the rules file + * make bind9-host conflict/replace old dnsutils as host does, otherwise we + can have problems upgrading from potato to woody, closes: #136686 + * use /dev/urandom for rndc-confgen in postinst, it should be good enough for + this purpose, and will keep the postinst from blocking arbitrarily. + closes: #130372 + * add fresh pointers to chroot howto to README.Debian, closes: #135774 + + -- Bdale Garbee <bdale@gag.com> Sun, 3 Mar 2002 16:47:12 -0700 + +bind9 (1:9.2.0-4) unstable; urgency=low + + * bind9-host needs to conflict with host, closes: #127395 + + -- Bdale Garbee <bdale@gag.com> Tue, 1 Jan 2002 20:12:14 -0700 + +bind9 (1:9.2.0-3) unstable; urgency=low + + * force removal of old diverted files, closes: #126236 + * change priority of liblwres1 from optional to standard per ftp admins + * add a bind9-host package so that the 'host' provided with the BIND 9.X + source tree can be an alternative to the aging NIKHEF version packaged + separately. Update dnsutils dependencies to depend on one of the two, + with preference to this one since it has fewer bugs (but fewer features, + too). + + -- Bdale Garbee <bdale@gag.com> Sun, 23 Dec 2001 00:59:15 -0700 + +bind9 (1:9.2.0-2) unstable; urgency=medium + + * change rc.d links to ensure daemon starts before and stops after other + daemons that may fail if name service is not working (bug was filed + against 8.X bind packages, but is just as relevant here!) + * use rndc for daemon shutdown instead of start-stop-daemon, closes: #111935 + * add a postinst to dnsutils to remove any lingering diversions from old + dnsutils packages, closes: #122227 + * not much point in delivering zone2ldap.1 since we aren't delivering + zone2ldap right now (though we might someday?), closes: #124058 + * be more verbose with shared library descriptions, closes: #123426, #123428 + * 9.2.0 added a new rndc.key file that both named and rndc will read to + obtain a shared key, and rndc-confgen will easily create this file with + a unique-per-system key. Modify named.conf and remove rndc.conf + to take advantage of this mechanism and stop delivering a pre-determined + static key to all Debian systems (which has been a mild security risk). + Create the key in postinst if the key file doesn't already exist, and + remove the file in postrm if purging. + Closes: #86718, #87208 + + -- Bdale Garbee <bdale@gag.com> Fri, 21 Dec 2001 04:04:30 -0700 + +bind9 (1:9.2.0-1) unstable; urgency=low + + * new upstream version, closes: #108243, #112266, #114250, #119506, #120657 + * /etc/bind/rndc.conf is now a conffile + * minor hacks to the README.Debian since the chroot instructions it points + to are 8.X specific, part of addressing bug 111868. + * libomapi is gone, replaced by libisccc and libisccfg + * a few lintian-motivated cosmetic cleanups + * lose task-dns-server meta package, since tasksel doesn't need it now + * dig problem not reproducible in this version, closes: #89526 + * named-checkconf now uses $sysconfdir, closes: #107835 + * no longer deliver man pages for contributed binaries we're not including + in dnsutils, closes: #108220 + * fix section in nslookup man page, though that's the least of the man + page's problems... glitch reported is unreproducible + closes: #103630, #120946 + * update libbind-dev README.Debian, closes: #121050 + + -- Bdale Garbee <bdale@gag.com> Tue, 27 Nov 2001 01:41:00 -0700 + +bind9 (1:9.1.3-1) unstable; urgency=low + + * new upstream version, closes: #96483, #99824, #100647, #101568, #103429 + * update config.sub/guess for hppa/ia64 support + * small init.d patch from Marco d'Itri to ease adding options on invocation + * stop having bind9-doc conflict/replace bind-doc since they don't really + conflict and there's no reason to prevent having both installed at the + same time, closes: #90994 + * the CHANGES file documents fixes since 9.1.1 that probably cured the + reported assertion failure. If it turns out that I'm wrong, the bug can + be re-opened or a new one filed. I can't see any way to reproduce the bug + in a test case here. Closes: #99352 + * have libbind-dev depend on the runtime library packages it delivers + compile-time symlinks for, closes: #100898, #103855 + * fix lwres man pages to source man3/* instead of * so all the page content + can actually be found, closes: #85450, #103865 + + -- Bdale Garbee <bdale@gag.com> Mon, 9 Jul 2001 11:30:39 -0600 + +bind9 (1:9.1.1-1) unstable; urgency=low + + * new upstream release + * update build-depends for libssl-dev + * add build-depends on bison, closes: #90150, #90752, #90159 + * split up libbind0 since libdns is changing so numbers + * downgrade rblcheck from a depends to a suggests, closes: #90783 + * bind9 mkdep creates files in the current working directory, closes: #58353 + + -- Bdale Garbee <bdale@gag.com> Wed, 25 Apr 2001 22:53:21 -0600 + +bind9 (1:9.1.0-3) unstable; urgency=low + + * merge patch from Zack Weinberg that solves compilation problem, and + reduces the memory footprint of applications by making configure.in + smarter. Closes: #86776, #86910 + * the bind-doc package includes all relevant documentation from the bind9 + source tree, including HTML content in /usr/share/doc/bind9-doc/arm, + closes: #85718 + * default named.conf and rndc.conf to not world-readable. This is an + interim step towards addressing the concerns about security raised by + bugs 86718 and closes: #86836 A better long-term solution would be for + rndc.conf to allow includes, so that both named.conf and rndc.conf could + include a key file built on the fly during installation while themselves + retaining conffile status. The required functionality has been requested + of the bind9 upstream, this will limit vulnerability in the meantime. + * add replaces logic to the dnsutils package to avoid complaints about the + delivery of nsupdate.8.gz, closes: #86759 + * move a couple of man pages back from dnsutils to bind9 that really belong + there. sigh. + + -- Bdale Garbee <bdale@gag.com> Thu, 22 Feb 2001 16:39:02 -0700 + +bind9 (1:9.1.0-2) unstable; urgency=low + + * merge patch from Luca Filipozzi <lfilipoz@debian.org> - thanks! + + bind9: ships with a working rndc.conf file, closes: #84572 + + bind9: init.d calls rndc rather than ndc on reload, closes: #85481 + + bind9: named.conf ships with 'key' and 'control' sections + + bind9: correctly creates /var/cache/bind, closes: #85457 + + lwresd: lwresd is split off into its own package, closes: #85627 + * nsupdate is delivered by the dnsutils package, but the (wrong) man page + was accidentally also included in the bind9 package, closes: #85717 + * freshen config.sub and config.guess for ia64 and hppa support + + -- Bdale Garbee <bdale@gag.com> Mon, 12 Feb 2001 23:43:55 -0700 + +bind9 (1:9.1.0-1) unstable; urgency=low + + * Initial packaging of BIND 9.1.0. Must use epoch so that meta packages + retain their sequencing from the bind 8 package version stream. + * snarf a couple of man pages from the 8.X tree for now + + -- Bdale Garbee <bdale@gag.com> Thu, 1 Feb 2001 16:30:35 -0700 + diff --git a/debian/checkapi b/debian/checkapi new file mode 100755 index 0000000..52eec8e --- /dev/null +++ b/debian/checkapi @@ -0,0 +1,11 @@ +#!/bin/sh +ret=0 +for LIB in bind9 dns irs isc lwres isccc isccfg; do + OLD_SOVERSION=$(sed -ne "s/Package: lib$LIB[-]*\([0-9]*\)$/\1/p" debian/control) + NEW_SOVERSION=$(debian/getapi "${LIB}") + if [ "$OLD_SOVERSION" -ne "$NEW_SOVERSION" ]; then + echo "ERROR: SONAME of lib$LIB has changed from lib$LIB.so.$OLD_SOVERSION to lib$1.so.$NEW_SOVERSION" + ret=1 + fi +done +exit $ret diff --git a/debian/compat b/debian/compat new file mode 100644 index 0000000..f599e28 --- /dev/null +++ b/debian/compat @@ -0,0 +1 @@ +10 diff --git a/debian/control b/debian/control new file mode 100644 index 0000000..73c2a17 --- /dev/null +++ b/debian/control @@ -0,0 +1,394 @@ +Source: bind9 +Section: net +Priority: optional +Maintainer: Debian DNS Team <team+dns@tracker.debian.org> +Uploaders: LaMont Jones <lamont@debian.org>, + Michael Gilbert <mgilbert@debian.org>, + Robie Basak <robie.basak@canonical.com>, + Ondřej Surý <ondrej@debian.org>, + Bernhard Schmidt <berni@debian.org> +Build-Depends: bison, + debhelper (>= 10), + dh-apparmor, + dh-exec, + dh-python, + dpkg-dev (>= 1.16.1~), + libcap2-dev [!kfreebsd-i386 !kfreebsd-amd64 !hurd-i386], + libdb-dev (>>4.6), + libfstrm-dev, + libgeoip-dev (>= 1.4.6.dfsg-5), + libidn2-dev, + libjson-c-dev, + libkrb5-dev, + libldap2-dev, + liblmdb-dev, + libprotobuf-c-dev, + libssl-dev, + libtool, + libxml2-dev, + protobuf-c-compiler, + python3, + python3-distutils, + python3-ply +Standards-Version: 4.1.2 +Vcs-Browser: https://salsa.debian.org/dns-team/bind9 +Vcs-Git: https://salsa.debian.org/dns-team/bind9.git +Homepage: https://www.isc.org/downloads/bind/ + +Package: bind9 +Architecture: any +Depends: adduser, + bind9utils (= ${binary:Version}), + debconf | debconf-2.0, + dns-root-data, + libbind9-161 (= ${binary:Version}), + libdns1104 (= ${binary:Version}), + libisc1100 (= ${binary:Version}), + libisccc161 (= ${binary:Version}), + libisccfg163 (= ${binary:Version}), + liblwres161 (= ${binary:Version}), + lsb-base (>= 3.2-14), + net-tools, + netbase, + ${misc:Depends}, + ${shlibs:Depends} +Suggests: bind9-doc, + dnsutils, + resolvconf, + ufw +Description: Internet Domain Name Server + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package provides the server and related configuration files. + +Package: bind9utils +Architecture: any +Depends: python3, + ${misc:Depends}, + ${python3:Depends}, + ${shlibs:Depends} +Description: Utilities for BIND + This package provides various utilities that are useful for maintaining a + working BIND installation. + +Package: bind9-doc +Architecture: all +Section: doc +Depends: ${misc:Depends} +Description: Documentation for BIND + This package provides various documents that are useful for maintaining a + working BIND installation. + +Package: bind9-host +Priority: standard +Architecture: any +Depends: libbind9-161 (= ${binary:Version}), + libdns1104 (= ${binary:Version}), + libisc1100 (= ${binary:Version}), + libisccfg163 (= ${binary:Version}), + liblwres161 (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends} +Provides: host +Description: DNS lookup utility (deprecated) + This package provides /usr/bin/host, a simple utility (bundled with the + BIND 9.X sources) which can be used for converting domain names to IP + addresses and the reverse. + . + This utility is deprecated, use dig or delv from the dnsutils package. + +Package: libbind-dev +Section: libdevel +Architecture: any +Replaces: bind9 (<< 1:9.10.3.dfsg.P2-4) +Depends: libbind9-161 (= ${binary:Version}), + libdns1104 (= ${binary:Version}), + libirs161 (= ${binary:Version}), + libisc1100 (= ${binary:Version}), + libisccc161 (= ${binary:Version}), + libisccfg163 (= ${binary:Version}), + liblwres161 (= ${binary:Version}), + ${misc:Depends} +Description: Static Libraries and Headers used by BIND + This package delivers archive-style libraries, header files, and API man + pages for libbind, libdns, libisc, and liblwres. These are only needed + if you want to compile other packages that need more nameserver API than the + resolver code provided in libc. + +Package: libbind9-161 +Section: libs +Architecture: any +Multi-Arch: same +Depends: libdns1104 (= ${binary:Version}), + libisc1100 (= ${binary:Version}), + libisccfg163 (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends} +Description: BIND9 Shared Library used by BIND + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers the libbind9 shared library used by BIND's daemons and + clients. + +Package: libdns1104 +Section: libs +Architecture: any +Multi-Arch: same +Depends: libisc1100 (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends} +Description: DNS Shared Library used by BIND + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers the libdns shared library used by BIND's daemons and + clients. + +Package: libirs161 +Section: libs +Architecture: any +Multi-Arch: same +Depends: libisc1100 (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends} +Description: DNS Shared Library used by BIND + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers the libirs shared library used by BIND's daemons and + clients. + +Package: libisc1100 +Section: libs +Architecture: any +Multi-Arch: same +Depends: ${misc:Depends}, + ${shlibs:Depends} +Description: ISC Shared Library used by BIND + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers the libisc shared library used by BIND's daemons and + clients. + +Package: liblwres161 +Section: libs +Architecture: any +Multi-Arch: same +Depends: ${misc:Depends}, + ${shlibs:Depends} +Description: Lightweight Resolver Library used by BIND + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers the liblwres shared library used by BIND's daemons + and clients. + +Package: libisccc161 +Section: libs +Architecture: any +Multi-Arch: same +Depends: libisc1100 (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends} +Description: Command Channel Library used by BIND + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers the libisccc shared library used by BIND's daemons + and clients, particularly rndc. + +Package: libisccfg163 +Section: libs +Architecture: any +Multi-Arch: same +Depends: libdns1104 (= ${binary:Version}), + libisc1100 (= ${binary:Version}), + libisccc161 (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends} +Description: Config File Handling Library used by BIND + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers the libisccfg shared library used by BIND's daemons + and clients to read and write ISC-style configuration files like named.conf + and rndc.conf. + +Package: dnsutils +Priority: standard +Architecture: any +Depends: bind9-host | host, + libbind9-161 (= ${binary:Version}), + libdns1104 (= ${binary:Version}), + libisc1100 (= ${binary:Version}), + libisccfg163 (= ${binary:Version}), + liblwres161 (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends} +Suggests: rblcheck +Breaks: bind9 (<< 1:9.11.2+dfsg-6~) +Replaces: bind9 (<< 1:9.11.2+dfsg-6) +Description: Clients provided with BIND + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers various client programs related to DNS that are + derived from the BIND source tree. + . + - dig - query the DNS in various ways + - nslookup - the older way to do it + - nsupdate - perform dynamic updates (See RFC2136) + +Package: libbind-export-dev +Section: libdevel +Architecture: any +Conflicts: libbind-dev +Depends: libdns-export1104 (= ${binary:Version}), + libirs-export161 (= ${binary:Version}), + libisc-export1100 (= ${binary:Version}), + libisccc-export161 (= ${binary:Version}), + libisccfg-export163 (= ${binary:Version}), + ${misc:Depends} +Description: Development files for the exported BIND libraries + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers development files for the exported BIND libraries. + +Package: libdns-export1104 +Section: libs +Architecture: any +Pre-Depends: ${misc:Pre-Depends} +Depends: ${misc:Depends}, + ${shlibs:Depends} +Description: Exported DNS Shared Library + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers the exported libdns shared library. + +Package: libdns-export1104-udeb +Section: debian-installer +Architecture: any +Multi-Arch: same +Depends: ${misc:Depends}, + ${shlibs:Depends} +Package-Type: udeb +Description: Exported DNS library for debian-installer + +Package: libirs-export161 +Section: libs +Architecture: any +Pre-Depends: ${misc:Pre-Depends} +Depends: ${misc:Depends}, + ${shlibs:Depends} +Description: Exported IRS Shared Library + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers the exported libirs shared library. + +Package: libirs-export161-udeb +Section: debian-installer +Architecture: any +Multi-Arch: same +Depends: ${misc:Depends}, + ${shlibs:Depends} +Package-Type: udeb +Description: Exported IRS library for debian-installer + +Package: libisc-export1100 +Section: libs +Architecture: any +Multi-Arch: same +Pre-Depends: ${misc:Pre-Depends} +Depends: ${misc:Depends}, + ${shlibs:Depends} +Description: Exported ISC Shared Library + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers the exported libisc shared library. + +Package: libisc-export1100-udeb +Section: debian-installer +Architecture: any +Multi-Arch: same +Depends: ${misc:Depends}, + ${shlibs:Depends} +Package-Type: udeb +Description: Exported ISC library for debian-installer + +Package: libisccc-export161 +Section: libs +Architecture: any +Multi-Arch: same +Depends: libisc-export1100, + ${misc:Depends}, + ${shlibs:Depends} +Description: Command Channel Library used by BIND + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers the libisccc shared library used by BIND's daemons + and clients, particularly rndc. + +Package: libisccc-export161-udeb +Section: debian-installer +Architecture: any +Multi-Arch: same +Depends: libisc-export1100-udeb, + ${misc:Depends}, + ${shlibs:Depends} +Package-Type: udeb +Description: Command Channel Library used by BIND + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers the libisccc shared library used by BIND's daemons + and clients, particularly rndc. + +Package: libisccfg-export163 +Section: libs +Architecture: any +Pre-Depends: ${misc:Pre-Depends} +Depends: ${misc:Depends}, + ${shlibs:Depends} +Description: Exported ISC CFG Shared Library + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers the exported libisccfg shared library. + +Package: libisccfg-export163-udeb +Section: debian-installer +Architecture: any +Multi-Arch: same +Depends: ${misc:Depends}, + ${shlibs:Depends} +Package-Type: udeb +Description: Exported ISC CFG library for debian-installer + The Berkeley Internet Name Domain (BIND) implements an Internet domain + name server. BIND is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers the exported libisccfg shared library. diff --git a/debian/copyright b/debian/copyright new file mode 100644 index 0000000..3b0579c --- /dev/null +++ b/debian/copyright @@ -0,0 +1,159 @@ +Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ +Upstream-Name: BIND +Upstream-Contact: Internet Systems Consortium <info@isc.org> +Source: https://ftp.isc.org/isc/bind9/ +Files-Excluded: contrib/idn + contrib/dnsperf-2.1.0.0-1 + contrib/nslint-3.0a2 + contrib/query-loc-0.4.0 + contrib/queryperf + contrib/zkt-1.1.3 + doc/arm/Bv9ARM.pdf + +Files: * +Copyright: 2004-2017, Internet Systems Consortium, Inc. ("ISC") + 1996-2003, Internet Software Consortium + 2012, Vadim Goncharov + 2009-2012, John Eaglesham + 2008, Damien Miller + 2004, 2008, Nominet, Ltd. + 2004, Masarykova universita + 1997-2003, Kungliga Tekniska Högskolan + 2002, Nuno M. Rodrigues. + 2002, Stichting NLnet, Netherlands + 2000-2002, Japan Network Information Center. + 2001, Jake Burkholder + 1996-2001, Nominum, Inc. + 1995-2000, Network Associates, Inc. + 2000, Aaron D. Gifford + 1999-2000, Nortel Networks Corporation + 1996, David Mazieres + 1993, Digital Equipment Corporation. + 1990, 1993, The Regents of the University of California. +License: ISC and BSD-2-clause and BSD-3-clause and BSD-4-clause + +Files: bin/tests/system/chain/ + doc/misc/docbook-options.pl +Copyright: 2016-2017, Internet Systems Consortium, Inc. ("ISC") +License: MPL-2.0 or ISC + +Files: unit/atf-src/ +Copyright: 2007-2012, The NetBSD Foundation, Inc. +License: BSD-2-clause + +Files: contrib/idn/ +Copyright: 2000-2002, Japan Network Information Center +License: BSD-4-clause + +Files: debian/ +Copyright: 2007-2017 LaMont Jones + 2013-2017 Michael Gilbert + 2017 Ondřej Surý + 2008-2016 Jamie Strandboge +License: ISC or MPL-2.0 + +License: ISC + Permission to use, copy, modify, and/or distribute this software for any + purpose with or without fee is hereby granted, provided that the above + copyright notice and this permission notice appear in all copies. + . + THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH + REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY + AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, + INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM + LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE + OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR + PERFORMANCE OF THIS SOFTWARE. + +License: BSD-2-clause + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions + are met: + . + 1. Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + . + 2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + . + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR + A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT + HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, + INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, + BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS + OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED + AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY + WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE + POSSIBILITY OF SUCH DAMAGE. + +License: BSD-3-clause + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions + are met: + . + 1. Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + . + 2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + . + 3. Neither the name of the copyright holder nor the names of its + contributors may be used to endorse or promote products derived from + this software without specific prior written permission. + . + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR + A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT + HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, + INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, + BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS + OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED + AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY + WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE + POSSIBILITY OF SUCH DAMAGE. + +License: BSD-4-clause + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions + are met: + . + 1. Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + . + 2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + . + 3. All advertising materials mentioning features or use of this + software must display the following acknowledgement: This product + includes software developed by the the organization . + . + 4. Neither the name of the copyright holder nor the names of its + contributors may be used to endorse or promote products derived from + this software without specific prior written permission. + . + THIS SOFTWARE IS PROVIDED BY COPYRIGHT HOLDER "AS IS" AND ANY EXPRESS + OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED + WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + ARE DISCLAIMED. IN NO EVENT SHALL COPYRIGHT HOLDER BE LIABLE FOR ANY + DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE + GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS + INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER + IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR + OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN + IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +License: MPL-2.0 + This Source Code Form is subject to the terms of the Mozilla Public + License, v. 2.0. + . + On Debian systems, the full copy of MPL-2.0 can be found at + /usr/share/common-licenses/MPL-2.0 diff --git a/debian/dnsutils.install b/debian/dnsutils.install new file mode 100644 index 0000000..90e4fba --- /dev/null +++ b/debian/dnsutils.install @@ -0,0 +1,12 @@ +usr/bin/delv +usr/bin/dig +usr/bin/dnstap-read +usr/bin/mdig +usr/bin/nslookup +usr/bin/nsupdate +usr/share/man/man1/delv.1 +usr/share/man/man1/dig.1 +usr/share/man/man1/dnstap-read.1 +usr/share/man/man1/mdig.1 +usr/share/man/man1/nslookup.1 +usr/share/man/man1/nsupdate.1 diff --git a/debian/export.diff b/debian/export.diff new file mode 100644 index 0000000..14f5320 --- /dev/null +++ b/debian/export.diff @@ -0,0 +1,11 @@ +diff -urNap lib/isccfg/Makefile lib/isccfg/Makefile +--- lib/isccfg/Makefile 2017-10-04 21:26:10.589804751 +0000 ++++ lib/isccfg/Makefile 2017-10-04 21:26:55.969698162 +0000 +@@ -506,6 +506,7 @@ libisccfg-export.la: ${OBJS} + -version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \ + ${OBJS} ${DNSLIBS} ${ISCLIBS} \ + ${LIBS} ++ ln -sf .libs/libisccfg-export.so . + + timestamp: libisccfg-export.la + touch timestamp diff --git a/debian/extras/apparmor.d/usr.sbin.named b/debian/extras/apparmor.d/usr.sbin.named new file mode 100644 index 0000000..a4622da --- /dev/null +++ b/debian/extras/apparmor.d/usr.sbin.named @@ -0,0 +1,94 @@ +# vim:syntax=apparmor +# Last Modified: Fri Jun 1 16:43:22 2007 +#include <tunables/global> + +/usr/sbin/named flags=(attach_disconnected) { + #include <abstractions/base> + #include <abstractions/nameservice> + + capability net_bind_service, + capability setgid, + capability setuid, + capability sys_chroot, + capability sys_resource, + + # /etc/bind should be read-only for bind + # /var/lib/bind is for dynamically updated zone (and journal) files. + # /var/cache/bind is for slave/stub data, since we're not the origin of it. + # See /usr/share/doc/bind9/README.Debian.gz + /etc/bind/** r, + /var/lib/bind/** rw, + /var/lib/bind/ rw, + /var/cache/bind/** lrw, + /var/cache/bind/ rw, + + # Database file used by allow-new-zones + /var/cache/bind/_default.nzd-lock rwk, + + # gssapi + /etc/krb5.keytab kr, + /etc/bind/krb5.keytab kr, + + # ssl + /etc/ssl/openssl.cnf r, + + # root hints from dns-data-root + /usr/share/dns/root.* r, + + # GeoIP data files for GeoIP ACLs + /usr/share/GeoIP/** r, + + # dnscvsutil package + /var/lib/dnscvsutil/compiled/** rw, + + # Allow changing worker thread names + owner @{PROC}/@{pid}/task/@{tid}/comm rw, + + @{PROC}/net/if_inet6 r, + @{PROC}/*/net/if_inet6 r, + @{PROC}/sys/net/ipv4/ip_local_port_range r, + /usr/sbin/named mr, + /{,var/}run/named/named.pid w, + /{,var/}run/named/session.key w, + # support for resolvconf + /{,var/}run/named/named.options r, + + # some people like to put logs in /var/log/named/ instead of having + # syslog do the heavy lifting. + /var/log/named/** rw, + /var/log/named/ rw, + + # gssapi + /var/lib/sss/pubconf/krb5.include.d/** r, + /var/lib/sss/pubconf/krb5.include.d/ r, + /var/lib/sss/mc/initgroups r, + /etc/gss/mech.d/ r, + + # ldap + /etc/ldap/ldap.conf r, + /{,var/}run/slapd-*.socket rw, + + # dynamic updates + /var/tmp/DNS_* rw, + + # dyndb backends + /usr/lib/bind/*.so rm, + + # Samba DLZ + /{usr/,}lib/@{multiarch}/samba/bind9/*.so rm, + /{usr/,}lib/@{multiarch}/samba/gensec/*.so rm, + /{usr/,}lib/@{multiarch}/samba/ldb/*.so rm, + /{usr/,}lib/@{multiarch}/ldb/modules/ldb/*.so rm, + /var/lib/samba/bind-dns/dns.keytab rk, + /var/lib/samba/bind-dns/named.conf r, + /var/lib/samba/bind-dns/dns/** rwk, + /var/lib/samba/private/dns.keytab rk, + /var/lib/samba/private/named.conf r, + /var/lib/samba/private/dns/** rwk, + /etc/samba/smb.conf r, + /dev/urandom rwmk, + owner /var/tmp/krb5_* rwk, + + # Site-specific additions and overrides. See local/README for details. + #include <local/usr.sbin.named> +} diff --git a/debian/extras/etc/db.0 b/debian/extras/etc/db.0 new file mode 100644 index 0000000..e3aabdb --- /dev/null +++ b/debian/extras/etc/db.0 @@ -0,0 +1,12 @@ +; +; BIND reverse data file for broadcast zone +; +$TTL 604800 +@ IN SOA localhost. root.localhost. ( + 1 ; Serial + 604800 ; Refresh + 86400 ; Retry + 2419200 ; Expire + 604800 ) ; Negative Cache TTL +; +@ IN NS localhost. diff --git a/debian/extras/etc/db.127 b/debian/extras/etc/db.127 new file mode 100644 index 0000000..cd05bef --- /dev/null +++ b/debian/extras/etc/db.127 @@ -0,0 +1,13 @@ +; +; BIND reverse data file for local loopback interface +; +$TTL 604800 +@ IN SOA localhost. root.localhost. ( + 1 ; Serial + 604800 ; Refresh + 86400 ; Retry + 2419200 ; Expire + 604800 ) ; Negative Cache TTL +; +@ IN NS localhost. +1.0.0 IN PTR localhost. diff --git a/debian/extras/etc/db.255 b/debian/extras/etc/db.255 new file mode 100644 index 0000000..e3aabdb --- /dev/null +++ b/debian/extras/etc/db.255 @@ -0,0 +1,12 @@ +; +; BIND reverse data file for broadcast zone +; +$TTL 604800 +@ IN SOA localhost. root.localhost. ( + 1 ; Serial + 604800 ; Refresh + 86400 ; Retry + 2419200 ; Expire + 604800 ) ; Negative Cache TTL +; +@ IN NS localhost. diff --git a/debian/extras/etc/db.empty b/debian/extras/etc/db.empty new file mode 100644 index 0000000..8a12858 --- /dev/null +++ b/debian/extras/etc/db.empty @@ -0,0 +1,14 @@ +; BIND reverse data file for empty rfc1918 zone +; +; DO NOT EDIT THIS FILE - it is used for multiple zones. +; Instead, copy it, edit named.conf, and use that copy. +; +$TTL 86400 +@ IN SOA localhost. root.localhost. ( + 1 ; Serial + 604800 ; Refresh + 86400 ; Retry + 2419200 ; Expire + 86400 ) ; Negative Cache TTL +; +@ IN NS localhost. diff --git a/debian/extras/etc/db.local b/debian/extras/etc/db.local new file mode 100644 index 0000000..2f272d4 --- /dev/null +++ b/debian/extras/etc/db.local @@ -0,0 +1,14 @@ +; +; BIND data file for local loopback interface +; +$TTL 604800 +@ IN SOA localhost. root.localhost. ( + 2 ; Serial + 604800 ; Refresh + 86400 ; Retry + 2419200 ; Expire + 604800 ) ; Negative Cache TTL +; +@ IN NS localhost. +@ IN A 127.0.0.1 +@ IN AAAA ::1 diff --git a/debian/extras/etc/named.conf b/debian/extras/etc/named.conf new file mode 100644 index 0000000..880786a --- /dev/null +++ b/debian/extras/etc/named.conf @@ -0,0 +1,11 @@ +// This is the primary configuration file for the BIND DNS server named. +// +// Please read /usr/share/doc/bind9/README.Debian.gz for information on the +// structure of BIND configuration files in Debian, *BEFORE* you customize +// this configuration file. +// +// If you are just adding zones, please do that in /etc/bind/named.conf.local + +include "/etc/bind/named.conf.options"; +include "/etc/bind/named.conf.local"; +include "/etc/bind/named.conf.default-zones"; diff --git a/debian/extras/etc/named.conf.default-zones b/debian/extras/etc/named.conf.default-zones new file mode 100644 index 0000000..1a85ad3 --- /dev/null +++ b/debian/extras/etc/named.conf.default-zones @@ -0,0 +1,30 @@ +// prime the server with knowledge of the root servers +zone "." { + type hint; + file "/usr/share/dns/root.hints"; +}; + +// be authoritative for the localhost forward and reverse zones, and for +// broadcast zones as per RFC 1912 + +zone "localhost" { + type master; + file "/etc/bind/db.local"; +}; + +zone "127.in-addr.arpa" { + type master; + file "/etc/bind/db.127"; +}; + +zone "0.in-addr.arpa" { + type master; + file "/etc/bind/db.0"; +}; + +zone "255.in-addr.arpa" { + type master; + file "/etc/bind/db.255"; +}; + + diff --git a/debian/extras/etc/named.conf.local b/debian/extras/etc/named.conf.local new file mode 100644 index 0000000..7a57b10 --- /dev/null +++ b/debian/extras/etc/named.conf.local @@ -0,0 +1,8 @@ +// +// Do any local configuration here +// + +// Consider adding the 1918 zones here, if they are not used in your +// organization +//include "/etc/bind/zones.rfc1918"; + diff --git a/debian/extras/etc/named.conf.options b/debian/extras/etc/named.conf.options new file mode 100644 index 0000000..4778d18 --- /dev/null +++ b/debian/extras/etc/named.conf.options @@ -0,0 +1,24 @@ +options { + directory "/var/cache/bind"; + + // If there is a firewall between you and nameservers you want + // to talk to, you may need to fix the firewall to allow multiple + // ports to talk. See http://www.kb.cert.org/vuls/id/800113 + + // If your ISP provided one or more IP addresses for stable + // nameservers, you probably want to use them as forwarders. + // Uncomment the following block, and insert the addresses replacing + // the all-0's placeholder. + + // forwarders { + // 0.0.0.0; + // }; + + //======================================================================== + // If BIND logs error messages about the root key being expired, + // you will need to update your keys. See https://www.isc.org/bind-keys + //======================================================================== + dnssec-validation auto; + + listen-on-v6 { any; }; +}; diff --git a/debian/extras/etc/zones.rfc1918 b/debian/extras/etc/zones.rfc1918 new file mode 100644 index 0000000..03b5546 --- /dev/null +++ b/debian/extras/etc/zones.rfc1918 @@ -0,0 +1,20 @@ +zone "10.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; + +zone "16.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "17.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "18.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "19.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "20.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "21.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "22.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "23.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "24.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "25.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "26.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "27.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "28.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "29.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "30.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "31.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; + +zone "168.192.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; diff --git a/debian/extras/if-reconfig.d/bind9 b/debian/extras/if-reconfig.d/bind9 new file mode 100755 index 0000000..d06965f --- /dev/null +++ b/debian/extras/if-reconfig.d/bind9 @@ -0,0 +1,15 @@ +#!/bin/sh -e +# Called when an interfaces comes up or down +# Written by LaMont Jones <lamont@debian.org> + +# kick named as needed + +# If /usr isn't mounted yet, silently bail. +if [ ! -d /usr/sbin ]; then + exit 0 +fi + +# if named is running, reconfig it. +rndc reconfig >/dev/null 2>&1 & + +exit 0 diff --git a/debian/extras/insserv.conf.d/bind9 b/debian/extras/insserv.conf.d/bind9 new file mode 100644 index 0000000..1861a99 --- /dev/null +++ b/debian/extras/insserv.conf.d/bind9 @@ -0,0 +1 @@ +$named bind9 diff --git a/debian/extras/ufw/bind9 b/debian/extras/ufw/bind9 new file mode 100644 index 0000000..6cd6fca --- /dev/null +++ b/debian/extras/ufw/bind9 @@ -0,0 +1,5 @@ +[Bind9] +title=Internet Domain Name Server +description=The Berkeley Internet Name Domain (BIND) implements an Internet domain name server. +ports=53 + diff --git a/debian/gbp.conf b/debian/gbp.conf new file mode 100644 index 0000000..bddd585 --- /dev/null +++ b/debian/gbp.conf @@ -0,0 +1,4 @@ +[DEFAULT] +debian-branch = debian/buster +pristine-tar = True +upstream-branch = upstream/buster diff --git a/debian/getapi b/debian/getapi new file mode 100755 index 0000000..3c1456a --- /dev/null +++ b/debian/getapi @@ -0,0 +1,8 @@ +#!/bin/sh +CURRENT=$(sed -ne "s/^LIBINTERFACE = //p" lib/$1/api) +REVISION=$(sed -ne "s/^LIBREVISION = //p" lib/$1/api) +AGE=$(sed -ne "s/^LIBAGE = //p" lib/$1/api) + +echo $((${CURRENT}-${AGE})) + +exit 0 diff --git a/debian/libbind-dev.README.Debian b/debian/libbind-dev.README.Debian new file mode 100644 index 0000000..ff47ab5 --- /dev/null +++ b/debian/libbind-dev.README.Debian @@ -0,0 +1,9 @@ +The include files for BIND are in /usr/include/{isc,dns,dst,lwres}. If +you're compiling something that uses them, use something like + + '-I/usr/include/isc' + +and so on in the call to the compiler to pick up the BIND versions before +the normal system versions for files that have conflicting filenames. + + diff --git a/debian/libbind-dev.install b/debian/libbind-dev.install new file mode 100644 index 0000000..0b706db --- /dev/null +++ b/debian/libbind-dev.install @@ -0,0 +1,21 @@ +usr/bin/isc-config.sh +usr/include +usr/lib/*/libbind9.a +usr/lib/*/libbind9.so +usr/lib/*/libdns-pkcs11.a +usr/lib/*/libdns-pkcs11.so +usr/lib/*/libdns.a +usr/lib/*/libdns.so +usr/lib/*/libirs.a +usr/lib/*/libirs.so +usr/lib/*/libisc-pkcs11.a +usr/lib/*/libisc-pkcs11.so +usr/lib/*/libisc.a +usr/lib/*/libisc.so +usr/lib/*/libisccc.a +usr/lib/*/libisccc.so +usr/lib/*/libisccfg.a +usr/lib/*/libisccfg.so +usr/lib/*/liblwres.a +usr/lib/*/liblwres.so +usr/share/man/man3 diff --git a/debian/libbind-export-dev.install b/debian/libbind-export-dev.install new file mode 100755 index 0000000..90b2efb --- /dev/null +++ b/debian/libbind-export-dev.install @@ -0,0 +1,4 @@ +#! /usr/bin/dh-exec +../tmp-udeb/lib/*/*-export.a usr/lib/${DEB_HOST_MULTIARCH} +../tmp-udeb/lib/*/*-export.so usr/lib/${DEB_HOST_MULTIARCH} +../tmp-udeb/usr/include/bind-export usr/include diff --git a/debian/libbind9-161.install b/debian/libbind9-161.install new file mode 100644 index 0000000..f6fa55a --- /dev/null +++ b/debian/libbind9-161.install @@ -0,0 +1 @@ +usr/lib/*/libbind9.so.* diff --git a/debian/libbind9-161.symbols b/debian/libbind9-161.symbols new file mode 100644 index 0000000..fd6ae78 --- /dev/null +++ b/debian/libbind9-161.symbols @@ -0,0 +1,8 @@ +libbind9.so.161 libbind9-161 #MINVER# + bind9_check_key@Base 1:9.10.6+dfsg + bind9_check_namedconf@Base 1:9.10.6+dfsg + bind9_getaddresses@Base 1:9.10.6+dfsg + bind9_libage@Base 1:9.10.6+dfsg + bind9_libinterface@Base 1:9.10.6+dfsg + bind9_librevision@Base 1:9.10.6+dfsg + bind9_version@Base 1:9.10.6+dfsg diff --git a/debian/libdns-export1104-udeb.install b/debian/libdns-export1104-udeb.install new file mode 100755 index 0000000..d29ae61 --- /dev/null +++ b/debian/libdns-export1104-udeb.install @@ -0,0 +1,2 @@ +#! /usr/bin/dh-exec +../tmp-udeb/lib/*/libdns-export.so.* lib/${DEB_HOST_MULTIARCH} diff --git a/debian/libdns-export1104.install b/debian/libdns-export1104.install new file mode 100755 index 0000000..d29ae61 --- /dev/null +++ b/debian/libdns-export1104.install @@ -0,0 +1,2 @@ +#! /usr/bin/dh-exec +../tmp-udeb/lib/*/libdns-export.so.* lib/${DEB_HOST_MULTIARCH} diff --git a/debian/libdns1104.install b/debian/libdns1104.install new file mode 100644 index 0000000..ea2d435 --- /dev/null +++ b/debian/libdns1104.install @@ -0,0 +1,2 @@ +usr/lib/*/libdns-pkcs11.so.* +usr/lib/*/libdns.so.* diff --git a/debian/libdns1104.symbols b/debian/libdns1104.symbols new file mode 100644 index 0000000..d630917 --- /dev/null +++ b/debian/libdns1104.symbols @@ -0,0 +1,3173 @@ +libdns-pkcs11.so.1104 libdns1104 #MINVER# + dns__rbt_checkproperties@Base 1:9.11.3+dfsg + dns__rbt_getheight@Base 1:9.11.3+dfsg + dns__rbtnode_getdistance@Base 1:9.11.3+dfsg + dns__zone_findkeys@Base 1:9.11.4+dfsg + dns__zone_loadpending@Base 1:9.11.3+dfsg + dns__zone_updatesigs@Base 1:9.11.4+dfsg + dns_acache_attach@Base 1:9.11.3+dfsg + dns_acache_attachentry@Base 1:9.11.3+dfsg + dns_acache_cancelentry@Base 1:9.11.3+dfsg + dns_acache_countquerymiss@Base 1:9.11.3+dfsg + dns_acache_create@Base 1:9.11.3+dfsg + dns_acache_createentry@Base 1:9.11.3+dfsg + dns_acache_detach@Base 1:9.11.3+dfsg + dns_acache_detachentry@Base 1:9.11.3+dfsg + dns_acache_getentry@Base 1:9.11.3+dfsg + dns_acache_putdb@Base 1:9.11.3+dfsg + dns_acache_setcachesize@Base 1:9.11.3+dfsg + dns_acache_setcleaninginterval@Base 1:9.11.3+dfsg + dns_acache_setdb@Base 1:9.11.3+dfsg + dns_acache_setentry@Base 1:9.11.3+dfsg + dns_acache_shutdown@Base 1:9.11.3+dfsg + dns_acl_any@Base 1:9.11.3+dfsg + dns_acl_attach@Base 1:9.11.3+dfsg + dns_acl_create@Base 1:9.11.3+dfsg + dns_acl_detach@Base 1:9.11.3+dfsg + dns_acl_isany@Base 1:9.11.3+dfsg + dns_acl_isinsecure@Base 1:9.11.3+dfsg + dns_acl_isnone@Base 1:9.11.3+dfsg + dns_acl_match2@Base 1:9.11.3+dfsg + dns_acl_match@Base 1:9.11.3+dfsg + dns_acl_merge@Base 1:9.11.3+dfsg + dns_acl_none@Base 1:9.11.3+dfsg + dns_aclelement_match2@Base 1:9.11.3+dfsg + dns_aclelement_match@Base 1:9.11.3+dfsg + dns_aclenv_copy@Base 1:9.11.3+dfsg + dns_aclenv_destroy@Base 1:9.11.3+dfsg + dns_aclenv_init@Base 1:9.11.3+dfsg + dns_adb_adjustsrtt@Base 1:9.11.3+dfsg + dns_adb_agesrtt@Base 1:9.11.3+dfsg + dns_adb_attach@Base 1:9.11.3+dfsg + dns_adb_beginudpfetch@Base 1:9.11.3+dfsg + dns_adb_cancelfind@Base 1:9.11.3+dfsg + dns_adb_changeflags@Base 1:9.11.3+dfsg + dns_adb_create@Base 1:9.11.3+dfsg + dns_adb_createfind2@Base 1:9.11.3+dfsg + dns_adb_createfind@Base 1:9.11.3+dfsg + dns_adb_destroyfind@Base 1:9.11.3+dfsg + dns_adb_detach@Base 1:9.11.3+dfsg + dns_adb_dump@Base 1:9.11.3+dfsg + dns_adb_dumpfind@Base 1:9.11.3+dfsg + dns_adb_ednsto@Base 1:9.11.3+dfsg + dns_adb_endudpfetch@Base 1:9.11.3+dfsg + dns_adb_findaddrinfo@Base 1:9.11.3+dfsg + dns_adb_flush@Base 1:9.11.3+dfsg + dns_adb_flushname@Base 1:9.11.3+dfsg + dns_adb_flushnames@Base 1:9.11.3+dfsg + dns_adb_freeaddrinfo@Base 1:9.11.3+dfsg + dns_adb_getcookie@Base 1:9.11.3+dfsg + dns_adb_getudpsize@Base 1:9.11.3+dfsg + dns_adb_marklame@Base 1:9.11.3+dfsg + dns_adb_noedns@Base 1:9.11.3+dfsg + dns_adb_plainresponse@Base 1:9.11.3+dfsg + dns_adb_probesize2@Base 1:9.11.3+dfsg + dns_adb_probesize@Base 1:9.11.3+dfsg + dns_adb_setadbsize@Base 1:9.11.3+dfsg + dns_adb_setcookie@Base 1:9.11.3+dfsg + dns_adb_setquota@Base 1:9.11.3+dfsg + dns_adb_setudpsize@Base 1:9.11.3+dfsg + dns_adb_shutdown@Base 1:9.11.3+dfsg + dns_adb_timeout@Base 1:9.11.3+dfsg + dns_adb_whenshutdown@Base 1:9.11.3+dfsg + dns_adbentry_overquota@Base 1:9.11.3+dfsg + dns_badcache_add@Base 1:9.11.3+dfsg + dns_badcache_destroy@Base 1:9.11.3+dfsg + dns_badcache_find@Base 1:9.11.3+dfsg + dns_badcache_flush@Base 1:9.11.3+dfsg + dns_badcache_flushname@Base 1:9.11.3+dfsg + dns_badcache_flushtree@Base 1:9.11.3+dfsg + dns_badcache_init@Base 1:9.11.3+dfsg + dns_badcache_print@Base 1:9.11.3+dfsg + dns_byaddr_cancel@Base 1:9.11.3+dfsg + dns_byaddr_create@Base 1:9.11.3+dfsg + dns_byaddr_createptrname2@Base 1:9.11.3+dfsg + dns_byaddr_createptrname@Base 1:9.11.3+dfsg + dns_byaddr_destroy@Base 1:9.11.3+dfsg + dns_cache_attach@Base 1:9.11.3+dfsg + dns_cache_attachdb@Base 1:9.11.3+dfsg + dns_cache_clean@Base 1:9.11.3+dfsg + dns_cache_create2@Base 1:9.11.3+dfsg + dns_cache_create3@Base 1:9.11.3+dfsg + dns_cache_create@Base 1:9.11.3+dfsg + dns_cache_detach@Base 1:9.11.3+dfsg + dns_cache_dump@Base 1:9.11.3+dfsg + dns_cache_dumpstats@Base 1:9.11.3+dfsg + dns_cache_flush@Base 1:9.11.3+dfsg + dns_cache_flushname@Base 1:9.11.3+dfsg + dns_cache_flushnode@Base 1:9.11.3+dfsg + dns_cache_getcachesize@Base 1:9.11.3+dfsg + dns_cache_getcleaninginterval@Base 1:9.11.3+dfsg + dns_cache_getname@Base 1:9.11.3+dfsg + dns_cache_getstats@Base 1:9.11.3+dfsg + dns_cache_load@Base 1:9.11.3+dfsg + dns_cache_renderjson@Base 1:9.11.3+dfsg + dns_cache_renderxml@Base 1:9.11.3+dfsg + dns_cache_setcachesize@Base 1:9.11.3+dfsg + dns_cache_setcleaninginterval@Base 1:9.11.3+dfsg + dns_cache_setfilename@Base 1:9.11.3+dfsg + dns_cache_updatestats@Base 1:9.11.3+dfsg + dns_categories@Base 1:9.11.3+dfsg + dns_catz_add_zone@Base 1:9.11.3+dfsg + dns_catz_catzs_attach@Base 1:9.11.3+dfsg + dns_catz_catzs_detach@Base 1:9.11.3+dfsg + dns_catz_catzs_set_view@Base 1:9.11.3+dfsg + dns_catz_dbupdate_callback@Base 1:9.11.3+dfsg + dns_catz_entry_attach@Base 1:9.11.3+dfsg + dns_catz_entry_cmp@Base 1:9.11.3+dfsg + dns_catz_entry_copy@Base 1:9.11.3+dfsg + dns_catz_entry_detach@Base 1:9.11.3+dfsg + dns_catz_entry_getname@Base 1:9.11.3+dfsg + dns_catz_entry_new@Base 1:9.11.3+dfsg + dns_catz_entry_validate@Base 1:9.11.3+dfsg + dns_catz_generate_masterfilename@Base 1:9.11.3+dfsg + dns_catz_generate_zonecfg@Base 1:9.11.3+dfsg + dns_catz_get_iterator@Base 1:9.11.3+dfsg + dns_catz_get_zone@Base 1:9.11.3+dfsg + dns_catz_new_zone@Base 1:9.11.3+dfsg + dns_catz_new_zones@Base 1:9.11.3+dfsg + dns_catz_options_copy@Base 1:9.11.3+dfsg + dns_catz_options_free@Base 1:9.11.3+dfsg + dns_catz_options_init@Base 1:9.11.3+dfsg + dns_catz_options_setdefault@Base 1:9.11.3+dfsg + dns_catz_postreconfig@Base 1:9.11.3+dfsg + dns_catz_prereconfig@Base 1:9.11.3+dfsg + dns_catz_update_from_db@Base 1:9.11.3+dfsg + dns_catz_update_process@Base 1:9.11.3+dfsg + dns_catz_update_taskaction@Base 1:9.11.3+dfsg + dns_catz_zone_attach@Base 1:9.11.3+dfsg + dns_catz_zone_detach@Base 1:9.11.3+dfsg + dns_catz_zone_getdefoptions@Base 1:9.11.3+dfsg + dns_catz_zone_getname@Base 1:9.11.3+dfsg + dns_catz_zone_resetdefoptions@Base 1:9.11.3+dfsg + dns_catz_zones_merge@Base 1:9.11.3+dfsg + dns_cert_fromtext@Base 1:9.11.3+dfsg + dns_cert_totext@Base 1:9.11.3+dfsg + dns_client_addtrustedkey@Base 1:9.11.3+dfsg + dns_client_cancelrequest@Base 1:9.11.3+dfsg + dns_client_cancelresolve@Base 1:9.11.3+dfsg + dns_client_cancelupdate@Base 1:9.11.3+dfsg + dns_client_clearservers@Base 1:9.11.3+dfsg + dns_client_create@Base 1:9.11.3+dfsg + dns_client_createx2@Base 1:9.11.3+dfsg + dns_client_createx@Base 1:9.11.3+dfsg + dns_client_destroy@Base 1:9.11.3+dfsg + dns_client_destroyreqtrans@Base 1:9.11.3+dfsg + dns_client_destroyrestrans@Base 1:9.11.3+dfsg + dns_client_destroyupdatetrans@Base 1:9.11.3+dfsg + dns_client_freeresanswer@Base 1:9.11.3+dfsg + dns_client_freeupdate@Base 1:9.11.3+dfsg + dns_client_mctx@Base 1:9.11.3+dfsg + dns_client_request@Base 1:9.11.3+dfsg + dns_client_resolve@Base 1:9.11.3+dfsg + dns_client_setdlv@Base 1:9.11.3+dfsg + dns_client_setservers@Base 1:9.11.3+dfsg + dns_client_startrequest@Base 1:9.11.3+dfsg + dns_client_startresolve@Base 1:9.11.3+dfsg + dns_client_startupdate@Base 1:9.11.3+dfsg + dns_client_update@Base 1:9.11.3+dfsg + dns_client_updaterec@Base 1:9.11.3+dfsg + dns_clientinfo_init@Base 1:9.11.3+dfsg + dns_clientinfomethods_init@Base 1:9.11.3+dfsg + dns_compress_add@Base 1:9.11.3+dfsg + dns_compress_disable@Base 1:9.11.3+dfsg + dns_compress_findglobal@Base 1:9.11.3+dfsg + dns_compress_getedns@Base 1:9.11.3+dfsg + dns_compress_getmethods@Base 1:9.11.3+dfsg + dns_compress_getsensitive@Base 1:9.11.3+dfsg + dns_compress_init@Base 1:9.11.3+dfsg + dns_compress_invalidate@Base 1:9.11.3+dfsg + dns_compress_rollback@Base 1:9.11.3+dfsg + dns_compress_setmethods@Base 1:9.11.3+dfsg + dns_compress_setsensitive@Base 1:9.11.3+dfsg + dns_counter_fromtext@Base 1:9.11.3+dfsg + dns_db_addrdataset@Base 1:9.11.3+dfsg + dns_db_allrdatasets@Base 1:9.11.3+dfsg + dns_db_attach@Base 1:9.11.3+dfsg + dns_db_attachnode@Base 1:9.11.3+dfsg + dns_db_attachversion@Base 1:9.11.3+dfsg + dns_db_beginload@Base 1:9.11.3+dfsg + dns_db_class@Base 1:9.11.3+dfsg + dns_db_closeversion@Base 1:9.11.3+dfsg + dns_db_create@Base 1:9.11.3+dfsg + dns_db_createiterator@Base 1:9.11.3+dfsg + dns_db_createsoatuple@Base 1:9.11.3+dfsg + dns_db_currentversion@Base 1:9.11.3+dfsg + dns_db_deleterdataset@Base 1:9.11.3+dfsg + dns_db_detach@Base 1:9.11.3+dfsg + dns_db_detachnode@Base 1:9.11.3+dfsg + dns_db_diff@Base 1:9.11.3+dfsg + dns_db_diffx@Base 1:9.11.3+dfsg + dns_db_dump2@Base 1:9.11.3+dfsg + dns_db_dump@Base 1:9.11.3+dfsg + dns_db_endload@Base 1:9.11.3+dfsg + dns_db_expirenode@Base 1:9.11.3+dfsg + dns_db_find@Base 1:9.11.3+dfsg + dns_db_findext@Base 1:9.11.3+dfsg + dns_db_findnode@Base 1:9.11.3+dfsg + dns_db_findnodeext@Base 1:9.11.3+dfsg + dns_db_findnsec3node@Base 1:9.11.3+dfsg + dns_db_findrdataset@Base 1:9.11.3+dfsg + dns_db_findzonecut@Base 1:9.11.3+dfsg + dns_db_getnsec3parameters@Base 1:9.11.3+dfsg + dns_db_getoriginnode@Base 1:9.11.3+dfsg + dns_db_getrrsetstats@Base 1:9.11.3+dfsg + dns_db_getsigningtime@Base 1:9.11.3+dfsg + dns_db_getsize@Base 1:9.11.3+dfsg + dns_db_getsoaserial@Base 1:9.11.3+dfsg + dns_db_hashsize@Base 1:9.11.3+dfsg + dns_db_iscache@Base 1:9.11.3+dfsg + dns_db_isdnssec@Base 1:9.11.3+dfsg + dns_db_ispersistent@Base 1:9.11.3+dfsg + dns_db_issecure@Base 1:9.11.3+dfsg + dns_db_isstub@Base 1:9.11.3+dfsg + dns_db_iszone@Base 1:9.11.3+dfsg + dns_db_load2@Base 1:9.11.3+dfsg + dns_db_load3@Base 1:9.11.3+dfsg + dns_db_load@Base 1:9.11.3+dfsg + dns_db_newversion@Base 1:9.11.3+dfsg + dns_db_nodecount@Base 1:9.11.3+dfsg + dns_db_nodefullname@Base 1:9.11.3+dfsg + dns_db_ondestroy@Base 1:9.11.3+dfsg + dns_db_origin@Base 1:9.11.3+dfsg + dns_db_overmem@Base 1:9.11.3+dfsg + dns_db_printnode@Base 1:9.11.3+dfsg + dns_db_register@Base 1:9.11.3+dfsg + dns_db_resigned@Base 1:9.11.3+dfsg + dns_db_rpz_attach@Base 1:9.11.3+dfsg + dns_db_rpz_ready@Base 1:9.11.3+dfsg + dns_db_serialize@Base 1:9.11.3+dfsg + dns_db_setcachestats@Base 1:9.11.3+dfsg + dns_db_setsigningtime@Base 1:9.11.3+dfsg + dns_db_settask@Base 1:9.11.3+dfsg + dns_db_subtractrdataset@Base 1:9.11.3+dfsg + dns_db_transfernode@Base 1:9.11.3+dfsg + dns_db_unregister@Base 1:9.11.3+dfsg + dns_db_updatenotify_register@Base 1:9.11.3+dfsg + dns_db_updatenotify_unregister@Base 1:9.11.3+dfsg + dns_dbiterator_current@Base 1:9.11.3+dfsg + dns_dbiterator_destroy@Base 1:9.11.3+dfsg + dns_dbiterator_first@Base 1:9.11.3+dfsg + dns_dbiterator_last@Base 1:9.11.3+dfsg + dns_dbiterator_next@Base 1:9.11.3+dfsg + dns_dbiterator_origin@Base 1:9.11.3+dfsg + dns_dbiterator_pause@Base 1:9.11.3+dfsg + dns_dbiterator_prev@Base 1:9.11.3+dfsg + dns_dbiterator_seek@Base 1:9.11.3+dfsg + dns_dbiterator_setcleanmode@Base 1:9.11.3+dfsg + dns_dbtable_add@Base 1:9.11.3+dfsg + dns_dbtable_adddefault@Base 1:9.11.3+dfsg + dns_dbtable_attach@Base 1:9.11.3+dfsg + dns_dbtable_create@Base 1:9.11.3+dfsg + dns_dbtable_detach@Base 1:9.11.3+dfsg + dns_dbtable_find@Base 1:9.11.3+dfsg + dns_dbtable_getdefault@Base 1:9.11.3+dfsg + dns_dbtable_remove@Base 1:9.11.3+dfsg + dns_dbtable_removedefault@Base 1:9.11.3+dfsg + dns_decompress_edns@Base 1:9.11.3+dfsg + dns_decompress_getmethods@Base 1:9.11.3+dfsg + dns_decompress_init@Base 1:9.11.3+dfsg + dns_decompress_invalidate@Base 1:9.11.3+dfsg + dns_decompress_setmethods@Base 1:9.11.3+dfsg + dns_decompress_type@Base 1:9.11.3+dfsg + dns_diff_append@Base 1:9.11.3+dfsg + dns_diff_appendminimal@Base 1:9.11.3+dfsg + dns_diff_apply@Base 1:9.11.3+dfsg + dns_diff_applysilently@Base 1:9.11.3+dfsg + dns_diff_clear@Base 1:9.11.3+dfsg + dns_diff_init@Base 1:9.11.3+dfsg + dns_diff_load@Base 1:9.11.3+dfsg + dns_diff_print@Base 1:9.11.3+dfsg + dns_diff_sort@Base 1:9.11.3+dfsg + dns_difftuple_copy@Base 1:9.11.3+dfsg + dns_difftuple_create@Base 1:9.11.3+dfsg + dns_difftuple_free@Base 1:9.11.3+dfsg + dns_dispatch_addresponse2@Base 1:9.11.3+dfsg + dns_dispatch_addresponse3@Base 1:9.11.3+dfsg + dns_dispatch_addresponse@Base 1:9.11.3+dfsg + dns_dispatch_attach@Base 1:9.11.3+dfsg + dns_dispatch_cancel@Base 1:9.11.3+dfsg + dns_dispatch_changeattributes@Base 1:9.11.3+dfsg + dns_dispatch_createtcp2@Base 1:9.11.3+dfsg + dns_dispatch_createtcp@Base 1:9.11.3+dfsg + dns_dispatch_detach@Base 1:9.11.3+dfsg + dns_dispatch_getattributes@Base 1:9.11.3+dfsg + dns_dispatch_getdscp@Base 1:9.11.3+dfsg + dns_dispatch_getentrysocket@Base 1:9.11.3+dfsg + dns_dispatch_getlocaladdress@Base 1:9.11.3+dfsg + dns_dispatch_getnext@Base 1:9.11.3+dfsg + dns_dispatch_getsocket@Base 1:9.11.3+dfsg + dns_dispatch_gettcp2@Base 1:9.11.3+dfsg + dns_dispatch_gettcp@Base 1:9.11.3+dfsg + dns_dispatch_getudp@Base 1:9.11.3+dfsg + dns_dispatch_getudp_dup@Base 1:9.11.3+dfsg + dns_dispatch_importrecv@Base 1:9.11.3+dfsg + dns_dispatch_removeresponse@Base 1:9.11.3+dfsg + dns_dispatch_setdscp@Base 1:9.11.3+dfsg + dns_dispatch_starttcp@Base 1:9.11.3+dfsg + dns_dispatchmgr_create@Base 1:9.11.3+dfsg + dns_dispatchmgr_destroy@Base 1:9.11.3+dfsg + dns_dispatchmgr_getblackhole@Base 1:9.11.3+dfsg + dns_dispatchmgr_getblackportlist@Base 1:9.11.3+dfsg + dns_dispatchmgr_setavailports@Base 1:9.11.3+dfsg + dns_dispatchmgr_setblackhole@Base 1:9.11.3+dfsg + dns_dispatchmgr_setblackportlist@Base 1:9.11.3+dfsg + dns_dispatchmgr_setstats@Base 1:9.11.3+dfsg + dns_dispatchset_cancelall@Base 1:9.11.3+dfsg + dns_dispatchset_create@Base 1:9.11.3+dfsg + dns_dispatchset_destroy@Base 1:9.11.3+dfsg + dns_dispatchset_get@Base 1:9.11.3+dfsg + dns_dlz_ssumatch@Base 1:9.11.3+dfsg + dns_dlz_writeablezone@Base 1:9.11.3+dfsg + dns_dlzallowzonexfr@Base 1:9.11.3+dfsg + dns_dlzconfigure@Base 1:9.11.3+dfsg + dns_dlzcreate@Base 1:9.11.3+dfsg + dns_dlzdestroy@Base 1:9.11.3+dfsg + dns_dlzregister@Base 1:9.11.3+dfsg + dns_dlzstrtoargv@Base 1:9.11.3+dfsg + dns_dlzunregister@Base 1:9.11.3+dfsg + dns_dns64_aaaafroma@Base 1:9.11.3+dfsg + dns_dns64_aaaaok@Base 1:9.11.3+dfsg + dns_dns64_append@Base 1:9.11.3+dfsg + dns_dns64_create@Base 1:9.11.3+dfsg + dns_dns64_destroy@Base 1:9.11.3+dfsg + dns_dns64_next@Base 1:9.11.3+dfsg + dns_dns64_unlink@Base 1:9.11.3+dfsg + dns_dnssec_findmatchingkeys2@Base 1:9.11.3+dfsg + dns_dnssec_findmatchingkeys@Base 1:9.11.3+dfsg + dns_dnssec_findzonekeys2@Base 1:9.11.3+dfsg + dns_dnssec_findzonekeys3@Base 1:9.11.3+dfsg + dns_dnssec_findzonekeys@Base 1:9.11.3+dfsg + dns_dnssec_keyactive@Base 1:9.11.3+dfsg + dns_dnssec_keyfromrdata@Base 1:9.11.3+dfsg + dns_dnssec_keylistfromrdataset@Base 1:9.11.3+dfsg + dns_dnssec_selfsigns@Base 1:9.11.3+dfsg + dns_dnssec_sign@Base 1:9.11.3+dfsg + dns_dnssec_signmessage@Base 1:9.11.3+dfsg + dns_dnssec_signs@Base 1:9.11.3+dfsg + dns_dnssec_stats@Base 1:9.11.3+dfsg + dns_dnssec_syncupdate@Base 1:9.11.3+dfsg + dns_dnssec_updatekeys@Base 1:9.11.3+dfsg + dns_dnssec_verify2@Base 1:9.11.3+dfsg + dns_dnssec_verify3@Base 1:9.11.3+dfsg + dns_dnssec_verify@Base 1:9.11.3+dfsg + dns_dnssec_verifymessage@Base 1:9.11.3+dfsg + dns_dnsseckey_create@Base 1:9.11.3+dfsg + dns_dnsseckey_destroy@Base 1:9.11.3+dfsg + dns_ds_buildrdata@Base 1:9.11.3+dfsg + dns_dsdigest_format@Base 1:9.11.3+dfsg + dns_dsdigest_fromtext@Base 1:9.11.3+dfsg + dns_dsdigest_totext@Base 1:9.11.3+dfsg + dns_dt_attach@Base 1:9.11.4.P1 + dns_dt_close@Base 1:9.11.4.P1 + dns_dt_create@Base 1:9.11.4.P1 + dns_dt_datatotext@Base 1:9.11.4.P1 + dns_dt_detach@Base 1:9.11.4.P1 + dns_dt_getframe@Base 1:9.11.4.P1 + dns_dt_getstats@Base 1:9.11.4.P1 + dns_dt_open@Base 1:9.11.4.P1 + dns_dt_parse@Base 1:9.11.4.P1 + dns_dt_reopen@Base 1:9.11.4.P1 + dns_dt_send@Base 1:9.11.4.P1 + dns_dt_setidentity@Base 1:9.11.4.P1 + dns_dt_setversion@Base 1:9.11.4.P1 + dns_dt_shutdown@Base 1:9.11.4.P1 + dns_dtdata_free@Base 1:9.11.4.P1 + dns_dumpctx_attach@Base 1:9.11.3+dfsg + dns_dumpctx_cancel@Base 1:9.11.3+dfsg + dns_dumpctx_db@Base 1:9.11.3+dfsg + dns_dumpctx_detach@Base 1:9.11.3+dfsg + dns_dumpctx_version@Base 1:9.11.3+dfsg + dns_dyndb_cleanup@Base 1:9.11.3+dfsg + dns_dyndb_createctx@Base 1:9.11.3+dfsg + dns_dyndb_destroyctx@Base 1:9.11.3+dfsg + dns_dyndb_load@Base 1:9.11.3+dfsg + dns_ecdb_register@Base 1:9.11.3+dfsg + dns_ecdb_unregister@Base 1:9.11.3+dfsg + dns_fixedname_init@Base 1:9.11.4+dfsg + dns_fixedname_initname@Base 1:9.11.4+dfsg + dns_fixedname_invalidate@Base 1:9.11.4+dfsg + dns_fixedname_name@Base 1:9.11.4+dfsg + dns_fullname_hash@Base 1:9.11.3+dfsg + dns_fwdtable_add@Base 1:9.11.3+dfsg + dns_fwdtable_addfwd@Base 1:9.11.3+dfsg + dns_fwdtable_create@Base 1:9.11.3+dfsg + dns_fwdtable_delete@Base 1:9.11.3+dfsg + dns_fwdtable_destroy@Base 1:9.11.3+dfsg + dns_fwdtable_find2@Base 1:9.11.3+dfsg + dns_fwdtable_find@Base 1:9.11.3+dfsg + dns_generalstats_create@Base 1:9.11.3+dfsg + dns_generalstats_dump@Base 1:9.11.3+dfsg + dns_generalstats_increment@Base 1:9.11.3+dfsg + dns_geoip_match@Base 1:9.11.3+dfsg + dns_geoip_shutdown@Base 1:9.11.3+dfsg + dns_hashalg_fromtext@Base 1:9.11.3+dfsg + dns_ipkeylist_clear@Base 1:9.11.3+dfsg + dns_ipkeylist_copy@Base 1:9.11.3+dfsg + dns_ipkeylist_init@Base 1:9.11.3+dfsg + dns_ipkeylist_resize@Base 1:9.11.3+dfsg + dns_iptable_addprefix2@Base 1:9.11.3+dfsg + dns_iptable_addprefix@Base 1:9.11.3+dfsg + dns_iptable_attach@Base 1:9.11.3+dfsg + dns_iptable_create@Base 1:9.11.3+dfsg + dns_iptable_detach@Base 1:9.11.3+dfsg + dns_iptable_merge@Base 1:9.11.3+dfsg + dns_journal_begin_transaction@Base 1:9.11.3+dfsg + dns_journal_commit@Base 1:9.11.3+dfsg + dns_journal_compact@Base 1:9.11.3+dfsg + dns_journal_current_rr@Base 1:9.11.3+dfsg + dns_journal_destroy@Base 1:9.11.3+dfsg + dns_journal_first_rr@Base 1:9.11.3+dfsg + dns_journal_first_serial@Base 1:9.11.3+dfsg + dns_journal_get_sourceserial@Base 1:9.11.3+dfsg + dns_journal_iter_init@Base 1:9.11.3+dfsg + dns_journal_last_serial@Base 1:9.11.3+dfsg + dns_journal_next_rr@Base 1:9.11.3+dfsg + dns_journal_open@Base 1:9.11.3+dfsg + dns_journal_print@Base 1:9.11.3+dfsg + dns_journal_rollforward@Base 1:9.11.3+dfsg + dns_journal_set_sourceserial@Base 1:9.11.3+dfsg + dns_journal_write_transaction@Base 1:9.11.3+dfsg + dns_journal_writediff@Base 1:9.11.3+dfsg + dns_keydata_fromdnskey@Base 1:9.11.3+dfsg + dns_keydata_todnskey@Base 1:9.11.3+dfsg + dns_keyflags_fromtext@Base 1:9.11.3+dfsg + dns_keynode_attach@Base 1:9.11.3+dfsg + dns_keynode_create@Base 1:9.11.3+dfsg + dns_keynode_detach@Base 1:9.11.3+dfsg + dns_keynode_detachall@Base 1:9.11.3+dfsg + dns_keynode_key@Base 1:9.11.3+dfsg + dns_keynode_managed@Base 1:9.11.3+dfsg + dns_keyring_restore@Base 1:9.11.3+dfsg + dns_keytable_add@Base 1:9.11.3+dfsg + dns_keytable_attach@Base 1:9.11.3+dfsg + dns_keytable_attachkeynode@Base 1:9.11.3+dfsg + dns_keytable_create@Base 1:9.11.3+dfsg + dns_keytable_delete@Base 1:9.11.3+dfsg + dns_keytable_deletekeynode@Base 1:9.11.3+dfsg + dns_keytable_detach@Base 1:9.11.3+dfsg + dns_keytable_detachkeynode@Base 1:9.11.3+dfsg + dns_keytable_dump@Base 1:9.11.3+dfsg + dns_keytable_find@Base 1:9.11.3+dfsg + dns_keytable_finddeepestmatch@Base 1:9.11.3+dfsg + dns_keytable_findkeynode@Base 1:9.11.3+dfsg + dns_keytable_findnextkeynode@Base 1:9.11.3+dfsg + dns_keytable_forall@Base 1:9.11.3+dfsg + dns_keytable_issecuredomain@Base 1:9.11.3+dfsg + dns_keytable_marksecure@Base 1:9.11.3+dfsg + dns_keytable_nextkeynode@Base 1:9.11.3+dfsg + dns_keytable_totext@Base 1:9.11.3+dfsg + dns_lctx@Base 1:9.11.3+dfsg + dns_lib_init@Base 1:9.11.3+dfsg + dns_lib_initmsgcat@Base 1:9.11.3+dfsg + dns_lib_shutdown@Base 1:9.11.3+dfsg + dns_libage@Base 1:9.11.3+dfsg + dns_libinterface@Base 1:9.11.3+dfsg + dns_librevision@Base 1:9.11.3+dfsg + dns_loadctx_attach@Base 1:9.11.3+dfsg + dns_loadctx_cancel@Base 1:9.11.3+dfsg + dns_loadctx_detach@Base 1:9.11.3+dfsg + dns_log_init@Base 1:9.11.3+dfsg + dns_log_setcontext@Base 1:9.11.3+dfsg + dns_lookup_cancel@Base 1:9.11.3+dfsg + dns_lookup_create@Base 1:9.11.3+dfsg + dns_lookup_destroy@Base 1:9.11.3+dfsg + dns_major@Base 1:9.11.3+dfsg + dns_mapapi@Base 1:9.11.3+dfsg + dns_master_dump2@Base 1:9.11.3+dfsg + dns_master_dump3@Base 1:9.11.3+dfsg + dns_master_dump@Base 1:9.11.3+dfsg + dns_master_dumpinc2@Base 1:9.11.3+dfsg + dns_master_dumpinc3@Base 1:9.11.3+dfsg + dns_master_dumpinc@Base 1:9.11.3+dfsg + dns_master_dumpnode@Base 1:9.11.3+dfsg + dns_master_dumpnodetostream@Base 1:9.11.3+dfsg + dns_master_dumptostream2@Base 1:9.11.3+dfsg + dns_master_dumptostream3@Base 1:9.11.3+dfsg + dns_master_dumptostream@Base 1:9.11.3+dfsg + dns_master_dumptostreaminc@Base 1:9.11.3+dfsg + dns_master_indent@Base 1:9.11.3+dfsg + dns_master_indentstr@Base 1:9.11.3+dfsg + dns_master_initrawheader@Base 1:9.11.3+dfsg + dns_master_loadbuffer@Base 1:9.11.3+dfsg + dns_master_loadbufferinc@Base 1:9.11.3+dfsg + dns_master_loadfile2@Base 1:9.11.3+dfsg + dns_master_loadfile3@Base 1:9.11.3+dfsg + dns_master_loadfile4@Base 1:9.11.3+dfsg + dns_master_loadfile5@Base 1:9.11.3+dfsg + dns_master_loadfile@Base 1:9.11.3+dfsg + dns_master_loadfileinc2@Base 1:9.11.3+dfsg + dns_master_loadfileinc3@Base 1:9.11.3+dfsg + dns_master_loadfileinc4@Base 1:9.11.3+dfsg + dns_master_loadfileinc5@Base 1:9.11.3+dfsg + dns_master_loadfileinc@Base 1:9.11.3+dfsg + dns_master_loadlexer@Base 1:9.11.3+dfsg + dns_master_loadlexerinc@Base 1:9.11.3+dfsg + dns_master_loadstream@Base 1:9.11.3+dfsg + dns_master_loadstreaminc@Base 1:9.11.3+dfsg + dns_master_questiontotext@Base 1:9.11.3+dfsg + dns_master_rdatasettotext@Base 1:9.11.3+dfsg + dns_master_style_cache@Base 1:9.11.3+dfsg + dns_master_style_comment@Base 1:9.11.3+dfsg + dns_master_style_debug@Base 1:9.11.3+dfsg + dns_master_style_default@Base 1:9.11.3+dfsg + dns_master_style_explicitttl@Base 1:9.11.3+dfsg + dns_master_style_full@Base 1:9.11.3+dfsg + dns_master_style_indent@Base 1:9.11.3+dfsg + dns_master_style_keyzone@Base 1:9.11.3+dfsg + dns_master_style_simple@Base 1:9.11.3+dfsg + dns_master_style_yaml@Base 1:9.11.3+dfsg + dns_master_stylecreate2@Base 1:9.11.3+dfsg + dns_master_stylecreate@Base 1:9.11.3+dfsg + dns_master_styledestroy@Base 1:9.11.3+dfsg + dns_master_styleflags@Base 1:9.11.3+dfsg + dns_message_addname@Base 1:9.11.3+dfsg + dns_message_buildopt@Base 1:9.11.3+dfsg + dns_message_checksig@Base 1:9.11.3+dfsg + dns_message_create@Base 1:9.11.3+dfsg + dns_message_currentname@Base 1:9.11.3+dfsg + dns_message_destroy@Base 1:9.11.3+dfsg + dns_message_find@Base 1:9.11.3+dfsg + dns_message_findname@Base 1:9.11.3+dfsg + dns_message_findtype@Base 1:9.11.3+dfsg + dns_message_firstname@Base 1:9.11.3+dfsg + dns_message_getopt@Base 1:9.11.3+dfsg + dns_message_getquerytsig@Base 1:9.11.3+dfsg + dns_message_getrawmessage@Base 1:9.11.3+dfsg + dns_message_getsig0@Base 1:9.11.3+dfsg + dns_message_getsig0key@Base 1:9.11.3+dfsg + dns_message_gettempname@Base 1:9.11.3+dfsg + dns_message_gettempoffsets@Base 1:9.11.3+dfsg + dns_message_gettemprdata@Base 1:9.11.3+dfsg + dns_message_gettemprdatalist@Base 1:9.11.3+dfsg + dns_message_gettemprdataset@Base 1:9.11.3+dfsg + dns_message_gettimeadjust@Base 1:9.11.3+dfsg + dns_message_gettsig@Base 1:9.11.3+dfsg + dns_message_gettsigkey@Base 1:9.11.3+dfsg + dns_message_logfmtpacket2@Base 1:9.11.3+dfsg + dns_message_logfmtpacket@Base 1:9.11.3+dfsg + dns_message_logpacket2@Base 1:9.11.3+dfsg + dns_message_logpacket@Base 1:9.11.3+dfsg + dns_message_movename@Base 1:9.11.3+dfsg + dns_message_nextname@Base 1:9.11.3+dfsg + dns_message_parse@Base 1:9.11.3+dfsg + dns_message_peekheader@Base 1:9.11.3+dfsg + dns_message_pseudosectiontotext@Base 1:9.11.3+dfsg + dns_message_puttempname@Base 1:9.11.3+dfsg + dns_message_puttemprdata@Base 1:9.11.3+dfsg + dns_message_puttemprdatalist@Base 1:9.11.3+dfsg + dns_message_puttemprdataset@Base 1:9.11.3+dfsg + dns_message_rechecksig@Base 1:9.11.3+dfsg + dns_message_removename@Base 1:9.11.3+dfsg + dns_message_renderbegin@Base 1:9.11.3+dfsg + dns_message_renderchangebuffer@Base 1:9.11.3+dfsg + dns_message_renderend@Base 1:9.11.3+dfsg + dns_message_renderheader@Base 1:9.11.3+dfsg + dns_message_renderrelease@Base 1:9.11.3+dfsg + dns_message_renderreserve@Base 1:9.11.3+dfsg + dns_message_renderreset@Base 1:9.11.3+dfsg + dns_message_rendersection@Base 1:9.11.3+dfsg + dns_message_reply@Base 1:9.11.3+dfsg + dns_message_reset@Base 1:9.11.3+dfsg + dns_message_resetsig@Base 1:9.11.3+dfsg + dns_message_sectiontotext@Base 1:9.11.3+dfsg + dns_message_setclass@Base 1:9.11.3+dfsg + dns_message_setopt@Base 1:9.11.3+dfsg + dns_message_setquerytsig@Base 1:9.11.3+dfsg + dns_message_setsig0key@Base 1:9.11.3+dfsg + dns_message_setsortorder@Base 1:9.11.3+dfsg + dns_message_settimeadjust@Base 1:9.11.3+dfsg + dns_message_settsigkey@Base 1:9.11.3+dfsg + dns_message_signer@Base 1:9.11.3+dfsg + dns_message_takebuffer@Base 1:9.11.3+dfsg + dns_message_totext@Base 1:9.11.3+dfsg + dns_modules@Base 1:9.11.3+dfsg + dns_msgcat@Base 1:9.11.3+dfsg + dns_name_caseequal@Base 1:9.11.3+dfsg + dns_name_clone@Base 1:9.11.3+dfsg + dns_name_compare@Base 1:9.11.3+dfsg + dns_name_concatenate@Base 1:9.11.3+dfsg + dns_name_copy@Base 1:9.11.3+dfsg + dns_name_countlabels@Base 1:9.11.3+dfsg + dns_name_destroy@Base 1:9.11.3+dfsg + dns_name_digest@Base 1:9.11.3+dfsg + dns_name_downcase@Base 1:9.11.3+dfsg + dns_name_dup@Base 1:9.11.3+dfsg + dns_name_dupwithoffsets@Base 1:9.11.3+dfsg + dns_name_dynamic@Base 1:9.11.3+dfsg + dns_name_equal@Base 1:9.11.3+dfsg + dns_name_format@Base 1:9.11.3+dfsg + dns_name_free@Base 1:9.11.3+dfsg + dns_name_fromregion@Base 1:9.11.3+dfsg + dns_name_fromstring2@Base 1:9.11.3+dfsg + dns_name_fromstring@Base 1:9.11.3+dfsg + dns_name_fromtext@Base 1:9.11.3+dfsg + dns_name_fromwire@Base 1:9.11.3+dfsg + dns_name_fullcompare@Base 1:9.11.3+dfsg + dns_name_fullhash@Base 1:9.11.3+dfsg + dns_name_getlabel@Base 1:9.11.3+dfsg + dns_name_getlabelsequence@Base 1:9.11.3+dfsg + dns_name_hasbuffer@Base 1:9.11.3+dfsg + dns_name_hash@Base 1:9.11.3+dfsg + dns_name_hashbylabel@Base 1:9.11.3+dfsg + dns_name_init@Base 1:9.11.3+dfsg + dns_name_internalwildcard@Base 1:9.11.3+dfsg + dns_name_invalidate@Base 1:9.11.3+dfsg + dns_name_isabsolute@Base 1:9.11.3+dfsg + dns_name_isdnssd@Base 1:9.11.3+dfsg + dns_name_ishostname@Base 1:9.11.3+dfsg + dns_name_ismailbox@Base 1:9.11.3+dfsg + dns_name_isrfc1918@Base 1:9.11.3+dfsg + dns_name_issubdomain@Base 1:9.11.3+dfsg + dns_name_istat@Base 1:9.11.3+dfsg + dns_name_isula@Base 1:9.11.3+dfsg + dns_name_isvalid@Base 1:9.11.3+dfsg + dns_name_iswildcard@Base 1:9.11.3+dfsg + dns_name_matcheswildcard@Base 1:9.11.3+dfsg + dns_name_print@Base 1:9.11.3+dfsg + dns_name_rdatacompare@Base 1:9.11.3+dfsg + dns_name_reset@Base 1:9.11.3+dfsg + dns_name_setbuffer@Base 1:9.11.3+dfsg + dns_name_settotextfilter@Base 1:9.11.3+dfsg + dns_name_split@Base 1:9.11.3+dfsg + dns_name_tofilenametext@Base 1:9.11.3+dfsg + dns_name_toprincipal@Base 1:9.11.3+dfsg + dns_name_toregion@Base 1:9.11.3+dfsg + dns_name_tostring@Base 1:9.11.3+dfsg + dns_name_totext2@Base 1:9.11.3+dfsg + dns_name_totext@Base 1:9.11.3+dfsg + dns_name_towire@Base 1:9.11.3+dfsg + dns_ncache_add@Base 1:9.11.3+dfsg + dns_ncache_addoptout@Base 1:9.11.3+dfsg + dns_ncache_current@Base 1:9.11.3+dfsg + dns_ncache_getrdataset@Base 1:9.11.3+dfsg + dns_ncache_getsigrdataset@Base 1:9.11.3+dfsg + dns_ncache_towire@Base 1:9.11.3+dfsg + dns_nsec3_active@Base 1:9.11.3+dfsg + dns_nsec3_activex@Base 1:9.11.3+dfsg + dns_nsec3_addnsec3@Base 1:9.11.3+dfsg + dns_nsec3_addnsec3s@Base 1:9.11.3+dfsg + dns_nsec3_addnsec3sx@Base 1:9.11.3+dfsg + dns_nsec3_buildrdata@Base 1:9.11.3+dfsg + dns_nsec3_delnsec3@Base 1:9.11.3+dfsg + dns_nsec3_delnsec3s@Base 1:9.11.3+dfsg + dns_nsec3_delnsec3sx@Base 1:9.11.3+dfsg + dns_nsec3_hashlength@Base 1:9.11.3+dfsg + dns_nsec3_hashname@Base 1:9.11.3+dfsg + dns_nsec3_maxiterations@Base 1:9.11.3+dfsg + dns_nsec3_noexistnodata@Base 1:9.11.3+dfsg + dns_nsec3_supportedhash@Base 1:9.11.3+dfsg + dns_nsec3_typepresent@Base 1:9.11.3+dfsg + dns_nsec3param_deletechains@Base 1:9.11.3+dfsg + dns_nsec3param_fromprivate@Base 1:9.11.3+dfsg + dns_nsec3param_salttotext@Base 1:9.11.3+dfsg + dns_nsec3param_toprivate@Base 1:9.11.3+dfsg + dns_nsec_build@Base 1:9.11.3+dfsg + dns_nsec_buildrdata@Base 1:9.11.3+dfsg + dns_nsec_compressbitmap@Base 1:9.11.3+dfsg + dns_nsec_isset@Base 1:9.11.3+dfsg + dns_nsec_noexistnodata@Base 1:9.11.3+dfsg + dns_nsec_nseconly@Base 1:9.11.3+dfsg + dns_nsec_setbit@Base 1:9.11.3+dfsg + dns_nsec_typepresent@Base 1:9.11.3+dfsg + dns_ntatable_add@Base 1:9.11.3+dfsg + dns_ntatable_attach@Base 1:9.11.3+dfsg + dns_ntatable_covered@Base 1:9.11.3+dfsg + dns_ntatable_create@Base 1:9.11.3+dfsg + dns_ntatable_delete@Base 1:9.11.3+dfsg + dns_ntatable_detach@Base 1:9.11.3+dfsg + dns_ntatable_dump@Base 1:9.11.3+dfsg + dns_ntatable_save@Base 1:9.11.3+dfsg + dns_ntatable_totext@Base 1:9.11.3+dfsg + dns_opcode_totext@Base 1:9.11.3+dfsg + dns_opcodestats_create@Base 1:9.11.3+dfsg + dns_opcodestats_dump@Base 1:9.11.3+dfsg + dns_opcodestats_increment@Base 1:9.11.3+dfsg + dns_order_add@Base 1:9.11.3+dfsg + dns_order_attach@Base 1:9.11.3+dfsg + dns_order_create@Base 1:9.11.3+dfsg + dns_order_detach@Base 1:9.11.3+dfsg + dns_order_find@Base 1:9.11.3+dfsg + dns_peer_attach@Base 1:9.11.3+dfsg + dns_peer_detach@Base 1:9.11.3+dfsg + dns_peer_getbogus@Base 1:9.11.3+dfsg + dns_peer_getednsversion@Base 1:9.11.3+dfsg + dns_peer_getforcetcp@Base 1:9.11.3+dfsg + dns_peer_getkey@Base 1:9.11.3+dfsg + dns_peer_getmaxudp@Base 1:9.11.3+dfsg + dns_peer_getnotifydscp@Base 1:9.11.3+dfsg + dns_peer_getnotifysource@Base 1:9.11.3+dfsg + dns_peer_getprovideixfr@Base 1:9.11.3+dfsg + dns_peer_getquerydscp@Base 1:9.11.3+dfsg + dns_peer_getquerysource@Base 1:9.11.3+dfsg + dns_peer_getrequestexpire@Base 1:9.11.3+dfsg + dns_peer_getrequestixfr@Base 1:9.11.3+dfsg + dns_peer_getrequestnsid@Base 1:9.11.3+dfsg + dns_peer_getsendcookie@Base 1:9.11.3+dfsg + dns_peer_getsupportedns@Base 1:9.11.3+dfsg + dns_peer_gettransferdscp@Base 1:9.11.3+dfsg + dns_peer_gettransferformat@Base 1:9.11.3+dfsg + dns_peer_gettransfers@Base 1:9.11.3+dfsg + dns_peer_gettransfersource@Base 1:9.11.3+dfsg + dns_peer_getudpsize@Base 1:9.11.3+dfsg + dns_peer_new@Base 1:9.11.3+dfsg + dns_peer_newprefix@Base 1:9.11.3+dfsg + dns_peer_setbogus@Base 1:9.11.3+dfsg + dns_peer_setednsversion@Base 1:9.11.3+dfsg + dns_peer_setforcetcp@Base 1:9.11.3+dfsg + dns_peer_setkey@Base 1:9.11.3+dfsg + dns_peer_setkeybycharp@Base 1:9.11.3+dfsg + dns_peer_setmaxudp@Base 1:9.11.3+dfsg + dns_peer_setnotifydscp@Base 1:9.11.3+dfsg + dns_peer_setnotifysource@Base 1:9.11.3+dfsg + dns_peer_setprovideixfr@Base 1:9.11.3+dfsg + dns_peer_setquerydscp@Base 1:9.11.3+dfsg + dns_peer_setquerysource@Base 1:9.11.3+dfsg + dns_peer_setrequestexpire@Base 1:9.11.3+dfsg + dns_peer_setrequestixfr@Base 1:9.11.3+dfsg + dns_peer_setrequestnsid@Base 1:9.11.3+dfsg + dns_peer_setsendcookie@Base 1:9.11.3+dfsg + dns_peer_setsupportedns@Base 1:9.11.3+dfsg + dns_peer_settransferdscp@Base 1:9.11.3+dfsg + dns_peer_settransferformat@Base 1:9.11.3+dfsg + dns_peer_settransfers@Base 1:9.11.3+dfsg + dns_peer_settransfersource@Base 1:9.11.3+dfsg + dns_peer_setudpsize@Base 1:9.11.3+dfsg + dns_peerlist_addpeer@Base 1:9.11.3+dfsg + dns_peerlist_attach@Base 1:9.11.3+dfsg + dns_peerlist_currpeer@Base 1:9.11.3+dfsg + dns_peerlist_detach@Base 1:9.11.3+dfsg + dns_peerlist_new@Base 1:9.11.3+dfsg + dns_peerlist_peerbyaddr@Base 1:9.11.3+dfsg + dns_portlist_add@Base 1:9.11.3+dfsg + dns_portlist_attach@Base 1:9.11.3+dfsg + dns_portlist_create@Base 1:9.11.3+dfsg + dns_portlist_detach@Base 1:9.11.3+dfsg + dns_portlist_match@Base 1:9.11.3+dfsg + dns_portlist_remove@Base 1:9.11.3+dfsg + dns_pps@Base 1:9.11.3+dfsg + dns_private_chains@Base 1:9.11.3+dfsg + dns_private_totext@Base 1:9.11.3+dfsg + dns_rbt_addname@Base 1:9.11.3+dfsg + dns_rbt_addnode@Base 1:9.11.3+dfsg + dns_rbt_create@Base 1:9.11.3+dfsg + dns_rbt_deletename@Base 1:9.11.3+dfsg + dns_rbt_deletenode@Base 1:9.11.3+dfsg + dns_rbt_deserialize_tree@Base 1:9.11.3+dfsg + dns_rbt_destroy2@Base 1:9.11.3+dfsg + dns_rbt_destroy@Base 1:9.11.3+dfsg + dns_rbt_findname@Base 1:9.11.3+dfsg + dns_rbt_findnode@Base 1:9.11.3+dfsg + dns_rbt_formatnodename@Base 1:9.11.3+dfsg + dns_rbt_fullnamefromnode@Base 1:9.11.3+dfsg + dns_rbt_hashsize@Base 1:9.11.3+dfsg + dns_rbt_namefromnode@Base 1:9.11.3+dfsg + dns_rbt_nodecount@Base 1:9.11.3+dfsg + dns_rbt_printdot@Base 1:9.11.3+dfsg + dns_rbt_printnodeinfo@Base 1:9.11.3+dfsg + dns_rbt_printtext@Base 1:9.11.3+dfsg + dns_rbt_root@Base 1:9.11.3+dfsg + dns_rbt_serialize_align@Base 1:9.11.3+dfsg + dns_rbt_serialize_tree@Base 1:9.11.3+dfsg + dns_rbtdb64_create@Base 1:9.11.3+dfsg + dns_rbtdb_create@Base 1:9.11.3+dfsg + dns_rbtnode_nodename@Base 1:9.11.3+dfsg + dns_rbtnodechain_current@Base 1:9.11.3+dfsg + dns_rbtnodechain_down@Base 1:9.11.3+dfsg + dns_rbtnodechain_first@Base 1:9.11.3+dfsg + dns_rbtnodechain_init@Base 1:9.11.3+dfsg + dns_rbtnodechain_invalidate@Base 1:9.11.3+dfsg + dns_rbtnodechain_last@Base 1:9.11.3+dfsg + dns_rbtnodechain_next@Base 1:9.11.3+dfsg + dns_rbtnodechain_nextflat@Base 1:9.11.3+dfsg + dns_rbtnodechain_prev@Base 1:9.11.3+dfsg + dns_rbtnodechain_reset@Base 1:9.11.3+dfsg + dns_rcode_fromtext@Base 1:9.11.3+dfsg + dns_rcode_totext@Base 1:9.11.3+dfsg + dns_rcodestats_create@Base 1:9.11.3+dfsg + dns_rcodestats_dump@Base 1:9.11.3+dfsg + dns_rcodestats_increment@Base 1:9.11.3+dfsg + dns_rdata_additionaldata@Base 1:9.11.3+dfsg + dns_rdata_apl_count@Base 1:9.11.3+dfsg + dns_rdata_apl_current@Base 1:9.11.3+dfsg + dns_rdata_apl_first@Base 1:9.11.3+dfsg + dns_rdata_apl_next@Base 1:9.11.3+dfsg + dns_rdata_casecompare@Base 1:9.11.3+dfsg + dns_rdata_checknames@Base 1:9.11.3+dfsg + dns_rdata_checkowner@Base 1:9.11.3+dfsg + dns_rdata_clone@Base 1:9.11.3+dfsg + dns_rdata_compare@Base 1:9.11.3+dfsg + dns_rdata_covers@Base 1:9.11.3+dfsg + dns_rdata_deleterrset@Base 1:9.11.3+dfsg + dns_rdata_digest@Base 1:9.11.3+dfsg + dns_rdata_exists@Base 1:9.11.3+dfsg + dns_rdata_freestruct@Base 1:9.11.3+dfsg + dns_rdata_fromregion@Base 1:9.11.3+dfsg + dns_rdata_fromstruct@Base 1:9.11.3+dfsg + dns_rdata_fromtext@Base 1:9.11.3+dfsg + dns_rdata_fromwire@Base 1:9.11.3+dfsg + dns_rdata_hip_current@Base 1:9.11.3+dfsg + dns_rdata_hip_first@Base 1:9.11.3+dfsg + dns_rdata_hip_next@Base 1:9.11.3+dfsg + dns_rdata_init@Base 1:9.11.3+dfsg + dns_rdata_makedelete@Base 1:9.11.3+dfsg + dns_rdata_ninfo_current@Base 1:9.11.3+dfsg + dns_rdata_ninfo_first@Base 1:9.11.3+dfsg + dns_rdata_ninfo_next@Base 1:9.11.3+dfsg + dns_rdata_notexist@Base 1:9.11.3+dfsg + dns_rdata_opt_current@Base 1:9.11.3+dfsg + dns_rdata_opt_first@Base 1:9.11.3+dfsg + dns_rdata_opt_next@Base 1:9.11.3+dfsg + dns_rdata_reset@Base 1:9.11.3+dfsg + dns_rdata_tofmttext@Base 1:9.11.3+dfsg + dns_rdata_toregion@Base 1:9.11.3+dfsg + dns_rdata_tostruct@Base 1:9.11.3+dfsg + dns_rdata_totext@Base 1:9.11.3+dfsg + dns_rdata_towire@Base 1:9.11.3+dfsg + dns_rdata_txt_current@Base 1:9.11.3+dfsg + dns_rdata_txt_first@Base 1:9.11.3+dfsg + dns_rdata_txt_next@Base 1:9.11.3+dfsg + dns_rdata_updateop@Base 1:9.11.3+dfsg + dns_rdatacallbacks_init@Base 1:9.11.3+dfsg + dns_rdatacallbacks_init_stdio@Base 1:9.11.3+dfsg + dns_rdataclass_format@Base 1:9.11.3+dfsg + dns_rdataclass_fromtext@Base 1:9.11.3+dfsg + dns_rdataclass_ismeta@Base 1:9.11.3+dfsg + dns_rdataclass_totext@Base 1:9.11.3+dfsg + dns_rdataclass_tounknowntext@Base 1:9.11.3+dfsg + dns_rdatalist_fromrdataset@Base 1:9.11.3+dfsg + dns_rdatalist_init@Base 1:9.11.3+dfsg + dns_rdatalist_tordataset@Base 1:9.11.3+dfsg + dns_rdataset_addclosest@Base 1:9.11.3+dfsg + dns_rdataset_additionaldata@Base 1:9.11.3+dfsg + dns_rdataset_addnoqname@Base 1:9.11.3+dfsg + dns_rdataset_clearprefetch@Base 1:9.11.3+dfsg + dns_rdataset_clone@Base 1:9.11.3+dfsg + dns_rdataset_count@Base 1:9.11.3+dfsg + dns_rdataset_current@Base 1:9.11.3+dfsg + dns_rdataset_disassociate@Base 1:9.11.3+dfsg + dns_rdataset_expire@Base 1:9.11.3+dfsg + dns_rdataset_first@Base 1:9.11.3+dfsg + dns_rdataset_getadditional@Base 1:9.11.3+dfsg + dns_rdataset_getclosest@Base 1:9.11.3+dfsg + dns_rdataset_getnoqname@Base 1:9.11.3+dfsg + dns_rdataset_getownercase@Base 1:9.11.3+dfsg + dns_rdataset_init@Base 1:9.11.3+dfsg + dns_rdataset_invalidate@Base 1:9.11.3+dfsg + dns_rdataset_isassociated@Base 1:9.11.3+dfsg + dns_rdataset_makequestion@Base 1:9.11.3+dfsg + dns_rdataset_next@Base 1:9.11.3+dfsg + dns_rdataset_putadditional@Base 1:9.11.3+dfsg + dns_rdataset_setadditional@Base 1:9.11.3+dfsg + dns_rdataset_setownercase@Base 1:9.11.3+dfsg + dns_rdataset_settrust@Base 1:9.11.3+dfsg + dns_rdataset_totext@Base 1:9.11.3+dfsg + dns_rdataset_towire@Base 1:9.11.3+dfsg + dns_rdataset_towirepartial@Base 1:9.11.3+dfsg + dns_rdataset_towiresorted@Base 1:9.11.3+dfsg + dns_rdataset_trimttl@Base 1:9.11.3+dfsg + dns_rdatasetiter_current@Base 1:9.11.3+dfsg + dns_rdatasetiter_destroy@Base 1:9.11.3+dfsg + dns_rdatasetiter_first@Base 1:9.11.3+dfsg + dns_rdatasetiter_next@Base 1:9.11.3+dfsg + dns_rdatasetstats_create@Base 1:9.11.3+dfsg + dns_rdatasetstats_decrement@Base 1:9.11.3+dfsg + dns_rdatasetstats_dump@Base 1:9.11.3+dfsg + dns_rdatasetstats_increment@Base 1:9.11.3+dfsg + dns_rdataslab_count@Base 1:9.11.3+dfsg + dns_rdataslab_equal@Base 1:9.11.3+dfsg + dns_rdataslab_equalx@Base 1:9.11.3+dfsg + dns_rdataslab_fromrdataset@Base 1:9.11.3+dfsg + dns_rdataslab_merge@Base 1:9.11.3+dfsg + dns_rdataslab_size@Base 1:9.11.3+dfsg + dns_rdataslab_subtract@Base 1:9.11.3+dfsg + dns_rdataslab_tordataset@Base 1:9.11.3+dfsg + dns_rdatatype_atparent@Base 1:9.11.3+dfsg + dns_rdatatype_attributes@Base 1:9.11.3+dfsg + dns_rdatatype_format@Base 1:9.11.3+dfsg + dns_rdatatype_fromtext@Base 1:9.11.3+dfsg + dns_rdatatype_isdnssec@Base 1:9.11.3+dfsg + dns_rdatatype_isknown@Base 1:9.11.3+dfsg + dns_rdatatype_ismeta@Base 1:9.11.3+dfsg + dns_rdatatype_issingleton@Base 1:9.11.3+dfsg + dns_rdatatype_iszonecutauth@Base 1:9.11.3+dfsg + dns_rdatatype_notquestion@Base 1:9.11.3+dfsg + dns_rdatatype_questiononly@Base 1:9.11.3+dfsg + dns_rdatatype_totext@Base 1:9.11.3+dfsg + dns_rdatatype_tounknowntext@Base 1:9.11.3+dfsg + dns_rdatatypestats_create@Base 1:9.11.3+dfsg + dns_rdatatypestats_dump@Base 1:9.11.3+dfsg + dns_rdatatypestats_increment@Base 1:9.11.3+dfsg + dns_request_cancel@Base 1:9.11.3+dfsg + dns_request_create@Base 1:9.11.3+dfsg + dns_request_createraw2@Base 1:9.11.3+dfsg + dns_request_createraw3@Base 1:9.11.3+dfsg + dns_request_createraw4@Base 1:9.11.3+dfsg + dns_request_createraw@Base 1:9.11.3+dfsg + dns_request_createvia2@Base 1:9.11.3+dfsg + dns_request_createvia3@Base 1:9.11.3+dfsg + dns_request_createvia4@Base 1:9.11.3+dfsg + dns_request_createvia@Base 1:9.11.3+dfsg + dns_request_destroy@Base 1:9.11.3+dfsg + dns_request_getresponse@Base 1:9.11.3+dfsg + dns_request_usedtcp@Base 1:9.11.3+dfsg + dns_requestmgr_attach@Base 1:9.11.3+dfsg + dns_requestmgr_create@Base 1:9.11.3+dfsg + dns_requestmgr_detach@Base 1:9.11.3+dfsg + dns_requestmgr_shutdown@Base 1:9.11.3+dfsg + dns_requestmgr_whenshutdown@Base 1:9.11.3+dfsg + dns_resolver_addalternate@Base 1:9.11.3+dfsg + dns_resolver_addbadcache@Base 1:9.11.3+dfsg + dns_resolver_algorithm_supported@Base 1:9.11.3+dfsg + dns_resolver_attach@Base 1:9.11.3+dfsg + dns_resolver_cancelfetch@Base 1:9.11.3+dfsg + dns_resolver_create@Base 1:9.11.3+dfsg + dns_resolver_createfetch2@Base 1:9.11.3+dfsg + dns_resolver_createfetch3@Base 1:9.11.3+dfsg + dns_resolver_createfetch@Base 1:9.11.3+dfsg + dns_resolver_destroyfetch@Base 1:9.11.3+dfsg + dns_resolver_detach@Base 1:9.11.3+dfsg + dns_resolver_disable_algorithm@Base 1:9.11.3+dfsg + dns_resolver_disable_ds_digest@Base 1:9.11.3+dfsg + dns_resolver_dispatchmgr@Base 1:9.11.3+dfsg + dns_resolver_dispatchv4@Base 1:9.11.3+dfsg + dns_resolver_dispatchv6@Base 1:9.11.3+dfsg + dns_resolver_ds_digest_supported@Base 1:9.11.3+dfsg + dns_resolver_dumpfetches@Base 1:9.11.3+dfsg + dns_resolver_flushbadcache@Base 1:9.11.3+dfsg + dns_resolver_flushbadnames@Base 1:9.11.3+dfsg + dns_resolver_freeze@Base 1:9.11.3+dfsg + dns_resolver_getbadcache@Base 1:9.11.3+dfsg + dns_resolver_getclientsperquery@Base 1:9.11.3+dfsg + dns_resolver_getlamettl@Base 1:9.11.3+dfsg + dns_resolver_getmaxdepth@Base 1:9.11.3+dfsg + dns_resolver_getmaxqueries@Base 1:9.11.3+dfsg + dns_resolver_getmustbesecure@Base 1:9.11.3+dfsg + dns_resolver_getoptions@Base 1:9.11.3+dfsg + dns_resolver_getquerydscp4@Base 1:9.11.3+dfsg + dns_resolver_getquerydscp6@Base 1:9.11.3+dfsg + dns_resolver_getquotaresponse@Base 1:9.11.3+dfsg + dns_resolver_gettimeout@Base 1:9.11.3+dfsg + dns_resolver_getudpsize@Base 1:9.11.3+dfsg + dns_resolver_getzeronosoattl@Base 1:9.11.3+dfsg + dns_resolver_logfetch@Base 1:9.11.3+dfsg + dns_resolver_nrunning@Base 1:9.11.3+dfsg + dns_resolver_prime@Base 1:9.11.3+dfsg + dns_resolver_printbadcache@Base 1:9.11.3+dfsg + dns_resolver_reset_algorithms@Base 1:9.11.3+dfsg + dns_resolver_reset_ds_digests@Base 1:9.11.3+dfsg + dns_resolver_resetmustbesecure@Base 1:9.11.3+dfsg + dns_resolver_setclientsperquery@Base 1:9.11.3+dfsg + dns_resolver_setfetchesperzone@Base 1:9.11.3+dfsg + dns_resolver_setlamettl@Base 1:9.11.3+dfsg + dns_resolver_setmaxdepth@Base 1:9.11.3+dfsg + dns_resolver_setmaxqueries@Base 1:9.11.3+dfsg + dns_resolver_setmustbesecure@Base 1:9.11.3+dfsg + dns_resolver_setquerydscp4@Base 1:9.11.3+dfsg + dns_resolver_setquerydscp6@Base 1:9.11.3+dfsg + dns_resolver_setquotaresponse@Base 1:9.11.3+dfsg + dns_resolver_settimeout@Base 1:9.11.3+dfsg + dns_resolver_setudpsize@Base 1:9.11.3+dfsg + dns_resolver_setzeronosoattl@Base 1:9.11.3+dfsg + dns_resolver_shutdown@Base 1:9.11.3+dfsg + dns_resolver_socketmgr@Base 1:9.11.3+dfsg + dns_resolver_taskmgr@Base 1:9.11.3+dfsg + dns_resolver_whenshutdown@Base 1:9.11.3+dfsg + dns_result_register@Base 1:9.11.3+dfsg + dns_result_torcode@Base 1:9.11.3+dfsg + dns_result_totext@Base 1:9.11.3+dfsg + dns_root_checkhints@Base 1:9.11.3+dfsg + dns_rootname@Base 1:9.11.3+dfsg + dns_rootns_create@Base 1:9.11.3+dfsg + dns_rpz_add@Base 1:9.11.3+dfsg + dns_rpz_attach_rpzs@Base 1:9.11.3+dfsg + dns_rpz_beginload@Base 1:9.11.3+dfsg + dns_rpz_decode_cname@Base 1:9.11.3+dfsg + dns_rpz_delete@Base 1:9.11.3+dfsg + dns_rpz_detach_rpzs@Base 1:9.11.3+dfsg + dns_rpz_find_ip@Base 1:9.11.3+dfsg + dns_rpz_find_name@Base 1:9.11.3+dfsg + dns_rpz_new_zones@Base 1:9.11.3+dfsg + dns_rpz_policy2str@Base 1:9.11.3+dfsg + dns_rpz_ready@Base 1:9.11.3+dfsg + dns_rpz_str2policy@Base 1:9.11.3+dfsg + dns_rpz_type2str@Base 1:9.11.3+dfsg + dns_rriterator_current@Base 1:9.11.3+dfsg + dns_rriterator_destroy@Base 1:9.11.3+dfsg + dns_rriterator_first@Base 1:9.11.3+dfsg + dns_rriterator_init@Base 1:9.11.3+dfsg + dns_rriterator_next@Base 1:9.11.3+dfsg + dns_rriterator_nextrrset@Base 1:9.11.3+dfsg + dns_rriterator_pause@Base 1:9.11.3+dfsg + dns_rrl@Base 1:9.11.3+dfsg + dns_rrl_init@Base 1:9.11.3+dfsg + dns_rrl_view_destroy@Base 1:9.11.3+dfsg + dns_sdb_putnamedrdata@Base 1:9.11.3+dfsg + dns_sdb_putnamedrr@Base 1:9.11.3+dfsg + dns_sdb_putrdata@Base 1:9.11.3+dfsg + dns_sdb_putrr@Base 1:9.11.3+dfsg + dns_sdb_putsoa@Base 1:9.11.3+dfsg + dns_sdb_register@Base 1:9.11.3+dfsg + dns_sdb_unregister@Base 1:9.11.3+dfsg + dns_sdlz_putnamedrr@Base 1:9.11.3+dfsg + dns_sdlz_putrr@Base 1:9.11.3+dfsg + dns_sdlz_putsoa@Base 1:9.11.3+dfsg + dns_sdlz_setdb@Base 1:9.11.3+dfsg + dns_sdlzregister@Base 1:9.11.3+dfsg + dns_sdlzunregister@Base 1:9.11.3+dfsg + dns_secalg_format@Base 1:9.11.3+dfsg + dns_secalg_fromtext@Base 1:9.11.3+dfsg + dns_secalg_totext@Base 1:9.11.3+dfsg + dns_secproto_fromtext@Base 1:9.11.3+dfsg + dns_secproto_totext@Base 1:9.11.3+dfsg + dns_soa_buildrdata@Base 1:9.11.3+dfsg + dns_soa_getexpire@Base 1:9.11.3+dfsg + dns_soa_getminimum@Base 1:9.11.3+dfsg + dns_soa_getrefresh@Base 1:9.11.3+dfsg + dns_soa_getretry@Base 1:9.11.3+dfsg + dns_soa_getserial@Base 1:9.11.3+dfsg + dns_soa_setexpire@Base 1:9.11.3+dfsg + dns_soa_setminimum@Base 1:9.11.3+dfsg + dns_soa_setrefresh@Base 1:9.11.3+dfsg + dns_soa_setretry@Base 1:9.11.3+dfsg + dns_soa_setserial@Base 1:9.11.3+dfsg + dns_ssu_external_match@Base 1:9.11.3+dfsg + dns_ssu_mtypefromstring@Base 1:9.11.3+dfsg + dns_ssurule_identity@Base 1:9.11.3+dfsg + dns_ssurule_isgrant@Base 1:9.11.3+dfsg + dns_ssurule_matchtype@Base 1:9.11.3+dfsg + dns_ssurule_name@Base 1:9.11.3+dfsg + dns_ssurule_types@Base 1:9.11.3+dfsg + dns_ssutable_addrule@Base 1:9.11.3+dfsg + dns_ssutable_attach@Base 1:9.11.3+dfsg + dns_ssutable_checkrules2@Base 1:9.11.3+dfsg + dns_ssutable_checkrules@Base 1:9.11.3+dfsg + dns_ssutable_create@Base 1:9.11.3+dfsg + dns_ssutable_createdlz@Base 1:9.11.3+dfsg + dns_ssutable_detach@Base 1:9.11.3+dfsg + dns_ssutable_firstrule@Base 1:9.11.3+dfsg + dns_ssutable_nextrule@Base 1:9.11.3+dfsg + dns_stats_alloccounters@Base 1:9.11.3+dfsg + dns_stats_attach@Base 1:9.11.3+dfsg + dns_stats_detach@Base 1:9.11.3+dfsg + dns_stats_freecounters@Base 1:9.11.3+dfsg + dns_statscounter_names@Base 1:9.11.3+dfsg + dns_tcpmsg_cancelread@Base 1:9.11.3+dfsg + dns_tcpmsg_init@Base 1:9.11.3+dfsg + dns_tcpmsg_invalidate@Base 1:9.11.3+dfsg + dns_tcpmsg_keepbuffer@Base 1:9.11.3+dfsg + dns_tcpmsg_readmessage@Base 1:9.11.3+dfsg + dns_tcpmsg_setmaxsize@Base 1:9.11.3+dfsg + dns_time32_fromtext@Base 1:9.11.3+dfsg + dns_time32_totext@Base 1:9.11.3+dfsg + dns_time64_from32@Base 1:9.11.3+dfsg + dns_time64_fromtext@Base 1:9.11.3+dfsg + dns_time64_totext@Base 1:9.11.3+dfsg + dns_timer_setidle@Base 1:9.11.3+dfsg + dns_tkey_builddeletequery@Base 1:9.11.3+dfsg + dns_tkey_builddhquery@Base 1:9.11.3+dfsg + dns_tkey_buildgssquery@Base 1:9.11.3+dfsg + dns_tkey_gssnegotiate@Base 1:9.11.3+dfsg + dns_tkey_processdeleteresponse@Base 1:9.11.3+dfsg + dns_tkey_processdhresponse@Base 1:9.11.3+dfsg + dns_tkey_processgssresponse@Base 1:9.11.3+dfsg + dns_tkey_processquery@Base 1:9.11.3+dfsg + dns_tkeyctx_create@Base 1:9.11.3+dfsg + dns_tkeyctx_destroy@Base 1:9.11.3+dfsg + dns_trust_totext@Base 1:9.11.3+dfsg + dns_tsec_create@Base 1:9.11.3+dfsg + dns_tsec_destroy@Base 1:9.11.3+dfsg + dns_tsec_getkey@Base 1:9.11.3+dfsg + dns_tsec_gettype@Base 1:9.11.3+dfsg + dns_tsig_gssapi_name@Base 1:9.11.3+dfsg + dns_tsig_gssapims_name@Base 1:9.11.3+dfsg + dns_tsig_hmacmd5_name@Base 1:9.11.3+dfsg + dns_tsig_hmacsha1_name@Base 1:9.11.3+dfsg + dns_tsig_hmacsha224_name@Base 1:9.11.3+dfsg + dns_tsig_hmacsha256_name@Base 1:9.11.3+dfsg + dns_tsig_hmacsha384_name@Base 1:9.11.3+dfsg + dns_tsig_hmacsha512_name@Base 1:9.11.3+dfsg + dns_tsig_sign@Base 1:9.11.3+dfsg + dns_tsig_verify@Base 1:9.11.3+dfsg + dns_tsigkey_attach@Base 1:9.11.3+dfsg + dns_tsigkey_create@Base 1:9.11.3+dfsg + dns_tsigkey_createfromkey@Base 1:9.11.3+dfsg + dns_tsigkey_detach@Base 1:9.11.3+dfsg + dns_tsigkey_find@Base 1:9.11.3+dfsg + dns_tsigkey_setdeleted@Base 1:9.11.3+dfsg + dns_tsigkeyring_add@Base 1:9.11.3+dfsg + dns_tsigkeyring_attach@Base 1:9.11.3+dfsg + dns_tsigkeyring_create@Base 1:9.11.3+dfsg + dns_tsigkeyring_detach@Base 1:9.11.3+dfsg + dns_tsigkeyring_dumpanddetach@Base 1:9.11.3+dfsg + dns_tsigrcode_fromtext@Base 1:9.11.3+dfsg + dns_tsigrcode_totext@Base 1:9.11.3+dfsg + dns_ttl_fromtext@Base 1:9.11.3+dfsg + dns_ttl_totext2@Base 1:9.11.3+dfsg + dns_ttl_totext@Base 1:9.11.3+dfsg + dns_update_signatures@Base 1:9.11.3+dfsg + dns_update_signaturesinc@Base 1:9.11.3+dfsg + dns_update_soaserial@Base 1:9.11.3+dfsg + dns_validator_cancel@Base 1:9.11.3+dfsg + dns_validator_create@Base 1:9.11.3+dfsg + dns_validator_destroy@Base 1:9.11.3+dfsg + dns_validator_send@Base 1:9.11.3+dfsg + dns_version@Base 1:9.11.3+dfsg + dns_view_adddelegationonly@Base 1:9.11.3+dfsg + dns_view_addzone@Base 1:9.11.3+dfsg + dns_view_asyncload2@Base 1:9.11.5+dfsg + dns_view_asyncload@Base 1:9.11.3+dfsg + dns_view_attach@Base 1:9.11.3+dfsg + dns_view_checksig@Base 1:9.11.3+dfsg + dns_view_create@Base 1:9.11.3+dfsg + dns_view_createresolver@Base 1:9.11.3+dfsg + dns_view_createzonetable@Base 1:9.11.3+dfsg + dns_view_detach@Base 1:9.11.3+dfsg + dns_view_dialup@Base 1:9.11.3+dfsg + dns_view_dumpdbtostream@Base 1:9.11.3+dfsg + dns_view_excludedelegationonly@Base 1:9.11.3+dfsg + dns_view_find2@Base 1:9.11.3+dfsg + dns_view_find@Base 1:9.11.3+dfsg + dns_view_findzone@Base 1:9.11.3+dfsg + dns_view_findzonecut2@Base 1:9.11.3+dfsg + dns_view_findzonecut@Base 1:9.11.3+dfsg + dns_view_flushanddetach@Base 1:9.11.3+dfsg + dns_view_flushcache2@Base 1:9.11.3+dfsg + dns_view_flushcache@Base 1:9.11.3+dfsg + dns_view_flushname@Base 1:9.11.3+dfsg + dns_view_flushnode@Base 1:9.11.3+dfsg + dns_view_freeze@Base 1:9.11.3+dfsg + dns_view_freezezones@Base 1:9.11.3+dfsg + dns_view_getadbstats@Base 1:9.11.3+dfsg + dns_view_getdynamickeyring@Base 1:9.11.3+dfsg + dns_view_getfailttl@Base 1:9.11.3+dfsg + dns_view_getntatable@Base 1:9.11.3+dfsg + dns_view_getpeertsig@Base 1:9.11.3+dfsg + dns_view_getresquerystats@Base 1:9.11.3+dfsg + dns_view_getresstats@Base 1:9.11.3+dfsg + dns_view_getrootdelonly@Base 1:9.11.3+dfsg + dns_view_getsecroots@Base 1:9.11.3+dfsg + dns_view_gettsig@Base 1:9.11.3+dfsg + dns_view_initntatable@Base 1:9.11.3+dfsg + dns_view_initsecroots@Base 1:9.11.3+dfsg + dns_view_iscacheshared@Base 1:9.11.3+dfsg + dns_view_isdelegationonly@Base 1:9.11.3+dfsg + dns_view_issecuredomain@Base 1:9.11.3+dfsg + dns_view_load@Base 1:9.11.3+dfsg + dns_view_loadnew@Base 1:9.11.3+dfsg + dns_view_loadnta@Base 1:9.11.3+dfsg + dns_view_ntacovers@Base 1:9.11.3+dfsg + dns_view_restorekeyring@Base 1:9.11.3+dfsg + dns_view_saventa@Base 1:9.11.3+dfsg + dns_view_searchdlz@Base 1:9.11.3+dfsg + dns_view_setadbstats@Base 1:9.11.3+dfsg + dns_view_setcache2@Base 1:9.11.3+dfsg + dns_view_setcache@Base 1:9.11.3+dfsg + dns_view_setdstport@Base 1:9.11.3+dfsg + dns_view_setdynamickeyring@Base 1:9.11.3+dfsg + dns_view_setfailttl@Base 1:9.11.3+dfsg + dns_view_sethints@Base 1:9.11.3+dfsg + dns_view_setkeyring@Base 1:9.11.3+dfsg + dns_view_setnewzones@Base 1:9.11.3+dfsg + dns_view_setresquerystats@Base 1:9.11.3+dfsg + dns_view_setresstats@Base 1:9.11.3+dfsg + dns_view_setrootdelonly@Base 1:9.11.3+dfsg + dns_view_setviewcommit@Base 1:9.11.3+dfsg + dns_view_setviewrevert@Base 1:9.11.3+dfsg + dns_view_simplefind@Base 1:9.11.3+dfsg + dns_view_thaw@Base 1:9.11.3+dfsg + dns_view_untrust@Base 1:9.11.3+dfsg + dns_view_weakattach@Base 1:9.11.3+dfsg + dns_view_weakdetach@Base 1:9.11.3+dfsg + dns_viewlist_find@Base 1:9.11.3+dfsg + dns_viewlist_findzone@Base 1:9.11.3+dfsg + dns_wildcardname@Base 1:9.11.3+dfsg + dns_xfrin_attach@Base 1:9.11.3+dfsg + dns_xfrin_create2@Base 1:9.11.3+dfsg + dns_xfrin_create3@Base 1:9.11.3+dfsg + dns_xfrin_create@Base 1:9.11.3+dfsg + dns_xfrin_detach@Base 1:9.11.3+dfsg + dns_xfrin_shutdown@Base 1:9.11.3+dfsg + dns_zone_addnsec3chain@Base 1:9.11.3+dfsg + dns_zone_asyncload2@Base 1:9.11.5+dfsg + dns_zone_asyncload@Base 1:9.11.3+dfsg + dns_zone_attach@Base 1:9.11.3+dfsg + dns_zone_catz_enable@Base 1:9.11.3+dfsg + dns_zone_catz_enable_db@Base 1:9.11.3+dfsg + dns_zone_cdscheck@Base 1:9.11.3+dfsg + dns_zone_checknames@Base 1:9.11.3+dfsg + dns_zone_clearforwardacl@Base 1:9.11.3+dfsg + dns_zone_clearnotifyacl@Base 1:9.11.3+dfsg + dns_zone_clearqueryacl@Base 1:9.11.3+dfsg + dns_zone_clearqueryonacl@Base 1:9.11.3+dfsg + dns_zone_clearupdateacl@Base 1:9.11.3+dfsg + dns_zone_clearxfracl@Base 1:9.11.3+dfsg + dns_zone_create@Base 1:9.11.3+dfsg + dns_zone_detach@Base 1:9.11.3+dfsg + dns_zone_dialup@Base 1:9.11.3+dfsg + dns_zone_dlzpostload@Base 1:9.11.3+dfsg + dns_zone_dump@Base 1:9.11.3+dfsg + dns_zone_dumptostream2@Base 1:9.11.3+dfsg + dns_zone_dumptostream3@Base 1:9.11.3+dfsg + dns_zone_dumptostream@Base 1:9.11.3+dfsg + dns_zone_expire@Base 1:9.11.3+dfsg + dns_zone_first@Base 1:9.11.3+dfsg + dns_zone_flush@Base 1:9.11.3+dfsg + dns_zone_forcereload@Base 1:9.11.3+dfsg + dns_zone_forwardupdate@Base 1:9.11.3+dfsg + dns_zone_fulldumptostream@Base 1:9.11.3+dfsg + dns_zone_get_parentcatz@Base 1:9.11.3+dfsg + dns_zone_get_rpz_num@Base 1:9.11.3+dfsg + dns_zone_getadded@Base 1:9.11.3+dfsg + dns_zone_getaltxfrsource4@Base 1:9.11.3+dfsg + dns_zone_getaltxfrsource4dscp@Base 1:9.11.3+dfsg + dns_zone_getaltxfrsource6@Base 1:9.11.3+dfsg + dns_zone_getaltxfrsource6dscp@Base 1:9.11.3+dfsg + dns_zone_getautomatic@Base 1:9.11.3+dfsg + dns_zone_getchecknames@Base 1:9.11.3+dfsg + dns_zone_getclass@Base 1:9.11.3+dfsg + dns_zone_getdb@Base 1:9.11.3+dfsg + dns_zone_getdbtype@Base 1:9.11.3+dfsg + dns_zone_getexpiretime@Base 1:9.11.3+dfsg + dns_zone_getfile@Base 1:9.11.3+dfsg + dns_zone_getforwardacl@Base 1:9.11.3+dfsg + dns_zone_getidlein@Base 1:9.11.3+dfsg + dns_zone_getidleout@Base 1:9.11.3+dfsg + dns_zone_getincludes@Base 1:9.11.3+dfsg + dns_zone_getjournal@Base 1:9.11.3+dfsg + dns_zone_getjournalsize@Base 1:9.11.3+dfsg + dns_zone_getkeydirectory@Base 1:9.11.3+dfsg + dns_zone_getkeyopts@Base 1:9.11.3+dfsg + dns_zone_getloadtime@Base 1:9.11.3+dfsg + dns_zone_getmaxrecords@Base 1:9.11.3+dfsg + dns_zone_getmaxttl@Base 1:9.11.3+dfsg + dns_zone_getmaxxfrin@Base 1:9.11.3+dfsg + dns_zone_getmaxxfrout@Base 1:9.11.3+dfsg + dns_zone_getmctx@Base 1:9.11.3+dfsg + dns_zone_getmgr@Base 1:9.11.3+dfsg + dns_zone_getnotifyacl@Base 1:9.11.3+dfsg + dns_zone_getnotifydelay@Base 1:9.11.3+dfsg + dns_zone_getnotifysrc4@Base 1:9.11.3+dfsg + dns_zone_getnotifysrc4dscp@Base 1:9.11.3+dfsg + dns_zone_getnotifysrc6@Base 1:9.11.3+dfsg + dns_zone_getnotifysrc6dscp@Base 1:9.11.3+dfsg + dns_zone_getoptions2@Base 1:9.11.3+dfsg + dns_zone_getoptions@Base 1:9.11.3+dfsg + dns_zone_getorigin@Base 1:9.11.3+dfsg + dns_zone_getprivatetype@Base 1:9.11.3+dfsg + dns_zone_getqueryacl@Base 1:9.11.3+dfsg + dns_zone_getqueryonacl@Base 1:9.11.3+dfsg + dns_zone_getraw@Base 1:9.11.3+dfsg + dns_zone_getrcvquerystats@Base 1:9.11.3+dfsg + dns_zone_getrefreshkeytime@Base 1:9.11.3+dfsg + dns_zone_getrefreshtime@Base 1:9.11.3+dfsg + dns_zone_getrequestexpire@Base 1:9.11.3+dfsg + dns_zone_getrequestixfr@Base 1:9.11.3+dfsg + dns_zone_getrequeststats@Base 1:9.11.3+dfsg + dns_zone_getserial2@Base 1:9.11.3+dfsg + dns_zone_getserial@Base 1:9.11.3+dfsg + dns_zone_getserialupdatemethod@Base 1:9.11.3+dfsg + dns_zone_getsignatures@Base 1:9.11.3+dfsg + dns_zone_getsigresigninginterval@Base 1:9.11.3+dfsg + dns_zone_getsigvalidityinterval@Base 1:9.11.3+dfsg + dns_zone_getssutable@Base 1:9.11.3+dfsg + dns_zone_getstatlevel@Base 1:9.11.3+dfsg + dns_zone_getstatscounters@Base 1:9.11.3+dfsg + dns_zone_gettask@Base 1:9.11.3+dfsg + dns_zone_gettype@Base 1:9.11.3+dfsg + dns_zone_getupdateacl@Base 1:9.11.3+dfsg + dns_zone_getupdatedisabled@Base 1:9.11.3+dfsg + dns_zone_getview@Base 1:9.11.3+dfsg + dns_zone_getxfracl@Base 1:9.11.3+dfsg + dns_zone_getxfrsource4@Base 1:9.11.3+dfsg + dns_zone_getxfrsource4dscp@Base 1:9.11.3+dfsg + dns_zone_getxfrsource6@Base 1:9.11.3+dfsg + dns_zone_getxfrsource6dscp@Base 1:9.11.3+dfsg + dns_zone_getzeronosoattl@Base 1:9.11.3+dfsg + dns_zone_iattach@Base 1:9.11.3+dfsg + dns_zone_idetach@Base 1:9.11.3+dfsg + dns_zone_isdynamic@Base 1:9.11.3+dfsg + dns_zone_isforced@Base 1:9.11.3+dfsg + dns_zone_keydone@Base 1:9.11.3+dfsg + dns_zone_link@Base 1:9.11.3+dfsg + dns_zone_load@Base 1:9.11.3+dfsg + dns_zone_loadandthaw@Base 1:9.11.3+dfsg + dns_zone_loadnew@Base 1:9.11.3+dfsg + dns_zone_log@Base 1:9.11.3+dfsg + dns_zone_logc@Base 1:9.11.3+dfsg + dns_zone_logv@Base 1:9.11.4+dfsg + dns_zone_maintenance@Base 1:9.11.3+dfsg + dns_zone_markdirty@Base 1:9.11.3+dfsg + dns_zone_mkey_day@Base 1:9.11.3+dfsg + dns_zone_mkey_hour@Base 1:9.11.3+dfsg + dns_zone_mkey_month@Base 1:9.11.3+dfsg + dns_zone_name@Base 1:9.11.3+dfsg + dns_zone_nameonly@Base 1:9.11.3+dfsg + dns_zone_next@Base 1:9.11.3+dfsg + dns_zone_notify@Base 1:9.11.3+dfsg + dns_zone_notifyreceive2@Base 1:9.11.3+dfsg + dns_zone_notifyreceive@Base 1:9.11.3+dfsg + dns_zone_nscheck@Base 1:9.11.3+dfsg + dns_zone_refresh@Base 1:9.11.3+dfsg + dns_zone_rekey@Base 1:9.11.3+dfsg + dns_zone_replacedb@Base 1:9.11.3+dfsg + dns_zone_rpz_enable@Base 1:9.11.3+dfsg + dns_zone_rpz_enable_db@Base 1:9.11.3+dfsg + dns_zone_set_parentcatz@Base 1:9.11.3+dfsg + dns_zone_setacache@Base 1:9.11.3+dfsg + dns_zone_setadded@Base 1:9.11.3+dfsg + dns_zone_setalsonotify@Base 1:9.11.3+dfsg + dns_zone_setalsonotifydscpkeys@Base 1:9.11.3+dfsg + dns_zone_setalsonotifywithkeys@Base 1:9.11.3+dfsg + dns_zone_setaltxfrsource4@Base 1:9.11.3+dfsg + dns_zone_setaltxfrsource4dscp@Base 1:9.11.3+dfsg + dns_zone_setaltxfrsource6@Base 1:9.11.3+dfsg + dns_zone_setaltxfrsource6dscp@Base 1:9.11.3+dfsg + dns_zone_setautomatic@Base 1:9.11.3+dfsg + dns_zone_setcheckmx@Base 1:9.11.3+dfsg + dns_zone_setchecknames@Base 1:9.11.3+dfsg + dns_zone_setcheckns@Base 1:9.11.3+dfsg + dns_zone_setchecksrv@Base 1:9.11.3+dfsg + dns_zone_setclass@Base 1:9.11.3+dfsg + dns_zone_setdb@Base 1:9.11.3+dfsg + dns_zone_setdbtype@Base 1:9.11.3+dfsg + dns_zone_setdialup@Base 1:9.11.3+dfsg + dns_zone_setfile2@Base 1:9.11.3+dfsg + dns_zone_setfile3@Base 1:9.11.3+dfsg + dns_zone_setfile@Base 1:9.11.3+dfsg + dns_zone_setflag@Base 1:9.11.3+dfsg + dns_zone_setforwardacl@Base 1:9.11.3+dfsg + dns_zone_setidlein@Base 1:9.11.3+dfsg + dns_zone_setidleout@Base 1:9.11.3+dfsg + dns_zone_setisself@Base 1:9.11.3+dfsg + dns_zone_setjournal@Base 1:9.11.3+dfsg + dns_zone_setjournalsize@Base 1:9.11.3+dfsg + dns_zone_setkeydirectory@Base 1:9.11.3+dfsg + dns_zone_setkeyopt@Base 1:9.11.3+dfsg + dns_zone_setmasters@Base 1:9.11.3+dfsg + dns_zone_setmasterswithkeys@Base 1:9.11.3+dfsg + dns_zone_setmaxrecords@Base 1:9.11.3+dfsg + dns_zone_setmaxrefreshtime@Base 1:9.11.3+dfsg + dns_zone_setmaxretrytime@Base 1:9.11.3+dfsg + dns_zone_setmaxttl@Base 1:9.11.3+dfsg + dns_zone_setmaxxfrin@Base 1:9.11.3+dfsg + dns_zone_setmaxxfrout@Base 1:9.11.3+dfsg + dns_zone_setminrefreshtime@Base 1:9.11.3+dfsg + dns_zone_setminretrytime@Base 1:9.11.3+dfsg + dns_zone_setnodes@Base 1:9.11.3+dfsg + dns_zone_setnotifyacl@Base 1:9.11.3+dfsg + dns_zone_setnotifydelay@Base 1:9.11.3+dfsg + dns_zone_setnotifysrc4@Base 1:9.11.3+dfsg + dns_zone_setnotifysrc4dscp@Base 1:9.11.3+dfsg + dns_zone_setnotifysrc6@Base 1:9.11.3+dfsg + dns_zone_setnotifysrc6dscp@Base 1:9.11.3+dfsg + dns_zone_setnotifytype@Base 1:9.11.3+dfsg + dns_zone_setnsec3param@Base 1:9.11.3+dfsg + dns_zone_setoption2@Base 1:9.11.3+dfsg + dns_zone_setoption@Base 1:9.11.3+dfsg + dns_zone_setorigin@Base 1:9.11.3+dfsg + dns_zone_setprivatetype@Base 1:9.11.3+dfsg + dns_zone_setqueryacl@Base 1:9.11.3+dfsg + dns_zone_setqueryonacl@Base 1:9.11.3+dfsg + dns_zone_setrawdata@Base 1:9.11.3+dfsg + dns_zone_setrcvquerystats@Base 1:9.11.3+dfsg + dns_zone_setrefreshkeyinterval@Base 1:9.11.3+dfsg + dns_zone_setrequestexpire@Base 1:9.11.3+dfsg + dns_zone_setrequestixfr@Base 1:9.11.3+dfsg + dns_zone_setrequeststats@Base 1:9.11.3+dfsg + dns_zone_setserial@Base 1:9.11.3+dfsg + dns_zone_setserialupdatemethod@Base 1:9.11.3+dfsg + dns_zone_setsignatures@Base 1:9.11.3+dfsg + dns_zone_setsigresigninginterval@Base 1:9.11.3+dfsg + dns_zone_setsigvalidityinterval@Base 1:9.11.3+dfsg + dns_zone_setssutable@Base 1:9.11.3+dfsg + dns_zone_setstatistics@Base 1:9.11.3+dfsg + dns_zone_setstatlevel@Base 1:9.11.3+dfsg + dns_zone_setstats@Base 1:9.11.3+dfsg + dns_zone_settask@Base 1:9.11.3+dfsg + dns_zone_settype@Base 1:9.11.3+dfsg + dns_zone_setupdateacl@Base 1:9.11.3+dfsg + dns_zone_setupdatedisabled@Base 1:9.11.3+dfsg + dns_zone_setview@Base 1:9.11.3+dfsg + dns_zone_setviewcommit@Base 1:9.11.3+dfsg + dns_zone_setviewrevert@Base 1:9.11.3+dfsg + dns_zone_setxfracl@Base 1:9.11.3+dfsg + dns_zone_setxfrsource4@Base 1:9.11.3+dfsg + dns_zone_setxfrsource4dscp@Base 1:9.11.3+dfsg + dns_zone_setxfrsource6@Base 1:9.11.3+dfsg + dns_zone_setxfrsource6dscp@Base 1:9.11.3+dfsg + dns_zone_setzeronosoattl@Base 1:9.11.3+dfsg + dns_zone_signwithkey@Base 1:9.11.3+dfsg + dns_zone_synckeyzone@Base 1:9.11.3+dfsg + dns_zone_unload@Base 1:9.11.3+dfsg + dns_zonekey_iszonekey@Base 1:9.11.3+dfsg + dns_zonemgr_attach@Base 1:9.11.3+dfsg + dns_zonemgr_create@Base 1:9.11.3+dfsg + dns_zonemgr_createzone@Base 1:9.11.3+dfsg + dns_zonemgr_detach@Base 1:9.11.3+dfsg + dns_zonemgr_forcemaint@Base 1:9.11.3+dfsg + dns_zonemgr_getcount@Base 1:9.11.3+dfsg + dns_zonemgr_getiolimit@Base 1:9.11.3+dfsg + dns_zonemgr_getnotifyrate@Base 1:9.11.3+dfsg + dns_zonemgr_getserialqueryrate@Base 1:9.11.3+dfsg + dns_zonemgr_getstartupnotifyrate@Base 1:9.11.3+dfsg + dns_zonemgr_getttransfersin@Base 1:9.11.3+dfsg + dns_zonemgr_getttransfersperns@Base 1:9.11.3+dfsg + dns_zonemgr_managezone@Base 1:9.11.3+dfsg + dns_zonemgr_releasezone@Base 1:9.11.3+dfsg + dns_zonemgr_resumexfrs@Base 1:9.11.3+dfsg + dns_zonemgr_setiolimit@Base 1:9.11.3+dfsg + dns_zonemgr_setnotifyrate@Base 1:9.11.3+dfsg + dns_zonemgr_setserialqueryrate@Base 1:9.11.3+dfsg + dns_zonemgr_setsize@Base 1:9.11.3+dfsg + dns_zonemgr_setstartupnotifyrate@Base 1:9.11.3+dfsg + dns_zonemgr_settransfersin@Base 1:9.11.3+dfsg + dns_zonemgr_settransfersperns@Base 1:9.11.3+dfsg + dns_zonemgr_shutdown@Base 1:9.11.3+dfsg + dns_zonemgr_unreachable@Base 1:9.11.3+dfsg + dns_zonemgr_unreachableadd@Base 1:9.11.3+dfsg + dns_zonemgr_unreachabledel@Base 1:9.11.3+dfsg + dns_zt_apply2@Base 1:9.11.3+dfsg + dns_zt_apply@Base 1:9.11.3+dfsg + dns_zt_asyncload2@Base 1:9.11.5+dfsg + dns_zt_asyncload@Base 1:9.11.3+dfsg + dns_zt_attach@Base 1:9.11.3+dfsg + dns_zt_create@Base 1:9.11.3+dfsg + dns_zt_detach@Base 1:9.11.3+dfsg + dns_zt_find@Base 1:9.11.3+dfsg + dns_zt_flushanddetach@Base 1:9.11.3+dfsg + dns_zt_freezezones@Base 1:9.11.3+dfsg + dns_zt_load@Base 1:9.11.3+dfsg + dns_zt_loadnew@Base 1:9.11.3+dfsg + dns_zt_mount@Base 1:9.11.3+dfsg + dns_zt_setviewcommit@Base 1:9.11.3+dfsg + dns_zt_setviewrevert@Base 1:9.11.3+dfsg + dns_zt_unmount@Base 1:9.11.3+dfsg + dnstap__dnstap__descriptor@Base 1:9.11.4.P1 + dnstap__dnstap__free_unpacked@Base 1:9.11.4.P1 + dnstap__dnstap__get_packed_size@Base 1:9.11.4.P1 + dnstap__dnstap__init@Base 1:9.11.4.P1 + dnstap__dnstap__pack@Base 1:9.11.4.P1 + dnstap__dnstap__pack_to_buffer@Base 1:9.11.4.P1 + dnstap__dnstap__type__descriptor@Base 1:9.11.4.P1 + dnstap__dnstap__unpack@Base 1:9.11.4.P1 + dnstap__message__descriptor@Base 1:9.11.4.P1 + dnstap__message__free_unpacked@Base 1:9.11.4.P1 + dnstap__message__get_packed_size@Base 1:9.11.4.P1 + dnstap__message__init@Base 1:9.11.4.P1 + dnstap__message__pack@Base 1:9.11.4.P1 + dnstap__message__pack_to_buffer@Base 1:9.11.4.P1 + dnstap__message__type__descriptor@Base 1:9.11.4.P1 + dnstap__message__unpack@Base 1:9.11.4.P1 + dnstap__socket_family__descriptor@Base 1:9.11.4.P1 + dnstap__socket_protocol__descriptor@Base 1:9.11.4.P1 + dst__entropy_getdata@Base 1:9.11.3+dfsg + dst__entropy_status@Base 1:9.11.3+dfsg + dst__gssapi_init@Base 1:9.11.3+dfsg + dst__hmacmd5_init@Base 1:9.11.3+dfsg + dst__hmacsha1_init@Base 1:9.11.3+dfsg + dst__hmacsha224_init@Base 1:9.11.3+dfsg + dst__hmacsha256_init@Base 1:9.11.3+dfsg + dst__hmacsha384_init@Base 1:9.11.3+dfsg + dst__hmacsha512_init@Base 1:9.11.3+dfsg + dst__memory_pool@Base 1:9.11.3+dfsg + dst__pkcs11_toresult@Base 1:9.11.3+dfsg + dst__pkcs11dh_init@Base 1:9.11.3+dfsg + dst__pkcs11dsa_init@Base 1:9.11.3+dfsg + dst__pkcs11ecdsa_init@Base 1:9.11.3+dfsg + dst__pkcs11rsa_init@Base 1:9.11.3+dfsg + dst__privstruct_free@Base 1:9.11.3+dfsg + dst__privstruct_parse@Base 1:9.11.3+dfsg + dst__privstruct_writefile@Base 1:9.11.3+dfsg + dst_algorithm_supported@Base 1:9.11.3+dfsg + dst_context_adddata@Base 1:9.11.3+dfsg + dst_context_create2@Base 1:9.11.3+dfsg + dst_context_create3@Base 1:9.11.3+dfsg + dst_context_create4@Base 1:9.11.3+dfsg + dst_context_create@Base 1:9.11.3+dfsg + dst_context_destroy@Base 1:9.11.3+dfsg + dst_context_sign@Base 1:9.11.3+dfsg + dst_context_verify2@Base 1:9.11.3+dfsg + dst_context_verify@Base 1:9.11.3+dfsg + dst_ds_digest_supported@Base 1:9.11.3+dfsg + dst_gssapi_acceptctx@Base 1:9.11.3+dfsg + dst_gssapi_acquirecred@Base 1:9.11.3+dfsg + dst_gssapi_deletectx@Base 1:9.11.3+dfsg + dst_gssapi_identitymatchesrealmkrb5@Base 1:9.11.3+dfsg + dst_gssapi_identitymatchesrealmms@Base 1:9.11.3+dfsg + dst_gssapi_initctx@Base 1:9.11.3+dfsg + dst_gssapi_releasecred@Base 1:9.11.3+dfsg + dst_key_alg@Base 1:9.11.3+dfsg + dst_key_attach@Base 1:9.11.3+dfsg + dst_key_buildfilename@Base 1:9.11.3+dfsg + dst_key_buildinternal@Base 1:9.11.3+dfsg + dst_key_class@Base 1:9.11.3+dfsg + dst_key_compare@Base 1:9.11.3+dfsg + dst_key_computesecret@Base 1:9.11.3+dfsg + dst_key_dump@Base 1:9.11.3+dfsg + dst_key_flags@Base 1:9.11.3+dfsg + dst_key_format@Base 1:9.11.3+dfsg + dst_key_free@Base 1:9.11.3+dfsg + dst_key_frombuffer@Base 1:9.11.3+dfsg + dst_key_fromdns@Base 1:9.11.3+dfsg + dst_key_fromfile@Base 1:9.11.3+dfsg + dst_key_fromgssapi@Base 1:9.11.3+dfsg + dst_key_fromlabel@Base 1:9.11.3+dfsg + dst_key_fromnamedfile@Base 1:9.11.3+dfsg + dst_key_generate2@Base 1:9.11.3+dfsg + dst_key_generate@Base 1:9.11.3+dfsg + dst_key_getbits@Base 1:9.11.3+dfsg + dst_key_getfilename@Base 1:9.11.3+dfsg + dst_key_getgssctx@Base 1:9.11.3+dfsg + dst_key_getnum@Base 1:9.11.3+dfsg + dst_key_getprivateformat@Base 1:9.11.3+dfsg + dst_key_gettime@Base 1:9.11.3+dfsg + dst_key_getttl@Base 1:9.11.3+dfsg + dst_key_id@Base 1:9.11.3+dfsg + dst_key_inactive@Base 1:9.11.3+dfsg + dst_key_isexternal@Base 1:9.11.3+dfsg + dst_key_isnullkey@Base 1:9.11.3+dfsg + dst_key_isprivate@Base 1:9.11.3+dfsg + dst_key_iszonekey@Base 1:9.11.3+dfsg + dst_key_name@Base 1:9.11.3+dfsg + dst_key_paramcompare@Base 1:9.11.3+dfsg + dst_key_privatefrombuffer@Base 1:9.11.3+dfsg + dst_key_proto@Base 1:9.11.3+dfsg + dst_key_pubcompare@Base 1:9.11.3+dfsg + dst_key_read_public@Base 1:9.11.3+dfsg + dst_key_restore@Base 1:9.11.3+dfsg + dst_key_rid@Base 1:9.11.3+dfsg + dst_key_secretsize@Base 1:9.11.3+dfsg + dst_key_setbits@Base 1:9.11.3+dfsg + dst_key_setexternal@Base 1:9.11.3+dfsg + dst_key_setflags@Base 1:9.11.3+dfsg + dst_key_setinactive@Base 1:9.11.3+dfsg + dst_key_setnum@Base 1:9.11.3+dfsg + dst_key_setprivateformat@Base 1:9.11.3+dfsg + dst_key_settime@Base 1:9.11.3+dfsg + dst_key_setttl@Base 1:9.11.3+dfsg + dst_key_sigsize@Base 1:9.11.3+dfsg + dst_key_size@Base 1:9.11.3+dfsg + dst_key_tkeytoken@Base 1:9.11.3+dfsg + dst_key_tobuffer@Base 1:9.11.3+dfsg + dst_key_todns@Base 1:9.11.3+dfsg + dst_key_tofile@Base 1:9.11.3+dfsg + dst_key_unsetnum@Base 1:9.11.3+dfsg + dst_key_unsettime@Base 1:9.11.3+dfsg + dst_lib_destroy@Base 1:9.11.3+dfsg + dst_lib_init2@Base 1:9.11.3+dfsg + dst_lib_init@Base 1:9.11.3+dfsg + dst_lib_initmsgcat@Base 1:9.11.3+dfsg + dst_msgcat@Base 1:9.11.3+dfsg + dst_region_computeid@Base 1:9.11.3+dfsg + dst_region_computerid@Base 1:9.11.3+dfsg + dst_result_register@Base 1:9.11.3+dfsg + dst_result_totext@Base 1:9.11.3+dfsg + gss_error_tostring@Base 1:9.11.3+dfsg + gss_log@Base 1:9.11.3+dfsg + isc__rdatalist_addclosest@Base 1:9.11.3+dfsg + isc__rdatalist_addnoqname@Base 1:9.11.3+dfsg + isc__rdatalist_clone@Base 1:9.11.3+dfsg + isc__rdatalist_count@Base 1:9.11.3+dfsg + isc__rdatalist_current@Base 1:9.11.3+dfsg + isc__rdatalist_disassociate@Base 1:9.11.3+dfsg + isc__rdatalist_first@Base 1:9.11.3+dfsg + isc__rdatalist_getclosest@Base 1:9.11.3+dfsg + isc__rdatalist_getnoqname@Base 1:9.11.3+dfsg + isc__rdatalist_getownercase@Base 1:9.11.3+dfsg + isc__rdatalist_next@Base 1:9.11.3+dfsg + isc__rdatalist_setownercase@Base 1:9.11.3+dfsg + ishex@Base 1:9.11.3+dfsg +libdns.so.1104 libdns1104 #MINVER# + dns__rbt_checkproperties@Base 1:9.11.3+dfsg + dns__rbt_getheight@Base 1:9.11.3+dfsg + dns__rbtnode_getdistance@Base 1:9.11.3+dfsg + dns__zone_findkeys@Base 1:9.11.4+dfsg + dns__zone_loadpending@Base 1:9.11.3+dfsg + dns__zone_updatesigs@Base 1:9.11.4+dfsg + dns_acache_attach@Base 1:9.11.3+dfsg + dns_acache_attachentry@Base 1:9.11.3+dfsg + dns_acache_cancelentry@Base 1:9.11.3+dfsg + dns_acache_countquerymiss@Base 1:9.11.3+dfsg + dns_acache_create@Base 1:9.11.3+dfsg + dns_acache_createentry@Base 1:9.11.3+dfsg + dns_acache_detach@Base 1:9.11.3+dfsg + dns_acache_detachentry@Base 1:9.11.3+dfsg + dns_acache_getentry@Base 1:9.11.3+dfsg + dns_acache_putdb@Base 1:9.11.3+dfsg + dns_acache_setcachesize@Base 1:9.11.3+dfsg + dns_acache_setcleaninginterval@Base 1:9.11.3+dfsg + dns_acache_setdb@Base 1:9.11.3+dfsg + dns_acache_setentry@Base 1:9.11.3+dfsg + dns_acache_shutdown@Base 1:9.11.3+dfsg + dns_acl_any@Base 1:9.11.3+dfsg + dns_acl_attach@Base 1:9.11.3+dfsg + dns_acl_create@Base 1:9.11.3+dfsg + dns_acl_detach@Base 1:9.11.3+dfsg + dns_acl_isany@Base 1:9.11.3+dfsg + dns_acl_isinsecure@Base 1:9.11.3+dfsg + dns_acl_isnone@Base 1:9.11.3+dfsg + dns_acl_match2@Base 1:9.11.3+dfsg + dns_acl_match@Base 1:9.11.3+dfsg + dns_acl_merge@Base 1:9.11.3+dfsg + dns_acl_none@Base 1:9.11.3+dfsg + dns_aclelement_match2@Base 1:9.11.3+dfsg + dns_aclelement_match@Base 1:9.11.3+dfsg + dns_aclenv_copy@Base 1:9.11.3+dfsg + dns_aclenv_destroy@Base 1:9.11.3+dfsg + dns_aclenv_init@Base 1:9.11.3+dfsg + dns_adb_adjustsrtt@Base 1:9.11.3+dfsg + dns_adb_agesrtt@Base 1:9.11.3+dfsg + dns_adb_attach@Base 1:9.11.3+dfsg + dns_adb_beginudpfetch@Base 1:9.11.3+dfsg + dns_adb_cancelfind@Base 1:9.11.3+dfsg + dns_adb_changeflags@Base 1:9.11.3+dfsg + dns_adb_create@Base 1:9.11.3+dfsg + dns_adb_createfind2@Base 1:9.11.3+dfsg + dns_adb_createfind@Base 1:9.11.3+dfsg + dns_adb_destroyfind@Base 1:9.11.3+dfsg + dns_adb_detach@Base 1:9.11.3+dfsg + dns_adb_dump@Base 1:9.11.3+dfsg + dns_adb_dumpfind@Base 1:9.11.3+dfsg + dns_adb_ednsto@Base 1:9.11.3+dfsg + dns_adb_endudpfetch@Base 1:9.11.3+dfsg + dns_adb_findaddrinfo@Base 1:9.11.3+dfsg + dns_adb_flush@Base 1:9.11.3+dfsg + dns_adb_flushname@Base 1:9.11.3+dfsg + dns_adb_flushnames@Base 1:9.11.3+dfsg + dns_adb_freeaddrinfo@Base 1:9.11.3+dfsg + dns_adb_getcookie@Base 1:9.11.3+dfsg + dns_adb_getudpsize@Base 1:9.11.3+dfsg + dns_adb_marklame@Base 1:9.11.3+dfsg + dns_adb_noedns@Base 1:9.11.3+dfsg + dns_adb_plainresponse@Base 1:9.11.3+dfsg + dns_adb_probesize2@Base 1:9.11.3+dfsg + dns_adb_probesize@Base 1:9.11.3+dfsg + dns_adb_setadbsize@Base 1:9.11.3+dfsg + dns_adb_setcookie@Base 1:9.11.3+dfsg + dns_adb_setquota@Base 1:9.11.3+dfsg + dns_adb_setudpsize@Base 1:9.11.3+dfsg + dns_adb_shutdown@Base 1:9.11.3+dfsg + dns_adb_timeout@Base 1:9.11.3+dfsg + dns_adb_whenshutdown@Base 1:9.11.3+dfsg + dns_adbentry_overquota@Base 1:9.11.3+dfsg + dns_badcache_add@Base 1:9.11.3+dfsg + dns_badcache_destroy@Base 1:9.11.3+dfsg + dns_badcache_find@Base 1:9.11.3+dfsg + dns_badcache_flush@Base 1:9.11.3+dfsg + dns_badcache_flushname@Base 1:9.11.3+dfsg + dns_badcache_flushtree@Base 1:9.11.3+dfsg + dns_badcache_init@Base 1:9.11.3+dfsg + dns_badcache_print@Base 1:9.11.3+dfsg + dns_byaddr_cancel@Base 1:9.11.3+dfsg + dns_byaddr_create@Base 1:9.11.3+dfsg + dns_byaddr_createptrname2@Base 1:9.11.3+dfsg + dns_byaddr_createptrname@Base 1:9.11.3+dfsg + dns_byaddr_destroy@Base 1:9.11.3+dfsg + dns_cache_attach@Base 1:9.11.3+dfsg + dns_cache_attachdb@Base 1:9.11.3+dfsg + dns_cache_clean@Base 1:9.11.3+dfsg + dns_cache_create2@Base 1:9.11.3+dfsg + dns_cache_create3@Base 1:9.11.3+dfsg + dns_cache_create@Base 1:9.11.3+dfsg + dns_cache_detach@Base 1:9.11.3+dfsg + dns_cache_dump@Base 1:9.11.3+dfsg + dns_cache_dumpstats@Base 1:9.11.3+dfsg + dns_cache_flush@Base 1:9.11.3+dfsg + dns_cache_flushname@Base 1:9.11.3+dfsg + dns_cache_flushnode@Base 1:9.11.3+dfsg + dns_cache_getcachesize@Base 1:9.11.3+dfsg + dns_cache_getcleaninginterval@Base 1:9.11.3+dfsg + dns_cache_getname@Base 1:9.11.3+dfsg + dns_cache_getstats@Base 1:9.11.3+dfsg + dns_cache_load@Base 1:9.11.3+dfsg + dns_cache_renderjson@Base 1:9.11.3+dfsg + dns_cache_renderxml@Base 1:9.11.3+dfsg + dns_cache_setcachesize@Base 1:9.11.3+dfsg + dns_cache_setcleaninginterval@Base 1:9.11.3+dfsg + dns_cache_setfilename@Base 1:9.11.3+dfsg + dns_cache_updatestats@Base 1:9.11.3+dfsg + dns_categories@Base 1:9.11.3+dfsg + dns_catz_add_zone@Base 1:9.11.3+dfsg + dns_catz_catzs_attach@Base 1:9.11.3+dfsg + dns_catz_catzs_detach@Base 1:9.11.3+dfsg + dns_catz_catzs_set_view@Base 1:9.11.3+dfsg + dns_catz_dbupdate_callback@Base 1:9.11.3+dfsg + dns_catz_entry_attach@Base 1:9.11.3+dfsg + dns_catz_entry_cmp@Base 1:9.11.3+dfsg + dns_catz_entry_copy@Base 1:9.11.3+dfsg + dns_catz_entry_detach@Base 1:9.11.3+dfsg + dns_catz_entry_getname@Base 1:9.11.3+dfsg + dns_catz_entry_new@Base 1:9.11.3+dfsg + dns_catz_entry_validate@Base 1:9.11.3+dfsg + dns_catz_generate_masterfilename@Base 1:9.11.3+dfsg + dns_catz_generate_zonecfg@Base 1:9.11.3+dfsg + dns_catz_get_iterator@Base 1:9.11.3+dfsg + dns_catz_get_zone@Base 1:9.11.3+dfsg + dns_catz_new_zone@Base 1:9.11.3+dfsg + dns_catz_new_zones@Base 1:9.11.3+dfsg + dns_catz_options_copy@Base 1:9.11.3+dfsg + dns_catz_options_free@Base 1:9.11.3+dfsg + dns_catz_options_init@Base 1:9.11.3+dfsg + dns_catz_options_setdefault@Base 1:9.11.3+dfsg + dns_catz_postreconfig@Base 1:9.11.3+dfsg + dns_catz_prereconfig@Base 1:9.11.3+dfsg + dns_catz_update_from_db@Base 1:9.11.3+dfsg + dns_catz_update_process@Base 1:9.11.3+dfsg + dns_catz_update_taskaction@Base 1:9.11.3+dfsg + dns_catz_zone_attach@Base 1:9.11.3+dfsg + dns_catz_zone_detach@Base 1:9.11.3+dfsg + dns_catz_zone_getdefoptions@Base 1:9.11.3+dfsg + dns_catz_zone_getname@Base 1:9.11.3+dfsg + dns_catz_zone_resetdefoptions@Base 1:9.11.3+dfsg + dns_catz_zones_merge@Base 1:9.11.3+dfsg + dns_cert_fromtext@Base 1:9.11.3+dfsg + dns_cert_totext@Base 1:9.11.3+dfsg + dns_client_addtrustedkey@Base 1:9.11.3+dfsg + dns_client_cancelrequest@Base 1:9.11.3+dfsg + dns_client_cancelresolve@Base 1:9.11.3+dfsg + dns_client_cancelupdate@Base 1:9.11.3+dfsg + dns_client_clearservers@Base 1:9.11.3+dfsg + dns_client_create@Base 1:9.11.3+dfsg + dns_client_createx2@Base 1:9.11.3+dfsg + dns_client_createx@Base 1:9.11.3+dfsg + dns_client_destroy@Base 1:9.11.3+dfsg + dns_client_destroyreqtrans@Base 1:9.11.3+dfsg + dns_client_destroyrestrans@Base 1:9.11.3+dfsg + dns_client_destroyupdatetrans@Base 1:9.11.3+dfsg + dns_client_freeresanswer@Base 1:9.11.3+dfsg + dns_client_freeupdate@Base 1:9.11.3+dfsg + dns_client_mctx@Base 1:9.11.3+dfsg + dns_client_request@Base 1:9.11.3+dfsg + dns_client_resolve@Base 1:9.11.3+dfsg + dns_client_setdlv@Base 1:9.11.3+dfsg + dns_client_setservers@Base 1:9.11.3+dfsg + dns_client_startrequest@Base 1:9.11.3+dfsg + dns_client_startresolve@Base 1:9.11.3+dfsg + dns_client_startupdate@Base 1:9.11.3+dfsg + dns_client_update@Base 1:9.11.3+dfsg + dns_client_updaterec@Base 1:9.11.3+dfsg + dns_clientinfo_init@Base 1:9.11.3+dfsg + dns_clientinfomethods_init@Base 1:9.11.3+dfsg + dns_compress_add@Base 1:9.11.3+dfsg + dns_compress_disable@Base 1:9.11.3+dfsg + dns_compress_findglobal@Base 1:9.11.3+dfsg + dns_compress_getedns@Base 1:9.11.3+dfsg + dns_compress_getmethods@Base 1:9.11.3+dfsg + dns_compress_getsensitive@Base 1:9.11.3+dfsg + dns_compress_init@Base 1:9.11.3+dfsg + dns_compress_invalidate@Base 1:9.11.3+dfsg + dns_compress_rollback@Base 1:9.11.3+dfsg + dns_compress_setmethods@Base 1:9.11.3+dfsg + dns_compress_setsensitive@Base 1:9.11.3+dfsg + dns_counter_fromtext@Base 1:9.11.3+dfsg + dns_db_addrdataset@Base 1:9.11.3+dfsg + dns_db_allrdatasets@Base 1:9.11.3+dfsg + dns_db_attach@Base 1:9.11.3+dfsg + dns_db_attachnode@Base 1:9.11.3+dfsg + dns_db_attachversion@Base 1:9.11.3+dfsg + dns_db_beginload@Base 1:9.11.3+dfsg + dns_db_class@Base 1:9.11.3+dfsg + dns_db_closeversion@Base 1:9.11.3+dfsg + dns_db_create@Base 1:9.11.3+dfsg + dns_db_createiterator@Base 1:9.11.3+dfsg + dns_db_createsoatuple@Base 1:9.11.3+dfsg + dns_db_currentversion@Base 1:9.11.3+dfsg + dns_db_deleterdataset@Base 1:9.11.3+dfsg + dns_db_detach@Base 1:9.11.3+dfsg + dns_db_detachnode@Base 1:9.11.3+dfsg + dns_db_diff@Base 1:9.11.3+dfsg + dns_db_diffx@Base 1:9.11.3+dfsg + dns_db_dump2@Base 1:9.11.3+dfsg + dns_db_dump@Base 1:9.11.3+dfsg + dns_db_endload@Base 1:9.11.3+dfsg + dns_db_expirenode@Base 1:9.11.3+dfsg + dns_db_find@Base 1:9.11.3+dfsg + dns_db_findext@Base 1:9.11.3+dfsg + dns_db_findnode@Base 1:9.11.3+dfsg + dns_db_findnodeext@Base 1:9.11.3+dfsg + dns_db_findnsec3node@Base 1:9.11.3+dfsg + dns_db_findrdataset@Base 1:9.11.3+dfsg + dns_db_findzonecut@Base 1:9.11.3+dfsg + dns_db_getnsec3parameters@Base 1:9.11.3+dfsg + dns_db_getoriginnode@Base 1:9.11.3+dfsg + dns_db_getrrsetstats@Base 1:9.11.3+dfsg + dns_db_getsigningtime@Base 1:9.11.3+dfsg + dns_db_getsize@Base 1:9.11.3+dfsg + dns_db_getsoaserial@Base 1:9.11.3+dfsg + dns_db_hashsize@Base 1:9.11.3+dfsg + dns_db_iscache@Base 1:9.11.3+dfsg + dns_db_isdnssec@Base 1:9.11.3+dfsg + dns_db_ispersistent@Base 1:9.11.3+dfsg + dns_db_issecure@Base 1:9.11.3+dfsg + dns_db_isstub@Base 1:9.11.3+dfsg + dns_db_iszone@Base 1:9.11.3+dfsg + dns_db_load2@Base 1:9.11.3+dfsg + dns_db_load3@Base 1:9.11.3+dfsg + dns_db_load@Base 1:9.11.3+dfsg + dns_db_newversion@Base 1:9.11.3+dfsg + dns_db_nodecount@Base 1:9.11.3+dfsg + dns_db_nodefullname@Base 1:9.11.3+dfsg + dns_db_ondestroy@Base 1:9.11.3+dfsg + dns_db_origin@Base 1:9.11.3+dfsg + dns_db_overmem@Base 1:9.11.3+dfsg + dns_db_printnode@Base 1:9.11.3+dfsg + dns_db_register@Base 1:9.11.3+dfsg + dns_db_resigned@Base 1:9.11.3+dfsg + dns_db_rpz_attach@Base 1:9.11.3+dfsg + dns_db_rpz_ready@Base 1:9.11.3+dfsg + dns_db_serialize@Base 1:9.11.3+dfsg + dns_db_setcachestats@Base 1:9.11.3+dfsg + dns_db_setsigningtime@Base 1:9.11.3+dfsg + dns_db_settask@Base 1:9.11.3+dfsg + dns_db_subtractrdataset@Base 1:9.11.3+dfsg + dns_db_transfernode@Base 1:9.11.3+dfsg + dns_db_unregister@Base 1:9.11.3+dfsg + dns_db_updatenotify_register@Base 1:9.11.3+dfsg + dns_db_updatenotify_unregister@Base 1:9.11.3+dfsg + dns_dbiterator_current@Base 1:9.11.3+dfsg + dns_dbiterator_destroy@Base 1:9.11.3+dfsg + dns_dbiterator_first@Base 1:9.11.3+dfsg + dns_dbiterator_last@Base 1:9.11.3+dfsg + dns_dbiterator_next@Base 1:9.11.3+dfsg + dns_dbiterator_origin@Base 1:9.11.3+dfsg + dns_dbiterator_pause@Base 1:9.11.3+dfsg + dns_dbiterator_prev@Base 1:9.11.3+dfsg + dns_dbiterator_seek@Base 1:9.11.3+dfsg + dns_dbiterator_setcleanmode@Base 1:9.11.3+dfsg + dns_dbtable_add@Base 1:9.11.3+dfsg + dns_dbtable_adddefault@Base 1:9.11.3+dfsg + dns_dbtable_attach@Base 1:9.11.3+dfsg + dns_dbtable_create@Base 1:9.11.3+dfsg + dns_dbtable_detach@Base 1:9.11.3+dfsg + dns_dbtable_find@Base 1:9.11.3+dfsg + dns_dbtable_getdefault@Base 1:9.11.3+dfsg + dns_dbtable_remove@Base 1:9.11.3+dfsg + dns_dbtable_removedefault@Base 1:9.11.3+dfsg + dns_decompress_edns@Base 1:9.11.3+dfsg + dns_decompress_getmethods@Base 1:9.11.3+dfsg + dns_decompress_init@Base 1:9.11.3+dfsg + dns_decompress_invalidate@Base 1:9.11.3+dfsg + dns_decompress_setmethods@Base 1:9.11.3+dfsg + dns_decompress_type@Base 1:9.11.3+dfsg + dns_diff_append@Base 1:9.11.3+dfsg + dns_diff_appendminimal@Base 1:9.11.3+dfsg + dns_diff_apply@Base 1:9.11.3+dfsg + dns_diff_applysilently@Base 1:9.11.3+dfsg + dns_diff_clear@Base 1:9.11.3+dfsg + dns_diff_init@Base 1:9.11.3+dfsg + dns_diff_load@Base 1:9.11.3+dfsg + dns_diff_print@Base 1:9.11.3+dfsg + dns_diff_sort@Base 1:9.11.3+dfsg + dns_difftuple_copy@Base 1:9.11.3+dfsg + dns_difftuple_create@Base 1:9.11.3+dfsg + dns_difftuple_free@Base 1:9.11.3+dfsg + dns_dispatch_addresponse2@Base 1:9.11.3+dfsg + dns_dispatch_addresponse3@Base 1:9.11.3+dfsg + dns_dispatch_addresponse@Base 1:9.11.3+dfsg + dns_dispatch_attach@Base 1:9.11.3+dfsg + dns_dispatch_cancel@Base 1:9.11.3+dfsg + dns_dispatch_changeattributes@Base 1:9.11.3+dfsg + dns_dispatch_createtcp2@Base 1:9.11.3+dfsg + dns_dispatch_createtcp@Base 1:9.11.3+dfsg + dns_dispatch_detach@Base 1:9.11.3+dfsg + dns_dispatch_getattributes@Base 1:9.11.3+dfsg + dns_dispatch_getdscp@Base 1:9.11.3+dfsg + dns_dispatch_getentrysocket@Base 1:9.11.3+dfsg + dns_dispatch_getlocaladdress@Base 1:9.11.3+dfsg + dns_dispatch_getnext@Base 1:9.11.3+dfsg + dns_dispatch_getsocket@Base 1:9.11.3+dfsg + dns_dispatch_gettcp2@Base 1:9.11.3+dfsg + dns_dispatch_gettcp@Base 1:9.11.3+dfsg + dns_dispatch_getudp@Base 1:9.11.3+dfsg + dns_dispatch_getudp_dup@Base 1:9.11.3+dfsg + dns_dispatch_importrecv@Base 1:9.11.3+dfsg + dns_dispatch_removeresponse@Base 1:9.11.3+dfsg + dns_dispatch_setdscp@Base 1:9.11.3+dfsg + dns_dispatch_starttcp@Base 1:9.11.3+dfsg + dns_dispatchmgr_create@Base 1:9.11.3+dfsg + dns_dispatchmgr_destroy@Base 1:9.11.3+dfsg + dns_dispatchmgr_getblackhole@Base 1:9.11.3+dfsg + dns_dispatchmgr_getblackportlist@Base 1:9.11.3+dfsg + dns_dispatchmgr_setavailports@Base 1:9.11.3+dfsg + dns_dispatchmgr_setblackhole@Base 1:9.11.3+dfsg + dns_dispatchmgr_setblackportlist@Base 1:9.11.3+dfsg + dns_dispatchmgr_setstats@Base 1:9.11.3+dfsg + dns_dispatchset_cancelall@Base 1:9.11.3+dfsg + dns_dispatchset_create@Base 1:9.11.3+dfsg + dns_dispatchset_destroy@Base 1:9.11.3+dfsg + dns_dispatchset_get@Base 1:9.11.3+dfsg + dns_dlz_ssumatch@Base 1:9.11.3+dfsg + dns_dlz_writeablezone@Base 1:9.11.3+dfsg + dns_dlzallowzonexfr@Base 1:9.11.3+dfsg + dns_dlzconfigure@Base 1:9.11.3+dfsg + dns_dlzcreate@Base 1:9.11.3+dfsg + dns_dlzdestroy@Base 1:9.11.3+dfsg + dns_dlzregister@Base 1:9.11.3+dfsg + dns_dlzstrtoargv@Base 1:9.11.3+dfsg + dns_dlzunregister@Base 1:9.11.3+dfsg + dns_dns64_aaaafroma@Base 1:9.11.3+dfsg + dns_dns64_aaaaok@Base 1:9.11.3+dfsg + dns_dns64_append@Base 1:9.11.3+dfsg + dns_dns64_create@Base 1:9.11.3+dfsg + dns_dns64_destroy@Base 1:9.11.3+dfsg + dns_dns64_next@Base 1:9.11.3+dfsg + dns_dns64_unlink@Base 1:9.11.3+dfsg + dns_dnssec_findmatchingkeys2@Base 1:9.11.3+dfsg + dns_dnssec_findmatchingkeys@Base 1:9.11.3+dfsg + dns_dnssec_findzonekeys2@Base 1:9.11.3+dfsg + dns_dnssec_findzonekeys3@Base 1:9.11.3+dfsg + dns_dnssec_findzonekeys@Base 1:9.11.3+dfsg + dns_dnssec_keyactive@Base 1:9.11.3+dfsg + dns_dnssec_keyfromrdata@Base 1:9.11.3+dfsg + dns_dnssec_keylistfromrdataset@Base 1:9.11.3+dfsg + dns_dnssec_selfsigns@Base 1:9.11.3+dfsg + dns_dnssec_sign@Base 1:9.11.3+dfsg + dns_dnssec_signmessage@Base 1:9.11.3+dfsg + dns_dnssec_signs@Base 1:9.11.3+dfsg + dns_dnssec_stats@Base 1:9.11.3+dfsg + dns_dnssec_syncupdate@Base 1:9.11.3+dfsg + dns_dnssec_updatekeys@Base 1:9.11.3+dfsg + dns_dnssec_verify2@Base 1:9.11.3+dfsg + dns_dnssec_verify3@Base 1:9.11.3+dfsg + dns_dnssec_verify@Base 1:9.11.3+dfsg + dns_dnssec_verifymessage@Base 1:9.11.3+dfsg + dns_dnsseckey_create@Base 1:9.11.3+dfsg + dns_dnsseckey_destroy@Base 1:9.11.3+dfsg + dns_ds_buildrdata@Base 1:9.11.3+dfsg + dns_dsdigest_format@Base 1:9.11.3+dfsg + dns_dsdigest_fromtext@Base 1:9.11.3+dfsg + dns_dsdigest_totext@Base 1:9.11.3+dfsg + dns_dt_attach@Base 1:9.11.4.P1 + dns_dt_close@Base 1:9.11.4.P1 + dns_dt_create@Base 1:9.11.4.P1 + dns_dt_datatotext@Base 1:9.11.4.P1 + dns_dt_detach@Base 1:9.11.4.P1 + dns_dt_getframe@Base 1:9.11.4.P1 + dns_dt_getstats@Base 1:9.11.4.P1 + dns_dt_open@Base 1:9.11.4.P1 + dns_dt_parse@Base 1:9.11.4.P1 + dns_dt_reopen@Base 1:9.11.4.P1 + dns_dt_send@Base 1:9.11.4.P1 + dns_dt_setidentity@Base 1:9.11.4.P1 + dns_dt_setversion@Base 1:9.11.4.P1 + dns_dt_shutdown@Base 1:9.11.4.P1 + dns_dtdata_free@Base 1:9.11.4.P1 + dns_dumpctx_attach@Base 1:9.11.3+dfsg + dns_dumpctx_cancel@Base 1:9.11.3+dfsg + dns_dumpctx_db@Base 1:9.11.3+dfsg + dns_dumpctx_detach@Base 1:9.11.3+dfsg + dns_dumpctx_version@Base 1:9.11.3+dfsg + dns_dyndb_cleanup@Base 1:9.11.3+dfsg + dns_dyndb_createctx@Base 1:9.11.3+dfsg + dns_dyndb_destroyctx@Base 1:9.11.3+dfsg + dns_dyndb_load@Base 1:9.11.3+dfsg + dns_ecdb_register@Base 1:9.11.3+dfsg + dns_ecdb_unregister@Base 1:9.11.3+dfsg + dns_fixedname_init@Base 1:9.11.4+dfsg + dns_fixedname_initname@Base 1:9.11.4+dfsg + dns_fixedname_invalidate@Base 1:9.11.4+dfsg + dns_fixedname_name@Base 1:9.11.4+dfsg + dns_fullname_hash@Base 1:9.11.3+dfsg + dns_fwdtable_add@Base 1:9.11.3+dfsg + dns_fwdtable_addfwd@Base 1:9.11.3+dfsg + dns_fwdtable_create@Base 1:9.11.3+dfsg + dns_fwdtable_delete@Base 1:9.11.3+dfsg + dns_fwdtable_destroy@Base 1:9.11.3+dfsg + dns_fwdtable_find2@Base 1:9.11.3+dfsg + dns_fwdtable_find@Base 1:9.11.3+dfsg + dns_generalstats_create@Base 1:9.11.3+dfsg + dns_generalstats_dump@Base 1:9.11.3+dfsg + dns_generalstats_increment@Base 1:9.11.3+dfsg + dns_geoip_match@Base 1:9.11.3+dfsg + dns_geoip_shutdown@Base 1:9.11.3+dfsg + dns_hashalg_fromtext@Base 1:9.11.3+dfsg + dns_ipkeylist_clear@Base 1:9.11.3+dfsg + dns_ipkeylist_copy@Base 1:9.11.3+dfsg + dns_ipkeylist_init@Base 1:9.11.3+dfsg + dns_ipkeylist_resize@Base 1:9.11.3+dfsg + dns_iptable_addprefix2@Base 1:9.11.3+dfsg + dns_iptable_addprefix@Base 1:9.11.3+dfsg + dns_iptable_attach@Base 1:9.11.3+dfsg + dns_iptable_create@Base 1:9.11.3+dfsg + dns_iptable_detach@Base 1:9.11.3+dfsg + dns_iptable_merge@Base 1:9.11.3+dfsg + dns_journal_begin_transaction@Base 1:9.11.3+dfsg + dns_journal_commit@Base 1:9.11.3+dfsg + dns_journal_compact@Base 1:9.11.3+dfsg + dns_journal_current_rr@Base 1:9.11.3+dfsg + dns_journal_destroy@Base 1:9.11.3+dfsg + dns_journal_first_rr@Base 1:9.11.3+dfsg + dns_journal_first_serial@Base 1:9.11.3+dfsg + dns_journal_get_sourceserial@Base 1:9.11.3+dfsg + dns_journal_iter_init@Base 1:9.11.3+dfsg + dns_journal_last_serial@Base 1:9.11.3+dfsg + dns_journal_next_rr@Base 1:9.11.3+dfsg + dns_journal_open@Base 1:9.11.3+dfsg + dns_journal_print@Base 1:9.11.3+dfsg + dns_journal_rollforward@Base 1:9.11.3+dfsg + dns_journal_set_sourceserial@Base 1:9.11.3+dfsg + dns_journal_write_transaction@Base 1:9.11.3+dfsg + dns_journal_writediff@Base 1:9.11.3+dfsg + dns_keydata_fromdnskey@Base 1:9.11.3+dfsg + dns_keydata_todnskey@Base 1:9.11.3+dfsg + dns_keyflags_fromtext@Base 1:9.11.3+dfsg + dns_keynode_attach@Base 1:9.11.3+dfsg + dns_keynode_create@Base 1:9.11.3+dfsg + dns_keynode_detach@Base 1:9.11.3+dfsg + dns_keynode_detachall@Base 1:9.11.3+dfsg + dns_keynode_key@Base 1:9.11.3+dfsg + dns_keynode_managed@Base 1:9.11.3+dfsg + dns_keyring_restore@Base 1:9.11.3+dfsg + dns_keytable_add@Base 1:9.11.3+dfsg + dns_keytable_attach@Base 1:9.11.3+dfsg + dns_keytable_attachkeynode@Base 1:9.11.3+dfsg + dns_keytable_create@Base 1:9.11.3+dfsg + dns_keytable_delete@Base 1:9.11.3+dfsg + dns_keytable_deletekeynode@Base 1:9.11.3+dfsg + dns_keytable_detach@Base 1:9.11.3+dfsg + dns_keytable_detachkeynode@Base 1:9.11.3+dfsg + dns_keytable_dump@Base 1:9.11.3+dfsg + dns_keytable_find@Base 1:9.11.3+dfsg + dns_keytable_finddeepestmatch@Base 1:9.11.3+dfsg + dns_keytable_findkeynode@Base 1:9.11.3+dfsg + dns_keytable_findnextkeynode@Base 1:9.11.3+dfsg + dns_keytable_forall@Base 1:9.11.3+dfsg + dns_keytable_issecuredomain@Base 1:9.11.3+dfsg + dns_keytable_marksecure@Base 1:9.11.3+dfsg + dns_keytable_nextkeynode@Base 1:9.11.3+dfsg + dns_keytable_totext@Base 1:9.11.3+dfsg + dns_lctx@Base 1:9.11.3+dfsg + dns_lib_init@Base 1:9.11.3+dfsg + dns_lib_initmsgcat@Base 1:9.11.3+dfsg + dns_lib_shutdown@Base 1:9.11.3+dfsg + dns_libage@Base 1:9.11.3+dfsg + dns_libinterface@Base 1:9.11.3+dfsg + dns_librevision@Base 1:9.11.3+dfsg + dns_loadctx_attach@Base 1:9.11.3+dfsg + dns_loadctx_cancel@Base 1:9.11.3+dfsg + dns_loadctx_detach@Base 1:9.11.3+dfsg + dns_log_init@Base 1:9.11.3+dfsg + dns_log_setcontext@Base 1:9.11.3+dfsg + dns_lookup_cancel@Base 1:9.11.3+dfsg + dns_lookup_create@Base 1:9.11.3+dfsg + dns_lookup_destroy@Base 1:9.11.3+dfsg + dns_major@Base 1:9.11.3+dfsg + dns_mapapi@Base 1:9.11.3+dfsg + dns_master_dump2@Base 1:9.11.3+dfsg + dns_master_dump3@Base 1:9.11.3+dfsg + dns_master_dump@Base 1:9.11.3+dfsg + dns_master_dumpinc2@Base 1:9.11.3+dfsg + dns_master_dumpinc3@Base 1:9.11.3+dfsg + dns_master_dumpinc@Base 1:9.11.3+dfsg + dns_master_dumpnode@Base 1:9.11.3+dfsg + dns_master_dumpnodetostream@Base 1:9.11.3+dfsg + dns_master_dumptostream2@Base 1:9.11.3+dfsg + dns_master_dumptostream3@Base 1:9.11.3+dfsg + dns_master_dumptostream@Base 1:9.11.3+dfsg + dns_master_dumptostreaminc@Base 1:9.11.3+dfsg + dns_master_indent@Base 1:9.11.3+dfsg + dns_master_indentstr@Base 1:9.11.3+dfsg + dns_master_initrawheader@Base 1:9.11.3+dfsg + dns_master_loadbuffer@Base 1:9.11.3+dfsg + dns_master_loadbufferinc@Base 1:9.11.3+dfsg + dns_master_loadfile2@Base 1:9.11.3+dfsg + dns_master_loadfile3@Base 1:9.11.3+dfsg + dns_master_loadfile4@Base 1:9.11.3+dfsg + dns_master_loadfile5@Base 1:9.11.3+dfsg + dns_master_loadfile@Base 1:9.11.3+dfsg + dns_master_loadfileinc2@Base 1:9.11.3+dfsg + dns_master_loadfileinc3@Base 1:9.11.3+dfsg + dns_master_loadfileinc4@Base 1:9.11.3+dfsg + dns_master_loadfileinc5@Base 1:9.11.3+dfsg + dns_master_loadfileinc@Base 1:9.11.3+dfsg + dns_master_loadlexer@Base 1:9.11.3+dfsg + dns_master_loadlexerinc@Base 1:9.11.3+dfsg + dns_master_loadstream@Base 1:9.11.3+dfsg + dns_master_loadstreaminc@Base 1:9.11.3+dfsg + dns_master_questiontotext@Base 1:9.11.3+dfsg + dns_master_rdatasettotext@Base 1:9.11.3+dfsg + dns_master_style_cache@Base 1:9.11.3+dfsg + dns_master_style_comment@Base 1:9.11.3+dfsg + dns_master_style_debug@Base 1:9.11.3+dfsg + dns_master_style_default@Base 1:9.11.3+dfsg + dns_master_style_explicitttl@Base 1:9.11.3+dfsg + dns_master_style_full@Base 1:9.11.3+dfsg + dns_master_style_indent@Base 1:9.11.3+dfsg + dns_master_style_keyzone@Base 1:9.11.3+dfsg + dns_master_style_simple@Base 1:9.11.3+dfsg + dns_master_style_yaml@Base 1:9.11.3+dfsg + dns_master_stylecreate2@Base 1:9.11.3+dfsg + dns_master_stylecreate@Base 1:9.11.3+dfsg + dns_master_styledestroy@Base 1:9.11.3+dfsg + dns_master_styleflags@Base 1:9.11.3+dfsg + dns_message_addname@Base 1:9.11.3+dfsg + dns_message_buildopt@Base 1:9.11.3+dfsg + dns_message_checksig@Base 1:9.11.3+dfsg + dns_message_create@Base 1:9.11.3+dfsg + dns_message_currentname@Base 1:9.11.3+dfsg + dns_message_destroy@Base 1:9.11.3+dfsg + dns_message_find@Base 1:9.11.3+dfsg + dns_message_findname@Base 1:9.11.3+dfsg + dns_message_findtype@Base 1:9.11.3+dfsg + dns_message_firstname@Base 1:9.11.3+dfsg + dns_message_getopt@Base 1:9.11.3+dfsg + dns_message_getquerytsig@Base 1:9.11.3+dfsg + dns_message_getrawmessage@Base 1:9.11.3+dfsg + dns_message_getsig0@Base 1:9.11.3+dfsg + dns_message_getsig0key@Base 1:9.11.3+dfsg + dns_message_gettempname@Base 1:9.11.3+dfsg + dns_message_gettempoffsets@Base 1:9.11.3+dfsg + dns_message_gettemprdata@Base 1:9.11.3+dfsg + dns_message_gettemprdatalist@Base 1:9.11.3+dfsg + dns_message_gettemprdataset@Base 1:9.11.3+dfsg + dns_message_gettimeadjust@Base 1:9.11.3+dfsg + dns_message_gettsig@Base 1:9.11.3+dfsg + dns_message_gettsigkey@Base 1:9.11.3+dfsg + dns_message_logfmtpacket2@Base 1:9.11.3+dfsg + dns_message_logfmtpacket@Base 1:9.11.3+dfsg + dns_message_logpacket2@Base 1:9.11.3+dfsg + dns_message_logpacket@Base 1:9.11.3+dfsg + dns_message_movename@Base 1:9.11.3+dfsg + dns_message_nextname@Base 1:9.11.3+dfsg + dns_message_parse@Base 1:9.11.3+dfsg + dns_message_peekheader@Base 1:9.11.3+dfsg + dns_message_pseudosectiontotext@Base 1:9.11.3+dfsg + dns_message_puttempname@Base 1:9.11.3+dfsg + dns_message_puttemprdata@Base 1:9.11.3+dfsg + dns_message_puttemprdatalist@Base 1:9.11.3+dfsg + dns_message_puttemprdataset@Base 1:9.11.3+dfsg + dns_message_rechecksig@Base 1:9.11.3+dfsg + dns_message_removename@Base 1:9.11.3+dfsg + dns_message_renderbegin@Base 1:9.11.3+dfsg + dns_message_renderchangebuffer@Base 1:9.11.3+dfsg + dns_message_renderend@Base 1:9.11.3+dfsg + dns_message_renderheader@Base 1:9.11.3+dfsg + dns_message_renderrelease@Base 1:9.11.3+dfsg + dns_message_renderreserve@Base 1:9.11.3+dfsg + dns_message_renderreset@Base 1:9.11.3+dfsg + dns_message_rendersection@Base 1:9.11.3+dfsg + dns_message_reply@Base 1:9.11.3+dfsg + dns_message_reset@Base 1:9.11.3+dfsg + dns_message_resetsig@Base 1:9.11.3+dfsg + dns_message_sectiontotext@Base 1:9.11.3+dfsg + dns_message_setclass@Base 1:9.11.3+dfsg + dns_message_setopt@Base 1:9.11.3+dfsg + dns_message_setquerytsig@Base 1:9.11.3+dfsg + dns_message_setsig0key@Base 1:9.11.3+dfsg + dns_message_setsortorder@Base 1:9.11.3+dfsg + dns_message_settimeadjust@Base 1:9.11.3+dfsg + dns_message_settsigkey@Base 1:9.11.3+dfsg + dns_message_signer@Base 1:9.11.3+dfsg + dns_message_takebuffer@Base 1:9.11.3+dfsg + dns_message_totext@Base 1:9.11.3+dfsg + dns_modules@Base 1:9.11.3+dfsg + dns_msgcat@Base 1:9.11.3+dfsg + dns_name_caseequal@Base 1:9.11.3+dfsg + dns_name_clone@Base 1:9.11.3+dfsg + dns_name_compare@Base 1:9.11.3+dfsg + dns_name_concatenate@Base 1:9.11.3+dfsg + dns_name_copy@Base 1:9.11.3+dfsg + dns_name_countlabels@Base 1:9.11.3+dfsg + dns_name_destroy@Base 1:9.11.3+dfsg + dns_name_digest@Base 1:9.11.3+dfsg + dns_name_downcase@Base 1:9.11.3+dfsg + dns_name_dup@Base 1:9.11.3+dfsg + dns_name_dupwithoffsets@Base 1:9.11.3+dfsg + dns_name_dynamic@Base 1:9.11.3+dfsg + dns_name_equal@Base 1:9.11.3+dfsg + dns_name_format@Base 1:9.11.3+dfsg + dns_name_free@Base 1:9.11.3+dfsg + dns_name_fromregion@Base 1:9.11.3+dfsg + dns_name_fromstring2@Base 1:9.11.3+dfsg + dns_name_fromstring@Base 1:9.11.3+dfsg + dns_name_fromtext@Base 1:9.11.3+dfsg + dns_name_fromwire@Base 1:9.11.3+dfsg + dns_name_fullcompare@Base 1:9.11.3+dfsg + dns_name_fullhash@Base 1:9.11.3+dfsg + dns_name_getlabel@Base 1:9.11.3+dfsg + dns_name_getlabelsequence@Base 1:9.11.3+dfsg + dns_name_hasbuffer@Base 1:9.11.3+dfsg + dns_name_hash@Base 1:9.11.3+dfsg + dns_name_hashbylabel@Base 1:9.11.3+dfsg + dns_name_init@Base 1:9.11.3+dfsg + dns_name_internalwildcard@Base 1:9.11.3+dfsg + dns_name_invalidate@Base 1:9.11.3+dfsg + dns_name_isabsolute@Base 1:9.11.3+dfsg + dns_name_isdnssd@Base 1:9.11.3+dfsg + dns_name_ishostname@Base 1:9.11.3+dfsg + dns_name_ismailbox@Base 1:9.11.3+dfsg + dns_name_isrfc1918@Base 1:9.11.3+dfsg + dns_name_issubdomain@Base 1:9.11.3+dfsg + dns_name_istat@Base 1:9.11.3+dfsg + dns_name_isula@Base 1:9.11.3+dfsg + dns_name_isvalid@Base 1:9.11.3+dfsg + dns_name_iswildcard@Base 1:9.11.3+dfsg + dns_name_matcheswildcard@Base 1:9.11.3+dfsg + dns_name_print@Base 1:9.11.3+dfsg + dns_name_rdatacompare@Base 1:9.11.3+dfsg + dns_name_reset@Base 1:9.11.3+dfsg + dns_name_setbuffer@Base 1:9.11.3+dfsg + dns_name_settotextfilter@Base 1:9.11.3+dfsg + dns_name_split@Base 1:9.11.3+dfsg + dns_name_tofilenametext@Base 1:9.11.3+dfsg + dns_name_toprincipal@Base 1:9.11.3+dfsg + dns_name_toregion@Base 1:9.11.3+dfsg + dns_name_tostring@Base 1:9.11.3+dfsg + dns_name_totext2@Base 1:9.11.3+dfsg + dns_name_totext@Base 1:9.11.3+dfsg + dns_name_towire@Base 1:9.11.3+dfsg + dns_ncache_add@Base 1:9.11.3+dfsg + dns_ncache_addoptout@Base 1:9.11.3+dfsg + dns_ncache_current@Base 1:9.11.3+dfsg + dns_ncache_getrdataset@Base 1:9.11.3+dfsg + dns_ncache_getsigrdataset@Base 1:9.11.3+dfsg + dns_ncache_towire@Base 1:9.11.3+dfsg + dns_nsec3_active@Base 1:9.11.3+dfsg + dns_nsec3_activex@Base 1:9.11.3+dfsg + dns_nsec3_addnsec3@Base 1:9.11.3+dfsg + dns_nsec3_addnsec3s@Base 1:9.11.3+dfsg + dns_nsec3_addnsec3sx@Base 1:9.11.3+dfsg + dns_nsec3_buildrdata@Base 1:9.11.3+dfsg + dns_nsec3_delnsec3@Base 1:9.11.3+dfsg + dns_nsec3_delnsec3s@Base 1:9.11.3+dfsg + dns_nsec3_delnsec3sx@Base 1:9.11.3+dfsg + dns_nsec3_hashlength@Base 1:9.11.3+dfsg + dns_nsec3_hashname@Base 1:9.11.3+dfsg + dns_nsec3_maxiterations@Base 1:9.11.3+dfsg + dns_nsec3_noexistnodata@Base 1:9.11.3+dfsg + dns_nsec3_supportedhash@Base 1:9.11.3+dfsg + dns_nsec3_typepresent@Base 1:9.11.3+dfsg + dns_nsec3param_deletechains@Base 1:9.11.3+dfsg + dns_nsec3param_fromprivate@Base 1:9.11.3+dfsg + dns_nsec3param_salttotext@Base 1:9.11.3+dfsg + dns_nsec3param_toprivate@Base 1:9.11.3+dfsg + dns_nsec_build@Base 1:9.11.3+dfsg + dns_nsec_buildrdata@Base 1:9.11.3+dfsg + dns_nsec_compressbitmap@Base 1:9.11.3+dfsg + dns_nsec_isset@Base 1:9.11.3+dfsg + dns_nsec_noexistnodata@Base 1:9.11.3+dfsg + dns_nsec_nseconly@Base 1:9.11.3+dfsg + dns_nsec_setbit@Base 1:9.11.3+dfsg + dns_nsec_typepresent@Base 1:9.11.3+dfsg + dns_ntatable_add@Base 1:9.11.3+dfsg + dns_ntatable_attach@Base 1:9.11.3+dfsg + dns_ntatable_covered@Base 1:9.11.3+dfsg + dns_ntatable_create@Base 1:9.11.3+dfsg + dns_ntatable_delete@Base 1:9.11.3+dfsg + dns_ntatable_detach@Base 1:9.11.3+dfsg + dns_ntatable_dump@Base 1:9.11.3+dfsg + dns_ntatable_save@Base 1:9.11.3+dfsg + dns_ntatable_totext@Base 1:9.11.3+dfsg + dns_opcode_totext@Base 1:9.11.3+dfsg + dns_opcodestats_create@Base 1:9.11.3+dfsg + dns_opcodestats_dump@Base 1:9.11.3+dfsg + dns_opcodestats_increment@Base 1:9.11.3+dfsg + dns_order_add@Base 1:9.11.3+dfsg + dns_order_attach@Base 1:9.11.3+dfsg + dns_order_create@Base 1:9.11.3+dfsg + dns_order_detach@Base 1:9.11.3+dfsg + dns_order_find@Base 1:9.11.3+dfsg + dns_peer_attach@Base 1:9.11.3+dfsg + dns_peer_detach@Base 1:9.11.3+dfsg + dns_peer_getbogus@Base 1:9.11.3+dfsg + dns_peer_getednsversion@Base 1:9.11.3+dfsg + dns_peer_getforcetcp@Base 1:9.11.3+dfsg + dns_peer_getkey@Base 1:9.11.3+dfsg + dns_peer_getmaxudp@Base 1:9.11.3+dfsg + dns_peer_getnotifydscp@Base 1:9.11.3+dfsg + dns_peer_getnotifysource@Base 1:9.11.3+dfsg + dns_peer_getprovideixfr@Base 1:9.11.3+dfsg + dns_peer_getquerydscp@Base 1:9.11.3+dfsg + dns_peer_getquerysource@Base 1:9.11.3+dfsg + dns_peer_getrequestexpire@Base 1:9.11.3+dfsg + dns_peer_getrequestixfr@Base 1:9.11.3+dfsg + dns_peer_getrequestnsid@Base 1:9.11.3+dfsg + dns_peer_getsendcookie@Base 1:9.11.3+dfsg + dns_peer_getsupportedns@Base 1:9.11.3+dfsg + dns_peer_gettransferdscp@Base 1:9.11.3+dfsg + dns_peer_gettransferformat@Base 1:9.11.3+dfsg + dns_peer_gettransfers@Base 1:9.11.3+dfsg + dns_peer_gettransfersource@Base 1:9.11.3+dfsg + dns_peer_getudpsize@Base 1:9.11.3+dfsg + dns_peer_new@Base 1:9.11.3+dfsg + dns_peer_newprefix@Base 1:9.11.3+dfsg + dns_peer_setbogus@Base 1:9.11.3+dfsg + dns_peer_setednsversion@Base 1:9.11.3+dfsg + dns_peer_setforcetcp@Base 1:9.11.3+dfsg + dns_peer_setkey@Base 1:9.11.3+dfsg + dns_peer_setkeybycharp@Base 1:9.11.3+dfsg + dns_peer_setmaxudp@Base 1:9.11.3+dfsg + dns_peer_setnotifydscp@Base 1:9.11.3+dfsg + dns_peer_setnotifysource@Base 1:9.11.3+dfsg + dns_peer_setprovideixfr@Base 1:9.11.3+dfsg + dns_peer_setquerydscp@Base 1:9.11.3+dfsg + dns_peer_setquerysource@Base 1:9.11.3+dfsg + dns_peer_setrequestexpire@Base 1:9.11.3+dfsg + dns_peer_setrequestixfr@Base 1:9.11.3+dfsg + dns_peer_setrequestnsid@Base 1:9.11.3+dfsg + dns_peer_setsendcookie@Base 1:9.11.3+dfsg + dns_peer_setsupportedns@Base 1:9.11.3+dfsg + dns_peer_settransferdscp@Base 1:9.11.3+dfsg + dns_peer_settransferformat@Base 1:9.11.3+dfsg + dns_peer_settransfers@Base 1:9.11.3+dfsg + dns_peer_settransfersource@Base 1:9.11.3+dfsg + dns_peer_setudpsize@Base 1:9.11.3+dfsg + dns_peerlist_addpeer@Base 1:9.11.3+dfsg + dns_peerlist_attach@Base 1:9.11.3+dfsg + dns_peerlist_currpeer@Base 1:9.11.3+dfsg + dns_peerlist_detach@Base 1:9.11.3+dfsg + dns_peerlist_new@Base 1:9.11.3+dfsg + dns_peerlist_peerbyaddr@Base 1:9.11.3+dfsg + dns_portlist_add@Base 1:9.11.3+dfsg + dns_portlist_attach@Base 1:9.11.3+dfsg + dns_portlist_create@Base 1:9.11.3+dfsg + dns_portlist_detach@Base 1:9.11.3+dfsg + dns_portlist_match@Base 1:9.11.3+dfsg + dns_portlist_remove@Base 1:9.11.3+dfsg + dns_pps@Base 1:9.11.3+dfsg + dns_private_chains@Base 1:9.11.3+dfsg + dns_private_totext@Base 1:9.11.3+dfsg + dns_rbt_addname@Base 1:9.11.3+dfsg + dns_rbt_addnode@Base 1:9.11.3+dfsg + dns_rbt_create@Base 1:9.11.3+dfsg + dns_rbt_deletename@Base 1:9.11.3+dfsg + dns_rbt_deletenode@Base 1:9.11.3+dfsg + dns_rbt_deserialize_tree@Base 1:9.11.3+dfsg + dns_rbt_destroy2@Base 1:9.11.3+dfsg + dns_rbt_destroy@Base 1:9.11.3+dfsg + dns_rbt_findname@Base 1:9.11.3+dfsg + dns_rbt_findnode@Base 1:9.11.3+dfsg + dns_rbt_formatnodename@Base 1:9.11.3+dfsg + dns_rbt_fullnamefromnode@Base 1:9.11.3+dfsg + dns_rbt_hashsize@Base 1:9.11.3+dfsg + dns_rbt_namefromnode@Base 1:9.11.3+dfsg + dns_rbt_nodecount@Base 1:9.11.3+dfsg + dns_rbt_printdot@Base 1:9.11.3+dfsg + dns_rbt_printnodeinfo@Base 1:9.11.3+dfsg + dns_rbt_printtext@Base 1:9.11.3+dfsg + dns_rbt_root@Base 1:9.11.3+dfsg + dns_rbt_serialize_align@Base 1:9.11.3+dfsg + dns_rbt_serialize_tree@Base 1:9.11.3+dfsg + dns_rbtdb64_create@Base 1:9.11.3+dfsg + dns_rbtdb_create@Base 1:9.11.3+dfsg + dns_rbtnode_nodename@Base 1:9.11.3+dfsg + dns_rbtnodechain_current@Base 1:9.11.3+dfsg + dns_rbtnodechain_down@Base 1:9.11.3+dfsg + dns_rbtnodechain_first@Base 1:9.11.3+dfsg + dns_rbtnodechain_init@Base 1:9.11.3+dfsg + dns_rbtnodechain_invalidate@Base 1:9.11.3+dfsg + dns_rbtnodechain_last@Base 1:9.11.3+dfsg + dns_rbtnodechain_next@Base 1:9.11.3+dfsg + dns_rbtnodechain_nextflat@Base 1:9.11.3+dfsg + dns_rbtnodechain_prev@Base 1:9.11.3+dfsg + dns_rbtnodechain_reset@Base 1:9.11.3+dfsg + dns_rcode_fromtext@Base 1:9.11.3+dfsg + dns_rcode_totext@Base 1:9.11.3+dfsg + dns_rcodestats_create@Base 1:9.11.3+dfsg + dns_rcodestats_dump@Base 1:9.11.3+dfsg + dns_rcodestats_increment@Base 1:9.11.3+dfsg + dns_rdata_additionaldata@Base 1:9.11.3+dfsg + dns_rdata_apl_count@Base 1:9.11.3+dfsg + dns_rdata_apl_current@Base 1:9.11.3+dfsg + dns_rdata_apl_first@Base 1:9.11.3+dfsg + dns_rdata_apl_next@Base 1:9.11.3+dfsg + dns_rdata_casecompare@Base 1:9.11.3+dfsg + dns_rdata_checknames@Base 1:9.11.3+dfsg + dns_rdata_checkowner@Base 1:9.11.3+dfsg + dns_rdata_clone@Base 1:9.11.3+dfsg + dns_rdata_compare@Base 1:9.11.3+dfsg + dns_rdata_covers@Base 1:9.11.3+dfsg + dns_rdata_deleterrset@Base 1:9.11.3+dfsg + dns_rdata_digest@Base 1:9.11.3+dfsg + dns_rdata_exists@Base 1:9.11.3+dfsg + dns_rdata_freestruct@Base 1:9.11.3+dfsg + dns_rdata_fromregion@Base 1:9.11.3+dfsg + dns_rdata_fromstruct@Base 1:9.11.3+dfsg + dns_rdata_fromtext@Base 1:9.11.3+dfsg + dns_rdata_fromwire@Base 1:9.11.3+dfsg + dns_rdata_hip_current@Base 1:9.11.3+dfsg + dns_rdata_hip_first@Base 1:9.11.3+dfsg + dns_rdata_hip_next@Base 1:9.11.3+dfsg + dns_rdata_init@Base 1:9.11.3+dfsg + dns_rdata_makedelete@Base 1:9.11.3+dfsg + dns_rdata_ninfo_current@Base 1:9.11.3+dfsg + dns_rdata_ninfo_first@Base 1:9.11.3+dfsg + dns_rdata_ninfo_next@Base 1:9.11.3+dfsg + dns_rdata_notexist@Base 1:9.11.3+dfsg + dns_rdata_opt_current@Base 1:9.11.3+dfsg + dns_rdata_opt_first@Base 1:9.11.3+dfsg + dns_rdata_opt_next@Base 1:9.11.3+dfsg + dns_rdata_reset@Base 1:9.11.3+dfsg + dns_rdata_tofmttext@Base 1:9.11.3+dfsg + dns_rdata_toregion@Base 1:9.11.3+dfsg + dns_rdata_tostruct@Base 1:9.11.3+dfsg + dns_rdata_totext@Base 1:9.11.3+dfsg + dns_rdata_towire@Base 1:9.11.3+dfsg + dns_rdata_txt_current@Base 1:9.11.3+dfsg + dns_rdata_txt_first@Base 1:9.11.3+dfsg + dns_rdata_txt_next@Base 1:9.11.3+dfsg + dns_rdata_updateop@Base 1:9.11.3+dfsg + dns_rdatacallbacks_init@Base 1:9.11.3+dfsg + dns_rdatacallbacks_init_stdio@Base 1:9.11.3+dfsg + dns_rdataclass_format@Base 1:9.11.3+dfsg + dns_rdataclass_fromtext@Base 1:9.11.3+dfsg + dns_rdataclass_ismeta@Base 1:9.11.3+dfsg + dns_rdataclass_totext@Base 1:9.11.3+dfsg + dns_rdataclass_tounknowntext@Base 1:9.11.3+dfsg + dns_rdatalist_fromrdataset@Base 1:9.11.3+dfsg + dns_rdatalist_init@Base 1:9.11.3+dfsg + dns_rdatalist_tordataset@Base 1:9.11.3+dfsg + dns_rdataset_addclosest@Base 1:9.11.3+dfsg + dns_rdataset_additionaldata@Base 1:9.11.3+dfsg + dns_rdataset_addnoqname@Base 1:9.11.3+dfsg + dns_rdataset_clearprefetch@Base 1:9.11.3+dfsg + dns_rdataset_clone@Base 1:9.11.3+dfsg + dns_rdataset_count@Base 1:9.11.3+dfsg + dns_rdataset_current@Base 1:9.11.3+dfsg + dns_rdataset_disassociate@Base 1:9.11.3+dfsg + dns_rdataset_expire@Base 1:9.11.3+dfsg + dns_rdataset_first@Base 1:9.11.3+dfsg + dns_rdataset_getadditional@Base 1:9.11.3+dfsg + dns_rdataset_getclosest@Base 1:9.11.3+dfsg + dns_rdataset_getnoqname@Base 1:9.11.3+dfsg + dns_rdataset_getownercase@Base 1:9.11.3+dfsg + dns_rdataset_init@Base 1:9.11.3+dfsg + dns_rdataset_invalidate@Base 1:9.11.3+dfsg + dns_rdataset_isassociated@Base 1:9.11.3+dfsg + dns_rdataset_makequestion@Base 1:9.11.3+dfsg + dns_rdataset_next@Base 1:9.11.3+dfsg + dns_rdataset_putadditional@Base 1:9.11.3+dfsg + dns_rdataset_setadditional@Base 1:9.11.3+dfsg + dns_rdataset_setownercase@Base 1:9.11.3+dfsg + dns_rdataset_settrust@Base 1:9.11.3+dfsg + dns_rdataset_totext@Base 1:9.11.3+dfsg + dns_rdataset_towire@Base 1:9.11.3+dfsg + dns_rdataset_towirepartial@Base 1:9.11.3+dfsg + dns_rdataset_towiresorted@Base 1:9.11.3+dfsg + dns_rdataset_trimttl@Base 1:9.11.3+dfsg + dns_rdatasetiter_current@Base 1:9.11.3+dfsg + dns_rdatasetiter_destroy@Base 1:9.11.3+dfsg + dns_rdatasetiter_first@Base 1:9.11.3+dfsg + dns_rdatasetiter_next@Base 1:9.11.3+dfsg + dns_rdatasetstats_create@Base 1:9.11.3+dfsg + dns_rdatasetstats_decrement@Base 1:9.11.3+dfsg + dns_rdatasetstats_dump@Base 1:9.11.3+dfsg + dns_rdatasetstats_increment@Base 1:9.11.3+dfsg + dns_rdataslab_count@Base 1:9.11.3+dfsg + dns_rdataslab_equal@Base 1:9.11.3+dfsg + dns_rdataslab_equalx@Base 1:9.11.3+dfsg + dns_rdataslab_fromrdataset@Base 1:9.11.3+dfsg + dns_rdataslab_merge@Base 1:9.11.3+dfsg + dns_rdataslab_size@Base 1:9.11.3+dfsg + dns_rdataslab_subtract@Base 1:9.11.3+dfsg + dns_rdataslab_tordataset@Base 1:9.11.3+dfsg + dns_rdatatype_atparent@Base 1:9.11.3+dfsg + dns_rdatatype_attributes@Base 1:9.11.3+dfsg + dns_rdatatype_format@Base 1:9.11.3+dfsg + dns_rdatatype_fromtext@Base 1:9.11.3+dfsg + dns_rdatatype_isdnssec@Base 1:9.11.3+dfsg + dns_rdatatype_isknown@Base 1:9.11.3+dfsg + dns_rdatatype_ismeta@Base 1:9.11.3+dfsg + dns_rdatatype_issingleton@Base 1:9.11.3+dfsg + dns_rdatatype_iszonecutauth@Base 1:9.11.3+dfsg + dns_rdatatype_notquestion@Base 1:9.11.3+dfsg + dns_rdatatype_questiononly@Base 1:9.11.3+dfsg + dns_rdatatype_totext@Base 1:9.11.3+dfsg + dns_rdatatype_tounknowntext@Base 1:9.11.3+dfsg + dns_rdatatypestats_create@Base 1:9.11.3+dfsg + dns_rdatatypestats_dump@Base 1:9.11.3+dfsg + dns_rdatatypestats_increment@Base 1:9.11.3+dfsg + dns_request_cancel@Base 1:9.11.3+dfsg + dns_request_create@Base 1:9.11.3+dfsg + dns_request_createraw2@Base 1:9.11.3+dfsg + dns_request_createraw3@Base 1:9.11.3+dfsg + dns_request_createraw4@Base 1:9.11.3+dfsg + dns_request_createraw@Base 1:9.11.3+dfsg + dns_request_createvia2@Base 1:9.11.3+dfsg + dns_request_createvia3@Base 1:9.11.3+dfsg + dns_request_createvia4@Base 1:9.11.3+dfsg + dns_request_createvia@Base 1:9.11.3+dfsg + dns_request_destroy@Base 1:9.11.3+dfsg + dns_request_getresponse@Base 1:9.11.3+dfsg + dns_request_usedtcp@Base 1:9.11.3+dfsg + dns_requestmgr_attach@Base 1:9.11.3+dfsg + dns_requestmgr_create@Base 1:9.11.3+dfsg + dns_requestmgr_detach@Base 1:9.11.3+dfsg + dns_requestmgr_shutdown@Base 1:9.11.3+dfsg + dns_requestmgr_whenshutdown@Base 1:9.11.3+dfsg + dns_resolver_addalternate@Base 1:9.11.3+dfsg + dns_resolver_addbadcache@Base 1:9.11.3+dfsg + dns_resolver_algorithm_supported@Base 1:9.11.3+dfsg + dns_resolver_attach@Base 1:9.11.3+dfsg + dns_resolver_cancelfetch@Base 1:9.11.3+dfsg + dns_resolver_create@Base 1:9.11.3+dfsg + dns_resolver_createfetch2@Base 1:9.11.3+dfsg + dns_resolver_createfetch3@Base 1:9.11.3+dfsg + dns_resolver_createfetch@Base 1:9.11.3+dfsg + dns_resolver_destroyfetch@Base 1:9.11.3+dfsg + dns_resolver_detach@Base 1:9.11.3+dfsg + dns_resolver_disable_algorithm@Base 1:9.11.3+dfsg + dns_resolver_disable_ds_digest@Base 1:9.11.3+dfsg + dns_resolver_dispatchmgr@Base 1:9.11.3+dfsg + dns_resolver_dispatchv4@Base 1:9.11.3+dfsg + dns_resolver_dispatchv6@Base 1:9.11.3+dfsg + dns_resolver_ds_digest_supported@Base 1:9.11.3+dfsg + dns_resolver_dumpfetches@Base 1:9.11.3+dfsg + dns_resolver_flushbadcache@Base 1:9.11.3+dfsg + dns_resolver_flushbadnames@Base 1:9.11.3+dfsg + dns_resolver_freeze@Base 1:9.11.3+dfsg + dns_resolver_getbadcache@Base 1:9.11.3+dfsg + dns_resolver_getclientsperquery@Base 1:9.11.3+dfsg + dns_resolver_getlamettl@Base 1:9.11.3+dfsg + dns_resolver_getmaxdepth@Base 1:9.11.3+dfsg + dns_resolver_getmaxqueries@Base 1:9.11.3+dfsg + dns_resolver_getmustbesecure@Base 1:9.11.3+dfsg + dns_resolver_getoptions@Base 1:9.11.3+dfsg + dns_resolver_getquerydscp4@Base 1:9.11.3+dfsg + dns_resolver_getquerydscp6@Base 1:9.11.3+dfsg + dns_resolver_getquotaresponse@Base 1:9.11.3+dfsg + dns_resolver_gettimeout@Base 1:9.11.3+dfsg + dns_resolver_getudpsize@Base 1:9.11.3+dfsg + dns_resolver_getzeronosoattl@Base 1:9.11.3+dfsg + dns_resolver_logfetch@Base 1:9.11.3+dfsg + dns_resolver_nrunning@Base 1:9.11.3+dfsg + dns_resolver_prime@Base 1:9.11.3+dfsg + dns_resolver_printbadcache@Base 1:9.11.3+dfsg + dns_resolver_reset_algorithms@Base 1:9.11.3+dfsg + dns_resolver_reset_ds_digests@Base 1:9.11.3+dfsg + dns_resolver_resetmustbesecure@Base 1:9.11.3+dfsg + dns_resolver_setclientsperquery@Base 1:9.11.3+dfsg + dns_resolver_setfetchesperzone@Base 1:9.11.3+dfsg + dns_resolver_setlamettl@Base 1:9.11.3+dfsg + dns_resolver_setmaxdepth@Base 1:9.11.3+dfsg + dns_resolver_setmaxqueries@Base 1:9.11.3+dfsg + dns_resolver_setmustbesecure@Base 1:9.11.3+dfsg + dns_resolver_setquerydscp4@Base 1:9.11.3+dfsg + dns_resolver_setquerydscp6@Base 1:9.11.3+dfsg + dns_resolver_setquotaresponse@Base 1:9.11.3+dfsg + dns_resolver_settimeout@Base 1:9.11.3+dfsg + dns_resolver_setudpsize@Base 1:9.11.3+dfsg + dns_resolver_setzeronosoattl@Base 1:9.11.3+dfsg + dns_resolver_shutdown@Base 1:9.11.3+dfsg + dns_resolver_socketmgr@Base 1:9.11.3+dfsg + dns_resolver_taskmgr@Base 1:9.11.3+dfsg + dns_resolver_whenshutdown@Base 1:9.11.3+dfsg + dns_result_register@Base 1:9.11.3+dfsg + dns_result_torcode@Base 1:9.11.3+dfsg + dns_result_totext@Base 1:9.11.3+dfsg + dns_root_checkhints@Base 1:9.11.3+dfsg + dns_rootname@Base 1:9.11.3+dfsg + dns_rootns_create@Base 1:9.11.3+dfsg + dns_rpz_add@Base 1:9.11.3+dfsg + dns_rpz_attach_rpzs@Base 1:9.11.3+dfsg + dns_rpz_beginload@Base 1:9.11.3+dfsg + dns_rpz_decode_cname@Base 1:9.11.3+dfsg + dns_rpz_delete@Base 1:9.11.3+dfsg + dns_rpz_detach_rpzs@Base 1:9.11.3+dfsg + dns_rpz_find_ip@Base 1:9.11.3+dfsg + dns_rpz_find_name@Base 1:9.11.3+dfsg + dns_rpz_new_zones@Base 1:9.11.3+dfsg + dns_rpz_policy2str@Base 1:9.11.3+dfsg + dns_rpz_ready@Base 1:9.11.3+dfsg + dns_rpz_str2policy@Base 1:9.11.3+dfsg + dns_rpz_type2str@Base 1:9.11.3+dfsg + dns_rriterator_current@Base 1:9.11.3+dfsg + dns_rriterator_destroy@Base 1:9.11.3+dfsg + dns_rriterator_first@Base 1:9.11.3+dfsg + dns_rriterator_init@Base 1:9.11.3+dfsg + dns_rriterator_next@Base 1:9.11.3+dfsg + dns_rriterator_nextrrset@Base 1:9.11.3+dfsg + dns_rriterator_pause@Base 1:9.11.3+dfsg + dns_rrl@Base 1:9.11.3+dfsg + dns_rrl_init@Base 1:9.11.3+dfsg + dns_rrl_view_destroy@Base 1:9.11.3+dfsg + dns_sdb_putnamedrdata@Base 1:9.11.3+dfsg + dns_sdb_putnamedrr@Base 1:9.11.3+dfsg + dns_sdb_putrdata@Base 1:9.11.3+dfsg + dns_sdb_putrr@Base 1:9.11.3+dfsg + dns_sdb_putsoa@Base 1:9.11.3+dfsg + dns_sdb_register@Base 1:9.11.3+dfsg + dns_sdb_unregister@Base 1:9.11.3+dfsg + dns_sdlz_putnamedrr@Base 1:9.11.3+dfsg + dns_sdlz_putrr@Base 1:9.11.3+dfsg + dns_sdlz_putsoa@Base 1:9.11.3+dfsg + dns_sdlz_setdb@Base 1:9.11.3+dfsg + dns_sdlzregister@Base 1:9.11.3+dfsg + dns_sdlzunregister@Base 1:9.11.3+dfsg + dns_secalg_format@Base 1:9.11.3+dfsg + dns_secalg_fromtext@Base 1:9.11.3+dfsg + dns_secalg_totext@Base 1:9.11.3+dfsg + dns_secproto_fromtext@Base 1:9.11.3+dfsg + dns_secproto_totext@Base 1:9.11.3+dfsg + dns_soa_buildrdata@Base 1:9.11.3+dfsg + dns_soa_getexpire@Base 1:9.11.3+dfsg + dns_soa_getminimum@Base 1:9.11.3+dfsg + dns_soa_getrefresh@Base 1:9.11.3+dfsg + dns_soa_getretry@Base 1:9.11.3+dfsg + dns_soa_getserial@Base 1:9.11.3+dfsg + dns_soa_setexpire@Base 1:9.11.3+dfsg + dns_soa_setminimum@Base 1:9.11.3+dfsg + dns_soa_setrefresh@Base 1:9.11.3+dfsg + dns_soa_setretry@Base 1:9.11.3+dfsg + dns_soa_setserial@Base 1:9.11.3+dfsg + dns_ssu_external_match@Base 1:9.11.3+dfsg + dns_ssu_mtypefromstring@Base 1:9.11.3+dfsg + dns_ssurule_identity@Base 1:9.11.3+dfsg + dns_ssurule_isgrant@Base 1:9.11.3+dfsg + dns_ssurule_matchtype@Base 1:9.11.3+dfsg + dns_ssurule_name@Base 1:9.11.3+dfsg + dns_ssurule_types@Base 1:9.11.3+dfsg + dns_ssutable_addrule@Base 1:9.11.3+dfsg + dns_ssutable_attach@Base 1:9.11.3+dfsg + dns_ssutable_checkrules2@Base 1:9.11.3+dfsg + dns_ssutable_checkrules@Base 1:9.11.3+dfsg + dns_ssutable_create@Base 1:9.11.3+dfsg + dns_ssutable_createdlz@Base 1:9.11.3+dfsg + dns_ssutable_detach@Base 1:9.11.3+dfsg + dns_ssutable_firstrule@Base 1:9.11.3+dfsg + dns_ssutable_nextrule@Base 1:9.11.3+dfsg + dns_stats_alloccounters@Base 1:9.11.3+dfsg + dns_stats_attach@Base 1:9.11.3+dfsg + dns_stats_detach@Base 1:9.11.3+dfsg + dns_stats_freecounters@Base 1:9.11.3+dfsg + dns_statscounter_names@Base 1:9.11.3+dfsg + dns_tcpmsg_cancelread@Base 1:9.11.3+dfsg + dns_tcpmsg_init@Base 1:9.11.3+dfsg + dns_tcpmsg_invalidate@Base 1:9.11.3+dfsg + dns_tcpmsg_keepbuffer@Base 1:9.11.3+dfsg + dns_tcpmsg_readmessage@Base 1:9.11.3+dfsg + dns_tcpmsg_setmaxsize@Base 1:9.11.3+dfsg + dns_time32_fromtext@Base 1:9.11.3+dfsg + dns_time32_totext@Base 1:9.11.3+dfsg + dns_time64_from32@Base 1:9.11.3+dfsg + dns_time64_fromtext@Base 1:9.11.3+dfsg + dns_time64_totext@Base 1:9.11.3+dfsg + dns_timer_setidle@Base 1:9.11.3+dfsg + dns_tkey_builddeletequery@Base 1:9.11.3+dfsg + dns_tkey_builddhquery@Base 1:9.11.3+dfsg + dns_tkey_buildgssquery@Base 1:9.11.3+dfsg + dns_tkey_gssnegotiate@Base 1:9.11.3+dfsg + dns_tkey_processdeleteresponse@Base 1:9.11.3+dfsg + dns_tkey_processdhresponse@Base 1:9.11.3+dfsg + dns_tkey_processgssresponse@Base 1:9.11.3+dfsg + dns_tkey_processquery@Base 1:9.11.3+dfsg + dns_tkeyctx_create@Base 1:9.11.3+dfsg + dns_tkeyctx_destroy@Base 1:9.11.3+dfsg + dns_trust_totext@Base 1:9.11.3+dfsg + dns_tsec_create@Base 1:9.11.3+dfsg + dns_tsec_destroy@Base 1:9.11.3+dfsg + dns_tsec_getkey@Base 1:9.11.3+dfsg + dns_tsec_gettype@Base 1:9.11.3+dfsg + dns_tsig_gssapi_name@Base 1:9.11.3+dfsg + dns_tsig_gssapims_name@Base 1:9.11.3+dfsg + dns_tsig_hmacmd5_name@Base 1:9.11.3+dfsg + dns_tsig_hmacsha1_name@Base 1:9.11.3+dfsg + dns_tsig_hmacsha224_name@Base 1:9.11.3+dfsg + dns_tsig_hmacsha256_name@Base 1:9.11.3+dfsg + dns_tsig_hmacsha384_name@Base 1:9.11.3+dfsg + dns_tsig_hmacsha512_name@Base 1:9.11.3+dfsg + dns_tsig_sign@Base 1:9.11.3+dfsg + dns_tsig_verify@Base 1:9.11.3+dfsg + dns_tsigkey_attach@Base 1:9.11.3+dfsg + dns_tsigkey_create@Base 1:9.11.3+dfsg + dns_tsigkey_createfromkey@Base 1:9.11.3+dfsg + dns_tsigkey_detach@Base 1:9.11.3+dfsg + dns_tsigkey_find@Base 1:9.11.3+dfsg + dns_tsigkey_setdeleted@Base 1:9.11.3+dfsg + dns_tsigkeyring_add@Base 1:9.11.3+dfsg + dns_tsigkeyring_attach@Base 1:9.11.3+dfsg + dns_tsigkeyring_create@Base 1:9.11.3+dfsg + dns_tsigkeyring_detach@Base 1:9.11.3+dfsg + dns_tsigkeyring_dumpanddetach@Base 1:9.11.3+dfsg + dns_tsigrcode_fromtext@Base 1:9.11.3+dfsg + dns_tsigrcode_totext@Base 1:9.11.3+dfsg + dns_ttl_fromtext@Base 1:9.11.3+dfsg + dns_ttl_totext2@Base 1:9.11.3+dfsg + dns_ttl_totext@Base 1:9.11.3+dfsg + dns_update_signatures@Base 1:9.11.3+dfsg + dns_update_signaturesinc@Base 1:9.11.3+dfsg + dns_update_soaserial@Base 1:9.11.3+dfsg + dns_validator_cancel@Base 1:9.11.3+dfsg + dns_validator_create@Base 1:9.11.3+dfsg + dns_validator_destroy@Base 1:9.11.3+dfsg + dns_validator_send@Base 1:9.11.3+dfsg + dns_version@Base 1:9.11.3+dfsg + dns_view_adddelegationonly@Base 1:9.11.3+dfsg + dns_view_addzone@Base 1:9.11.3+dfsg + dns_view_asyncload2@Base 1:9.11.5+dfsg + dns_view_asyncload@Base 1:9.11.3+dfsg + dns_view_attach@Base 1:9.11.3+dfsg + dns_view_checksig@Base 1:9.11.3+dfsg + dns_view_create@Base 1:9.11.3+dfsg + dns_view_createresolver@Base 1:9.11.3+dfsg + dns_view_createzonetable@Base 1:9.11.3+dfsg + dns_view_detach@Base 1:9.11.3+dfsg + dns_view_dialup@Base 1:9.11.3+dfsg + dns_view_dumpdbtostream@Base 1:9.11.3+dfsg + dns_view_excludedelegationonly@Base 1:9.11.3+dfsg + dns_view_find2@Base 1:9.11.3+dfsg + dns_view_find@Base 1:9.11.3+dfsg + dns_view_findzone@Base 1:9.11.3+dfsg + dns_view_findzonecut2@Base 1:9.11.3+dfsg + dns_view_findzonecut@Base 1:9.11.3+dfsg + dns_view_flushanddetach@Base 1:9.11.3+dfsg + dns_view_flushcache2@Base 1:9.11.3+dfsg + dns_view_flushcache@Base 1:9.11.3+dfsg + dns_view_flushname@Base 1:9.11.3+dfsg + dns_view_flushnode@Base 1:9.11.3+dfsg + dns_view_freeze@Base 1:9.11.3+dfsg + dns_view_freezezones@Base 1:9.11.3+dfsg + dns_view_getadbstats@Base 1:9.11.3+dfsg + dns_view_getdynamickeyring@Base 1:9.11.3+dfsg + dns_view_getfailttl@Base 1:9.11.3+dfsg + dns_view_getntatable@Base 1:9.11.3+dfsg + dns_view_getpeertsig@Base 1:9.11.3+dfsg + dns_view_getresquerystats@Base 1:9.11.3+dfsg + dns_view_getresstats@Base 1:9.11.3+dfsg + dns_view_getrootdelonly@Base 1:9.11.3+dfsg + dns_view_getsecroots@Base 1:9.11.3+dfsg + dns_view_gettsig@Base 1:9.11.3+dfsg + dns_view_initntatable@Base 1:9.11.3+dfsg + dns_view_initsecroots@Base 1:9.11.3+dfsg + dns_view_iscacheshared@Base 1:9.11.3+dfsg + dns_view_isdelegationonly@Base 1:9.11.3+dfsg + dns_view_issecuredomain@Base 1:9.11.3+dfsg + dns_view_load@Base 1:9.11.3+dfsg + dns_view_loadnew@Base 1:9.11.3+dfsg + dns_view_loadnta@Base 1:9.11.3+dfsg + dns_view_ntacovers@Base 1:9.11.3+dfsg + dns_view_restorekeyring@Base 1:9.11.3+dfsg + dns_view_saventa@Base 1:9.11.3+dfsg + dns_view_searchdlz@Base 1:9.11.3+dfsg + dns_view_setadbstats@Base 1:9.11.3+dfsg + dns_view_setcache2@Base 1:9.11.3+dfsg + dns_view_setcache@Base 1:9.11.3+dfsg + dns_view_setdstport@Base 1:9.11.3+dfsg + dns_view_setdynamickeyring@Base 1:9.11.3+dfsg + dns_view_setfailttl@Base 1:9.11.3+dfsg + dns_view_sethints@Base 1:9.11.3+dfsg + dns_view_setkeyring@Base 1:9.11.3+dfsg + dns_view_setnewzones@Base 1:9.11.3+dfsg + dns_view_setresquerystats@Base 1:9.11.3+dfsg + dns_view_setresstats@Base 1:9.11.3+dfsg + dns_view_setrootdelonly@Base 1:9.11.3+dfsg + dns_view_setviewcommit@Base 1:9.11.3+dfsg + dns_view_setviewrevert@Base 1:9.11.3+dfsg + dns_view_setviewcommit@Base 1:9.11.3+dfsg + dns_view_setviewrevert@Base 1:9.11.3+dfsg + dns_view_simplefind@Base 1:9.11.3+dfsg + dns_view_thaw@Base 1:9.11.3+dfsg + dns_view_untrust@Base 1:9.11.3+dfsg + dns_view_weakattach@Base 1:9.11.3+dfsg + dns_view_weakdetach@Base 1:9.11.3+dfsg + dns_viewlist_find@Base 1:9.11.3+dfsg + dns_viewlist_findzone@Base 1:9.11.3+dfsg + dns_wildcardname@Base 1:9.11.3+dfsg + dns_xfrin_attach@Base 1:9.11.3+dfsg + dns_xfrin_create2@Base 1:9.11.3+dfsg + dns_xfrin_create3@Base 1:9.11.3+dfsg + dns_xfrin_create@Base 1:9.11.3+dfsg + dns_xfrin_detach@Base 1:9.11.3+dfsg + dns_xfrin_shutdown@Base 1:9.11.3+dfsg + dns_zone_addnsec3chain@Base 1:9.11.3+dfsg + dns_zone_asyncload2@Base 1:9.11.5+dfsg + dns_zone_asyncload@Base 1:9.11.3+dfsg + dns_zone_attach@Base 1:9.11.3+dfsg + dns_zone_catz_enable@Base 1:9.11.3+dfsg + dns_zone_catz_enable_db@Base 1:9.11.3+dfsg + dns_zone_cdscheck@Base 1:9.11.3+dfsg + dns_zone_checknames@Base 1:9.11.3+dfsg + dns_zone_clearforwardacl@Base 1:9.11.3+dfsg + dns_zone_clearnotifyacl@Base 1:9.11.3+dfsg + dns_zone_clearqueryacl@Base 1:9.11.3+dfsg + dns_zone_clearqueryonacl@Base 1:9.11.3+dfsg + dns_zone_clearupdateacl@Base 1:9.11.3+dfsg + dns_zone_clearxfracl@Base 1:9.11.3+dfsg + dns_zone_create@Base 1:9.11.3+dfsg + dns_zone_detach@Base 1:9.11.3+dfsg + dns_zone_dialup@Base 1:9.11.3+dfsg + dns_zone_dlzpostload@Base 1:9.11.3+dfsg + dns_zone_dump@Base 1:9.11.3+dfsg + dns_zone_dumptostream2@Base 1:9.11.3+dfsg + dns_zone_dumptostream3@Base 1:9.11.3+dfsg + dns_zone_dumptostream@Base 1:9.11.3+dfsg + dns_zone_expire@Base 1:9.11.3+dfsg + dns_zone_first@Base 1:9.11.3+dfsg + dns_zone_flush@Base 1:9.11.3+dfsg + dns_zone_forcereload@Base 1:9.11.3+dfsg + dns_zone_forwardupdate@Base 1:9.11.3+dfsg + dns_zone_fulldumptostream@Base 1:9.11.3+dfsg + dns_zone_get_parentcatz@Base 1:9.11.3+dfsg + dns_zone_get_rpz_num@Base 1:9.11.3+dfsg + dns_zone_getadded@Base 1:9.11.3+dfsg + dns_zone_getaltxfrsource4@Base 1:9.11.3+dfsg + dns_zone_getaltxfrsource4dscp@Base 1:9.11.3+dfsg + dns_zone_getaltxfrsource6@Base 1:9.11.3+dfsg + dns_zone_getaltxfrsource6dscp@Base 1:9.11.3+dfsg + dns_zone_getautomatic@Base 1:9.11.3+dfsg + dns_zone_getchecknames@Base 1:9.11.3+dfsg + dns_zone_getclass@Base 1:9.11.3+dfsg + dns_zone_getdb@Base 1:9.11.3+dfsg + dns_zone_getdbtype@Base 1:9.11.3+dfsg + dns_zone_getexpiretime@Base 1:9.11.3+dfsg + dns_zone_getfile@Base 1:9.11.3+dfsg + dns_zone_getforwardacl@Base 1:9.11.3+dfsg + dns_zone_getidlein@Base 1:9.11.3+dfsg + dns_zone_getidleout@Base 1:9.11.3+dfsg + dns_zone_getincludes@Base 1:9.11.3+dfsg + dns_zone_getjournal@Base 1:9.11.3+dfsg + dns_zone_getjournalsize@Base 1:9.11.3+dfsg + dns_zone_getkeydirectory@Base 1:9.11.3+dfsg + dns_zone_getkeyopts@Base 1:9.11.3+dfsg + dns_zone_getloadtime@Base 1:9.11.3+dfsg + dns_zone_getmaxrecords@Base 1:9.11.3+dfsg + dns_zone_getmaxttl@Base 1:9.11.3+dfsg + dns_zone_getmaxxfrin@Base 1:9.11.3+dfsg + dns_zone_getmaxxfrout@Base 1:9.11.3+dfsg + dns_zone_getmctx@Base 1:9.11.3+dfsg + dns_zone_getmgr@Base 1:9.11.3+dfsg + dns_zone_getnotifyacl@Base 1:9.11.3+dfsg + dns_zone_getnotifydelay@Base 1:9.11.3+dfsg + dns_zone_getnotifysrc4@Base 1:9.11.3+dfsg + dns_zone_getnotifysrc4dscp@Base 1:9.11.3+dfsg + dns_zone_getnotifysrc6@Base 1:9.11.3+dfsg + dns_zone_getnotifysrc6dscp@Base 1:9.11.3+dfsg + dns_zone_getoptions2@Base 1:9.11.3+dfsg + dns_zone_getoptions@Base 1:9.11.3+dfsg + dns_zone_getorigin@Base 1:9.11.3+dfsg + dns_zone_getprivatetype@Base 1:9.11.3+dfsg + dns_zone_getqueryacl@Base 1:9.11.3+dfsg + dns_zone_getqueryonacl@Base 1:9.11.3+dfsg + dns_zone_getraw@Base 1:9.11.3+dfsg + dns_zone_getrcvquerystats@Base 1:9.11.3+dfsg + dns_zone_getrefreshkeytime@Base 1:9.11.3+dfsg + dns_zone_getrefreshtime@Base 1:9.11.3+dfsg + dns_zone_getrequestexpire@Base 1:9.11.3+dfsg + dns_zone_getrequestixfr@Base 1:9.11.3+dfsg + dns_zone_getrequeststats@Base 1:9.11.3+dfsg + dns_zone_getserial2@Base 1:9.11.3+dfsg + dns_zone_getserial@Base 1:9.11.3+dfsg + dns_zone_getserialupdatemethod@Base 1:9.11.3+dfsg + dns_zone_getsignatures@Base 1:9.11.3+dfsg + dns_zone_getsigresigninginterval@Base 1:9.11.3+dfsg + dns_zone_getsigvalidityinterval@Base 1:9.11.3+dfsg + dns_zone_getssutable@Base 1:9.11.3+dfsg + dns_zone_getstatlevel@Base 1:9.11.3+dfsg + dns_zone_getstatscounters@Base 1:9.11.3+dfsg + dns_zone_gettask@Base 1:9.11.3+dfsg + dns_zone_gettype@Base 1:9.11.3+dfsg + dns_zone_getupdateacl@Base 1:9.11.3+dfsg + dns_zone_getupdatedisabled@Base 1:9.11.3+dfsg + dns_zone_getview@Base 1:9.11.3+dfsg + dns_zone_getxfracl@Base 1:9.11.3+dfsg + dns_zone_getxfrsource4@Base 1:9.11.3+dfsg + dns_zone_getxfrsource4dscp@Base 1:9.11.3+dfsg + dns_zone_getxfrsource6@Base 1:9.11.3+dfsg + dns_zone_getxfrsource6dscp@Base 1:9.11.3+dfsg + dns_zone_getzeronosoattl@Base 1:9.11.3+dfsg + dns_zone_iattach@Base 1:9.11.3+dfsg + dns_zone_idetach@Base 1:9.11.3+dfsg + dns_zone_isdynamic@Base 1:9.11.3+dfsg + dns_zone_isforced@Base 1:9.11.3+dfsg + dns_zone_keydone@Base 1:9.11.3+dfsg + dns_zone_link@Base 1:9.11.3+dfsg + dns_zone_load@Base 1:9.11.3+dfsg + dns_zone_loadandthaw@Base 1:9.11.3+dfsg + dns_zone_loadnew@Base 1:9.11.3+dfsg + dns_zone_log@Base 1:9.11.3+dfsg + dns_zone_logc@Base 1:9.11.3+dfsg + dns_zone_logv@Base 1:9.11.4+dfsg + dns_zone_maintenance@Base 1:9.11.3+dfsg + dns_zone_markdirty@Base 1:9.11.3+dfsg + dns_zone_mkey_day@Base 1:9.11.3+dfsg + dns_zone_mkey_hour@Base 1:9.11.3+dfsg + dns_zone_mkey_month@Base 1:9.11.3+dfsg + dns_zone_name@Base 1:9.11.3+dfsg + dns_zone_nameonly@Base 1:9.11.3+dfsg + dns_zone_next@Base 1:9.11.3+dfsg + dns_zone_notify@Base 1:9.11.3+dfsg + dns_zone_notifyreceive2@Base 1:9.11.3+dfsg + dns_zone_notifyreceive2@Base 1:9.11.3+dfsg + dns_zone_notifyreceive@Base 1:9.11.3+dfsg + dns_zone_nscheck@Base 1:9.11.3+dfsg + dns_zone_refresh@Base 1:9.11.3+dfsg + dns_zone_rekey@Base 1:9.11.3+dfsg + dns_zone_replacedb@Base 1:9.11.3+dfsg + dns_zone_rpz_enable@Base 1:9.11.3+dfsg + dns_zone_rpz_enable_db@Base 1:9.11.3+dfsg + dns_zone_set_parentcatz@Base 1:9.11.3+dfsg + dns_zone_setacache@Base 1:9.11.3+dfsg + dns_zone_setadded@Base 1:9.11.3+dfsg + dns_zone_setalsonotify@Base 1:9.11.3+dfsg + dns_zone_setalsonotifydscpkeys@Base 1:9.11.3+dfsg + dns_zone_setalsonotifywithkeys@Base 1:9.11.3+dfsg + dns_zone_setaltxfrsource4@Base 1:9.11.3+dfsg + dns_zone_setaltxfrsource4dscp@Base 1:9.11.3+dfsg + dns_zone_setaltxfrsource6@Base 1:9.11.3+dfsg + dns_zone_setaltxfrsource6dscp@Base 1:9.11.3+dfsg + dns_zone_setautomatic@Base 1:9.11.3+dfsg + dns_zone_setcheckmx@Base 1:9.11.3+dfsg + dns_zone_setchecknames@Base 1:9.11.3+dfsg + dns_zone_setcheckns@Base 1:9.11.3+dfsg + dns_zone_setchecksrv@Base 1:9.11.3+dfsg + dns_zone_setclass@Base 1:9.11.3+dfsg + dns_zone_setdb@Base 1:9.11.3+dfsg + dns_zone_setdbtype@Base 1:9.11.3+dfsg + dns_zone_setdialup@Base 1:9.11.3+dfsg + dns_zone_setfile2@Base 1:9.11.3+dfsg + dns_zone_setfile3@Base 1:9.11.3+dfsg + dns_zone_setfile@Base 1:9.11.3+dfsg + dns_zone_setflag@Base 1:9.11.3+dfsg + dns_zone_setforwardacl@Base 1:9.11.3+dfsg + dns_zone_setidlein@Base 1:9.11.3+dfsg + dns_zone_setidleout@Base 1:9.11.3+dfsg + dns_zone_setisself@Base 1:9.11.3+dfsg + dns_zone_setjournal@Base 1:9.11.3+dfsg + dns_zone_setjournalsize@Base 1:9.11.3+dfsg + dns_zone_setkeydirectory@Base 1:9.11.3+dfsg + dns_zone_setkeyopt@Base 1:9.11.3+dfsg + dns_zone_setmasters@Base 1:9.11.3+dfsg + dns_zone_setmasterswithkeys@Base 1:9.11.3+dfsg + dns_zone_setmaxrecords@Base 1:9.11.3+dfsg + dns_zone_setmaxrefreshtime@Base 1:9.11.3+dfsg + dns_zone_setmaxretrytime@Base 1:9.11.3+dfsg + dns_zone_setmaxttl@Base 1:9.11.3+dfsg + dns_zone_setmaxxfrin@Base 1:9.11.3+dfsg + dns_zone_setmaxxfrout@Base 1:9.11.3+dfsg + dns_zone_setminrefreshtime@Base 1:9.11.3+dfsg + dns_zone_setminretrytime@Base 1:9.11.3+dfsg + dns_zone_setnodes@Base 1:9.11.3+dfsg + dns_zone_setnotifyacl@Base 1:9.11.3+dfsg + dns_zone_setnotifydelay@Base 1:9.11.3+dfsg + dns_zone_setnotifysrc4@Base 1:9.11.3+dfsg + dns_zone_setnotifysrc4dscp@Base 1:9.11.3+dfsg + dns_zone_setnotifysrc6@Base 1:9.11.3+dfsg + dns_zone_setnotifysrc6dscp@Base 1:9.11.3+dfsg + dns_zone_setnotifytype@Base 1:9.11.3+dfsg + dns_zone_setnsec3param@Base 1:9.11.3+dfsg + dns_zone_setoption2@Base 1:9.11.3+dfsg + dns_zone_setoption@Base 1:9.11.3+dfsg + dns_zone_setorigin@Base 1:9.11.3+dfsg + dns_zone_setprivatetype@Base 1:9.11.3+dfsg + dns_zone_setqueryacl@Base 1:9.11.3+dfsg + dns_zone_setqueryonacl@Base 1:9.11.3+dfsg + dns_zone_setrawdata@Base 1:9.11.3+dfsg + dns_zone_setrcvquerystats@Base 1:9.11.3+dfsg + dns_zone_setrefreshkeyinterval@Base 1:9.11.3+dfsg + dns_zone_setrequestexpire@Base 1:9.11.3+dfsg + dns_zone_setrequestixfr@Base 1:9.11.3+dfsg + dns_zone_setrequeststats@Base 1:9.11.3+dfsg + dns_zone_setserial@Base 1:9.11.3+dfsg + dns_zone_setserialupdatemethod@Base 1:9.11.3+dfsg + dns_zone_setsignatures@Base 1:9.11.3+dfsg + dns_zone_setsigresigninginterval@Base 1:9.11.3+dfsg + dns_zone_setsigvalidityinterval@Base 1:9.11.3+dfsg + dns_zone_setssutable@Base 1:9.11.3+dfsg + dns_zone_setstatistics@Base 1:9.11.3+dfsg + dns_zone_setstatlevel@Base 1:9.11.3+dfsg + dns_zone_setstats@Base 1:9.11.3+dfsg + dns_zone_settask@Base 1:9.11.3+dfsg + dns_zone_settype@Base 1:9.11.3+dfsg + dns_zone_setupdateacl@Base 1:9.11.3+dfsg + dns_zone_setupdatedisabled@Base 1:9.11.3+dfsg + dns_zone_setview@Base 1:9.11.3+dfsg + dns_zone_setviewcommit@Base 1:9.11.3+dfsg + dns_zone_setviewrevert@Base 1:9.11.3+dfsg + dns_zone_setviewcommit@Base 1:9.11.3+dfsg + dns_zone_setviewrevert@Base 1:9.11.3+dfsg + dns_zone_setxfracl@Base 1:9.11.3+dfsg + dns_zone_setxfrsource4@Base 1:9.11.3+dfsg + dns_zone_setxfrsource4dscp@Base 1:9.11.3+dfsg + dns_zone_setxfrsource6@Base 1:9.11.3+dfsg + dns_zone_setxfrsource6dscp@Base 1:9.11.3+dfsg + dns_zone_setzeronosoattl@Base 1:9.11.3+dfsg + dns_zone_signwithkey@Base 1:9.11.3+dfsg + dns_zone_synckeyzone@Base 1:9.11.3+dfsg + dns_zone_unload@Base 1:9.11.3+dfsg + dns_zonekey_iszonekey@Base 1:9.11.3+dfsg + dns_zonemgr_attach@Base 1:9.11.3+dfsg + dns_zonemgr_create@Base 1:9.11.3+dfsg + dns_zonemgr_createzone@Base 1:9.11.3+dfsg + dns_zonemgr_detach@Base 1:9.11.3+dfsg + dns_zonemgr_forcemaint@Base 1:9.11.3+dfsg + dns_zonemgr_getcount@Base 1:9.11.3+dfsg + dns_zonemgr_getiolimit@Base 1:9.11.3+dfsg + dns_zonemgr_getnotifyrate@Base 1:9.11.3+dfsg + dns_zonemgr_getserialqueryrate@Base 1:9.11.3+dfsg + dns_zonemgr_getstartupnotifyrate@Base 1:9.11.3+dfsg + dns_zonemgr_getttransfersin@Base 1:9.11.3+dfsg + dns_zonemgr_getttransfersperns@Base 1:9.11.3+dfsg + dns_zonemgr_managezone@Base 1:9.11.3+dfsg + dns_zonemgr_releasezone@Base 1:9.11.3+dfsg + dns_zonemgr_resumexfrs@Base 1:9.11.3+dfsg + dns_zonemgr_setiolimit@Base 1:9.11.3+dfsg + dns_zonemgr_setnotifyrate@Base 1:9.11.3+dfsg + dns_zonemgr_setserialqueryrate@Base 1:9.11.3+dfsg + dns_zonemgr_setsize@Base 1:9.11.3+dfsg + dns_zonemgr_setstartupnotifyrate@Base 1:9.11.3+dfsg + dns_zonemgr_settransfersin@Base 1:9.11.3+dfsg + dns_zonemgr_settransfersperns@Base 1:9.11.3+dfsg + dns_zonemgr_shutdown@Base 1:9.11.3+dfsg + dns_zonemgr_unreachable@Base 1:9.11.3+dfsg + dns_zonemgr_unreachableadd@Base 1:9.11.3+dfsg + dns_zonemgr_unreachabledel@Base 1:9.11.3+dfsg + dns_zt_apply2@Base 1:9.11.3+dfsg + dns_zt_apply@Base 1:9.11.3+dfsg + dns_zt_asyncload2@Base 1:9.11.5+dfsg + dns_zt_asyncload@Base 1:9.11.3+dfsg + dns_zt_attach@Base 1:9.11.3+dfsg + dns_zt_create@Base 1:9.11.3+dfsg + dns_zt_detach@Base 1:9.11.3+dfsg + dns_zt_find@Base 1:9.11.3+dfsg + dns_zt_flushanddetach@Base 1:9.11.3+dfsg + dns_zt_freezezones@Base 1:9.11.3+dfsg + dns_zt_load@Base 1:9.11.3+dfsg + dns_zt_loadnew@Base 1:9.11.3+dfsg + dns_zt_mount@Base 1:9.11.3+dfsg + dns_zt_setviewcommit@Base 1:9.11.3+dfsg + dns_zt_setviewrevert@Base 1:9.11.3+dfsg + dns_zt_setviewcommit@Base 1:9.11.3+dfsg + dns_zt_setviewrevert@Base 1:9.11.3+dfsg + dns_zt_unmount@Base 1:9.11.3+dfsg + dnstap__dnstap__descriptor@Base 1:9.11.4.P1 + dnstap__dnstap__free_unpacked@Base 1:9.11.4.P1 + dnstap__dnstap__get_packed_size@Base 1:9.11.4.P1 + dnstap__dnstap__init@Base 1:9.11.4.P1 + dnstap__dnstap__pack@Base 1:9.11.4.P1 + dnstap__dnstap__pack_to_buffer@Base 1:9.11.4.P1 + dnstap__dnstap__type__descriptor@Base 1:9.11.4.P1 + dnstap__dnstap__unpack@Base 1:9.11.4.P1 + dnstap__message__descriptor@Base 1:9.11.4.P1 + dnstap__message__free_unpacked@Base 1:9.11.4.P1 + dnstap__message__get_packed_size@Base 1:9.11.4.P1 + dnstap__message__init@Base 1:9.11.4.P1 + dnstap__message__pack@Base 1:9.11.4.P1 + dnstap__message__pack_to_buffer@Base 1:9.11.4.P1 + dnstap__message__type__descriptor@Base 1:9.11.4.P1 + dnstap__message__unpack@Base 1:9.11.4.P1 + dnstap__socket_family__descriptor@Base 1:9.11.4.P1 + dnstap__socket_protocol__descriptor@Base 1:9.11.4.P1 + dst__entropy_getdata@Base 1:9.11.3+dfsg + dst__entropy_status@Base 1:9.11.3+dfsg + dst__gssapi_init@Base 1:9.11.3+dfsg + dst__hmacmd5_init@Base 1:9.11.3+dfsg + dst__hmacsha1_init@Base 1:9.11.3+dfsg + dst__hmacsha224_init@Base 1:9.11.3+dfsg + dst__hmacsha256_init@Base 1:9.11.3+dfsg + dst__hmacsha384_init@Base 1:9.11.3+dfsg + dst__hmacsha512_init@Base 1:9.11.3+dfsg + dst__memory_pool@Base 1:9.11.3+dfsg + dst__openssl_destroy@Base 1:9.11.3+dfsg + dst__openssl_getengine@Base 1:9.11.3+dfsg + dst__openssl_init@Base 1:9.11.3+dfsg + dst__openssl_toresult2@Base 1:9.11.3+dfsg + dst__openssl_toresult3@Base 1:9.11.3+dfsg + dst__openssl_toresult@Base 1:9.11.3+dfsg + dst__openssldh_init@Base 1:9.11.3+dfsg + dst__openssldsa_init@Base 1:9.11.3+dfsg + dst__opensslecdsa_init@Base 1:9.11.3+dfsg + (optional)dst__openssleddsa_init@Base 1:9.11.4.P1+dfsg + dst__opensslrsa_init@Base 1:9.11.3+dfsg + dst__privstruct_free@Base 1:9.11.3+dfsg + dst__privstruct_parse@Base 1:9.11.3+dfsg + dst__privstruct_writefile@Base 1:9.11.3+dfsg + dst_algorithm_supported@Base 1:9.11.3+dfsg + dst_context_adddata@Base 1:9.11.3+dfsg + dst_context_create2@Base 1:9.11.3+dfsg + dst_context_create3@Base 1:9.11.3+dfsg + dst_context_create4@Base 1:9.11.3+dfsg + dst_context_create@Base 1:9.11.3+dfsg + dst_context_destroy@Base 1:9.11.3+dfsg + dst_context_sign@Base 1:9.11.3+dfsg + dst_context_verify2@Base 1:9.11.3+dfsg + dst_context_verify@Base 1:9.11.3+dfsg + dst_ds_digest_supported@Base 1:9.11.3+dfsg + dst_gssapi_acceptctx@Base 1:9.11.3+dfsg + dst_gssapi_acquirecred@Base 1:9.11.3+dfsg + dst_gssapi_deletectx@Base 1:9.11.3+dfsg + dst_gssapi_identitymatchesrealmkrb5@Base 1:9.11.3+dfsg + dst_gssapi_identitymatchesrealmms@Base 1:9.11.3+dfsg + dst_gssapi_initctx@Base 1:9.11.3+dfsg + dst_gssapi_releasecred@Base 1:9.11.3+dfsg + dst_key_alg@Base 1:9.11.3+dfsg + dst_key_attach@Base 1:9.11.3+dfsg + dst_key_buildfilename@Base 1:9.11.3+dfsg + dst_key_buildinternal@Base 1:9.11.3+dfsg + dst_key_class@Base 1:9.11.3+dfsg + dst_key_compare@Base 1:9.11.3+dfsg + dst_key_computesecret@Base 1:9.11.3+dfsg + dst_key_dump@Base 1:9.11.3+dfsg + dst_key_flags@Base 1:9.11.3+dfsg + dst_key_format@Base 1:9.11.3+dfsg + dst_key_free@Base 1:9.11.3+dfsg + dst_key_frombuffer@Base 1:9.11.3+dfsg + dst_key_fromdns@Base 1:9.11.3+dfsg + dst_key_fromfile@Base 1:9.11.3+dfsg + dst_key_fromgssapi@Base 1:9.11.3+dfsg + dst_key_fromlabel@Base 1:9.11.3+dfsg + dst_key_fromnamedfile@Base 1:9.11.3+dfsg + dst_key_generate2@Base 1:9.11.3+dfsg + dst_key_generate@Base 1:9.11.3+dfsg + dst_key_getbits@Base 1:9.11.3+dfsg + dst_key_getfilename@Base 1:9.11.3+dfsg + dst_key_getgssctx@Base 1:9.11.3+dfsg + dst_key_getnum@Base 1:9.11.3+dfsg + dst_key_getprivateformat@Base 1:9.11.3+dfsg + dst_key_gettime@Base 1:9.11.3+dfsg + dst_key_getttl@Base 1:9.11.3+dfsg + dst_key_id@Base 1:9.11.3+dfsg + dst_key_inactive@Base 1:9.11.3+dfsg + dst_key_isexternal@Base 1:9.11.3+dfsg + dst_key_isnullkey@Base 1:9.11.3+dfsg + dst_key_isprivate@Base 1:9.11.3+dfsg + dst_key_iszonekey@Base 1:9.11.3+dfsg + dst_key_name@Base 1:9.11.3+dfsg + dst_key_paramcompare@Base 1:9.11.3+dfsg + dst_key_privatefrombuffer@Base 1:9.11.3+dfsg + dst_key_proto@Base 1:9.11.3+dfsg + dst_key_pubcompare@Base 1:9.11.3+dfsg + dst_key_read_public@Base 1:9.11.3+dfsg + dst_key_restore@Base 1:9.11.3+dfsg + dst_key_rid@Base 1:9.11.3+dfsg + dst_key_secretsize@Base 1:9.11.3+dfsg + dst_key_setbits@Base 1:9.11.3+dfsg + dst_key_setexternal@Base 1:9.11.3+dfsg + dst_key_setflags@Base 1:9.11.3+dfsg + dst_key_setinactive@Base 1:9.11.3+dfsg + dst_key_setnum@Base 1:9.11.3+dfsg + dst_key_setprivateformat@Base 1:9.11.3+dfsg + dst_key_settime@Base 1:9.11.3+dfsg + dst_key_setttl@Base 1:9.11.3+dfsg + dst_key_sigsize@Base 1:9.11.3+dfsg + dst_key_size@Base 1:9.11.3+dfsg + dst_key_tkeytoken@Base 1:9.11.3+dfsg + dst_key_tobuffer@Base 1:9.11.3+dfsg + dst_key_todns@Base 1:9.11.3+dfsg + dst_key_tofile@Base 1:9.11.3+dfsg + dst_key_unsetnum@Base 1:9.11.3+dfsg + dst_key_unsettime@Base 1:9.11.3+dfsg + dst_lib_destroy@Base 1:9.11.3+dfsg + dst_lib_init2@Base 1:9.11.3+dfsg + dst_lib_init@Base 1:9.11.3+dfsg + dst_lib_initmsgcat@Base 1:9.11.3+dfsg + dst_msgcat@Base 1:9.11.3+dfsg + dst_region_computeid@Base 1:9.11.3+dfsg + dst_region_computerid@Base 1:9.11.3+dfsg + dst_result_register@Base 1:9.11.3+dfsg + dst_result_totext@Base 1:9.11.3+dfsg + gss_error_tostring@Base 1:9.11.3+dfsg + gss_log@Base 1:9.11.3+dfsg + isc__rdatalist_addclosest@Base 1:9.11.3+dfsg + isc__rdatalist_addnoqname@Base 1:9.11.3+dfsg + isc__rdatalist_clone@Base 1:9.11.3+dfsg + isc__rdatalist_count@Base 1:9.11.3+dfsg + isc__rdatalist_current@Base 1:9.11.3+dfsg + isc__rdatalist_disassociate@Base 1:9.11.3+dfsg + isc__rdatalist_first@Base 1:9.11.3+dfsg + isc__rdatalist_getclosest@Base 1:9.11.3+dfsg + isc__rdatalist_getnoqname@Base 1:9.11.3+dfsg + isc__rdatalist_getownercase@Base 1:9.11.3+dfsg + isc__rdatalist_next@Base 1:9.11.3+dfsg + isc__rdatalist_setownercase@Base 1:9.11.3+dfsg + ishex@Base 1:9.11.3+dfsg diff --git a/debian/libirs-export161-udeb.install b/debian/libirs-export161-udeb.install new file mode 100755 index 0000000..921782a --- /dev/null +++ b/debian/libirs-export161-udeb.install @@ -0,0 +1,2 @@ +#! /usr/bin/dh-exec +../tmp-udeb/lib/*/libirs-export.so.* lib/${DEB_HOST_MULTIARCH} diff --git a/debian/libirs-export161.install b/debian/libirs-export161.install new file mode 100755 index 0000000..921782a --- /dev/null +++ b/debian/libirs-export161.install @@ -0,0 +1,2 @@ +#! /usr/bin/dh-exec +../tmp-udeb/lib/*/libirs-export.so.* lib/${DEB_HOST_MULTIARCH} diff --git a/debian/libirs161.install b/debian/libirs161.install new file mode 100644 index 0000000..e4e9fdc --- /dev/null +++ b/debian/libirs161.install @@ -0,0 +1 @@ +usr/lib/*/libirs.so.* diff --git a/debian/libirs161.symbols b/debian/libirs161.symbols new file mode 100644 index 0000000..3f26f57 --- /dev/null +++ b/debian/libirs161.symbols @@ -0,0 +1,28 @@ +libirs.so.161 libirs161 #MINVER# + freeaddrinfo@Base 1:9.10.6+dfsg + gai_strerror@Base 1:9.10.6+dfsg + getaddrinfo@Base 1:9.10.6+dfsg + getnameinfo@Base 1:9.10.6+dfsg + irs_context_create@Base 1:9.10.6+dfsg + irs_context_destroy@Base 1:9.10.6+dfsg + irs_context_get@Base 1:9.10.6+dfsg + irs_context_getappctx@Base 1:9.10.6+dfsg + irs_context_getdnsclient@Base 1:9.10.6+dfsg + irs_context_getdnsconf@Base 1:9.10.6+dfsg + irs_context_getmctx@Base 1:9.10.6+dfsg + irs_context_getresconf@Base 1:9.10.6+dfsg + irs_context_gettask@Base 1:9.10.6+dfsg + irs_context_gettaskmgr@Base 1:9.10.6+dfsg + irs_context_gettimermgr@Base 1:9.10.6+dfsg + irs_dnsconf_destroy@Base 1:9.10.6+dfsg + irs_dnsconf_gettrustedkeys@Base 1:9.10.6+dfsg + irs_dnsconf_load@Base 1:9.10.6+dfsg + irs_libage@Base 1:9.10.6+dfsg + irs_libinterface@Base 1:9.10.6+dfsg + irs_librevision@Base 1:9.10.6+dfsg + irs_resconf_destroy@Base 1:9.10.6+dfsg + irs_resconf_getnameservers@Base 1:9.10.6+dfsg + irs_resconf_getndots@Base 1:9.10.6+dfsg + irs_resconf_getsearchlist@Base 1:9.10.6+dfsg + irs_resconf_load@Base 1:9.10.6+dfsg + irs_version@Base 1:9.10.6+dfsg diff --git a/debian/libisc-export1100-udeb.install b/debian/libisc-export1100-udeb.install new file mode 100755 index 0000000..f89acd6 --- /dev/null +++ b/debian/libisc-export1100-udeb.install @@ -0,0 +1,2 @@ +#! /usr/bin/dh-exec +../tmp-udeb/lib/*/libisc-export.so.* lib/${DEB_HOST_MULTIARCH} diff --git a/debian/libisc-export1100.install b/debian/libisc-export1100.install new file mode 100755 index 0000000..f89acd6 --- /dev/null +++ b/debian/libisc-export1100.install @@ -0,0 +1,2 @@ +#! /usr/bin/dh-exec +../tmp-udeb/lib/*/libisc-export.so.* lib/${DEB_HOST_MULTIARCH} diff --git a/debian/libisc1100.install b/debian/libisc1100.install new file mode 100644 index 0000000..5d4c76a --- /dev/null +++ b/debian/libisc1100.install @@ -0,0 +1,2 @@ +usr/lib/*/libisc-pkcs11.so.* +usr/lib/*/libisc.so.* diff --git a/debian/libisc1100.symbols b/debian/libisc1100.symbols new file mode 100644 index 0000000..3197dcb --- /dev/null +++ b/debian/libisc1100.symbols @@ -0,0 +1,1803 @@ +libisc.so.1100 libisc1100 #MINVER# + (optional)bsdcompat@Base 1:9.11.3+dfsg + isc___errno2result@Base 1:9.11.3+dfsg + isc___mem_allocate@Base 1:9.11.3+dfsg + isc___mem_free@Base 1:9.11.3+dfsg + isc___mem_get@Base 1:9.11.3+dfsg + isc___mem_put@Base 1:9.11.3+dfsg + isc___mem_putanddetach@Base 1:9.11.3+dfsg + isc___mem_reallocate@Base 1:9.11.3+dfsg + isc___mem_strdup@Base 1:9.11.3+dfsg + isc___mempool_get@Base 1:9.11.3+dfsg + isc___mempool_put@Base 1:9.11.3+dfsg + isc__app_block@Base 1:9.11.3+dfsg + isc__app_ctxfinish@Base 1:9.11.3+dfsg + isc__app_ctxonrun@Base 1:9.11.3+dfsg + isc__app_ctxrun@Base 1:9.11.3+dfsg + isc__app_ctxshutdown@Base 1:9.11.3+dfsg + isc__app_ctxstart@Base 1:9.11.3+dfsg + isc__app_ctxsuspend@Base 1:9.11.3+dfsg + isc__app_finish@Base 1:9.11.3+dfsg + isc__app_onrun@Base 1:9.11.3+dfsg + isc__app_register@Base 1:9.11.3+dfsg + isc__app_reload@Base 1:9.11.3+dfsg + isc__app_run@Base 1:9.11.3+dfsg + isc__app_shutdown@Base 1:9.11.3+dfsg + isc__app_start@Base 1:9.11.3+dfsg + isc__app_unblock@Base 1:9.11.3+dfsg + isc__appctx_create@Base 1:9.11.3+dfsg + isc__appctx_destroy@Base 1:9.11.3+dfsg + isc__appctx_setsocketmgr@Base 1:9.11.3+dfsg + isc__appctx_settaskmgr@Base 1:9.11.3+dfsg + isc__appctx_settimermgr@Base 1:9.11.3+dfsg + isc__backtrace_nsymbols@Base 1:9.11.3+dfsg + isc__backtrace_symtable@Base 1:9.11.3+dfsg + isc__buffer_activeregion@Base 1:9.11.3+dfsg + isc__buffer_add@Base 1:9.11.3+dfsg + isc__buffer_availableregion@Base 1:9.11.3+dfsg + isc__buffer_back@Base 1:9.11.3+dfsg + isc__buffer_clear@Base 1:9.11.3+dfsg + isc__buffer_consumedregion@Base 1:9.11.3+dfsg + isc__buffer_first@Base 1:9.11.3+dfsg + isc__buffer_forward@Base 1:9.11.3+dfsg + isc__buffer_init@Base 1:9.11.3+dfsg + isc__buffer_initnull@Base 1:9.11.3+dfsg + isc__buffer_invalidate@Base 1:9.11.3+dfsg + isc__buffer_putmem@Base 1:9.11.3+dfsg + isc__buffer_putstr@Base 1:9.11.3+dfsg + isc__buffer_putuint16@Base 1:9.11.3+dfsg + isc__buffer_putuint24@Base 1:9.11.3+dfsg + isc__buffer_putuint32@Base 1:9.11.3+dfsg + isc__buffer_putuint48@Base 1:9.11.3+dfsg + isc__buffer_putuint8@Base 1:9.11.3+dfsg + isc__buffer_region@Base 1:9.11.3+dfsg + isc__buffer_remainingregion@Base 1:9.11.3+dfsg + isc__buffer_setactive@Base 1:9.11.3+dfsg + isc__buffer_subtract@Base 1:9.11.3+dfsg + isc__buffer_usedregion@Base 1:9.11.3+dfsg + isc__hash_setvec@Base 1:9.11.3+dfsg + isc__mem_allocate@Base 1:9.11.3+dfsg + isc__mem_attach@Base 1:9.11.3+dfsg + isc__mem_create2@Base 1:9.11.3+dfsg + isc__mem_destroy@Base 1:9.11.3+dfsg + isc__mem_detach@Base 1:9.11.3+dfsg + isc__mem_free@Base 1:9.11.3+dfsg + isc__mem_get@Base 1:9.11.3+dfsg + isc__mem_inuse@Base 1:9.11.3+dfsg + isc__mem_isovermem@Base 1:9.11.3+dfsg + isc__mem_maxinuse@Base 1:9.11.3+dfsg + isc__mem_printactive@Base 1:9.11.3+dfsg + isc__mem_put@Base 1:9.11.3+dfsg + isc__mem_putanddetach@Base 1:9.11.3+dfsg + isc__mem_reallocate@Base 1:9.11.3+dfsg + isc__mem_register@Base 1:9.11.3+dfsg + isc__mem_setdestroycheck@Base 1:9.11.3+dfsg + isc__mem_setwater@Base 1:9.11.3+dfsg + isc__mem_strdup@Base 1:9.11.3+dfsg + isc__mem_total@Base 1:9.11.3+dfsg + isc__mem_waterack@Base 1:9.11.3+dfsg + isc__mempool_associatelock@Base 1:9.11.3+dfsg + isc__mempool_create@Base 1:9.11.3+dfsg + isc__mempool_destroy@Base 1:9.11.3+dfsg + isc__mempool_get@Base 1:9.11.3+dfsg + isc__mempool_getallocated@Base 1:9.11.3+dfsg + isc__mempool_put@Base 1:9.11.3+dfsg + isc__mempool_setfillcount@Base 1:9.11.3+dfsg + isc__mempool_setfreemax@Base 1:9.11.3+dfsg + isc__mempool_setmaxalloc@Base 1:9.11.3+dfsg + isc__mempool_setname@Base 1:9.11.3+dfsg + isc__mutex_init@Base 1:9.11.3+dfsg + isc__socket_accept@Base 1:9.11.3+dfsg + isc__socket_attach@Base 1:9.11.3+dfsg + isc__socket_bind@Base 1:9.11.3+dfsg + isc__socket_cancel@Base 1:9.11.3+dfsg + isc__socket_cleanunix@Base 1:9.11.3+dfsg + isc__socket_close@Base 1:9.11.3+dfsg + isc__socket_connect@Base 1:9.11.3+dfsg + isc__socket_create@Base 1:9.11.3+dfsg + isc__socket_detach@Base 1:9.11.3+dfsg + isc__socket_dscp@Base 1:9.11.3+dfsg + isc__socket_dup@Base 1:9.11.3+dfsg + isc__socket_fdwatchcreate@Base 1:9.11.3+dfsg + isc__socket_fdwatchpoke@Base 1:9.11.3+dfsg + isc__socket_filter@Base 1:9.11.3+dfsg + isc__socket_getfd@Base 1:9.11.3+dfsg + isc__socket_getname@Base 1:9.11.3+dfsg + isc__socket_getpeername@Base 1:9.11.3+dfsg + isc__socket_getsockname@Base 1:9.11.3+dfsg + isc__socket_gettag@Base 1:9.11.3+dfsg + isc__socket_gettype@Base 1:9.11.3+dfsg + isc__socket_ipv6only@Base 1:9.11.3+dfsg + isc__socket_isbound@Base 1:9.11.3+dfsg + isc__socket_listen@Base 1:9.11.3+dfsg + isc__socket_open@Base 1:9.11.3+dfsg + isc__socket_permunix@Base 1:9.11.3+dfsg + isc__socket_recv2@Base 1:9.11.3+dfsg + isc__socket_recv@Base 1:9.11.3+dfsg + isc__socket_recvv@Base 1:9.11.3+dfsg + isc__socket_register@Base 1:9.11.3+dfsg + isc__socket_send@Base 1:9.11.3+dfsg + isc__socket_sendto2@Base 1:9.11.3+dfsg + isc__socket_sendto@Base 1:9.11.3+dfsg + isc__socket_sendtov2@Base 1:9.11.3+dfsg + isc__socket_sendtov@Base 1:9.11.3+dfsg + isc__socket_sendv@Base 1:9.11.3+dfsg + isc__socket_setname@Base 1:9.11.3+dfsg + isc__socketmgr_create2@Base 1:9.11.3+dfsg + isc__socketmgr_create@Base 1:9.11.3+dfsg + isc__socketmgr_destroy@Base 1:9.11.3+dfsg + isc__socketmgr_maxudp@Base 1:9.11.3+dfsg + isc__socketmgr_setreserved@Base 1:9.11.3+dfsg + isc__strerror@Base 1:9.11.3+dfsg + isc__task_attach@Base 1:9.11.3+dfsg + isc__task_beginexclusive@Base 1:9.11.3+dfsg + isc__task_create@Base 1:9.11.3+dfsg + isc__task_destroy@Base 1:9.11.3+dfsg + isc__task_detach@Base 1:9.11.3+dfsg + isc__task_endexclusive@Base 1:9.11.3+dfsg + isc__task_getcurrenttime@Base 1:9.11.3+dfsg + isc__task_getcurrenttimex@Base 1:9.11.3+dfsg + isc__task_getname@Base 1:9.11.3+dfsg + isc__task_gettag@Base 1:9.11.3+dfsg + isc__task_onshutdown@Base 1:9.11.3+dfsg + isc__task_privilege@Base 1:9.11.3+dfsg + isc__task_purge@Base 1:9.11.3+dfsg + isc__task_purgerange@Base 1:9.11.3+dfsg + isc__task_register@Base 1:9.11.3+dfsg + isc__task_send@Base 1:9.11.3+dfsg + isc__task_sendanddetach@Base 1:9.11.3+dfsg + isc__task_setname@Base 1:9.11.3+dfsg + isc__task_setprivilege@Base 1:9.11.3+dfsg + isc__task_shutdown@Base 1:9.11.3+dfsg + isc__task_unsend@Base 1:9.11.3+dfsg + isc__task_unsendrange@Base 1:9.11.3+dfsg + isc__taskmgr_create@Base 1:9.11.3+dfsg + isc__taskmgr_destroy@Base 1:9.11.3+dfsg + isc__taskmgr_mode@Base 1:9.11.3+dfsg + isc__taskmgr_pause@Base 1:9.11.3+dfsg + isc__taskmgr_resume@Base 1:9.11.3+dfsg + isc__taskmgr_setmode@Base 1:9.11.3+dfsg + isc__timer_attach@Base 1:9.11.3+dfsg + isc__timer_create@Base 1:9.11.3+dfsg + isc__timer_detach@Base 1:9.11.3+dfsg + isc__timer_register@Base 1:9.11.3+dfsg + isc__timer_reset@Base 1:9.11.3+dfsg + isc__timer_touch@Base 1:9.11.3+dfsg + isc__timermgr_create@Base 1:9.11.3+dfsg + isc__timermgr_destroy@Base 1:9.11.3+dfsg + isc_aes128_crypt@Base 1:9.11.3+dfsg + isc_aes192_crypt@Base 1:9.11.3+dfsg + isc_aes256_crypt@Base 1:9.11.3+dfsg + isc_app_block@Base 1:9.11.3+dfsg + isc_app_ctxfinish@Base 1:9.11.3+dfsg + isc_app_ctxonrun@Base 1:9.11.3+dfsg + isc_app_ctxrun@Base 1:9.11.3+dfsg + isc_app_ctxshutdown@Base 1:9.11.3+dfsg + isc_app_ctxstart@Base 1:9.11.3+dfsg + isc_app_ctxsuspend@Base 1:9.11.3+dfsg + isc_app_finish@Base 1:9.11.3+dfsg + isc_app_isrunning@Base 1:9.11.3+dfsg + isc_app_onrun@Base 1:9.11.3+dfsg + isc_app_register@Base 1:9.11.3+dfsg + isc_app_reload@Base 1:9.11.3+dfsg + isc_app_run@Base 1:9.11.3+dfsg + isc_app_shutdown@Base 1:9.11.3+dfsg + isc_app_start@Base 1:9.11.3+dfsg + isc_app_unblock@Base 1:9.11.3+dfsg + isc_appctx_create@Base 1:9.11.3+dfsg + isc_appctx_destroy@Base 1:9.11.3+dfsg + isc_appctx_setsocketmgr@Base 1:9.11.3+dfsg + isc_appctx_settaskmgr@Base 1:9.11.3+dfsg + isc_appctx_settimermgr@Base 1:9.11.3+dfsg + isc_assertion_failed@Base 1:9.11.3+dfsg + isc_assertion_setcallback@Base 1:9.11.3+dfsg + isc_assertion_typetotext@Base 1:9.11.3+dfsg + isc_backtrace_getsymbol@Base 1:9.11.3+dfsg + isc_backtrace_getsymbolfromindex@Base 1:9.11.3+dfsg + isc_backtrace_gettrace@Base 1:9.11.3+dfsg + isc_base32_decoderegion@Base 1:9.11.3+dfsg + isc_base32_decodestring@Base 1:9.11.3+dfsg + isc_base32_tobuffer@Base 1:9.11.3+dfsg + isc_base32_totext@Base 1:9.11.3+dfsg + isc_base32hex_decoderegion@Base 1:9.11.3+dfsg + isc_base32hex_decodestring@Base 1:9.11.3+dfsg + isc_base32hex_tobuffer@Base 1:9.11.3+dfsg + isc_base32hex_totext@Base 1:9.11.3+dfsg + isc_base32hexnp_decoderegion@Base 1:9.11.3+dfsg + isc_base32hexnp_decodestring@Base 1:9.11.3+dfsg + isc_base32hexnp_tobuffer@Base 1:9.11.3+dfsg + isc_base32hexnp_totext@Base 1:9.11.3+dfsg + isc_base64_decodestring@Base 1:9.11.3+dfsg + isc_base64_tobuffer@Base 1:9.11.3+dfsg + isc_base64_totext@Base 1:9.11.3+dfsg + isc_bind9@Base 1:9.11.3+dfsg + isc_buffer_allocate@Base 1:9.11.3+dfsg + isc_buffer_compact@Base 1:9.11.3+dfsg + isc_buffer_copyregion@Base 1:9.11.3+dfsg + isc_buffer_dup@Base 1:9.11.3+dfsg + isc_buffer_free@Base 1:9.11.3+dfsg + isc_buffer_getuint16@Base 1:9.11.3+dfsg + isc_buffer_getuint32@Base 1:9.11.3+dfsg + isc_buffer_getuint48@Base 1:9.11.3+dfsg + isc_buffer_getuint8@Base 1:9.11.3+dfsg + isc_buffer_putdecint@Base 1:9.11.3+dfsg + isc_buffer_reallocate@Base 1:9.11.3+dfsg + isc_buffer_reinit@Base 1:9.11.3+dfsg + isc_buffer_reserve@Base 1:9.11.3+dfsg + isc_buffer_setautorealloc@Base 1:9.11.3+dfsg + isc_bufferlist_availablecount@Base 1:9.11.3+dfsg + isc_bufferlist_usedcount@Base 1:9.11.3+dfsg + isc_categories@Base 1:9.11.3+dfsg + isc_commandline_argument@Base 1:9.11.3+dfsg + isc_commandline_errprint@Base 1:9.11.3+dfsg + isc_commandline_index@Base 1:9.11.3+dfsg + isc_commandline_option@Base 1:9.11.3+dfsg + isc_commandline_parse@Base 1:9.11.3+dfsg + isc_commandline_progname@Base 1:9.11.3+dfsg + isc_commandline_reset@Base 1:9.11.3+dfsg + isc_commandline_strtoargv@Base 1:9.11.3+dfsg + isc_condition_waituntil@Base 1:9.11.3+dfsg + isc_counter_attach@Base 1:9.11.3+dfsg + isc_counter_create@Base 1:9.11.3+dfsg + isc_counter_detach@Base 1:9.11.3+dfsg + isc_counter_increment@Base 1:9.11.3+dfsg + isc_counter_setlimit@Base 1:9.11.3+dfsg + isc_counter_used@Base 1:9.11.3+dfsg + isc_crc64_final@Base 1:9.11.3+dfsg + isc_crc64_init@Base 1:9.11.3+dfsg + isc_crc64_update@Base 1:9.11.3+dfsg + isc_dir_chdir@Base 1:9.11.3+dfsg + isc_dir_chroot@Base 1:9.11.3+dfsg + isc_dir_close@Base 1:9.11.3+dfsg + isc_dir_createunique@Base 1:9.11.3+dfsg + isc_dir_init@Base 1:9.11.3+dfsg + isc_dir_open@Base 1:9.11.3+dfsg + isc_dir_read@Base 1:9.11.3+dfsg + isc_dir_reset@Base 1:9.11.3+dfsg + isc_dscp_check_value@Base 1:9.11.3+dfsg + isc_entropy_addcallbacksample@Base 1:9.11.3+dfsg + isc_entropy_addsample@Base 1:9.11.3+dfsg + isc_entropy_attach@Base 1:9.11.3+dfsg + isc_entropy_create@Base 1:9.11.3+dfsg + isc_entropy_createcallbacksource@Base 1:9.11.3+dfsg + isc_entropy_createfilesource@Base 1:9.11.3+dfsg + isc_entropy_createsamplesource@Base 1:9.11.3+dfsg + isc_entropy_destroysource@Base 1:9.11.3+dfsg + isc_entropy_detach@Base 1:9.11.3+dfsg + isc_entropy_getdata@Base 1:9.11.3+dfsg + isc_entropy_putdata@Base 1:9.11.3+dfsg + isc_entropy_stats@Base 1:9.11.3+dfsg + isc_entropy_status@Base 1:9.11.3+dfsg + isc_entropy_stopcallbacksources@Base 1:9.11.3+dfsg + isc_entropy_usebestsource@Base 1:9.11.3+dfsg + isc_errno_toresult@Base 1:9.11.3+dfsg + isc_error_fatal@Base 1:9.11.3+dfsg + isc_error_runtimecheck@Base 1:9.11.3+dfsg + isc_error_setfatal@Base 1:9.11.3+dfsg + isc_error_setunexpected@Base 1:9.11.3+dfsg + isc_error_unexpected@Base 1:9.11.3+dfsg + isc_event_allocate@Base 1:9.11.3+dfsg + isc_event_constallocate@Base 1:9.11.3+dfsg + isc_event_free@Base 1:9.11.3+dfsg + isc_file_absolutepath@Base 1:9.11.3+dfsg + isc_file_basename@Base 1:9.11.3+dfsg + isc_file_bopenunique@Base 1:9.11.3+dfsg + isc_file_bopenuniquemode@Base 1:9.11.3+dfsg + isc_file_bopenuniqueprivate@Base 1:9.11.3+dfsg + isc_file_exists@Base 1:9.11.3+dfsg + isc_file_getmodtime@Base 1:9.11.3+dfsg + isc_file_getsize@Base 1:9.11.3+dfsg + isc_file_getsizefd@Base 1:9.11.3+dfsg + isc_file_isabsolute@Base 1:9.11.3+dfsg + isc_file_ischdiridempotent@Base 1:9.11.3+dfsg + isc_file_iscurrentdir@Base 1:9.11.3+dfsg + isc_file_isdirectory@Base 1:9.11.3+dfsg + isc_file_isdirwritable@Base 1:9.11.3+dfsg + isc_file_isplainfile@Base 1:9.11.3+dfsg + isc_file_isplainfilefd@Base 1:9.11.3+dfsg + isc_file_mktemplate@Base 1:9.11.3+dfsg + isc_file_mmap@Base 1:9.11.3+dfsg + isc_file_mode@Base 1:9.11.3+dfsg + isc_file_munmap@Base 1:9.11.3+dfsg + isc_file_openunique@Base 1:9.11.3+dfsg + isc_file_openuniquemode@Base 1:9.11.3+dfsg + isc_file_openuniqueprivate@Base 1:9.11.3+dfsg + isc_file_progname@Base 1:9.11.3+dfsg + isc_file_remove@Base 1:9.11.3+dfsg + isc_file_rename@Base 1:9.11.3+dfsg + isc_file_renameunique@Base 1:9.11.3+dfsg + isc_file_safecreate@Base 1:9.11.3+dfsg + isc_file_sanitize@Base 1:9.11.3+dfsg + isc_file_settime@Base 1:9.11.3+dfsg + isc_file_splitpath@Base 1:9.11.3+dfsg + isc_file_template@Base 1:9.11.3+dfsg + isc_file_truncate@Base 1:9.11.3+dfsg + isc_fsaccess_add@Base 1:9.11.3+dfsg + isc_fsaccess_remove@Base 1:9.11.3+dfsg + isc_fsaccess_set@Base 1:9.11.3+dfsg + isc_hash_calc@Base 1:9.11.3+dfsg + isc_hash_create@Base 1:9.11.3+dfsg + isc_hash_ctxattach@Base 1:9.11.3+dfsg + isc_hash_ctxcalc@Base 1:9.11.3+dfsg + isc_hash_ctxcreate@Base 1:9.11.3+dfsg + isc_hash_ctxdetach@Base 1:9.11.3+dfsg + isc_hash_ctxinit@Base 1:9.11.3+dfsg + isc_hash_destroy@Base 1:9.11.3+dfsg + isc_hash_function@Base 1:9.11.3+dfsg + isc_hash_function_reverse@Base 1:9.11.3+dfsg + isc_hash_get_initializer@Base 1:9.11.3+dfsg + isc_hash_init@Base 1:9.11.3+dfsg + isc_hash_set_initializer@Base 1:9.11.3+dfsg + isc_hashctx@Base 1:9.11.3+dfsg + isc_heap_create@Base 1:9.11.3+dfsg + isc_heap_decreased@Base 1:9.11.3+dfsg + isc_heap_delete@Base 1:9.11.3+dfsg + isc_heap_destroy@Base 1:9.11.3+dfsg + isc_heap_element@Base 1:9.11.3+dfsg + isc_heap_foreach@Base 1:9.11.3+dfsg + isc_heap_increased@Base 1:9.11.3+dfsg + isc_heap_insert@Base 1:9.11.3+dfsg + isc_hex_decodestring@Base 1:9.11.3+dfsg + isc_hex_tobuffer@Base 1:9.11.3+dfsg + isc_hex_totext@Base 1:9.11.3+dfsg + isc_hmacmd5_check@Base 1:9.11.3+dfsg + isc_hmacmd5_init@Base 1:9.11.3+dfsg + isc_hmacmd5_invalidate@Base 1:9.11.3+dfsg + isc_hmacmd5_sign@Base 1:9.11.3+dfsg + isc_hmacmd5_update@Base 1:9.11.3+dfsg + isc_hmacmd5_verify2@Base 1:9.11.3+dfsg + isc_hmacmd5_verify@Base 1:9.11.3+dfsg + isc_hmacsha1_check@Base 1:9.11.3+dfsg + isc_hmacsha1_init@Base 1:9.11.3+dfsg + isc_hmacsha1_invalidate@Base 1:9.11.3+dfsg + isc_hmacsha1_sign@Base 1:9.11.3+dfsg + isc_hmacsha1_update@Base 1:9.11.3+dfsg + isc_hmacsha1_verify@Base 1:9.11.3+dfsg + isc_hmacsha224_init@Base 1:9.11.3+dfsg + isc_hmacsha224_invalidate@Base 1:9.11.3+dfsg + isc_hmacsha224_sign@Base 1:9.11.3+dfsg + isc_hmacsha224_update@Base 1:9.11.3+dfsg + isc_hmacsha224_verify@Base 1:9.11.3+dfsg + isc_hmacsha256_init@Base 1:9.11.3+dfsg + isc_hmacsha256_invalidate@Base 1:9.11.3+dfsg + isc_hmacsha256_sign@Base 1:9.11.3+dfsg + isc_hmacsha256_update@Base 1:9.11.3+dfsg + isc_hmacsha256_verify@Base 1:9.11.3+dfsg + isc_hmacsha384_init@Base 1:9.11.3+dfsg + isc_hmacsha384_invalidate@Base 1:9.11.3+dfsg + isc_hmacsha384_sign@Base 1:9.11.3+dfsg + isc_hmacsha384_update@Base 1:9.11.3+dfsg + isc_hmacsha384_verify@Base 1:9.11.3+dfsg + isc_hmacsha512_init@Base 1:9.11.3+dfsg + isc_hmacsha512_invalidate@Base 1:9.11.3+dfsg + isc_hmacsha512_sign@Base 1:9.11.3+dfsg + isc_hmacsha512_update@Base 1:9.11.3+dfsg + isc_hmacsha512_verify@Base 1:9.11.3+dfsg + isc_ht_add@Base 1:9.11.3+dfsg + isc_ht_count@Base 1:9.11.3+dfsg + isc_ht_delete@Base 1:9.11.3+dfsg + isc_ht_destroy@Base 1:9.11.3+dfsg + isc_ht_find@Base 1:9.11.3+dfsg + isc_ht_init@Base 1:9.11.3+dfsg + isc_ht_iter_create@Base 1:9.11.3+dfsg + isc_ht_iter_current@Base 1:9.11.3+dfsg + isc_ht_iter_currentkey@Base 1:9.11.3+dfsg + isc_ht_iter_delcurrent_next@Base 1:9.11.3+dfsg + isc_ht_iter_destroy@Base 1:9.11.3+dfsg + isc_ht_iter_first@Base 1:9.11.3+dfsg + isc_ht_iter_next@Base 1:9.11.3+dfsg + isc_httpd_addheader@Base 1:9.11.3+dfsg + isc_httpd_addheaderuint@Base 1:9.11.3+dfsg + isc_httpd_endheaders@Base 1:9.11.3+dfsg + isc_httpd_response@Base 1:9.11.3+dfsg + isc_httpd_setfinishhook@Base 1:9.11.3+dfsg + isc_httpdmgr_addurl2@Base 1:9.11.3+dfsg + isc_httpdmgr_addurl@Base 1:9.11.3+dfsg + isc_httpdmgr_create@Base 1:9.11.3+dfsg + isc_httpdmgr_shutdown@Base 1:9.11.3+dfsg + isc_interfaceiter_create@Base 1:9.11.3+dfsg + isc_interfaceiter_current@Base 1:9.11.3+dfsg + isc_interfaceiter_destroy@Base 1:9.11.3+dfsg + isc_interfaceiter_first@Base 1:9.11.3+dfsg + isc_interfaceiter_next@Base 1:9.11.3+dfsg + isc_interval_iszero@Base 1:9.11.3+dfsg + isc_interval_set@Base 1:9.11.3+dfsg + isc_interval_zero@Base 1:9.11.3+dfsg + isc_iterated_hash@Base 1:9.11.3+dfsg + isc_keyboard_canceled@Base 1:9.11.3+dfsg + isc_keyboard_close@Base 1:9.11.3+dfsg + isc_keyboard_getchar@Base 1:9.11.3+dfsg + isc_keyboard_open@Base 1:9.11.3+dfsg + isc_lctx@Base 1:9.11.3+dfsg + isc_lex_close@Base 1:9.11.3+dfsg + isc_lex_create@Base 1:9.11.3+dfsg + isc_lex_destroy@Base 1:9.11.3+dfsg + isc_lex_getcomments@Base 1:9.11.3+dfsg + isc_lex_getlasttokentext@Base 1:9.11.3+dfsg + isc_lex_getmastertoken@Base 1:9.11.3+dfsg + isc_lex_getoctaltoken@Base 1:9.11.3+dfsg + isc_lex_getsourceline@Base 1:9.11.3+dfsg + isc_lex_getsourcename@Base 1:9.11.3+dfsg + isc_lex_getspecials@Base 1:9.11.3+dfsg + isc_lex_gettoken@Base 1:9.11.3+dfsg + isc_lex_isfile@Base 1:9.11.3+dfsg + isc_lex_openbuffer@Base 1:9.11.3+dfsg + isc_lex_openfile@Base 1:9.11.3+dfsg + isc_lex_openstream@Base 1:9.11.3+dfsg + isc_lex_setcomments@Base 1:9.11.3+dfsg + isc_lex_setsourceline@Base 1:9.11.3+dfsg + isc_lex_setsourcename@Base 1:9.11.3+dfsg + isc_lex_setspecials@Base 1:9.11.3+dfsg + isc_lex_ungettoken@Base 1:9.11.3+dfsg + isc_lfsr_generate32@Base 1:9.11.3+dfsg + isc_lfsr_generate@Base 1:9.11.3+dfsg + isc_lfsr_init@Base 1:9.11.3+dfsg + isc_lfsr_skip@Base 1:9.11.3+dfsg + isc_lib_initmsgcat@Base 1:9.11.3+dfsg + isc_lib_register@Base 1:9.11.3+dfsg + isc_libage@Base 1:9.11.3+dfsg + isc_libinterface@Base 1:9.11.3+dfsg + isc_librevision@Base 1:9.11.3+dfsg + isc_log_categorybyname@Base 1:9.11.3+dfsg + isc_log_closefilelogs@Base 1:9.11.3+dfsg + isc_log_create@Base 1:9.11.3+dfsg + isc_log_createchannel@Base 1:9.11.3+dfsg + isc_log_destroy@Base 1:9.11.3+dfsg + isc_log_getdebuglevel@Base 1:9.11.3+dfsg + isc_log_getduplicateinterval@Base 1:9.11.3+dfsg + isc_log_gettag@Base 1:9.11.3+dfsg + isc_log_ivwrite1@Base 1:9.11.3+dfsg + isc_log_ivwrite@Base 1:9.11.3+dfsg + isc_log_iwrite1@Base 1:9.11.3+dfsg + isc_log_iwrite@Base 1:9.11.3+dfsg + isc_log_modulebyname@Base 1:9.11.3+dfsg + isc_log_opensyslog@Base 1:9.11.3+dfsg + isc_log_registercategories@Base 1:9.11.3+dfsg + isc_log_registermodules@Base 1:9.11.3+dfsg + isc_log_setcontext@Base 1:9.11.3+dfsg + isc_log_setdebuglevel@Base 1:9.11.3+dfsg + isc_log_setduplicateinterval@Base 1:9.11.3+dfsg + isc_log_settag@Base 1:9.11.3+dfsg + isc_log_usechannel@Base 1:9.11.3+dfsg + isc_log_vwrite1@Base 1:9.11.3+dfsg + isc_log_vwrite@Base 1:9.11.3+dfsg + isc_log_wouldlog@Base 1:9.11.3+dfsg + isc_log_write1@Base 1:9.11.3+dfsg + isc_log_write@Base 1:9.11.3+dfsg + isc_logconfig_create@Base 1:9.11.3+dfsg + isc_logconfig_destroy@Base 1:9.11.3+dfsg + isc_logconfig_get@Base 1:9.11.3+dfsg + isc_logconfig_use@Base 1:9.11.3+dfsg + isc_logfile_roll@Base 1:9.11.3+dfsg + isc_md5_check@Base 1:9.11.3+dfsg + isc_md5_final@Base 1:9.11.3+dfsg + isc_md5_init@Base 1:9.11.3+dfsg + isc_md5_invalidate@Base 1:9.11.3+dfsg + isc_md5_update@Base 1:9.11.3+dfsg + isc_mem_attach@Base 1:9.11.3+dfsg + isc_mem_checkdestroyed@Base 1:9.11.3+dfsg + isc_mem_create2@Base 1:9.11.3+dfsg + isc_mem_create@Base 1:9.11.3+dfsg + isc_mem_createx2@Base 1:9.11.3+dfsg + isc_mem_createx@Base 1:9.11.3+dfsg + isc_mem_debugging@Base 1:9.11.3+dfsg + isc_mem_defaultflags@Base 1:9.11.3+dfsg + isc_mem_destroy@Base 1:9.11.3+dfsg + isc_mem_detach@Base 1:9.11.3+dfsg + isc_mem_getname@Base 1:9.11.3+dfsg + isc_mem_getquota@Base 1:9.11.3+dfsg + isc_mem_gettag@Base 1:9.11.3+dfsg + isc_mem_inuse@Base 1:9.11.3+dfsg + isc_mem_isovermem@Base 1:9.11.3+dfsg + isc_mem_maxinuse@Base 1:9.11.3+dfsg + isc_mem_ondestroy@Base 1:9.11.3+dfsg + isc_mem_printallactive@Base 1:9.11.3+dfsg + isc_mem_references@Base 1:9.11.3+dfsg + isc_mem_register@Base 1:9.11.3+dfsg + isc_mem_renderjson@Base 1:9.11.3+dfsg + isc_mem_renderxml@Base 1:9.11.3+dfsg + isc_mem_setdestroycheck@Base 1:9.11.3+dfsg + isc_mem_setname@Base 1:9.11.3+dfsg + isc_mem_setquota@Base 1:9.11.3+dfsg + isc_mem_setwater@Base 1:9.11.3+dfsg + isc_mem_stats@Base 1:9.11.3+dfsg + isc_mem_total@Base 1:9.11.3+dfsg + isc_mem_waterack@Base 1:9.11.3+dfsg + isc_meminfo_totalphys@Base 1:9.11.3+dfsg + isc_mempool_associatelock@Base 1:9.11.3+dfsg + isc_mempool_create@Base 1:9.11.3+dfsg + isc_mempool_destroy@Base 1:9.11.3+dfsg + isc_mempool_getallocated@Base 1:9.11.3+dfsg + isc_mempool_getfillcount@Base 1:9.11.3+dfsg + isc_mempool_getfreecount@Base 1:9.11.3+dfsg + isc_mempool_getfreemax@Base 1:9.11.3+dfsg + isc_mempool_getmaxalloc@Base 1:9.11.3+dfsg + isc_mempool_setfillcount@Base 1:9.11.3+dfsg + isc_mempool_setfreemax@Base 1:9.11.3+dfsg + isc_mempool_setmaxalloc@Base 1:9.11.3+dfsg + isc_mempool_setname@Base 1:9.11.3+dfsg + isc_modules@Base 1:9.11.3+dfsg + isc_msgcat@Base 1:9.11.3+dfsg + isc_msgcat_close@Base 1:9.11.3+dfsg + isc_msgcat_get@Base 1:9.11.3+dfsg + isc_msgcat_open@Base 1:9.11.3+dfsg + isc_mutexblock_destroy@Base 1:9.11.3+dfsg + isc_mutexblock_init@Base 1:9.11.3+dfsg + isc_net_aton@Base 1:9.11.3+dfsg + isc_net_disableipv4@Base 1:9.11.3+dfsg + isc_net_disableipv6@Base 1:9.11.3+dfsg + isc_net_enableipv4@Base 1:9.11.3+dfsg + isc_net_enableipv6@Base 1:9.11.3+dfsg + isc_net_getudpportrange@Base 1:9.11.3+dfsg + isc_net_probe_ipv6only@Base 1:9.11.3+dfsg + isc_net_probe_ipv6pktinfo@Base 1:9.11.3+dfsg + isc_net_probedscp@Base 1:9.11.3+dfsg + isc_net_probeipv4@Base 1:9.11.3+dfsg + isc_net_probeipv6@Base 1:9.11.3+dfsg + isc_net_probeunix@Base 1:9.11.3+dfsg + isc_netaddr_any6@Base 1:9.11.3+dfsg + isc_netaddr_any@Base 1:9.11.3+dfsg + isc_netaddr_eqprefix@Base 1:9.11.3+dfsg + isc_netaddr_equal@Base 1:9.11.3+dfsg + isc_netaddr_format@Base 1:9.11.3+dfsg + isc_netaddr_fromin6@Base 1:9.11.3+dfsg + isc_netaddr_fromin@Base 1:9.11.3+dfsg + isc_netaddr_frompath@Base 1:9.11.3+dfsg + isc_netaddr_fromsockaddr@Base 1:9.11.3+dfsg + isc_netaddr_fromv4mapped@Base 1:9.11.3+dfsg + isc_netaddr_getzone@Base 1:9.11.3+dfsg + isc_netaddr_isexperimental@Base 1:9.11.3+dfsg + isc_netaddr_islinklocal@Base 1:9.11.3+dfsg + isc_netaddr_isloopback@Base 1:9.11.3+dfsg + isc_netaddr_ismulticast@Base 1:9.11.3+dfsg + isc_netaddr_isnetzero@Base 1:9.11.3+dfsg + isc_netaddr_issitelocal@Base 1:9.11.3+dfsg + isc_netaddr_masktoprefixlen@Base 1:9.11.3+dfsg + isc_netaddr_prefixok@Base 1:9.11.3+dfsg + isc_netaddr_setzone@Base 1:9.11.3+dfsg + isc_netaddr_totext@Base 1:9.11.3+dfsg + isc_netscope_pton@Base 1:9.11.3+dfsg + isc_ondestroy_init@Base 1:9.11.3+dfsg + isc_ondestroy_notify@Base 1:9.11.3+dfsg + isc_ondestroy_register@Base 1:9.11.3+dfsg + isc_os_ncpus@Base 1:9.11.3+dfsg + isc_parse_uint16@Base 1:9.11.3+dfsg + isc_parse_uint32@Base 1:9.11.3+dfsg + isc_parse_uint8@Base 1:9.11.3+dfsg + isc_pool_count@Base 1:9.11.3+dfsg + isc_pool_create@Base 1:9.11.3+dfsg + isc_pool_destroy@Base 1:9.11.3+dfsg + isc_pool_expand@Base 1:9.11.3+dfsg + isc_pool_get@Base 1:9.11.3+dfsg + isc_portset_add@Base 1:9.11.3+dfsg + isc_portset_addrange@Base 1:9.11.3+dfsg + isc_portset_create@Base 1:9.11.3+dfsg + isc_portset_destroy@Base 1:9.11.3+dfsg + isc_portset_isset@Base 1:9.11.3+dfsg + isc_portset_nports@Base 1:9.11.3+dfsg + isc_portset_remove@Base 1:9.11.3+dfsg + isc_portset_removerange@Base 1:9.11.3+dfsg + isc_quota_attach@Base 1:9.11.3+dfsg + isc_quota_destroy@Base 1:9.11.3+dfsg + isc_quota_detach@Base 1:9.11.3+dfsg + isc_quota_force@Base 1:9.11.5.P4+dfsg + isc_quota_init@Base 1:9.11.3+dfsg + isc_quota_max@Base 1:9.11.3+dfsg + isc_quota_release@Base 1:9.11.3+dfsg + isc_quota_reserve@Base 1:9.11.3+dfsg + isc_quota_soft@Base 1:9.11.3+dfsg + isc_radix_create@Base 1:9.11.3+dfsg + isc_radix_destroy@Base 1:9.11.3+dfsg + isc_radix_insert@Base 1:9.11.3+dfsg + isc_radix_process@Base 1:9.11.3+dfsg + isc_radix_remove@Base 1:9.11.3+dfsg + isc_radix_search@Base 1:9.11.3+dfsg + isc_random_get@Base 1:9.11.3+dfsg + isc_random_jitter@Base 1:9.11.3+dfsg + isc_random_seed@Base 1:9.11.3+dfsg + isc_ratelimiter_attach@Base 1:9.11.3+dfsg + isc_ratelimiter_create@Base 1:9.11.3+dfsg + isc_ratelimiter_dequeue@Base 1:9.11.3+dfsg + isc_ratelimiter_detach@Base 1:9.11.3+dfsg + isc_ratelimiter_enqueue@Base 1:9.11.3+dfsg + isc_ratelimiter_release@Base 1:9.11.3+dfsg + isc_ratelimiter_setinterval@Base 1:9.11.3+dfsg + isc_ratelimiter_setpertic@Base 1:9.11.3+dfsg + isc_ratelimiter_setpushpop@Base 1:9.11.3+dfsg + isc_ratelimiter_shutdown@Base 1:9.11.3+dfsg + isc_ratelimiter_stall@Base 1:9.11.3+dfsg + isc_refcount_init@Base 1:9.11.3+dfsg + isc_regex_validate@Base 1:9.11.3+dfsg + isc_region_compare@Base 1:9.11.3+dfsg + isc_resource_getcurlimit@Base 1:9.11.3+dfsg + isc_resource_getlimit@Base 1:9.11.3+dfsg + isc_resource_setlimit@Base 1:9.11.3+dfsg + isc_result_register@Base 1:9.11.3+dfsg + isc_result_registerids@Base 1:9.11.3+dfsg + isc_result_toid@Base 1:9.11.3+dfsg + isc_result_totext@Base 1:9.11.3+dfsg + isc_rng_attach@Base 1:9.11.3+dfsg + isc_rng_create@Base 1:9.11.3+dfsg + isc_rng_detach@Base 1:9.11.3+dfsg + isc_rng_random@Base 1:9.11.3+dfsg + isc_rng_uniformrandom@Base 1:9.11.3+dfsg + isc_rwlock_destroy@Base 1:9.11.3+dfsg + isc_rwlock_downgrade@Base 1:9.11.3+dfsg + isc_rwlock_init@Base 1:9.11.3+dfsg + isc_rwlock_lock@Base 1:9.11.3+dfsg + isc_rwlock_trylock@Base 1:9.11.3+dfsg + isc_rwlock_tryupgrade@Base 1:9.11.3+dfsg + isc_rwlock_unlock@Base 1:9.11.3+dfsg + isc_safe_memcompare@Base 1:9.11.3+dfsg + isc_safe_memequal@Base 1:9.11.3+dfsg + isc_safe_memwipe@Base 1:9.11.3+dfsg + isc_serial_eq@Base 1:9.11.3+dfsg + isc_serial_ge@Base 1:9.11.3+dfsg + isc_serial_gt@Base 1:9.11.3+dfsg + isc_serial_le@Base 1:9.11.3+dfsg + isc_serial_lt@Base 1:9.11.3+dfsg + isc_serial_ne@Base 1:9.11.3+dfsg + isc_sha1_check@Base 1:9.11.3+dfsg + isc_sha1_final@Base 1:9.11.3+dfsg + isc_sha1_init@Base 1:9.11.3+dfsg + isc_sha1_invalidate@Base 1:9.11.3+dfsg + isc_sha1_update@Base 1:9.11.3+dfsg + isc_sha224_data@Base 1:9.11.3+dfsg + isc_sha224_end@Base 1:9.11.3+dfsg + isc_sha224_final@Base 1:9.11.3+dfsg + isc_sha224_init@Base 1:9.11.3+dfsg + isc_sha224_invalidate@Base 1:9.11.3+dfsg + isc_sha224_update@Base 1:9.11.3+dfsg + isc_sha256_data@Base 1:9.11.3+dfsg + isc_sha256_end@Base 1:9.11.3+dfsg + isc_sha256_final@Base 1:9.11.3+dfsg + isc_sha256_init@Base 1:9.11.3+dfsg + isc_sha256_invalidate@Base 1:9.11.3+dfsg + isc_sha256_transform@Base 1:9.11.3+dfsg + isc_sha256_update@Base 1:9.11.3+dfsg + isc_sha384_data@Base 1:9.11.3+dfsg + isc_sha384_end@Base 1:9.11.3+dfsg + isc_sha384_final@Base 1:9.11.3+dfsg + isc_sha384_init@Base 1:9.11.3+dfsg + isc_sha384_invalidate@Base 1:9.11.3+dfsg + isc_sha384_update@Base 1:9.11.3+dfsg + isc_sha512_data@Base 1:9.11.3+dfsg + isc_sha512_end@Base 1:9.11.3+dfsg + isc_sha512_final@Base 1:9.11.3+dfsg + isc_sha512_init@Base 1:9.11.3+dfsg + isc_sha512_invalidate@Base 1:9.11.3+dfsg + isc_sha512_last@Base 1:9.11.3+dfsg + isc_sha512_transform@Base 1:9.11.3+dfsg + isc_sha512_update@Base 1:9.11.3+dfsg + isc_sockaddr_any6@Base 1:9.11.3+dfsg + isc_sockaddr_any@Base 1:9.11.3+dfsg + isc_sockaddr_anyofpf@Base 1:9.11.3+dfsg + isc_sockaddr_compare@Base 1:9.11.3+dfsg + isc_sockaddr_eqaddr@Base 1:9.11.3+dfsg + isc_sockaddr_eqaddrprefix@Base 1:9.11.3+dfsg + isc_sockaddr_equal@Base 1:9.11.3+dfsg + isc_sockaddr_format@Base 1:9.11.3+dfsg + isc_sockaddr_fromin6@Base 1:9.11.3+dfsg + isc_sockaddr_fromin@Base 1:9.11.3+dfsg + isc_sockaddr_fromnetaddr@Base 1:9.11.3+dfsg + isc_sockaddr_frompath@Base 1:9.11.3+dfsg + isc_sockaddr_getport@Base 1:9.11.3+dfsg + isc_sockaddr_hash@Base 1:9.11.3+dfsg + isc_sockaddr_isexperimental@Base 1:9.11.3+dfsg + isc_sockaddr_islinklocal@Base 1:9.11.3+dfsg + isc_sockaddr_ismulticast@Base 1:9.11.3+dfsg + isc_sockaddr_isnetzero@Base 1:9.11.3+dfsg + isc_sockaddr_issitelocal@Base 1:9.11.3+dfsg + isc_sockaddr_pf@Base 1:9.11.3+dfsg + isc_sockaddr_setport@Base 1:9.11.3+dfsg + isc_sockaddr_totext@Base 1:9.11.3+dfsg + isc_sockaddr_v6fromin@Base 1:9.11.3+dfsg + isc_socket_accept@Base 1:9.11.3+dfsg + isc_socket_attach@Base 1:9.11.3+dfsg + isc_socket_bind@Base 1:9.11.3+dfsg + isc_socket_cancel@Base 1:9.11.3+dfsg + isc_socket_cleanunix@Base 1:9.11.3+dfsg + isc_socket_close@Base 1:9.11.3+dfsg + isc_socket_connect@Base 1:9.11.3+dfsg + isc_socket_create@Base 1:9.11.3+dfsg + isc_socket_detach@Base 1:9.11.3+dfsg + isc_socket_dscp@Base 1:9.11.3+dfsg + isc_socket_dup@Base 1:9.11.3+dfsg + isc_socket_fdwatchcreate@Base 1:9.11.3+dfsg + isc_socket_fdwatchpoke@Base 1:9.11.3+dfsg + isc_socket_filter@Base 1:9.11.3+dfsg + isc_socket_getfd@Base 1:9.11.3+dfsg + isc_socket_getpeername@Base 1:9.11.3+dfsg + isc_socket_getsockname@Base 1:9.11.3+dfsg + isc_socket_gettype@Base 1:9.11.3+dfsg + isc_socket_ipv6only@Base 1:9.11.3+dfsg + isc_socket_listen@Base 1:9.11.3+dfsg + isc_socket_open@Base 1:9.11.3+dfsg + isc_socket_permunix@Base 1:9.11.3+dfsg + isc_socket_recv2@Base 1:9.11.3+dfsg + isc_socket_recv@Base 1:9.11.3+dfsg + isc_socket_recvv@Base 1:9.11.3+dfsg + isc_socket_register@Base 1:9.11.3+dfsg + isc_socket_send@Base 1:9.11.3+dfsg + isc_socket_sendto2@Base 1:9.11.3+dfsg + isc_socket_sendto@Base 1:9.11.3+dfsg + isc_socket_sendtov2@Base 1:9.11.3+dfsg + isc_socket_sendtov@Base 1:9.11.3+dfsg + isc_socket_sendv@Base 1:9.11.3+dfsg + isc_socket_setname@Base 1:9.11.3+dfsg + isc_socket_socketevent@Base 1:9.11.3+dfsg + isc_socketmgr_create2@Base 1:9.11.3+dfsg + isc_socketmgr_create@Base 1:9.11.3+dfsg + isc_socketmgr_createinctx@Base 1:9.11.3+dfsg + isc_socketmgr_destroy@Base 1:9.11.3+dfsg + isc_socketmgr_getmaxsockets@Base 1:9.11.3+dfsg + isc_socketmgr_renderjson@Base 1:9.11.3+dfsg + isc_socketmgr_renderxml@Base 1:9.11.3+dfsg + isc_socketmgr_setstats@Base 1:9.11.3+dfsg + isc_stats_attach@Base 1:9.11.3+dfsg + isc_stats_create@Base 1:9.11.3+dfsg + isc_stats_decrement@Base 1:9.11.3+dfsg + isc_stats_detach@Base 1:9.11.3+dfsg + isc_stats_dump@Base 1:9.11.3+dfsg + isc_stats_increment@Base 1:9.11.3+dfsg + isc_stats_ncounters@Base 1:9.11.3+dfsg + isc_stats_set@Base 1:9.11.3+dfsg + isc_stdio_close@Base 1:9.11.3+dfsg + isc_stdio_flush@Base 1:9.11.3+dfsg + isc_stdio_open@Base 1:9.11.3+dfsg + isc_stdio_read@Base 1:9.11.3+dfsg + isc_stdio_seek@Base 1:9.11.3+dfsg + isc_stdio_sync@Base 1:9.11.3+dfsg + isc_stdio_tell@Base 1:9.11.3+dfsg + isc_stdio_write@Base 1:9.11.3+dfsg + isc_stdtime_get@Base 1:9.11.3+dfsg + isc_string_append@Base 1:9.11.3+dfsg + isc_string_append_truncate@Base 1:9.11.3+dfsg + isc_string_copy@Base 1:9.11.3+dfsg + isc_string_copy_truncate@Base 1:9.11.3+dfsg + isc_string_printf@Base 1:9.11.3+dfsg + isc_string_printf_truncate@Base 1:9.11.3+dfsg + isc_string_regiondup@Base 1:9.11.3+dfsg + isc_string_separate@Base 1:9.11.3+dfsg + isc_string_strcasestr@Base 1:9.11.3+dfsg + isc_string_strlcat@Base 1:9.11.3+dfsg + isc_string_strlcpy@Base 1:9.11.3+dfsg + isc_string_touint64@Base 1:9.11.3+dfsg + isc_strtoul@Base 1:9.11.3+dfsg + isc_symtab_count@Base 1:9.11.3+dfsg + isc_symtab_create@Base 1:9.11.3+dfsg + isc_symtab_define@Base 1:9.11.3+dfsg + isc_symtab_destroy@Base 1:9.11.3+dfsg + isc_symtab_lookup@Base 1:9.11.3+dfsg + isc_symtab_undefine@Base 1:9.11.3+dfsg + isc_syslog_facilityfromstring@Base 1:9.11.3+dfsg + isc_task_attach@Base 1:9.11.3+dfsg + isc_task_beginexclusive@Base 1:9.11.3+dfsg + isc_task_create@Base 1:9.11.3+dfsg + isc_task_destroy@Base 1:9.11.3+dfsg + isc_task_detach@Base 1:9.11.3+dfsg + isc_task_endexclusive@Base 1:9.11.3+dfsg + isc_task_exiting@Base 1:9.11.3+dfsg + isc_task_getcurrenttime@Base 1:9.11.3+dfsg + isc_task_getcurrenttimex@Base 1:9.11.3+dfsg + isc_task_onshutdown@Base 1:9.11.3+dfsg + isc_task_privilege@Base 1:9.11.3+dfsg + isc_task_purge@Base 1:9.11.3+dfsg + isc_task_purgeevent@Base 1:9.11.3+dfsg + isc_task_purgerange@Base 1:9.11.3+dfsg + isc_task_register@Base 1:9.11.3+dfsg + isc_task_send@Base 1:9.11.3+dfsg + isc_task_sendanddetach@Base 1:9.11.3+dfsg + isc_task_setname@Base 1:9.11.3+dfsg + isc_task_setprivilege@Base 1:9.11.3+dfsg + isc_task_shutdown@Base 1:9.11.3+dfsg + isc_task_unsend@Base 1:9.11.3+dfsg + isc_taskmgr_create@Base 1:9.11.3+dfsg + isc_taskmgr_createinctx@Base 1:9.11.3+dfsg + isc_taskmgr_destroy@Base 1:9.11.3+dfsg + isc_taskmgr_excltask@Base 1:9.11.3+dfsg + isc_taskmgr_mode@Base 1:9.11.3+dfsg + isc_taskmgr_renderjson@Base 1:9.11.3+dfsg + isc_taskmgr_renderxml@Base 1:9.11.3+dfsg + isc_taskmgr_setexcltask@Base 1:9.11.3+dfsg + isc_taskmgr_setmode@Base 1:9.11.3+dfsg + isc_taskpool_create@Base 1:9.11.3+dfsg + isc_taskpool_destroy@Base 1:9.11.3+dfsg + isc_taskpool_expand@Base 1:9.11.3+dfsg + isc_taskpool_gettask@Base 1:9.11.3+dfsg + isc_taskpool_setprivilege@Base 1:9.11.3+dfsg + isc_taskpool_size@Base 1:9.11.3+dfsg + isc_thread_create@Base 1:9.11.3+dfsg + isc_thread_setconcurrency@Base 1:9.11.3+dfsg + isc_thread_setname@Base 1:9.11.3+dfsg + isc_thread_yield@Base 1:9.11.3+dfsg + isc_time_add@Base 1:9.11.3+dfsg + isc_time_compare@Base 1:9.11.3+dfsg + isc_time_epoch@Base 1:9.11.3+dfsg + isc_time_formatISO8601@Base 1:9.11.3+dfsg + isc_time_formatISO8601ms@Base 1:9.11.3+dfsg + isc_time_formathttptimestamp@Base 1:9.11.3+dfsg + isc_time_formattimestamp@Base 1:9.11.3+dfsg + isc_time_isepoch@Base 1:9.11.3+dfsg + isc_time_microdiff@Base 1:9.11.3+dfsg + isc_time_nanoseconds@Base 1:9.11.3+dfsg + isc_time_now@Base 1:9.11.3+dfsg + isc_time_nowplusinterval@Base 1:9.11.3+dfsg + isc_time_parsehttptimestamp@Base 1:9.11.3+dfsg + isc_time_seconds@Base 1:9.11.3+dfsg + isc_time_secondsastimet@Base 1:9.11.3+dfsg + isc_time_set@Base 1:9.11.3+dfsg + isc_time_settoepoch@Base 1:9.11.3+dfsg + isc_time_subtract@Base 1:9.11.3+dfsg + isc_timer_attach@Base 1:9.11.3+dfsg + isc_timer_create@Base 1:9.11.3+dfsg + isc_timer_detach@Base 1:9.11.3+dfsg + isc_timer_gettype@Base 1:9.11.3+dfsg + isc_timer_register@Base 1:9.11.3+dfsg + isc_timer_reset@Base 1:9.11.3+dfsg + isc_timer_touch@Base 1:9.11.3+dfsg + isc_timermgr_create@Base 1:9.11.3+dfsg + isc_timermgr_createinctx@Base 1:9.11.3+dfsg + isc_timermgr_destroy@Base 1:9.11.3+dfsg + isc_timermgr_poke@Base 1:9.11.3+dfsg + isc_tm_strptime@Base 1:9.11.3+dfsg + isc_tm_timegm@Base 1:9.11.3+dfsg + isc_version@Base 1:9.11.3+dfsg + pk11_attribute_bytype@Base 1:9.11.3+dfsg + pk11_attribute_first@Base 1:9.11.3+dfsg + pk11_attribute_next@Base 1:9.11.3+dfsg + pk11_dump_tokens@Base 1:9.11.3+dfsg + pk11_error_fatalcheck@Base 1:9.11.3+dfsg + pk11_finalize@Base 1:9.11.3+dfsg + pk11_get_best_token@Base 1:9.11.3+dfsg + pk11_get_lib_name@Base 1:9.11.3+dfsg + pk11_get_load_error_message@Base 1:9.11.3+dfsg + pk11_get_session@Base 1:9.11.3+dfsg + pk11_initialize@Base 1:9.11.3+dfsg + pk11_initmsgcat@Base 1:9.11.3+dfsg + pk11_mem_get@Base 1:9.11.3+dfsg + pk11_mem_put@Base 1:9.11.3+dfsg + pk11_msgcat@Base 1:9.11.3+dfsg + pk11_numbits@Base 1:9.11.3+dfsg + pk11_parse_uri@Base 1:9.11.3+dfsg + pk11_rand_bytes@Base 1:9.11.3+dfsg + pk11_rand_seed_fromfile@Base 1:9.11.3+dfsg + pk11_result_register@Base 1:9.11.3+dfsg + pk11_result_totext@Base 1:9.11.3+dfsg + pk11_return_session@Base 1:9.11.3+dfsg + pk11_set_lib_name@Base 1:9.11.3+dfsg + pk11_verbose_init@Base 1:9.11.3+dfsg + pkcs_C_CloseSession@Base 1:9.11.3+dfsg + pkcs_C_CreateObject@Base 1:9.11.3+dfsg + pkcs_C_DeriveKey@Base 1:9.11.3+dfsg + pkcs_C_DestroyObject@Base 1:9.11.3+dfsg + pkcs_C_DigestFinal@Base 1:9.11.3+dfsg + pkcs_C_DigestInit@Base 1:9.11.3+dfsg + pkcs_C_DigestUpdate@Base 1:9.11.3+dfsg + pkcs_C_Encrypt@Base 1:9.11.3+dfsg + pkcs_C_EncryptInit@Base 1:9.11.3+dfsg + pkcs_C_Finalize@Base 1:9.11.3+dfsg + pkcs_C_FindObjects@Base 1:9.11.3+dfsg + pkcs_C_FindObjectsFinal@Base 1:9.11.3+dfsg + pkcs_C_FindObjectsInit@Base 1:9.11.3+dfsg + pkcs_C_GenerateKey@Base 1:9.11.3+dfsg + pkcs_C_GenerateKeyPair@Base 1:9.11.3+dfsg + pkcs_C_GenerateRandom@Base 1:9.11.3+dfsg + pkcs_C_GetAttributeValue@Base 1:9.11.3+dfsg + pkcs_C_GetMechanismInfo@Base 1:9.11.3+dfsg + pkcs_C_GetSlotList@Base 1:9.11.3+dfsg + pkcs_C_GetTokenInfo@Base 1:9.11.3+dfsg + pkcs_C_Initialize@Base 1:9.11.3+dfsg + pkcs_C_Login@Base 1:9.11.3+dfsg + pkcs_C_Logout@Base 1:9.11.3+dfsg + pkcs_C_OpenSession@Base 1:9.11.3+dfsg + pkcs_C_SeedRandom@Base 1:9.11.3+dfsg + pkcs_C_SetAttributeValue@Base 1:9.11.3+dfsg + pkcs_C_Sign@Base 1:9.11.3+dfsg + pkcs_C_SignFinal@Base 1:9.11.3+dfsg + pkcs_C_SignInit@Base 1:9.11.3+dfsg + pkcs_C_SignUpdate@Base 1:9.11.3+dfsg + pkcs_C_Verify@Base 1:9.11.3+dfsg + pkcs_C_VerifyFinal@Base 1:9.11.3+dfsg + pkcs_C_VerifyInit@Base 1:9.11.3+dfsg + pkcs_C_VerifyUpdate@Base 1:9.11.3+dfsg +libisc-pkcs11.so.1100 libisc1100 #MINVER# + (optional)bsdcompat@Base 1:9.11.3+dfsg + isc___errno2result@Base 1:9.11.3+dfsg + isc___mem_allocate@Base 1:9.11.3+dfsg + isc___mem_free@Base 1:9.11.3+dfsg + isc___mem_get@Base 1:9.11.3+dfsg + isc___mem_put@Base 1:9.11.3+dfsg + isc___mem_putanddetach@Base 1:9.11.3+dfsg + isc___mem_reallocate@Base 1:9.11.3+dfsg + isc___mem_strdup@Base 1:9.11.3+dfsg + isc___mempool_get@Base 1:9.11.3+dfsg + isc___mempool_put@Base 1:9.11.3+dfsg + isc__app_block@Base 1:9.11.3+dfsg + isc__app_ctxfinish@Base 1:9.11.3+dfsg + isc__app_ctxonrun@Base 1:9.11.3+dfsg + isc__app_ctxrun@Base 1:9.11.3+dfsg + isc__app_ctxshutdown@Base 1:9.11.3+dfsg + isc__app_ctxstart@Base 1:9.11.3+dfsg + isc__app_ctxsuspend@Base 1:9.11.3+dfsg + isc__app_finish@Base 1:9.11.3+dfsg + isc__app_onrun@Base 1:9.11.3+dfsg + isc__app_register@Base 1:9.11.3+dfsg + isc__app_reload@Base 1:9.11.3+dfsg + isc__app_run@Base 1:9.11.3+dfsg + isc__app_shutdown@Base 1:9.11.3+dfsg + isc__app_start@Base 1:9.11.3+dfsg + isc__app_unblock@Base 1:9.11.3+dfsg + isc__appctx_create@Base 1:9.11.3+dfsg + isc__appctx_destroy@Base 1:9.11.3+dfsg + isc__appctx_setsocketmgr@Base 1:9.11.3+dfsg + isc__appctx_settaskmgr@Base 1:9.11.3+dfsg + isc__appctx_settimermgr@Base 1:9.11.3+dfsg + isc__backtrace_nsymbols@Base 1:9.11.3+dfsg + isc__backtrace_symtable@Base 1:9.11.3+dfsg + isc__buffer_activeregion@Base 1:9.11.3+dfsg + isc__buffer_add@Base 1:9.11.3+dfsg + isc__buffer_availableregion@Base 1:9.11.3+dfsg + isc__buffer_back@Base 1:9.11.3+dfsg + isc__buffer_clear@Base 1:9.11.3+dfsg + isc__buffer_consumedregion@Base 1:9.11.3+dfsg + isc__buffer_first@Base 1:9.11.3+dfsg + isc__buffer_forward@Base 1:9.11.3+dfsg + isc__buffer_init@Base 1:9.11.3+dfsg + isc__buffer_initnull@Base 1:9.11.3+dfsg + isc__buffer_invalidate@Base 1:9.11.3+dfsg + isc__buffer_putmem@Base 1:9.11.3+dfsg + isc__buffer_putstr@Base 1:9.11.3+dfsg + isc__buffer_putuint16@Base 1:9.11.3+dfsg + isc__buffer_putuint24@Base 1:9.11.3+dfsg + isc__buffer_putuint32@Base 1:9.11.3+dfsg + isc__buffer_putuint48@Base 1:9.11.3+dfsg + isc__buffer_putuint8@Base 1:9.11.3+dfsg + isc__buffer_region@Base 1:9.11.3+dfsg + isc__buffer_remainingregion@Base 1:9.11.3+dfsg + isc__buffer_setactive@Base 1:9.11.3+dfsg + isc__buffer_subtract@Base 1:9.11.3+dfsg + isc__buffer_usedregion@Base 1:9.11.3+dfsg + isc__hash_setvec@Base 1:9.11.3+dfsg + isc__mem_allocate@Base 1:9.11.3+dfsg + isc__mem_attach@Base 1:9.11.3+dfsg + isc__mem_create2@Base 1:9.11.3+dfsg + isc__mem_destroy@Base 1:9.11.3+dfsg + isc__mem_detach@Base 1:9.11.3+dfsg + isc__mem_free@Base 1:9.11.3+dfsg + isc__mem_get@Base 1:9.11.3+dfsg + isc__mem_inuse@Base 1:9.11.3+dfsg + isc__mem_isovermem@Base 1:9.11.3+dfsg + isc__mem_maxinuse@Base 1:9.11.3+dfsg + isc__mem_printactive@Base 1:9.11.3+dfsg + isc__mem_put@Base 1:9.11.3+dfsg + isc__mem_putanddetach@Base 1:9.11.3+dfsg + isc__mem_reallocate@Base 1:9.11.3+dfsg + isc__mem_register@Base 1:9.11.3+dfsg + isc__mem_setdestroycheck@Base 1:9.11.3+dfsg + isc__mem_setwater@Base 1:9.11.3+dfsg + isc__mem_strdup@Base 1:9.11.3+dfsg + isc__mem_total@Base 1:9.11.3+dfsg + isc__mem_waterack@Base 1:9.11.3+dfsg + isc__mempool_associatelock@Base 1:9.11.3+dfsg + isc__mempool_create@Base 1:9.11.3+dfsg + isc__mempool_destroy@Base 1:9.11.3+dfsg + isc__mempool_get@Base 1:9.11.3+dfsg + isc__mempool_getallocated@Base 1:9.11.3+dfsg + isc__mempool_put@Base 1:9.11.3+dfsg + isc__mempool_setfillcount@Base 1:9.11.3+dfsg + isc__mempool_setfreemax@Base 1:9.11.3+dfsg + isc__mempool_setmaxalloc@Base 1:9.11.3+dfsg + isc__mempool_setname@Base 1:9.11.3+dfsg + isc__mutex_init@Base 1:9.11.3+dfsg + isc__socket_accept@Base 1:9.11.3+dfsg + isc__socket_attach@Base 1:9.11.3+dfsg + isc__socket_bind@Base 1:9.11.3+dfsg + isc__socket_cancel@Base 1:9.11.3+dfsg + isc__socket_cleanunix@Base 1:9.11.3+dfsg + isc__socket_close@Base 1:9.11.3+dfsg + isc__socket_connect@Base 1:9.11.3+dfsg + isc__socket_create@Base 1:9.11.3+dfsg + isc__socket_detach@Base 1:9.11.3+dfsg + isc__socket_dscp@Base 1:9.11.3+dfsg + isc__socket_dup@Base 1:9.11.3+dfsg + isc__socket_fdwatchcreate@Base 1:9.11.3+dfsg + isc__socket_fdwatchpoke@Base 1:9.11.3+dfsg + isc__socket_filter@Base 1:9.11.3+dfsg + isc__socket_getfd@Base 1:9.11.3+dfsg + isc__socket_getname@Base 1:9.11.3+dfsg + isc__socket_getpeername@Base 1:9.11.3+dfsg + isc__socket_getsockname@Base 1:9.11.3+dfsg + isc__socket_gettag@Base 1:9.11.3+dfsg + isc__socket_gettype@Base 1:9.11.3+dfsg + isc__socket_ipv6only@Base 1:9.11.3+dfsg + isc__socket_isbound@Base 1:9.11.3+dfsg + isc__socket_listen@Base 1:9.11.3+dfsg + isc__socket_open@Base 1:9.11.3+dfsg + isc__socket_permunix@Base 1:9.11.3+dfsg + isc__socket_recv2@Base 1:9.11.3+dfsg + isc__socket_recv@Base 1:9.11.3+dfsg + isc__socket_recvv@Base 1:9.11.3+dfsg + isc__socket_register@Base 1:9.11.3+dfsg + isc__socket_send@Base 1:9.11.3+dfsg + isc__socket_sendto2@Base 1:9.11.3+dfsg + isc__socket_sendto@Base 1:9.11.3+dfsg + isc__socket_sendtov2@Base 1:9.11.3+dfsg + isc__socket_sendtov@Base 1:9.11.3+dfsg + isc__socket_sendv@Base 1:9.11.3+dfsg + isc__socket_setname@Base 1:9.11.3+dfsg + isc__socketmgr_create2@Base 1:9.11.3+dfsg + isc__socketmgr_create@Base 1:9.11.3+dfsg + isc__socketmgr_destroy@Base 1:9.11.3+dfsg + isc__socketmgr_maxudp@Base 1:9.11.3+dfsg + isc__socketmgr_setreserved@Base 1:9.11.3+dfsg + isc__strerror@Base 1:9.11.3+dfsg + isc__task_attach@Base 1:9.11.3+dfsg + isc__task_beginexclusive@Base 1:9.11.3+dfsg + isc__task_create@Base 1:9.11.3+dfsg + isc__task_destroy@Base 1:9.11.3+dfsg + isc__task_detach@Base 1:9.11.3+dfsg + isc__task_endexclusive@Base 1:9.11.3+dfsg + isc__task_getcurrenttime@Base 1:9.11.3+dfsg + isc__task_getcurrenttimex@Base 1:9.11.3+dfsg + isc__task_getname@Base 1:9.11.3+dfsg + isc__task_gettag@Base 1:9.11.3+dfsg + isc__task_onshutdown@Base 1:9.11.3+dfsg + isc__task_privilege@Base 1:9.11.3+dfsg + isc__task_purge@Base 1:9.11.3+dfsg + isc__task_purgerange@Base 1:9.11.3+dfsg + isc__task_register@Base 1:9.11.3+dfsg + isc__task_send@Base 1:9.11.3+dfsg + isc__task_sendanddetach@Base 1:9.11.3+dfsg + isc__task_setname@Base 1:9.11.3+dfsg + isc__task_setprivilege@Base 1:9.11.3+dfsg + isc__task_shutdown@Base 1:9.11.3+dfsg + isc__task_unsend@Base 1:9.11.3+dfsg + isc__task_unsendrange@Base 1:9.11.3+dfsg + isc__taskmgr_create@Base 1:9.11.3+dfsg + isc__taskmgr_destroy@Base 1:9.11.3+dfsg + isc__taskmgr_mode@Base 1:9.11.3+dfsg + isc__taskmgr_pause@Base 1:9.11.3+dfsg + isc__taskmgr_resume@Base 1:9.11.3+dfsg + isc__taskmgr_setmode@Base 1:9.11.3+dfsg + isc__timer_attach@Base 1:9.11.3+dfsg + isc__timer_create@Base 1:9.11.3+dfsg + isc__timer_detach@Base 1:9.11.3+dfsg + isc__timer_register@Base 1:9.11.3+dfsg + isc__timer_reset@Base 1:9.11.3+dfsg + isc__timer_touch@Base 1:9.11.3+dfsg + isc__timermgr_create@Base 1:9.11.3+dfsg + isc__timermgr_destroy@Base 1:9.11.3+dfsg + isc_aes128_crypt@Base 1:9.11.3+dfsg + isc_aes192_crypt@Base 1:9.11.3+dfsg + isc_aes256_crypt@Base 1:9.11.3+dfsg + isc_app_block@Base 1:9.11.3+dfsg + isc_app_ctxfinish@Base 1:9.11.3+dfsg + isc_app_ctxonrun@Base 1:9.11.3+dfsg + isc_app_ctxrun@Base 1:9.11.3+dfsg + isc_app_ctxshutdown@Base 1:9.11.3+dfsg + isc_app_ctxstart@Base 1:9.11.3+dfsg + isc_app_ctxsuspend@Base 1:9.11.3+dfsg + isc_app_finish@Base 1:9.11.3+dfsg + isc_app_isrunning@Base 1:9.11.3+dfsg + isc_app_onrun@Base 1:9.11.3+dfsg + isc_app_register@Base 1:9.11.3+dfsg + isc_app_reload@Base 1:9.11.3+dfsg + isc_app_run@Base 1:9.11.3+dfsg + isc_app_shutdown@Base 1:9.11.3+dfsg + isc_app_start@Base 1:9.11.3+dfsg + isc_app_unblock@Base 1:9.11.3+dfsg + isc_appctx_create@Base 1:9.11.3+dfsg + isc_appctx_destroy@Base 1:9.11.3+dfsg + isc_appctx_setsocketmgr@Base 1:9.11.3+dfsg + isc_appctx_settaskmgr@Base 1:9.11.3+dfsg + isc_appctx_settimermgr@Base 1:9.11.3+dfsg + isc_assertion_failed@Base 1:9.11.3+dfsg + isc_assertion_setcallback@Base 1:9.11.3+dfsg + isc_assertion_typetotext@Base 1:9.11.3+dfsg + isc_backtrace_getsymbol@Base 1:9.11.3+dfsg + isc_backtrace_getsymbolfromindex@Base 1:9.11.3+dfsg + isc_backtrace_gettrace@Base 1:9.11.3+dfsg + isc_base32_decoderegion@Base 1:9.11.3+dfsg + isc_base32_decodestring@Base 1:9.11.3+dfsg + isc_base32_tobuffer@Base 1:9.11.3+dfsg + isc_base32_totext@Base 1:9.11.3+dfsg + isc_base32hex_decoderegion@Base 1:9.11.3+dfsg + isc_base32hex_decodestring@Base 1:9.11.3+dfsg + isc_base32hex_tobuffer@Base 1:9.11.3+dfsg + isc_base32hex_totext@Base 1:9.11.3+dfsg + isc_base32hexnp_decoderegion@Base 1:9.11.3+dfsg + isc_base32hexnp_decodestring@Base 1:9.11.3+dfsg + isc_base32hexnp_tobuffer@Base 1:9.11.3+dfsg + isc_base32hexnp_totext@Base 1:9.11.3+dfsg + isc_base64_decodestring@Base 1:9.11.3+dfsg + isc_base64_tobuffer@Base 1:9.11.3+dfsg + isc_base64_totext@Base 1:9.11.3+dfsg + isc_bind9@Base 1:9.11.3+dfsg + isc_buffer_allocate@Base 1:9.11.3+dfsg + isc_buffer_compact@Base 1:9.11.3+dfsg + isc_buffer_copyregion@Base 1:9.11.3+dfsg + isc_buffer_dup@Base 1:9.11.3+dfsg + isc_buffer_free@Base 1:9.11.3+dfsg + isc_buffer_getuint16@Base 1:9.11.3+dfsg + isc_buffer_getuint32@Base 1:9.11.3+dfsg + isc_buffer_getuint48@Base 1:9.11.3+dfsg + isc_buffer_getuint8@Base 1:9.11.3+dfsg + isc_buffer_putdecint@Base 1:9.11.3+dfsg + isc_buffer_reallocate@Base 1:9.11.3+dfsg + isc_buffer_reinit@Base 1:9.11.3+dfsg + isc_buffer_reserve@Base 1:9.11.3+dfsg + isc_buffer_setautorealloc@Base 1:9.11.3+dfsg + isc_bufferlist_availablecount@Base 1:9.11.3+dfsg + isc_bufferlist_usedcount@Base 1:9.11.3+dfsg + isc_categories@Base 1:9.11.3+dfsg + isc_commandline_argument@Base 1:9.11.3+dfsg + isc_commandline_errprint@Base 1:9.11.3+dfsg + isc_commandline_index@Base 1:9.11.3+dfsg + isc_commandline_option@Base 1:9.11.3+dfsg + isc_commandline_parse@Base 1:9.11.3+dfsg + isc_commandline_progname@Base 1:9.11.3+dfsg + isc_commandline_reset@Base 1:9.11.3+dfsg + isc_commandline_strtoargv@Base 1:9.11.3+dfsg + isc_condition_waituntil@Base 1:9.11.3+dfsg + isc_counter_attach@Base 1:9.11.3+dfsg + isc_counter_create@Base 1:9.11.3+dfsg + isc_counter_detach@Base 1:9.11.3+dfsg + isc_counter_increment@Base 1:9.11.3+dfsg + isc_counter_setlimit@Base 1:9.11.3+dfsg + isc_counter_used@Base 1:9.11.3+dfsg + isc_crc64_final@Base 1:9.11.3+dfsg + isc_crc64_init@Base 1:9.11.3+dfsg + isc_crc64_update@Base 1:9.11.3+dfsg + isc_dir_chdir@Base 1:9.11.3+dfsg + isc_dir_chroot@Base 1:9.11.3+dfsg + isc_dir_close@Base 1:9.11.3+dfsg + isc_dir_createunique@Base 1:9.11.3+dfsg + isc_dir_init@Base 1:9.11.3+dfsg + isc_dir_open@Base 1:9.11.3+dfsg + isc_dir_read@Base 1:9.11.3+dfsg + isc_dir_reset@Base 1:9.11.3+dfsg + isc_dscp_check_value@Base 1:9.11.3+dfsg + isc_entropy_addcallbacksample@Base 1:9.11.3+dfsg + isc_entropy_addsample@Base 1:9.11.3+dfsg + isc_entropy_attach@Base 1:9.11.3+dfsg + isc_entropy_create@Base 1:9.11.3+dfsg + isc_entropy_createcallbacksource@Base 1:9.11.3+dfsg + isc_entropy_createfilesource@Base 1:9.11.3+dfsg + isc_entropy_createsamplesource@Base 1:9.11.3+dfsg + isc_entropy_destroysource@Base 1:9.11.3+dfsg + isc_entropy_detach@Base 1:9.11.3+dfsg + isc_entropy_getdata@Base 1:9.11.3+dfsg + isc_entropy_putdata@Base 1:9.11.3+dfsg + isc_entropy_stats@Base 1:9.11.3+dfsg + isc_entropy_status@Base 1:9.11.3+dfsg + isc_entropy_stopcallbacksources@Base 1:9.11.3+dfsg + isc_entropy_usebestsource@Base 1:9.11.3+dfsg + isc_errno_toresult@Base 1:9.11.3+dfsg + isc_error_fatal@Base 1:9.11.3+dfsg + isc_error_runtimecheck@Base 1:9.11.3+dfsg + isc_error_setfatal@Base 1:9.11.3+dfsg + isc_error_setunexpected@Base 1:9.11.3+dfsg + isc_error_unexpected@Base 1:9.11.3+dfsg + isc_event_allocate@Base 1:9.11.3+dfsg + isc_event_constallocate@Base 1:9.11.3+dfsg + isc_event_free@Base 1:9.11.3+dfsg + isc_file_absolutepath@Base 1:9.11.3+dfsg + isc_file_basename@Base 1:9.11.3+dfsg + isc_file_bopenunique@Base 1:9.11.3+dfsg + isc_file_bopenuniquemode@Base 1:9.11.3+dfsg + isc_file_bopenuniqueprivate@Base 1:9.11.3+dfsg + isc_file_exists@Base 1:9.11.3+dfsg + isc_file_getmodtime@Base 1:9.11.3+dfsg + isc_file_getsize@Base 1:9.11.3+dfsg + isc_file_getsizefd@Base 1:9.11.3+dfsg + isc_file_isabsolute@Base 1:9.11.3+dfsg + isc_file_ischdiridempotent@Base 1:9.11.3+dfsg + isc_file_iscurrentdir@Base 1:9.11.3+dfsg + isc_file_isdirectory@Base 1:9.11.3+dfsg + isc_file_isdirwritable@Base 1:9.11.3+dfsg + isc_file_isplainfile@Base 1:9.11.3+dfsg + isc_file_isplainfilefd@Base 1:9.11.3+dfsg + isc_file_mktemplate@Base 1:9.11.3+dfsg + isc_file_mmap@Base 1:9.11.3+dfsg + isc_file_mode@Base 1:9.11.3+dfsg + isc_file_munmap@Base 1:9.11.3+dfsg + isc_file_openunique@Base 1:9.11.3+dfsg + isc_file_openuniquemode@Base 1:9.11.3+dfsg + isc_file_openuniqueprivate@Base 1:9.11.3+dfsg + isc_file_progname@Base 1:9.11.3+dfsg + isc_file_remove@Base 1:9.11.3+dfsg + isc_file_rename@Base 1:9.11.3+dfsg + isc_file_renameunique@Base 1:9.11.3+dfsg + isc_file_safecreate@Base 1:9.11.3+dfsg + isc_file_sanitize@Base 1:9.11.3+dfsg + isc_file_settime@Base 1:9.11.3+dfsg + isc_file_splitpath@Base 1:9.11.3+dfsg + isc_file_template@Base 1:9.11.3+dfsg + isc_file_truncate@Base 1:9.11.3+dfsg + isc_fsaccess_add@Base 1:9.11.3+dfsg + isc_fsaccess_remove@Base 1:9.11.3+dfsg + isc_fsaccess_set@Base 1:9.11.3+dfsg + isc_hash_calc@Base 1:9.11.3+dfsg + isc_hash_create@Base 1:9.11.3+dfsg + isc_hash_ctxattach@Base 1:9.11.3+dfsg + isc_hash_ctxcalc@Base 1:9.11.3+dfsg + isc_hash_ctxcreate@Base 1:9.11.3+dfsg + isc_hash_ctxdetach@Base 1:9.11.3+dfsg + isc_hash_ctxinit@Base 1:9.11.3+dfsg + isc_hash_destroy@Base 1:9.11.3+dfsg + isc_hash_function@Base 1:9.11.3+dfsg + isc_hash_function_reverse@Base 1:9.11.3+dfsg + isc_hash_get_initializer@Base 1:9.11.3+dfsg + isc_hash_init@Base 1:9.11.3+dfsg + isc_hash_set_initializer@Base 1:9.11.3+dfsg + isc_hashctx@Base 1:9.11.3+dfsg + isc_heap_create@Base 1:9.11.3+dfsg + isc_heap_decreased@Base 1:9.11.3+dfsg + isc_heap_delete@Base 1:9.11.3+dfsg + isc_heap_destroy@Base 1:9.11.3+dfsg + isc_heap_element@Base 1:9.11.3+dfsg + isc_heap_foreach@Base 1:9.11.3+dfsg + isc_heap_increased@Base 1:9.11.3+dfsg + isc_heap_insert@Base 1:9.11.3+dfsg + isc_hex_decodestring@Base 1:9.11.3+dfsg + isc_hex_tobuffer@Base 1:9.11.3+dfsg + isc_hex_totext@Base 1:9.11.3+dfsg + isc_hmacmd5_check@Base 1:9.11.3+dfsg + isc_hmacmd5_init@Base 1:9.11.3+dfsg + isc_hmacmd5_invalidate@Base 1:9.11.3+dfsg + isc_hmacmd5_sign@Base 1:9.11.3+dfsg + isc_hmacmd5_update@Base 1:9.11.3+dfsg + isc_hmacmd5_verify2@Base 1:9.11.3+dfsg + isc_hmacmd5_verify@Base 1:9.11.3+dfsg + isc_hmacsha1_check@Base 1:9.11.3+dfsg + isc_hmacsha1_init@Base 1:9.11.3+dfsg + isc_hmacsha1_invalidate@Base 1:9.11.3+dfsg + isc_hmacsha1_sign@Base 1:9.11.3+dfsg + isc_hmacsha1_update@Base 1:9.11.3+dfsg + isc_hmacsha1_verify@Base 1:9.11.3+dfsg + isc_hmacsha224_init@Base 1:9.11.3+dfsg + isc_hmacsha224_invalidate@Base 1:9.11.3+dfsg + isc_hmacsha224_sign@Base 1:9.11.3+dfsg + isc_hmacsha224_update@Base 1:9.11.3+dfsg + isc_hmacsha224_verify@Base 1:9.11.3+dfsg + isc_hmacsha256_init@Base 1:9.11.3+dfsg + isc_hmacsha256_invalidate@Base 1:9.11.3+dfsg + isc_hmacsha256_sign@Base 1:9.11.3+dfsg + isc_hmacsha256_update@Base 1:9.11.3+dfsg + isc_hmacsha256_verify@Base 1:9.11.3+dfsg + isc_hmacsha384_init@Base 1:9.11.3+dfsg + isc_hmacsha384_invalidate@Base 1:9.11.3+dfsg + isc_hmacsha384_sign@Base 1:9.11.3+dfsg + isc_hmacsha384_update@Base 1:9.11.3+dfsg + isc_hmacsha384_verify@Base 1:9.11.3+dfsg + isc_hmacsha512_init@Base 1:9.11.3+dfsg + isc_hmacsha512_invalidate@Base 1:9.11.3+dfsg + isc_hmacsha512_sign@Base 1:9.11.3+dfsg + isc_hmacsha512_update@Base 1:9.11.3+dfsg + isc_hmacsha512_verify@Base 1:9.11.3+dfsg + isc_ht_add@Base 1:9.11.3+dfsg + isc_ht_count@Base 1:9.11.3+dfsg + isc_ht_delete@Base 1:9.11.3+dfsg + isc_ht_destroy@Base 1:9.11.3+dfsg + isc_ht_find@Base 1:9.11.3+dfsg + isc_ht_init@Base 1:9.11.3+dfsg + isc_ht_iter_create@Base 1:9.11.3+dfsg + isc_ht_iter_current@Base 1:9.11.3+dfsg + isc_ht_iter_currentkey@Base 1:9.11.3+dfsg + isc_ht_iter_delcurrent_next@Base 1:9.11.3+dfsg + isc_ht_iter_destroy@Base 1:9.11.3+dfsg + isc_ht_iter_first@Base 1:9.11.3+dfsg + isc_ht_iter_next@Base 1:9.11.3+dfsg + isc_httpd_addheader@Base 1:9.11.3+dfsg + isc_httpd_addheaderuint@Base 1:9.11.3+dfsg + isc_httpd_endheaders@Base 1:9.11.3+dfsg + isc_httpd_response@Base 1:9.11.3+dfsg + isc_httpd_setfinishhook@Base 1:9.11.3+dfsg + isc_httpdmgr_addurl2@Base 1:9.11.3+dfsg + isc_httpdmgr_addurl@Base 1:9.11.3+dfsg + isc_httpdmgr_create@Base 1:9.11.3+dfsg + isc_httpdmgr_shutdown@Base 1:9.11.3+dfsg + isc_interfaceiter_create@Base 1:9.11.3+dfsg + isc_interfaceiter_current@Base 1:9.11.3+dfsg + isc_interfaceiter_destroy@Base 1:9.11.3+dfsg + isc_interfaceiter_first@Base 1:9.11.3+dfsg + isc_interfaceiter_next@Base 1:9.11.3+dfsg + isc_interval_iszero@Base 1:9.11.3+dfsg + isc_interval_set@Base 1:9.11.3+dfsg + isc_interval_zero@Base 1:9.11.3+dfsg + isc_iterated_hash@Base 1:9.11.3+dfsg + isc_keyboard_canceled@Base 1:9.11.3+dfsg + isc_keyboard_close@Base 1:9.11.3+dfsg + isc_keyboard_getchar@Base 1:9.11.3+dfsg + isc_keyboard_open@Base 1:9.11.3+dfsg + isc_lctx@Base 1:9.11.3+dfsg + isc_lex_close@Base 1:9.11.3+dfsg + isc_lex_create@Base 1:9.11.3+dfsg + isc_lex_destroy@Base 1:9.11.3+dfsg + isc_lex_getcomments@Base 1:9.11.3+dfsg + isc_lex_getlasttokentext@Base 1:9.11.3+dfsg + isc_lex_getmastertoken@Base 1:9.11.3+dfsg + isc_lex_getoctaltoken@Base 1:9.11.3+dfsg + isc_lex_getsourceline@Base 1:9.11.3+dfsg + isc_lex_getsourcename@Base 1:9.11.3+dfsg + isc_lex_getspecials@Base 1:9.11.3+dfsg + isc_lex_gettoken@Base 1:9.11.3+dfsg + isc_lex_isfile@Base 1:9.11.3+dfsg + isc_lex_openbuffer@Base 1:9.11.3+dfsg + isc_lex_openfile@Base 1:9.11.3+dfsg + isc_lex_openstream@Base 1:9.11.3+dfsg + isc_lex_setcomments@Base 1:9.11.3+dfsg + isc_lex_setsourceline@Base 1:9.11.3+dfsg + isc_lex_setsourcename@Base 1:9.11.3+dfsg + isc_lex_setspecials@Base 1:9.11.3+dfsg + isc_lex_ungettoken@Base 1:9.11.3+dfsg + isc_lfsr_generate32@Base 1:9.11.3+dfsg + isc_lfsr_generate@Base 1:9.11.3+dfsg + isc_lfsr_init@Base 1:9.11.3+dfsg + isc_lfsr_skip@Base 1:9.11.3+dfsg + isc_lib_initmsgcat@Base 1:9.11.3+dfsg + isc_lib_register@Base 1:9.11.3+dfsg + isc_libage@Base 1:9.11.3+dfsg + isc_libinterface@Base 1:9.11.3+dfsg + isc_librevision@Base 1:9.11.3+dfsg + isc_log_categorybyname@Base 1:9.11.3+dfsg + isc_log_closefilelogs@Base 1:9.11.3+dfsg + isc_log_create@Base 1:9.11.3+dfsg + isc_log_createchannel@Base 1:9.11.3+dfsg + isc_log_destroy@Base 1:9.11.3+dfsg + isc_log_getdebuglevel@Base 1:9.11.3+dfsg + isc_log_getduplicateinterval@Base 1:9.11.3+dfsg + isc_log_gettag@Base 1:9.11.3+dfsg + isc_log_ivwrite1@Base 1:9.11.3+dfsg + isc_log_ivwrite@Base 1:9.11.3+dfsg + isc_log_iwrite1@Base 1:9.11.3+dfsg + isc_log_iwrite@Base 1:9.11.3+dfsg + isc_log_modulebyname@Base 1:9.11.3+dfsg + isc_log_opensyslog@Base 1:9.11.3+dfsg + isc_log_registercategories@Base 1:9.11.3+dfsg + isc_log_registermodules@Base 1:9.11.3+dfsg + isc_log_setcontext@Base 1:9.11.3+dfsg + isc_log_setdebuglevel@Base 1:9.11.3+dfsg + isc_log_setduplicateinterval@Base 1:9.11.3+dfsg + isc_log_settag@Base 1:9.11.3+dfsg + isc_log_usechannel@Base 1:9.11.3+dfsg + isc_log_vwrite1@Base 1:9.11.3+dfsg + isc_log_vwrite@Base 1:9.11.3+dfsg + isc_log_wouldlog@Base 1:9.11.3+dfsg + isc_log_write1@Base 1:9.11.3+dfsg + isc_log_write@Base 1:9.11.3+dfsg + isc_logconfig_create@Base 1:9.11.3+dfsg + isc_logconfig_destroy@Base 1:9.11.3+dfsg + isc_logconfig_get@Base 1:9.11.3+dfsg + isc_logconfig_use@Base 1:9.11.3+dfsg + isc_logfile_roll@Base 1:9.11.3+dfsg + isc_md5_check@Base 1:9.11.3+dfsg + isc_md5_final@Base 1:9.11.3+dfsg + isc_md5_init@Base 1:9.11.3+dfsg + isc_md5_invalidate@Base 1:9.11.3+dfsg + isc_md5_update@Base 1:9.11.3+dfsg + isc_mem_attach@Base 1:9.11.3+dfsg + isc_mem_checkdestroyed@Base 1:9.11.3+dfsg + isc_mem_create2@Base 1:9.11.3+dfsg + isc_mem_create@Base 1:9.11.3+dfsg + isc_mem_createx2@Base 1:9.11.3+dfsg + isc_mem_createx@Base 1:9.11.3+dfsg + isc_mem_debugging@Base 1:9.11.3+dfsg + isc_mem_defaultflags@Base 1:9.11.3+dfsg + isc_mem_destroy@Base 1:9.11.3+dfsg + isc_mem_detach@Base 1:9.11.3+dfsg + isc_mem_getname@Base 1:9.11.3+dfsg + isc_mem_getquota@Base 1:9.11.3+dfsg + isc_mem_gettag@Base 1:9.11.3+dfsg + isc_mem_inuse@Base 1:9.11.3+dfsg + isc_mem_isovermem@Base 1:9.11.3+dfsg + isc_mem_maxinuse@Base 1:9.11.3+dfsg + isc_mem_ondestroy@Base 1:9.11.3+dfsg + isc_mem_printallactive@Base 1:9.11.3+dfsg + isc_mem_references@Base 1:9.11.3+dfsg + isc_mem_register@Base 1:9.11.3+dfsg + isc_mem_renderjson@Base 1:9.11.3+dfsg + isc_mem_renderxml@Base 1:9.11.3+dfsg + isc_mem_setdestroycheck@Base 1:9.11.3+dfsg + isc_mem_setname@Base 1:9.11.3+dfsg + isc_mem_setquota@Base 1:9.11.3+dfsg + isc_mem_setwater@Base 1:9.11.3+dfsg + isc_mem_stats@Base 1:9.11.3+dfsg + isc_mem_total@Base 1:9.11.3+dfsg + isc_mem_waterack@Base 1:9.11.3+dfsg + isc_meminfo_totalphys@Base 1:9.11.3+dfsg + isc_mempool_associatelock@Base 1:9.11.3+dfsg + isc_mempool_create@Base 1:9.11.3+dfsg + isc_mempool_destroy@Base 1:9.11.3+dfsg + isc_mempool_getallocated@Base 1:9.11.3+dfsg + isc_mempool_getfillcount@Base 1:9.11.3+dfsg + isc_mempool_getfreecount@Base 1:9.11.3+dfsg + isc_mempool_getfreemax@Base 1:9.11.3+dfsg + isc_mempool_getmaxalloc@Base 1:9.11.3+dfsg + isc_mempool_setfillcount@Base 1:9.11.3+dfsg + isc_mempool_setfreemax@Base 1:9.11.3+dfsg + isc_mempool_setmaxalloc@Base 1:9.11.3+dfsg + isc_mempool_setname@Base 1:9.11.3+dfsg + isc_modules@Base 1:9.11.3+dfsg + isc_msgcat@Base 1:9.11.3+dfsg + isc_msgcat_close@Base 1:9.11.3+dfsg + isc_msgcat_get@Base 1:9.11.3+dfsg + isc_msgcat_open@Base 1:9.11.3+dfsg + isc_mutexblock_destroy@Base 1:9.11.3+dfsg + isc_mutexblock_init@Base 1:9.11.3+dfsg + isc_net_aton@Base 1:9.11.3+dfsg + isc_net_disableipv4@Base 1:9.11.3+dfsg + isc_net_disableipv6@Base 1:9.11.3+dfsg + isc_net_enableipv4@Base 1:9.11.3+dfsg + isc_net_enableipv6@Base 1:9.11.3+dfsg + isc_net_getudpportrange@Base 1:9.11.3+dfsg + isc_net_probe_ipv6only@Base 1:9.11.3+dfsg + isc_net_probe_ipv6pktinfo@Base 1:9.11.3+dfsg + isc_net_probedscp@Base 1:9.11.3+dfsg + isc_net_probeipv4@Base 1:9.11.3+dfsg + isc_net_probeipv6@Base 1:9.11.3+dfsg + isc_net_probeunix@Base 1:9.11.3+dfsg + isc_netaddr_any6@Base 1:9.11.3+dfsg + isc_netaddr_any@Base 1:9.11.3+dfsg + isc_netaddr_eqprefix@Base 1:9.11.3+dfsg + isc_netaddr_equal@Base 1:9.11.3+dfsg + isc_netaddr_format@Base 1:9.11.3+dfsg + isc_netaddr_fromin6@Base 1:9.11.3+dfsg + isc_netaddr_fromin@Base 1:9.11.3+dfsg + isc_netaddr_frompath@Base 1:9.11.3+dfsg + isc_netaddr_fromsockaddr@Base 1:9.11.3+dfsg + isc_netaddr_fromv4mapped@Base 1:9.11.3+dfsg + isc_netaddr_getzone@Base 1:9.11.3+dfsg + isc_netaddr_isexperimental@Base 1:9.11.3+dfsg + isc_netaddr_islinklocal@Base 1:9.11.3+dfsg + isc_netaddr_isloopback@Base 1:9.11.3+dfsg + isc_netaddr_ismulticast@Base 1:9.11.3+dfsg + isc_netaddr_isnetzero@Base 1:9.11.3+dfsg + isc_netaddr_issitelocal@Base 1:9.11.3+dfsg + isc_netaddr_masktoprefixlen@Base 1:9.11.3+dfsg + isc_netaddr_prefixok@Base 1:9.11.3+dfsg + isc_netaddr_setzone@Base 1:9.11.3+dfsg + isc_netaddr_totext@Base 1:9.11.3+dfsg + isc_netscope_pton@Base 1:9.11.3+dfsg + isc_ondestroy_init@Base 1:9.11.3+dfsg + isc_ondestroy_notify@Base 1:9.11.3+dfsg + isc_ondestroy_register@Base 1:9.11.3+dfsg + isc_os_ncpus@Base 1:9.11.3+dfsg + isc_parse_uint16@Base 1:9.11.3+dfsg + isc_parse_uint32@Base 1:9.11.3+dfsg + isc_parse_uint8@Base 1:9.11.3+dfsg + isc_pool_count@Base 1:9.11.3+dfsg + isc_pool_create@Base 1:9.11.3+dfsg + isc_pool_destroy@Base 1:9.11.3+dfsg + isc_pool_expand@Base 1:9.11.3+dfsg + isc_pool_get@Base 1:9.11.3+dfsg + isc_portset_add@Base 1:9.11.3+dfsg + isc_portset_addrange@Base 1:9.11.3+dfsg + isc_portset_create@Base 1:9.11.3+dfsg + isc_portset_destroy@Base 1:9.11.3+dfsg + isc_portset_isset@Base 1:9.11.3+dfsg + isc_portset_nports@Base 1:9.11.3+dfsg + isc_portset_remove@Base 1:9.11.3+dfsg + isc_portset_removerange@Base 1:9.11.3+dfsg + isc_quota_attach@Base 1:9.11.3+dfsg + isc_quota_destroy@Base 1:9.11.3+dfsg + isc_quota_detach@Base 1:9.11.3+dfsg + isc_quota_force@Base 1:9.11.5.P4+dfsg + isc_quota_init@Base 1:9.11.3+dfsg + isc_quota_max@Base 1:9.11.3+dfsg + isc_quota_release@Base 1:9.11.3+dfsg + isc_quota_reserve@Base 1:9.11.3+dfsg + isc_quota_soft@Base 1:9.11.3+dfsg + isc_radix_create@Base 1:9.11.3+dfsg + isc_radix_destroy@Base 1:9.11.3+dfsg + isc_radix_insert@Base 1:9.11.3+dfsg + isc_radix_process@Base 1:9.11.3+dfsg + isc_radix_remove@Base 1:9.11.3+dfsg + isc_radix_search@Base 1:9.11.3+dfsg + isc_random_get@Base 1:9.11.3+dfsg + isc_random_jitter@Base 1:9.11.3+dfsg + isc_random_seed@Base 1:9.11.3+dfsg + isc_ratelimiter_attach@Base 1:9.11.3+dfsg + isc_ratelimiter_create@Base 1:9.11.3+dfsg + isc_ratelimiter_dequeue@Base 1:9.11.3+dfsg + isc_ratelimiter_detach@Base 1:9.11.3+dfsg + isc_ratelimiter_enqueue@Base 1:9.11.3+dfsg + isc_ratelimiter_release@Base 1:9.11.3+dfsg + isc_ratelimiter_setinterval@Base 1:9.11.3+dfsg + isc_ratelimiter_setpertic@Base 1:9.11.3+dfsg + isc_ratelimiter_setpushpop@Base 1:9.11.3+dfsg + isc_ratelimiter_shutdown@Base 1:9.11.3+dfsg + isc_ratelimiter_stall@Base 1:9.11.3+dfsg + isc_refcount_init@Base 1:9.11.3+dfsg + isc_regex_validate@Base 1:9.11.3+dfsg + isc_region_compare@Base 1:9.11.3+dfsg + isc_resource_getcurlimit@Base 1:9.11.3+dfsg + isc_resource_getlimit@Base 1:9.11.3+dfsg + isc_resource_setlimit@Base 1:9.11.3+dfsg + isc_result_register@Base 1:9.11.3+dfsg + isc_result_registerids@Base 1:9.11.3+dfsg + isc_result_toid@Base 1:9.11.3+dfsg + isc_result_totext@Base 1:9.11.3+dfsg + isc_rng_attach@Base 1:9.11.3+dfsg + isc_rng_create@Base 1:9.11.3+dfsg + isc_rng_detach@Base 1:9.11.3+dfsg + isc_rng_random@Base 1:9.11.3+dfsg + isc_rng_uniformrandom@Base 1:9.11.3+dfsg + isc_rwlock_destroy@Base 1:9.11.3+dfsg + isc_rwlock_downgrade@Base 1:9.11.3+dfsg + isc_rwlock_init@Base 1:9.11.3+dfsg + isc_rwlock_lock@Base 1:9.11.3+dfsg + isc_rwlock_trylock@Base 1:9.11.3+dfsg + isc_rwlock_tryupgrade@Base 1:9.11.3+dfsg + isc_rwlock_unlock@Base 1:9.11.3+dfsg + isc_safe_memcompare@Base 1:9.11.3+dfsg + isc_safe_memequal@Base 1:9.11.3+dfsg + isc_safe_memwipe@Base 1:9.11.3+dfsg + isc_serial_eq@Base 1:9.11.3+dfsg + isc_serial_ge@Base 1:9.11.3+dfsg + isc_serial_gt@Base 1:9.11.3+dfsg + isc_serial_le@Base 1:9.11.3+dfsg + isc_serial_lt@Base 1:9.11.3+dfsg + isc_serial_ne@Base 1:9.11.3+dfsg + isc_sha1_check@Base 1:9.11.3+dfsg + isc_sha1_final@Base 1:9.11.3+dfsg + isc_sha1_init@Base 1:9.11.3+dfsg + isc_sha1_invalidate@Base 1:9.11.3+dfsg + isc_sha1_update@Base 1:9.11.3+dfsg + isc_sha224_data@Base 1:9.11.3+dfsg + isc_sha224_end@Base 1:9.11.3+dfsg + isc_sha224_final@Base 1:9.11.3+dfsg + isc_sha224_init@Base 1:9.11.3+dfsg + isc_sha224_invalidate@Base 1:9.11.3+dfsg + isc_sha224_update@Base 1:9.11.3+dfsg + isc_sha256_data@Base 1:9.11.3+dfsg + isc_sha256_end@Base 1:9.11.3+dfsg + isc_sha256_final@Base 1:9.11.3+dfsg + isc_sha256_init@Base 1:9.11.3+dfsg + isc_sha256_invalidate@Base 1:9.11.3+dfsg + isc_sha256_update@Base 1:9.11.3+dfsg + isc_sha384_data@Base 1:9.11.3+dfsg + isc_sha384_end@Base 1:9.11.3+dfsg + isc_sha384_final@Base 1:9.11.3+dfsg + isc_sha384_init@Base 1:9.11.3+dfsg + isc_sha384_invalidate@Base 1:9.11.3+dfsg + isc_sha384_update@Base 1:9.11.3+dfsg + isc_sha512_data@Base 1:9.11.3+dfsg + isc_sha512_end@Base 1:9.11.3+dfsg + isc_sha512_final@Base 1:9.11.3+dfsg + isc_sha512_init@Base 1:9.11.3+dfsg + isc_sha512_invalidate@Base 1:9.11.3+dfsg + isc_sha512_update@Base 1:9.11.3+dfsg + isc_sockaddr_any6@Base 1:9.11.3+dfsg + isc_sockaddr_any@Base 1:9.11.3+dfsg + isc_sockaddr_anyofpf@Base 1:9.11.3+dfsg + isc_sockaddr_compare@Base 1:9.11.3+dfsg + isc_sockaddr_eqaddr@Base 1:9.11.3+dfsg + isc_sockaddr_eqaddrprefix@Base 1:9.11.3+dfsg + isc_sockaddr_equal@Base 1:9.11.3+dfsg + isc_sockaddr_format@Base 1:9.11.3+dfsg + isc_sockaddr_fromin6@Base 1:9.11.3+dfsg + isc_sockaddr_fromin@Base 1:9.11.3+dfsg + isc_sockaddr_fromnetaddr@Base 1:9.11.3+dfsg + isc_sockaddr_frompath@Base 1:9.11.3+dfsg + isc_sockaddr_getport@Base 1:9.11.3+dfsg + isc_sockaddr_hash@Base 1:9.11.3+dfsg + isc_sockaddr_isexperimental@Base 1:9.11.3+dfsg + isc_sockaddr_islinklocal@Base 1:9.11.3+dfsg + isc_sockaddr_ismulticast@Base 1:9.11.3+dfsg + isc_sockaddr_isnetzero@Base 1:9.11.3+dfsg + isc_sockaddr_issitelocal@Base 1:9.11.3+dfsg + isc_sockaddr_pf@Base 1:9.11.3+dfsg + isc_sockaddr_setport@Base 1:9.11.3+dfsg + isc_sockaddr_totext@Base 1:9.11.3+dfsg + isc_sockaddr_v6fromin@Base 1:9.11.3+dfsg + isc_socket_accept@Base 1:9.11.3+dfsg + isc_socket_attach@Base 1:9.11.3+dfsg + isc_socket_bind@Base 1:9.11.3+dfsg + isc_socket_cancel@Base 1:9.11.3+dfsg + isc_socket_cleanunix@Base 1:9.11.3+dfsg + isc_socket_close@Base 1:9.11.3+dfsg + isc_socket_connect@Base 1:9.11.3+dfsg + isc_socket_create@Base 1:9.11.3+dfsg + isc_socket_detach@Base 1:9.11.3+dfsg + isc_socket_dscp@Base 1:9.11.3+dfsg + isc_socket_dup@Base 1:9.11.3+dfsg + isc_socket_fdwatchcreate@Base 1:9.11.3+dfsg + isc_socket_fdwatchpoke@Base 1:9.11.3+dfsg + isc_socket_filter@Base 1:9.11.3+dfsg + isc_socket_getfd@Base 1:9.11.3+dfsg + isc_socket_getpeername@Base 1:9.11.3+dfsg + isc_socket_getsockname@Base 1:9.11.3+dfsg + isc_socket_gettype@Base 1:9.11.3+dfsg + isc_socket_ipv6only@Base 1:9.11.3+dfsg + isc_socket_listen@Base 1:9.11.3+dfsg + isc_socket_open@Base 1:9.11.3+dfsg + isc_socket_permunix@Base 1:9.11.3+dfsg + isc_socket_recv2@Base 1:9.11.3+dfsg + isc_socket_recv@Base 1:9.11.3+dfsg + isc_socket_recvv@Base 1:9.11.3+dfsg + isc_socket_register@Base 1:9.11.3+dfsg + isc_socket_send@Base 1:9.11.3+dfsg + isc_socket_sendto2@Base 1:9.11.3+dfsg + isc_socket_sendto@Base 1:9.11.3+dfsg + isc_socket_sendtov2@Base 1:9.11.3+dfsg + isc_socket_sendtov@Base 1:9.11.3+dfsg + isc_socket_sendv@Base 1:9.11.3+dfsg + isc_socket_setname@Base 1:9.11.3+dfsg + isc_socket_socketevent@Base 1:9.11.3+dfsg + isc_socketmgr_create2@Base 1:9.11.3+dfsg + isc_socketmgr_create@Base 1:9.11.3+dfsg + isc_socketmgr_createinctx@Base 1:9.11.3+dfsg + isc_socketmgr_destroy@Base 1:9.11.3+dfsg + isc_socketmgr_getmaxsockets@Base 1:9.11.3+dfsg + isc_socketmgr_renderjson@Base 1:9.11.3+dfsg + isc_socketmgr_renderxml@Base 1:9.11.3+dfsg + isc_socketmgr_setstats@Base 1:9.11.3+dfsg + isc_stats_attach@Base 1:9.11.3+dfsg + isc_stats_create@Base 1:9.11.3+dfsg + isc_stats_decrement@Base 1:9.11.3+dfsg + isc_stats_detach@Base 1:9.11.3+dfsg + isc_stats_dump@Base 1:9.11.3+dfsg + isc_stats_increment@Base 1:9.11.3+dfsg + isc_stats_ncounters@Base 1:9.11.3+dfsg + isc_stats_set@Base 1:9.11.3+dfsg + isc_stdio_close@Base 1:9.11.3+dfsg + isc_stdio_flush@Base 1:9.11.3+dfsg + isc_stdio_open@Base 1:9.11.3+dfsg + isc_stdio_read@Base 1:9.11.3+dfsg + isc_stdio_seek@Base 1:9.11.3+dfsg + isc_stdio_sync@Base 1:9.11.3+dfsg + isc_stdio_tell@Base 1:9.11.3+dfsg + isc_stdio_write@Base 1:9.11.3+dfsg + isc_stdtime_get@Base 1:9.11.3+dfsg + isc_string_append@Base 1:9.11.3+dfsg + isc_string_append_truncate@Base 1:9.11.3+dfsg + isc_string_copy@Base 1:9.11.3+dfsg + isc_string_copy_truncate@Base 1:9.11.3+dfsg + isc_string_printf@Base 1:9.11.3+dfsg + isc_string_printf_truncate@Base 1:9.11.3+dfsg + isc_string_regiondup@Base 1:9.11.3+dfsg + isc_string_separate@Base 1:9.11.3+dfsg + isc_string_strcasestr@Base 1:9.11.3+dfsg + isc_string_strlcat@Base 1:9.11.3+dfsg + isc_string_strlcpy@Base 1:9.11.3+dfsg + isc_string_touint64@Base 1:9.11.3+dfsg + isc_strtoul@Base 1:9.11.3+dfsg + isc_symtab_count@Base 1:9.11.3+dfsg + isc_symtab_create@Base 1:9.11.3+dfsg + isc_symtab_define@Base 1:9.11.3+dfsg + isc_symtab_destroy@Base 1:9.11.3+dfsg + isc_symtab_lookup@Base 1:9.11.3+dfsg + isc_symtab_undefine@Base 1:9.11.3+dfsg + isc_syslog_facilityfromstring@Base 1:9.11.3+dfsg + isc_task_attach@Base 1:9.11.3+dfsg + isc_task_beginexclusive@Base 1:9.11.3+dfsg + isc_task_create@Base 1:9.11.3+dfsg + isc_task_destroy@Base 1:9.11.3+dfsg + isc_task_detach@Base 1:9.11.3+dfsg + isc_task_endexclusive@Base 1:9.11.3+dfsg + isc_task_exiting@Base 1:9.11.3+dfsg + isc_task_getcurrenttime@Base 1:9.11.3+dfsg + isc_task_getcurrenttimex@Base 1:9.11.3+dfsg + isc_task_onshutdown@Base 1:9.11.3+dfsg + isc_task_privilege@Base 1:9.11.3+dfsg + isc_task_purge@Base 1:9.11.3+dfsg + isc_task_purgeevent@Base 1:9.11.3+dfsg + isc_task_purgerange@Base 1:9.11.3+dfsg + isc_task_register@Base 1:9.11.3+dfsg + isc_task_send@Base 1:9.11.3+dfsg + isc_task_sendanddetach@Base 1:9.11.3+dfsg + isc_task_setname@Base 1:9.11.3+dfsg + isc_task_setprivilege@Base 1:9.11.3+dfsg + isc_task_shutdown@Base 1:9.11.3+dfsg + isc_task_unsend@Base 1:9.11.3+dfsg + isc_taskmgr_create@Base 1:9.11.3+dfsg + isc_taskmgr_createinctx@Base 1:9.11.3+dfsg + isc_taskmgr_destroy@Base 1:9.11.3+dfsg + isc_taskmgr_excltask@Base 1:9.11.3+dfsg + isc_taskmgr_mode@Base 1:9.11.3+dfsg + isc_taskmgr_renderjson@Base 1:9.11.3+dfsg + isc_taskmgr_renderxml@Base 1:9.11.3+dfsg + isc_taskmgr_setexcltask@Base 1:9.11.3+dfsg + isc_taskmgr_setmode@Base 1:9.11.3+dfsg + isc_taskpool_create@Base 1:9.11.3+dfsg + isc_taskpool_destroy@Base 1:9.11.3+dfsg + isc_taskpool_expand@Base 1:9.11.3+dfsg + isc_taskpool_gettask@Base 1:9.11.3+dfsg + isc_taskpool_setprivilege@Base 1:9.11.3+dfsg + isc_taskpool_size@Base 1:9.11.3+dfsg + isc_thread_create@Base 1:9.11.3+dfsg + isc_thread_setconcurrency@Base 1:9.11.3+dfsg + isc_thread_setname@Base 1:9.11.3+dfsg + isc_thread_yield@Base 1:9.11.3+dfsg + isc_time_add@Base 1:9.11.3+dfsg + isc_time_compare@Base 1:9.11.3+dfsg + isc_time_epoch@Base 1:9.11.3+dfsg + isc_time_formatISO8601@Base 1:9.11.3+dfsg + isc_time_formatISO8601ms@Base 1:9.11.3+dfsg + isc_time_formathttptimestamp@Base 1:9.11.3+dfsg + isc_time_formattimestamp@Base 1:9.11.3+dfsg + isc_time_isepoch@Base 1:9.11.3+dfsg + isc_time_microdiff@Base 1:9.11.3+dfsg + isc_time_nanoseconds@Base 1:9.11.3+dfsg + isc_time_now@Base 1:9.11.3+dfsg + isc_time_nowplusinterval@Base 1:9.11.3+dfsg + isc_time_parsehttptimestamp@Base 1:9.11.3+dfsg + isc_time_seconds@Base 1:9.11.3+dfsg + isc_time_secondsastimet@Base 1:9.11.3+dfsg + isc_time_set@Base 1:9.11.3+dfsg + isc_time_settoepoch@Base 1:9.11.3+dfsg + isc_time_subtract@Base 1:9.11.3+dfsg + isc_timer_attach@Base 1:9.11.3+dfsg + isc_timer_create@Base 1:9.11.3+dfsg + isc_timer_detach@Base 1:9.11.3+dfsg + isc_timer_gettype@Base 1:9.11.3+dfsg + isc_timer_register@Base 1:9.11.3+dfsg + isc_timer_reset@Base 1:9.11.3+dfsg + isc_timer_touch@Base 1:9.11.3+dfsg + isc_timermgr_create@Base 1:9.11.3+dfsg + isc_timermgr_createinctx@Base 1:9.11.3+dfsg + isc_timermgr_destroy@Base 1:9.11.3+dfsg + isc_timermgr_poke@Base 1:9.11.3+dfsg + isc_tm_strptime@Base 1:9.11.3+dfsg + isc_tm_timegm@Base 1:9.11.3+dfsg + isc_version@Base 1:9.11.3+dfsg + pk11_attribute_bytype@Base 1:9.11.3+dfsg + pk11_attribute_first@Base 1:9.11.3+dfsg + pk11_attribute_next@Base 1:9.11.3+dfsg + pk11_dump_tokens@Base 1:9.11.3+dfsg + pk11_error_fatalcheck@Base 1:9.11.3+dfsg + pk11_finalize@Base 1:9.11.3+dfsg + pk11_get_best_token@Base 1:9.11.3+dfsg + pk11_get_lib_name@Base 1:9.11.3+dfsg + pk11_get_load_error_message@Base 1:9.11.3+dfsg + pk11_get_session@Base 1:9.11.3+dfsg + pk11_initialize@Base 1:9.11.3+dfsg + pk11_initmsgcat@Base 1:9.11.3+dfsg + pk11_mem_get@Base 1:9.11.3+dfsg + pk11_mem_put@Base 1:9.11.3+dfsg + pk11_msgcat@Base 1:9.11.3+dfsg + pk11_numbits@Base 1:9.11.3+dfsg + pk11_parse_uri@Base 1:9.11.3+dfsg + pk11_rand_bytes@Base 1:9.11.3+dfsg + pk11_rand_seed_fromfile@Base 1:9.11.3+dfsg + pk11_result_register@Base 1:9.11.3+dfsg + pk11_result_totext@Base 1:9.11.3+dfsg + pk11_return_session@Base 1:9.11.3+dfsg + pk11_set_lib_name@Base 1:9.11.3+dfsg + pk11_verbose_init@Base 1:9.11.3+dfsg + pkcs_C_CloseSession@Base 1:9.11.3+dfsg + pkcs_C_CreateObject@Base 1:9.11.3+dfsg + pkcs_C_DeriveKey@Base 1:9.11.3+dfsg + pkcs_C_DestroyObject@Base 1:9.11.3+dfsg + pkcs_C_DigestFinal@Base 1:9.11.3+dfsg + pkcs_C_DigestInit@Base 1:9.11.3+dfsg + pkcs_C_DigestUpdate@Base 1:9.11.3+dfsg + pkcs_C_Encrypt@Base 1:9.11.3+dfsg + pkcs_C_EncryptInit@Base 1:9.11.3+dfsg + pkcs_C_Finalize@Base 1:9.11.3+dfsg + pkcs_C_FindObjects@Base 1:9.11.3+dfsg + pkcs_C_FindObjectsFinal@Base 1:9.11.3+dfsg + pkcs_C_FindObjectsInit@Base 1:9.11.3+dfsg + pkcs_C_GenerateKey@Base 1:9.11.3+dfsg + pkcs_C_GenerateKeyPair@Base 1:9.11.3+dfsg + pkcs_C_GenerateRandom@Base 1:9.11.3+dfsg + pkcs_C_GetAttributeValue@Base 1:9.11.3+dfsg + pkcs_C_GetMechanismInfo@Base 1:9.11.3+dfsg + pkcs_C_GetSlotList@Base 1:9.11.3+dfsg + pkcs_C_GetTokenInfo@Base 1:9.11.3+dfsg + pkcs_C_Initialize@Base 1:9.11.3+dfsg + pkcs_C_Login@Base 1:9.11.3+dfsg + pkcs_C_Logout@Base 1:9.11.3+dfsg + pkcs_C_OpenSession@Base 1:9.11.3+dfsg + pkcs_C_SeedRandom@Base 1:9.11.3+dfsg + pkcs_C_SetAttributeValue@Base 1:9.11.3+dfsg + pkcs_C_Sign@Base 1:9.11.3+dfsg + pkcs_C_SignFinal@Base 1:9.11.3+dfsg + pkcs_C_SignInit@Base 1:9.11.3+dfsg + pkcs_C_SignUpdate@Base 1:9.11.3+dfsg + pkcs_C_Verify@Base 1:9.11.3+dfsg + pkcs_C_VerifyFinal@Base 1:9.11.3+dfsg + pkcs_C_VerifyInit@Base 1:9.11.3+dfsg + pkcs_C_VerifyUpdate@Base 1:9.11.3+dfsg diff --git a/debian/libisccc-export161-udeb.install b/debian/libisccc-export161-udeb.install new file mode 100755 index 0000000..f75e75f --- /dev/null +++ b/debian/libisccc-export161-udeb.install @@ -0,0 +1,2 @@ +#! /usr/bin/dh-exec +../tmp-udeb/lib/*/libisccc-export.so.* lib/${DEB_HOST_MULTIARCH} diff --git a/debian/libisccc-export161.install b/debian/libisccc-export161.install new file mode 100755 index 0000000..f75e75f --- /dev/null +++ b/debian/libisccc-export161.install @@ -0,0 +1,2 @@ +#! /usr/bin/dh-exec +../tmp-udeb/lib/*/libisccc-export.so.* lib/${DEB_HOST_MULTIARCH} diff --git a/debian/libisccc161.install b/debian/libisccc161.install new file mode 100644 index 0000000..25c2515 --- /dev/null +++ b/debian/libisccc161.install @@ -0,0 +1 @@ +usr/lib/*/libisccc.so.* diff --git a/debian/libisccc161.symbols b/debian/libisccc161.symbols new file mode 100644 index 0000000..b119c27 --- /dev/null +++ b/debian/libisccc161.symbols @@ -0,0 +1,66 @@ +libisccc.so.161 libisccc161 #MINVER# + isccc_alist_alistp@Base 1:9.10.6+dfsg + isccc_alist_assq@Base 1:9.10.6+dfsg + isccc_alist_create@Base 1:9.10.6+dfsg + isccc_alist_define@Base 1:9.10.6+dfsg + isccc_alist_definebinary@Base 1:9.10.6+dfsg + isccc_alist_definestring@Base 1:9.10.6+dfsg + isccc_alist_delete@Base 1:9.10.6+dfsg + isccc_alist_emptyp@Base 1:9.10.6+dfsg + isccc_alist_first@Base 1:9.10.6+dfsg + isccc_alist_lookup@Base 1:9.10.6+dfsg + isccc_alist_lookupbinary@Base 1:9.10.6+dfsg + isccc_alist_lookupstring@Base 1:9.10.6+dfsg + isccc_alist_prettyprint@Base 1:9.10.6+dfsg + isccc_base64_decode@Base 1:9.10.6+dfsg + isccc_base64_encode@Base 1:9.10.6+dfsg + isccc_cc_checkdup@Base 1:9.10.6+dfsg + isccc_cc_cleansymtab@Base 1:9.10.6+dfsg + isccc_cc_createack@Base 1:9.10.6+dfsg + isccc_cc_createmessage@Base 1:9.10.6+dfsg + isccc_cc_createresponse@Base 1:9.10.6+dfsg + isccc_cc_createsymtab@Base 1:9.10.6+dfsg + isccc_cc_definestring@Base 1:9.10.6+dfsg + isccc_cc_defineuint32@Base 1:9.10.6+dfsg + isccc_cc_fromwire@Base 1:9.10.6+dfsg + isccc_cc_isack@Base 1:9.10.6+dfsg + isccc_cc_isreply@Base 1:9.10.6+dfsg + isccc_cc_lookupstring@Base 1:9.10.6+dfsg + isccc_cc_lookupuint32@Base 1:9.10.6+dfsg + isccc_cc_towire@Base 1:9.10.6+dfsg + isccc_ccmsg_cancelread@Base 1:9.10.6+dfsg + isccc_ccmsg_init@Base 1:9.10.6+dfsg + isccc_ccmsg_invalidate@Base 1:9.10.6+dfsg + isccc_ccmsg_readmessage@Base 1:9.10.6+dfsg + isccc_ccmsg_setmaxsize@Base 1:9.10.6+dfsg + isccc_lib_initmsgcat@Base 1:9.10.6+dfsg + isccc_libage@Base 1:9.10.6+dfsg + isccc_libinterface@Base 1:9.10.6+dfsg + isccc_librevision@Base 1:9.10.6+dfsg + isccc_msgcat@Base 1:9.10.6+dfsg + isccc_result_register@Base 1:9.10.6+dfsg + isccc_result_totext@Base 1:9.10.6+dfsg + isccc_sexpr_addtolist@Base 1:9.10.6+dfsg + isccc_sexpr_binaryp@Base 1:9.10.6+dfsg + isccc_sexpr_car@Base 1:9.10.6+dfsg + isccc_sexpr_cdr@Base 1:9.10.6+dfsg + isccc_sexpr_cons@Base 1:9.10.6+dfsg + isccc_sexpr_emptyp@Base 1:9.10.6+dfsg + isccc_sexpr_free@Base 1:9.10.6+dfsg + isccc_sexpr_frombinary@Base 1:9.10.6+dfsg + isccc_sexpr_fromstring@Base 1:9.10.6+dfsg + isccc_sexpr_listp@Base 1:9.10.6+dfsg + isccc_sexpr_print@Base 1:9.10.6+dfsg + isccc_sexpr_setcar@Base 1:9.10.6+dfsg + isccc_sexpr_setcdr@Base 1:9.10.6+dfsg + isccc_sexpr_stringp@Base 1:9.10.6+dfsg + isccc_sexpr_tconst@Base 1:9.10.6+dfsg + isccc_sexpr_tobinary@Base 1:9.10.6+dfsg + isccc_sexpr_tostring@Base 1:9.10.6+dfsg + isccc_symtab_create@Base 1:9.10.6+dfsg + isccc_symtab_define@Base 1:9.10.6+dfsg + isccc_symtab_destroy@Base 1:9.10.6+dfsg + isccc_symtab_foreach@Base 1:9.10.6+dfsg + isccc_symtab_lookup@Base 1:9.10.6+dfsg + isccc_symtab_undefine@Base 1:9.10.6+dfsg + isccc_version@Base 1:9.10.6+dfsg diff --git a/debian/libisccfg-export163-udeb.install b/debian/libisccfg-export163-udeb.install new file mode 100755 index 0000000..dc18cc6 --- /dev/null +++ b/debian/libisccfg-export163-udeb.install @@ -0,0 +1,2 @@ +#! /usr/bin/dh-exec +../tmp-udeb/lib/*/libisccfg-export.so.* lib/${DEB_HOST_MULTIARCH} diff --git a/debian/libisccfg-export163.install b/debian/libisccfg-export163.install new file mode 100755 index 0000000..dc18cc6 --- /dev/null +++ b/debian/libisccfg-export163.install @@ -0,0 +1,2 @@ +#! /usr/bin/dh-exec +../tmp-udeb/lib/*/libisccfg-export.so.* lib/${DEB_HOST_MULTIARCH} diff --git a/debian/libisccfg163.install b/debian/libisccfg163.install new file mode 100644 index 0000000..7127996 --- /dev/null +++ b/debian/libisccfg163.install @@ -0,0 +1 @@ +usr/lib/*/libisccfg.so.* diff --git a/debian/libisccfg163.symbols b/debian/libisccfg163.symbols new file mode 100644 index 0000000..dbc7e0e --- /dev/null +++ b/debian/libisccfg163.symbols @@ -0,0 +1,173 @@ +libisccfg.so.163 libisccfg163 #MINVER# + cfg_acl_fromconfig2@Base 1:9.10.6+dfsg + cfg_acl_fromconfig@Base 1:9.10.6+dfsg + cfg_aclconfctx_attach@Base 1:9.10.6+dfsg + cfg_aclconfctx_create@Base 1:9.10.6+dfsg + cfg_aclconfctx_detach@Base 1:9.10.6+dfsg + cfg_categories@Base 1:9.10.6+dfsg + cfg_clause_validforzone@Base 1:9.11.3+dfsg + cfg_create_list@Base 1:9.10.6+dfsg + cfg_create_obj@Base 1:9.10.6+dfsg + cfg_create_tuple@Base 1:9.10.6+dfsg + cfg_doc_bracketed_list@Base 1:9.10.6+dfsg + cfg_doc_enum@Base 1:9.10.6+dfsg + cfg_doc_map@Base 1:9.10.6+dfsg + cfg_doc_mapbody@Base 1:9.10.6+dfsg + cfg_doc_obj@Base 1:9.10.6+dfsg + cfg_doc_sockaddr@Base 1:9.10.6+dfsg + cfg_doc_terminal@Base 1:9.10.6+dfsg + cfg_doc_tuple@Base 1:9.10.6+dfsg + cfg_doc_void@Base 1:9.10.6+dfsg + cfg_gettoken@Base 1:9.10.6+dfsg + cfg_is_enum@Base 1:9.10.6+dfsg + cfg_libage@Base 1:9.10.6+dfsg + cfg_libinterface@Base 1:9.10.6+dfsg + cfg_librevision@Base 1:9.10.6+dfsg + cfg_list_first@Base 1:9.10.6+dfsg + cfg_list_length@Base 1:9.10.6+dfsg + cfg_list_next@Base 1:9.10.6+dfsg + cfg_listelt_value@Base 1:9.10.6+dfsg + cfg_log_init@Base 1:9.10.6+dfsg + cfg_lookingat_netaddr@Base 1:9.10.6+dfsg + cfg_map_count@Base 1:9.10.6+dfsg + cfg_map_firstclause@Base 1:9.11.3+dfsg + cfg_map_get@Base 1:9.10.6+dfsg + cfg_map_getname@Base 1:9.10.6+dfsg + cfg_map_nextclause@Base 1:9.11.3+dfsg + cfg_modules@Base 1:9.10.6+dfsg + cfg_obj_asboolean@Base 1:9.10.6+dfsg + cfg_obj_asfixedpoint@Base 1:9.10.6+dfsg + cfg_obj_asnetprefix@Base 1:9.10.6+dfsg + cfg_obj_aspercentage@Base 1:9.11.2+dfsg + cfg_obj_assockaddr@Base 1:9.10.6+dfsg + cfg_obj_asstring@Base 1:9.10.6+dfsg + cfg_obj_asuint32@Base 1:9.10.6+dfsg + cfg_obj_asuint64@Base 1:9.10.6+dfsg + cfg_obj_attach@Base 1:9.10.6+dfsg + cfg_obj_destroy@Base 1:9.10.6+dfsg + cfg_obj_file@Base 1:9.10.6+dfsg + cfg_obj_getdscp@Base 1:9.10.6+dfsg + cfg_obj_isboolean@Base 1:9.10.6+dfsg + cfg_obj_isfixedpoint@Base 1:9.11.2+dfsg + cfg_obj_islist@Base 1:9.10.6+dfsg + cfg_obj_ismap@Base 1:9.10.6+dfsg + cfg_obj_isnetprefix@Base 1:9.10.6+dfsg + cfg_obj_ispercentage@Base 1:9.11.2+dfsg + cfg_obj_issockaddr@Base 1:9.10.6+dfsg + cfg_obj_isstring@Base 1:9.10.6+dfsg + cfg_obj_istuple@Base 1:9.10.6+dfsg + cfg_obj_istype@Base 1:9.10.6+dfsg + cfg_obj_isuint32@Base 1:9.10.6+dfsg + cfg_obj_isuint64@Base 1:9.10.6+dfsg + cfg_obj_isvoid@Base 1:9.10.6+dfsg + cfg_obj_line@Base 1:9.10.6+dfsg + cfg_obj_log@Base 1:9.10.6+dfsg + cfg_parse_addressed_map@Base 1:9.10.6+dfsg + cfg_parse_astring@Base 1:9.10.6+dfsg + cfg_parse_boolean@Base 1:9.10.6+dfsg + cfg_parse_bracketed_list@Base 1:9.10.6+dfsg + cfg_parse_buffer2@Base 1:9.11.2+dfsg + cfg_parse_buffer3@Base 1:9.11.2+dfsg + cfg_parse_buffer4@Base 1:9.11.4+dfsg + cfg_parse_buffer@Base 1:9.10.6+dfsg + cfg_parse_dscp@Base 1:9.10.6+dfsg + cfg_parse_enum@Base 1:9.10.6+dfsg + cfg_parse_file@Base 1:9.10.6+dfsg + cfg_parse_fixedpoint@Base 1:9.10.6+dfsg + cfg_parse_listelt@Base 1:9.10.6+dfsg + cfg_parse_map@Base 1:9.10.6+dfsg + cfg_parse_mapbody@Base 1:9.10.6+dfsg + cfg_parse_named_map@Base 1:9.10.6+dfsg + cfg_parse_netprefix@Base 1:9.10.6+dfsg + cfg_parse_netprefix_map@Base 1:9.10.6+dfsg + cfg_parse_obj@Base 1:9.10.6+dfsg + cfg_parse_percentage@Base 1:9.11.2+dfsg + cfg_parse_qstring@Base 1:9.10.6+dfsg + cfg_parse_rawaddr@Base 1:9.10.6+dfsg + cfg_parse_rawport@Base 1:9.10.6+dfsg + cfg_parse_sockaddr@Base 1:9.10.6+dfsg + cfg_parse_spacelist@Base 1:9.10.6+dfsg + cfg_parse_special@Base 1:9.10.6+dfsg + cfg_parse_sstring@Base 1:9.10.6+dfsg + cfg_parse_tuple@Base 1:9.10.6+dfsg + cfg_parse_uint32@Base 1:9.10.6+dfsg + cfg_parse_void@Base 1:9.10.6+dfsg + cfg_parser_attach@Base 1:9.10.6+dfsg + cfg_parser_create@Base 1:9.10.6+dfsg + cfg_parser_destroy@Base 1:9.10.6+dfsg + cfg_parser_error@Base 1:9.10.6+dfsg + cfg_parser_mapadd@Base 1:9.11.2+dfsg + cfg_parser_reset@Base 1:9.11.2+dfsg + cfg_parser_setcallback@Base 1:9.10.6+dfsg + cfg_parser_warning@Base 1:9.10.6+dfsg + cfg_peektoken@Base 1:9.10.6+dfsg + cfg_print@Base 1:9.10.6+dfsg + cfg_print_boolean@Base 1:9.10.6+dfsg + cfg_print_bracketed_list@Base 1:9.10.6+dfsg + cfg_print_chars@Base 1:9.10.6+dfsg + cfg_print_clauseflags@Base 1:9.11.3+dfsg + cfg_print_cstr@Base 1:9.10.6+dfsg + cfg_print_fixedpoint@Base 1:9.10.6+dfsg + cfg_print_grammar@Base 1:9.10.6+dfsg + cfg_print_indent@Base 1:9.11.3+dfsg + cfg_print_map@Base 1:9.10.6+dfsg + cfg_print_mapbody@Base 1:9.10.6+dfsg + cfg_print_obj@Base 1:9.10.6+dfsg + cfg_print_percentage@Base 1:9.11.2+dfsg + cfg_print_rawaddr@Base 1:9.10.6+dfsg + cfg_print_rawuint@Base 1:9.10.6+dfsg + cfg_print_sockaddr@Base 1:9.10.6+dfsg + cfg_print_spacelist@Base 1:9.10.6+dfsg + cfg_print_tuple@Base 1:9.10.6+dfsg + cfg_print_uint32@Base 1:9.10.6+dfsg + cfg_print_uint64@Base 1:9.10.6+dfsg + cfg_print_ustring@Base 1:9.10.6+dfsg + cfg_print_void@Base 1:9.10.6+dfsg + cfg_print_zonegrammar@Base 1:9.11.3+dfsg + cfg_printx@Base 1:9.10.6+dfsg + cfg_rep_boolean@Base 1:9.10.6+dfsg + cfg_rep_fixedpoint@Base 1:9.10.6+dfsg + cfg_rep_list@Base 1:9.10.6+dfsg + cfg_rep_map@Base 1:9.10.6+dfsg + cfg_rep_netprefix@Base 1:9.10.6+dfsg + cfg_rep_percentage@Base 1:9.11.2+dfsg + cfg_rep_sockaddr@Base 1:9.10.6+dfsg + cfg_rep_string@Base 1:9.10.6+dfsg + cfg_rep_tuple@Base 1:9.10.6+dfsg + cfg_rep_uint32@Base 1:9.10.6+dfsg + cfg_rep_uint64@Base 1:9.10.6+dfsg + cfg_rep_void@Base 1:9.10.6+dfsg + cfg_tuple_get@Base 1:9.10.6+dfsg + cfg_type_addzoneconf@Base 1:9.10.6+dfsg + cfg_type_astring@Base 1:9.10.6+dfsg + cfg_type_bindkeys@Base 1:9.10.6+dfsg + cfg_type_boolean@Base 1:9.10.6+dfsg + cfg_type_bracketed_text@Base 1:9.11.2+dfsg + cfg_type_dnsconf@Base 1:9.10.6+dfsg + cfg_type_ecsprefix@Base 1:9.11.2+dfsg + cfg_type_fixedpoint@Base 1:9.10.6+dfsg + cfg_type_keyref@Base 1:9.10.6+dfsg + cfg_type_namedconf@Base 1:9.10.6+dfsg + cfg_type_netaddr4@Base 1:9.10.6+dfsg + cfg_type_netaddr4wild@Base 1:9.10.6+dfsg + cfg_type_netaddr6@Base 1:9.10.6+dfsg + cfg_type_netaddr6wild@Base 1:9.10.6+dfsg + cfg_type_netaddr@Base 1:9.10.6+dfsg + cfg_type_netprefix@Base 1:9.10.6+dfsg + cfg_type_percentage@Base 1:9.11.2+dfsg + cfg_type_qstring@Base 1:9.10.6+dfsg + cfg_type_rndcconf@Base 1:9.10.6+dfsg + cfg_type_rndckey@Base 1:9.10.6+dfsg + cfg_type_sessionkey@Base 1:9.10.6+dfsg + cfg_type_sockaddr@Base 1:9.10.6+dfsg + cfg_type_sockaddrdscp@Base 1:9.10.6+dfsg + cfg_type_sstring@Base 1:9.10.6+dfsg + cfg_type_token@Base 1:9.10.6+dfsg + cfg_type_uint32@Base 1:9.10.6+dfsg + cfg_type_uint64@Base 1:9.10.6+dfsg + cfg_type_unsupported@Base 1:9.10.6+dfsg + cfg_type_ustring@Base 1:9.10.6+dfsg + cfg_type_void@Base 1:9.10.6+dfsg + cfg_type_zoneopts@Base 1:9.11.3+dfsg + cfg_ungettoken@Base 1:9.10.6+dfsg + cfg_version@Base 1:9.10.6+dfsg diff --git a/debian/liblwres161.install b/debian/liblwres161.install new file mode 100644 index 0000000..791183e --- /dev/null +++ b/debian/liblwres161.install @@ -0,0 +1 @@ +usr/lib/*/liblwres.so.* diff --git a/debian/liblwres161.symbols b/debian/liblwres161.symbols new file mode 100644 index 0000000..553ad4e --- /dev/null +++ b/debian/liblwres161.symbols @@ -0,0 +1,101 @@ +liblwres.so.161 liblwres161 #MINVER# + lwres__print_snprintf@Base 1:9.10.6+dfsg + lwres__print_sprintf@Base 1:9.10.6+dfsg + lwres__print_vsnprintf@Base 1:9.10.6+dfsg + lwres_addr_parse@Base 1:9.10.6+dfsg + lwres_buffer_add@Base 1:9.10.6+dfsg + lwres_buffer_back@Base 1:9.10.6+dfsg + lwres_buffer_clear@Base 1:9.10.6+dfsg + lwres_buffer_first@Base 1:9.10.6+dfsg + lwres_buffer_forward@Base 1:9.10.6+dfsg + lwres_buffer_getmem@Base 1:9.10.6+dfsg + lwres_buffer_getuint16@Base 1:9.10.6+dfsg + lwres_buffer_getuint32@Base 1:9.10.6+dfsg + lwres_buffer_getuint8@Base 1:9.10.6+dfsg + lwres_buffer_init@Base 1:9.10.6+dfsg + lwres_buffer_invalidate@Base 1:9.10.6+dfsg + lwres_buffer_putmem@Base 1:9.10.6+dfsg + lwres_buffer_putuint16@Base 1:9.10.6+dfsg + lwres_buffer_putuint32@Base 1:9.10.6+dfsg + lwres_buffer_putuint8@Base 1:9.10.6+dfsg + lwres_buffer_subtract@Base 1:9.10.6+dfsg + lwres_conf_clear@Base 1:9.10.6+dfsg + lwres_conf_get@Base 1:9.10.6+dfsg + lwres_conf_init@Base 1:9.10.6+dfsg + lwres_conf_parse@Base 1:9.10.6+dfsg + lwres_conf_print@Base 1:9.10.6+dfsg + lwres_context_allocmem@Base 1:9.10.6+dfsg + lwres_context_create@Base 1:9.10.6+dfsg + lwres_context_destroy@Base 1:9.10.6+dfsg + lwres_context_freemem@Base 1:9.10.6+dfsg + lwres_context_getsocket@Base 1:9.10.6+dfsg + lwres_context_initserial@Base 1:9.10.6+dfsg + lwres_context_nextserial@Base 1:9.10.6+dfsg + lwres_context_recv@Base 1:9.10.6+dfsg + lwres_context_send@Base 1:9.10.6+dfsg + lwres_context_sendrecv@Base 1:9.10.6+dfsg + lwres_data_parse@Base 1:9.10.6+dfsg + lwres_endhostent@Base 1:9.10.6+dfsg + lwres_endhostent_r@Base 1:9.10.6+dfsg + lwres_freeaddrinfo@Base 1:9.10.6+dfsg + lwres_freehostent@Base 1:9.10.6+dfsg + lwres_freerrset@Base 1:9.10.6+dfsg + lwres_gabnrequest_free@Base 1:9.10.6+dfsg + lwres_gabnrequest_parse@Base 1:9.10.6+dfsg + lwres_gabnrequest_render@Base 1:9.10.6+dfsg + lwres_gabnresponse_free@Base 1:9.10.6+dfsg + lwres_gabnresponse_parse@Base 1:9.10.6+dfsg + lwres_gabnresponse_render@Base 1:9.10.6+dfsg + lwres_gai_strerror@Base 1:9.10.6+dfsg + lwres_getaddrinfo@Base 1:9.10.6+dfsg + lwres_getaddrsbyname@Base 1:9.10.6+dfsg + lwres_gethostbyaddr@Base 1:9.10.6+dfsg + lwres_gethostbyaddr_r@Base 1:9.10.6+dfsg + lwres_gethostbyname2@Base 1:9.10.6+dfsg + lwres_gethostbyname@Base 1:9.10.6+dfsg + lwres_gethostbyname_r@Base 1:9.10.6+dfsg + lwres_gethostent@Base 1:9.10.6+dfsg + lwres_gethostent_r@Base 1:9.10.6+dfsg + lwres_getipnodebyaddr@Base 1:9.10.6+dfsg + lwres_getipnodebyname@Base 1:9.10.6+dfsg + lwres_getnamebyaddr@Base 1:9.10.6+dfsg + lwres_getnameinfo@Base 1:9.10.6+dfsg + lwres_getrdatabyname@Base 1:9.10.6+dfsg + lwres_getrrsetbyname@Base 1:9.10.6+dfsg + lwres_gnbarequest_free@Base 1:9.10.6+dfsg + lwres_gnbarequest_parse@Base 1:9.10.6+dfsg + lwres_gnbarequest_render@Base 1:9.10.6+dfsg + lwres_gnbaresponse_free@Base 1:9.10.6+dfsg + lwres_gnbaresponse_parse@Base 1:9.10.6+dfsg + lwres_gnbaresponse_render@Base 1:9.10.6+dfsg + lwres_grbnrequest_free@Base 1:9.10.6+dfsg + lwres_grbnrequest_parse@Base 1:9.10.6+dfsg + lwres_grbnrequest_render@Base 1:9.10.6+dfsg + lwres_grbnresponse_free@Base 1:9.10.6+dfsg + lwres_grbnresponse_parse@Base 1:9.10.6+dfsg + lwres_grbnresponse_render@Base 1:9.10.6+dfsg + lwres_h_errno@Base 1:9.10.6+dfsg + lwres_herror@Base 1:9.10.6+dfsg + lwres_hstrerror@Base 1:9.10.6+dfsg + lwres_libage@Base 1:9.10.6+dfsg + lwres_libinterface@Base 1:9.10.6+dfsg + lwres_librevision@Base 1:9.10.6+dfsg + lwres_lwpacket_parseheader@Base 1:9.10.6+dfsg + lwres_lwpacket_renderheader@Base 1:9.10.6+dfsg + lwres_net_aton@Base 1:9.10.6+dfsg + lwres_net_ntop@Base 1:9.10.6+dfsg + lwres_net_pton@Base 1:9.10.6+dfsg + lwres_nooprequest_free@Base 1:9.10.6+dfsg + lwres_nooprequest_parse@Base 1:9.10.6+dfsg + lwres_nooprequest_render@Base 1:9.10.6+dfsg + lwres_noopresponse_free@Base 1:9.10.6+dfsg + lwres_noopresponse_parse@Base 1:9.10.6+dfsg + lwres_noopresponse_render@Base 1:9.10.6+dfsg + lwres_resolv_conf@Base 1:9.10.6+dfsg + lwres_sethostent@Base 1:9.10.6+dfsg + lwres_sethostent_r@Base 1:9.10.6+dfsg + lwres_string_parse@Base 1:9.10.6+dfsg + lwres_strlcpy@Base 1:9.10.6+dfsg + lwres_strtoul@Base 1:9.10.6+dfsg + lwres_udp_port@Base 1:9.10.6+dfsg + lwres_version@Base 1:9.10.6+dfsg diff --git a/debian/nslookup.1 b/debian/nslookup.1 new file mode 100644 index 0000000..1c68dbe --- /dev/null +++ b/debian/nslookup.1 @@ -0,0 +1,536 @@ +.\" +.\" ++Copyright++ 1985, 1989 +.\" - +.\" Copyright (c) 1985, 1989 +.\" The Regents of the University of California. All rights reserved. +.\" +.\" Redistribution and use in source and binary forms, with or without +.\" modification, are permitted provided that the following conditions +.\" are met: +.\" 1. Redistributions of source code must retain the above copyright +.\" notice, this list of conditions and the following disclaimer. +.\" 2. Redistributions in binary form must reproduce the above copyright +.\" notice, this list of conditions and the following disclaimer in the +.\" documentation and/or other materials provided with the distribution. +.\" 3. All advertising materials mentioning features or use of this software +.\" must display the following acknowledgement: +.\" This product includes software developed by the University of +.\" California, Berkeley and its contributors. +.\" 4. Neither the name of the University nor the names of its contributors +.\" may be used to endorse or promote products derived from this software +.\" without specific prior written permission. +.\" +.\" THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND +.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +.\" ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE +.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL +.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS +.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) +.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY +.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF +.\" SUCH DAMAGE. +.\" - +.\" Portions Copyright (c) 1993 by Digital Equipment Corporation. +.\" +.\" Permission to use, copy, modify, and distribute this software for any +.\" purpose with or without fee is hereby granted, provided that the above +.\" copyright notice and this permission notice appear in all copies, and that +.\" the name of Digital Equipment Corporation not be used in advertising or +.\" publicity pertaining to distribution of the document or software without +.\" specific, written prior permission. +.\" +.\" THE SOFTWARE IS PROVIDED "AS IS" AND DIGITAL EQUIPMENT CORP. DISCLAIMS ALL +.\" WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES +.\" OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL DIGITAL EQUIPMENT +.\" CORPORATION BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL +.\" DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR +.\" PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS +.\" ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS +.\" SOFTWARE. +.\" - +.\" --Copyright-- +.\" +.\" @(#)nslookup.8 5.3 (Berkeley) 6/24/90 +.\" +.Dd June 24, 1990 +.Dt NSLOOKUP 1 +.Os BSD 4 +.Sh NAME +.Nm nslookup +.Nd query Internet name servers interactively +.Sh SYNOPSIS +.Nm nslookup +.Op Fl option Ar ... +.Op Ar host-to-find | Fl Op Ar server +.Sh DESCRIPTION +.Ic Nslookup +is a program to query Internet domain name servers. +.Ic Nslookup +has two modes: interactive and non-interactive. +Interactive mode allows the user to query name servers for +information about various hosts and domains or to print a list of hosts +in a domain. +Non-interactive mode is used to print just the name and requested information +for a host or domain. +.Sh ARGUMENTS +Interactive mode is entered in the following cases: +.Bl -tag -width "a) " +.It a) +when no arguments are given (the default name server will be used), +.It b) +when the first argument is a hyphen (-) and the second argument +is the host name or Internet address of a name server. +.El +.Pp +Non-interactive mode is used when the name or Internet address +of the host to be looked up +is given as the first argument. The optional second argument specifies +the host name or address of a name server. +.Pp +The options listed under the +.Dq Li set +command below can be specified in +the +.Pa .nslookuprc +file in the user's home directory if they are listed +one per line. Options can also be specified +on the command line if they precede the arguments and are prefixed with +a hyphen. For example, to change the default query type to host information, +and the initial timeout to 10 seconds, type: +.Bd -literal -offset indent + nslookup -query=hinfo -timeout=10 +.Ed +.Sh INTERACTIVE COMMANDS +Commands may be interrupted at any time by typing a control-C. +To exit, type a control-D +.Pq Dv EOF +or type +.Li exit . +The command line length must be less than 256 characters. +To treat a built-in command as a host name, +precede it with an escape character +.Pq .&\\ . +.Sy N.B.: An unrecognized command will be interpreted as a host name. +.Bl -tag -width "lserver" +.It Ar host Op Ar server +Look up information for +.Ar host +using the current default server or using +.Ar server , +if specified. +If +.Ar host +is an Internet address and the query type is +.Dv A +or +.Dv PTR , +the name of the host is returned. +If +.Ar host +is a name and does not have a trailing period, the default +domain name is appended to the name. (This behavior depends on the state of the +.Ic set +options +.Ic domain , srchlist , defname , +and +.Ic search . ) +.Pp +To look up a host not in the current domain, append a period to +the name. +.It Ic server Ar domain +.It Ic lserver Ar domain +Change the default server to +.Ar domain ; +.Ic lserver +uses the initial server to look up information about +.Ar domain , +while +.Ic server +uses the current default server. +If an authoritative answer can't be found, the names of servers +that might have the answer are returned. +.It Ic root +Changes the default server to the server for the root of the domain name space. +Currently, the host +.Li ns.internic.net +is used. +(This command is a synonym for +.Dq Ic lserver ns.internic.net . ) +The name of the root server can be changed with the +.Dq Ic set root +command. +.It Xo Ic finger Op Ar name +.Op Ic > Ar filename +.Xc +.It Xo Ic finger Op Ar name +.Op Ic >> Ar filename +.Xc +Connects with the finger server on the current host. +The current host is defined when a previous lookup for a host +was successful and returned address information (see the +.Dq Ic set querytype=A +command). +The +.Ar name +is optional. +.Ic > +and +.Ic >> +can be used to redirect output in the usual manner. +.It Xo Ic ls Op Ar option +.Ar domain Op Ic > Ar filename +.Xc +.It Xo Ic ls Op Ar option +.Ar domain Op Ic >> Ar filename +.Xc +List the information available for +.Ar domain , +optionally creating or appending to +.Ar filename . +The default output contains host names and their Internet addresses. +.Ar Option +can be one of the following: +.Bl -tag -width "-a " +.It Fl t Ar querytype +lists all records of the specified type (see +.Ar querytype +below). +.It Fl a +lists aliases of hosts in the domain; +synonym for +.Dq Fl t Dv CNAME . +.It Fl d +lists all records for the domain; +synonym for +.Dq Fl t Dv ANY . +.It Fl h +lists CPU and operating system information for the domain; +synonym for +.Dq Fl t Dv HINFO . +.It Fl s +lists well-known services of hosts in the domain; +synonym for +.Dq Fl t Dv WKS . +.El +.Pp +When output is directed to a file, hash marks are printed for every +50 records received from the server. +.It Ic view Ar filename +Sorts and lists the output of previous +.Ic ls +command(s) with +.Xr more @CMD_EXT@ . +.It Ic help +.It Ic ? +Prints a brief summary of commands. +.It Ic exit +Exits the program. +.It Xo Ic set Ar keyword +.Ns Op = Ns Ar value +.Xc +This command is used to change state information that affects the lookups. +Valid keywords are: +.Bl -tag -width "class=v" +.It Ic all +Prints the current values of the frequently-used options to +.Ic set . +Information about the current default server and host is also printed. +.It Ic class= Ns Ar value +Change the query class to one of: +.Bl -tag -width "HESIOD " +.It Dv IN +the Internet class +.It Dv CHAOS +the Chaos class +.It Dv HESIOD +the MIT Athena Hesiod class +.It Dv ANY +wildcard (any of the above) +.El +.Pp +The class specifies the protocol group of the information. +.Pp +(Default = +.Dv IN ; +abbreviation = +.Ic cl ) +.It Xo Op Ic no +.Ns Ic debug +.Xc +Turn debugging mode on. A lot more information is printed about the +packet sent to the server and the resulting answer. +.Pp +(Default = +.Ic nodebug ; +abbreviation = +.Xo Op Ic no +.Ns Ic deb ) +.Xc +.It Xo Op Ic no +.Ns Ic d2 +.Xc +Turn exhaustive debugging mode on. +Essentially all fields of every packet are printed. +.Pp +(Default = +.Ic nod2 ) +.It Ic domain= Ns Ar name +Change the default domain name to +.Ar name . +The default domain name is appended to a lookup request depending on the +state of the +.Ic defname +and +.Ic search +options. +The domain search list contains the parents of the default domain if it has +at least two components in its name. +For example, if the default domain +is CC.Berkeley.EDU, the search list is CC.Berkeley.EDU and Berkeley.EDU. +Use the +.Dq Ic set srchlist +command to specify a different list. +Use the +.Dq Ic set all +command to display the list. +.Pp +(Default = value from +.Xr hostname @CMD_EXT@ , +.Pa /etc/resolv.conf , +or +.Ev LOCALDOMAIN; +abbreviation = +.Ic do ) +.It Ic srchlist= Ns Ar name1/name2/... +Change the default domain name to +.Ar name1 +and the domain search list +to +.Ar name1 , name2 , +etc. A maximum of 6 names separated by slashes (/) +can be specified. +For example, +.Bd -literal -offset indent +set srchlist=lcs.MIT.EDU/ai.MIT.EDU/MIT.EDU +.Ed +.Pp +sets the domain to lcs.MIT.EDU and the search list to the three names. +This command overrides the +default domain name and search list of the +.Dq Ic set domain +command. +Use the +.Dq Ic set all +command to display the list. +.Pp +(Default = value based on +.Xr hostname @CMD_EXT@ , +.Pa /etc/resolv.conf , +or +.Ev LOCALDOMAIN; +abbreviation = +.Ic srchl ) +.It Xo Op Ic no +.Ns Ic defname +.Xc +If set, append the default domain name to a single-component lookup request +(i.e., one that does not contain a period). +.Pp +(Default = +.Ic defname ; +abbreviation = +.Xo Op Ic no +.Ns Ic defname ) +.Xc +.It Xo Op Ic no +.Ns Ic search +.Xc +If the lookup request contains at least one period but +.Em doesn't +end with a trailing period, append the domain names in the domain search list +to the request until an answer is received. +.Pp +(Default = +.Ic search ; +abbreviation = +.Xo Op Ic no +.Ns Ic sea ) +.Xc +.It Ic port= Ns Ar value +Change the default TCP/UDP name server port to +.Ar value . +.Pp +(Default = 53; +abbreviation = +.Ic \&po ) +.It Ic querytype= Ns Ar value +.It Ic type= Ns Ar value +Change the type of information query to one of: +.Bl -tag -width "HINFO " +.It Dv A +the host's Internet address. +.It Dv CNAME +the canonical name for an alias. +.It Dv HINFO +the host CPU and operating system type. +.It Dv MINFO +the mailbox or mail list information. +.It Dv MX +the mail exchanger. +.It Dv NS +the name server for the named zone. +.It Dv PTR +the host name if the query is an Internet address; +otherwise, the pointer to other information. +.It Dv SOA +the domain's +.Dq start-of-authority +information. +.It Dv TXT +the text information. +.It Dv UINFO +the user information. +.It Dv WKS +the supported well-known services. +.El +.Pp +Other types +.Pq Dv ANY, AXFR, MB, MD, MF, NULL +are described in the RFC-1035 document. +.Pp +(Default = +.Dv A ; +abbreviations = +.Ic q , ty ) +.It Xo Op Ic no +.Ns Ic recurse +.Xc +Tell the name server to query other servers if it does not have the +information. +.Pp +(Default = +.Ic recurse ; +abbreviation = +.Xo Op Ic no +.Ns Ic rec ) +.Xc +.It Ic retry= Ns Ar number +Set the number of retries to +.Ar number . +When a reply to a request is not received within a certain +amount of time (changed with +.Dq Ic set timeout ) , +the timeout period is doubled and the request is resent. +The retry value controls how many times a request is resent before giving up. +.Pp +(Default = 4, abbreviation = +.Ic ret ) +.It Ic root= Ns Ar host +Change the name of the root server to +.Ar host . +This affects the +.Dq Ic root +command. +.Pp +(Default = +.Ic ns.internic.net. ; +abbreviation = +.Ic ro ) +.It Ic timeout= Ns Ar number +Change the initial timeout interval for waiting for a reply to +.Ar number +seconds. Each retry doubles the timeout period. +.Pp +(Default = 5 seconds; abbreviation = +.Ic ti ) +.It Xo Op Ic no +.Ns Ic vc +.Xc +Always use a virtual circuit when sending requests to the server. +.Pp +(Default = +.Ic novc ; +abbreviation = +.Xo Op Ic no +.Ns Ic v ) +.Xc +.It Xo Op Ic no +.Ns Ic ignoretc +.Xc +Ignore packet truncation errors. +.Pp +(Default = +.Ic noignoretc ; +abbreviation = +.Xo Op Ic no +.Ns Ic ig ) +.Xc +.El +.El +.Sh DIAGNOSTICS +If the lookup request was not successful, an error message is printed. +Possible errors are: +.Bl -tag -width "Timed" +.It Li Timed out +The server did not respond to a request after a certain amount of +time (changed with +.Dq Ic set timeout= Ns Ar value ) +and a certain number of retries (changed with +.Dq Ic set retry= Ns Ar value ) . +.It Li \&No response from server +No name server is running on the server machine. +.It Li \&No records +The server does not have resource records of the current query type for the +host, although the host name is valid. +The query type is specified with the +.Dq Ic set querytype +command. +.It Li Non-existent domain +The host or domain name does not exist. +.It Li Connection refused +.It Li Network is unreachable +The connection to the name or finger server could not be made +at the current time. +This error commonly occurs with +.Ic ls +and +.Ic finger +requests. +.It Li Server failure +The name server found an internal inconsistency in its database +and could not return a valid answer. +.It Li Refused +The name server refused to service the request. +.It Li Format error +The name server found that the request packet was not in the proper format. +It may indicate an error in +.Nm nslookup . +.El +.Sh FILES +.Bl -tag -width "/usr/share/misc/nslookup.helpXXX" -compact +.It Pa /etc/resolv.conf +initial domain name and name server addresses +.It Pa $HOME/.nslookuprc +user's initial options +.It Pa /usr/share/misc/nslookup.help +summary of commands +.El +.Sh ENVIRONMENT +.Bl -tag -width "HOSTALIASESXXXX" -compact +.It Ev HOSTALIASES +file containing host aliases +.It Ev LOCALDOMAIN +overrides default domain +.El +.Sh SEE ALSO +.Xr @INDOT@named @SYS_OPS_EXT@ , +.Xr resolver @LIB_NETWORK_EXT@ , +.Xr resolver @FORMAT_EXT@ ; +RFC-1034, +.Dq Domain Names - Concepts and Facilities ; +RFC-1035, +.Dq Domain Names - Implementation and Specification . +.Sh AUTHOR +Andrew Cherenson diff --git a/debian/patches/0001-non-linux.diff b/debian/patches/0001-non-linux.diff new file mode 100644 index 0000000..9a5c95f --- /dev/null +++ b/debian/patches/0001-non-linux.diff @@ -0,0 +1,42 @@ +From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org> +Date: Fri, 24 Nov 2017 16:26:53 +0000 +Subject: _non-linux + + FTBFS on kfreebsd, hurd + + Addresses-Debian-Bug: 741285, 746540 + Signed-off-by: LaMont Jones <lamont@debian.org> +--- + configure.in | 5 ++--- + 1 file changed, 2 insertions(+), 3 deletions(-) + +diff --git a/configure.in b/configure.in +index 9aa7e2d..bf028fe 100644 +--- a/configure.in ++++ b/configure.in +@@ -462,7 +462,7 @@ case "$host" in + # as it breaks how the two halves (Basic and Advanced) of the IPv6 + # Socket API were designed to be used but we have to live with it. + # Define _GNU_SOURCE to pull in the IPv6 Advanced Socket API. +- *-linux* | *-kfreebsd*-gnu*) ++ *-linux* | *-kfreebsd*-gnu* | *-gnu*) + STD_CDEFINES="$STD_CDEFINES -D_GNU_SOURCE" + CPPFLAGS="$CPPFLAGS -D_GNU_SOURCE" + ;; +@@ -1327,7 +1327,7 @@ then + # LinuxThreads requires some changes to the way we + # deal with signals. + # +- *-linux*) ++ *-linux*|*-kfreebsd*-gnu) + AC_DEFINE(HAVE_LINUXTHREADS) + ;; + # +@@ -2780,7 +2780,6 @@ case "$host" in + ;; + *) + AC_CHECK_LIB(socket, socket) +- AC_CHECK_LIB(nsl, inet_addr) + ;; + esac + diff --git a/debian/patches/0002-multiarch.diff b/debian/patches/0002-multiarch.diff new file mode 100644 index 0000000..3ba24f4 --- /dev/null +++ b/debian/patches/0002-multiarch.diff @@ -0,0 +1,29 @@ +From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org> +Date: Fri, 24 Nov 2017 16:26:53 +0000 +Subject: _multiarch + +--- + isc-config.sh.in | 3 +-- + 1 file changed, 1 insertion(+), 2 deletions(-) + +diff --git a/isc-config.sh.in b/isc-config.sh.in +index a8a0a89..1e7903e 100644 +--- a/isc-config.sh.in ++++ b/isc-config.sh.in +@@ -13,7 +13,6 @@ prefix=@prefix@ + exec_prefix=@exec_prefix@ + exec_prefix_set= + includedir=@includedir@ +-libdir=@libdir@ + + usage() + { +@@ -132,7 +131,7 @@ if test x"$echo_libs" = x"true"; then + if test x"${exec_prefix_set}" = x"true"; then + libs="-L${exec_prefix}/lib" + else +- libs="-L${libdir}" ++ libs= + fi + if test x"$libirs" = x"true" ; then + libs="$libs -lirs" diff --git a/debian/patches/0003-min-cache-ttl.diff b/debian/patches/0003-min-cache-ttl.diff new file mode 100644 index 0000000..13453fd --- /dev/null +++ b/debian/patches/0003-min-cache-ttl.diff @@ -0,0 +1,254 @@ +From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org> +Date: Fri, 24 Nov 2017 16:26:54 +0000 +Subject: _min-cache-ttl + + Add min-cache-ttl and min-ncache-ttl keywords + + Sometimes it is useful to set a 'floor' on the TTL for records + to be cached. Some sites like to use ridiculously low TTLs for + some reason, and that often is not compatible with slow links. + + Signed-off-by: Michael Milligan <milli@acmeps.com> + Signed-off-by: LaMont Jones <lamont@debian.org> +--- + bin/named/config.c | 2 ++ + bin/named/server.c | 12 ++++++++++++ + bin/tests/named.conf | 2 ++ + lib/dns/include/dns/ncache.h | 6 ++++-- + lib/dns/include/dns/view.h | 2 ++ + lib/dns/ncache.c | 18 ++++++++++++------ + lib/dns/resolver.c | 22 ++++++++++++++++------ + lib/isccfg/namedconf.c | 2 ++ + 8 files changed, 52 insertions(+), 14 deletions(-) + +diff --git a/bin/named/config.c b/bin/named/config.c +index 2732a8f..d22ee4b 100644 +--- a/bin/named/config.c ++++ b/bin/named/config.c +@@ -182,6 +182,8 @@ options {\n\ + max-recursion-depth 7;\n\ + max-recursion-queries 75;\n\ + message-compression yes;\n\ ++ min-ncache-ttl 0; /* 0 hours */\n\ ++ min-cache-ttl 0; /* 0 seconds */\n\ + # min-roots <obsolete>;\n\ + minimal-any false;\n\ + minimal-responses false;\n\ +diff --git a/bin/named/server.c b/bin/named/server.c +index 7f87ccf..149458e 100644 +--- a/bin/named/server.c ++++ b/bin/named/server.c +@@ -3706,6 +3706,18 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewlist, + if (view->maxncachettl > 7 * 24 * 3600) + view->maxncachettl = 7 * 24 * 3600; + ++ obj = NULL; ++ result = ns_config_get(maps, "min-cache-ttl", &obj); ++ INSIST(result == ISC_R_SUCCESS); ++ view->mincachettl = cfg_obj_asuint32(obj); ++ ++ obj = NULL; ++ result = ns_config_get(maps, "min-ncache-ttl", &obj); ++ INSIST(result == ISC_R_SUCCESS); ++ view->minncachettl = cfg_obj_asuint32(obj); ++ if (view->minncachettl > 7 * 24 * 3600) ++ view->minncachettl = 7 * 24 * 3600; ++ + /* + * Configure the view's cache. + * +diff --git a/bin/tests/named.conf b/bin/tests/named.conf +index 5673e98..34435b6 100644 +--- a/bin/tests/named.conf ++++ b/bin/tests/named.conf +@@ -46,6 +46,7 @@ options { + memstatistics-file "named.memstats"; // _PATH_MEMSTATS + + max-cache-ttl 999; ++ min-cache-ttl 666; + auth-nxdomain yes; // always set AA on NXDOMAIN. + // don't set this to 'no' unless + // you know what you're doing -- older +@@ -148,6 +149,7 @@ options { + min-refresh-time 777; + + max-ncache-ttl 333; ++ min-ncache-ttl 222; + min-roots 15; + serial-queries 34; + +diff --git a/lib/dns/include/dns/ncache.h b/lib/dns/include/dns/ncache.h +index 2942c26..c2e1e7b 100644 +--- a/lib/dns/include/dns/ncache.h ++++ b/lib/dns/include/dns/ncache.h +@@ -56,12 +56,14 @@ ISC_LANG_BEGINDECLS + + isc_result_t + dns_ncache_add(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node, +- dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl, ++ dns_rdatatype_t covers, isc_stdtime_t now, ++ dns_ttl_t minttl, dns_ttl_t maxttl, + dns_rdataset_t *addedrdataset); + isc_result_t + dns_ncache_addoptout(dns_message_t *message, dns_db_t *cache, + dns_dbnode_t *node, dns_rdatatype_t covers, +- isc_stdtime_t now, dns_ttl_t maxttl, ++ isc_stdtime_t now, ++ dns_ttl_t minttl, dns_ttl_t maxttl, + bool optout, dns_rdataset_t *addedrdataset); + /*%< + * Convert the authority data from 'message' into a negative cache +diff --git a/lib/dns/include/dns/view.h b/lib/dns/include/dns/view.h +index 8e21298..3b3ecc9 100644 +--- a/lib/dns/include/dns/view.h ++++ b/lib/dns/include/dns/view.h +@@ -153,6 +153,8 @@ struct dns_view { + bool sendcookie; + dns_ttl_t maxcachettl; + dns_ttl_t maxncachettl; ++ dns_ttl_t mincachettl; ++ dns_ttl_t minncachettl; + uint32_t nta_lifetime; + uint32_t nta_recheck; + char *nta_file; +diff --git a/lib/dns/ncache.c b/lib/dns/ncache.c +index c5078de..9cde098 100644 +--- a/lib/dns/ncache.c ++++ b/lib/dns/ncache.c +@@ -45,7 +45,8 @@ + + static isc_result_t + addoptout(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node, +- dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl, ++ dns_rdatatype_t covers, isc_stdtime_t now, ++ dns_ttl_t minttl, dns_ttl_t maxttl, + bool optout, bool secure, + dns_rdataset_t *addedrdataset); + +@@ -95,26 +96,29 @@ copy_rdataset(dns_rdataset_t *rdataset, isc_buffer_t *buffer) { + + isc_result_t + dns_ncache_add(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node, +- dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl, ++ dns_rdatatype_t covers, isc_stdtime_t now, ++ dns_ttl_t minttl, dns_ttl_t maxttl, + dns_rdataset_t *addedrdataset) + { +- return (addoptout(message, cache, node, covers, now, maxttl, ++ return (addoptout(message, cache, node, covers, now, minttl, maxttl, + false, false, addedrdataset)); + } + + isc_result_t + dns_ncache_addoptout(dns_message_t *message, dns_db_t *cache, + dns_dbnode_t *node, dns_rdatatype_t covers, +- isc_stdtime_t now, dns_ttl_t maxttl, ++ isc_stdtime_t now, ++ dns_ttl_t minttl, dns_ttl_t maxttl, + bool optout, dns_rdataset_t *addedrdataset) + { +- return (addoptout(message, cache, node, covers, now, maxttl, ++ return (addoptout(message, cache, node, covers, now, minttl, maxttl, + optout, true, addedrdataset)); + } + + static isc_result_t + addoptout(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node, +- dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl, ++ dns_rdatatype_t covers, isc_stdtime_t now, ++ dns_ttl_t minttl, dns_ttl_t maxttl, + bool optout, bool secure, + dns_rdataset_t *addedrdataset) + { +@@ -181,6 +185,8 @@ addoptout(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node, + type == dns_rdatatype_nsec3) { + if (ttl > rdataset->ttl) + ttl = rdataset->ttl; ++ if (ttl < minttl) ++ ttl = minttl; + if (trust > rdataset->trust) + trust = rdataset->trust; + /* +diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c +index 0abf4de..1d76504 100644 +--- a/lib/dns/resolver.c ++++ b/lib/dns/resolver.c +@@ -564,7 +564,9 @@ static bool fctx_unlink(fetchctx_t *fctx); + static isc_result_t ncache_adderesult(dns_message_t *message, + dns_db_t *cache, dns_dbnode_t *node, + dns_rdatatype_t covers, +- isc_stdtime_t now, dns_ttl_t maxttl, ++ isc_stdtime_t now, ++ dns_ttl_t minttl, ++ dns_ttl_t maxttl, + bool optout, + bool secure, + dns_rdataset_t *ardataset, +@@ -5015,7 +5017,7 @@ validated(isc_task_t *task, isc_event_t *event) { + ttl = 0; + + result = ncache_adderesult(fctx->rmessage, fctx->cache, node, +- covers, now, ttl, vevent->optout, ++ covers, now, fctx->res->view->minncachettl, ttl, vevent->optout, + vevent->secure, ardataset, &eresult); + if (result != ISC_R_SUCCESS) + goto noanswer_response; +@@ -5480,6 +5482,12 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, dns_adbaddrinfo_t *addrinfo, + rdataset->ttl = res->view->maxcachettl; + } + ++ /* ++ * Enforce configured minimum cache TTL. ++ */ ++ if (rdataset->ttl < res->view->mincachettl) ++ rdataset->ttl = res->view->mincachettl; ++ + /* + * Mark the rdataset as being prefetch eligible. + */ +@@ -5868,7 +5876,8 @@ cache_message(fetchctx_t *fctx, dns_adbaddrinfo_t *addrinfo, isc_stdtime_t now) + */ + static isc_result_t + ncache_adderesult(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node, +- dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl, ++ dns_rdatatype_t covers, isc_stdtime_t now, ++ dns_ttl_t minttl, dns_ttl_t maxttl, + bool optout, bool secure, + dns_rdataset_t *ardataset, isc_result_t *eresultp) + { +@@ -5881,10 +5890,10 @@ ncache_adderesult(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node, + } + if (secure) + result = dns_ncache_addoptout(message, cache, node, covers, +- now, maxttl, optout, ardataset); ++ now, minttl, maxttl, optout, ardataset); + else + result = dns_ncache_add(message, cache, node, covers, now, +- maxttl, ardataset); ++ minttl, maxttl, ardataset); + if (result == DNS_R_UNCHANGED || result == ISC_R_SUCCESS) { + /* + * If the cache now contains a negative entry and we +@@ -6059,7 +6068,8 @@ ncache_message(fetchctx_t *fctx, dns_adbaddrinfo_t *addrinfo, + ttl = 0; + + result = ncache_adderesult(fctx->rmessage, fctx->cache, node, +- covers, now, ttl, false, ++ covers, now, ttl, ++ fctx->res->view->minncachettl, false, + false, ardataset, &eresult); + if (result != ISC_R_SUCCESS) + goto unlock; +diff --git a/lib/isccfg/namedconf.c b/lib/isccfg/namedconf.c +index cd797a6..fdaf8ff 100644 +--- a/lib/isccfg/namedconf.c ++++ b/lib/isccfg/namedconf.c +@@ -1780,6 +1780,8 @@ view_clauses[] = { + { "max-recursion-queries", &cfg_type_uint32, 0 }, + { "max-udp-size", &cfg_type_uint32, 0 }, + { "message-compression", &cfg_type_boolean, 0 }, ++ { "min-cache-ttl", &cfg_type_uint32, 0 }, ++ { "min-ncache-ttl", &cfg_type_uint32, 0 }, + { "min-roots", &cfg_type_uint32, CFG_CLAUSEFLAG_NOTIMP }, + { "minimal-any", &cfg_type_boolean, 0 }, + { "minimal-responses", &cfg_type_minimal, 0 }, diff --git a/debian/patches/0004-library_paths.diff b/debian/patches/0004-library_paths.diff new file mode 100644 index 0000000..abc8d66 --- /dev/null +++ b/debian/patches/0004-library_paths.diff @@ -0,0 +1,136 @@ +From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org> +Date: Fri, 24 Nov 2017 16:26:54 +0000 +Subject: _library_paths + + Makefile.in: be explicit about library paths + + Debian policy requires that all dependent libs be in the .so, not just the + immediately depended ones. + + Signed-off-by: LaMont Jones <lamont@debian.org> +--- + lib/dns/Makefile.in | 4 +++- + lib/irs/Makefile.in | 4 +++- + lib/isc/Makefile.in | 3 +++ + lib/isccc/Makefile.in | 4 +++- + lib/isccfg/Makefile.in | 2 +- + 5 files changed, 13 insertions(+), 4 deletions(-) + +diff --git a/lib/dns/Makefile.in b/lib/dns/Makefile.in +index 4a8549e..e0fcca4 100644 +--- a/lib/dns/Makefile.in ++++ b/lib/dns/Makefile.in +@@ -37,7 +37,7 @@ ISCLIBS = ../../lib/isc/libisc.@A@ + + ISCDEPLIBS = ../../lib/isc/libisc.@A@ + +-LIBS = @LIBS@ ++LIBS = @LIBS@ -L../../lib/isc -lcrypto + + # Alphabetically + +@@ -155,6 +155,7 @@ libdns.la: ${OBJS} + ${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libdns.la -rpath ${libdir} \ + -version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \ + ${OBJS} ${ISCLIBS} @DNS_CRYPTO_LIBS@ ${LIBS} ++ ln -sf .libs/libdns.so . + + include: gen + ${MAKE} include/dns/enumtype.h +@@ -206,6 +207,7 @@ clean distclean:: + newrr:: + rm -f code.h include/dns/enumtype.h include/dns/enumclass.h + rm -f include/dns/rdatastruct.h ++ rm -f libdns.so + + rdata.@O@: include + +diff --git a/lib/irs/Makefile.in b/lib/irs/Makefile.in +index fc11447..4bb85b1 100644 +--- a/lib/irs/Makefile.in ++++ b/lib/irs/Makefile.in +@@ -36,7 +36,7 @@ SRCS = context.c \ + gai_strerror.c getaddrinfo.c getnameinfo.c \ + resconf.c + +-LIBS = @LIBS@ ++LIBS = @LIBS@ -L../../lib/isc -L../../lib/dns -L../../lib/isccfg -lcrypto -lisc -ldns -lisccfg + + SUBDIRS = include + TESTDIRS = @UNITTESTS@ +@@ -61,6 +61,7 @@ libirs.la: ${OBJS} version.@O@ + ${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libirs.la -rpath ${libdir} \ + -version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \ + ${OBJS} version.@O@ ${LIBS} ++ ln -sf .libs/libirs.so . + + timestamp: libirs.@A@ + touch timestamp +@@ -78,3 +79,4 @@ uninstall:: + + clean distclean:: + rm -f libirs.@A@ libirs.la timestamp ++ rm -f libdns.so +diff --git a/lib/isc/Makefile.in b/lib/isc/Makefile.in +index ba53ef1..ba3f013 100644 +--- a/lib/isc/Makefile.in ++++ b/lib/isc/Makefile.in +@@ -120,12 +120,14 @@ libisc.la: ${OBJS} ${SYMTBLOBJS} + ${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libisc.la -rpath ${libdir} \ + -version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \ + ${OBJS} ${SYMTBLOBJS} ${LIBS} ++ ln -sf .libs/libisc.so . + + libisc-nosymtbl.la: ${OBJS} + ${LIBTOOL_MODE_LINK} \ + ${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libisc-nosymtbl.la -rpath ${libdir} \ + -version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \ + ${OBJS} ${LIBS} ++ ln -sf .libs/libisc-nosymtbl.so . + + timestamp: libisc.@A@ libisc-nosymtbl.@A@ + touch timestamp +@@ -144,3 +146,4 @@ uninstall:: + clean distclean:: + rm -f libisc.@A@ libisc-nosymtbl.@A@ libisc.la \ + libisc-nosymtbl.la timestamp ++ rm -f libisc.so libisc-nosymtbl.so +diff --git a/lib/isccc/Makefile.in b/lib/isccc/Makefile.in +index ca88e98..8d875bc 100644 +--- a/lib/isccc/Makefile.in ++++ b/lib/isccc/Makefile.in +@@ -31,7 +31,7 @@ ISCCCLIBS = ../../lib/isccc/libisccc.@A@ + ISCDEPLIBS = ../../lib/isc/libisc.@A@ + ISCCCDEPLIBS = libisccc.@A@ + +-LIBS = @LIBS@ ++LIBS = @LIBS@ -L../../lib/isc + + SUBDIRS = include + +@@ -67,6 +67,7 @@ libisccc.la: ${OBJS} + ${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libisccc.la -rpath ${libdir} \ + -version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \ + ${OBJS} ${ISCLIBS} ${LIBS} ++ ln -sf .libs/libisccc.so . + + timestamp: libisccc.@A@ + touch timestamp +@@ -82,3 +83,4 @@ uninstall:: + + clean distclean:: + rm -f libisccc.@A@ timestamp ++ rm -f libisccc.so +diff --git a/lib/isccfg/Makefile.in b/lib/isccfg/Makefile.in +index f459bd5..0c42b2a 100644 +--- a/lib/isccfg/Makefile.in ++++ b/lib/isccfg/Makefile.in +@@ -29,7 +29,7 @@ ISCCFGLIBS = ../../lib/cfg/libisccfg.@A@ + ISCDEPLIBS = ../../lib/isc/libisc.@A@ + ISCCFGDEPLIBS = libisccfg.@A@ + +-LIBS = @LIBS@ ++LIBS = @LIBS@ -L../dns -L../isc -L../isccc + + SUBDIRS = include + TESTDIRS = @UNITTESTS@ diff --git a/debian/patches/0005-resource_missing_include.diff b/debian/patches/0005-resource_missing_include.diff new file mode 100644 index 0000000..cc1fe91 --- /dev/null +++ b/debian/patches/0005-resource_missing_include.diff @@ -0,0 +1,24 @@ +From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org> +Date: Fri, 24 Nov 2017 16:26:54 +0000 +Subject: _resource_missing_include + + lib/isc/unix/resource.c was missing inttypes.h include. + + Addresses-Ubuntu-Bug: 674199 + Signed-off-by: LaMont Jones <lamont@debian.org> +--- + lib/isc/unix/resource.c | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/lib/isc/unix/resource.c b/lib/isc/unix/resource.c +index 6d5c5aa..a4302c6 100644 +--- a/lib/isc/unix/resource.c ++++ b/lib/isc/unix/resource.c +@@ -25,6 +25,7 @@ + #include <isc/util.h> + + #ifdef __linux__ ++#include <inttypes.h> + #include <linux/fs.h> /* To get the large NR_OPEN. */ + #endif + diff --git a/debian/patches/0006-prepare_native_pkcs11.diff b/debian/patches/0006-prepare_native_pkcs11.diff new file mode 100644 index 0000000..9cd63b6 --- /dev/null +++ b/debian/patches/0006-prepare_native_pkcs11.diff @@ -0,0 +1,246 @@ +From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org> +Date: Fri, 24 Nov 2017 16:26:54 +0000 +Subject: _prepare_native_pkcs11 + +--- + bin/Makefile.in | 2 +- + bin/dnssec/Makefile.in | 2 +- + bin/named/Makefile.in | 2 +- + bin/pkcs11/Makefile.in | 6 +++--- + configure.in | 51 +++++++++++++++++++++++++++++++++++--------------- + lib/Makefile.in | 2 +- + make/includes.in | 10 ++++++++++ + 7 files changed, 53 insertions(+), 22 deletions(-) + +diff --git a/bin/Makefile.in b/bin/Makefile.in +index f0c504a..ef6bf5f 100644 +--- a/bin/Makefile.in ++++ b/bin/Makefile.in +@@ -11,7 +11,7 @@ srcdir = @srcdir@ + VPATH = @srcdir@ + top_srcdir = @top_srcdir@ + +-SUBDIRS = named rndc dig delv dnssec tools nsupdate check confgen \ ++SUBDIRS = named named-pkcs11 rndc dig delv dnssec dnssec-pkcs11 tools nsupdate check confgen \ + @NZD_TOOLS@ @PYTHON_TOOLS@ @PKCS11_TOOLS@ tests + TARGETS = + +diff --git a/bin/dnssec/Makefile.in b/bin/dnssec/Makefile.in +index 2239ad1..1ded1fa 100644 +--- a/bin/dnssec/Makefile.in ++++ b/bin/dnssec/Makefile.in +@@ -19,7 +19,7 @@ VERSION=@BIND9_VERSION@ + + CINCLUDES = ${DNS_INCLUDES} ${ISC_INCLUDES} @DST_OPENSSL_INC@ + +-CDEFINES = -DVERSION=\"${VERSION}\" @USE_PKCS11@ @PKCS11_ENGINE@ \ ++CDEFINES = -DVERSION=\"${VERSION}\" \ + @CRYPTO@ -DPK11_LIB_LOCATION=\"@PKCS11_PROVIDER@\" + CWARNINGS = + +diff --git a/bin/named/Makefile.in b/bin/named/Makefile.in +index 1c41397..5e6e84c 100644 +--- a/bin/named/Makefile.in ++++ b/bin/named/Makefile.in +@@ -47,7 +47,7 @@ CINCLUDES = -I${srcdir}/include -I${srcdir}/unix/include -I. \ + ${ISCCFG_INCLUDES} ${ISCCC_INCLUDES} ${ISC_INCLUDES} \ + ${DLZDRIVER_INCLUDES} ${DBDRIVER_INCLUDES} @DST_OPENSSL_INC@ + +-CDEFINES = @CONTRIB_DLZ@ @USE_PKCS11@ @PKCS11_ENGINE@ @CRYPTO@ ++CDEFINES = @CONTRIB_DLZ@ @CRYPTO@ + + CWARNINGS = + +diff --git a/bin/pkcs11/Makefile.in b/bin/pkcs11/Makefile.in +index ae90616..4bc1256 100644 +--- a/bin/pkcs11/Makefile.in ++++ b/bin/pkcs11/Makefile.in +@@ -15,13 +15,13 @@ top_srcdir = @top_srcdir@ + + @BIND9_MAKE_INCLUDES@ + +-CINCLUDES = ${ISC_INCLUDES} ++CINCLUDES = ${ISC_PKCS11_INCLUDES} + + CDEFINES = + +-ISCLIBS = ../../lib/isc/libisc.@A@ @ISC_OPENSSL_LIBS@ ++ISCLIBS = ../../lib/isc-pkcs11/libisc-pkcs11.@A@ @ISC_OPENSSL_LIBS@ + +-ISCDEPLIBS = ../../lib/isc/libisc.@A@ ++ISCDEPLIBS = ../../lib/isc-pkcs11/libisc-pkcs11.@A@ + + DEPLIBS = ${ISCDEPLIBS} + +diff --git a/configure.in b/configure.in +index bf028fe..f8603b8 100644 +--- a/configure.in ++++ b/configure.in +@@ -1109,12 +1109,14 @@ AC_SUBST(USE_GSSAPI) + AC_SUBST(DST_GSSAPI_INC) + AC_SUBST(DNS_GSSAPI_LIBS) + DNS_CRYPTO_LIBS="$DNS_GSSAPI_LIBS $DNS_CRYPTO_LIBS" ++DNS_CRYPTO_PK11_LIBS="$DNS_GSSAPI_LIBS $DNS_CRYPTO_PK11_LIBS" + + # + # Applications linking with libdns also need to link with these libraries. + # + + AC_SUBST(DNS_CRYPTO_LIBS) ++AC_SUBST(DNS_CRYPTO_PK11_LIBS) + + # + # was --with-randomdev specified? +@@ -1499,11 +1501,6 @@ fi + AC_MSG_CHECKING(for OpenSSL library) + OPENSSL_WARNING= + openssldirs="/usr /usr/local /usr/local/ssl /usr/pkg /usr/sfw" +-if test "yes" = "$want_native_pkcs11" +-then +- use_openssl="native_pkcs11" +- AC_MSG_RESULT(use of native PKCS11 instead) +-fi + + if test "auto" = "$use_openssl" + then +@@ -1516,6 +1513,7 @@ then + fi + done + fi ++CRYPTO_PK11="" + OPENSSL_ECDSA="" + OPENSSL_GOST="" + OPENSSL_ED25519="" +@@ -1537,11 +1535,10 @@ case "$with_gost" in + ;; + esac + +-case "$use_openssl" in +- native_pkcs11) +- AC_MSG_RESULT(disabled because of native PKCS11) ++if test "$want_native_pkcs11" = "yes" ++then + DST_OPENSSL_INC="" +- CRYPTO="-DPKCS11CRYPTO" ++ CRYPTO_PK11="-DPKCS11CRYPTO" + OPENSSLECDSALINKOBJS="" + OPENSSLECDSALINKSRCS="" + OPENSSLEDDSALINKOBJS="" +@@ -1550,7 +1547,9 @@ case "$use_openssl" in + OPENSSLGOSTLINKSRCS="" + OPENSSLLINKOBJS="" + OPENSSLLINKSRCS="" +- ;; ++fi ++ ++case "$use_openssl" in + no) + AC_MSG_RESULT(no) + DST_OPENSSL_INC="" +@@ -1580,11 +1579,6 @@ case "$use_openssl" in + If you don't want OpenSSL, use --without-openssl]) + ;; + *) +- if test "yes" = "$want_native_pkcs11" +- then +- AC_MSG_RESULT() +- AC_MSG_ERROR([OpenSSL and native PKCS11 cannot be used together.]) +- fi + if test "yes" = "$use_openssl" + then + # User did not specify a path - guess it +@@ -2007,6 +2001,7 @@ AC_SUBST(OPENSSL_ED25519) + AC_SUBST(OPENSSL_GOST) + + DNS_CRYPTO_LIBS="$DNS_CRYPTO_LIBS $DST_OPENSSL_LIBS" ++DNS_CRYPTO_PK11_LIBS="$DNS_CRYPTO_LIBS" + + ISC_PLATFORM_WANTAES="#undef ISC_PLATFORM_WANTAES" + if test "yes" = "$with_aes" +@@ -2326,6 +2321,7 @@ esac + AC_SUBST(PKCS11LINKOBJS) + AC_SUBST(PKCS11LINKSRCS) + AC_SUBST(CRYPTO) ++AC_SUBST(CRYPTO_PK11) + AC_SUBST(PKCS11_ECDSA) + AC_SUBST(PKCS11_GOST) + AC_SUBST(PKCS11_ED25519) +@@ -5331,8 +5327,11 @@ AC_CONFIG_FILES([ + bin/delv/Makefile + bin/dig/Makefile + bin/dnssec/Makefile ++ bin/dnssec-pkcs11/Makefile + bin/named/Makefile + bin/named/unix/Makefile ++ bin/named-pkcs11/Makefile ++ bin/named-pkcs11/unix/Makefile + bin/nsupdate/Makefile + bin/pkcs11/Makefile + bin/python/Makefile +@@ -5406,6 +5405,10 @@ AC_CONFIG_FILES([ + lib/dns/include/dns/Makefile + lib/dns/include/dst/Makefile + lib/dns/tests/Makefile ++ lib/dns-pkcs11/Makefile ++ lib/dns-pkcs11/include/Makefile ++ lib/dns-pkcs11/include/dns/Makefile ++ lib/dns-pkcs11/include/dst/Makefile + lib/irs/Makefile + lib/irs/include/Makefile + lib/irs/include/irs/Makefile +@@ -5430,6 +5433,24 @@ AC_CONFIG_FILES([ + lib/isc/unix/include/Makefile + lib/isc/unix/include/isc/Makefile + lib/isc/unix/include/pkcs11/Makefile ++ lib/isc-pkcs11/$arch/Makefile ++ lib/isc-pkcs11/$arch/include/Makefile ++ lib/isc-pkcs11/$arch/include/isc/Makefile ++ lib/isc-pkcs11/$thread_dir/Makefile ++ lib/isc-pkcs11/$thread_dir/include/Makefile ++ lib/isc-pkcs11/$thread_dir/include/isc/Makefile ++ lib/isc-pkcs11/Makefile ++ lib/isc-pkcs11/include/Makefile ++ lib/isc-pkcs11/include/isc/Makefile ++ lib/isc-pkcs11/include/isc/platform.h ++ lib/isc-pkcs11/include/pk11/Makefile ++ lib/isc-pkcs11/include/pkcs11/Makefile ++ lib/isc-pkcs11/tests/Makefile ++ lib/isc-pkcs11/nls/Makefile ++ lib/isc-pkcs11/unix/Makefile ++ lib/isc-pkcs11/unix/include/Makefile ++ lib/isc-pkcs11/unix/include/isc/Makefile ++ lib/isc-pkcs11/unix/include/pkcs11/Makefile + lib/isccc/Makefile + lib/isccc/include/Makefile + lib/isccc/include/isccc/Makefile +diff --git a/lib/Makefile.in b/lib/Makefile.in +index 81270a0..bcb5312 100644 +--- a/lib/Makefile.in ++++ b/lib/Makefile.in +@@ -15,7 +15,7 @@ top_srcdir = @top_srcdir@ + # Attempt to disable parallel processing. + .NOTPARALLEL: + .NO_PARALLEL: +-SUBDIRS = isc isccc dns isccfg bind9 lwres irs samples ++SUBDIRS = isc isc-pkcs11 isccc dns dns-pkcs11 isccfg bind9 lwres irs samples + TARGETS = + + @BIND9_MAKE_RULES@ +diff --git a/make/includes.in b/make/includes.in +index fa86ad1..3cfbe9f 100644 +--- a/make/includes.in ++++ b/make/includes.in +@@ -43,3 +43,13 @@ BIND9_INCLUDES = @BIND9_BIND9_BUILDINCLUDE@ \ + + TEST_INCLUDES = \ + -I${top_srcdir}/lib/tests/include ++ ++ISC_PKCS11_INCLUDES = @BIND9_ISC_BUILDINCLUDE@ \ ++ -I${top_srcdir}/lib/isc-pkcs11 \ ++ -I${top_srcdir}/lib/isc-pkcs11/include \ ++ -I${top_srcdir}/lib/isc-pkcs11/unix/include \ ++ -I${top_srcdir}/lib/isc-pkcs11/@ISC_THREAD_DIR@/include \ ++ -I${top_srcdir}/lib/isc-pkcs11/@ISC_ARCH_DIR@/include ++ ++DNS_PKCS11_INCLUDES = @BIND9_DNS_BUILDINCLUDE@ \ ++ -I${top_srcdir}/lib/dns-pkcs11/include diff --git a/debian/patches/0007-ctxstart_no_sighandling.diff b/debian/patches/0007-ctxstart_no_sighandling.diff new file mode 100644 index 0000000..9304fea --- /dev/null +++ b/debian/patches/0007-ctxstart_no_sighandling.diff @@ -0,0 +1,22 @@ +From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org> +Date: Fri, 24 Nov 2017 16:26:54 +0000 +Subject: _ctxstart_no_sighandling + +--- + lib/isc/unix/app.c | 3 +++ + 1 file changed, 3 insertions(+) + +diff --git a/lib/isc/unix/app.c b/lib/isc/unix/app.c +index 7e5a0ee..8574141 100644 +--- a/lib/isc/unix/app.c ++++ b/lib/isc/unix/app.c +@@ -262,6 +262,9 @@ isc__app_ctxstart(isc_appctx_t *ctx0) { + ctx->want_reload = false; + ctx->blocked = false; + ++ if (!isc_bind9) ++ return (ISC_R_SUCCESS); ++ + #ifndef HAVE_SIGWAIT + /* + * Install do-nothing handlers for SIGINT and SIGTERM. diff --git a/debian/patches/0008-reproducible_build.diff b/debian/patches/0008-reproducible_build.diff new file mode 100644 index 0000000..94d8b58 --- /dev/null +++ b/debian/patches/0008-reproducible_build.diff @@ -0,0 +1,68 @@ +From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org> +Date: Fri, 24 Nov 2017 16:26:54 +0000 +Subject: _reproducible_build + +--- + lib/dns/gen.c | 35 +++++++++++++++++++++++++++++++++-- + 1 file changed, 33 insertions(+), 2 deletions(-) + +diff --git a/lib/dns/gen.c b/lib/dns/gen.c +index 2a3b94b..b26a509 100644 +--- a/lib/dns/gen.c ++++ b/lib/dns/gen.c +@@ -32,6 +32,8 @@ + #include <stdlib.h> + #include <string.h> + #include <time.h> ++#include <errno.h> ++#include <limits.h> + + #ifdef WIN32 + #include "gen-win32.h" +@@ -528,6 +530,9 @@ main(int argc, char **argv) { + char *prefix = NULL; + char *suffix = NULL; + char *file = NULL; ++ char *source_date_epoch; ++ unsigned long long epoch; ++ char *endptr; + isc_dir_t dir; + + for (i = 0; i < TYPENAMES; i++) +@@ -618,8 +623,34 @@ main(int argc, char **argv) { + INSIST(n > 0 && (unsigned)n < sizeof(srcdir)); + sd(0, "", buf, filetype); + +- if (time(&now) != -1) { +- if ((tm = localtime(&now)) != NULL && tm->tm_year > 104) { ++ source_date_epoch = getenv("SOURCE_DATE_EPOCH"); ++ if (source_date_epoch) { ++ errno = 0; ++ epoch = strtoull(source_date_epoch, &endptr, 10); ++ if ((errno == ERANGE && (epoch == ULLONG_MAX || epoch == 0)) ++ || (errno != 0 && epoch == 0)) { ++ fprintf(stderr, "Environment variable $SOURCE_DATE_EPOCH: strtoull: %s\n", strerror(errno)); ++ exit(EXIT_FAILURE); ++ } ++ if (endptr == source_date_epoch) { ++ fprintf(stderr, "Environment variable $SOURCE_DATE_EPOCH: No digits were found: %s\n", endptr); ++ exit(EXIT_FAILURE); ++ } ++ if (*endptr != '\0') { ++ fprintf(stderr, "Environment variable $SOURCE_DATE_EPOCH: Trailing garbage: %s\n", endptr); ++ exit(EXIT_FAILURE); ++ } ++ if (epoch > ULONG_MAX) { ++ fprintf(stderr, "Environment variable $SOURCE_DATE_EPOCH: value must be smaller than or equal to: %lu but was found to be: %llu \n", ULONG_MAX, epoch); ++ exit(EXIT_FAILURE); ++ } ++ now = epoch; ++ } else { ++ time(&now); ++ } ++ ++ if (now != -1) { ++ if ((tm = gmtime(&now)) != NULL && tm->tm_year > 104) { + n = snprintf(year, sizeof(year), "-%d", + tm->tm_year + 1900); + INSIST(n > 0 && (unsigned)n < sizeof(year)); diff --git a/debian/patches/0009-Add_--install-layout=deb_to_setup.py_call.patch b/debian/patches/0009-Add_--install-layout=deb_to_setup.py_call.patch new file mode 100644 index 0000000..d64e51d --- /dev/null +++ b/debian/patches/0009-Add_--install-layout=deb_to_setup.py_call.patch @@ -0,0 +1,24 @@ +From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org> +Date: Fri, 24 Nov 2017 16:26:55 +0000 +Subject: Add_--install-layout=deb_to_setup.py_call + +--- + bin/python/Makefile.in | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/bin/python/Makefile.in b/bin/python/Makefile.in +index aa678d4..a58d72f 100644 +--- a/bin/python/Makefile.in ++++ b/bin/python/Makefile.in +@@ -56,9 +56,9 @@ install:: ${TARGETS} installdirs + ${INSTALL_DATA} ${srcdir}/dnssec-keymgr.8 ${DESTDIR}${mandir}/man8 + if test -n "${PYTHON}" ; then \ + if test -n "${DESTDIR}" ; then \ +- ${PYTHON} ${srcdir}/setup.py install --root=${DESTDIR} --prefix=${prefix} @PYTHON_INSTALL_LIB@ ; \ ++ ${PYTHON} ${srcdir}/setup.py install --root=${DESTDIR} --prefix=${prefix} --install-layout=deb @PYTHON_INSTALL_LIB@ ; \ + else \ +- ${PYTHON} ${srcdir}/setup.py install --prefix=${prefix} @PYTHON_INSTALL_LIB@ ; \ ++ ${PYTHON} ${srcdir}/setup.py install --prefix=${prefix} --install-layout=deb @PYTHON_INSTALL_LIB@ ; \ + fi ; \ + rm -rf build ; \ + fi diff --git a/debian/patches/0010-skip-rtld-deepbind-for-dyndb.diff b/debian/patches/0010-skip-rtld-deepbind-for-dyndb.diff new file mode 100644 index 0000000..4455d46 --- /dev/null +++ b/debian/patches/0010-skip-rtld-deepbind-for-dyndb.diff @@ -0,0 +1,24 @@ +From: BIND 9 Package <bind9@package.debian.org> +Date: Fri, 31 Aug 2018 08:42:51 +0000 +Subject: skip-rtld-deepbind-for-dyndb + +https://bugzilla.redhat.com/show_bug.cgi?id=1410433 +https://bugs.launchpad.net/bugs/1769440 +--- + lib/dns/dyndb.c | 3 --- + 1 file changed, 3 deletions(-) + +diff --git a/lib/dns/dyndb.c b/lib/dns/dyndb.c +index 93ad795..11ba0f5 100644 +--- a/lib/dns/dyndb.c ++++ b/lib/dns/dyndb.c +@@ -133,9 +133,6 @@ load_library(isc_mem_t *mctx, const char *filename, const char *instname, + instname, filename); + + flags = RTLD_NOW|RTLD_LOCAL; +-#ifdef RTLD_DEEPBIND +- flags |= RTLD_DEEPBIND; +-#endif + + handle = dlopen(filename, flags); + if (handle == NULL) diff --git a/debian/patches/0011-keymgr-dont-immediately-delete.diff b/debian/patches/0011-keymgr-dont-immediately-delete.diff new file mode 100644 index 0000000..e0a9cb8 --- /dev/null +++ b/debian/patches/0011-keymgr-dont-immediately-delete.diff @@ -0,0 +1,236 @@ +From: Debian DNS Team <team+dns@tracker.debian.org> +Date: Wed, 20 Nov 2019 22:17:10 +0100 +Subject: keymgr-dont-immediately-delete + +--- + bin/python/isc/keyseries.py.in | 28 ++++++++++++++++++-- + bin/tests/system/keymgr/19-old-keys/README | 7 +++++ + bin/tests/system/keymgr/19-old-keys/expect | 12 +++++++++ + bin/tests/system/keymgr/19-old-keys/extra.sh | 19 ++++++++++++++ + bin/tests/system/keymgr/19-old-keys/policy.conf | 18 +++++++++++++ + bin/tests/system/keymgr/clean.sh | 2 ++ + bin/tests/system/keymgr/setup.sh | 10 ++++++++ + bin/tests/system/keymgr/tests.sh | 34 +++++++++++++++---------- + 8 files changed, 114 insertions(+), 16 deletions(-) + create mode 100644 bin/tests/system/keymgr/19-old-keys/README + create mode 100644 bin/tests/system/keymgr/19-old-keys/expect + create mode 100644 bin/tests/system/keymgr/19-old-keys/extra.sh + create mode 100644 bin/tests/system/keymgr/19-old-keys/policy.conf + +diff --git a/bin/python/isc/keyseries.py.in b/bin/python/isc/keyseries.py.in +index e1241f0..74ccc64 100644 +--- a/bin/python/isc/keyseries.py.in ++++ b/bin/python/isc/keyseries.py.in +@@ -77,15 +77,39 @@ class keyseries: + a = key.activate() + if not p or p > now: + key.setpublish(now) ++ p = now + if not a or a > now: + key.setactivate(now) ++ a = now + ++ i = key.inactive() + if not rp: + key.setinactive(None, **kwargs) + key.setdelete(None, **kwargs) ++ elif not i or a + rp != i: ++ if not i and a + rp > now + prepub: ++ key.setinactive(a + rp, **kwargs) ++ key.setdelete(a + rp + postpub, **kwargs) ++ elif not i: ++ key.setinactive(now + prepub, **kwargs) ++ key.setdelete(now + prepub + postpub, **kwargs) ++ elif a + rp > i: ++ key.setinactive(a + rp, **kwargs) ++ key.setdelete(a + rp + postpub, **kwargs) ++ elif a + rp > now + prepub: ++ key.setinactive(a + rp, **kwargs) ++ key.setdelete(a + rp + postpub, **kwargs) ++ else: ++ key.setinactive(now + prepub, **kwargs) ++ key.setdelete(now + prepub + postpub, **kwargs) + else: +- key.setinactive(a + rp, **kwargs) +- key.setdelete(a + rp + postpub, **kwargs) ++ d = key.delete() ++ if not d or i + postpub > now: ++ key.setdelete(i + postpub, **kwargs) ++ elif not d: ++ key.setdelete(now + postpub, **kwargs) ++ elif d < i + postpub: ++ key.setdelete(i + postpub, **kwargs) + + if policy.keyttl != key.ttl: + key.setttl(policy.keyttl) +diff --git a/bin/tests/system/keymgr/19-old-keys/README b/bin/tests/system/keymgr/19-old-keys/README +new file mode 100644 +index 0000000..424b70c +--- /dev/null ++++ b/bin/tests/system/keymgr/19-old-keys/README +@@ -0,0 +1,7 @@ ++Copyright (C) Internet Systems Consortium, Inc. ("ISC") ++ ++See COPYRIGHT in the source root or http://isc.org/copyright.html for terms. ++ ++This directory has a key set which is valid, but which was published ++and activated more than one rollover period ago. dnssec-keymgr should ++not mark the keys as already being inactive and deleted. +diff --git a/bin/tests/system/keymgr/19-old-keys/expect b/bin/tests/system/keymgr/19-old-keys/expect +new file mode 100644 +index 0000000..f3e49b3 +--- /dev/null ++++ b/bin/tests/system/keymgr/19-old-keys/expect +@@ -0,0 +1,12 @@ ++kargs="-c policy.conf example.com" ++kmatch="" ++kret=0 ++cargs="-d 1w -m 2w example.com" ++cmatch="4,Publish ++4,Activate ++2,Inactive ++2,Delete" ++cret=0 ++warn=0 ++error=0 ++ok=2 +diff --git a/bin/tests/system/keymgr/19-old-keys/extra.sh b/bin/tests/system/keymgr/19-old-keys/extra.sh +new file mode 100644 +index 0000000..8da6aa1 +--- /dev/null ++++ b/bin/tests/system/keymgr/19-old-keys/extra.sh +@@ -0,0 +1,19 @@ ++# Copyright (C) Internet Systems Consortium, Inc. ("ISC") ++# ++# This Source Code Form is subject to the terms of the Mozilla Public ++# License, v. 2.0. If a copy of the MPL was not distributed with this ++# file, You can obtain one at http://mozilla.org/MPL/2.0/. ++# ++# See the COPYRIGHT file distributed with this work for additional ++# information regarding copyright ownership. ++ ++now=`$PERL -e 'print time()."\n";'` ++for keyfile in K*.key; do ++ inactive=`$SETTIME -upI $keyfile | awk '{print $2}'` ++ if [ "$inactive" = UNSET ]; then ++ continue ++ elif [ "$inactive" -lt "$now" ]; then ++ echo_d "inactive date is in the past" ++ ret=1 ++ fi ++done +diff --git a/bin/tests/system/keymgr/19-old-keys/policy.conf b/bin/tests/system/keymgr/19-old-keys/policy.conf +new file mode 100644 +index 0000000..91817ff +--- /dev/null ++++ b/bin/tests/system/keymgr/19-old-keys/policy.conf +@@ -0,0 +1,18 @@ ++/* ++ * Copyright (C) Internet Systems Consortium, Inc. ("ISC") ++ * ++ * This Source Code Form is subject to the terms of the Mozilla Public ++ * License, v. 2.0. If a copy of the MPL was not distributed with this ++ * file, You can obtain one at http://mozilla.org/MPL/2.0/. ++ * ++ * See the COPYRIGHT file distributed with this work for additional ++ * information regarding copyright ownership. ++ */ ++ ++policy default { ++ policy global; ++ algorithm nsec3rsasha1; ++ pre-publish zsk 2w; ++ roll-period zsk 6mo; ++ coverage 364d; ++}; +diff --git a/bin/tests/system/keymgr/clean.sh b/bin/tests/system/keymgr/clean.sh +index dc9f0a0..3b9b1a2 100644 +--- a/bin/tests/system/keymgr/clean.sh ++++ b/bin/tests/system/keymgr/clean.sh +@@ -11,5 +11,7 @@ + + rm -f */K*.key + rm -f */K*.private ++rm -f Kexample.com.*.key ++rm -f Kexample.com.*.private + rm -f coverage.* keymgr.* + rm -f policy.out +diff --git a/bin/tests/system/keymgr/setup.sh b/bin/tests/system/keymgr/setup.sh +index 24e6c7c..ea6e566 100644 +--- a/bin/tests/system/keymgr/setup.sh ++++ b/bin/tests/system/keymgr/setup.sh +@@ -214,3 +214,13 @@ rm -f $dir/K*.private + ksk1=`$KEYGEN -K $dir -3fk example.com` + zsk1=`$KEYGEN -K $dir -3 example.com` + $SETTIME -K $dir -I now+2mo -D now+3mo $zsk1 > /dev/null ++ ++# Test 19: Key has been published/active a long time ++dir=19-old-keys ++echo_i "set up $dir" ++rm -f $dir/K*.key ++rm -f $dir/K*.private ++ksk1=`$KEYGEN -K $dir -a rsasha1 -3fk example.com` ++zsk1=`$KEYGEN -K $dir -a rsasha1 -3 example.com` ++$SETTIME -K $dir -P now-2y -A now-2y $ksk1 > /dev/null ++$SETTIME -K $dir -P now-2y -A now-2y $zsk1 > /dev/null +diff --git a/bin/tests/system/keymgr/tests.sh b/bin/tests/system/keymgr/tests.sh +index 88b43d9..89fedd3 100644 +--- a/bin/tests/system/keymgr/tests.sh ++++ b/bin/tests/system/keymgr/tests.sh +@@ -16,13 +16,19 @@ status=0 + n=1 + + matchall () { ++ match_result=ok + file=$1 +- echo "$2" | while read matchline; do +- grep "$matchline" $file > /dev/null 2>&1 || { +- echo "FAIL" +- return ++ while IFS="," read expect matchline; do ++ [ -z "$matchline" ] && continue ++ matches=`grep "$matchline" $file | wc -l` ++ [ "$matches" -ne "$expect" ] && { ++ echo "'$matchline': expected $expect found $matches" ++ return 1 + } +- done ++ done << EOF ++ $2 ++EOF ++ return 0 + } + + echo_i "checking for DNSSEC key coverage issues" +@@ -51,11 +57,8 @@ for dir in [0-9][0-9]-*; do + ret=1 + fi + +- found=`matchall keymgr.$n "$kmatch"` +- if [ "$found" = "FAIL" ]; then +- echo "no match on '$kmatch'" +- ret=1 +- fi ++ # check for matches in keymgr output ++ matchall keymgr.$n "$kmatch" || ret=1 + + # now check coverage + $COVERAGE -K $dir $cargs > coverage.$n 2>&1 +@@ -87,10 +90,13 @@ for dir in [0-9][0-9]-*; do + ret=1 + fi + +- found=`matchall coverage.$n "$cmatch"` +- if [ "$found" = "FAIL" ]; then +- echo "no match on '$cmatch'" +- ret=1 ++ # check for matches in coverage output ++ matchall coverage.$n "$cmatch" || ret=1 ++ ++ if [ -f $dir/extra.sh ]; then ++ cd $dir ++ . ./extra.sh ++ cd .. + fi + + n=`expr $n + 1` diff --git a/debian/patches/0012-CVE-2018-5743-Limiting-simultaneous-TCP-clients-is-i.patch b/debian/patches/0012-CVE-2018-5743-Limiting-simultaneous-TCP-clients-is-i.patch new file mode 100644 index 0000000..b451238 --- /dev/null +++ b/debian/patches/0012-CVE-2018-5743-Limiting-simultaneous-TCP-clients-is-i.patch @@ -0,0 +1,912 @@ +From: =?utf-8?q?Witold_Kr=C4=99cicki?= <wpk@isc.org> +Date: Thu, 3 Jan 2019 14:17:43 +0100 +Subject: [CVE-2018-5743]: Limiting simultaneous TCP clients is ineffective + +--- + bin/named/client.c | 427 ++++++++++++++++++++++++++------- + bin/named/include/named/client.h | 23 +- + bin/named/include/named/interfacemgr.h | 13 +- + bin/named/interfacemgr.c | 9 +- + doc/arm/Bv9ARM-book.xml | 3 +- + lib/isc/include/isc/quota.h | 7 + + lib/isc/quota.c | 33 ++- + lib/isc/win32/libisc.def.in | 1 + + 8 files changed, 396 insertions(+), 120 deletions(-) + +diff --git a/bin/named/client.c b/bin/named/client.c +index 4d26eff..020603d 100644 +--- a/bin/named/client.c ++++ b/bin/named/client.c +@@ -246,10 +246,11 @@ static void ns_client_dumpmessage(ns_client_t *client, const char *reason); + static isc_result_t get_client(ns_clientmgr_t *manager, ns_interface_t *ifp, + dns_dispatch_t *disp, bool tcp); + static isc_result_t get_worker(ns_clientmgr_t *manager, ns_interface_t *ifp, +- isc_socket_t *sock); ++ isc_socket_t *sock, ns_client_t *oldclient); + static inline bool +-allowed(isc_netaddr_t *addr, dns_name_t *signer, isc_netaddr_t *ecs_addr, +- uint8_t ecs_addrlen, uint8_t *ecs_scope, dns_acl_t *acl); ++allowed(isc_netaddr_t *addr, dns_name_t *signer, ++ isc_netaddr_t *ecs_addr, uint8_t ecs_addrlen, ++ uint8_t *ecs_scope, dns_acl_t *acl); + static void compute_cookie(ns_client_t *client, uint32_t when, + uint32_t nonce, const unsigned char *secret, + isc_buffer_t *buf); +@@ -298,6 +299,119 @@ ns_client_settimeout(ns_client_t *client, unsigned int seconds) { + } + } + ++/*% ++ * Allocate a reference-counted object that will maintain a single pointer to ++ * the (also reference-counted) TCP client quota, shared between all the ++ * clients processing queries on a single TCP connection, so that all ++ * clients sharing the one socket will together consume only one slot in ++ * the 'tcp-clients' quota. ++ */ ++static isc_result_t ++tcpconn_init(ns_client_t *client, bool force) { ++ isc_result_t result; ++ isc_quota_t *quota = NULL; ++ ns_tcpconn_t *tconn = NULL; ++ ++ REQUIRE(client->tcpconn == NULL); ++ ++ /* ++ * Try to attach to the quota first, so we won't pointlessly ++ * allocate memory for a tcpconn object if we can't get one. ++ */ ++ if (force) { ++ result = isc_quota_force(&ns_g_server->tcpquota, "a); ++ } else { ++ result = isc_quota_attach(&ns_g_server->tcpquota, "a); ++ } ++ if (result != ISC_R_SUCCESS) { ++ return (result); ++ } ++ ++ /* ++ * A global memory context is used for the allocation as different ++ * client structures may have different memory contexts assigned and a ++ * reference counter allocated here might need to be freed by a ++ * different client. The performance impact caused by memory context ++ * contention here is expected to be negligible, given that this code ++ * is only executed for TCP connections. ++ */ ++ tconn = isc_mem_allocate(ns_g_mctx, sizeof(*tconn)); ++ ++ isc_refcount_init(&tconn->refs, 1); ++ tconn->tcpquota = quota; ++ quota = NULL; ++ tconn->pipelined = false; ++ ++ client->tcpconn = tconn; ++ ++ return (ISC_R_SUCCESS); ++} ++ ++/*% ++ * Increase the count of client structures sharing the TCP connection ++ * that 'source' is associated with; add a pointer to the same tcpconn ++ * to 'target', thus associating it with the same TCP connection. ++ */ ++static void ++tcpconn_attach(ns_client_t *source, ns_client_t *target) { ++ int refs; ++ ++ REQUIRE(source->tcpconn != NULL); ++ REQUIRE(target->tcpconn == NULL); ++ REQUIRE(source->tcpconn->pipelined); ++ ++ isc_refcount_increment(&source->tcpconn->refs, &refs); ++ INSIST(refs > 1); ++ target->tcpconn = source->tcpconn; ++} ++ ++/*% ++ * Decrease the count of client structures sharing the TCP connection that ++ * 'client' is associated with. If this is the last client using this TCP ++ * connection, we detach from the TCP quota and free the tcpconn ++ * object. Either way, client->tcpconn is set to NULL. ++ */ ++static void ++tcpconn_detach(ns_client_t *client) { ++ ns_tcpconn_t *tconn = NULL; ++ int refs; ++ ++ REQUIRE(client->tcpconn != NULL); ++ ++ tconn = client->tcpconn; ++ client->tcpconn = NULL; ++ ++ isc_refcount_decrement(&tconn->refs, &refs); ++ if (refs == 0) { ++ isc_quota_detach(&tconn->tcpquota); ++ isc_mem_free(ns_g_mctx, tconn); ++ } ++} ++ ++/*% ++ * Mark a client as active and increment the interface's 'ntcpactive' ++ * counter, as a signal that there is at least one client servicing ++ * TCP queries for the interface. If we reach the TCP client quota at ++ * some point, this will be used to determine whether a quota overrun ++ * should be permitted. ++ * ++ * Marking the client active with the 'tcpactive' flag ensures proper ++ * accounting, by preventing us from incrementing or decrementing ++ * 'ntcpactive' more than once per client. ++ */ ++static void ++mark_tcp_active(ns_client_t *client, bool active) { ++ if (active && !client->tcpactive) { ++ isc_atomic_xadd(&client->interface->ntcpactive, 1); ++ client->tcpactive = active; ++ } else if (!active && client->tcpactive) { ++ uint32_t old = ++ isc_atomic_xadd(&client->interface->ntcpactive, -1); ++ INSIST(old > 0); ++ client->tcpactive = active; ++ } ++} ++ + /*% + * Check for a deactivation or shutdown request and take appropriate + * action. Returns true if either is in progress; in this case +@@ -387,7 +501,8 @@ exit_check(ns_client_t *client) { + INSIST(client->recursionquota == NULL); + + if (NS_CLIENTSTATE_READING == client->newstate) { +- if (!client->pipelined) { ++ INSIST(client->tcpconn != NULL); ++ if (!client->tcpconn->pipelined) { + client_read(client); + client->newstate = NS_CLIENTSTATE_MAX; + return (true); /* We're done. */ +@@ -405,10 +520,13 @@ exit_check(ns_client_t *client) { + */ + INSIST(client->recursionquota == NULL); + INSIST(client->newstate <= NS_CLIENTSTATE_READY); +- if (client->nreads > 0) ++ ++ if (client->nreads > 0) { + dns_tcpmsg_cancelread(&client->tcpmsg); +- if (client->nreads != 0) { +- /* Still waiting for read cancel completion. */ ++ } ++ ++ /* Still waiting for read cancel completion. */ ++ if (client->nreads > 0) { + return (true); + } + +@@ -416,14 +534,49 @@ exit_check(ns_client_t *client) { + dns_tcpmsg_invalidate(&client->tcpmsg); + client->tcpmsg_valid = false; + } ++ ++ /* ++ * Soon the client will be ready to accept a new TCP ++ * connection or UDP request, but we may have enough ++ * clients doing that already. Check whether this client ++ * needs to remain active and allow it go inactive if ++ * not. ++ * ++ * UDP clients always go inactive at this point, but a TCP ++ * client may need to stay active and return to READY ++ * state if no other clients are available to listen ++ * for TCP requests on this interface. ++ * ++ * Regardless, if we're going to FREED state, that means ++ * the system is shutting down and we don't need to ++ * retain clients. ++ */ ++ if (client->mortal && TCP_CLIENT(client) && ++ client->newstate != NS_CLIENTSTATE_FREED && ++ !ns_g_clienttest && ++ isc_atomic_xadd(&client->interface->ntcpaccepting, 0) == 0) ++ { ++ /* Nobody else is accepting */ ++ client->mortal = false; ++ client->newstate = NS_CLIENTSTATE_READY; ++ } ++ ++ /* ++ * Detach from TCP connection and TCP client quota, ++ * if appropriate. If this is the last reference to ++ * the TCP connection in our pipeline group, the ++ * TCP quota slot will be released. ++ */ ++ if (client->tcpconn) { ++ tcpconn_detach(client); ++ } ++ + if (client->tcpsocket != NULL) { + CTRACE("closetcp"); + isc_socket_detach(&client->tcpsocket); ++ mark_tcp_active(client, false); + } + +- if (client->tcpquota != NULL) +- isc_quota_detach(&client->tcpquota); +- + if (client->timerset) { + (void)isc_timer_reset(client->timer, + isc_timertype_inactive, +@@ -431,45 +584,26 @@ exit_check(ns_client_t *client) { + client->timerset = false; + } + +- client->pipelined = false; +- + client->peeraddr_valid = false; + + client->state = NS_CLIENTSTATE_READY; +- INSIST(client->recursionquota == NULL); +- +- /* +- * Now the client is ready to accept a new TCP connection +- * or UDP request, but we may have enough clients doing +- * that already. Check whether this client needs to remain +- * active and force it to go inactive if not. +- * +- * UDP clients go inactive at this point, but TCP clients +- * may remain active if we have fewer active TCP client +- * objects than desired due to an earlier quota exhaustion. +- */ +- if (client->mortal && TCP_CLIENT(client) && !ns_g_clienttest) { +- LOCK(&client->interface->lock); +- if (client->interface->ntcpcurrent < +- client->interface->ntcptarget) +- client->mortal = false; +- UNLOCK(&client->interface->lock); +- } + + /* + * We don't need the client; send it to the inactive + * queue for recycling. + */ + if (client->mortal) { +- if (client->newstate > NS_CLIENTSTATE_INACTIVE) ++ if (client->newstate > NS_CLIENTSTATE_INACTIVE) { + client->newstate = NS_CLIENTSTATE_INACTIVE; ++ } + } + + if (NS_CLIENTSTATE_READY == client->newstate) { + if (TCP_CLIENT(client)) { + client_accept(client); +- } else ++ } else { + client_udprecv(client); ++ } + client->newstate = NS_CLIENTSTATE_MAX; + return (true); + } +@@ -481,41 +615,50 @@ exit_check(ns_client_t *client) { + /* + * We are trying to enter the inactive state. + */ +- if (client->naccepts > 0) ++ if (client->naccepts > 0) { + isc_socket_cancel(client->tcplistener, client->task, + ISC_SOCKCANCEL_ACCEPT); ++ } + + /* Still waiting for accept cancel completion. */ +- if (! (client->naccepts == 0)) ++ if (client->naccepts > 0) { + return (true); ++ } + + /* Accept cancel is complete. */ +- if (client->nrecvs > 0) ++ if (client->nrecvs > 0) { + isc_socket_cancel(client->udpsocket, client->task, + ISC_SOCKCANCEL_RECV); ++ } + + /* Still waiting for recv cancel completion. */ +- if (! (client->nrecvs == 0)) ++ if (client->nrecvs > 0) { + return (true); ++ } + + /* Still waiting for control event to be delivered */ +- if (client->nctls > 0) ++ if (client->nctls > 0) { + return (true); +- +- /* Deactivate the client. */ +- if (client->interface) +- ns_interface_detach(&client->interface); ++ } + + INSIST(client->naccepts == 0); + INSIST(client->recursionquota == NULL); +- if (client->tcplistener != NULL) ++ if (client->tcplistener != NULL) { + isc_socket_detach(&client->tcplistener); +- +- if (client->udpsocket != NULL) ++ mark_tcp_active(client, false); ++ } ++ if (client->udpsocket != NULL) { + isc_socket_detach(&client->udpsocket); ++ } ++ ++ /* Deactivate the client. */ ++ if (client->interface != NULL) { ++ ns_interface_detach(&client->interface); ++ } + +- if (client->dispatch != NULL) ++ if (client->dispatch != NULL) { + dns_dispatch_detach(&client->dispatch); ++ } + + client->attributes = 0; + client->mortal = false; +@@ -540,10 +683,13 @@ exit_check(ns_client_t *client) { + client->newstate = NS_CLIENTSTATE_MAX; + if (!ns_g_clienttest && manager != NULL && + !manager->exiting) ++ { + ISC_QUEUE_PUSH(manager->inactive, client, + ilink); +- if (client->needshutdown) ++ } ++ if (client->needshutdown) { + isc_task_shutdown(client->task); ++ } + return (true); + } + } +@@ -653,7 +799,7 @@ client_start(isc_task_t *task, isc_event_t *event) { + return; + + if (TCP_CLIENT(client)) { +- if (client->pipelined) { ++ if (client->tcpconn != NULL) { + client_read(client); + } else { + client_accept(client); +@@ -663,7 +809,6 @@ client_start(isc_task_t *task, isc_event_t *event) { + } + } + +- + /*% + * The client's task has received a shutdown event. + */ +@@ -2304,6 +2449,7 @@ client_request(isc_task_t *task, isc_event_t *event) { + client->nrecvs--; + } else { + INSIST(TCP_CLIENT(client)); ++ INSIST(client->tcpconn != NULL); + REQUIRE(event->ev_type == DNS_EVENT_TCPMSG); + REQUIRE(event->ev_sender == &client->tcpmsg); + buffer = &client->tcpmsg.buffer; +@@ -2487,18 +2633,27 @@ client_request(isc_task_t *task, isc_event_t *event) { + /* + * Pipeline TCP query processing. + */ +- if (client->message->opcode != dns_opcode_query) +- client->pipelined = false; +- if (TCP_CLIENT(client) && client->pipelined) { +- result = isc_quota_reserve(&ns_g_server->tcpquota); +- if (result == ISC_R_SUCCESS) +- result = ns_client_replace(client); ++ if (TCP_CLIENT(client) && ++ client->message->opcode != dns_opcode_query) ++ { ++ client->tcpconn->pipelined = false; ++ } ++ if (TCP_CLIENT(client) && client->tcpconn->pipelined) { ++ /* ++ * We're pipelining. Replace the client; the ++ * replacement can read the TCP socket looking ++ * for new messages and this one can process the ++ * current message asynchronously. ++ * ++ * There will now be at least three clients using this ++ * TCP socket - one accepting new connections, ++ * one reading an existing connection to get new ++ * messages, and one answering the message already ++ * received. ++ */ ++ result = ns_client_replace(client); + if (result != ISC_R_SUCCESS) { +- ns_client_log(client, NS_LOGCATEGORY_CLIENT, +- NS_LOGMODULE_CLIENT, ISC_LOG_WARNING, +- "no more TCP clients(read): %s", +- isc_result_totext(result)); +- client->pipelined = false; ++ client->tcpconn->pipelined = false; + } + } + +@@ -3054,8 +3209,7 @@ client_create(ns_clientmgr_t *manager, ns_client_t **clientp) { + client->signer = NULL; + dns_name_init(&client->signername, NULL); + client->mortal = false; +- client->pipelined = false; +- client->tcpquota = NULL; ++ client->tcpconn = NULL; + client->recursionquota = NULL; + client->interface = NULL; + client->peeraddr_valid = false; +@@ -3065,6 +3219,7 @@ client_create(ns_clientmgr_t *manager, ns_client_t **clientp) { + client->filter_aaaa = dns_aaaa_ok; + #endif + client->needshutdown = ns_g_clienttest; ++ client->tcpactive = false; + + ISC_EVENT_INIT(&client->ctlevent, sizeof(client->ctlevent), 0, NULL, + NS_EVENT_CLIENTCONTROL, client_start, client, client, +@@ -3159,9 +3314,10 @@ client_read(ns_client_t *client) { + + static void + client_newconn(isc_task_t *task, isc_event_t *event) { ++ isc_result_t result; + ns_client_t *client = event->ev_arg; + isc_socket_newconnev_t *nevent = (isc_socket_newconnev_t *)event; +- isc_result_t result; ++ uint32_t old; + + REQUIRE(event->ev_type == ISC_SOCKEVENT_NEWCONN); + REQUIRE(NS_CLIENT_VALID(client)); +@@ -3171,13 +3327,18 @@ client_newconn(isc_task_t *task, isc_event_t *event) { + + INSIST(client->state == NS_CLIENTSTATE_READY); + ++ /* ++ * The accept() was successful and we're now establishing a new ++ * connection. We need to make note of it in the client and ++ * interface objects so client objects can do the right thing ++ * when going inactive in exit_check() (see comments in ++ * client_accept() for details). ++ */ + INSIST(client->naccepts == 1); + client->naccepts--; + +- LOCK(&client->interface->lock); +- INSIST(client->interface->ntcpcurrent > 0); +- client->interface->ntcpcurrent--; +- UNLOCK(&client->interface->lock); ++ old = isc_atomic_xadd(&client->interface->ntcpaccepting, -1); ++ INSIST(old > 0); + + /* + * We must take ownership of the new socket before the exit +@@ -3210,6 +3371,7 @@ client_newconn(isc_task_t *task, isc_event_t *event) { + NS_LOGMODULE_CLIENT, ISC_LOG_DEBUG(3), + "accept failed: %s", + isc_result_totext(nevent->result)); ++ tcpconn_detach(client); + } + + if (exit_check(client)) +@@ -3247,20 +3409,13 @@ client_newconn(isc_task_t *task, isc_event_t *event) { + * telnetting to port 53 (once per CPU) will + * deny service to legitimate TCP clients. + */ +- client->pipelined = false; +- result = isc_quota_attach(&ns_g_server->tcpquota, +- &client->tcpquota); +- if (result == ISC_R_SUCCESS) +- result = ns_client_replace(client); +- if (result != ISC_R_SUCCESS) { +- ns_client_log(client, NS_LOGCATEGORY_CLIENT, +- NS_LOGMODULE_CLIENT, ISC_LOG_WARNING, +- "no more TCP clients(accept): %s", +- isc_result_totext(result)); +- } else if (ns_g_server->keepresporder == NULL || +- !allowed(&netaddr, NULL, NULL, 0, NULL, +- ns_g_server->keepresporder)) { +- client->pipelined = true; ++ result = ns_client_replace(client); ++ if (result == ISC_R_SUCCESS && ++ (ns_g_server->keepresporder == NULL || ++ !allowed(&netaddr, NULL, NULL, 0, NULL, ++ ns_g_server->keepresporder))) ++ { ++ client->tcpconn->pipelined = true; + } + + client_read(client); +@@ -3276,12 +3431,66 @@ client_accept(ns_client_t *client) { + + CTRACE("accept"); + ++ /* ++ * Set up a new TCP connection. This means try to attach to the ++ * TCP client quota (tcp-clients), but fail if we're over quota. ++ */ ++ result = tcpconn_init(client, false); ++ if (result != ISC_R_SUCCESS) { ++ bool exit; ++ ++ ns_client_log(client, NS_LOGCATEGORY_CLIENT, ++ NS_LOGMODULE_CLIENT, ISC_LOG_WARNING, ++ "TCP client quota reached: %s", ++ isc_result_totext(result)); ++ ++ /* ++ * We have exceeded the system-wide TCP client quota. But, ++ * we can't just block this accept in all cases, because if ++ * we did, a heavy TCP load on other interfaces might cause ++ * this interface to be starved, with no clients able to ++ * accept new connections. ++ * ++ * So, we check here to see if any other clients are ++ * already servicing TCP queries on this interface (whether ++ * accepting, reading, or processing). If we find that at ++ * least one client other than this one is active, then ++ * it's okay *not* to call accept - we can let this ++ * client go inactive and another will take over when it's ++ * done. ++ * ++ * If there aren't enough active clients on the interface, ++ * then we can be a little bit flexible about the quota. ++ * We'll allow *one* extra client through to ensure we're ++ * listening on every interface; we do this by setting the ++ * 'force' option to tcpconn_init(). ++ * ++ * (Note: In practice this means that the real TCP client ++ * quota is tcp-clients plus the number of listening ++ * interfaces plus 1.) ++ */ ++ exit = (isc_atomic_xadd(&client->interface->ntcpactive, 0) > ++ (client->tcpactive ? 1 : 0)); ++ if (exit) { ++ client->newstate = NS_CLIENTSTATE_INACTIVE; ++ (void)exit_check(client); ++ return; ++ } ++ ++ result = tcpconn_init(client, true); ++ RUNTIME_CHECK(result == ISC_R_SUCCESS); ++ } ++ ++ /* ++ * If this client was set up using get_client() or get_worker(), ++ * then TCP is already marked active. However, if it was restarted ++ * from exit_check(), it might not be, so we take care of it now. ++ */ ++ mark_tcp_active(client, true); ++ + result = isc_socket_accept(client->tcplistener, client->task, + client_newconn, client); + if (result != ISC_R_SUCCESS) { +- UNEXPECTED_ERROR(__FILE__, __LINE__, +- "isc_socket_accept() failed: %s", +- isc_result_totext(result)); + /* + * XXXRTH What should we do? We're trying to accept but + * it didn't work. If we just give up, then TCP +@@ -3289,13 +3498,37 @@ client_accept(ns_client_t *client) { + * + * For now, we just go idle. + */ ++ UNEXPECTED_ERROR(__FILE__, __LINE__, ++ "isc_socket_accept() failed: %s", ++ isc_result_totext(result)); ++ ++ tcpconn_detach(client); ++ mark_tcp_active(client, false); + return; + } ++ ++ /* ++ * The client's 'naccepts' counter indicates that this client has ++ * called accept() and is waiting for a new connection. It should ++ * never exceed 1. ++ */ + INSIST(client->naccepts == 0); + client->naccepts++; +- LOCK(&client->interface->lock); +- client->interface->ntcpcurrent++; +- UNLOCK(&client->interface->lock); ++ ++ /* ++ * The interface's 'ntcpaccepting' counter is incremented when ++ * any client calls accept(), and decremented in client_newconn() ++ * once the connection is established. ++ * ++ * When the client object is shutting down after handling a TCP ++ * request (see exit_check()), if this value is at least one, that ++ * means another client has called accept() and is waiting to ++ * establish the next connection. That means the client may be ++ * be free to become inactive; otherwise it may need to start ++ * listening for connections itself to prevent the interface ++ * going dead. ++ */ ++ isc_atomic_xadd(&client->interface->ntcpaccepting, 1); + } + + static void +@@ -3366,15 +3599,17 @@ ns_client_replace(ns_client_t *client) { + REQUIRE(client->manager != NULL); + + tcp = TCP_CLIENT(client); +- if (tcp && client->pipelined) { ++ if (tcp && client->tcpconn != NULL && client->tcpconn->pipelined) { + result = get_worker(client->manager, client->interface, +- client->tcpsocket); ++ client->tcpsocket, client); + } else { + result = get_client(client->manager, client->interface, + client->dispatch, tcp); ++ + } +- if (result != ISC_R_SUCCESS) ++ if (result != ISC_R_SUCCESS) { + return (result); ++ } + + /* + * The responsibility for listening for new requests is hereby +@@ -3560,9 +3795,12 @@ get_client(ns_clientmgr_t *manager, ns_interface_t *ifp, + client->dscp = ifp->dscp; + + if (tcp) { ++ mark_tcp_active(client, true); ++ + client->attributes |= NS_CLIENTATTR_TCP; + isc_socket_attach(ifp->tcpsocket, + &client->tcplistener); ++ + } else { + isc_socket_t *sock; + +@@ -3580,7 +3818,8 @@ get_client(ns_clientmgr_t *manager, ns_interface_t *ifp, + } + + static isc_result_t +-get_worker(ns_clientmgr_t *manager, ns_interface_t *ifp, isc_socket_t *sock) ++get_worker(ns_clientmgr_t *manager, ns_interface_t *ifp, isc_socket_t *sock, ++ ns_client_t *oldclient) + { + isc_result_t result = ISC_R_SUCCESS; + isc_event_t *ev; +@@ -3588,6 +3827,7 @@ get_worker(ns_clientmgr_t *manager, ns_interface_t *ifp, isc_socket_t *sock) + MTRACE("get worker"); + + REQUIRE(manager != NULL); ++ REQUIRE(oldclient != NULL); + + if (manager->exiting) + return (ISC_R_SHUTTINGDOWN); +@@ -3620,14 +3860,15 @@ get_worker(ns_clientmgr_t *manager, ns_interface_t *ifp, isc_socket_t *sock) + ns_interface_attach(ifp, &client->interface); + client->newstate = client->state = NS_CLIENTSTATE_WORKING; + INSIST(client->recursionquota == NULL); +- client->tcpquota = &ns_g_server->tcpquota; + + client->dscp = ifp->dscp; + + client->attributes |= NS_CLIENTATTR_TCP; +- client->pipelined = true; + client->mortal = true; + ++ tcpconn_attach(oldclient, client); ++ mark_tcp_active(client, true); ++ + isc_socket_attach(ifp->tcpsocket, &client->tcplistener); + isc_socket_attach(sock, &client->tcpsocket); + isc_socket_setname(client->tcpsocket, "worker-tcp", NULL); +diff --git a/bin/named/include/named/client.h b/bin/named/include/named/client.h +index b23a7b1..969ee4c 100644 +--- a/bin/named/include/named/client.h ++++ b/bin/named/include/named/client.h +@@ -9,8 +9,6 @@ + * information regarding copyright ownership. + */ + +-/* $Id: client.h,v 1.96 2012/01/31 23:47:31 tbox Exp $ */ +- + #ifndef NAMED_CLIENT_H + #define NAMED_CLIENT_H 1 + +@@ -80,6 +78,13 @@ + *** Types + ***/ + ++/*% reference-counted TCP connection object */ ++typedef struct ns_tcpconn { ++ isc_refcount_t refs; ++ isc_quota_t *tcpquota; ++ bool pipelined; ++} ns_tcpconn_t; ++ + /*% nameserver client structure */ + struct ns_client { + unsigned int magic; +@@ -94,7 +99,8 @@ struct ns_client { + int nupdates; + int nctls; + int references; +- bool needshutdown; /* ++ bool tcpactive; ++ bool needshutdown; /* + * Used by clienttest to get + * the client to go from + * inactive to free state +@@ -130,10 +136,9 @@ struct ns_client { + isc_stdtime_t now; + isc_time_t tnow; + dns_name_t signername; /*%< [T]SIG key name */ +- dns_name_t * signer; /*%< NULL if not valid sig */ +- bool mortal; /*%< Die after handling request */ +- bool pipelined; /*%< TCP queries not in sequence */ +- isc_quota_t *tcpquota; ++ dns_name_t *signer; /*%< NULL if not valid sig */ ++ bool mortal; /*%< Die after handling request */ ++ ns_tcpconn_t *tcpconn; + isc_quota_t *recursionquota; + ns_interface_t *interface; + +@@ -143,8 +148,8 @@ struct ns_client { + isc_sockaddr_t destsockaddr; + + isc_netaddr_t ecs_addr; /*%< EDNS client subnet */ +- uint8_t ecs_addrlen; +- uint8_t ecs_scope; ++ uint8_t ecs_addrlen; ++ uint8_t ecs_scope; + + struct in6_pktinfo pktinfo; + isc_dscp_t dscp; +diff --git a/bin/named/include/named/interfacemgr.h b/bin/named/include/named/interfacemgr.h +index 7d1883e..3535ef2 100644 +--- a/bin/named/include/named/interfacemgr.h ++++ b/bin/named/include/named/interfacemgr.h +@@ -9,8 +9,6 @@ + * information regarding copyright ownership. + */ + +-/* $Id: interfacemgr.h,v 1.35 2011/07/28 23:47:58 tbox Exp $ */ +- + #ifndef NAMED_INTERFACEMGR_H + #define NAMED_INTERFACEMGR_H 1 + +@@ -77,9 +75,14 @@ struct ns_interface { + /*%< UDP dispatchers. */ + isc_socket_t * tcpsocket; /*%< TCP socket. */ + isc_dscp_t dscp; /*%< "listen-on" DSCP value */ +- int ntcptarget; /*%< Desired number of concurrent +- TCP accepts */ +- int ntcpcurrent; /*%< Current ditto, locked */ ++ int32_t ntcpaccepting; /*%< Number of clients ++ ready to accept new ++ TCP connections on this ++ interface */ ++ int32_t ntcpactive; /*%< Number of clients ++ servicing TCP queries ++ (whether accepting or ++ connected) */ + int nudpdispatch; /*%< Number of UDP dispatches */ + ns_clientmgr_t * clientmgr; /*%< Client manager. */ + ISC_LINK(ns_interface_t) link; +diff --git a/bin/named/interfacemgr.c b/bin/named/interfacemgr.c +index 419927b..d9f6df5 100644 +--- a/bin/named/interfacemgr.c ++++ b/bin/named/interfacemgr.c +@@ -386,8 +386,9 @@ ns_interface_create(ns_interfacemgr_t *mgr, isc_sockaddr_t *addr, + * connections will be handled in parallel even though there is + * only one client initially. + */ +- ifp->ntcptarget = 1; +- ifp->ntcpcurrent = 0; ++ ifp->ntcpaccepting = 0; ++ ifp->ntcpactive = 0; ++ + ifp->nudpdispatch = 0; + + ifp->dscp = -1; +@@ -522,9 +523,7 @@ ns_interface_accepttcp(ns_interface_t *ifp) { + */ + (void)isc_socket_filter(ifp->tcpsocket, "dataready"); + +- result = ns_clientmgr_createclients(ifp->clientmgr, +- ifp->ntcptarget, ifp, +- true); ++ result = ns_clientmgr_createclients(ifp->clientmgr, 1, ifp, true); + if (result != ISC_R_SUCCESS) { + UNEXPECTED_ERROR(__FILE__, __LINE__, + "TCP ns_clientmgr_createclients(): %s", +diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml +index 719b074..4b36bd0 100644 +--- a/doc/arm/Bv9ARM-book.xml ++++ b/doc/arm/Bv9ARM-book.xml +@@ -8487,7 +8487,8 @@ avoid-v6-udp-ports { 40000; range 50000 60000; }; + <para> + The number of file descriptors reserved for TCP, stdio, + etc. This needs to be big enough to cover the number of +- interfaces <command>named</command> listens on, <command>tcp-clients</command> as well as ++ interfaces <command>named</command> listens on plus ++ <command>tcp-clients</command>, as well as + to provide room for outgoing TCP queries and incoming zone + transfers. The default is <literal>512</literal>. + The minimum value is <literal>128</literal> and the +diff --git a/lib/isc/include/isc/quota.h b/lib/isc/include/isc/quota.h +index b9bf598..36c5830 100644 +--- a/lib/isc/include/isc/quota.h ++++ b/lib/isc/include/isc/quota.h +@@ -100,6 +100,13 @@ isc_quota_attach(isc_quota_t *quota, isc_quota_t **p); + * quota if successful (ISC_R_SUCCESS or ISC_R_SOFTQUOTA). + */ + ++isc_result_t ++isc_quota_force(isc_quota_t *quota, isc_quota_t **p); ++/*%< ++ * Like isc_quota_attach, but will attach '*p' to the quota ++ * even if the hard quota has been exceeded. ++ */ ++ + void + isc_quota_detach(isc_quota_t **p); + /*%< +diff --git a/lib/isc/quota.c b/lib/isc/quota.c +index 3ddff0d..556a61f 100644 +--- a/lib/isc/quota.c ++++ b/lib/isc/quota.c +@@ -74,20 +74,39 @@ isc_quota_release(isc_quota_t *quota) { + UNLOCK("a->lock); + } + +-isc_result_t +-isc_quota_attach(isc_quota_t *quota, isc_quota_t **p) +-{ ++static isc_result_t ++doattach(isc_quota_t *quota, isc_quota_t **p, bool force) { + isc_result_t result; +- INSIST(p != NULL && *p == NULL); ++ REQUIRE(p != NULL && *p == NULL); ++ + result = isc_quota_reserve(quota); +- if (result == ISC_R_SUCCESS || result == ISC_R_SOFTQUOTA) ++ if (result == ISC_R_SUCCESS || result == ISC_R_SOFTQUOTA) { ++ *p = quota; ++ } else if (result == ISC_R_QUOTA && force) { ++ /* attach anyway */ ++ LOCK("a->lock); ++ quota->used++; ++ UNLOCK("a->lock); ++ + *p = quota; ++ result = ISC_R_SUCCESS; ++ } ++ + return (result); + } + ++isc_result_t ++isc_quota_attach(isc_quota_t *quota, isc_quota_t **p) { ++ return (doattach(quota, p, false)); ++} ++ ++isc_result_t ++isc_quota_force(isc_quota_t *quota, isc_quota_t **p) { ++ return (doattach(quota, p, true)); ++} ++ + void +-isc_quota_detach(isc_quota_t **p) +-{ ++isc_quota_detach(isc_quota_t **p) { + INSIST(p != NULL && *p != NULL); + isc_quota_release(*p); + *p = NULL; +diff --git a/lib/isc/win32/libisc.def.in b/lib/isc/win32/libisc.def.in +index a82face..7b9f23d 100644 +--- a/lib/isc/win32/libisc.def.in ++++ b/lib/isc/win32/libisc.def.in +@@ -519,6 +519,7 @@ isc_portset_removerange + isc_quota_attach + isc_quota_destroy + isc_quota_detach ++isc_quota_force + isc_quota_init + isc_quota_max + isc_quota_release diff --git a/debian/patches/0013-Replace-atomic-operations-in-bin-named-client.c-with.patch b/debian/patches/0013-Replace-atomic-operations-in-bin-named-client.c-with.patch new file mode 100644 index 0000000..4ce3abe --- /dev/null +++ b/debian/patches/0013-Replace-atomic-operations-in-bin-named-client.c-with.patch @@ -0,0 +1,128 @@ +From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@sury.org> +Date: Wed, 17 Apr 2019 15:22:27 +0200 +Subject: Replace atomic operations in bin/named/client.c with isc_refcount + reference counting + +--- + bin/named/client.c | 18 +++++++----------- + bin/named/include/named/interfacemgr.h | 5 +++-- + bin/named/interfacemgr.c | 7 +++++-- + 3 files changed, 15 insertions(+), 15 deletions(-) + +diff --git a/bin/named/client.c b/bin/named/client.c +index 020603d..8155c6b 100644 +--- a/bin/named/client.c ++++ b/bin/named/client.c +@@ -402,12 +402,10 @@ tcpconn_detach(ns_client_t *client) { + static void + mark_tcp_active(ns_client_t *client, bool active) { + if (active && !client->tcpactive) { +- isc_atomic_xadd(&client->interface->ntcpactive, 1); ++ isc_refcount_increment0(&client->interface->ntcpactive, NULL); + client->tcpactive = active; + } else if (!active && client->tcpactive) { +- uint32_t old = +- isc_atomic_xadd(&client->interface->ntcpactive, -1); +- INSIST(old > 0); ++ isc_refcount_decrement(&client->interface->ntcpactive, NULL); + client->tcpactive = active; + } + } +@@ -554,7 +552,7 @@ exit_check(ns_client_t *client) { + if (client->mortal && TCP_CLIENT(client) && + client->newstate != NS_CLIENTSTATE_FREED && + !ns_g_clienttest && +- isc_atomic_xadd(&client->interface->ntcpaccepting, 0) == 0) ++ isc_refcount_current(&client->interface->ntcpaccepting) == 0) + { + /* Nobody else is accepting */ + client->mortal = false; +@@ -3317,7 +3315,6 @@ client_newconn(isc_task_t *task, isc_event_t *event) { + isc_result_t result; + ns_client_t *client = event->ev_arg; + isc_socket_newconnev_t *nevent = (isc_socket_newconnev_t *)event; +- uint32_t old; + + REQUIRE(event->ev_type == ISC_SOCKEVENT_NEWCONN); + REQUIRE(NS_CLIENT_VALID(client)); +@@ -3337,8 +3334,7 @@ client_newconn(isc_task_t *task, isc_event_t *event) { + INSIST(client->naccepts == 1); + client->naccepts--; + +- old = isc_atomic_xadd(&client->interface->ntcpaccepting, -1); +- INSIST(old > 0); ++ isc_refcount_decrement(&client->interface->ntcpaccepting, NULL); + + /* + * We must take ownership of the new socket before the exit +@@ -3469,8 +3465,8 @@ client_accept(ns_client_t *client) { + * quota is tcp-clients plus the number of listening + * interfaces plus 1.) + */ +- exit = (isc_atomic_xadd(&client->interface->ntcpactive, 0) > +- (client->tcpactive ? 1 : 0)); ++ exit = (isc_refcount_current(&client->interface->ntcpactive) > ++ (client->tcpactive ? 1U : 0U)); + if (exit) { + client->newstate = NS_CLIENTSTATE_INACTIVE; + (void)exit_check(client); +@@ -3528,7 +3524,7 @@ client_accept(ns_client_t *client) { + * listening for connections itself to prevent the interface + * going dead. + */ +- isc_atomic_xadd(&client->interface->ntcpaccepting, 1); ++ isc_refcount_increment0(&client->interface->ntcpaccepting, NULL); + } + + static void +diff --git a/bin/named/include/named/interfacemgr.h b/bin/named/include/named/interfacemgr.h +index 3535ef2..6e10f21 100644 +--- a/bin/named/include/named/interfacemgr.h ++++ b/bin/named/include/named/interfacemgr.h +@@ -45,6 +45,7 @@ + #include <isc/magic.h> + #include <isc/mem.h> + #include <isc/socket.h> ++#include <isc/refcount.h> + + #include <dns/result.h> + +@@ -75,11 +76,11 @@ struct ns_interface { + /*%< UDP dispatchers. */ + isc_socket_t * tcpsocket; /*%< TCP socket. */ + isc_dscp_t dscp; /*%< "listen-on" DSCP value */ +- int32_t ntcpaccepting; /*%< Number of clients ++ isc_refcount_t ntcpaccepting; /*%< Number of clients + ready to accept new + TCP connections on this + interface */ +- int32_t ntcpactive; /*%< Number of clients ++ isc_refcount_t ntcpactive; /*%< Number of clients + servicing TCP queries + (whether accepting or + connected) */ +diff --git a/bin/named/interfacemgr.c b/bin/named/interfacemgr.c +index d9f6df5..135533b 100644 +--- a/bin/named/interfacemgr.c ++++ b/bin/named/interfacemgr.c +@@ -386,8 +386,8 @@ ns_interface_create(ns_interfacemgr_t *mgr, isc_sockaddr_t *addr, + * connections will be handled in parallel even though there is + * only one client initially. + */ +- ifp->ntcpaccepting = 0; +- ifp->ntcpactive = 0; ++ isc_refcount_init(&ifp->ntcpaccepting, 0); ++ isc_refcount_init(&ifp->ntcpactive, 0); + + ifp->nudpdispatch = 0; + +@@ -618,6 +618,9 @@ ns_interface_destroy(ns_interface_t *ifp) { + + ns_interfacemgr_detach(&ifp->mgr); + ++ isc_refcount_destroy(&ifp->ntcpactive); ++ isc_refcount_destroy(&ifp->ntcpaccepting); ++ + ifp->magic = 0; + isc_mem_put(mctx, ifp, sizeof(*ifp)); + } diff --git a/debian/patches/0014-Disable-broken-Ed448-support.patch b/debian/patches/0014-Disable-broken-Ed448-support.patch new file mode 100644 index 0000000..29c8289 --- /dev/null +++ b/debian/patches/0014-Disable-broken-Ed448-support.patch @@ -0,0 +1,508 @@ +From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@debian.org> +Date: Fri, 26 Apr 2019 07:58:26 +0000 +Subject: Disable broken Ed448 support + +--- + config.h.in | 3 - + configure | 201 ++++++++++++++++++++++------------------------------------- + configure.in | 33 ---------- + 3 files changed, 75 insertions(+), 162 deletions(-) + +diff --git a/config.h.in b/config.h.in +index b6f1a28..8268259 100644 +--- a/config.h.in ++++ b/config.h.in +@@ -387,9 +387,6 @@ int sigwait(const unsigned int *set, int *sig); + /* Define if your OpenSSL version supports Ed25519. */ + #undef HAVE_OPENSSL_ED25519 + +-/* Define if your OpenSSL version supports Ed448. */ +-#undef HAVE_OPENSSL_ED448 +- + /* Define if your OpenSSL version supports EVP AES */ + #undef HAVE_OPENSSL_EVP_AES + +diff --git a/configure b/configure +index 80b8eca..160e996 100755 +--- a/configure ++++ b/configure +@@ -827,6 +827,7 @@ PKCS11_TEST + PKCS11_ED25519 + PKCS11_GOST + PKCS11_ECDSA ++CRYPTO_PK11 + CRYPTO + PKCS11LINKSRCS + PKCS11LINKOBJS +@@ -865,6 +866,7 @@ THREADOPTOBJS + ISC_PLATFORM_USETHREADS + ALWAYS_DEFINES + CHECK_DSA ++DNS_CRYPTO_PK11_LIBS + DNS_CRYPTO_LIBS + DNS_GSSAPI_LIBS + DST_GSSAPI_INC +@@ -968,6 +970,7 @@ infodir + docdir + oldincludedir + includedir ++runstatedir + localstatedir + sharedstatedir + sysconfdir +@@ -1129,6 +1132,7 @@ datadir='${datarootdir}' + sysconfdir='${prefix}/etc' + sharedstatedir='${prefix}/com' + localstatedir='${prefix}/var' ++runstatedir='${localstatedir}/run' + includedir='${prefix}/include' + oldincludedir='/usr/include' + docdir='${datarootdir}/doc/${PACKAGE_TARNAME}' +@@ -1381,6 +1385,15 @@ do + | -silent | --silent | --silen | --sile | --sil) + silent=yes ;; + ++ -runstatedir | --runstatedir | --runstatedi | --runstated \ ++ | --runstate | --runstat | --runsta | --runst | --runs \ ++ | --run | --ru | --r) ++ ac_prev=runstatedir ;; ++ -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \ ++ | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \ ++ | --run=* | --ru=* | --r=*) ++ runstatedir=$ac_optarg ;; ++ + -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb) + ac_prev=sbindir ;; + -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \ +@@ -1518,7 +1531,7 @@ fi + for ac_var in exec_prefix prefix bindir sbindir libexecdir datarootdir \ + datadir sysconfdir sharedstatedir localstatedir includedir \ + oldincludedir docdir infodir htmldir dvidir pdfdir psdir \ +- libdir localedir mandir ++ libdir localedir mandir runstatedir + do + eval ac_val=\$$ac_var + # Remove trailing slashes. +@@ -1671,6 +1684,7 @@ Fine tuning of the installation directories: + --sysconfdir=DIR read-only single-machine data [PREFIX/etc] + --sharedstatedir=DIR modifiable architecture-independent data [PREFIX/com] + --localstatedir=DIR modifiable single-machine data [PREFIX/var] ++ --runstatedir=DIR modifiable per-process data [LOCALSTATEDIR/run] + --libdir=DIR object code libraries [EPREFIX/lib] + --includedir=DIR C header files [PREFIX/include] + --oldincludedir=DIR C header files for non-gcc [/usr/include] +@@ -5037,7 +5051,7 @@ linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) + lt_cv_deplibs_check_method=pass_all + ;; + +-netbsd*) ++netbsd* | netbsdelf*-gnu) + if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then + lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$' + else +@@ -5943,11 +5957,8 @@ _LT_EOF + test $ac_status = 0; }; then + # Now try to grab the symbols. + nlist=conftest.nm +- if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$NM conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist\""; } >&5 +- (eval $NM conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist) 2>&5 +- ac_status=$? +- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 +- test $ac_status = 0; } && test -s "$nlist"; then ++ $ECHO "$as_me:$LINENO: $NM conftest.$ac_objext | $lt_cv_sys_global_symbol_pipe > $nlist" >&5 ++ if eval "$NM" conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist 2>&5 && test -s "$nlist"; then + # Try sorting and uniquifying the output. + if sort "$nlist" | uniq > "$nlist"T; then + mv -f "$nlist"T "$nlist" +@@ -8772,6 +8783,9 @@ $as_echo_n "checking whether the $compiler linker ($LD) supports shared librarie + openbsd* | bitrig*) + with_gnu_ld=no + ;; ++ linux* | k*bsd*-gnu | gnu*) ++ link_all_deplibs=no ++ ;; + esac + + ld_shlibs=yes +@@ -9026,7 +9040,7 @@ _LT_EOF + fi + ;; + +- netbsd*) ++ netbsd* | netbsdelf*-gnu) + if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then + archive_cmds='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib' + wlarc= +@@ -9696,6 +9710,7 @@ $as_echo "$lt_cv_irix_exported_symbol" >&6; } + if test yes = "$lt_cv_irix_exported_symbol"; then + archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib' + fi ++ link_all_deplibs=no + else + archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' + archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib' +@@ -9717,7 +9732,7 @@ $as_echo "$lt_cv_irix_exported_symbol" >&6; } + esac + ;; + +- netbsd*) ++ netbsd* | netbsdelf*-gnu) + if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then + archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags' # a.out + else +@@ -10832,6 +10847,18 @@ fi + dynamic_linker='GNU/Linux ld.so' + ;; + ++netbsdelf*-gnu) ++ version_type=linux ++ need_lib_prefix=no ++ need_version=no ++ library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major ${libname}${shared_ext}' ++ soname_spec='${libname}${release}${shared_ext}$major' ++ shlibpath_var=LD_LIBRARY_PATH ++ shlibpath_overrides_runpath=no ++ hardcode_into_libs=yes ++ dynamic_linker='NetBSD ld.elf_so' ++ ;; ++ + netbsd*) + version_type=sunos + need_lib_prefix=no +@@ -13427,7 +13454,7 @@ case "$host" in + # as it breaks how the two halves (Basic and Advanced) of the IPv6 + # Socket API were designed to be used but we have to live with it. + # Define _GNU_SOURCE to pull in the IPv6 Advanced Socket API. +- *-linux* | *-kfreebsd*-gnu*) ++ *-linux* | *-kfreebsd*-gnu* | *-gnu*) + STD_CDEFINES="$STD_CDEFINES -D_GNU_SOURCE" + CPPFLAGS="$CPPFLAGS -D_GNU_SOURCE" + ;; +@@ -15227,6 +15254,7 @@ esac + + + DNS_CRYPTO_LIBS="$DNS_GSSAPI_LIBS $DNS_CRYPTO_LIBS" ++DNS_CRYPTO_PK11_LIBS="$DNS_GSSAPI_LIBS $DNS_CRYPTO_PK11_LIBS" + + # + # Applications linking with libdns also need to link with these libraries. +@@ -15234,6 +15262,7 @@ DNS_CRYPTO_LIBS="$DNS_GSSAPI_LIBS $DNS_CRYPTO_LIBS" + + + ++ + # + # was --with-randomdev specified? + # +@@ -16330,7 +16359,7 @@ fi + # LinuxThreads requires some changes to the way we + # deal with signals. + # +- *-linux*) ++ *-linux*|*-kfreebsd*-gnu) + $as_echo "#define HAVE_LINUXTHREADS 1" >>confdefs.h + + ;; +@@ -16585,12 +16614,6 @@ fi + $as_echo_n "checking for OpenSSL library... " >&6; } + OPENSSL_WARNING= + openssldirs="/usr /usr/local /usr/local/ssl /usr/pkg /usr/sfw" +-if test "yes" = "$want_native_pkcs11" +-then +- use_openssl="native_pkcs11" +- { $as_echo "$as_me:${as_lineno-$LINENO}: result: use of native PKCS11 instead" >&5 +-$as_echo "use of native PKCS11 instead" >&6; } +-fi + + if test "auto" = "$use_openssl" + then +@@ -16603,6 +16626,7 @@ then + fi + done + fi ++CRYPTO_PK11="" + OPENSSL_ECDSA="" + OPENSSL_GOST="" + OPENSSL_ED25519="" +@@ -16625,12 +16649,10 @@ $as_echo "#define PREFER_GOSTASN1 1" >>confdefs.h + ;; + esac + +-case "$use_openssl" in +- native_pkcs11) +- { $as_echo "$as_me:${as_lineno-$LINENO}: result: disabled because of native PKCS11" >&5 +-$as_echo "disabled because of native PKCS11" >&6; } ++if test "$want_native_pkcs11" = "yes" ++then + DST_OPENSSL_INC="" +- CRYPTO="-DPKCS11CRYPTO" ++ CRYPTO_PK11="-DPKCS11CRYPTO" + OPENSSLECDSALINKOBJS="" + OPENSSLECDSALINKSRCS="" + OPENSSLEDDSALINKOBJS="" +@@ -16639,7 +16661,9 @@ $as_echo "disabled because of native PKCS11" >&6; } + OPENSSLGOSTLINKSRCS="" + OPENSSLLINKOBJS="" + OPENSSLLINKSRCS="" +- ;; ++fi ++ ++case "$use_openssl" in + no) + { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 + $as_echo "no" >&6; } +@@ -16669,12 +16693,6 @@ $as_echo "no" >&6; } + If you don't want OpenSSL, use --without-openssl" "$LINENO" 5 + ;; + *) +- if test "yes" = "$want_native_pkcs11" +- then +- { $as_echo "$as_me:${as_lineno-$LINENO}: result: " >&5 +-$as_echo "" >&6; } +- as_fn_error $? "OpenSSL and native PKCS11 cannot be used together." "$LINENO" 5 +- fi + if test "yes" = "$use_openssl" + then + # User did not specify a path - guess it +@@ -17126,60 +17144,10 @@ fi + + $as_echo "#define HAVE_OPENSSL_ED25519 1" >>confdefs.h + +- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for OpenSSL Ed448 support" >&5 +-$as_echo_n "checking for OpenSSL Ed448 support... " >&6; } +- if test "$cross_compiling" = yes; then : +- { $as_echo "$as_me:${as_lineno-$LINENO}: result: using --with-eddsa" >&5 +-$as_echo "using --with-eddsa" >&6; } +-else +- cat confdefs.h - <<_ACEOF >conftest.$ac_ext +-/* end confdefs.h. */ +- +-#include <openssl/evp.h> +-#include <openssl/objects.h> +-int main() { +- EVP_PKEY_CTX *ctx; +- +- ctx = EVP_PKEY_CTX_new_id(NID_ED448, NULL); +- if (ctx == NULL) +- return (2); +- return (0); +-} +- +-_ACEOF +-if ac_fn_c_try_run "$LINENO"; then : +- { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5 +-$as_echo "yes" >&6; } +- have_ed448="yes" +-else +- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 +-$as_echo "no" >&6; } +- have_ed448="no" +-fi +-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \ +- conftest.$ac_objext conftest.beam conftest.$ac_ext +-fi +- +- case $with_eddsa in +- all) +- have_ed448=yes ;; +- *) +- ;; +- esac +- case $have_ed448 in +- yes) +- +-$as_echo "#define HAVE_OPENSSL_ED448 1" >>confdefs.h +- +- ;; +- *) +- ;; +- esac + ;; + *) + ;; + esac +- + have_aes="no" + { $as_echo "$as_me:${as_lineno-$LINENO}: checking for OpenSSL AES support" >&5 + $as_echo_n "checking for OpenSSL AES support... " >&6; } +@@ -17278,6 +17246,7 @@ esac + + + DNS_CRYPTO_LIBS="$DNS_CRYPTO_LIBS $DST_OPENSSL_LIBS" ++DNS_CRYPTO_PK11_LIBS="$DNS_CRYPTO_LIBS" + + ISC_PLATFORM_WANTAES="#undef ISC_PLATFORM_WANTAES" + if test "yes" = "$with_aes" +@@ -17667,6 +17636,7 @@ esac + + + ++ + # for PKCS11 benchmarks + + have_clock_gt=no +@@ -18526,51 +18496,6 @@ _ACEOF + + LIBS="-lsocket $LIBS" + +-fi +- +- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for inet_addr in -lnsl" >&5 +-$as_echo_n "checking for inet_addr in -lnsl... " >&6; } +-if ${ac_cv_lib_nsl_inet_addr+:} false; then : +- $as_echo_n "(cached) " >&6 +-else +- ac_check_lib_save_LIBS=$LIBS +-LIBS="-lnsl $LIBS" +-cat confdefs.h - <<_ACEOF >conftest.$ac_ext +-/* end confdefs.h. */ +- +-/* Override any GCC internal prototype to avoid an error. +- Use char because int might match the return type of a GCC +- builtin and then its argument prototype would still apply. */ +-#ifdef __cplusplus +-extern "C" +-#endif +-char inet_addr (); +-int +-main () +-{ +-return inet_addr (); +- ; +- return 0; +-} +-_ACEOF +-if ac_fn_c_try_link "$LINENO"; then : +- ac_cv_lib_nsl_inet_addr=yes +-else +- ac_cv_lib_nsl_inet_addr=no +-fi +-rm -f core conftest.err conftest.$ac_objext \ +- conftest$ac_exeext conftest.$ac_ext +-LIBS=$ac_check_lib_save_LIBS +-fi +-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_nsl_inet_addr" >&5 +-$as_echo "$ac_cv_lib_nsl_inet_addr" >&6; } +-if test "x$ac_cv_lib_nsl_inet_addr" = xyes; then : +- cat >>confdefs.h <<_ACEOF +-#define HAVE_LIBNSL 1 +-_ACEOF +- +- LIBS="-lnsl $LIBS" +- + fi + + ;; +@@ -24555,7 +24480,7 @@ ac_config_commands="$ac_config_commands chmod" + # elsewhere if there's a good reason for doing so. + # + +-ac_config_files="$ac_config_files make/Makefile make/mkdep Makefile bin/Makefile bin/check/Makefile bin/confgen/Makefile bin/confgen/unix/Makefile bin/delv/Makefile bin/dig/Makefile bin/dnssec/Makefile bin/named/Makefile bin/named/unix/Makefile bin/nsupdate/Makefile bin/pkcs11/Makefile bin/python/Makefile bin/python/isc/Makefile bin/python/isc/utils.py bin/python/isc/tests/Makefile bin/python/dnssec-checkds.py bin/python/dnssec-coverage.py bin/python/dnssec-keymgr.py bin/python/isc/__init__.py bin/python/isc/checkds.py bin/python/isc/coverage.py bin/python/isc/dnskey.py bin/python/isc/eventlist.py bin/python/isc/keydict.py bin/python/isc/keyevent.py bin/python/isc/keymgr.py bin/python/isc/keyseries.py bin/python/isc/keyzone.py bin/python/isc/policy.py bin/python/isc/rndc.py bin/python/isc/tests/dnskey_test.py bin/python/isc/tests/policy_test.py bin/rndc/Makefile bin/tests/Makefile bin/tests/headerdep_test.sh bin/tests/optional/Makefile bin/tests/pkcs11/Makefile bin/tests/pkcs11/benchmarks/Makefile bin/tests/system/Makefile bin/tests/system/conf.sh bin/tests/system/dlz/prereq.sh bin/tests/system/dlzexternal/Makefile bin/tests/system/dlzexternal/ns1/dlzs.conf bin/tests/system/dyndb/Makefile bin/tests/system/dyndb/driver/Makefile bin/tests/system/inline/checkdsa.sh bin/tests/system/lwresd/Makefile bin/tests/system/pipelined/Makefile bin/tests/system/rndc/Makefile bin/tests/system/rsabigexponent/Makefile bin/tests/system/tkey/Makefile bin/tests/virtual-time/Makefile bin/tests/virtual-time/conf.sh bin/tools/Makefile contrib/scripts/check-secure-delegation.pl contrib/scripts/zone-edit.sh doc/Makefile doc/arm/Makefile doc/arm/noteversion.xml doc/arm/pkgversion.xml doc/arm/releaseinfo.xml doc/doxygen/Doxyfile doc/doxygen/Makefile doc/doxygen/doxygen-input-filter doc/misc/Makefile doc/tex/Makefile doc/tex/armstyle.sty doc/xsl/Makefile doc/xsl/isc-docbook-chunk.xsl doc/xsl/isc-docbook-html.xsl doc/xsl/isc-manpage.xsl doc/xsl/isc-notes-html.xsl isc-config.sh lib/Makefile lib/bind9/Makefile lib/bind9/include/Makefile lib/bind9/include/bind9/Makefile lib/dns/Makefile lib/dns/include/Makefile lib/dns/include/dns/Makefile lib/dns/include/dst/Makefile lib/dns/tests/Makefile lib/irs/Makefile lib/irs/include/Makefile lib/irs/include/irs/Makefile lib/irs/include/irs/netdb.h lib/irs/include/irs/platform.h lib/irs/tests/Makefile lib/isc/$arch/Makefile lib/isc/$arch/include/Makefile lib/isc/$arch/include/isc/Makefile lib/isc/$thread_dir/Makefile lib/isc/$thread_dir/include/Makefile lib/isc/$thread_dir/include/isc/Makefile lib/isc/Makefile lib/isc/include/Makefile lib/isc/include/isc/Makefile lib/isc/include/isc/platform.h lib/isc/include/pk11/Makefile lib/isc/include/pkcs11/Makefile lib/isc/tests/Makefile lib/isc/nls/Makefile lib/isc/unix/Makefile lib/isc/unix/include/Makefile lib/isc/unix/include/isc/Makefile lib/isc/unix/include/pkcs11/Makefile lib/isccc/Makefile lib/isccc/include/Makefile lib/isccc/include/isccc/Makefile lib/isccfg/Makefile lib/isccfg/include/Makefile lib/isccfg/include/isccfg/Makefile lib/isccfg/tests/Makefile lib/lwres/Makefile lib/lwres/include/Makefile lib/lwres/include/lwres/Makefile lib/lwres/include/lwres/netdb.h lib/lwres/include/lwres/platform.h lib/lwres/man/Makefile lib/lwres/tests/Makefile lib/lwres/unix/Makefile lib/lwres/unix/include/Makefile lib/lwres/unix/include/lwres/Makefile lib/samples/Makefile lib/samples/Makefile-postinstall unit/Makefile unit/unittest.sh" ++ac_config_files="$ac_config_files make/Makefile make/mkdep Makefile bin/Makefile bin/check/Makefile bin/confgen/Makefile bin/confgen/unix/Makefile bin/delv/Makefile bin/dig/Makefile bin/dnssec/Makefile bin/dnssec-pkcs11/Makefile bin/named/Makefile bin/named/unix/Makefile bin/named-pkcs11/Makefile bin/named-pkcs11/unix/Makefile bin/nsupdate/Makefile bin/pkcs11/Makefile bin/python/Makefile bin/python/isc/Makefile bin/python/isc/utils.py bin/python/isc/tests/Makefile bin/python/dnssec-checkds.py bin/python/dnssec-coverage.py bin/python/dnssec-keymgr.py bin/python/isc/__init__.py bin/python/isc/checkds.py bin/python/isc/coverage.py bin/python/isc/dnskey.py bin/python/isc/eventlist.py bin/python/isc/keydict.py bin/python/isc/keyevent.py bin/python/isc/keymgr.py bin/python/isc/keyseries.py bin/python/isc/keyzone.py bin/python/isc/policy.py bin/python/isc/rndc.py bin/python/isc/tests/dnskey_test.py bin/python/isc/tests/policy_test.py bin/rndc/Makefile bin/tests/Makefile bin/tests/headerdep_test.sh bin/tests/optional/Makefile bin/tests/pkcs11/Makefile bin/tests/pkcs11/benchmarks/Makefile bin/tests/system/Makefile bin/tests/system/conf.sh bin/tests/system/dlz/prereq.sh bin/tests/system/dlzexternal/Makefile bin/tests/system/dlzexternal/ns1/dlzs.conf bin/tests/system/dyndb/Makefile bin/tests/system/dyndb/driver/Makefile bin/tests/system/inline/checkdsa.sh bin/tests/system/lwresd/Makefile bin/tests/system/pipelined/Makefile bin/tests/system/rndc/Makefile bin/tests/system/rsabigexponent/Makefile bin/tests/system/tkey/Makefile bin/tests/virtual-time/Makefile bin/tests/virtual-time/conf.sh bin/tools/Makefile contrib/scripts/check-secure-delegation.pl contrib/scripts/zone-edit.sh doc/Makefile doc/arm/Makefile doc/arm/noteversion.xml doc/arm/pkgversion.xml doc/arm/releaseinfo.xml doc/doxygen/Doxyfile doc/doxygen/Makefile doc/doxygen/doxygen-input-filter doc/misc/Makefile doc/tex/Makefile doc/tex/armstyle.sty doc/xsl/Makefile doc/xsl/isc-docbook-chunk.xsl doc/xsl/isc-docbook-html.xsl doc/xsl/isc-manpage.xsl doc/xsl/isc-notes-html.xsl isc-config.sh lib/Makefile lib/bind9/Makefile lib/bind9/include/Makefile lib/bind9/include/bind9/Makefile lib/dns/Makefile lib/dns/include/Makefile lib/dns/include/dns/Makefile lib/dns/include/dst/Makefile lib/dns/tests/Makefile lib/dns-pkcs11/Makefile lib/dns-pkcs11/include/Makefile lib/dns-pkcs11/include/dns/Makefile lib/dns-pkcs11/include/dst/Makefile lib/irs/Makefile lib/irs/include/Makefile lib/irs/include/irs/Makefile lib/irs/include/irs/netdb.h lib/irs/include/irs/platform.h lib/irs/tests/Makefile lib/isc/$arch/Makefile lib/isc/$arch/include/Makefile lib/isc/$arch/include/isc/Makefile lib/isc/$thread_dir/Makefile lib/isc/$thread_dir/include/Makefile lib/isc/$thread_dir/include/isc/Makefile lib/isc/Makefile lib/isc/include/Makefile lib/isc/include/isc/Makefile lib/isc/include/isc/platform.h lib/isc/include/pk11/Makefile lib/isc/include/pkcs11/Makefile lib/isc/tests/Makefile lib/isc/nls/Makefile lib/isc/unix/Makefile lib/isc/unix/include/Makefile lib/isc/unix/include/isc/Makefile lib/isc/unix/include/pkcs11/Makefile lib/isc-pkcs11/$arch/Makefile lib/isc-pkcs11/$arch/include/Makefile lib/isc-pkcs11/$arch/include/isc/Makefile lib/isc-pkcs11/$thread_dir/Makefile lib/isc-pkcs11/$thread_dir/include/Makefile lib/isc-pkcs11/$thread_dir/include/isc/Makefile lib/isc-pkcs11/Makefile lib/isc-pkcs11/include/Makefile lib/isc-pkcs11/include/isc/Makefile lib/isc-pkcs11/include/isc/platform.h lib/isc-pkcs11/include/pk11/Makefile lib/isc-pkcs11/include/pkcs11/Makefile lib/isc-pkcs11/tests/Makefile lib/isc-pkcs11/nls/Makefile lib/isc-pkcs11/unix/Makefile lib/isc-pkcs11/unix/include/Makefile lib/isc-pkcs11/unix/include/isc/Makefile lib/isc-pkcs11/unix/include/pkcs11/Makefile lib/isccc/Makefile lib/isccc/include/Makefile lib/isccc/include/isccc/Makefile lib/isccfg/Makefile lib/isccfg/include/Makefile lib/isccfg/include/isccfg/Makefile lib/isccfg/tests/Makefile lib/lwres/Makefile lib/lwres/include/Makefile lib/lwres/include/lwres/Makefile lib/lwres/include/lwres/netdb.h lib/lwres/include/lwres/platform.h lib/lwres/man/Makefile lib/lwres/tests/Makefile lib/lwres/unix/Makefile lib/lwres/unix/include/Makefile lib/lwres/unix/include/lwres/Makefile lib/samples/Makefile lib/samples/Makefile-postinstall unit/Makefile unit/unittest.sh" + + + # +@@ -25567,8 +25492,11 @@ do + "bin/delv/Makefile") CONFIG_FILES="$CONFIG_FILES bin/delv/Makefile" ;; + "bin/dig/Makefile") CONFIG_FILES="$CONFIG_FILES bin/dig/Makefile" ;; + "bin/dnssec/Makefile") CONFIG_FILES="$CONFIG_FILES bin/dnssec/Makefile" ;; ++ "bin/dnssec-pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES bin/dnssec-pkcs11/Makefile" ;; + "bin/named/Makefile") CONFIG_FILES="$CONFIG_FILES bin/named/Makefile" ;; + "bin/named/unix/Makefile") CONFIG_FILES="$CONFIG_FILES bin/named/unix/Makefile" ;; ++ "bin/named-pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES bin/named-pkcs11/Makefile" ;; ++ "bin/named-pkcs11/unix/Makefile") CONFIG_FILES="$CONFIG_FILES bin/named-pkcs11/unix/Makefile" ;; + "bin/nsupdate/Makefile") CONFIG_FILES="$CONFIG_FILES bin/nsupdate/Makefile" ;; + "bin/pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES bin/pkcs11/Makefile" ;; + "bin/python/Makefile") CONFIG_FILES="$CONFIG_FILES bin/python/Makefile" ;; +@@ -25642,6 +25570,10 @@ do + "lib/dns/include/dns/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns/include/dns/Makefile" ;; + "lib/dns/include/dst/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns/include/dst/Makefile" ;; + "lib/dns/tests/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns/tests/Makefile" ;; ++ "lib/dns-pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns-pkcs11/Makefile" ;; ++ "lib/dns-pkcs11/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns-pkcs11/include/Makefile" ;; ++ "lib/dns-pkcs11/include/dns/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns-pkcs11/include/dns/Makefile" ;; ++ "lib/dns-pkcs11/include/dst/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns-pkcs11/include/dst/Makefile" ;; + "lib/irs/Makefile") CONFIG_FILES="$CONFIG_FILES lib/irs/Makefile" ;; + "lib/irs/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/irs/include/Makefile" ;; + "lib/irs/include/irs/Makefile") CONFIG_FILES="$CONFIG_FILES lib/irs/include/irs/Makefile" ;; +@@ -25666,6 +25598,24 @@ do + "lib/isc/unix/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc/unix/include/Makefile" ;; + "lib/isc/unix/include/isc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc/unix/include/isc/Makefile" ;; + "lib/isc/unix/include/pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc/unix/include/pkcs11/Makefile" ;; ++ "lib/isc-pkcs11/$arch/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$arch/Makefile" ;; ++ "lib/isc-pkcs11/$arch/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$arch/include/Makefile" ;; ++ "lib/isc-pkcs11/$arch/include/isc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$arch/include/isc/Makefile" ;; ++ "lib/isc-pkcs11/$thread_dir/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$thread_dir/Makefile" ;; ++ "lib/isc-pkcs11/$thread_dir/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$thread_dir/include/Makefile" ;; ++ "lib/isc-pkcs11/$thread_dir/include/isc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$thread_dir/include/isc/Makefile" ;; ++ "lib/isc-pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/Makefile" ;; ++ "lib/isc-pkcs11/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/include/Makefile" ;; ++ "lib/isc-pkcs11/include/isc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/include/isc/Makefile" ;; ++ "lib/isc-pkcs11/include/isc/platform.h") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/include/isc/platform.h" ;; ++ "lib/isc-pkcs11/include/pk11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/include/pk11/Makefile" ;; ++ "lib/isc-pkcs11/include/pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/include/pkcs11/Makefile" ;; ++ "lib/isc-pkcs11/tests/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/tests/Makefile" ;; ++ "lib/isc-pkcs11/nls/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/nls/Makefile" ;; ++ "lib/isc-pkcs11/unix/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/unix/Makefile" ;; ++ "lib/isc-pkcs11/unix/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/unix/include/Makefile" ;; ++ "lib/isc-pkcs11/unix/include/isc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/unix/include/isc/Makefile" ;; ++ "lib/isc-pkcs11/unix/include/pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/unix/include/pkcs11/Makefile" ;; + "lib/isccc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isccc/Makefile" ;; + "lib/isccc/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isccc/include/Makefile" ;; + "lib/isccc/include/isccc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isccc/include/isccc/Makefile" ;; +@@ -26296,7 +26246,6 @@ $as_echo "$as_me: executing $ac_file commands" >&6;} + cat <<_LT_EOF >> "$cfgfile" + #! $SHELL + # Generated automatically by $as_me ($PACKAGE) $VERSION +-# Libtool was configured on host `(hostname || uname -n) 2>/dev/null | sed 1q`: + # NOTE: Changes made to this file will be lost: look at ltmain.sh. + + # Provide generalized library-building support services. +diff --git a/configure.in b/configure.in +index f8603b8..324ac97 100644 +--- a/configure.in ++++ b/configure.in +@@ -1889,43 +1889,10 @@ int main() { + OPENSSLEDDSALINKSRCS='${OPENSSLEDDSALINKSRCS}' + AC_DEFINE(HAVE_OPENSSL_ED25519, 1, + [Define if your OpenSSL version supports Ed25519.]) +- AC_MSG_CHECKING(for OpenSSL Ed448 support) +- AC_TRY_RUN([ +-#include <openssl/evp.h> +-#include <openssl/objects.h> +-int main() { +- EVP_PKEY_CTX *ctx; +- +- ctx = EVP_PKEY_CTX_new_id(NID_ED448, NULL); +- if (ctx == NULL) +- return (2); +- return (0); +-} +-], +- [AC_MSG_RESULT(yes) +- have_ed448="yes"], +- [AC_MSG_RESULT(no) +- have_ed448="no"], +- [AC_MSG_RESULT(using --with-eddsa)]) +- case $with_eddsa in +- all) +- have_ed448=yes ;; +- *) +- ;; +- esac +- case $have_ed448 in +- yes) +- AC_DEFINE(HAVE_OPENSSL_ED448, 1, +- [Define if your OpenSSL version supports Ed448.]) +- ;; +- *) +- ;; +- esac + ;; + *) + ;; + esac +- + have_aes="no" + AC_MSG_CHECKING(for OpenSSL AES support) + AC_TRY_RUN([ diff --git a/debian/patches/0015-move-item_out-test-inside-lock-in-dns_dispatch_getne.patch b/debian/patches/0015-move-item_out-test-inside-lock-in-dns_dispatch_getne.patch new file mode 100644 index 0000000..5b665a9 --- /dev/null +++ b/debian/patches/0015-move-item_out-test-inside-lock-in-dns_dispatch_getne.patch @@ -0,0 +1,54 @@ +From: Mark Andrews <marka@isc.org> +Date: Tue, 19 Mar 2019 14:14:21 +1100 +Subject: move item_out test inside lock in dns_dispatch_getnext() + +Origin: https://gitlab.isc.org/isc-projects/bind9/commit/3a9c7bb80d4a609b86427406d9dd783199920b5b +Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2019-6471 +Bug-Debian: https://bugs.debian.org/930746 + +(cherry picked from commit 60c42f849d520564ed42e5ed0ba46b4b69c07712) +--- + lib/dns/dispatch.c | 12 ++++++++---- + 1 file changed, 8 insertions(+), 4 deletions(-) + +diff --git a/lib/dns/dispatch.c b/lib/dns/dispatch.c +index d1e4c16..b5a8f74 100644 +--- a/lib/dns/dispatch.c ++++ b/lib/dns/dispatch.c +@@ -134,7 +134,7 @@ struct dns_dispentry { + isc_task_t *task; + isc_taskaction_t action; + void *arg; +- bool item_out; ++ bool item_out; + dispsocket_t *dispsocket; + ISC_LIST(dns_dispatchevent_t) items; + ISC_LINK(dns_dispentry_t) link; +@@ -3422,13 +3422,14 @@ dns_dispatch_getnext(dns_dispentry_t *resp, dns_dispatchevent_t **sockevent) { + disp = resp->disp; + REQUIRE(VALID_DISPATCH(disp)); + +- REQUIRE(resp->item_out == true); +- resp->item_out = false; +- + ev = *sockevent; + *sockevent = NULL; + + LOCK(&disp->lock); ++ ++ REQUIRE(resp->item_out == true); ++ resp->item_out = false; ++ + if (ev->buffer.base != NULL) + free_buffer(disp, ev->buffer.base, ev->buffer.length); + free_devent(disp, ev); +@@ -3573,6 +3574,9 @@ dns_dispatch_removeresponse(dns_dispentry_t **resp, + isc_task_send(disp->task[0], &disp->ctlevent); + } + ++/* ++ * disp must be locked. ++ */ + static void + do_cancel(dns_dispatch_t *disp) { + dns_dispatchevent_t *ev; diff --git a/debian/patches/0016-Set-a-limit-on-number-of-simultaneous-pipelined-TCP-.patch b/debian/patches/0016-Set-a-limit-on-number-of-simultaneous-pipelined-TCP-.patch new file mode 100644 index 0000000..a57296a --- /dev/null +++ b/debian/patches/0016-Set-a-limit-on-number-of-simultaneous-pipelined-TCP-.patch @@ -0,0 +1,117 @@ +From: =?utf-8?q?Witold_Kr=C4=99cicki?= <wpk@isc.org> +Date: Wed, 16 Oct 2019 13:18:48 +0200 +Subject: Set a limit on number of simultaneous pipelined TCP queries + +There was no limit on concurrently served queries served over one pipelined TCP +connection, thus it was possible to send thousands queries over a single TCP +connection, possibly exhausting the server resources. + +(cherry picked from commit efaa67749de825073cd7f19778386d0815c4ce29) +--- + bin/named/client.c | 57 ++++++++++++++++++++++++++-------------- + bin/named/include/named/client.h | 5 +++- + 2 files changed, 42 insertions(+), 20 deletions(-) + +diff --git a/bin/named/client.c b/bin/named/client.c +index 8155c6b..30877c5 100644 +--- a/bin/named/client.c ++++ b/bin/named/client.c +@@ -101,7 +101,15 @@ + #define SEND_BUFFER_SIZE 4096 + #define RECV_BUFFER_SIZE 4096 + ++#define TCP_CLIENTS_PER_CONN 23 ++/*%< ++ * Number of simultaneous ns_clients_t (queries in flight) for one ++ * TCP connection. The number was arbitrarily picked and might be ++ * changed in the future. ++ */ ++ + #ifdef ISC_PLATFORM_USETHREADS ++ + #define NMCTXS 100 + /*%< + * Number of 'mctx pools' for clients. (Should this be configurable?) +@@ -337,7 +345,7 @@ tcpconn_init(ns_client_t *client, bool force) { + */ + tconn = isc_mem_allocate(ns_g_mctx, sizeof(*tconn)); + +- isc_refcount_init(&tconn->refs, 1); ++ isc_refcount_init(&tconn->refs, 1); /* Current client */ + tconn->tcpquota = quota; + quota = NULL; + tconn->pipelined = false; +@@ -2631,28 +2639,39 @@ client_request(isc_task_t *task, isc_event_t *event) { + /* + * Pipeline TCP query processing. + */ +- if (TCP_CLIENT(client) && +- client->message->opcode != dns_opcode_query) +- { +- client->tcpconn->pipelined = false; +- } +- if (TCP_CLIENT(client) && client->tcpconn->pipelined) { ++ if (TCP_CLIENT(client)) { ++ if (client->message->opcode != dns_opcode_query) { ++ client->tcpconn->pipelined = false; ++ } ++ + /* +- * We're pipelining. Replace the client; the +- * replacement can read the TCP socket looking +- * for new messages and this one can process the +- * current message asynchronously. +- * +- * There will now be at least three clients using this +- * TCP socket - one accepting new connections, +- * one reading an existing connection to get new +- * messages, and one answering the message already +- * received. ++ * Limit the maximum number of simultaenous pipelined ++ * queries on TCP connection to TCP_CLIENTS_PER_CONN. + */ +- result = ns_client_replace(client); +- if (result != ISC_R_SUCCESS) { ++ if ((isc_refcount_current(&client->tcpconn->refs) ++ > TCP_CLIENTS_PER_CONN)) ++ { + client->tcpconn->pipelined = false; + } ++ ++ if (client->tcpconn->pipelined) { ++ /* ++ * We're pipelining. Replace the client; the ++ * replacement can read the TCP socket looking ++ * for new messages and this one can process the ++ * current message asynchronously. ++ * ++ * There will now be at least three clients using this ++ * TCP socket - one accepting new connections, ++ * one reading an existing connection to get new ++ * messages, and one answering the message already ++ * received. ++ */ ++ result = ns_client_replace(client); ++ if (result != ISC_R_SUCCESS) { ++ client->tcpconn->pipelined = false; ++ } ++ } + } + + dns_opcodestats_increment(ns_g_server->opcodestats, +diff --git a/bin/named/include/named/client.h b/bin/named/include/named/client.h +index 969ee4c..5ae10ae 100644 +--- a/bin/named/include/named/client.h ++++ b/bin/named/include/named/client.h +@@ -80,7 +80,10 @@ + + /*% reference-counted TCP connection object */ + typedef struct ns_tcpconn { +- isc_refcount_t refs; ++ isc_refcount_t refs; /* Number of clients using ++ * this connection. Conn can ++ * be freed if goes to 0 ++ */ + isc_quota_t *tcpquota; + bool pipelined; + } ns_tcpconn_t; diff --git a/debian/patches/0017-libns-Rename-ns_tcpconn-refs-member-to-clients.patch b/debian/patches/0017-libns-Rename-ns_tcpconn-refs-member-to-clients.patch new file mode 100644 index 0000000..4045792 --- /dev/null +++ b/debian/patches/0017-libns-Rename-ns_tcpconn-refs-member-to-clients.patch @@ -0,0 +1,82 @@ +From: =?utf-8?q?Witold_Kr=C4=99cicki?= <wpk@isc.org> +Date: Wed, 16 Oct 2019 13:18:48 +0200 +Subject: libns: Rename ns_tcpconn refs member to clients + +(cherry picked from commit b6d6b50c997b3a00fdde9e0d32c4594ffe94f369) +--- + bin/named/client.c | 16 ++++++++-------- + bin/named/include/named/client.h | 2 +- + 2 files changed, 9 insertions(+), 9 deletions(-) + +diff --git a/bin/named/client.c b/bin/named/client.c +index 30877c5..5dc309a 100644 +--- a/bin/named/client.c ++++ b/bin/named/client.c +@@ -345,7 +345,7 @@ tcpconn_init(ns_client_t *client, bool force) { + */ + tconn = isc_mem_allocate(ns_g_mctx, sizeof(*tconn)); + +- isc_refcount_init(&tconn->refs, 1); /* Current client */ ++ isc_refcount_init(&tconn->clients, 1); /* Current client */ + tconn->tcpquota = quota; + quota = NULL; + tconn->pipelined = false; +@@ -362,14 +362,14 @@ tcpconn_init(ns_client_t *client, bool force) { + */ + static void + tcpconn_attach(ns_client_t *source, ns_client_t *target) { +- int refs; ++ int old_clients; + + REQUIRE(source->tcpconn != NULL); + REQUIRE(target->tcpconn == NULL); + REQUIRE(source->tcpconn->pipelined); + +- isc_refcount_increment(&source->tcpconn->refs, &refs); +- INSIST(refs > 1); ++ isc_refcount_increment(&source->tcpconn->clients, &old_clients); ++ INSIST(old_clients > 1); + target->tcpconn = source->tcpconn; + } + +@@ -382,15 +382,15 @@ tcpconn_attach(ns_client_t *source, ns_client_t *target) { + static void + tcpconn_detach(ns_client_t *client) { + ns_tcpconn_t *tconn = NULL; +- int refs; ++ int old_clients; + + REQUIRE(client->tcpconn != NULL); + + tconn = client->tcpconn; + client->tcpconn = NULL; + +- isc_refcount_decrement(&tconn->refs, &refs); +- if (refs == 0) { ++ isc_refcount_decrement(&tconn->clients, &old_clients); ++ if (old_clients == 0) { + isc_quota_detach(&tconn->tcpquota); + isc_mem_free(ns_g_mctx, tconn); + } +@@ -2648,7 +2648,7 @@ client_request(isc_task_t *task, isc_event_t *event) { + * Limit the maximum number of simultaenous pipelined + * queries on TCP connection to TCP_CLIENTS_PER_CONN. + */ +- if ((isc_refcount_current(&client->tcpconn->refs) ++ if ((isc_refcount_current(&client->tcpconn->clients) + > TCP_CLIENTS_PER_CONN)) + { + client->tcpconn->pipelined = false; +diff --git a/bin/named/include/named/client.h b/bin/named/include/named/client.h +index 5ae10ae..01b6141 100644 +--- a/bin/named/include/named/client.h ++++ b/bin/named/include/named/client.h +@@ -80,7 +80,7 @@ + + /*% reference-counted TCP connection object */ + typedef struct ns_tcpconn { +- isc_refcount_t refs; /* Number of clients using ++ isc_refcount_t clients; /* Number of clients using + * this connection. Conn can + * be freed if goes to 0 + */ diff --git a/debian/patches/0018-CVE-2020-8616.patch b/debian/patches/0018-CVE-2020-8616.patch new file mode 100644 index 0000000..1342140 --- /dev/null +++ b/debian/patches/0018-CVE-2020-8616.patch @@ -0,0 +1,212 @@ +From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@debian.org> +Date: Thu, 14 May 2020 12:24:03 +0200 +Subject: CVE-2020-8616 + +--- + lib/dns/adb.c | 33 ++++++++++++++++------------ + lib/dns/include/dns/adb.h | 4 ++++ + lib/dns/resolver.c | 55 +++++++++++++++++++++++++++++++---------------- + 3 files changed, 60 insertions(+), 32 deletions(-) + +diff --git a/lib/dns/adb.c b/lib/dns/adb.c +index 956f368..55fa416 100644 +--- a/lib/dns/adb.c ++++ b/lib/dns/adb.c +@@ -404,14 +404,13 @@ static void log_quota(dns_adbentry_t *entry, const char *fmt, ...) + */ + #define FIND_WANTEVENT(fn) (((fn)->options & DNS_ADBFIND_WANTEVENT) != 0) + #define FIND_WANTEMPTYEVENT(fn) (((fn)->options & DNS_ADBFIND_EMPTYEVENT) != 0) +-#define FIND_AVOIDFETCHES(fn) (((fn)->options & DNS_ADBFIND_AVOIDFETCHES) \ +- != 0) +-#define FIND_STARTATZONE(fn) (((fn)->options & DNS_ADBFIND_STARTATZONE) \ +- != 0) +-#define FIND_HINTOK(fn) (((fn)->options & DNS_ADBFIND_HINTOK) != 0) +-#define FIND_GLUEOK(fn) (((fn)->options & DNS_ADBFIND_GLUEOK) != 0) +-#define FIND_HAS_ADDRS(fn) (!ISC_LIST_EMPTY((fn)->list)) +-#define FIND_RETURNLAME(fn) (((fn)->options & DNS_ADBFIND_RETURNLAME) != 0) ++#define FIND_AVOIDFETCHES(fn) (((fn)->options & DNS_ADBFIND_AVOIDFETCHES) != 0) ++#define FIND_STARTATZONE(fn) (((fn)->options & DNS_ADBFIND_STARTATZONE) != 0) ++#define FIND_HINTOK(fn) (((fn)->options & DNS_ADBFIND_HINTOK) != 0) ++#define FIND_GLUEOK(fn) (((fn)->options & DNS_ADBFIND_GLUEOK) != 0) ++#define FIND_HAS_ADDRS(fn) (!ISC_LIST_EMPTY((fn)->list)) ++#define FIND_RETURNLAME(fn) (((fn)->options & DNS_ADBFIND_RETURNLAME) != 0) ++#define FIND_NOFETCH(fn) (((fn)->options & DNS_ADBFIND_NOFETCH) != 0) + + /* + * These are currently used on simple unsigned ints, so they are +@@ -3155,21 +3154,26 @@ dns_adb_createfind2(dns_adb_t *adb, isc_task_t *task, isc_taskaction_t action, + * Listen to negative cache hints, and don't start + * another query. + */ +- if (NCACHE_RESULT(result) || AUTH_NX(result)) ++ if (NCACHE_RESULT(result) || AUTH_NX(result)) { + goto fetch; ++ } + +- if (!NAME_FETCH_V6(adbname)) ++ if (!NAME_FETCH_V6(adbname)) { + wanted_fetches |= DNS_ADBFIND_INET6; ++ } + } + + fetch: + if ((WANT_INET(wanted_addresses) && NAME_HAS_V4(adbname)) || + (WANT_INET6(wanted_addresses) && NAME_HAS_V6(adbname))) ++ { + have_address = true; +- else ++ } else { + have_address = false; +- if (wanted_fetches != 0 && +- ! (FIND_AVOIDFETCHES(find) && have_address)) { ++ } ++ if (wanted_fetches != 0 && !(FIND_AVOIDFETCHES(find) && have_address) && ++ !FIND_NOFETCH(find)) ++ { + /* + * We're missing at least one address family. Either the + * caller hasn't instructed us to avoid fetches, or we don't +@@ -3177,8 +3181,9 @@ dns_adb_createfind2(dns_adb_t *adb, isc_task_t *task, isc_taskaction_t action, + * be acceptable so we have to launch fetches. + */ + +- if (FIND_STARTATZONE(find)) ++ if (FIND_STARTATZONE(find)) { + start_at_zone = true; ++ } + + /* + * Start V4. +diff --git a/lib/dns/include/dns/adb.h b/lib/dns/include/dns/adb.h +index ca35bac..3e27c9e 100644 +--- a/lib/dns/include/dns/adb.h ++++ b/lib/dns/include/dns/adb.h +@@ -207,6 +207,10 @@ struct dns_adbfind { + * lame for this query. + */ + #define DNS_ADBFIND_OVERQUOTA 0x00000400 ++/*% ++ * Don't perform a fetch even if there are no address records available. ++ */ ++#define DNS_ADBFIND_NOFETCH 0x00000800 + + /*% + * The answers to queries come back as a list of these. +diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c +index 1d76504..1e4fcab 100644 +--- a/lib/dns/resolver.c ++++ b/lib/dns/resolver.c +@@ -177,6 +177,14 @@ + #define DEFAULT_MAX_QUERIES 75 + #endif + ++/* ++ * After NS_FAIL_LIMIT attempts to fetch a name server address, ++ * if the number of addresses in the NS RRset exceeds NS_RR_LIMIT, ++ * stop trying to fetch, in order to avoid wasting resources. ++ */ ++#define NS_FAIL_LIMIT 4 ++#define NS_RR_LIMIT 5 ++ + /* Number of hash buckets for zone counters */ + #ifndef RES_DOMAIN_BUCKETS + #define RES_DOMAIN_BUCKETS 523 +@@ -3089,8 +3097,7 @@ sort_finds(dns_adbfindlist_t *findlist, unsigned int bias) { + static void + findname(fetchctx_t *fctx, dns_name_t *name, in_port_t port, + unsigned int options, unsigned int flags, isc_stdtime_t now, +- bool *overquota, bool *need_alternate) +-{ ++ bool *overquota, bool *need_alternate, unsigned int *no_addresses) { + dns_adbaddrinfo_t *ai; + dns_adbfind_t *find; + dns_resolver_t *res; +@@ -3178,7 +3185,12 @@ findname(fetchctx_t *fctx, dns_name_t *name, in_port_t port, + find->result_v6 != DNS_R_NXDOMAIN) || + (res->dispatches6 == NULL && + find->result_v4 != DNS_R_NXDOMAIN))) ++ { + *need_alternate = true; ++ } ++ if (no_addresses != NULL) { ++ (*no_addresses)++; ++ } + } else { + if ((find->options & DNS_ADBFIND_OVERQUOTA) != 0) { + if (overquota != NULL) +@@ -3229,6 +3241,7 @@ fctx_getaddresses(fetchctx_t *fctx, bool badcache) { + dns_rdata_ns_t ns; + bool need_alternate = false; + bool all_spilled = true; ++ unsigned int no_addresses = 0; + + FCTXTRACE5("getaddresses", "fctx->depth=", fctx->depth); + +@@ -3384,20 +3397,28 @@ fctx_getaddresses(fetchctx_t *fctx, bool badcache) { + * Extract the name from the NS record. + */ + result = dns_rdata_tostruct(&rdata, &ns, NULL); +- if (result != ISC_R_SUCCESS) ++ if (result != ISC_R_SUCCESS) { + continue; ++ } + +- findname(fctx, &ns.name, 0, stdoptions, 0, now, +- &overquota, &need_alternate); ++ if (no_addresses > NS_FAIL_LIMIT && ++ dns_rdataset_count(&fctx->nameservers) > NS_RR_LIMIT) ++ { ++ stdoptions |= DNS_ADBFIND_NOFETCH; ++ } ++ findname(fctx, &ns.name, 0, stdoptions, 0, now, &overquota, ++ &need_alternate, &no_addresses); + +- if (!overquota) ++ if (!overquota) { + all_spilled = false; ++ } + + dns_rdata_reset(&rdata); + dns_rdata_freestruct(&ns); + } +- if (result != ISC_R_NOMORE) ++ if (result != ISC_R_NOMORE) { + return (result); ++ } + + /* + * Do we need to use 6 to 4? +@@ -3412,7 +3433,7 @@ fctx_getaddresses(fetchctx_t *fctx, bool badcache) { + if (!a->isaddress) { + findname(fctx, &a->_u._n.name, a->_u._n.port, + stdoptions, FCTX_ADDRINFO_FORWARDER, +- now, NULL, NULL); ++ now, NULL, NULL, NULL); + continue; + } + if (isc_sockaddr_pf(&a->_u.addr) != family) +@@ -3774,16 +3795,14 @@ fctx_try(fetchctx_t *fctx, bool retrying, bool badcache) { + } + } + +- if (dns_name_countlabels(&fctx->domain) > 2) { +- result = isc_counter_increment(fctx->qc); +- if (result != ISC_R_SUCCESS) { +- isc_log_write(dns_lctx, DNS_LOGCATEGORY_RESOLVER, +- DNS_LOGMODULE_RESOLVER, ISC_LOG_DEBUG(3), +- "exceeded max queries resolving '%s'", +- fctx->info); +- fctx_done(fctx, DNS_R_SERVFAIL, __LINE__); +- return; +- } ++ result = isc_counter_increment(fctx->qc); ++ if (result != ISC_R_SUCCESS) { ++ isc_log_write(dns_lctx, DNS_LOGCATEGORY_RESOLVER, ++ DNS_LOGMODULE_RESOLVER, ISC_LOG_DEBUG(3), ++ "exceeded max queries resolving '%s'", ++ fctx->info); ++ fctx_done(fctx, DNS_R_SERVFAIL, __LINE__); ++ return; + } + + bucketnum = fctx->bucketnum; diff --git a/debian/patches/0019-CVE-2020-8617.patch b/debian/patches/0019-CVE-2020-8617.patch new file mode 100644 index 0000000..63e84d3 --- /dev/null +++ b/debian/patches/0019-CVE-2020-8617.patch @@ -0,0 +1,33 @@ +From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@debian.org> +Date: Thu, 14 May 2020 12:24:23 +0200 +Subject: CVE-2020-8617 + +--- + lib/dns/tsig.c | 7 ++++--- + 1 file changed, 4 insertions(+), 3 deletions(-) + +diff --git a/lib/dns/tsig.c b/lib/dns/tsig.c +index a94ec69..ff40b99 100644 +--- a/lib/dns/tsig.c ++++ b/lib/dns/tsig.c +@@ -1422,8 +1422,9 @@ dns_tsig_verify(isc_buffer_t *source, dns_message_t *msg, + goto cleanup_context; + } + msg->verified_sig = 1; +- } else if (tsig.error != dns_tsigerror_badsig && +- tsig.error != dns_tsigerror_badkey) { ++ } else if (!response || (tsig.error != dns_tsigerror_badsig && ++ tsig.error != dns_tsigerror_badkey)) ++ { + tsig_log(msg->tsigkey, 2, "signature was empty"); + return (DNS_R_TSIGVERIFYFAILURE); + } +@@ -1489,7 +1490,7 @@ dns_tsig_verify(isc_buffer_t *source, dns_message_t *msg, + } + } + +- if (tsig.error != dns_rcode_noerror) { ++ if (response && tsig.error != dns_rcode_noerror) { + msg->tsigstatus = tsig.error; + if (tsig.error == dns_tsigerror_badtime) + ret = DNS_R_CLOCKSKEW; diff --git a/debian/patches/0020-Remove-INSIST-from-from-new_reference.patch b/debian/patches/0020-Remove-INSIST-from-from-new_reference.patch new file mode 100644 index 0000000..5880fd5 --- /dev/null +++ b/debian/patches/0020-Remove-INSIST-from-from-new_reference.patch @@ -0,0 +1,568 @@ +From: Mark Andrews <marka@isc.org> +Date: Tue, 2 Jun 2020 12:38:40 +1000 +Subject: Remove INSIST from from new_reference + +RBTDB node can now appear on the deadnodes lists following the changes +to decrement_reference in 176b23b6cd98e5b58f832902fdbe964ee5f762d0 to +defer checking of node->down when the tree write lock is not held. The +node should be unlinked instead. + +(cherry picked from commit b8c4efb10fc8ef1489120a8169fea42adf97025e) +--- + lib/dns/rbtdb.c | 238 +++++++++++++++++++++++++++++++++----------------------- + 1 file changed, 142 insertions(+), 96 deletions(-) + +diff --git a/lib/dns/rbtdb.c b/lib/dns/rbtdb.c +index 0861139..792c443 100644 +--- a/lib/dns/rbtdb.c ++++ b/lib/dns/rbtdb.c +@@ -2069,11 +2069,16 @@ delete_node(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node) { + * Caller must be holding the node lock. + */ + static inline void +-new_reference(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node) { ++new_reference(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node, ++ isc_rwlocktype_t locktype) { + unsigned int lockrefs, noderefs; + isc_refcount_t *lockref; + +- INSIST(!ISC_LINK_LINKED(node, deadlink)); ++ if (locktype == isc_rwlocktype_write && ISC_LINK_LINKED(node, deadlink)) ++ { ++ ISC_LIST_UNLINK(rbtdb->deadnodes[node->locknum], node, ++ deadlink); ++ } + dns_rbtnode_refincrement0(node, &noderefs); + if (noderefs == 1) { /* this is the first reference to the node */ + lockref = &rbtdb->node_locks[node->locknum].references; +@@ -2119,7 +2124,7 @@ cleanup_dead_nodes(dns_rbtdb_t *rbtdb, int bucketnum) { + prune_tree, node, + sizeof(isc_event_t)); + if (ev != NULL) { +- new_reference(rbtdb, node); ++ new_reference(rbtdb, node, isc_rwlocktype_write); + db = NULL; + attach((dns_db_t *)rbtdb, &db); + ev->ev_sender = db; +@@ -2183,7 +2188,7 @@ reactivate_node(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node, + cleanup_dead_nodes(rbtdb, node->locknum); + } + +- new_reference(rbtdb, node); ++ new_reference(rbtdb, node, locktype); + + NODE_WEAKUNLOCK(nodelock, locktype); + NODE_STRONGUNLOCK(nodelock); +@@ -2329,7 +2334,7 @@ decrement_reference(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node, + prune_tree, node, + sizeof(isc_event_t)); + if (ev != NULL) { +- new_reference(rbtdb, node); ++ new_reference(rbtdb, node, isc_rwlocktype_write); + db = NULL; + attach((dns_db_t *)rbtdb, &db); + ev->ev_sender = db; +@@ -2361,8 +2366,10 @@ decrement_reference(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node, + } + } else { + INSIST(node->data == NULL); +- INSIST(!ISC_LINK_LINKED(node, deadlink)); +- ISC_LIST_APPEND(rbtdb->deadnodes[bucket], node, deadlink); ++ if (!ISC_LINK_LINKED(node, deadlink)) { ++ ISC_LIST_APPEND(rbtdb->deadnodes[bucket], node, ++ deadlink); ++ } + } + + restore_locks: +@@ -2427,17 +2434,16 @@ prune_tree(isc_task_t *task, isc_event_t *event) { + + /* + * We need to gain a reference to the node before +- * decrementing it in the next iteration. In addition, +- * if the node is in the dead-nodes list, extract it +- * from the list beforehand as we do in +- * reactivate_node(). ++ * decrementing it in the next iteration. + */ +- if (ISC_LINK_LINKED(parent, deadlink)) ++ if (ISC_LINK_LINKED(parent, deadlink)) { + ISC_LIST_UNLINK(rbtdb->deadnodes[locknum], + parent, deadlink); +- new_reference(rbtdb, parent); +- } else ++ } ++ new_reference(rbtdb, parent, isc_rwlocktype_write); ++ } else { + parent = NULL; ++ } + + node = parent; + } while (node != NULL); +@@ -3219,7 +3225,7 @@ zone_zonecut_callback(dns_rbtnode_t *node, dns_name_t *name, void *arg) { + * We increment the reference count on node to ensure that + * search->zonecut_rdataset will still be valid later. + */ +- new_reference(search->rbtdb, node); ++ new_reference(search->rbtdb, node, isc_rwlocktype_read); + search->zonecut = node; + search->zonecut_rdataset = found; + search->need_cleanup = true; +@@ -3270,11 +3276,10 @@ zone_zonecut_callback(dns_rbtnode_t *node, dns_name_t *name, void *arg) { + } + + static inline void +-bind_rdataset(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node, +- rdatasetheader_t *header, isc_stdtime_t now, +- dns_rdataset_t *rdataset) +-{ +- unsigned char *raw; /* RDATASLAB */ ++bind_rdataset(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node, rdatasetheader_t *header, ++ isc_stdtime_t now, isc_rwlocktype_t locktype, ++ dns_rdataset_t *rdataset) { ++ unsigned char *raw; /* RDATASLAB */ + + /* + * Caller must be holding the node reader lock. +@@ -3287,7 +3292,7 @@ bind_rdataset(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node, + if (rdataset == NULL) + return; + +- new_reference(rbtdb, node); ++ new_reference(rbtdb, node, locktype); + + INSIST(rdataset->methods == NULL); /* We must be disassociated. */ + +@@ -3382,11 +3387,13 @@ setup_delegation(rbtdb_search_t *search, dns_dbnode_t **nodep, + NODE_LOCK(&(search->rbtdb->node_locks[node->locknum].lock), + isc_rwlocktype_read); + bind_rdataset(search->rbtdb, node, search->zonecut_rdataset, +- search->now, rdataset); ++ search->now, isc_rwlocktype_read, rdataset); + if (sigrdataset != NULL && search->zonecut_sigrdataset != NULL) ++ { + bind_rdataset(search->rbtdb, node, +- search->zonecut_sigrdataset, +- search->now, sigrdataset); ++ search->zonecut_sigrdataset, search->now, ++ isc_rwlocktype_read, sigrdataset); ++ } + NODE_UNLOCK(&(search->rbtdb->node_locks[node->locknum].lock), + isc_rwlocktype_read); + } +@@ -4045,19 +4052,22 @@ find_closest_nsec(rbtdb_search_t *search, dns_dbnode_t **nodep, + foundname, NULL); + if (result == ISC_R_SUCCESS) { + if (nodep != NULL) { +- new_reference(search->rbtdb, +- node); ++ new_reference( ++ search->rbtdb, node, ++ isc_rwlocktype_read); + *nodep = node; + } + bind_rdataset(search->rbtdb, node, + found, search->now, ++ isc_rwlocktype_read, + rdataset); +- if (foundsig != NULL) +- bind_rdataset(search->rbtdb, +- node, +- foundsig, +- search->now, +- sigrdataset); ++ if (foundsig != NULL) { ++ bind_rdataset( ++ search->rbtdb, node, ++ foundsig, search->now, ++ isc_rwlocktype_read, ++ sigrdataset); ++ } + } + } else if (found == NULL && foundsig == NULL) { + /* +@@ -4331,7 +4341,8 @@ zone_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version, + * ensure that search->zonecut_rdataset will + * still be valid later. + */ +- new_reference(search.rbtdb, node); ++ new_reference(search.rbtdb, node, ++ isc_rwlocktype_read); + search.zonecut = node; + search.zonecut_rdataset = header; + search.zonecut_sigrdataset = NULL; +@@ -4504,18 +4515,19 @@ zone_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version, + goto node_exit; + } + if (nodep != NULL) { +- new_reference(search.rbtdb, node); ++ new_reference(search.rbtdb, node, isc_rwlocktype_read); + *nodep = node; + } + if ((search.rbtversion->secure == dns_db_secure && + !search.rbtversion->havensec3) || + (search.options & DNS_DBFIND_FORCENSEC) != 0) + { +- bind_rdataset(search.rbtdb, node, nsecheader, +- 0, rdataset); +- if (nsecsig != NULL) +- bind_rdataset(search.rbtdb, node, +- nsecsig, 0, sigrdataset); ++ bind_rdataset(search.rbtdb, node, nsecheader, 0, ++ isc_rwlocktype_read, rdataset); ++ if (nsecsig != NULL) { ++ bind_rdataset(search.rbtdb, node, nsecsig, 0, ++ isc_rwlocktype_read, sigrdataset); ++ } + } + if (wild) + foundname->attributes |= DNS_NAMEATTR_WILDCARD; +@@ -4581,18 +4593,21 @@ zone_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version, + } + + if (nodep != NULL) { +- if (!at_zonecut) +- new_reference(search.rbtdb, node); +- else ++ if (!at_zonecut) { ++ new_reference(search.rbtdb, node, isc_rwlocktype_read); ++ } else { + search.need_cleanup = false; ++ } + *nodep = node; + } + + if (type != dns_rdatatype_any) { +- bind_rdataset(search.rbtdb, node, found, 0, rdataset); +- if (foundsig != NULL) ++ bind_rdataset(search.rbtdb, node, found, 0, isc_rwlocktype_read, ++ rdataset); ++ if (foundsig != NULL) { + bind_rdataset(search.rbtdb, node, foundsig, 0, +- sigrdataset); ++ isc_rwlocktype_read, sigrdataset); ++ } + } + + if (wild) +@@ -4762,8 +4777,7 @@ cache_zonecut_callback(dns_rbtnode_t *node, dns_name_t *name, void *arg) { + * We increment the reference count on node to ensure that + * search->zonecut_rdataset will still be valid later. + */ +- new_reference(search->rbtdb, node); +- INSIST(!ISC_LINK_LINKED(node, deadlink)); ++ new_reference(search->rbtdb, node, locktype); + search->zonecut = node; + search->zonecut_rdataset = dname_header; + search->zonecut_sigrdataset = sigdname_header; +@@ -4869,14 +4883,16 @@ find_deepest_zonecut(rbtdb_search_t *search, dns_rbtnode_t *node, + } + result = DNS_R_DELEGATION; + if (nodep != NULL) { +- new_reference(search->rbtdb, node); ++ new_reference(search->rbtdb, node, locktype); + *nodep = node; + } + bind_rdataset(search->rbtdb, node, found, search->now, +- rdataset); +- if (foundsig != NULL) ++ locktype, rdataset); ++ if (foundsig != NULL) { + bind_rdataset(search->rbtdb, node, foundsig, +- search->now, sigrdataset); ++ search->now, locktype, ++ sigrdataset); ++ } + if (need_headerupdate(found, search->now) || + (foundsig != NULL && + need_headerupdate(foundsig, search->now))) { +@@ -4968,14 +4984,16 @@ find_coveringnsec(rbtdb_search_t *search, dns_dbnode_t **nodep, + if (found != NULL) { + result = dns_name_concatenate(name, origin, + foundname, NULL); +- if (result != ISC_R_SUCCESS) ++ if (result != ISC_R_SUCCESS) { + goto unlock_node; +- bind_rdataset(search->rbtdb, node, found, +- now, rdataset); +- if (foundsig != NULL) ++ } ++ bind_rdataset(search->rbtdb, node, found, now, locktype, ++ rdataset); ++ if (foundsig != NULL) { + bind_rdataset(search->rbtdb, node, foundsig, +- now, sigrdataset); +- new_reference(search->rbtdb, node); ++ now, locktype, sigrdataset); ++ } ++ new_reference(search->rbtdb, node, locktype); + *nodep = node; + result = DNS_R_COVERINGNSEC; + } else if (!empty_node) { +@@ -5230,19 +5248,21 @@ cache_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version, + */ + if (nsheader != NULL) { + if (nodep != NULL) { +- new_reference(search.rbtdb, node); +- INSIST(!ISC_LINK_LINKED(node, deadlink)); ++ new_reference(search.rbtdb, node, locktype); + *nodep = node; + } + bind_rdataset(search.rbtdb, node, nsheader, search.now, +- rdataset); +- if (need_headerupdate(nsheader, search.now)) ++ locktype, rdataset); ++ if (need_headerupdate(nsheader, search.now)) { + update = nsheader; ++ } + if (nssig != NULL) { + bind_rdataset(search.rbtdb, node, nssig, +- search.now, sigrdataset); +- if (need_headerupdate(nssig, search.now)) ++ search.now, locktype, ++ sigrdataset); ++ if (need_headerupdate(nssig, search.now)) { + updatesig = nssig; ++ } + } + result = DNS_R_DELEGATION; + goto node_exit; +@@ -5260,8 +5280,7 @@ cache_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version, + */ + + if (nodep != NULL) { +- new_reference(search.rbtdb, node); +- INSIST(!ISC_LINK_LINKED(node, deadlink)); ++ new_reference(search.rbtdb, node, locktype); + *nodep = node; + } + +@@ -5290,16 +5309,19 @@ cache_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version, + } + + if (type != dns_rdatatype_any || result == DNS_R_NCACHENXDOMAIN || +- result == DNS_R_NCACHENXRRSET) { +- bind_rdataset(search.rbtdb, node, found, search.now, ++ result == DNS_R_NCACHENXRRSET) ++ { ++ bind_rdataset(search.rbtdb, node, found, search.now, locktype, + rdataset); +- if (need_headerupdate(found, search.now)) ++ if (need_headerupdate(found, search.now)) { + update = found; ++ } + if (!NEGATIVE(found) && foundsig != NULL) { + bind_rdataset(search.rbtdb, node, foundsig, search.now, +- sigrdataset); +- if (need_headerupdate(foundsig, search.now)) ++ locktype, sigrdataset); ++ if (need_headerupdate(foundsig, search.now)) { + updatesig = foundsig; ++ } + } + } + +@@ -5445,15 +5467,16 @@ cache_findzonecut(dns_db_t *db, dns_name_t *name, unsigned int options, + } + + if (nodep != NULL) { +- new_reference(search.rbtdb, node); +- INSIST(!ISC_LINK_LINKED(node, deadlink)); ++ new_reference(search.rbtdb, node, locktype); + *nodep = node; + } + +- bind_rdataset(search.rbtdb, node, found, search.now, rdataset); +- if (foundsig != NULL) ++ bind_rdataset(search.rbtdb, node, found, search.now, locktype, ++ rdataset); ++ if (foundsig != NULL) { + bind_rdataset(search.rbtdb, node, foundsig, search.now, +- sigrdataset); ++ locktype, sigrdataset); ++ } + + if (need_headerupdate(found, search.now) || + (foundsig != NULL && need_headerupdate(foundsig, search.now))) { +@@ -5804,10 +5827,12 @@ zone_findrdataset(dns_db_t *db, dns_dbnode_t *node, dns_dbversion_t *version, + } + } + if (found != NULL) { +- bind_rdataset(rbtdb, rbtnode, found, now, rdataset); +- if (foundsig != NULL) ++ bind_rdataset(rbtdb, rbtnode, found, now, isc_rwlocktype_read, ++ rdataset); ++ if (foundsig != NULL) { + bind_rdataset(rbtdb, rbtnode, foundsig, now, +- sigrdataset); ++ isc_rwlocktype_read, sigrdataset); ++ } + } + + NODE_UNLOCK(&rbtdb->node_locks[rbtnode->locknum].lock, +@@ -5892,10 +5917,11 @@ cache_findrdataset(dns_db_t *db, dns_dbnode_t *node, dns_dbversion_t *version, + } + } + if (found != NULL) { +- bind_rdataset(rbtdb, rbtnode, found, now, rdataset); +- if (!NEGATIVE(found) && foundsig != NULL) +- bind_rdataset(rbtdb, rbtnode, foundsig, now, ++ bind_rdataset(rbtdb, rbtnode, found, now, locktype, rdataset); ++ if (!NEGATIVE(found) && foundsig != NULL) { ++ bind_rdataset(rbtdb, rbtnode, foundsig, now, locktype, + sigrdataset); ++ } + } + + NODE_UNLOCK(lock, locktype); +@@ -6061,6 +6087,9 @@ resign_insert(dns_rbtdb_t *rbtdb, int idx, rdatasetheader_t *newheader) { + return (result); + } + ++/* ++ * node write lock must be held. ++ */ + static void + resign_delete(dns_rbtdb_t *rbtdb, rbtdb_version_t *version, + rdatasetheader_t *header) +@@ -6073,7 +6102,8 @@ resign_delete(dns_rbtdb_t *rbtdb, rbtdb_version_t *version, + header->heap_index); + header->heap_index = 0; + if (version != NULL) { +- new_reference(rbtdb, header->node); ++ new_reference(rbtdb, header->node, ++ isc_rwlocktype_write); + ISC_LIST_APPEND(version->resigned_list, header, link); + } + } +@@ -6095,6 +6125,9 @@ update_recordsandbytes(bool add, rbtdb_version_t *rbtversion, + } + } + ++/* ++ * write lock on rbtnode must be held. ++ */ + static isc_result_t + add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion, + rdatasetheader_t *newheader, unsigned int options, bool loading, +@@ -6218,10 +6251,13 @@ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion, + free_rdataset(rbtdb, + rbtdb->common.mctx, + newheader); +- if (addedrdataset != NULL) +- bind_rdataset(rbtdb, rbtnode, +- topheader, now, +- addedrdataset); ++ if (addedrdataset != NULL) { ++ bind_rdataset( ++ rbtdb, rbtnode, ++ topheader, now, ++ isc_rwlocktype_write, ++ addedrdataset); ++ } + return (DNS_R_UNCHANGED); + } + /* +@@ -6275,6 +6311,7 @@ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion, + free_rdataset(rbtdb, rbtdb->common.mctx, newheader); + if (addedrdataset != NULL) + bind_rdataset(rbtdb, rbtnode, header, now, ++ isc_rwlocktype_write, + addedrdataset); + return (DNS_R_UNCHANGED); + } +@@ -6374,6 +6411,7 @@ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion, + free_rdataset(rbtdb, rbtdb->common.mctx, newheader); + if (addedrdataset != NULL) + bind_rdataset(rbtdb, rbtnode, header, now, ++ isc_rwlocktype_write, + addedrdataset); + return (ISC_R_SUCCESS); + } +@@ -6420,6 +6458,7 @@ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion, + free_rdataset(rbtdb, rbtdb->common.mctx, newheader); + if (addedrdataset != NULL) + bind_rdataset(rbtdb, rbtnode, header, now, ++ isc_rwlocktype_write, + addedrdataset); + return (ISC_R_SUCCESS); + } +@@ -6617,8 +6656,10 @@ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion, + cname_and_other_data(rbtnode, rbtversion->serial)) + return (DNS_R_CNAMEANDOTHER); + +- if (addedrdataset != NULL) +- bind_rdataset(rbtdb, rbtnode, newheader, now, addedrdataset); ++ if (addedrdataset != NULL) { ++ bind_rdataset(rbtdb, rbtnode, newheader, now, ++ isc_rwlocktype_write, addedrdataset); ++ } + + return (ISC_R_SUCCESS); + } +@@ -7141,12 +7182,17 @@ subtractrdataset(dns_db_t *db, dns_dbnode_t *node, dns_dbversion_t *version, + result = DNS_R_UNCHANGED; + } + +- if (result == ISC_R_SUCCESS && newrdataset != NULL) +- bind_rdataset(rbtdb, rbtnode, newheader, 0, newrdataset); ++ if (result == ISC_R_SUCCESS && newrdataset != NULL) { ++ bind_rdataset(rbtdb, rbtnode, newheader, 0, ++ isc_rwlocktype_write, newrdataset); ++ } + + if (result == DNS_R_NXRRSET && newrdataset != NULL && + (options & DNS_DBSUB_WANTOLD) != 0) +- bind_rdataset(rbtdb, rbtnode, header, 0, newrdataset); ++ { ++ bind_rdataset(rbtdb, rbtnode, header, 0, isc_rwlocktype_write, ++ newrdataset); ++ } + + unlock: + NODE_UNLOCK(&rbtdb->node_locks[rbtnode->locknum].lock, +@@ -8057,7 +8103,7 @@ getoriginnode(dns_db_t *db, dns_dbnode_t **nodep) { + onode = (dns_rbtnode_t *)rbtdb->origin_node; + if (onode != NULL) { + NODE_STRONGLOCK(&rbtdb->node_locks[onode->locknum].lock); +- new_reference(rbtdb, onode); ++ new_reference(rbtdb, onode, isc_rwlocktype_none); + NODE_STRONGUNLOCK(&rbtdb->node_locks[onode->locknum].lock); + + *nodep = rbtdb->origin_node; +@@ -8222,7 +8268,7 @@ getsigningtime(dns_db_t *db, dns_rdataset_t *rdataset, + if (header == NULL) + goto unlock; + +- bind_rdataset(rbtdb, header->node, header, 0, rdataset); ++ bind_rdataset(rbtdb, header->node, header, 0, isc_rwlocktype_read, rdataset); + + if (foundname != NULL) + dns_rbt_fullnamefromnode(header->node, foundname); +@@ -9214,7 +9260,7 @@ rdatasetiter_current(dns_rdatasetiter_t *iterator, dns_rdataset_t *rdataset) { + isc_rwlocktype_read); + + bind_rdataset(rbtdb, rbtnode, header, rbtiterator->common.now, +- rdataset); ++ isc_rwlocktype_read, rdataset); + + NODE_UNLOCK(&rbtdb->node_locks[rbtnode->locknum].lock, + isc_rwlocktype_read); +@@ -9650,7 +9696,7 @@ dbiterator_current(dns_dbiterator_t *iterator, dns_dbnode_t **nodep, + result = ISC_R_SUCCESS; + + NODE_STRONGLOCK(&rbtdb->node_locks[node->locknum].lock); +- new_reference(rbtdb, node); ++ new_reference(rbtdb, node, isc_rwlocktype_none); + NODE_STRONGUNLOCK(&rbtdb->node_locks[node->locknum].lock); + + *nodep = rbtdbiter->node; +@@ -10405,7 +10451,7 @@ expire_header(dns_rbtdb_t *rbtdb, rdatasetheader_t *header, + * We first need to gain a new reference to the node to meet a + * requirement of decrement_reference(). + */ +- new_reference(rbtdb, header->node); ++ new_reference(rbtdb, header->node, isc_rwlocktype_write); + decrement_reference(rbtdb, header->node, 0, + isc_rwlocktype_write, + tree_locked ? isc_rwlocktype_write : diff --git a/debian/patches/0021-Always-keep-a-copy-of-the-message.patch b/debian/patches/0021-Always-keep-a-copy-of-the-message.patch new file mode 100644 index 0000000..4edc752 --- /dev/null +++ b/debian/patches/0021-Always-keep-a-copy-of-the-message.patch @@ -0,0 +1,55 @@ +From: Mark Andrews <marka@isc.org> +Date: Wed, 15 Jul 2020 16:07:51 +1000 +Subject: Always keep a copy of the message + +Origin: https://gitlab.isc.org/isc-projects/bind9/commit/6ed167ad0a647dff20c8cb08c944a7967df2d415 +Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-8622 + +this allows it to be available even when dns_message_parse() +returns a error. +--- + lib/dns/message.c | 24 +++++++++++++----------- + 1 file changed, 13 insertions(+), 11 deletions(-) + +diff --git a/lib/dns/message.c b/lib/dns/message.c +index ac637a2..39ed80f 100644 +--- a/lib/dns/message.c ++++ b/lib/dns/message.c +@@ -1679,6 +1679,19 @@ dns_message_parse(dns_message_t *msg, isc_buffer_t *source, + msg->header_ok = 0; + msg->question_ok = 0; + ++ if ((options & DNS_MESSAGEPARSE_CLONEBUFFER) == 0) { ++ isc_buffer_usedregion(&origsource, &msg->saved); ++ } else { ++ msg->saved.length = isc_buffer_usedlength(&origsource); ++ msg->saved.base = isc_mem_get(msg->mctx, msg->saved.length); ++ if (msg->saved.base == NULL) { ++ return (ISC_R_NOMEMORY); ++ } ++ memmove(msg->saved.base, isc_buffer_base(&origsource), ++ msg->saved.length); ++ msg->free_saved = 1; ++ } ++ + isc_buffer_remainingregion(source, &r); + if (r.length < DNS_MESSAGE_HEADERLEN) + return (ISC_R_UNEXPECTEDEND); +@@ -1754,17 +1767,6 @@ dns_message_parse(dns_message_t *msg, isc_buffer_t *source, + } + + truncated: +- if ((options & DNS_MESSAGEPARSE_CLONEBUFFER) == 0) +- isc_buffer_usedregion(&origsource, &msg->saved); +- else { +- msg->saved.length = isc_buffer_usedlength(&origsource); +- msg->saved.base = isc_mem_get(msg->mctx, msg->saved.length); +- if (msg->saved.base == NULL) +- return (ISC_R_NOMEMORY); +- memmove(msg->saved.base, isc_buffer_base(&origsource), +- msg->saved.length); +- msg->free_saved = 1; +- } + + if (ret == ISC_R_UNEXPECTEDEND && ignore_tc) + return (DNS_R_RECOVERABLE); diff --git a/debian/patches/0022-Fix-crash-in-pk11_numbits-when-native-pkcs11-is-used.patch b/debian/patches/0022-Fix-crash-in-pk11_numbits-when-native-pkcs11-is-used.patch new file mode 100644 index 0000000..b321616 --- /dev/null +++ b/debian/patches/0022-Fix-crash-in-pk11_numbits-when-native-pkcs11-is-used.patch @@ -0,0 +1,400 @@ +From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@isc.org> +Date: Tue, 21 Jul 2020 14:42:47 +0200 +Subject: Fix crash in pk11_numbits() when native-pkcs11 is used + +origin: https://gitlab.isc.org/isc-projects/bind9/commit/8d807cc21655eaa6e6a08afafeec3682c0f3f2ab +Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-8623 + +When pk11_numbits() is passed a user provided input that contains all +zeroes (via crafted DNS message), it would crash with assertion +failure. Fix that by properly handling such input. + +[Salvatore Bonaccorso: Backport to 99.11.5.P4 which does not contain +9d15323e2484 ("Add small tweaks to the code to fix compilation when ISC +assertions are disabled")] +--- + lib/dns/pkcs11dh_link.c | 15 ++++++-- + lib/dns/pkcs11dsa_link.c | 8 ++++- + lib/dns/pkcs11rsa_link.c | 79 +++++++++++++++++++++++++++++++---------- + lib/isc/include/pk11/internal.h | 3 +- + lib/isc/pk11.c | 60 ++++++++++++++++++++----------- + 5 files changed, 121 insertions(+), 44 deletions(-) + +diff --git a/lib/dns/pkcs11dh_link.c b/lib/dns/pkcs11dh_link.c +index e2b60ea..4cd8e32 100644 +--- a/lib/dns/pkcs11dh_link.c ++++ b/lib/dns/pkcs11dh_link.c +@@ -748,6 +748,7 @@ pkcs11dh_fromdns(dst_key_t *key, isc_buffer_t *data) { + CK_BYTE *prime = NULL, *base = NULL, *pub = NULL; + CK_ATTRIBUTE *attr; + int special = 0; ++ unsigned int bits; + isc_result_t result; + + isc_buffer_remainingregion(data, &r); +@@ -852,7 +853,11 @@ pkcs11dh_fromdns(dst_key_t *key, isc_buffer_t *data) { + pub = r.base; + isc_region_consume(&r, publen); + +- key->key_size = pk11_numbits(prime, plen_); ++ result = pk11_numbits(prime, plen_, &bits); ++ if (result != ISC_R_SUCCESS) { ++ goto cleanup; ++ } ++ key->key_size = bits; + + dh->repr = (CK_ATTRIBUTE *) isc_mem_get(key->mctx, sizeof(*attr) * 3); + if (dh->repr == NULL) +@@ -1012,6 +1017,7 @@ pkcs11dh_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) { + dst_private_t priv; + isc_result_t ret; + int i; ++ unsigned int bits; + pk11_object_t *dh = NULL; + CK_ATTRIBUTE *attr; + isc_mem_t *mctx; +@@ -1082,7 +1088,12 @@ pkcs11dh_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) { + + attr = pk11_attribute_bytype(dh, CKA_PRIME); + INSIST(attr != NULL); +- key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen); ++ ++ ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits); ++ if (ret != ISC_R_SUCCESS) { ++ goto err; ++ } ++ key->key_size = bits; + + return (ISC_R_SUCCESS); + +diff --git a/lib/dns/pkcs11dsa_link.c b/lib/dns/pkcs11dsa_link.c +index 12d707a..24d4c14 100644 +--- a/lib/dns/pkcs11dsa_link.c ++++ b/lib/dns/pkcs11dsa_link.c +@@ -983,6 +983,7 @@ pkcs11dsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) { + dst_private_t priv; + isc_result_t ret; + int i; ++ unsigned int bits; + pk11_object_t *dsa = NULL; + CK_ATTRIBUTE *attr; + isc_mem_t *mctx = key->mctx; +@@ -1072,7 +1073,12 @@ pkcs11dsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) { + + attr = pk11_attribute_bytype(dsa, CKA_PRIME); + INSIST(attr != NULL); +- key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen); ++ ++ ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits); ++ if (ret != ISC_R_SUCCESS) { ++ goto err; ++ } ++ key->key_size = bits; + + return (ISC_R_SUCCESS); + +diff --git a/lib/dns/pkcs11rsa_link.c b/lib/dns/pkcs11rsa_link.c +index eb782c8..57ee41d 100644 +--- a/lib/dns/pkcs11rsa_link.c ++++ b/lib/dns/pkcs11rsa_link.c +@@ -330,6 +330,7 @@ pkcs11rsa_createctx_verify(dst_key_t *key, unsigned int maxbits, + key->key_alg == DST_ALG_RSASHA256 || + key->key_alg == DST_ALG_RSASHA512); + #endif ++ REQUIRE(maxbits <= RSA_MAX_PUBEXP_BITS); + + /* + * Reject incorrect RSA key lengths. +@@ -373,6 +374,7 @@ pkcs11rsa_createctx_verify(dst_key_t *key, unsigned int maxbits, + for (attr = pk11_attribute_first(rsa); + attr != NULL; + attr = pk11_attribute_next(rsa, attr)) ++ { + switch (attr->type) { + case CKA_MODULUS: + INSIST(keyTemplate[5].type == attr->type); +@@ -393,12 +395,16 @@ pkcs11rsa_createctx_verify(dst_key_t *key, unsigned int maxbits, + memmove(keyTemplate[6].pValue, attr->pValue, + attr->ulValueLen); + keyTemplate[6].ulValueLen = attr->ulValueLen; +- if (pk11_numbits(attr->pValue, +- attr->ulValueLen) > maxbits && +- maxbits != 0) ++ unsigned int bits; ++ ret = pk11_numbits(attr->pValue, attr->ulValueLen, ++ &bits); ++ if (ret != ISC_R_SUCCESS || ++ (bits > maxbits && maxbits != 0)) { + DST_RET(DST_R_VERIFYFAILURE); ++ } + break; + } ++ } + pk11_ctx->object = CK_INVALID_HANDLE; + pk11_ctx->ontoken = false; + PK11_RET(pkcs_C_CreateObject, +@@ -1063,6 +1069,7 @@ pkcs11rsa_verify(dst_context_t *dctx, const isc_region_t *sig) { + keyTemplate[5].ulValueLen = attr->ulValueLen; + break; + case CKA_PUBLIC_EXPONENT: ++ unsigned int bits; + INSIST(keyTemplate[6].type == attr->type); + keyTemplate[6].pValue = isc_mem_get(dctx->mctx, + attr->ulValueLen); +@@ -1071,10 +1078,12 @@ pkcs11rsa_verify(dst_context_t *dctx, const isc_region_t *sig) { + memmove(keyTemplate[6].pValue, attr->pValue, + attr->ulValueLen); + keyTemplate[6].ulValueLen = attr->ulValueLen; +- if (pk11_numbits(attr->pValue, +- attr->ulValueLen) +- > RSA_MAX_PUBEXP_BITS) ++ ret = pk11_numbits(attr->pValue, attr->ulValueLen, ++ &bits); ++ if (ret != ISC_R_SUCCESS || bits > RSA_MAX_PUBEXP_BITS) ++ { + DST_RET(DST_R_VERIFYFAILURE); ++ } + break; + } + pk11_ctx->object = CK_INVALID_HANDLE; +@@ -1451,6 +1460,8 @@ pkcs11rsa_fromdns(dst_key_t *key, isc_buffer_t *data) { + CK_BYTE *exponent = NULL, *modulus = NULL; + CK_ATTRIBUTE *attr; + unsigned int length; ++ unsigned int bits; ++ isc_result_t ret = ISC_R_SUCCESS; + + isc_buffer_remainingregion(data, &r); + if (r.length == 0) +@@ -1468,9 +1479,7 @@ pkcs11rsa_fromdns(dst_key_t *key, isc_buffer_t *data) { + + if (e_bytes == 0) { + if (r.length < 2) { +- isc_safe_memwipe(rsa, sizeof(*rsa)); +- isc_mem_put(key->mctx, rsa, sizeof(*rsa)); +- return (DST_R_INVALIDPUBLICKEY); ++ DST_RET(DST_R_INVALIDPUBLICKEY); + } + e_bytes = (*r.base) << 8; + isc_region_consume(&r, 1); +@@ -1479,16 +1488,18 @@ pkcs11rsa_fromdns(dst_key_t *key, isc_buffer_t *data) { + } + + if (r.length < e_bytes) { +- isc_safe_memwipe(rsa, sizeof(*rsa)); +- isc_mem_put(key->mctx, rsa, sizeof(*rsa)); +- return (DST_R_INVALIDPUBLICKEY); ++ DST_RET(DST_R_INVALIDPUBLICKEY); + } + exponent = r.base; + isc_region_consume(&r, e_bytes); + modulus = r.base; + mod_bytes = r.length; + +- key->key_size = pk11_numbits(modulus, mod_bytes); ++ ret = pk11_numbits(modulus, mod_bytes, &bits); ++ if (ret != ISC_R_SUCCESS) { ++ goto err; ++ } ++ key->key_size = bits; + + isc_buffer_forward(data, length); + +@@ -1538,9 +1549,12 @@ pkcs11rsa_fromdns(dst_key_t *key, isc_buffer_t *data) { + rsa->repr, + rsa->attrcnt * sizeof(*attr)); + } ++ ret = ISC_R_NOMEMORY; ++ ++ err: + isc_safe_memwipe(rsa, sizeof(*rsa)); + isc_mem_put(key->mctx, rsa, sizeof(*rsa)); +- return (ISC_R_NOMEMORY); ++ return (ret); + } + + static isc_result_t +@@ -1719,6 +1733,7 @@ pkcs11rsa_fetch(dst_key_t *key, const char *engine, const char *label, + pk11_object_t *pubrsa; + pk11_context_t *pk11_ctx = NULL; + isc_result_t ret; ++ unsigned int bits; + + if (label == NULL) + return (DST_R_NOENGINE); +@@ -1803,7 +1818,11 @@ pkcs11rsa_fetch(dst_key_t *key, const char *engine, const char *label, + + attr = pk11_attribute_bytype(rsa, CKA_MODULUS); + INSIST(attr != NULL); +- key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen); ++ ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits); ++ if (ret != ISC_R_SUCCESS) { ++ goto err; ++ } ++ key->key_size = bits; + + return (ISC_R_SUCCESS); + +@@ -1889,6 +1908,7 @@ pkcs11rsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) { + CK_ATTRIBUTE *attr; + isc_mem_t *mctx = key->mctx; + const char *engine = NULL, *label = NULL; ++ unsigned int bits; + + /* read private key file */ + ret = dst__privstruct_parse(key, DST_ALG_RSA, lexer, mctx, &priv); +@@ -2032,12 +2052,22 @@ pkcs11rsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) { + + attr = pk11_attribute_bytype(rsa, CKA_MODULUS); + INSIST(attr != NULL); +- key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen); ++ ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits); ++ if (ret != ISC_R_SUCCESS) { ++ goto err; ++ } ++ key->key_size = bits; + + attr = pk11_attribute_bytype(rsa, CKA_PUBLIC_EXPONENT); + INSIST(attr != NULL); +- if (pk11_numbits(attr->pValue, attr->ulValueLen) > RSA_MAX_PUBEXP_BITS) ++ ++ ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits); ++ if (ret != ISC_R_SUCCESS) { ++ goto err; ++ } ++ if (bits > RSA_MAX_PUBEXP_BITS) { + DST_RET(ISC_R_RANGE); ++ } + + dst__privstruct_free(&priv, mctx); + isc_safe_memwipe(&priv, sizeof(priv)); +@@ -2072,6 +2102,7 @@ pkcs11rsa_fromlabel(dst_key_t *key, const char *engine, const char *label, + pk11_context_t *pk11_ctx = NULL; + isc_result_t ret; + unsigned int i; ++ unsigned int bits; + + UNUSED(pin); + +@@ -2166,12 +2197,22 @@ pkcs11rsa_fromlabel(dst_key_t *key, const char *engine, const char *label, + + attr = pk11_attribute_bytype(rsa, CKA_PUBLIC_EXPONENT); + INSIST(attr != NULL); +- if (pk11_numbits(attr->pValue, attr->ulValueLen) > RSA_MAX_PUBEXP_BITS) ++ ++ ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits); ++ if (ret != ISC_R_SUCCESS) { ++ goto err; ++ } ++ if (bits > RSA_MAX_PUBEXP_BITS) { + DST_RET(ISC_R_RANGE); ++ } + + attr = pk11_attribute_bytype(rsa, CKA_MODULUS); + INSIST(attr != NULL); +- key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen); ++ ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits); ++ if (ret != ISC_R_SUCCESS) { ++ goto err; ++ } ++ key->key_size = bits; + + pk11_return_session(pk11_ctx); + isc_safe_memwipe(pk11_ctx, sizeof(*pk11_ctx)); +diff --git a/lib/isc/include/pk11/internal.h b/lib/isc/include/pk11/internal.h +index aa8907a..7cc8ec8 100644 +--- a/lib/isc/include/pk11/internal.h ++++ b/lib/isc/include/pk11/internal.h +@@ -25,7 +25,8 @@ void pk11_mem_put(void *ptr, size_t size); + + CK_SLOT_ID pk11_get_best_token(pk11_optype_t optype); + +-unsigned int pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt); ++isc_result_t ++pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt, unsigned int *bits); + + CK_ATTRIBUTE *pk11_attribute_first(const pk11_object_t *obj); + +diff --git a/lib/isc/pk11.c b/lib/isc/pk11.c +index c5d2310..b2ab6be 100644 +--- a/lib/isc/pk11.c ++++ b/lib/isc/pk11.c +@@ -962,13 +962,15 @@ pk11_get_best_token(pk11_optype_t optype) { + return (token->slotid); + } + +-unsigned int +-pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt) { ++isc_result_t ++pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt, unsigned int *bits) { + unsigned int bitcnt, i; + CK_BYTE top; + +- if (bytecnt == 0) +- return (0); ++ if (bytecnt == 0) { ++ *bits = 0; ++ return (ISC_R_SUCCESS); ++ } + bitcnt = bytecnt * 8; + for (i = 0; i < bytecnt; i++) { + top = data[i]; +@@ -976,25 +978,41 @@ pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt) { + bitcnt -= 8; + continue; + } +- if (top & 0x80) +- return (bitcnt); +- if (top & 0x40) +- return (bitcnt - 1); +- if (top & 0x20) +- return (bitcnt - 2); +- if (top & 0x10) +- return (bitcnt - 3); +- if (top & 0x08) +- return (bitcnt - 4); +- if (top & 0x04) +- return (bitcnt - 5); +- if (top & 0x02) +- return (bitcnt - 6); +- if (top & 0x01) +- return (bitcnt - 7); ++ if (top & 0x80) { ++ *bits = bitcnt; ++ return (ISC_R_SUCCESS); ++ } ++ if (top & 0x40) { ++ *bits = bitcnt - 1; ++ return (ISC_R_SUCCESS); ++ } ++ if (top & 0x20) { ++ *bits = bitcnt - 2; ++ return (ISC_R_SUCCESS); ++ } ++ if (top & 0x10) { ++ *bits = bitcnt - 3; ++ return (ISC_R_SUCCESS); ++ } ++ if (top & 0x08) { ++ *bits = bitcnt - 4; ++ return (ISC_R_SUCCESS); ++ } ++ if (top & 0x04) { ++ *bits = bitcnt - 5; ++ return (ISC_R_SUCCESS); ++ } ++ if (top & 0x02) { ++ *bits = bitcnt - 6; ++ return (ISC_R_SUCCESS); ++ } ++ if (top & 0x01) { ++ *bits = bitcnt - 7; ++ return (ISC_R_SUCCESS); ++ } + break; + } +- INSIST(0); ++ return (ISC_R_RANGE); + } + + CK_ATTRIBUTE * diff --git a/debian/patches/0023-Wait-more-than-1-second-for-NSEC3-chain-changes.patch b/debian/patches/0023-Wait-more-than-1-second-for-NSEC3-chain-changes.patch new file mode 100644 index 0000000..6f2593c --- /dev/null +++ b/debian/patches/0023-Wait-more-than-1-second-for-NSEC3-chain-changes.patch @@ -0,0 +1,71 @@ +From: =?utf-8?b?TWljaGHFgiBLxJlwaWXFhA==?= <michal@isc.org> +Date: Tue, 23 Apr 2019 14:59:05 +0200 +Subject: Wait more than 1 second for NSEC3 chain changes + +Origin: https://gitlab.isc.org/isc-projects/bind9/commit/4e2cc911d2ceb90ec04605451fb1bb518ef75cd0 + +One second may not be enough for an NSEC3 chain change triggered by an +UPDATE message to complete. Wait up to 10 seconds when checking whether +a given NSEC3 chain change is complete in the "nsupdate" system test. + +(cherry picked from commit f8746cddbce838fec2a28f00617df6af1319fbc8) +--- + bin/tests/system/nsupdate/tests.sh | 30 +++++++++++++++++++++--------- + 1 file changed, 21 insertions(+), 9 deletions(-) + +diff --git a/bin/tests/system/nsupdate/tests.sh b/bin/tests/system/nsupdate/tests.sh +index 9f26572..c72753b 100755 +--- a/bin/tests/system/nsupdate/tests.sh ++++ b/bin/tests/system/nsupdate/tests.sh +@@ -454,18 +454,24 @@ grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1 + + n=`expr $n + 1` + ret=0 +-echo_i "add a new the NSEC3PARAM via update ($n)" ++echo_i "add a new NSEC3PARAM via update ($n)" + $NSUPDATE << EOF + server 10.53.0.3 ${PORT} + update add nsec3param.test 3600 NSEC3PARAM 1 0 4 - + send + EOF + +-sleep 1 ++_ret=1 ++for i in 0 1 2 3 4 5 6 7 8 9; do ++ $DIG $DIGOPTS +tcp +norec +time=1 +tries=1 @10.53.0.3 nsec3param.test. NSEC3PARAM > dig.out.ns3.$n || _ret=1 ++ if grep "ANSWER: 2" dig.out.ns3.$n > /dev/null; then ++ _ret=0 ++ break ++ fi ++ sleep 1 ++done + +-$DIG $DIGOPTS +tcp +noadd +nosea +nostat +noquest +nocmd +norec nsec3param.test.\ +- @10.53.0.3 nsec3param > dig.out.ns3.$n || ret=1 +-grep "ANSWER: 2" dig.out.ns3.$n > /dev/null || ret=1 ++if [ $_ret -ne 0 ]; then ret=1; fi + grep "NSEC3PARAM 1 0 4 -" dig.out.ns3.$n > /dev/null || ret=1 + grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1 + if [ $ret != 0 ] ; then echo_i "failed"; status=`expr $ret + $status`; fi +@@ -480,11 +486,17 @@ update add nsec3param.test 7200 NSEC3PARAM 1 0 5 - + send + EOF + +-sleep 1 ++_ret=1 ++for i in 0 1 2 3 4 5 6 7 8 9; do ++ $DIG $DIGOPTS +tcp +norec +time=1 +tries=1 @10.53.0.3 nsec3param.test. NSEC3PARAM > dig.out.ns3.$n || _ret=1 ++ if grep "ANSWER: 1" dig.out.ns3.$n > /dev/null; then ++ _ret=0 ++ break ++ fi ++ sleep 1 ++done + +-$DIG $DIGOPTS +tcp +noadd +nosea +nostat +noquest +nocmd +norec nsec3param.test.\ +- @10.53.0.3 nsec3param > dig.out.ns3.$n || ret=1 +-grep "ANSWER: 1" dig.out.ns3.$n > /dev/null || ret=1 ++if [ $_ret -ne 0 ]; then ret=1; fi + grep "7200.*NSEC3PARAM 1 0 5 -" dig.out.ns3.$n > /dev/null || ret=1 + grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1 + $JOURNALPRINT ns3/nsec3param.test.db.signed.jnl > jp.out.ns3.$n diff --git a/debian/patches/0024-Update-policy-subdomain-was-incorrectly-treated-as-z.patch b/debian/patches/0024-Update-policy-subdomain-was-incorrectly-treated-as-z.patch new file mode 100644 index 0000000..b2e6ac9 --- /dev/null +++ b/debian/patches/0024-Update-policy-subdomain-was-incorrectly-treated-as-z.patch @@ -0,0 +1,27 @@ +From: Mark Andrews <marka@isc.org> +Date: Wed, 29 Jul 2020 23:36:03 +1000 +Subject: [1/3] Update-policy 'subdomain' was incorrectly treated as 'zonesub' + +Origin: https://gitlab.isc.org/isc-projects/bind9/commit/e4cccf9668c7adee4724a7649ec64685f82c8677 +Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-8624 + +resulting in names outside the specified subdomain having the wrong +restrictions for the given key. +--- + bin/named/zoneconf.c | 3 ++- + 1 file changed, 2 insertions(+), 1 deletion(-) + +diff --git a/bin/named/zoneconf.c b/bin/named/zoneconf.c +index e237bdb..4898447 100644 +--- a/bin/named/zoneconf.c ++++ b/bin/named/zoneconf.c +@@ -237,7 +237,8 @@ configure_zone_ssutable(const cfg_obj_t *zconfig, dns_zone_t *zone, + + str = cfg_obj_asstring(matchtype); + CHECK(dns_ssu_mtypefromstring(str, &mtype)); +- if (mtype == dns_ssumatchtype_subdomain) { ++ if (mtype == dns_ssumatchtype_subdomain && ++ strcasecmp(str, "zonesub") == 0) { + usezone = true; + } + diff --git a/debian/patches/0025-Add-a-test-for-update-policy-subdomain.patch b/debian/patches/0025-Add-a-test-for-update-policy-subdomain.patch new file mode 100644 index 0000000..adcc70d --- /dev/null +++ b/debian/patches/0025-Add-a-test-for-update-policy-subdomain.patch @@ -0,0 +1,73 @@ +From: Mark Andrews <marka@isc.org> +Date: Wed, 29 Jul 2020 23:36:03 +1000 +Subject: [2/3] Add a test for update-policy 'subdomain' + +Origin: https://gitlab.isc.org/isc-projects/bind9/commit/393e8f643c02215fa4e6d4edf67be7d77085da0e +Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-8624 + +The new test checks that 'update-policy subdomain' is properly enforced. +--- + bin/tests/system/nsupdate/ns1/named.conf.in | 6 ++++++ + bin/tests/system/nsupdate/tests.sh | 25 +++++++++++++++++++++++++ + 2 files changed, 31 insertions(+) + +diff --git a/bin/tests/system/nsupdate/ns1/named.conf.in b/bin/tests/system/nsupdate/ns1/named.conf.in +index 1d999ad..87904f4 100644 +--- a/bin/tests/system/nsupdate/ns1/named.conf.in ++++ b/bin/tests/system/nsupdate/ns1/named.conf.in +@@ -36,6 +36,11 @@ key altkey { + secret "1234abcd8765"; + }; + ++key restricted.example.nil { ++ algorithm hmac-md5; ++ secret "1234abcd8765"; ++}; ++ + include "ddns.key"; + + zone "example.nil" { +@@ -45,6 +50,7 @@ zone "example.nil" { + check-mx ignore; + update-policy { + grant ddns-key.example.nil subdomain example.nil ANY; ++ grant restricted.example.nil subdomain restricted.example.nil ANY; + }; + allow-transfer { any; }; + }; +diff --git a/bin/tests/system/nsupdate/tests.sh b/bin/tests/system/nsupdate/tests.sh +index c72753b..432240e 100755 +--- a/bin/tests/system/nsupdate/tests.sh ++++ b/bin/tests/system/nsupdate/tests.sh +@@ -635,6 +635,31 @@ then + echo_i "failed"; status=1 + fi + ++n=`expr $n + 1` ++ret=0 ++echo_i "check that 'update-policy subdomain' is properly enforced ($n)" ++# "restricted.example.nil" matches "grant ... subdomain restricted.example.nil" ++# and thus this UPDATE should succeed. ++$NSUPDATE -d <<END > nsupdate.out1-$n 2>&1 || ret=1 ++server 10.53.0.1 ${PORT} ++key restricted.example.nil 1234abcd8765 ++update add restricted.example.nil 0 IN TXT everywhere. ++send ++END ++$DIG $DIGOPTS +tcp @10.53.0.1 restricted.example.nil TXT > dig.out.1.test$n || ret=1 ++grep "TXT.*everywhere" dig.out.1.test$n > /dev/null || ret=1 ++# "example.nil" does not match "grant ... subdomain restricted.example.nil" and ++# thus this UPDATE should fail. ++$NSUPDATE -d <<END > nsupdate.out2-$n 2>&1 && ret=1 ++server 10.53.0.1 ${PORT} ++key restricted.example.nil 1234abcd8765 ++update add example.nil 0 IN TXT everywhere. ++send ++END ++$DIG $DIGOPTS +tcp @10.53.0.1 example.nil TXT > dig.out.2.test$n || ret=1 ++grep "TXT.*everywhere" dig.out.2.test$n > /dev/null && ret=1 ++[ $ret = 0 ] || { echo_i "failed"; status=1; } ++ + n=`expr $n + 1` + ret=0 + echo_i "check that changes to the DNSKEY RRset TTL do not have side effects ($n)" diff --git a/debian/patches/0026-Add-a-test-for-update-policy-zonesub.patch b/debian/patches/0026-Add-a-test-for-update-policy-zonesub.patch new file mode 100644 index 0000000..771c46c --- /dev/null +++ b/debian/patches/0026-Add-a-test-for-update-policy-zonesub.patch @@ -0,0 +1,111 @@ +From: Mark Andrews <marka@isc.org> +Date: Tue, 4 Aug 2020 11:41:33 +1000 +Subject: [3/3] Add a test for update-policy 'zonesub' + +Origin: https://gitlab.isc.org/isc-projects/bind9/commit/58e560beb50873c699f3431cf57e215dc645d7aa +Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-8624 + +The new test checks that 'update-policy zonesub' is properly enforced. +--- + bin/tests/system/nsupdate/ns1/named.conf.in | 6 +++++ + bin/tests/system/nsupdate/tests.sh | 35 +++++++++++++++++++++++++---- + 2 files changed, 37 insertions(+), 4 deletions(-) + +diff --git a/bin/tests/system/nsupdate/ns1/named.conf.in b/bin/tests/system/nsupdate/ns1/named.conf.in +index 87904f4..e90907a 100644 +--- a/bin/tests/system/nsupdate/ns1/named.conf.in ++++ b/bin/tests/system/nsupdate/ns1/named.conf.in +@@ -41,6 +41,11 @@ key restricted.example.nil { + secret "1234abcd8765"; + }; + ++key zonesub-key.example.nil { ++ algorithm hmac-md5; ++ secret "1234subk8765"; ++}; ++ + include "ddns.key"; + + zone "example.nil" { +@@ -49,6 +54,7 @@ zone "example.nil" { + check-integrity no; + check-mx ignore; + update-policy { ++ grant zonesub-key.example.nil zonesub TXT; + grant ddns-key.example.nil subdomain example.nil ANY; + grant restricted.example.nil subdomain restricted.example.nil ANY; + }; +diff --git a/bin/tests/system/nsupdate/tests.sh b/bin/tests/system/nsupdate/tests.sh +index 432240e..f2f26ab 100755 +--- a/bin/tests/system/nsupdate/tests.sh ++++ b/bin/tests/system/nsupdate/tests.sh +@@ -430,7 +430,7 @@ sleep 1 + # this also proves that the server is still running. + $DIG $DIGOPTS +tcp +noadd +nosea +nostat +noquest +nocmd +norec example.\ + @10.53.0.3 nsec3param > dig.out.ns3.$n || ret=1 +-grep "ANSWER: 0" dig.out.ns3.$n > /dev/null || ret=1 ++grep "ANSWER: 0," dig.out.ns3.$n > /dev/null || ret=1 + grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1 + [ $ret = 0 ] || { echo_i "failed"; status=1; } + +@@ -447,7 +447,7 @@ sleep 1 + + $DIG $DIGOPTS +tcp +noadd +nosea +nostat +noquest +nocmd +norec nsec3param.test.\ + @10.53.0.3 nsec3param > dig.out.ns3.$n || ret=1 +-grep "ANSWER: 1" dig.out.ns3.$n > /dev/null || ret=1 ++grep "ANSWER: 1," dig.out.ns3.$n > /dev/null || ret=1 + grep "3600.*NSEC3PARAM" dig.out.ns3.$n > /dev/null || ret=1 + grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1 + [ $ret = 0 ] || { echo_i "failed"; status=1; } +@@ -464,7 +464,7 @@ EOF + _ret=1 + for i in 0 1 2 3 4 5 6 7 8 9; do + $DIG $DIGOPTS +tcp +norec +time=1 +tries=1 @10.53.0.3 nsec3param.test. NSEC3PARAM > dig.out.ns3.$n || _ret=1 +- if grep "ANSWER: 2" dig.out.ns3.$n > /dev/null; then ++ if grep "ANSWER: 2," dig.out.ns3.$n > /dev/null; then + _ret=0 + break + fi +@@ -489,7 +489,7 @@ EOF + _ret=1 + for i in 0 1 2 3 4 5 6 7 8 9; do + $DIG $DIGOPTS +tcp +norec +time=1 +tries=1 @10.53.0.3 nsec3param.test. NSEC3PARAM > dig.out.ns3.$n || _ret=1 +- if grep "ANSWER: 1" dig.out.ns3.$n > /dev/null; then ++ if grep "ANSWER: 1," dig.out.ns3.$n > /dev/null; then + _ret=0 + break + fi +@@ -660,6 +660,33 @@ $DIG $DIGOPTS +tcp @10.53.0.1 example.nil TXT > dig.out.2.test$n || ret=1 + grep "TXT.*everywhere" dig.out.2.test$n > /dev/null && ret=1 + [ $ret = 0 ] || { echo_i "failed"; status=1; } + ++n=`expr $n + 1` ++ret=0 ++echo_i "check that 'update-policy zonesub' is properly enforced ($n)" ++# grant zonesub-key.example.nil zonesub TXT; ++# the A record update should be rejected as it is not in the type list ++$NSUPDATE -d <<END > nsupdate.out1-$n 2>&1 && ret=1 ++server 10.53.0.1 ${PORT} ++key zonesub-key.example.nil 1234subk8765 ++update add zonesub.example.nil 0 IN A 1.2.3.4 ++send ++END ++$DIG $DIGOPTS +tcp @10.53.0.1 zonesub.example.nil A > dig.out.1.test$n || ret=1 ++grep "status: REFUSED" nsupdate.out1-$n > /dev/null || ret=1 ++grep "ANSWER: 0," dig.out.1.test$n > /dev/null || ret=1 ++# the TXT record update should be accepted as it is in the type list ++$NSUPDATE -d <<END > nsupdate.out2-$n 2>&1 || ret=1 ++server 10.53.0.1 ${PORT} ++key zonesub-key.example.nil 1234subk8765 ++update add zonesub.example.nil 0 IN TXT everywhere. ++send ++END ++$DIG $DIGOPTS +tcp @10.53.0.1 zonesub.example.nil TXT > dig.out.2.test$n || ret=1 ++grep "status: REFUSED" nsupdate.out2-$n > /dev/null && ret=1 ++grep "ANSWER: 1," dig.out.2.test$n > /dev/null || ret=1 ++grep "TXT.*everywhere" dig.out.2.test$n > /dev/null || ret=1 ++[ $ret = 0 ] || { echo_i "failed"; status=1; } ++ + n=`expr $n + 1` + ret=0 + echo_i "check that changes to the DNSKEY RRset TTL do not have side effects ($n)" diff --git a/debian/patches/0027-CVE-2020-8625.patch b/debian/patches/0027-CVE-2020-8625.patch new file mode 100644 index 0000000..1e036c8 --- /dev/null +++ b/debian/patches/0027-CVE-2020-8625.patch @@ -0,0 +1,25 @@ +From: Debian DNS Team <team+dns@tracker.debian.org> +Date: Thu, 29 Apr 2021 13:06:03 +0200 +Subject: Buffer overflow in GSSAPI security policy negotiation + (CVE-2020-8625) + +Origin: vendor +Forwarded: not-needed +Last-Update: 2021-02-09 +--- + lib/dns/spnego.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/lib/dns/spnego.c b/lib/dns/spnego.c +index ad77f24..28ead69 100644 +--- a/lib/dns/spnego.c ++++ b/lib/dns/spnego.c +@@ -877,7 +877,7 @@ der_get_oid(const unsigned char *p, size_t len, oid *data, size_t *size) { + return (ASN1_OVERRUN); + } + +- data->components = malloc(len * sizeof(*data->components)); ++ data->components = malloc((len + 1) * sizeof(*data->components)); + if (data->components == NULL) { + return (ENOMEM); + } diff --git a/debian/patches/0028-Free-resources-when-gss_accept_sec_context-fails.patch b/debian/patches/0028-Free-resources-when-gss_accept_sec_context-fails.patch new file mode 100644 index 0000000..b8ed135 --- /dev/null +++ b/debian/patches/0028-Free-resources-when-gss_accept_sec_context-fails.patch @@ -0,0 +1,28 @@ +From: =?utf-8?b?TWljaGHFgiBLxJlwaWXFhA==?= <michal@isc.org> +Date: Thu, 8 Apr 2021 10:33:44 +0200 +Subject: Free resources when gss_accept_sec_context() fails + +Even if a call to gss_accept_sec_context() fails, it might still cause a +GSS-API response token to be allocated and left for the caller to +release. Make sure the token is released before an early return from +dst_gssapi_acceptctx(). + +(cherry picked from commit d954e152d9f2901118b1fe36d3931ec244317fab) +--- + lib/dns/gssapictx.c | 3 +++ + 1 file changed, 3 insertions(+) + +diff --git a/lib/dns/gssapictx.c b/lib/dns/gssapictx.c +index 8bd99af..6d787d3 100644 +--- a/lib/dns/gssapictx.c ++++ b/lib/dns/gssapictx.c +@@ -746,6 +746,9 @@ dst_gssapi_acceptctx(gss_cred_id_t cred, + default: + gss_log(3, "failed gss_accept_sec_context: %s", + gss_error_tostring(gret, minor, buf, sizeof(buf))); ++ if (gouttoken.length > 0U) { ++ (void)gss_release_buffer(&minor, &gouttoken); ++ } + return (result); + } + diff --git a/debian/patches/0029-Check-SOA-owner-names-in-zone-transfers.patch b/debian/patches/0029-Check-SOA-owner-names-in-zone-transfers.patch new file mode 100644 index 0000000..5af5d36 --- /dev/null +++ b/debian/patches/0029-Check-SOA-owner-names-in-zone-transfers.patch @@ -0,0 +1,40 @@ +From: Mark Andrews <marka@isc.org> +Date: Wed, 3 Feb 2021 11:10:20 +1100 +Subject: Check SOA owner names in zone transfers + +An IXFR containing SOA records with owner names different than the +transferred zone's origin can result in named serving a version of that +zone without an SOA record at the apex. This causes a RUNTIME_CHECK +assertion failure the next time such a zone is refreshed. Fix by +immediately rejecting a zone transfer (either an incremental or +non-incremental one) upon detecting an SOA record not placed at the apex +of the transferred zone. +--- + lib/dns/xfrin.c | 14 ++++++++++++++ + 1 file changed, 14 insertions(+) + +diff --git a/lib/dns/xfrin.c b/lib/dns/xfrin.c +index d39ca26..0baf170 100644 +--- a/lib/dns/xfrin.c ++++ b/lib/dns/xfrin.c +@@ -477,6 +477,20 @@ xfr_rr(dns_xfrin_ctx_t *xfr, dns_name_t *name, uint32_t ttl, + dns_rdatatype_ismeta(rdata->type)) + FAIL(DNS_R_FORMERR); + ++ /* ++ * Immediately reject the entire transfer if the RR that is currently ++ * being processed is an SOA record that is not placed at the zone ++ * apex. ++ */ ++ if (rdata->type == dns_rdatatype_soa && ++ !dns_name_equal(&xfr->name, name)) { ++ char namebuf[DNS_NAME_FORMATSIZE]; ++ dns_name_format(name, namebuf, sizeof(namebuf)); ++ xfrin_log(xfr, ISC_LOG_DEBUG(3), "SOA name mismatch: '%s'", ++ namebuf); ++ FAIL(DNS_R_NOTZONETOP); ++ } ++ + redo: + switch (xfr->state) { + case XFRST_SOAQUERY: diff --git a/debian/patches/0030-Address-inconsistencies-in-checking-added-RRsets.patch b/debian/patches/0030-Address-inconsistencies-in-checking-added-RRsets.patch new file mode 100644 index 0000000..23a1b29 --- /dev/null +++ b/debian/patches/0030-Address-inconsistencies-in-checking-added-RRsets.patch @@ -0,0 +1,46 @@ +From: Mark Andrews <marka@isc.org> +Date: Fri, 12 Feb 2021 14:51:28 +1100 +Subject: Address inconsistencies in checking added RRsets + +loading_addrdataset() rejects SOA RRsets which are not at top of zone. +addrdataset() should similarly reject such RRsets. +--- + lib/dns/rbtdb.c | 12 ++++++++++-- + 1 file changed, 10 insertions(+), 2 deletions(-) + +diff --git a/lib/dns/rbtdb.c b/lib/dns/rbtdb.c +index 792c443..b1b928c 100644 +--- a/lib/dns/rbtdb.c ++++ b/lib/dns/rbtdb.c +@@ -117,7 +117,7 @@ struct rbtdb_file_header { + /*% + * Note that "impmagic" is not the first four bytes of the struct, so + * ISC_MAGIC_VALID cannot be used. +- */ ++a */ + #define VALID_RBTDB(rbtdb) ((rbtdb) != NULL && \ + (rbtdb)->common.impmagic == RBTDB_MAGIC) + +@@ -6806,13 +6806,21 @@ addrdataset(dns_db_t *db, dns_dbnode_t *node, dns_dbversion_t *version, + REQUIRE(VALID_RBTDB(rbtdb)); + INSIST(rbtversion == NULL || rbtversion->rbtdb == rbtdb); + +- if (rbtdb->common.methods == &zone_methods) ++ if (rbtdb->common.methods == &zone_methods) { ++ /* ++ * SOA records are only allowed at top of zone. ++ */ ++ if (rdataset->type == dns_rdatatype_soa && ++ node != rbtdb->origin_node) { ++ return (DNS_R_NOTZONETOP); ++ } + REQUIRE(((rbtnode->nsec == DNS_RBT_NSEC_NSEC3 && + (rdataset->type == dns_rdatatype_nsec3 || + rdataset->covers == dns_rdatatype_nsec3)) || + (rbtnode->nsec != DNS_RBT_NSEC_NSEC3 && + rdataset->type != dns_rdatatype_nsec3 && + rdataset->covers != dns_rdatatype_nsec3))); ++ } + + if (rbtversion == NULL) { + if (now == 0) diff --git a/debian/patches/0031-Unload-a-zone-if-a-transfer-breaks-its-SOA-record.patch b/debian/patches/0031-Unload-a-zone-if-a-transfer-breaks-its-SOA-record.patch new file mode 100644 index 0000000..93c75ec --- /dev/null +++ b/debian/patches/0031-Unload-a-zone-if-a-transfer-breaks-its-SOA-record.patch @@ -0,0 +1,40 @@ +From: Mark Andrews <marka@isc.org> +Date: Thu, 25 Feb 2021 14:11:05 +1100 +Subject: Unload a zone if a transfer breaks its SOA record + +If a zone transfer results in a zone not having any NS records, named +stops serving it because such a zone is broken. Do the same if an +incoming zone transfer results in a zone lacking an SOA record at the +apex or containing more than one SOA record. +--- + lib/dns/zone.c | 15 ++++++++++++--- + 1 file changed, 12 insertions(+), 3 deletions(-) + +diff --git a/lib/dns/zone.c b/lib/dns/zone.c +index 6d4426a..c3c8f94 100644 +--- a/lib/dns/zone.c ++++ b/lib/dns/zone.c +@@ -15352,11 +15352,20 @@ zone_xfrdone(dns_zone_t *zone, isc_result_t result) { + &retry, &expire, &minimum, NULL); + ZONEDB_UNLOCK(&zone->dblock, isc_rwlocktype_read); + if (result == ISC_R_SUCCESS) { +- if (soacount != 1) ++ if (soacount != 1) { + dns_zone_log(zone, ISC_LOG_ERROR, + "transferred zone " +- "has %d SOA record%s", soacount, +- (soacount != 0) ? "s" : ""); ++ "has %d SOA records", ++ soacount); ++ if (DNS_ZONE_FLAG(zone, ++ DNS_ZONEFLG_HAVETIMERS)) { ++ zone->refresh = DNS_ZONE_DEFAULTREFRESH; ++ zone->retry = DNS_ZONE_DEFAULTRETRY; ++ } ++ DNS_ZONE_CLRFLAG(zone, DNS_ZONEFLG_HAVETIMERS); ++ zone_unload(zone); ++ goto next_master; ++ } + if (nscount == 0) { + dns_zone_log(zone, ISC_LOG_ERROR, + "transferred zone " diff --git a/debian/patches/0032-Handle-DNAME-lookup-via-itself.patch b/debian/patches/0032-Handle-DNAME-lookup-via-itself.patch new file mode 100644 index 0000000..1b73aad --- /dev/null +++ b/debian/patches/0032-Handle-DNAME-lookup-via-itself.patch @@ -0,0 +1,41 @@ +From: Mark Andrews <marka@isc.org> +Date: Mon, 1 Mar 2021 16:46:07 +1100 +Subject: Handle DNAME lookup via itself + +When answering a query, named should never attempt to add the same RRset +to the ANSWER section more than once. However, such a situation may +arise when chasing DNAME records: one of the DNAME records placed in the +ANSWER section may turn out to be the final answer to a client query, +but there is no way to know that in advance. Tweak the relevant INSIST +assertion in query_find() so that it handles this case properly. The +rdataset is freed later anyway, so there is no need to clean it up +immediately. +--- + bin/named/query.c | 13 ++++++++++--- + 1 file changed, 10 insertions(+), 3 deletions(-) + +diff --git a/bin/named/query.c b/bin/named/query.c +index f8dbef2..b674b67 100644 +--- a/bin/named/query.c ++++ b/bin/named/query.c +@@ -9087,10 +9087,17 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype) + if (noqname != NULL) + query_addnoqnameproof(client, noqname); + /* +- * We shouldn't ever fail to add 'rdataset' +- * because it's already in the answer. ++ * 'rdataset' will only be non-NULL here if the ANSWER section ++ * of the message to be sent to the client already contains an ++ * RRset with the same owner name and the same type as ++ * 'rdataset'. This should never happen, with one exception: ++ * when chasing DNAME records, one of the DNAME records placed ++ * in the ANSWER section may turn out to be the final answer to ++ * the client's query, but we have no way of knowing that until ++ * now. In such a case, 'rdataset' will be freed later, so we ++ * do not need to free it here. + */ +- INSIST(rdataset == NULL); ++ INSIST(rdataset == NULL || qtype == dns_rdatatype_dname); + } + + addauth: diff --git a/debian/patches/0033-Disable-lame-ttl-cache.patch b/debian/patches/0033-Disable-lame-ttl-cache.patch new file mode 100644 index 0000000..efd2132 --- /dev/null +++ b/debian/patches/0033-Disable-lame-ttl-cache.patch @@ -0,0 +1,70 @@ +From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@sury.org> +Date: Fri, 24 Sep 2021 09:35:11 +0200 +Subject: Disable lame-ttl cache + +The lame-ttl cache is implemented in ADB as per-server locked +linked-list "indexed" with <qname,qtype>. This list has to be walked +every time there's a new query or new record added into the lame cache. +Determined attacker can use this to degrade performance of the resolver. + +Resolver testing has shown that disabling the lame cache has little +impact on the resolver performance and it's a minimal viable defense +against this kind of attack. +--- + bin/named/config.c | 2 +- + bin/named/server.c | 8 ++++++-- + doc/arm/Bv9ARM-book.xml | 9 +++------ + 3 files changed, 10 insertions(+), 9 deletions(-) + +diff --git a/bin/named/config.c b/bin/named/config.c +index d22ee4b..ba5fa8a 100644 +--- a/bin/named/config.c ++++ b/bin/named/config.c +@@ -170,7 +170,7 @@ options {\n\ + #ifdef HAVE_GEOIP + " geoip-use-ecs yes;\n" + #endif +-" lame-ttl 600;\n" ++" lame-ttl 0;\n" + #ifdef HAVE_LMDB + " lmdb-mapsize 32M;\n" + #endif +diff --git a/bin/named/server.c b/bin/named/server.c +index 149458e..748a150 100644 +--- a/bin/named/server.c ++++ b/bin/named/server.c +@@ -3971,8 +3971,12 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewlist, + result = ns_config_get(maps, "lame-ttl", &obj); + INSIST(result == ISC_R_SUCCESS); + lame_ttl = cfg_obj_asuint32(obj); +- if (lame_ttl > 1800) +- lame_ttl = 1800; ++ if (lame_ttl > 0) { ++ cfg_obj_log(obj, ns_g_lctx, ISC_LOG_WARNING, ++ "disabling lame cache despite lame-ttl > 0 as it " ++ "may cause performance issues"); ++ lame_ttl = 0; ++ } + dns_resolver_setlamettl(view->resolver, lame_ttl); + + /* +diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml +index 4b36bd0..7852b5a 100644 +--- a/doc/arm/Bv9ARM-book.xml ++++ b/doc/arm/Bv9ARM-book.xml +@@ -8855,12 +8855,9 @@ avoid-v6-udp-ports { 40000; range 50000 60000; }; + <term><command>lame-ttl</command></term> + <listitem> + <para> +- Sets the number of seconds to cache a +- lame server indication. 0 disables caching. (This is +- <emphasis role="bold">NOT</emphasis> recommended.) +- The default is <literal>600</literal> (10 minutes) and the +- maximum value is +- <literal>1800</literal> (30 minutes). ++ This is always set to 0. More information is available ++ in the <link xmlns:xlink="http://www.w3.org/1999/xlink" ++ xlink:href="https://kb.isc.org/docs/cve-2021-25219">security advisory for CVE-2021-25219</link>. + </para> + + </listitem> diff --git a/debian/patches/0034-Enable-lame-response-detection-even-with-disabled-la.patch b/debian/patches/0034-Enable-lame-response-detection-even-with-disabled-la.patch new file mode 100644 index 0000000..790b7c1 --- /dev/null +++ b/debian/patches/0034-Enable-lame-response-detection-even-with-disabled-la.patch @@ -0,0 +1,48 @@ +From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@sury.org> +Date: Fri, 24 Sep 2021 09:48:50 +0200 +Subject: Enable lame response detection even with disabled lame cache + +Previously, when lame cache would be disabled by setting lame-ttl to 0, +it would also disable lame answer detection. In this commit, we enable +the lame response detection even when the lame cache is disabled. This +enables stopping answer processing early rather than going through the +whole answer processing flow. +--- + lib/dns/resolver.c | 22 ++++++++++++---------- + 1 file changed, 12 insertions(+), 10 deletions(-) + +diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c +index 1e4fcab..bfc1ae2 100644 +--- a/lib/dns/resolver.c ++++ b/lib/dns/resolver.c +@@ -8323,18 +8323,20 @@ resquery_response(isc_task_t *task, isc_event_t *event) { + /* + * Is the server lame? + */ +- if (res->lame_ttl != 0 && !ISFORWARDER(query->addrinfo) && +- is_lame(fctx)) { ++ if (!ISFORWARDER(query->addrinfo) && is_lame(fctx)) { + inc_stats(res, dns_resstatscounter_lame); + log_lame(fctx, query->addrinfo); +- result = dns_adb_marklame(fctx->adb, query->addrinfo, +- &fctx->name, fctx->type, +- now + res->lame_ttl); +- if (result != ISC_R_SUCCESS) +- isc_log_write(dns_lctx, DNS_LOGCATEGORY_RESOLVER, +- DNS_LOGMODULE_RESOLVER, ISC_LOG_ERROR, +- "could not mark server as lame: %s", +- isc_result_totext(result)); ++ if (res->lame_ttl != 0) { ++ result = dns_adb_marklame(fctx->adb, query->addrinfo, ++ &fctx->name, fctx->type, ++ now + res->lame_ttl); ++ if (result != ISC_R_SUCCESS) { ++ isc_log_write(dns_lctx, DNS_LOGCATEGORY_RESOLVER, ++ DNS_LOGMODULE_RESOLVER, ISC_LOG_ERROR, ++ "could not mark server as lame: %s", ++ isc_result_totext(result)); ++ } ++ } + broken_server = DNS_R_LAME; + keep_trying = true; + FCTXTRACE("lame server"); diff --git a/debian/patches/0035-CVE-2021-25220.patch b/debian/patches/0035-CVE-2021-25220.patch new file mode 100644 index 0000000..48652e1 --- /dev/null +++ b/debian/patches/0035-CVE-2021-25220.patch @@ -0,0 +1,203 @@ +From: Debian DNS Team <team+dns@tracker.debian.org> +Date: Mon, 14 Mar 2022 15:31:10 +0100 +Subject: CVE-2021-25220 + +--- + lib/dns/resolver.c | 125 ++++++++++++++++++++++++++++++++++++++++++++++++++--- + 1 file changed, 120 insertions(+), 5 deletions(-) + +diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c +index bfc1ae2..cabcbdc 100644 +--- a/lib/dns/resolver.c ++++ b/lib/dns/resolver.c +@@ -68,6 +68,7 @@ + #include <dns/stats.h> + #include <dns/tsig.h> + #include <dns/validator.h> ++#include <dns/zone.h> + + #ifdef WANT_QUERYTRACE + #define RTRACE(m) isc_log_write(dns_lctx, \ +@@ -314,6 +315,8 @@ struct fetchctx { + bool ns_ttl_ok; + uint32_t ns_ttl; + isc_counter_t * qc; ++ dns_fixedname_t fwdfname; ++ dns_name_t *fwdname; + + /*% + * The number of events we're waiting for. +@@ -3304,6 +3307,7 @@ fctx_getaddresses(fetchctx_t *fctx, bool badcache) { + if (result == ISC_R_SUCCESS) { + fwd = ISC_LIST_HEAD(forwarders->fwdrs); + fctx->fwdpolicy = forwarders->fwdpolicy; ++ dns_name_copy(domain, fctx->fwdname, NULL); + if (fctx->fwdpolicy == dns_fwdpolicy_only && + isstrictsubdomain(domain, &fctx->domain)) { + fcount_decr(fctx); +@@ -4334,6 +4338,9 @@ fctx_create(dns_resolver_t *res, dns_name_t *name, dns_rdatatype_t type, + fctx->restarts = 0; + fctx->querysent = 0; + fctx->referrals = 0; ++ ++ fctx->fwdname = dns_fixedname_initname(&fctx->fwdfname); ++ + TIME_NOW(&fctx->start); + fctx->timeouts = 0; + fctx->lamecount = 0; +@@ -4386,8 +4393,10 @@ fctx_create(dns_resolver_t *res, dns_name_t *name, dns_rdatatype_t type, + domain = dns_fixedname_initname(&fixed); + result = dns_fwdtable_find2(fctx->res->view->fwdtable, fwdname, + domain, &forwarders); +- if (result == ISC_R_SUCCESS) ++ if (result == ISC_R_SUCCESS) { + fctx->fwdpolicy = forwarders->fwdpolicy; ++ dns_name_copy(domain, fctx->fwdname, NULL); ++ } + + if (fctx->fwdpolicy != dns_fwdpolicy_only) { + /* +@@ -6144,6 +6153,107 @@ mark_related(dns_name_t *name, dns_rdataset_t *rdataset, + rdataset->attributes |= DNS_RDATASETATTR_EXTERNAL; + } + ++/* ++ * Returns true if 'name' is external to the namespace for which ++ * the server being queried can answer, either because it's not a ++ * subdomain or because it's below a forward declaration or a ++ * locally served zone. ++ */ ++static inline bool ++name_external(dns_name_t *name, dns_rdatatype_t type, fetchctx_t *fctx) { ++ isc_result_t result; ++ dns_forwarders_t *forwarders = NULL; ++ dns_fixedname_t fixed, zfixed; ++ dns_name_t *fname = dns_fixedname_initname(&fixed); ++ dns_name_t *zfname = dns_fixedname_initname(&zfixed); ++ dns_name_t *apex = NULL; ++ dns_name_t suffix; ++ dns_zone_t *zone = NULL; ++ unsigned int labels; ++ dns_namereln_t rel; ++ ++ apex = ISFORWARDER(fctx->addrinfo) ? fctx->fwdname : &fctx->domain; ++ ++ /* ++ * The name is outside the queried namespace. ++ */ ++ rel = dns_name_fullcompare(name, apex, &(int){ 0 }, ++ &(unsigned int){ 0U }); ++ if (rel != dns_namereln_subdomain && rel != dns_namereln_equal) { ++ return (true); ++ } ++ ++ /* ++ * If the record lives in the parent zone, adjust the name so we ++ * look for the correct zone or forward clause. ++ */ ++ labels = dns_name_countlabels(name); ++ if (dns_rdatatype_atparent(type) && labels > 1U) { ++ dns_name_init(&suffix, NULL); ++ dns_name_getlabelsequence(name, 1, labels - 1, &suffix); ++ name = &suffix; ++ } else if (rel == dns_namereln_equal) { ++ /* If 'name' is 'apex', no further checking is needed. */ ++ return (false); ++ } ++ ++ /* ++ * If there is a locally served zone between 'apex' and 'name' ++ * then don't cache. ++ */ ++ LOCK(&fctx->res->view->lock); ++ if (fctx->res->view->zonetable != NULL) { ++ unsigned int options = DNS_ZTFIND_NOEXACT; ++ result = dns_zt_find(fctx->res->view->zonetable, name, options, ++ zfname, &zone); ++ if (zone != NULL) { ++ dns_zone_detach(&zone); ++ } ++ if (result == ISC_R_SUCCESS || result == DNS_R_PARTIALMATCH) { ++ if (dns_name_fullcompare(zfname, apex, &(int){ 0 }, ++ &(unsigned int){ 0U }) == ++ dns_namereln_subdomain) ++ { ++ UNLOCK(&fctx->res->view->lock); ++ return (true); ++ } ++ } ++ } ++ UNLOCK(&fctx->res->view->lock); ++ ++ /* ++ * Look for a forward declaration below 'name'. ++ */ ++ result = dns_fwdtable_find2(fctx->res->view->fwdtable, name, fname, ++ &forwarders); ++ ++ if (ISFORWARDER(fctx->addrinfo)) { ++ /* ++ * See if the forwarder declaration is better. ++ */ ++ if (result == ISC_R_SUCCESS) { ++ return (!dns_name_equal(fname, fctx->fwdname)); ++ } ++ ++ /* ++ * If the lookup failed, the configuration must have ++ * changed: play it safe and don't cache. ++ */ ++ return (true); ++ } else if (result == ISC_R_SUCCESS && ++ forwarders->fwdpolicy == dns_fwdpolicy_only && ++ !ISC_LIST_EMPTY(forwarders->fwdrs)) ++ { ++ /* ++ * If 'name' is covered by a 'forward only' clause then we ++ * can't cache this repsonse. ++ */ ++ return (true); ++ } ++ ++ return (false); ++} ++ + static isc_result_t + check_section(void *arg, dns_name_t *addname, dns_rdatatype_t type, + dns_section_t section) +@@ -6170,7 +6280,7 @@ check_section(void *arg, dns_name_t *addname, dns_rdatatype_t type, + result = dns_message_findname(fctx->rmessage, section, addname, + dns_rdatatype_any, 0, &name, NULL); + if (result == ISC_R_SUCCESS) { +- external = !dns_name_issubdomain(name, &fctx->domain); ++ external = name_external(name, type, fctx); + if (type == dns_rdatatype_a) { + for (rdataset = ISC_LIST_HEAD(name->list); + rdataset != NULL; +@@ -7018,6 +7128,13 @@ answer_response(fetchctx_t *fctx) { + break; + + case dns_namereln_subdomain: ++ /* ++ * Don't accept DNAME from parent namespace. ++ */ ++ if (name_external(name, dns_rdatatype_dname, fctx)) { ++ continue; ++ } ++ + /* + * In-scope DNAME records must have at least + * as many labels as the domain being queried. +@@ -7246,11 +7363,9 @@ answer_response(fetchctx_t *fctx) { + */ + result = dns_message_firstname(message, DNS_SECTION_AUTHORITY); + while (!done && result == ISC_R_SUCCESS) { +- bool external; + name = NULL; + dns_message_currentname(message, DNS_SECTION_AUTHORITY, &name); +- external = !dns_name_issubdomain(name, &fctx->domain); +- if (!external) { ++ if (!name_external(name, dns_rdatatype_ns, fctx)) { + /* + * We expect to find NS or SIG NS rdatasets, and + * nothing else. diff --git a/debian/patches/series b/debian/patches/series new file mode 100644 index 0000000..bce493a --- /dev/null +++ b/debian/patches/series @@ -0,0 +1,35 @@ +0001-non-linux.diff +0002-multiarch.diff +0003-min-cache-ttl.diff +0004-library_paths.diff +0005-resource_missing_include.diff +0006-prepare_native_pkcs11.diff +0007-ctxstart_no_sighandling.diff +0008-reproducible_build.diff +0009-Add_--install-layout=deb_to_setup.py_call.patch +0010-skip-rtld-deepbind-for-dyndb.diff +0011-keymgr-dont-immediately-delete.diff +0012-CVE-2018-5743-Limiting-simultaneous-TCP-clients-is-i.patch +0013-Replace-atomic-operations-in-bin-named-client.c-with.patch +0014-Disable-broken-Ed448-support.patch +0015-move-item_out-test-inside-lock-in-dns_dispatch_getne.patch +0016-Set-a-limit-on-number-of-simultaneous-pipelined-TCP-.patch +0017-libns-Rename-ns_tcpconn-refs-member-to-clients.patch +0018-CVE-2020-8616.patch +0019-CVE-2020-8617.patch +0020-Remove-INSIST-from-from-new_reference.patch +0021-Always-keep-a-copy-of-the-message.patch +0022-Fix-crash-in-pk11_numbits-when-native-pkcs11-is-used.patch +0023-Wait-more-than-1-second-for-NSEC3-chain-changes.patch +0024-Update-policy-subdomain-was-incorrectly-treated-as-z.patch +0025-Add-a-test-for-update-policy-subdomain.patch +0026-Add-a-test-for-update-policy-zonesub.patch +0027-CVE-2020-8625.patch +0028-Free-resources-when-gss_accept_sec_context-fails.patch +0029-Check-SOA-owner-names-in-zone-transfers.patch +0030-Address-inconsistencies-in-checking-added-RRsets.patch +0031-Unload-a-zone-if-a-transfer-breaks-its-SOA-record.patch +0032-Handle-DNAME-lookup-via-itself.patch +0033-Disable-lame-ttl-cache.patch +0034-Enable-lame-response-detection-even-with-disabled-la.patch +0035-CVE-2021-25220.patch diff --git a/debian/po/POTFILES.in b/debian/po/POTFILES.in new file mode 100644 index 0000000..cef83a3 --- /dev/null +++ b/debian/po/POTFILES.in @@ -0,0 +1 @@ +[type: gettext/rfc822deb] templates diff --git a/debian/po/cs.po b/debian/po/cs.po new file mode 100644 index 0000000..0f916c8 --- /dev/null +++ b/debian/po/cs.po @@ -0,0 +1,67 @@ +# Czech translation of bind9 debconf messages. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the bind9 package. +# Miroslav Kure <kurem@debian.cz>, 2008 +# +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-06-15 14:38+0200\n" +"Last-Translator: Miroslav Kure <kurem@debian.cz>\n" +"Language-Team: Czech <debian-l10n-czech@lists.debian.org>\n" +"Language: cs\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Uživatelský účet pro běh daemona BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Ve výchozím nastavení se daemon BINDu9 (named) spouští pod účtem uživatele " +"„bind“. Pro použití jiného účtu zadejte jeho jméno." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Další spouštěcí parametry pro named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Zadejte prosím případné další parametry (mimo uživatelského účtu), které se " +"mají předat daemonu BINDu9 (named) při každém spuštění." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Má se přepsat nastavení v resolv.conf?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Rozhodněte se, zda se má přepsat nastavení resolveru tak, aby vždy používal " +"lokální daemon BINDu9 (named) namísto serveru, který doporučí aktuální " +"připojení." diff --git a/debian/po/da.po b/debian/po/da.po new file mode 100644 index 0000000..e9a2df1 --- /dev/null +++ b/debian/po/da.po @@ -0,0 +1,67 @@ +# Danish translation bind9. +# Copyright (C) 2010 bind9 & Joe Hansen. +# This file is distributed under the same license as the bind9 package. +# Joe Hansen <joedalton2@yahoo.dk>, 2010. +# +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2010-10-07 17:30+01:00\n" +"Last-Translator: Joe Hansen <joedalton2@yahoo.dk>\n" +"Language-Team: Danish <debian-l10n-danish@lists.debian.org> \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Brugerkonto til kørsel af BIND9-dæmonen:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Standarden er at køre BIND9-dæmonen (navngivet) under brugerkontoen »bind«. " +"For at bruge en anden konto, så indtast venligst et passende brugernavn." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Andre opstartsindstillinger for navngivet:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Angiv venligst eventuelle yderligere indstillinger (udover brugernavnet) som " +"skal videresendes til BIND9-dæmonen (navngivet) ved opstart." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Skal opsætningen af resolv.conf overskrives?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Vælg venligst hvorvidt opløseren skal tvinges til at bruge den lokale BIND9-" +"dæmon (navngivet), frem for hvad den aktuelle forbindelse anbefaler, når " +"denne maskine flytter rundt." diff --git a/debian/po/de.po b/debian/po/de.po new file mode 100644 index 0000000..b2a18df --- /dev/null +++ b/debian/po/de.po @@ -0,0 +1,84 @@ +# Translation of bind9 debconf templates to German +# (C) Helge Kreutzmann <debian@helgefjell.de>, 2008. +# This file is distributed under the same license as the bind9 package. +# +msgid "" +msgstr "" +"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-06-16 20:22+0200\n" +"Last-Translator: Helge Kreutzmann <debian@helgefjell.de>\n" +"Language-Team: de <debian-l10n-german@lists.debian.org>\n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=iso-8859-15\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Benutzerkonto, unter dessen Kennung der BIND9-Daemon laufen soll:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Standardmig wird der BIND9-Daemon (Named) unter der Kennung des Benutzers " +"bind betrieben. Um ein anderes Benutzerkonto auszuwhlen, geben Sie bitte " +"den entsprechenden Benutzernamen ein." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Weitere Optionen fr den Start des Named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Bitte geben Sie hier die zustzlichen Optionen (auer dem Benutzernamen) " +"ein, die dem Bind9-Daemon (Named) beim Starten bergeben werden sollen." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Sollen die Einstellungen in resolv.conf ignoriert werden?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Bitte whlen Sie aus, ob der Namensauflser (Resolver) dazu gezwungen werden " +"soll, den lokalen BIND9-Daemon (Named) zu verwenden, statt den aktuellen " +"Verbindungsempfehlungen zu folgen, wenn diese Maschine bewegt wird." + +#~ msgid "Options that should be passed at startup to bind9" +#~ msgstr "Optionen, die beim Starten an Bind9 weitergegeben werden sollen" + +#~ msgid "which user should bind9 run as?" +#~ msgstr "Unter welcher Benutzerkennung soll Bind9 laufen?" + +#~ msgid "" +#~ "The default is to start bind9 as bind user, if you would like to change " +#~ "that, please give here the username as which bind9 should start as." +#~ msgstr "" +#~ "Standardmig startet Bind9 unter der Benutzerkennung bind. Falls Sie " +#~ "dies ndern mchten geben Sie hier bitte den Benutzernamen ein, unter " +#~ "dessen Kennung Bind9 starten soll." + +#~ msgid "Should resolvconf run when bind9 starts up?" +#~ msgstr "Soll Resolvconf laufen, wenn Bind9 startet?" diff --git a/debian/po/es.po b/debian/po/es.po new file mode 100644 index 0000000..c909428 --- /dev/null +++ b/debian/po/es.po @@ -0,0 +1,86 @@ +# bind9 translation to spanish +# Copyright (C) 2008 Software in the Public Interest +# This file is distributed under the same license as the bind9 package. +# Changes: +# - Initial translation +# Ignacio Mondino <ignacio.mondino@gmail.com>, 2008 +# Traductores, si no conoce el formato PO, merece la pena leer la +# documentación de gettext, especialmente las secciones dedicadas a este +# formato, por ejemplo ejecutando: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# Equipo de traducción al español, por favor lean antes de traducir +# los siguientes documentos: +# - El proyecto de traducción de Debian al español +# http://www.debian.org/intl/spanish +# especialmente las notas de traducción en +# http://www.debian.org/intl/spanish/notas +# - La guía de traducción de po's de debconf: +# /usr/share/doc/po-debconf/README-trans +# o http://www.debian.org/intl/l10n/po-debconf/README-trans +# +# +msgid "" +msgstr "" +"Project-Id-Version: bind9_1:9.5.0.dfsg-3\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-07-08 20:18-0300\n" +"Last-Translator: Ignacio Mondino <ignacio.mondino@gmail.com>\n" +"Language-Team: Debian Spanish team <debian-l10n-spanish@lists.debian.org>\n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Cuenta de usuario que ejecuta el demonio BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"La cuenta de usuario por omisión que ejecuta el demonio BIND9 («named») es " +"«bind». Para usar una cuenta diferente, por favor ingrese el nombre de " +"usuario apropiado." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Otras opciones de inicio para «named»:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Ingrese cualquier opción adicional (además del nombre de usuario) que " +"debiera pasarse como parámetro al demonio BIND9 («named») al inicio del " +"sistema." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "¿Debería sobreescribirse el archivo «resolv.conf»?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Indique si se debería forzar al cliente a utilizar el demonio BIND9 " +"(«named») local en lugar de lo que la conexión actual recomiende, cuando " +"este equipo este en movimiento." diff --git a/debian/po/eu.po b/debian/po/eu.po new file mode 100644 index 0000000..d0d0acf --- /dev/null +++ b/debian/po/eu.po @@ -0,0 +1,68 @@ +# translation of eu.po to Euskara +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# +# Piarres Beobide <pi@beobide.net>, 2009. +msgid "" +msgstr "" +"Project-Id-Version: eu\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2009-02-22 10:36+0100\n" +"Last-Translator: Piarres Beobide <pi@beobide.net>\n" +"Language-Team: Euskara <debian-l10n-basque@lists.debian.org>\n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "BIND9 exekutatuko duen erabiltzaile kontua:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Lehenetsia BIND9 deabrua (named) 'bind' erabiltzaile kontuarekin exekutatzea " +"da. Beste kontu bat erabiltzeko, idatzi dagokion erabiltzaile-izena" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Beste abio aukera batzuek named-rentzat:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Mesedez zehaztu BIND9 deabruari abioan pasa behar zaizkion beste aukera " +"gehigarriak (erabiltzaile-izenaz beste)." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "resolv.conf ezarpenak gainidatzi behar al dira?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Mesedez hautatu ebazlea nola behartu behar den BIND9 deabru kopia lokala " +"erabiltzeko ekipo hau mugitzen ari denean konexioak gomendatzen dionaren " +"ordez." diff --git a/debian/po/fi.po b/debian/po/fi.po new file mode 100644 index 0000000..ef9aae0 --- /dev/null +++ b/debian/po/fi.po @@ -0,0 +1,64 @@ +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-07-13 08:08-0000\n" +"Last-Translator: Esko Arajärvi <edu@iki.fi>\n" +"Language-Team: Finnish <debian-l10n-finnish@lists.debian.org>\n" +"Language: fi\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=utf-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Poedit-Language: Finnish\n" +"X-Poedit-Country: FINLAND\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Käyttäjätunnus, jolla BIND9-taustaohjelmaa ajetaan:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Oletuksena BIND9-taustaohjelmaa (named) ajetaan käyttäjätunnuksella ”bind”. " +"Jos halutaan käyttää jotain muuta tunnusta, syötä se tähän." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Ohjelman named muut käynnistysvalitsimet:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Anna mahdolliset muut valitsimet (muut kuin käyttäjätunnus), jotka BIND9-" +"taustaohjelmalle (named) tulisi antaa käynnistyksessä." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Tulisiko tiedoston resolv.conf asetukset jättää huomioitta?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Valitse tulisiko selvittäjä pakottaa käyttämään paikallista BIND9-" +"taustaohjelmaa (named) sen sijaan mitä nykyinen yhteys suosittelee, kun " +"konetta siirrellään eri paikkoihin." diff --git a/debian/po/fr.po b/debian/po/fr.po new file mode 100644 index 0000000..757f05d --- /dev/null +++ b/debian/po/fr.po @@ -0,0 +1,69 @@ +# Translation of bind9 debconf templates to French +# Copyright (C) 2008 CALARESU Luc <luc.calaresu@gmail.com> +# This file is distributed under the same license as the bind9 package. +# CALARESU Luc <luc.calaresu@gmail.com>, 2008. +# +# +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-06-14 14:26+0200\n" +"Last-Translator: CALARESU Luc <luc.calaresu@gmail.com>\n" +"Language-Team: French <debian-l10n-french@lists.debian.org>\n" +"Language: fr\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Identifiant pour l'exécution du démon de BIND9 :" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Par défaut, le démon de BIND9 est lancé avec les privilèges de l'identifiant " +"« bind ». Si vous souhaitez utiliser un autre identifiant, veuillez " +"l'indiquer ici." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Autres options à transmettre pour « named » :" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Veuillez indiquer toute option supplémentaire (autre que l'identifiant) qui " +"doit être transmise au démarrage du démon de BIND9 (« named »)." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Faut-il écraser les paramètres de resolv.conf ?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Veuillez choisir si la résolution de noms doit utiliser le démon BIND9 local " +"(« named ») plutôt que les paramètres recommandés pour la connexion " +"actuelle, lorsque cette machine est déplacée." diff --git a/debian/po/gl.po b/debian/po/gl.po new file mode 100644 index 0000000..f299cb3 --- /dev/null +++ b/debian/po/gl.po @@ -0,0 +1,66 @@ +# Galician translation of bind9's debconf templates +# This file is distributed under the same license as the bind9 package. +# Jacobo Tarrio <jtarrio@debian.org>, 2008. +# +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-06-14 11:36+0100\n" +"Last-Translator: Jacobo Tarrio <jtarrio@debian.org>\n" +"Language-Team: Galician <proxecto@trasno.net>\n" +"Language: gl\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Conta de usuario que executa o servizo de BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"A elección por defecto é executar o servizo de BIND9 (named) baixo a conta " +"de usuario \"bind\". Para empregar unha conta diferente, introduza o nome." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Outras opcións de inicio para named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Forneza as opcións adicionais (que non sexan o nome de usuario) que se deban " +"pasar ao servizo de BIND9 (named) no inicio." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "¿Quere substituír a configuración de resolv.conf?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Indique se quere forzar o resolvedor a que empregue o servizo de BIND9 local " +"(named) no canto do que recomenda a conexión actual, cando esta máquina " +"estea en movemento." diff --git a/debian/po/id.po b/debian/po/id.po new file mode 100644 index 0000000..e389970 --- /dev/null +++ b/debian/po/id.po @@ -0,0 +1,51 @@ +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: \n" +"Last-Translator: Mahyuddin Susanto <udienz@gmail.com>\n" +"Language-Team: Debian Indonesia Translator <debian-l10n-indonesian@lists.debian.org>\n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Poedit-Language: Indonesian\n" +"X-Poedit-Country: INDONESIA\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Akun pengguna untuk menjalankan daemon BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "The default is to run the BIND9 daemon (named) under the 'bind' user account. To use a different account, please enter the appropriate username." +msgstr "Bawaan dari daemon BIND9 adalah menjalankan dengan user akun 'bind'. Untuk menggunakan akun berbeda, silakan masukkan nama pengguna yang sesuai." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Opsi lain startup untuk named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Please provide any additional options (other than username) that should be passed to the BIND9 daemon (named) on startup." +msgstr "Harap menyediakan opsi tambahan (selain nama pengguna) yang digunakan daemon BIND9 untuk startup" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "haruskah resolv.conf ditimpa?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Please choose whether the resolver should be forced to use the local BIND9 daemon (named) rather than what the current connection recommends, when this machine moves around." +msgstr "Silakan tentukan resolver mana yang akan digunakan untuk daemon lokal BIND9 (named) dari koneksi sekarang yang digunakan, ketika mesin ini berjalan" + diff --git a/debian/po/it.po b/debian/po/it.po new file mode 100644 index 0000000..2e3ef2e --- /dev/null +++ b/debian/po/it.po @@ -0,0 +1,69 @@ +# translation of bind9_1:9.5.0.dfsg.P1-2_templates.po to Italian +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# +# Alex <animainvendita@gmail.com>, 2008. +msgid "" +msgstr "" +"Project-Id-Version: bind9_1:9.5.0.dfsg.P1-2_templates\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-07-27 16:10+0200\n" +"Last-Translator: Alex <animainvendita@gmail.com>\n" +"Language-Team: Italian <debian-l10n-italian@lists.debian.org>\n" +"Language: it\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Account utente con cui eseguire il demone BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"L'opzione predefinita prevede l'esecuzione del demone BIND9 (named) " +"utilizzando l'utente 'bind'. Se si desidera utilizzare un differente account " +"utente, inserire il nome corrispondente." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Altre opzioni di avvio per named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Inserire qualsiasi opzione addizionale (differente dal nome utente) che " +"dovrebbe essere inviata al demone BIND9 (named) durante l'avvio." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Si desidera non tener conto delle impostazioni in resolv.conf?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Scegliere se si desidera forzare la risoluzione di tutte le query DNS con il " +"demone BIND9 locale (named) non utilizzando i server raccomandati dalla " +"connessione attiva." diff --git a/debian/po/ja.po b/debian/po/ja.po new file mode 100644 index 0000000..c931748 --- /dev/null +++ b/debian/po/ja.po @@ -0,0 +1,66 @@ +# Copyright (C) 2008 LaMont Jones <lamont@debian.org> +# This file is distributed under the same license as the bind9 package. +# Hideki Yamane <henrich@debian.or.jp>, 2008. +# +msgid "" +msgstr "" +"Project-Id-Version: bind9 1:9.5.0.dfsg.P1-2\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-07-22 00:03+0900\n" +"Last-Translator: Hideki Yamane (Debian-JP) <henrich@debian.or.jp>\n" +"Language-Team: Japanese <debian-japanese@lists.debian.org>\n" +"Language: ja\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "BIND9 デーモンの動作に使うユーザアカウント:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"デフォルトでは BIND9 デーモン (named) は「bind」ユーザアカウントで動作しま" +"す。異なるアカウントを使いたい場合は、適切なユーザ名を入力してください。" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "起動時に named に指定するオプション:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"BIND9 デーモン (named) の起動時に指定したい (ユーザ名以外の) 追加オプションを" +"入力してください。" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "resolv.conf の設定を上書きしますか?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"このマシンを移動した際、リゾルバがローカルの BIND9 デーモン (named) を使うよ" +"うにするか、現在の接続先で推奨されるネームサーバを使うようにするかを選んでく" +"ださい。" diff --git a/debian/po/ko.po b/debian/po/ko.po new file mode 100644 index 0000000..9da0f6f --- /dev/null +++ b/debian/po/ko.po @@ -0,0 +1,69 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR. +# +msgid "" +msgstr "" +"Project-Id-Version: debconf template\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2011-06-24 18:37+0900\n" +"Last-Translator: 강민지 <justminji@gmail.com>\n" +"Language-Team: opensource <justminji@gmail.com>\n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Poedit-Language: Korean\n" +"X-Poedit-Country: KOREA, REPUBLIC OF\n" +"X-Poedit-SourceCharset: utf-8\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "BIND9 데몬을 실행하기 위한 사용자 계정:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"기본값은 '바인드' 사용자 계정에서 BIND9 데몬(지정된 이름)을 실행합니다. 다른 " +"계정을 사용하려면 해당 사용자 이름을 입력하세요." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "지명된 다른 시작 옵션:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"BIND9 데몬(지정된 이름)이 실행으로 전달되기 위해서 추가옵션(사용자 이름 이외)" +"을 입력하세요." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "resolv.conf 설정은 재정의 되어야하는가?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"이 기계가 근처로 이동될 때 해결자는 현재의 연결을 권장하는 것보다 로컬 BIND9 " +"데몬(지정된 이름)을 사용하도록 강요해야하는지 여부를 선택하세요." diff --git a/debian/po/nb.po b/debian/po/nb.po new file mode 100644 index 0000000..2d42047 --- /dev/null +++ b/debian/po/nb.po @@ -0,0 +1,69 @@ +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# +# Bjørn Steensrud <bjornst@skogkatt.homelinux.org>, 2012. +msgid "" +msgstr "" +"Project-Id-Version: \n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2012-01-03 21:33+0100\n" +"Last-Translator: Bjørn Steensrud <bjornst@skogkatt.homelinux.org>\n" +"Language-Team: Norwegian Bokmål <i18n-nb@lister.ping.uio.no>\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Language: nb\n" +"X-Generator: Lokalize 1.2\n" +"Plural-Forms: nplurals=2; plural=n != 1;\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Brukerkonto for å kjøre BIND9-daemonen:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Standard er å kjøre BIND8-daemonen (named) under brukerkontoen «bind». Skriv " +"inn et passende navn for å bruke en annen konto." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Andre oppstartsvalg for named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Skriv inn flere valg (annet enn brukernavn) som skal sendes over til " +"BIND9-daemonen (named) ved oppstart." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Skal innstillingene i resolv.conf oveerstyres?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Velg om adresseløseren skal tvinges til å bruke den lokale BIND9-daemonen " +"(named) i stedet for det den gjeldende tilkoblingen anbefaler, når denne " +"maskinen flyttes omkring." + diff --git a/debian/po/nl.po b/debian/po/nl.po new file mode 100644 index 0000000..b710b34 --- /dev/null +++ b/debian/po/nl.po @@ -0,0 +1,72 @@ +# translation of bind9_1:9.5.0.dfsg.P2-1_nl.po to Dutch +# translation of bind9 debconf template to Dutch +# Copyright (C) 2008 THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the bind9 package. +# +# Paul Gevers <paul@climbing.nl>, 2008. +msgid "" +msgstr "" +"Project-Id-Version: bind9_1:9.5.0.dfsg.P2-1_nl\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-09-17 21:15-0500\n" +"Last-Translator: Paul Gevers <paul@climbing.nl>\n" +"Language-Team: Dutch <debian-l10n-dutch@lists.debian.org>\n" +"Language: nl\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" +"Plural-Forms: nplurals=2; plural=(n != 1);\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "" +"Gebruikersaccount waaronder de BIND9 achtergronddienst dient te draaien:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Standaard wordt 'named', de BIND9-achtergronddienst, uitgevoerd onder de " +"'bind' gebruikersaccount. Als u een andere account wilt gebruiken kunt hier " +"de geschikte gebruikersnaam invullen." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Andere opstartopties voor 'named':" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Welke aanvullende opties (anders dan de gebruikersnaam) wilt u bij het " +"opstarten meegeven aan 'named', de BIND9 achtergronddienst?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Wilt u dat de 'resolv.conf' instellingen omzeild worden?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Wilt u afdwingen dat de 'resolver' gebruik maakt van de lokale BIND9 " +"achtergronddienst (named), in plaats van de aanbevelingen van de huidige " +"connectie. Bijvoorbeeld, wanneer deze computer veel verplaatst wordt." diff --git a/debian/po/pl.po b/debian/po/pl.po new file mode 100644 index 0000000..9cc79bd --- /dev/null +++ b/debian/po/pl.po @@ -0,0 +1,68 @@ +# debconf templates for bind9 package +# Polish translation +# Copyright (C) 2008 +# This file is distributed under the same license as the bind9 package. +# Łukasz Paździora <lukpaz@gmail.com>, 2008 +# +msgid "" +msgstr "" +"Project-Id-Version: bind9 9.5.0.dfsg.P2-4\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-11-24 18:30+0100\n" +"Last-Translator: Łukasz Paździora <lukpaz@gmail.com>\n" +"Language-Team: Polish <debian-l10n-polish@lists.debian.org>\n" +"Language: pl\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Konto użytkownika, jako który powinien działać BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Domyślnie demon BIND9 (named) działa jako użytkownik 'bind'. Aby użyć innego " +"konta podaj inną nazwę użytkownika." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Inne opcje startowe dla named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Proszę podać dodatkowe opcje (inne niż nazwa użytkownika), które powinny " +"zostać podane demonowi BIND9 (named) przy starcie." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Czy ustawienia resolv.conf mają zostać nadpisane?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Proszę wybrać czy do rozwiązywania nazw powinna być używana lokalna usługa " +"BIND9 (named), kiedy maszyna zmienia miejsce, czy też powinien korzystać z " +"zalecanych ustawień aktualnego połączenia." diff --git a/debian/po/pt.po b/debian/po/pt.po new file mode 100644 index 0000000..2d3347f --- /dev/null +++ b/debian/po/pt.po @@ -0,0 +1,69 @@ +# translation of bind9_1:9.5.0.dfsg-2_pt debconf to Portuguese +# Copyright (C) 2008 Américo Monteiro +# This file is distributed under the same license as the bind9 package. +# +# Américo Monteiro <a_monteiro@netcabo.pt>, 2008. +msgid "" +msgstr "" +"Project-Id-Version: bind9_1:9.5.0.dfsg-2_pt\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-06-14 11:55+0100\n" +"Last-Translator: Américo Monteiro <a_monteiro@netcabo.pt>\n" +"Language-Team: Portuguese <traduz@debianpt.org>\n" +"Language: pt\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Conta de utilizador para correr o deamon BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"A pré-definição é correr o deamon BIND9 (named) sob a conta de utilizador " +"'bind'. Para usar uma conta diferente, por favor indique o nome de " +"utilizador apropriado." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Outras opções de arranque para o named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Por favor forneça quaisquer opções adicionais (além do nome de utilizador) " +"que deverão ser enviadas ao deamon BIND9 (named) durante o arranque. " + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Devem as configurações de resolv.conf ser substituidas?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Por favor escolha se a resolução de nomes deverá ser forçada a usar o deamon " +"local BIND9 (named) em vez do que a corrente ligação recomenda, quando esta " +"máquina está ligada." diff --git a/debian/po/pt_BR.po b/debian/po/pt_BR.po new file mode 100644 index 0000000..f10725d --- /dev/null +++ b/debian/po/pt_BR.po @@ -0,0 +1,71 @@ +# bind9 Brazilian Portuguese translation +# Copyright (C) 2009 bind9's COPYRIGHT HOLDER +# This file is distributed under the same license as the bind9 package. +# Luís Gustavo Pessoa Sales <vatsu@gmx.net>, 2009. +# José Figueiredo <deb.gnulinux@gmail.com>, 2010. +# +# +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2010-09-10 22:37-0300\n" +"Last-Translator: José de Figueiredo <deb.gnulinux@gmail.com>\n" +"Language-Team: Brazilian Portuguese <debian-l10n-portuguese@lists.debian." +"org>\n" +"Language: pt_BR\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"pt_BR utf-8\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Conta de usuário para execução do daemon do BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"O padrão é executar o daemon do BIND9 (named) com a conta de usuário 'bind'. " +"Para usar uma conta diferente, por favor informe o nome do usuário." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Outras opções de inicialização para o named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Por favor, forneça outras opções adicionais (além de nome de usuário), que " +"devam ser passadas ao daemon do BIND9 (named) na inicialização." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "As configurações do resolv.conf devem ser sobrescritas?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Por favor, escolha se o resolvedor de nomes deve ser forçado a usar o daemon " +"do BIND9 local (named) em vez daquele que a conexão atual recomendar, quando " +"esta máquina for movida." diff --git a/debian/po/ru.po b/debian/po/ru.po new file mode 100644 index 0000000..b182747 --- /dev/null +++ b/debian/po/ru.po @@ -0,0 +1,70 @@ +# translation of ru.po to Russian +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# +# Yuri Kozlov <kozlov.y@gmail.com>, 2008. +msgid "" +msgstr "" +"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-06-14 11:08+0400\n" +"Last-Translator: Yuri Kozlov <kozlov.y@gmail.com>\n" +"Language-Team: Russian <debian-l10n-russian@lists.debian.org>\n" +"Language: ru\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" +"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n" +"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Учётная запись для запуска службы BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"По умолчанию, служба BIND9 (файл named) запускается с правами учётной записи " +"'bind'. Если вы хотите использовать другую учётную запись, то введите это " +"имя здесь." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Другие параметры запуска named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Укажите любые дополнительные параметры (кроме имени учётной записи), которые " +"нужно передать службе BIND9 (файлу named) при запуске." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Переписать настройки resolv.conf?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Укажите, хотите ли вы, чтобы определитель имён машины использовал локальную " +"службу BIND9 (named), а не настройки имеющегося подключения." diff --git a/debian/po/sk.po b/debian/po/sk.po new file mode 100644 index 0000000..4ea69c6 --- /dev/null +++ b/debian/po/sk.po @@ -0,0 +1,67 @@ +# Slovak translation of bind9 +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the bind9 package. +# Ivan Masár <helix84@centrum.sk>, 2008. +# +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: \n" +"Last-Translator: Ivan Masár <helix84@centrum.sk>\n" +"Language-Team: \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Používateľský účet démona BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Štandardne sa démon BIND9 (named) spúšťa s používateľským účtom „bind”. Ak " +"chcete použiť iný účet, prosím zadajte príslušný názov účtu." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Ďalšie spúšťacie voľby pre named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Zadajte ďalšie voľby (okrem používateľského mena), ktoré sa majú odovzdať " +"démonovi BIND9 (named) pri spustení." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Má sa nastaviť priorita pred resolv.conf?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Zvoľte, či má sa má vynútiť, aby prekladač adries používal lokálneho démona " +"BIND9 (named) namiesto toho, čo odporúča aktuálne pripojenie, keď sa " +"umiestnenie tohto počítača mení." diff --git a/debian/po/sr.po b/debian/po/sr.po new file mode 100644 index 0000000..98b67be --- /dev/null +++ b/debian/po/sr.po @@ -0,0 +1,66 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR. +# +msgid "" +msgstr "" +"Project-Id-Version: PACKAGE VERSION\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" +"Last-Translator: Zlatan Todoric <zlatan.todoric@gmail.com>\n" +"Language-Team: Serbian <debian-l10n-serbian@lists.debian.org>\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Кориснички налог за покретање BIND9 процеса у позадини:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Подразумијевано је да се BIND9 процес у позадини (Named) покреће под 'bind'" +"корисничким налогом. Да бисте користили другачији налог, унесите адекватно корисничко име." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Друге опције приликом покретања за (Named):" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Молимо вас обезбједите додатне опције (осим корисничког имена) који би требали" +"бити прослијеђени BIND9 процесу у позадини (Named) приликом покретања." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Желите ли поништити постојећа resolv.conf подешавања?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Одаберите желите ли да аутоматски помагач (Resolver) буде присиљен користити " +"локални BIND9 процес у позадини (Named) умјесто препорука тренутне мреже, када " +"ова машина буде помјерана." diff --git a/debian/po/sr@latin.po b/debian/po/sr@latin.po new file mode 100644 index 0000000..5456ba6 --- /dev/null +++ b/debian/po/sr@latin.po @@ -0,0 +1,66 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) 2011 +# This file is distributed under the same license as the PACKAGE package. +# FIRST AUTHOR <zlatan.todoric@gmail.com>, 2011. +# +msgid "" +msgstr "" +"Project-Id-Version: PACKAGE VERSION\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" +"Last-Translator: Zlatan Todorić <zlatan.todoric@gmail.com>\n" +"Language-Team: Serbian <debian-l10n-serbian@lists.debian.org>\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Korisnički nalog za pokretanje BIND9 procesa u pozadini:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Podrazumijevano je da se BIND9 proces u pozadini (Named) pokreće pod 'bind'" +"korisničkim nalogom. Da biste koristili drugačiji nalog, unesite adekvatno korisničko ime." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Druge opcije prilikom pokretanja za (Named):" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Molimo vas obezbjedite dodatne opcije (osim korisničkog imena) koji bi trebali" +"biti proslijeđeni BIND9 procesu u pozadini (Named) prilikom pokretanja." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Želite li poništiti postojeća resolv.conf podešavanja?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Odaberite želite li da automatski pomagač (Resolver) bude prisiljen koristiti" +"lokalni BIND9 proces u pozadini umjesto preporuka trenutne mreže, kada ova" +"mašina bude pomjerana." diff --git a/debian/po/sv.po b/debian/po/sv.po new file mode 100644 index 0000000..4dbd1e2 --- /dev/null +++ b/debian/po/sv.po @@ -0,0 +1,69 @@ +# translation of bind9_1:9.5.0.dfsg.P1-2_sv.po to Swedish +# Copyright (C) 2008 +# This file is distributed under the same license as the bind9 package. +# +# Martin Ågren <martin.agren@gmail.com>, 2008. +msgid "" +msgstr "" +"Project-Id-Version: bind9_1:9.5.0.dfsg.P1-2_sv\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-07-18 19:24+0200\n" +"Last-Translator: Martin Ågren <martin.agren@gmail.com>\n" +"Language-Team: Swedish <debian-l10n-swedish@lists.debian.org>\n" +"Language: sv\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" +"Plural-Forms: nplurals=2; plural=(n != 1);\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Användarkonto att köra BIND9-demonen under:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Standardvalet är att köra BIND9-demonen (named) under användarkontot 'bind'. " +"För att använda ett annat konto, var vänlig ange användarnamnet." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Övriga uppstartsval för named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Var vänlig ange eventuella ytterligare val (förutom användarnamn) som ska " +"skickas till BIND9-demonen (named) vid uppstart." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Ska resolv.conf-inställningar hoppas över?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Var vänlig välj huruvida uppslagaren ska tvingas använda den lokala BIND9-" +"demonen (named) snarare än vad den aktuella uppkopplingen rekommenderar när " +"den här maskinen flyttar runt." diff --git a/debian/po/templates.pot b/debian/po/templates.pot new file mode 100644 index 0000000..6001e43 --- /dev/null +++ b/debian/po/templates.pot @@ -0,0 +1,60 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR. +# +#, fuzzy +msgid "" +msgstr "" +"Project-Id-Version: PACKAGE VERSION\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" +"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n" +"Language-Team: LANGUAGE <LL@li.org>\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=CHARSET\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" diff --git a/debian/po/tr.po b/debian/po/tr.po new file mode 100644 index 0000000..3d44ff8 --- /dev/null +++ b/debian/po/tr.po @@ -0,0 +1,70 @@ +# turkish translation of bind9 debconf template +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# Mert Dirik <mertdirik@gmail.com>, 2008. +# +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-06-15 23:31+0200\n" +"Last-Translator: Mert Dirik <mertdirik@gmail.com>\n" +"Language-Team: Debian L10n Turkish <debian-l10n-turkish@lists.debian.org>\n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=utf-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=1; plural=0;\n" +"X-Poedit-Language: Turkish\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "BIND9 bekletici programının (named) kullanacağı kullanıcı hesabı:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Öntanımlı olarak BIND9 bekletici (daemon) programı 'bind' kullanıcı " +"hesabıyla çalışır. Farklı bir hesap kullanmak için kullanmak istediğiniz " +"hesabın adını girin." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "'named'in kullanacağı diğer başlatma seçenekleri:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Lütfen BIND9 bekletici programına (named) geçilmesini istediğiniz, kullanıcı " +"adı dışındaki ek seçenekleri yazın." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "'resolv.conf' ayarları ezilmeli mi (override)?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Lütfen bu makine gezerken; çözümleyicinin o anda kullanılan bağlantının " +"önerdiği sunucu yerine yerel BIND9 bekletici programını (named) kullanmaya " +"zorlanması gerekip gerekmediğini seçin." diff --git a/debian/po/vi.po b/debian/po/vi.po new file mode 100644 index 0000000..99865f7 --- /dev/null +++ b/debian/po/vi.po @@ -0,0 +1,67 @@ +# Vietnamese translation for Bind 9. +# Copyright © 2008 Free Software Foundation, Inc. +# Clytie Siddall <clytie@riverland.net.au>, 2008. +# +msgid "" +msgstr "" +"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-06-14 15:35+0930\n" +"Last-Translator: Clytie Siddall <clytie@riverland.net.au>\n" +"Language-Team: Vietnamese <vi-VN@googlegroups.com>\n" +"Language: vi\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=1; plural=0;\n" +"X-Generator: LocFactoryEditor 1.7b3\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Tài khoản người dùng để chạy trình nền BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Mặc định là chạy trình nền BIND9 (đặt tên) dưới tài khoản người dùng « bind " +"». Để sử dụng tài khoản khác, hãy nhập tên người dùng thích hợp." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Tùy chọn khởi chạy khác cần đặt tên:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Hãy nhập vào đây bất kỳ tùy chọn bổ sung (khác với tên người dùng) nên gửi " +"cho trình nền BIND9 vào lúc khởi chạy." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Co nên ghi đè lên thiết lập « resolv.conf » không?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Hãy chọn có nên ép buộc trình giải quyết sử dụng trình nền BIND9 cục bộ (đặt " +"tên) hơn là kết nối hiện thời đề nghị gì khi máy này ở nơi khác." diff --git a/debian/po/zh_CN.po b/debian/po/zh_CN.po new file mode 100644 index 0000000..9296c1a --- /dev/null +++ b/debian/po/zh_CN.po @@ -0,0 +1,64 @@ +# Chinese translations for bind package. +# Copyright (C) 2008 THE bind'S COPYRIGHT HOLDER +# This file is distributed under the same license as the bind package. +# LI Daobing <lidaobing@gmail.com>, 2008. +# +msgid "" +msgstr "" +"Project-Id-Version: bind 9-9.5.0.dfsg.P2\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-10-04 14:36+0800\n" +"Last-Translator: LI Daobing <lidaobing@gmail.com>\n" +"Language-Team: Chinese (simplified)\n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "运行 BIND9 服务的用户账号:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"缺省使用 'bind' 用户来运行 BIND9 服务(named)。 想使用其他的账号, 请输入合适的" +"用户名。" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "named 的其他启动选项:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "请提供需要传给 BIND9 服务(named)的启动选项(用户名除外)。" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "是否覆盖 resolv.conf 的设置?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"请选择是否强制使用本地 BIND9 服务(named)来做域名解析, 而不是使用当前连接所推" +"荐的域名解析服务器, 特别是当机器需要移动时。" diff --git a/debian/rules b/debian/rules new file mode 100755 index 0000000..deeb37f --- /dev/null +++ b/debian/rules @@ -0,0 +1,186 @@ +#!/usr/bin/make -f +# Sample debian/rules that uses debhelper. +# GNU copyright 1997 to 1999 by Joey Hess. + +export DEB_BUILD_MAINT_OPTIONS = hardening=+all +DPKG_EXPORT_BUILDFLAGS = 1 + +export DEB_CFLAGS_MAINT_APPEND = -fno-strict-aliasing -fno-delete-null-pointer-checks -DNO_VERSION_DATE -DDIG_SIGCHASE + +export DPKG_GENSYMBOLS_CHECK_LEVEL := 4 + +include /usr/share/dpkg/default.mk + +DEB_REVISION = $(call dpkg_late_eval,DEB_REVISION,echo '$(DEB_VERSION)' | sed -e 's/^.*-/-/') + +# Uncomment this to turn on verbose mode. +#export DH_VERBOSE=1 + +COMMA = , +ifneq (,$(filter parallel=%,$(subst $(COMMA), ,$(DEB_BUILD_OPTIONS)))) + NJOBS := -j $(subst parallel=,,$(filter parallel=%,$(subst $(COMMA), ,$(DEB_BUILD_OPTIONS)))) +endif + +export arch = $(DEB_HOST_ARCH) + +ifeq ($(DEB_HOST_ARCH_OS),kfreebsd) +EXTRA_FEATURES=--disable-linux-caps +endif + +SED_NATIVE_PKCS11 := \ + sed -e 's,libisc\.,libisc-pkcs11.,g' \ + -e 's,libisc-nosymtbl\.,libisc-pkcs11-nosymtbl.,g' \ + -e 's,libdns\.,libdns-pkcs11.,g' \ + -e 's,@CRYPTO@,@CRYPTO_PK11@,g' \ + -e 's,ISC_INCLUDES,ISC_PKCS11_INCLUDES,g' \ + -e 's,DNS_INCLUDES,DNS_PKCS11_INCLUDES,g' \ + -e 's,\(dnssec-[^ ]*\)@EXEEXT@,\1-pkcs11@EXEEXT@,g' \ + -e 's,/lib/isc/,/lib/isc-pkcs11/,g' \ + -e 's,/lib/dns/,/lib/dns-pkcs11/,g' \ + -e 's,named@EXEEXT@,named-pkcs11@EXEEXT@,g' \ + -e 's,@CONTRIB_DLZ@,,g' \ + -e 's,$${DLZDRIVER_INCLUDES} $${DBDRIVER_INCLUDES},,g' \ + -e 's,$${DLZDRIVER_LIBS} $${DBDRIVER_LIBS},,g' \ + -e 's,$${DLZDRIVER_OBJS} $${DBDRIVER_OBJS},,g' \ + -e 's,$${DLZDRIVER_SRCS} $${DBDRIVER_SRCS},,g' \ + -e 's,@DNS_CRYPTO_LIBS@,@DNS_CRYPTO_PK11_LIBS@,g' + +%: + dh $@ --with python3 --fail-missing --exclude=.la --exclude=lwresd --exclude=__pycache__ + +prepare_native_pkcs11: + rm -rf bin/named-pkcs11 && cp -r bin/named bin/named-pkcs11 + rm -rf bin/dnssec-pkcs11 && cp -r bin/dnssec bin/dnssec-pkcs11 + rm -rf lib/isc-pkcs11 && cp -r lib/isc lib/isc-pkcs11 + rm -rf lib/dns-pkcs11 && cp -r lib/dns lib/dns-pkcs11 + $(SED_NATIVE_PKCS11) < bin/named/Makefile.in > bin/named-pkcs11/Makefile.in + $(SED_NATIVE_PKCS11) < bin/dnssec/Makefile.in > bin/dnssec-pkcs11/Makefile.in + $(SED_NATIVE_PKCS11) < lib/isc/Makefile.in > lib/isc-pkcs11/Makefile.in + $(SED_NATIVE_PKCS11) < lib/dns/Makefile.in > lib/dns-pkcs11/Makefile.in + +clean_native_pkcs11: + rm -rf bin/named-pkcs11 + rm -rf bin/dnssec-pkcs11 + rm -rf lib/isc-pkcs11 + rm -rf lib/dns-pkcs11 + +prepare_version: + if [ ! -f version.bak ]; then cp version version.bak; fi + sed -i 's,^EXTENSIONS=.*$$,EXTENSIONS=$(DEB_REVISION)-$(DEB_VENDOR),' version + +clean_version: + if [ -f version.bak ]; then cp version.bak version; fi + +override_dh_autoreconf: prepare_native_pkcs11 prepare_version + dh_autoreconf + +override_dh_auto_configure: + debian/checkapi + dh_auto_configure -B build -- \ + --libdir=/usr/lib/$(DEB_HOST_MULTIARCH) \ + --sysconfdir=/etc/bind \ + --with-python=python3 \ + --localstatedir=/ \ + --enable-threads \ + --enable-largefile \ + --with-libtool \ + --enable-shared \ + --enable-static \ + --with-gost=no \ + --with-openssl=/usr \ + --with-gssapi=/usr \ + --disable-isc-spnego \ + --with-libidn2 \ + --with-libjson=/usr \ + --with-lmdb=/usr \ + --with-gnu-ld \ + --with-geoip=/usr \ + --with-atf=no \ + --enable-ipv6 \ + --enable-rrl \ + --enable-filter-aaaa \ + --enable-native-pkcs11 \ + --with-pkcs11=\$${prefix}/lib/softhsm/libsofthsm2.so \ + --with-randomdev=/dev/urandom \ + --enable-dnstap \ + $(EXTRA_FEATURES) + dh_auto_configure -B build-udeb -- \ + --sysconfdir=/etc/bind \ + --with-python=python3 \ + --localstatedir=/ \ + --disable-epoll \ + --disable-kqueue \ + --disable-devpoll \ + --disable-threads \ + --disable-linux-caps \ + --with-openssl=/usr \ + --without-libxml2 \ + --without-libjson \ + --without-lmdb \ + --enable-ipv6 \ + --enable-shared \ + --with-libtool \ + --with-gssapi=no \ + --disable-isc-spnego \ + --libdir=/lib/$(DEB_HOST_MULTIARCH) \ + --includedir=/usr/include/bind-export + sh debian/apply-export-patch + # no need to build these targets here + sed -i 's/dnssec-pkcs11//;s/named-pkcs11//' build-udeb/bin/Makefile + sed -i 's/dns-pkcs11//;s/isc-pkcs11//' build-udeb/lib/Makefile + cp lib/dns/dnstap.proto build/lib/dns + cp lib/dns-pkcs11/dnstap.proto build/lib/dns-pkcs11 + +override_dh_auto_build: + dh_auto_build -B build + dh_auto_build -B build-udeb + +override_dh_auto_clean: clean_native_pkcs11 clean_version + dh_auto_clean -B build + dh_auto_clean -B build-udeb + +override_dh_auto_install: + dh_auto_install -B build --destdir=$(CURDIR)/debian/tmp + dh_auto_install -B build-udeb --destdir=$(CURDIR)/debian/tmp-udeb + +override_dh_install: + dh_install --exclude=.la --exclude=lwresd --exclude=__pycache__ --fail-missing + + # Fix symlink for export libs to be absolute + for lib in `find debian/tmp-udeb/lib/$(DEB_HOST_MULTIARCH)/ -type l -name 'lib*-export.so.*'`; do \ + lib=$$(basename $$lib); \ + dev=$$(echo $$lib | sed 's/\.so\..*/.so/'); \ + echo /lib/$(DEB_HOST_MULTIARCH)/$$lib /usr/lib/$(DEB_HOST_MULTIARCH)/$$dev; \ + dh_link -plibbind-export-dev /lib/$(DEB_HOST_MULTIARCH)/$$lib \ + /usr/lib/$(DEB_HOST_MULTIARCH)/$$dev; \ + done + + dh_apparmor -pbind9 --profile-name=usr.sbin.named + +override_dh_systemd_enable: + dh_systemd_enable -pbind9 --no-enable --name=bind9-resolvconf bind9-resolvconf.service + dh_systemd_enable -pbind9 --no-enable --name=bind9-pkcs11 bind9-pkcs11.service + dh_systemd_enable -pbind9 bind9.service + +override_dh_makeshlibs: DNS_SOVER=$(shell debian/getapi dns) +override_dh_makeshlibs: IRS_SOVER=$(shell debian/getapi irs) +override_dh_makeshlibs: ISCCC_SOVER=$(shell debian/getapi isccc) +override_dh_makeshlibs: ISCCFG_SOVER=$(shell debian/getapi isccfg) +override_dh_makeshlibs: ISC_SOVER=$(shell debian/getapi isc) +override_dh_makeshlibs: + dh_makeshlibs -plibdns-export$(DNS_SOVER) --add-udeb=libdns-export$(DNS_SOVER)-udeb + dh_makeshlibs -plibirs-export$(IRS_SOVER) --add-udeb=libirs-export$(IRS_SOVER)-udeb + dh_makeshlibs -plibisccc-export$(ISCCC_SOVER) --add-udeb=libisccc-export$(ISCCC_SOVER)-udeb + dh_makeshlibs -plibisccfg-export$(ISCCFG_SOVER) --add-udeb=libisccfg-export$(ISCCFG_SOVER)-udeb + dh_makeshlibs -plibisc-export$(ISC_SOVER) --add-udeb=libisc-export$(ISC_SOVER)-udeb + dh_makeshlibs --remaining-packages + +override_dh_shlibdeps: + dh_shlibdeps + # Downgrade libcrypto1.1-udeb dependency from 1.1.1 to 1.1.0 + # The udebs don't use any newer symbols, but due to them using + # shlibs the dependency is generated anyway. This blocks migration + # to testing until OpenSSL 1.1.1 is sorted out + sed -i 's:libcrypto1.1-udeb (>= 1.1.1):libcrypto1.1-udeb (>= 1.1.0):' debian/*-udeb.substvars + +.PHONY: prepare_native_pkcs11 clean_native_pkcs11 diff --git a/debian/source/format b/debian/source/format new file mode 100644 index 0000000..163aaf8 --- /dev/null +++ b/debian/source/format @@ -0,0 +1 @@ +3.0 (quilt) diff --git a/debian/templates b/debian/templates new file mode 100644 index 0000000..b5dd9bc --- /dev/null +++ b/debian/templates @@ -0,0 +1,21 @@ +Template: bind9/start-as-user +Type: string +Default: bind +_Description: User account for running the BIND9 daemon: + The default is to run the BIND9 daemon (named) under the 'bind' + user account. To use a different account, please enter the + appropriate username. + +Template: bind9/different-configuration-file +Type: string +_Description: Other startup options for named: + Please provide any additional options (other than username) that should + be passed to the BIND9 daemon (named) on startup. + +Template: bind9/run-resolvconf +Type: boolean +Default: false +_Description: Should resolv.conf settings be overridden? + Please choose whether the resolver should be forced to use the + local BIND9 daemon (named) rather than what the current connection + recommends, when this machine moves around. diff --git a/debian/tests/control b/debian/tests/control new file mode 100644 index 0000000..2fad418 --- /dev/null +++ b/debian/tests/control @@ -0,0 +1,3 @@ +Tests: simpletest +Restrictions: needs-root, isolation-container +Depends: bind9, dnsutils diff --git a/debian/tests/simpletest b/debian/tests/simpletest new file mode 100755 index 0000000..468a7c5 --- /dev/null +++ b/debian/tests/simpletest @@ -0,0 +1,26 @@ +#!/bin/sh + +set -e + +setup() { + service bind9 stop + service bind9 start +} + +run() { + # Make a query against a local zone + dig -x 127.0.0.1 @127.0.0.1 + + # Make a query against an external nameserver and check for DNSSEC validation + echo "Checking for DNSSEC validation status of internetsociety.org" + dig -t a internetsociety.org @127.0.0.1 | egrep 'flags:.+ad; QUERY' +} + +teardown() { + service bind9 stop +} + +setup +run +teardown + diff --git a/debian/upstream/signing-key.asc b/debian/upstream/signing-key.asc new file mode 100644 index 0000000..98eed56 --- /dev/null +++ b/debian/upstream/signing-key.asc @@ -0,0 +1,290 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBFf1aL4BEADaw6pPFCoWEtbcGEbfFRsCxEK2PDjzG7+PWTDUpdJgzMvHKvWU +BkKKpxxkWk6+irY4fZnaRkXKR6ggkTDRXucpssayXt95ZXdniOWGOuEGvGmIcif9 +klfvDLxK3dq1WrsRGs35FE4puxldS0RAS8dcRlq0bqMpnaSPxay8bdvQF8v5syIF +vW2ySfT21e1YgaMdSCu92kmg7lzrPccKFNuX3xkosGIglnoVcjpXqsZEIZjj6YAw +cZiEGB1Lxc88WjWbhrct0S1Z4zITapRAFdY65i1POmHmcyqEDlhYvbPIfk99PUvB +o6SbvE5IGChc+O5cqwp9i8sTw/ABewUkv2rcRfjaehQzIm6HHq3lX+ukqinic1fc ++FsZnQNQXUoh9z3InKPzWkxOcc1DiXkMcXUdxSi7C0zghR/tFKTLHeTOxj8j6oaX +DfWpdhBfFch2ogVQXZMyPaQxuObtG9aVffbpQsTHzAitz5/M7lXj2044DE8p9gcq +ORMZnqAE/uVuYvGzdQZJEx8pDma4Aegx/Nn0Wpv19U2zw2dfGon3Ckrdi8G77K10 +5++BB0ZFDia93kkEodcyJtdLMhFSxXV2XMMN8frO4jhHq86lnG71kbb5Y2ZdrkXz +BCGo6sVMVqWWEXUp4COfgEboeDneLUTlVLFQbgqpgWCCFZKz/k0hQpZbOQARAQAB +tE1JbnRlcm5ldCBTeXN0ZW1zIENvbnNvcnRpdW0sIEluYy4gKFNpZ25pbmcga2V5 +LCAyMDE3LTIwMTgpIDxjb2Rlc2lnbkBpc2Mub3JnPokCPwQTAQgAKQUCV/VovgIb +AwUJBF9JgAcLCQgHAwIBBhUIAgkKCwQWAgMBAh4BAheAAAoJEPGxG/Bc8C5XwvEP +/jRPx7GaTG4PqXiNptV36r1q+Eg92oRozUqNcuhN/l09gThyClfQylsEhZBcTT3I +VAjqqqAott5XNqw8pyPjERMFnqal0zBMZTln9RLkLnvoWQrHnEzG3CJ9Ndkk7niM +DOpRI71h8+nMl7YbkXOy87qamvoZ2BQZcdL+a8R5p733JaPMDUy5leZKNiywThQQ +iEtpWuz5u+zoALP5EKedPKCr0+xfGTUS5qptR2nHnRXnZouPfbQWKyEWtC3Qbiu+ +0ir9e2/4pp725g+os8TDCyzfRDLgD1cbxPrObwDAiw1B8KrL5l9WD70vfYpyMuvj +aUVkNbL5kFEuKKOrQSxyehyR8pgUyUnYUejmSdXDg/BmOpXr6gscnRDpq7Th6yew +85Dy5ntYHVAO2Qq6Iafnsun0/i1g0Wlv+OEbN+YIXTMbweCt5qddC1ak6I0WomiP +Frh8a2EeFrpRGEsKR9aFxUb+HdobclBMV4T2siewcW12W+MWnvRzVcMxFs/Yf1Wi +4DTb0sAztpftYk3vOVFkhIlTtgp0u9GPkSgCwIeW1ZCVMnxaWMfzDvzjt0cp09MQ +a6MBwIoKPLIRwVOzoyIhS9PrI26e/hdcQPaJo6ESYbJGT64lTbkVoaWkKKbJbJrG +gTnIzoxDL7l9rlYGOy3G1M6jZvT8uFanMM9vl22QfT5niQEcBBABCAAGBQJYPPzW +AAoJEG+m68mRGkwCqeMH/3sYTCls7frQzPDsNxc6sUowMvIHmU99ybUNzcIBEG4v +uBTCTKQm4ubC0vQN1YSGgQwkRAaVLLATA6hXvq0Rif0LHm2U3gNOTl3I4khgy2pp +gE0NNaXJ5WZUFITN2vY41z6RqUccW2vVSa4EfsQF53AshsRC81wjKHx09UX04dtz +AczeqBBoNAQ9IOm4hagiD7uZm9GFg8h0p+f2QgEIz68LOV/EOebyVDCoaU1DV2u2 +PYDcIwJHHSVBwvmzDDOKqUkqicsOzpMqE96/oZ6vtzTAmQMavQJ5PH4iAlLc5kYs +Cg1fRhSkfw5FKh7I+1OGaNcqqWHRqMXHa/XqgF/IUmyJARwEEAEIAAYFAlg8/UYA +CgkQlumWUDlMmawx6wf+LrvfHO4STQygjoAVpLPL/XwB5DohSrLNygoTJX2D9jol +jgek57VXfJHY2wRWZgCUJ4lN9yUjPnIN5Z2LcmAY4CX4F2QOyWPIplnsggG1mn9z +ERqSNXIdJmNkP8A3/wfmcxgIHUUgM947HpQWC20uNls/27UXGyWZpRsfsE1qza67 +BDCwRwmkJ3Du34tLUH3eup321DX8edmBcVd8zcBhxg4I85mexO6ypq+/u89GSHrC +HZntHaowd42s+Ej2ApcING01WkxgIhvjc/BI7MLQcJ9YGCJWo16nbwrk+7crfP1O +t6yaXPuGWzaCTyEzVdxAl3ONVk+TUfS7nOaakofzRrkCDQRX9Wi+ARAA7jZa8vD6 +sow7Jf6JaeW1HN2Pe4yshwGDYIYNFa8MKCrWhhonll2lex7VLJZrZlJY+y/A8s7w +bzpZimcBpwBAOlCUhxGPlW2M48Smj80x7ViaWbX7JGZMgkHmMu8gocZOdNJIVPMD +T+fs3ZBVPnfeY5Y9ENuikv2S5yv9MGaEsxkTVdvgnk5T87T7s6LXKWOXoP+19A/4 +nvFhOwTitgaMTVh75qZh43gKFuWrAZSeh8nezjdLWz/Ponh23AMWqZK/SBK9dvv0 +T4ZrqwMEU9Vt1zSj26h4RDJmp6Y7/UBWZ84brD7pnm0vRd0tyHUjx52WbArqVeVX +u3es6r23W9H/5xP+7Ufu4xBTXuPdZCVJ810ze6yn4yZCFZMZWA5Ax/Ctq+5DWwpH +bNrETfsPP7/ERCZAN9RRoX9qDupoFfjWtzaWLUjfLUtsfaAuXDLXhJb5wcaA3xNG +FB0r+TcubBo41v/kR6qtVcaigR2G25UKX0dTrBLFs0VieEeRfErpvJPV30QHak9O +IBPQ5ZhrIOGTZ+HdUfkr12qIyEYczqxbtrYRL0CadXGDIzPQkiFPqt9NtRPpYhA+ +84OXeQ9fZdolQJiZF3yrBXb+Jh0tTjPyA4LbtL4O4OKkUQeKBkEZUpdvPBJabsKP +5jtS18MqpOqB96WQfhbu2saNcTeRD72GaxcAEQEAAYkCJQQYAQgADwUCV/VovgIb +DAUJBF9JgAAKCRDxsRvwXPAuV8rPEACvmX/uXTjRHgI3Ofqk+AcSqwfR9XMxnV9i +II7AazAwh2QhUX71ITBvdOW9YmztescIBMP1a18CULo1kinOLix7ihfUjXcKf6AV +KcpbR5tGVFSc6Z0KS7jaMGHNoSlC0UkSo1EZAcOZ9ICvjprwgNrkRxEQXVKJCZla +2o0yFbWDrqszL0VGIDm6NRAItCy8JaAiA2Ze8v1ngCTP+LHL30UT72dswpp+0JCm +cWntZ1ikQokrmXVVfRNObDgtHNj+BAPqaml8hy5Gdv1zhy9HlXpLO85e6qeMgVmm +X5lP4d0gT78YZNCEK/j2dDZM6voKldGs4ejsumuUs9ToSbcXWsfYfVsDtSnAUWui +AvFDrWxh7h2tExire/92Plud82YMidayvUGyTFUpzcxXGlqbCnsCZNIjUjC0qZax +FD2jXRlCxn8RtR8dY0QmnU1rG6h0baZDPn0mgH3TCpTxCJc3oA/plyli6Gfg+Vsh +YKDcZ1FdUlmIfx/tZygCABPRbKiB2DNr5S4Vd5VYZFGUR/hAvrVoE0f/X5bcRavu +daZUIbaHdYuWZP1gIqFp5muOSuDp73ddrIdEbEIeS1JfDcy+jPCFfl2w6TuORSah +UE6h7ewfx3MRCAoHVkyEgUA1XR+7Ic5N4mdoq/9lBVk5oJm58uJtAWbgEs5p5ky5 +twX4/LLOqg== +=KES6 +-----END PGP PUBLIC KEY BLOCK----- +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBFwq9BQBEADHjPDCwsHVtxnMNilgu187W8a9rYTMLgLfQwioSbjsF7dUJu8m +r1w2stcsatRs7HBk/j26RNJagY2Jt0QufOQLlTePpTl6UPU8EeiJ8c15DNf45TMk +pa/3MdIVpDnBioyD1JNqsI4z+yCYZ7p/TRVCyh5vCcwmt5pdKjKMTcu7aD2PtTtI +yhTIetJavy1HQmgOl4/t/nKL7Lll2xtZ56JFUt7epo0h69fiUvPewkhykzoEf4UG +ZFHSLZKqdMNPs/Jr9n7zS+iOgEXJnKDkp8SoXpAcgJ5fncROMXpxgY2U+G5rB9n0 +/hvV1zG+EP6OLIGqekiDUga84LdmR/8Cyc7DimUmaoIZXrAo0Alpt0aZ8GimdKmh +qirIguJOSrrsZTeZLilCWu37fRIjCQ3dSMNyhHJaOhRJQpQOEDG7jHxFak7627aF +UnVwBAOK3NlFfbomapXQm64lYNoONGrpV0ctueD3VoPipxIyzNHHgcsXDZ6C00sv +SbuuS9jlFEDonA6S8tApKgkEJuToBuopM4xqqwHNJ4e6QoXYjERIgIBTco3r/76D +o22ZxSK1m2m2i+p0gnWTlFn6RH+r6gfLwZRj8iR4fa0yMn3DztyTO6H8AiaslONt +LV2kvkhBar1/6dzlBvMdiRBejrVnw+Jg2bOmYTncFN00szPOXbEalps8wwARAQAB +tE1JbnRlcm5ldCBTeXN0ZW1zIENvbnNvcnRpdW0sIEluYy4gKFNpZ25pbmcga2V5 +LCAyMDE5LTIwMjApIDxjb2Rlc2lnbkBpc2Mub3JnPokCVAQTAQgAPhYhBK4/rHln +EexZ/AB6pHS7a5pMuz04BQJcKvQUAhsDBQkD7JcABQsJCAcCBhUKCQgLAgQWAgMB +Ah4BAheAAAoJEHS7a5pMuz0476oP/1+UaSHfe4WVHV43QaQ/z1rw7vg2aHEwyWJA +1D1tBr9+LvfohswwWBLIjcKRaoXZ4pLBFjuiYHBTsdaAQFeQQvQTXMmBx21ZyUZj +tjim8f9T1JhmIrMx6tF14NbqFpjw82Mv0rc8y74pdRvkdnFigqLKUoN2tFQlKeG+ +5T24zNwrGrlR3S7gnM47nD1JqKwt4GnczLnMBW/0gbLscMUpAeNo/gY4g0GV/zkn +Rt91bLpcEyDAv+ZhQZbkJ49dnNzl5cTK5+uQWnlAZAdPecdLkvBNRNgj/FKL41RF +JGN6eqq3+jlPbyj9okeJoGQ64Ibv1ZHVTQIx5vT1+PuVX/Nm0GqSUZdLqR33daKI +hjpgUdUK/D0AnN5ulVuE1NnZWjVDTXVEeU8DFvi4lxZVHnZixejxFIZ7vRMvyaHa +xLwbevwEUuPLzWn3XhC5yQeqCe6zmzzaPhPlg6NTnM5wgzcKORqCXgxzmtnX+Pbd +gXTwNKAJId/141vj1OtZQKJexG9QLufMjBg5rg/qdKooozremeM+FovIocbdFnmX +pzP8it8r8FKi7FpXRE3fwxwba4Y9AS2/owtuixlJ2+7M2OXwZEtxyXTXw2v5GFOP +vN64G/b71l9c3yKVlQ3BXD0jErv9XcieeFDR9PK0XGlsxykPcIXZYVy2KSWptkSf +6f2op3tMuQINBFwq9BQBEAC59lflbMmvSVkCHFoakdjokwGviNU4I/hOsNmHALYr +gJc0z88ss2KxbOq6JZoW9QOEHz2QLGsSGKnBUViEGvXoINDGuvzKFqHdEjGsExiF +FPGAgCQA2CSEZZ8MlITNdq4DuSti1LetjCF9d7hw2xOQs9ucxSXIslyqPbCdlxki +33tov40VE/J8jDUp9Rv27e0H2x4Nhu9MRQt4vTtpOcelYzl/dtPAmsnY4U/Nex4I +LM+JU2HcG/5i0nWkxOtz9Qc7kOgm4cuwXTCJw9KukPS3CykV1H/StPp43JyxoK1X +gZDMFww+9jupqLletmYKqCW6jVbqXr4Xlisq9Ey3LIWRQ0Zw/LB2NKU/jgnJGtLa +7O8VRWJKwkCtyYUbZMksKiGex7zCqPDR0hRVuYNsTjONobnrOS+7ST7ThbCndc+A +5mtuXpxuFffIuG78a3R3N30RF6g18peTfaEHMpqz+914HkNl6Ns445Zh+2rJkLUu +8O++tgWEUrpUajN9nosWaXWHOf7E9qGnm1G/3f9P3Nd5U+b3OKUYyqb+CNGCHyiN +bE1Cg3MnKpM9Yi9aZu4Qg/dPdxMWrqUmkmyDf6x/Oh8ZZkIacFlAaqbysQ6hRaJo +p7UG9AJfXHynj/Hz+1dNpUOlAIairFe3T2mWQO4Yy6IMgLEGVodZRHaMugdzZwus +HwARAQABiQI8BBgBCAAmFiEErj+seWcR7Fn8AHqkdLtrmky7PTgFAlwq9BQCGwwF +CQPslwAACgkQdLtrmky7PTikHw/8CZ+DnggV4AuI86spuMLdtUBDOux/T0gvyxSW +f8sJkjH0eAYAmP9/flJDfmwra5yNaINfqoLFWtaYLpxpBcWBc4VIoiWqVp2aaCPi +wh0sznCPiduiYcKGkHmupX8aCQXBYFDeQ8Jq1e9zwGD7Mon7BeBO48Vd5/IT1H5I +u5qzaCtD2ECO9MYdhuqJjFKU0MVzVocsBDdtLvrfnUwe4wc6kvOgHQ6RkMJU1bgY +0Sqstsg12vnREAr4uihnZQEihsRmNdiiv0DYVaRK92PLPpfVAox1Axq2HpH3WT87 +RpsFruXLj/zTl4AZczfDVd/Z4yWmJSzr0F5igkGSUrxo0ye2kNES6cmOGI9TgmgP +NLGXlC/su5fKXKjRgkD1ibJ0qFNNxF3Cwpz/+cav9ySDgFGX5Vu0kFi93fEYHshD +6lP9M5qS/2oKiykCGvcRCNU/9emdYlF37H52rxRerBaZN6dYMTjZw2vsEMUl06pL +llbLiwjPix2OlLFcwH3yKJG0pKkpEImBdJwHtJh5uHzfkSAbZjJAZ2Ekw7sLqiT0 +85hAGovywGpHMiYkqhNUO84fjZYCsrAlZMdriY92IMcQhmWQ416t5zcle2Xgx+/x +zBnktvx9KIH/HwBa+qym5z/uFC2S6zhNyC61LV/CEDCmcUi2lUXr7vcIxCsmxuUF +1ONbRP65Ag0EXFtUfAEQAN5tk4luE92Ed4E92VlgTetGMHyxwOlZ2OsK6l+Z5ML0 +wzomAITgMQwG0FeT6HX7vB+luVhg0XAZUW/K0bme8ZEO0dbHB3Vn07wXHhmq7QXH +/ACftkvevIT610dHskrtIvE5rZfj1P/wtjRTxDrkjhlGj9vhUxxcCkKadzDdBJGo +dP+Zh02d/4cc++LePNqZ3eJWm0JLghqKxzTv0MV1r6G1ZeykFzXeWY+La8ZCRaON +LcHjI7wlpyTJA9WGmyAphtEHM4fQqKLxtebIDo7m4glgR12nlV6B53gUT96PcKuA +Y/UPRiTV6nHyUtuL1EGTAVLsMDmtDbdSdtLLVbJXVmA+tapABa4amMxNVNY3QSUj +cAbECcTyVmVJfIT5fJW4eOMhWtrIGMspWoO5It0pl4K8jhCzIcfoXQ0olCSeC9fE +tljE7qzRzYQUUvN1VZPVX0Yw/xSwOutv4mxmNRWY9HW1M/jGoRAboqN8WhCbldak +a0XCH3U4rWXB/8HHb8KP4+q4ssVyPuEQ/v1UNNRk9AB25NPEh5PMdcf7HU8IcUHX +THEfd7zZVJ0l4FSsnGeuJfMrnRIpNOYX65ikeoTwmDU3ZjWfmSy7F5hTLw8WOEB4 +EKpnplyV1QN/j3317/M9PxvB8IOvyNF2okeurtHFMmI/lGwy51akp6iHMkbBDm5n +ABEBAAGJBHIEGAEIACYWIQSuP6x5ZxHsWfwAeqR0u2uaTLs9OAUCXFtUfAIbAgUJ +A70hAAJACRB0u2uaTLs9OMF0IAQZAQgAHRYhBJXO2iVrHKChXzAvtZUhp+1drOkY +BQJcW1R8AAoJEJUhp+1drOkY94wQAKb2fED9Up/xHEOjZm5ODK5LCVHy0KMATiTf +5SiJhRtqaRbimPH1WB3XMLls3FJZnm+UngIfwCsoWo0rksFUNmqFi6t4Cj/UB/Zv +29EnDT9BAeG5fP+Op5PDCsu4qnLv3oam35oV9yZLRkLhBd/EkRGEA/q27WnpiYCx +Jv5uPOJBWQqu32aE6st23PpY/QWDWOhGPfcWCecu1rIe+2BCs0UjfO0KOT8HYWNh +nGpsEZ+TmDKjRxMTYWKguEb9evEihl6kUwmQZgROdhBes63Yq4ku9rBXvRhCYbwS +odhjx2soDRcNmzxNV1Ply8a+2bwRHPnOeyyxEHFAwjkyXo7ZqGtenwSriG0LOW87 +y3Yw63O+oAlGLIB3psBSj4wZVGme9485HVICAFcJ3jXqsXSIJdzW61nGerB2r2Qk +Bn7yYIvHg3iOToB0alfNw2QuDtCZTNefvlHFnoashRhkk0yWzBerleFJbijx4+Vr +FaOH35BO1T3rgBmGkDW6gewoZMHEcmzTDoxxmbXiRvY+5o7b+ul/yzwhnJz3f5jk +7+Adnr9qAGMD2o3rCRBHV3lSEkLhBL+bfmsEYEor1fd+pDFoEKKjpDP6bgDcZyGv +O0mmr7Y/6ZrnKWxOrmNXieOTLbpY22tXv43QLgyiPcjhCfphT95IxqdNfMfOiI9k +IQf8g7GBciIP/1mbdnMj6Hg0J9IbI/XX/DWATOVMdDhq38VcggOHRjZk2lY99+4V +Au1wRHa/Io/CENikYzI00deSzhrN+tdUK/TCZI0Ft5Lykmti2ilmkIQGsBuD9gu/ +2bmWkNJEdpHeC/+oxntDFj43CpyKpPAarrw+4XiYNK+1+4WZsQRL0jJuKJ754v/o +NTaSd8GOCyFR7q8SVH4tig9DjkZjYjFFMnWkxdpnDX56/AfdS+x5EaRHKCJoGChT ++pHimvKe+MxBxpwJr4JpGddklin+6xUF5jTG6322hz385wsagGvmH2XliOu47a+7 +xUei7w3S1qtVCfdhtBEWL5i021yVYlrw+rUCwpFMIXAPA/p44O/qY06sQXJ01Fym +JCbOnjtVYX9gdF8fMKoDXAcvEtSulBNpXDongWp50BDfVoA7h9oDsxL5kw0GpkJn +uVMYLpO+iOqoEA3bJfsCedilkcz6UamLb+6RXMupKQaZ006Bu75Rm+h6PdicdiKD +jJY/7PbGuUmXxuSFT92v0hATlpEIQ8H8laEcnb8apiX2qOyGUHnb7pfYoNqvCm06 +3NP2igCtiGkzAohiHfhztfy2UApiTtXmPu3EhEUMooB+0Lt0zzY+e1cnFKRbJHvQ +ZidiOJfKuqp6upPvEgKYMRCAU4+nLT3MVbralo726JnDqrDJvCqAamhfuQINBFxb +VNsBEADcRGjaY+/ZVWBlQWvgy08ObhQbTRglb8thrcPeTR7211JJwAJemuTWwCjF +SVDH8JJ0Ss8rBcbitrGI3i3mcgJRQ1hILR2HT0bbmMLufCxZzQBjJm76H8XN++k6 +bd8HCYGXMguUaHRRHAcV+P18e3qGizgL7c8Vln9fbhowkX9yi/WhiL2uoXC3+XSa +C08TzwjKPb9Wnct6uCBAzMp8S7KW6P18vZyBTRBrugA9eZrGEe25rhy9szlJcajc +VeMiDMf058z7ait5t43AfUzd5zrD6c+ZGYIku88oY55LsZVcvn9o7I+UNbNJdiek +IpLae3Dgrie3QgDyfzPV1vXT2X8LaegOsNIkSo6jzjdKE0ZNg4xVSuPdr5jujYBN +z2k1lqV/Q/Ccpqzs0NsgnXnY8RDDrrmJhdy/ZrCMsXpbTK5KryR+JoDEiuyJ7YO2 +jTOCo6zQ631jvi7XUeHAFIdQ7eYRklJwABwj/IMXY++O8JBLO7iZ1dvvu3pfY7pg +dQvPgDttVAIxrNxMMj39LRbb6LE+eclWcTfGCMr3O6LOOLwkMnDWEkJAz7JMtWqr +2l+9xF9Dq7CkxHPP87dLTMNGIDr38bJ83CSmDPlBoaljTYgrlatBTV2hGMjPgEcB +jOgg6QyRGpO2N0SVBnD8PfBI7a7CwQw3BHOJtH8vPUkXZoafoQARAQABiQRyBBgB +CAAmFiEErj+seWcR7Fn8AHqkdLtrmky7PTgFAlxbVNsCGwIFCQO9IQACQAkQdLtr +mky7PTjBdCAEGQEIAB0WIQTXDITmS1WOW8zsByEy4hdfHXV6KgUCXFtU2wAKCRAy +4hdfHXV6KoJ9D/9IUN+s4gSiyWnqfq+UK5q86DTbC+OyQpAY/U/VDi/jQXDUaXzu +f25cCgyl4Xgf6nNTE6IEdgJCL4R6bChxJOHNpZ8/N3ckb/Q5xHKZ/5k5wFv7nxUk +vunzxB0wUgCLkn4oy4B8QbTMuRz1qcSdehUyZAlfkr7o/J5UO8FtgaMuNACxZNlO +JW5AjTDdbEW0MZapAgjx7+oTQMDtz9q4afuPaGJ3fTz4Vx1+mYt59b1h6xaMTXJi +8egJF0U4n/tJ+3gxAIhF7tQRPdNEwG+2Kw/YNyrLMY+nbazhlgUIIkk2IH3Ztd0S +XnNd7gV/slN80T9CtHtaDlH2FkeAd1unynxsDd/TLb1gLHem5iDsFuZBaIyHetdY +TlvT3SlKnDQr0FBTe86Kuv7n/ZNoU4lceXhUXTcataxKdxKEJt2x1Ei/hMHSVjaY +3ir57tuOUDMkl6hpL3sYiq7cMGUAnLH9nBZbbcNdfChDiM24mGmXaNoITutVAHS4 +uNunSL1l13hJ1hnGY79j4l+CgnPx7LHzBmLh4PPWKM3RYqwgaPEkflVQr1JOOKMM +x4bpllEtzpvVAIaF73tlsOQRRN1Aah67gvkWKqiZrXc0Sx/yh8EO/6bImb87rtVr +0kjeDGEiuGYXsszNBCmVjHal5kLUKaESefzd223zeaFe9foO2HrnsFb9B34ZD/9J +W5M+42QFd+tOLh1ue/5xToiyggGh1MX9axDqHiRu2w+E7kNuuws2426aupUQ3yPD +4dSwR428U14ytM90bZXztKFDgFAaQJ/4YVEGPSbLHFc4VlhDHpGljl8J7vI5xPOm +Ruc9aabtXwd065nQ2csk1DliiA4jpS9dUq/flH2oGj4b2OSGFvR5oC7oERHMpUA0 +p+wY3vnjkSVnWqV98yEBCFcZvpOy8J5KDZxYZvZydUvZ3ny5W6QPg8OKriqrCAKW +QXds47vRIiAasK14duLgex6il7HmboaqqOhRhevtBAHBJpB1z6Aq0SMwcKwdtTId +GTSoQd0R77ZGYvR3StpAwl8rJhCNwJHu2euA3hYPWHg0pF0L8pFbfUwOYf1dU+uQ +4xAJQKcCteQ7B0pawp+Hxp/0erB5c5PUUck38ze1ZoGm/oqh24XZ/amPVWE9nYSo +VTJwnbqWsfI6mzKdBHr5MP5zW5ei0PAo3lFb5gvVzJ2TqaGJvrh907I9R5Nwd6GM +wAWAzZ/nCLflSNyPyJ3ftxY6pGyCBJsycY7gBQD9i1xU0bxONltqSyifwQ0rt7yr +iwSI0VRnv8K3M2iTAdDm44bX6oHzljgiYachlV6IGmO3vdVVrCDhm+b+ia1bnQ/1 +H7itWEwllkUCCtaDwEcf8o3OdbS9S5KEbwH7YUD967kCDQRcW1UMARAAvl+0jUaB +UkQWBflWy4Wd8Gcf3lzOqbARdpM/iztebc7RbLnv0TNFQPV4TD9RoP+rY4dJzC8w +/rlxlhD3DiGcI3of3o/3pN6jss4wKyy9Jcg7uCo/fcspOoPOwigAUfBYTd2rWNvI +/pPUl7zmavQR2+TyQ4IHWG52zAABGej/tf3Ma6WGHC4QeTkh7LtHn3JFRCoFy101 +x60bJqIWONfR6+5UAOL/P+zTteEMsO3v7dWCWHX/tcYLrhCEH1CNnyPS7v7TF+Ys +uOGL7sSmQOUAcgldfUfTACw84YqViu5BSYiww18Eg1l66UcQFnhwB3fTGwzb3oPM +npAv2wAZ9gyFGzRgcH8QnXRm/SLDWlTaMIJS//0p/gXifCAdBZA/skBt+E4hQ5Sr +9iXGNMueR3bn7u8Pcoc1DpSJENE5H0nB62l3/OiSl/k7mJMGlUv6wKr42xNnIM6M +hO97axjRXy/XQz5n6ktyn9xRngkQNL9Ynj+i8E0k/xv5jA39EGAKOXxQFf8357sA +DnZ5g/Yf0Yr1c+TNIIRXER/k/KMavB52mguTNqCsewO5aje4Gq4vKd5P+jOKGopA +C4idTLkHutZTiakod7lW2jmjpm6P7oyAeAhDNEroNrbOIw0SaujHBmJtxgK1Q929 +y/EaH5vJyWfMFyUqM7CQBqUU/HRLERsebM8AEQEAAYkEcgQYAQgAJhYhBK4/rHln +EexZ/AB6pHS7a5pMuz04BQJcW1UMAhsCBQkDvSEAAkAJEHS7a5pMuz04wXQgBBkB +CAAdFiEErtYi/gIHfrS1wUbBQqJ50kjNwxAFAlxbVQwACgkQQqJ50kjNwxAf5xAA +hBhcOeqLgeXbUu0CCTKlnG6D7H8sQJWXCSsh9pAXffv58b4f0ntJ1TztKfVd79hS +BCcXRc/9+MhUUzR79NvFWWZMWqJ6MucjAkkOBRoc7c85PawYTI7e1zSapLPJEHG0 +xDzK8ClxwGEvlA4O/eGGVFaCTkxdTQg95fDXfghab6j89GI8Ghc9rC9V8RUgGVQV +qJJkBJ/gECJJp3holB4/w/I/sU+9AHXGKJvSJJ62fpmY143Y5JQk+I8DxoT0kIq4 +W2iZVAQMzQGpAOXkDuHk7a7J/QuL78CuoG98GOsfTd7nNsgPTZ07cPYGOxXeNR5U +9DlYOBWDwsf6d+D+tHLB8KzH3MWnWa3crjE3a/sgrDEad0CmAJzHXuCyPMy8vPQn +uxIai/gw2POq8YQMoKW5S80perLuN73FxAumjK9a2hYVdZNtABwrlW/6ELruv1se +mMjUq6oDyFio0rGy/uzCItl13hIr1Ii7B/SPz9dNnCagV8aiUmKXRk3HKoEXf34I +xWlod0szWopnP31NXNKHihs46ORSMrjnzFKjRcJsnipdins+DHJYroYhtOjNtsb/ +WV3D4tSerG3xKF/v3ssn2VsjcgK5HY/k9iUol/dvoP0bJ+rKs/fzt8oAqEexiRnV +cPnj/zAiBOt1940+0vTWaNYOPDkq872S48GNybOC342u2xAAnAp5myKostxjyQn3 +E/7/G1OWHaJW5kx/HCqHCWjgwwLOmhssNn8kpTf3ybvt5uhMolIF95RjFB3gBOfU +vw0sqMvEoBoGSMSTSc3zD05RBsWWFD9qwvPMXtn0gYaH39ISAFnxXrtrQ7dDD1d2 +LcBErdttnxEhUnT4/0YIat+r2PhmYYDYviKsuOy8MC/sJIxvhYEpbyPQnPksUzA4 +wmAbVNPlzqU2oWPrLT2tlxUue3z6VS/YHDcsLSgjVOMWSusLMh1+D76Y+Lcr9kVz +nRu+dYXh4I6OBnlT1VuzEVmrf69NFwh8j3PaVn0I0NEDU7mMa+5W0QYuJIsXZonq +SI2uIu64ZOVd+D8WmCEZO/Kmk5PMXs+0fMcFD9mOeFaiOdz+PIlHAsrxwKXr4Q5z +zzu/wEOaqAVa2bJywTbl8MntQUY/XeD94MvdlSAwO3Ll1BpQ5NfXjm3YpP6Uyqlj +pkrYQL56iqucgYn61jLSXhFHGLXSZs2G48ggN2mHtf6ZQeAJ4D2DIXRj4uqIHoJf +7MWDui8u+cJsw/F0ZerPsCN/CpkEoj4FW4F4O3JbiieYSUK7lxc0qyDdbQiVCVl/ +08wNToe3RctSzsQ99tCwfVWqLVcTVb+0aeSaNykb+qW30bHW7AUYs/qKiapQFzZz +QZnpHXGmVe93fDfILx3yUCA8Yia5Ag0EXFtVOgEQAOS7GFDH2DGXPMJzSdS7a/zZ +ewP4bM42n2Ku3XiCyXG173p4ppNdOLS3l7JrRflMhjfBtETCOV8B4z0B9wCZZywz +iLOt8+0A0zpY7EHZNvMRjZyq/s0FCKLtnlqo/KNwiJPRvQazZ6+UOSffEQEGpNKs +1ycZIDb1tk8iRpRvtCin8CeLRLf+2BxHbWBewnCSCl80rC89PTcvPf+jmtcDJqDQ +z/blp2CT1JUo1xdzyHYdIa/kQ2PBQo02ejBVs0vDjbzuYVQzZV3q6cYnYwGPtpTB +Ot8GXuA1X3qYx0MlZwGEYpiTFS+Ju4cJrYofuBOudXpfux2uAPkJskw+ro5k1I/q +fptRWDbZ4fGgROmUXBPg29XdyVExYgAbVeBdHWX30sCHs8+c8wzWkdAY/BgdCySg +EVLiDmSfMekH2H1N9ncwzhwNlHk2BaYTR9hWdZ7lrH7BbT8g6SVSge/eqgvjKI33 +AUmragvNQ1B3362yqLK/FJOHyJiYd6DKfkq4E+ysw+C+qIo51qVNkqRqT0M7HhwZ +AvaoeykrGIE5vq6jHa9+MxDlsN5Sf7gNgx2dk0d7LAJR6AmYNqRS2V+837XfogMc +bB90ZyK2rOzDN3f48jaqXA8TX2CSun01RoPdCPZm0M/uxTZxOFzoatrkpEVbx/3x +sjvuPVa7qkKdgUuo/PhBABEBAAGJBHIEGAEIACYWIQSuP6x5ZxHsWfwAeqR0u2ua +TLs9OAUCXFtVOgIbAgUJA70hAAJACRB0u2uaTLs9OMF0IAQZAQgAHRYhBHkdfriO +vI0BOENKrDPfNZrnpgp5BQJcW1U6AAoJEDPfNZrnpgp5JY4QAMry7TcsRIZJCVlC +qecIAjyJizWz5dEwScba0BDU4rv/h42CvXJlySZpbgUEyB4SBggEnu/dKVbsd/t0 +TXRNg80Zs/pTFVbwcg+sDgIg1wZldZbClLfvgk0xLoDl5vq+K4SAQwSLTSPHQyYu +8IxkrKmbBdBSXlgnmcHK2lDXrzWYJDEYEyFPV4pC3cHicCygSc/4eepUz+crEF6Z +IE1df4LRv9h5CgsLewMv5nQ1EjxTo9mX1GiSh3e7KcfS98FgIQl3oy+yO2cmVVVq +x5ggDcRI2sUbXa3D3kjAo2tUIA1nUMFLIrii+aZawOsf64VMdIs2OXEi5XFR+Zdw +t+Bx6lUKZ3/tntStZitJdK8/RUbhmYQ8Tu01vxt/IAN+07VxWyZwcFB5KuC+lKtO +/0vwyhyiOlHm8lzV/5qwFPusB4bNk/2uLPUaavJdrBpmB0t9pol/NFCRzW5MKFvu +Qw35QyFVR0IBeaGjRc5J9yxbzi78umN1iHZbDjXFA7oRa9tkM2AP8V2anxSHUyon +UN6OuLqSM2frA8iZcl0S7qcepYNF1ix9PhdQHXy0H7hoikXMLIiCl/unW5pVTs6q +KnmxmRz9ZcqvvuVXbeY9C+kZE0LOBTZMljuS1Hcs69RU3rA18swfN5CTXw12ZwQZ +SsnRhi2X28Tn8SD0vrEsEf08q3XshDwP/0MvBBfymXd+5MzxlvMg8vGJeFuDMEFN +cpETa7Xzzz5Eir3ETtxpUWPCriqmCpnlIWidNwbg+LlyTeYUDPIDnMtEX5ySmYGn +BI8ykvAKm/XTfr0PWOEAXcmxTC3oMhvYEhIyGHZOFJQxIo7vmrwZKi2wqMnKMPq+ +XXHgvtZe5tNbESI27APeQCMVZLVnVVa0D1JRFYBuwNoJXhWbAIKlIjBGv05NvK71 +e4x0zEY2mXxLBbsxVBvHhpg29HseX/AhHvUAcBehJ+sqnenXZqdeNhgBIeZubXq6 +A/gfscswF/Ocp63Z/vqAjEmvUKwAxNKrKlwLVShVvobPx2N4hH4ZT7p58cjhMhQz +Lm4whTHy1hvBIR6j/Lo2eOkkVhiMlrrvWJIAEic3Gzj5f7XOsVr7CXjkSdoXHOIR +63ZDO/9Wy6ygu8vCdiIFlyRyUBLnGhUYVbRYnTU58tQMfEYy30ZKF4vxz4Ysxoy1 +oJa6emaa33Nn1Z2kE64AaW4wbUJ57nROuFdoYTwJ02vyc51J4s0C94EA+a5VrQkN +J7bT8P9G5gksp4b1WyoFm+O4aU5Sx+XpSO2IZFuBL05anF57Pm6Bz3LJX6sEYima +chv72q7PYeYbETrl4DZxE2xlEiMUvN4DH/RExpPWeUsVMFtS5n60n5+AW1EYyGJ9 +mfWlvZ0xCjQ3uQINBFxbVW4BEAC/gtho2rZl6/+/szkOfEumAdFwyQbtM5CnJyuU +rnrneWWlnNPLeaHml5a9yrcgOZ15QgnFD5YOHZ/S9L40goML8cB118etk9uE7vMv +EtwxbkqZXTlqdxpFI/SzT4jJCa9XFQ2uA+KdmKmGW9EagtdLql2B9ziMhH0Ha6Y9 +5x+9+7/oRYU+ddmAbwrJjdn6bCuYQ7QVpccFC67qdpy2I97v03hst7yGT1FbrIjE +sF4nMig6Uhwma5Edqm2dLaVXeZ+Fl0WeQCnWjprZMvkHCAxjTBlQpmvvwcQwqHot +s832s96l/Sd5R6r+TWU0lTtXpcxL6t7MXfW+BInkqg0ZiHG1Znni6SwfatzDv6W2 +lJW2pj3Ub++JulEIkbct1f+TEeeLU0RbJmWlL/qe24fodKg1ixH0gyxsRKzdBUIf +vgCkrzwLFgJEHRISjQzIASVtDdt8QoIqX8XALgjMBgAnZqtYrAEdFImWys0K1zOu +MbuPcTImufz5ObnKM7rRMdCO9z+cHGs0TT2vUvPPuOsNYL1GX4EfrCp2eLKahjJQ +BCxfatn4mFqHVmR/4a7vqq1j4Qfj3h08z7QVrNwGWAF3r8nmaHdaT0m55xctMRQa +3N3UaYj0IQ08CSUJq5e005Z5Oinbt2O4paxnG4/UbJXpRiLEVU5Ja17IBsDfZydx +W//ZlQARAQABiQRyBBgBCAAmFiEErj+seWcR7Fn8AHqkdLtrmky7PTgFAlxbVW4C +GwIFCQO9IQACQAkQdLtrmky7PTjBdCAEGQEIAB0WIQQVaJBoXqDfahNx7yAXzF2x +8AiEBwUCXFtVbgAKCRAXzF2x8AiEB3iPEACI735VFBDd4E6wlGAA12Av+XnWSruo +Te7zGdKo2SuZ1gN1PYdNgflbifYCYajnQENp92N3q263Sq3MDf+EZYKijJ3EoU6y +chjOJR6ge+UgKPdGQc7Lu61wWECBFaL6TMXCedcZ/Xd0xT2IbvK8qsKsITDjiDOh +DUqdjVeyPXyfkmSrF5P3hvNxJvPbQ6k5Igx9JA+unLXxatljAeh1whnchRQAIKkx +l19Nr1z+odFD+tzCX4HQmUfHRXgBiJICyIxWB+U7USqLtqk+7DE893meceSt0Mz0 +JgLct0E5EFfCdwbehnl5NJeay8XEdcfjUkeyb/VAVxWYUBiG72okUIaIP7xR5MW1 +P6ecdTr0GzOC1SySpfyT0+ot0rtXGSnXrBzpY6nU14hDoV3g/FMas+qz1smTtOVi +1MVakDRf4QyP9Jqf4q4/GosRrgBvXZHi+zWkKuf+DXPcL/q6MfgHvQc6tFMh5ONQ +snrF3Bca3BQDT2GKjSukeG3JmECHmKtQk22jhk6T9DJ3518yw29El9tUgraaZ5Fo +Gen3TYCxA2BhV2LYCSLSHiTPdtUsbDuIP/FXaFXr34nAtKKOSSY6nP8SMzCPSEMN +iscfdjejR1Xd012T/mLqVCBzFJWyX2RaUdygSWUpt/QdvWa4pXCgYZjEVidraOws +VWMbb0zuI9KCseOaD/4jd+awtnRUj2SbGeJSVnqDPk0Hk8ndFebAo70uQGATkLXC +m5ls0RDU2xHZumuUk+b74Y1KjwdqF65NEmfjaSQ6B8gnCO69eKHcUT821ED9bwfa +4XpgsOMEoZklvFByax0JMS4JEJU/xfsLmfeuXVirN9Z82vxAXG8fuK8bso6VLG/J +Mpxhq1Zv24NQ+uevvh9loyWMcaw3IqPvQzNlyuuya3rXJYZHSH7TauYgqWySXiGS +H6oXl6Ej4GR3t5uWwHKvEREQer+KPZV3uXRnrTpgITy+PxZ9ywmPwmPBHcD6c0P+ +g0lNNtDdvw69qy+oh7JaqqYaDvedseN39UgBSx++ewRhq0OTikAD/BCv1zhPizlD +9BHAOsCxrgnz0WsONYKFAE8vtNo/wB//djf/zqMsI3iWdbWqM9e/muEEV4jQRWLW +TWp1XTqqvkc6TsLBBNO5zisJ0VwSfDyRUplr/IWeUl9FrRngjBJqF2nl90US5p3o +uk5wUWdjFa0haFyDgZNFwyFr85mex+o6qIC3oif7UjC4kHPe4wzvHDYAxrHMB6MY +QvrcXzULmInot3qRAr5duUNbQbrjdtVvOQFvjowBP5Scu5ZBSzc0O2TUUSKgnJZS +Bs7+yswfgyhYzusbxlOdA+iE2Y8GuovamGYTbsdCxDStOMfZnaiXuLL04Uy1PQ== +=fX+D +-----END PGP PUBLIC KEY BLOCK----- diff --git a/debian/watch b/debian/watch new file mode 100644 index 0000000..cd00678 --- /dev/null +++ b/debian/watch @@ -0,0 +1,11 @@ +version=3 + +opts=\ +repack,\ +compression=xz,\ +repacksuffix=+dfsg,\ +uversionmangle=s/((rc|b)\d+)$/~$1/;s/-P(\d+)$/.P$1/,\ +dirversionmangle=s/((rc|b)\d+)$/~$1/;s/-P(\d+)$/.P$1/,\ +dversionmangle=s/\.dfsg\./-/;s/[\.\+]dfsg$//,\ +pgpsigurlmangle=s/$/.asc/ \ + https://ftp.isc.org/isc/bind9/(9\.11\.\d+(?:(?:-P)\d)?)/ bind-@ANY_VERSION@\.tar\.gz |