NSD 4.1.1rc1 prerelease

NSD
1

Hi,

This is the 4.1.1rc1 pre-release for packaging and tests
http://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.1rc1.tar.gz
sha1 c5c0069b94aebd04ba1be4329c52b8268aefd314
sha256 20d4b5317154399e6716c94a92f63958c51996e8bf4603a7a9cac029cdb26452

This release has bug fixes and it has features for zone statistics,
pidfile printout for rc.d scripts in chroot configurations, and use of
long TTLs for CNAMEs synthesized from a DNAME. If the disk database
has grown then after the update the database should shrink down again.

Features
- - RFC 7344: CDS and CDNSKEY (read record types).
- - per zone statistics with --enable-zone-stats, config zone with
  zonestats: "name", zones configured with the same string are added.
- - Disabled use of SSLv3 in nsd-control.
- - nsd-checkconf -f prints out full name of pidfile (with dir).
- - Synthesize CNAMEs with same TTL as DNAME.

Bug Fixes
- - Fix that expired zones stay expired after a server restart.
- - Fix "xfrd_handle_ipc: bad mode" log errors when compiled
  with --disable-bind8-stats.
- - Fix #616: retry xfer for zones with no content after command.
- - Fix char used as array index warnings on NetBSD.
- - Fix that queries for noname CH TXT are REFUSED instead of nodata.
- - Fixes for wildcard addition and deletion, speedup for some cases.
- - Fix that failure to add tcp to tcp base does not leak the socket.
- - Patch nsd_munin_ from Philip Paeps to use type ABSOLUTE.
- - Fix spinning NSD with lots of failing transfers, due to pointer
  comparison using void pointer subtraction (from Otto Moerbeek).
- - Fix bug#637: fix that nsd.db grows limitlessly, an off by one
  on one megabyte free chunks, created during AXFRs of large zones,
  that caused the one megabyte chunk to be leaked.
- - Fix casts for ctype functions (from Todd Miller).

Best regards,
   Wouter

2

I've built and packaged it successfully on our CentOS 6 build server.
It installs and runs on our test server :slight_smile:

3

W.C.A. Wijngaards:

This is the 4.1.1rc1 pre-release for packaging and tests

packaging works fine here. Some (maybe not new) warnings from my different builds:

gcc -I. -march=i586 -mtune=i686 -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -g -W -Wall -Wextra -Wdeclaration-after-statement -c ipc.c
ipc.c: In function 'child_handle_parent_command':
ipc.c:85: warning: ignoring return value of 'write', declared with attribute warn_unused_result

gcc -I. -march=i586 -mtune=i686 -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -g -W -Wall -Wextra -Wdeclaration-after-statement -c zonec.c
zonec.c: In function 'zparser_conv_loc':
zonec.c:956: warning: ignoring return value of 'strtol', declared with attribute warn_unused_result

gcc -I. -g -O2 -g -Wall -O2 -W -Wall -Wextra -Wdeclaration-after-statement -c xfrd-tcp.c
xfrd-tcp.c: In function 'pipeline_find':
xfrd-tcp.c:235: warning: dereferencing pointer 'key' does break strict-aliasing rules
xfrd-tcp.c:233: warning: dereferencing pointer 'key' does break strict-aliasing rules
xfrd-tcp.c:223: warning: dereferencing pointer 'key' does break strict-aliasing rules
xfrd-tcp.c:222: warning: dereferencing pointer 'key' does break strict-aliasing rules
xfrd-tcp.c:221: warning: dereferencing pointer 'key' does break strict-aliasing rules
xfrd-tcp.c:220: note: initialized from here

Will install the packages later and report results tomorrow ...

Andreas

4

A. Schulze:

Will install the packages later and report results tomorrow ...

OK, the new version run on my testsystems.

attached a patch to fix some warnings while packaging the manpages.

Andreas

(attachments)

manpage.patch (1.28 KB)

5

Hi Andreas,