From 6e51409eb6357b1e91e81b8fa06e75ce19b80ae1 Mon Sep 17 00:00:00 2001
From: ryoon <ryoon@pkgsrc.org>
Date: Sun, 17 Dec 2023 13:22:05 +0000
Subject: [PATCH] knot: Update to 3.3.3

Changelog:
Version 3.3.3

Wednesday, December 13, 2023

Features:

      + knotd: new 'pattern' mode of ACL update owner matching (see
        'acl.update-owner-match')
      + knotc: new '+keysonly' filter for zone backup/restore

Improvements:

      + knotd: zone purging waits for finished zone expiration for better
        reliability
      + knotd: remote configuration considers more 'via' with the same address
        family
      + knotd: refresh doesn't fall back from IXFR to AXFR upon a network error
      + knotd: increased default for 'policy.rrsig-refresh' by (0.1 *
        'rrsig-lifetime')
      + knotd: new control flag 'u' for unix time output format from zone
        status
      + knotd: extended check for inconsistent acl settings
      + knotd/libknot: simplified TCP/QUIC sweep logging
      + mod-dnsproxy: all configured remote addresses are used for fallback
        operation
      + mod-dnsproxy: module responds locally if forwarding fails instead of
        SERVFAIL
      + libs: upgraded embedded libngtcp2 to 1.1.0
      + doc: various fixes and extensions

Bugfixes:

      + knotd: zone backup fails due to improper backup context
        deinitialization #891
      + knotd: failed to sign the zone if maximum zone's TTL is too high
      + knotd: malformed TCP header if used with QUIC in the generic XDP mode
      + knotd: server can crash when processing new TCP connections over XDP
      + knotd: incorrect initialization of TCP limits
      + knotd: orphaned PEM file not deleted when key generation fails
      + knotd/libknot: connection timeouts over QUIC due to incomplete
        retransfer handling #894
      + kdig: crashed when querying DNS over TLS if TLS handshake times out #
        896
      + kzonecheck: failed to check DS with SHA-1 or GOST if not supported by
        local policy
      + libdnssec: failed to compile with GnuTLS if PKCS #11 support is
        disabled
---
 net/knot/Makefile | 4 ++--
 net/knot/distinfo | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/net/knot/Makefile b/net/knot/Makefile
index 4fd52839a4bf..fefd9e232d5d 100644
--- a/net/knot/Makefile
+++ b/net/knot/Makefile
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.80 2023/12/09 06:10:07 ryoon Exp $
+# $NetBSD: Makefile,v 1.81 2023/12/17 13:22:05 ryoon Exp $
 
-DISTNAME=	knot-3.3.2
+DISTNAME=	knot-3.3.3
 CATEGORIES=	net
 MASTER_SITES=	https://secure.nic.cz/files/knot-dns/
 EXTRACT_SUFX=	.tar.xz
diff --git a/net/knot/distinfo b/net/knot/distinfo
index 36d8792b6663..f8724ed4e495 100644
--- a/net/knot/distinfo
+++ b/net/knot/distinfo
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.45 2023/12/09 06:10:07 ryoon Exp $
+$NetBSD: distinfo,v 1.46 2023/12/17 13:22:05 ryoon Exp $
 
-BLAKE2s (knot-3.3.2.tar.xz) = ebaf73f0b27880b0cad07191f118d05e19809ee8c5042b18384d678dd55a0167
-SHA512 (knot-3.3.2.tar.xz) = c19a11db43b208a6aabfd96e0c31856affdcef1b599425343663fd6e00bacc964f197de7e5d732d7180219ba57b6e426afd2b762c7528cb50755f81429aaac1a
-Size (knot-3.3.2.tar.xz) = 1580800 bytes
+BLAKE2s (knot-3.3.3.tar.xz) = 7f44396cf1cab06db54ca208b8e74e2c2c605a087106d09a7aa7d49c8dd67c1d
+SHA512 (knot-3.3.3.tar.xz) = f911c6d735dc3f2dec9920263bcb9e5ce13d8bfbd97ebc66d8388088e9bf5059fa5976b58996b8a5688c186320b97a1707375fadfdd63ebc5f976d92733d78b9
+Size (knot-3.3.3.tar.xz) = 1586348 bytes
 SHA1 (patch-samples_Makefile.in) = 499b8742dbd948e489b01d512bc7a8d8e4fe2e7b