###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007 Michael Tremer & Christian Schmidt #
+# Copyright (C) 2007-2018 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
include Config
-VER = 1.5.9
+VER = 1.7.3
THISAPP = unbound-$(VER)
DL_FILE = $(THISAPP).tar.gz
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = 0cefa62c1690b4db18583db84bff00e3
+$(DL_FILE)_MD5 = ea45068fb27ef358f581227b99645525
install : $(TARGET)
./configure \
--prefix=/usr \
--sysconfdir=/etc \
- --with-pidfile=/var/run/unbound.pid
+ --with-pidfile=/var/run/unbound.pid \
+ --with-rootkey-file=/var/lib/unbound/root.key \
--disable-static \
- --with-libevent
+ --with-libevent \
+ --enable-event-api \
+ ac_cv_func_getentropy=no
+
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
- # add ipfire config
- mkdir -pv /etc/unbound/blocklists
- mv -v /etc/unbound/unbound.conf /etc/unbound/unbound_org.conf
- install -v -m 644 $(DIR_SRC)/config/unbound/*.conf /etc/unbound/
- install -v -m 644 $(DIR_SRC)/config/unbound/root.hints /etc/unbound/
- install -v -m 644 $(DIR_SRC)/config/unbound/root.key /etc/unbound/
+
+ # Install configuration
+ install -v -m 644 $(DIR_SRC)/config/unbound/unbound.conf \
+ /etc/unbound/unbound.conf
+ touch /etc/unbound/{dhcp-leases,forward}.conf
+ -mkdir -pv /etc/unbound/local.d
+
+ # Install root hints
+ install -v -m 644 $(DIR_SRC)/config/unbound/root.hints \
+ /etc/unbound/root.hints
+
+ # Install DHCP leases bridge
+ install -v -m 755 $(DIR_SRC)/config/unbound/unbound-dhcp-leases-bridge \
+ /usr/sbin/unbound-dhcp-leases-bridge
+
+ # Install key
+ -mkdir -pv /var/lib/unbound
+ install -v -m 644 $(DIR_SRC)/config/unbound/root.key \
+ /var/lib/unbound/root.key
+ chown -Rv nobody.nobody /var/lib/unbound
+
+ # Ship ICANN's certificates to validate DNS trust anchors
+ install -v -m 644 $(DIR_SRC)/config/unbound/icannbundle.pem \
+ /etc/unbound/icannbundle.pem
+
@rm -rf $(DIR_APP)
@$(POSTBUILD)