From 1388248082e4b135b821e2b23748c10244427650 Mon Sep 17 00:00:00 2001
From: Paul Wouters <paul.wouters@aiven.io>
Date: Dec 14 2021 19:14:45 +0000
Subject: - Resolves rhbz#2028586 Update to nsd 4.3.9


---

diff --git a/.gitignore b/.gitignore
index 8f218c6..012beea 100644
--- a/.gitignore
+++ b/.gitignore
@@ -46,3 +46,4 @@ nsd-3.2.6.tar.gz
 /nsd-4.3.6.tar.gz
 /nsd-4.3.7.tar.gz
 /nsd-4.3.8.tar.gz
+/nsd-4.3.9.tar.gz
diff --git a/nsd.conf b/nsd.conf
index 5c10a21..8d535e4 100644
--- a/nsd.conf
+++ b/nsd.conf
@@ -331,6 +331,11 @@ remote-control:
 	#name: "tls-authname"
 	# The authentication domain name as defined in RFC8310.
 	#auth-domain-name: "example.com"
+	#
+	# Client certificate and private key for Mutual TLS authentication
+	#client-cert: "path/to/clientcert.pem"
+	#client-key: "path/to/clientkey.key"
+	#client-key-pw: "password"
 
 # Patterns have zone configuration and they are shared by one or more zones.
 #
@@ -377,6 +382,7 @@ remote-control:
 	# If you want to make use of IXFR/UDP use: UDP addr tsigkey
 	# for a master that only speaks AXFR (like NSD) use AXFR addr tsigkey
 	# If you want to require use of XFR-over-TLS use: addr tsigkey tlsauthname
+	#request-xfr: 192.0.2.2 the_tsig_key_name
 	#request-xfr: 192.0.2.2 the_tsig_key_name the_tls_auth_name
 	# Attention: You cannot use UDP and AXFR together. AXFR is always over
 	# TCP. If you use UDP, we higly recommend you to deploy TSIG.
diff --git a/nsd.spec b/nsd.spec
index c4719af..5b6a5df 100644
--- a/nsd.spec
+++ b/nsd.spec
@@ -1,7 +1,7 @@
 %global _hardened_build 1
 Summary: Fast and lean authoritative DNS Name Server
 Name: nsd
-Version: 4.3.8
+Version: 4.3.9
 Release: 1%{?dist}
 License: BSD
 Url: http://www.nlnetlabs.nl/nsd/
@@ -112,6 +112,9 @@ exit 0
 %systemd_postun_with_restart nsd.service
 
 %changelog
+* Tue Dec 14 2021 Paul Wouters <paul.wouters@aiven.io> - 4.3.9-1
+- Resolves rhbz#2028586 Update to nsd 4.3.9
+
 * Fri Oct 15 2021 Paul Wouters <paul.wouters@aiven.io> - 4.3.8-1
 - Resolves: rhbz#2010311 nsd-4.3.8 is available
 - Do not require nsd.keygen service anymore
diff --git a/sources b/sources
index e8fbbaf..c9b77d7 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (nsd-4.3.8.tar.gz) = aec892f85a6757bfdf537c6f0b4bc3d60c564b3062b582af14df800b24261edc96bedcd0b6649444a46b198b9018397e356b919a871364032c8a2db6256b9268
+SHA512 (nsd-4.3.9.tar.gz) = de170cbaf6e0be0a20941d9d6b2102a7dddb59a320c30566238447d5740e4497f751f54488f36c2b89f2c3cff6e3101df31a36d0d2d66db8d77cfb6e86124f32