bind: add option to enable GSSAPI support

[feed/packages.git] / net / bind / Config.in

diff --git a/net/bind/Config.in b/net/bind/Config.in
index 8973821f8699fcb0173e8c1beda38d6a396693a6..f1b83c746536ec523544350654928a9b457f66ad 100644 (file)
--- a/net/bind/Config.in
+++ b/net/bind/Config.in
@@ -1,19 +1,5 @@
 if PACKAGE_bind-server
 
-config BIND_ENABLE_FILTER_AAAA
-       bool
-       default y
-       prompt "Enable filtering of AAAA records returned to the client"
-       help
-               BIND 9 has an option to filter AAAA (IPv6 address) records
-               returned to the client based on the transport used for the
-               query, and other filtering conditions. This filtering does
-               not affect the recursive queries made by the server (if
-               any) as a result of the client request.
-
-               Additional details are available at
-               https://kb.isc.org/article/AA-00576/0/Filter-AAAA-option-in-BIND-9-.html
-
 config BIND_LIBJSON
        bool
        default n
@@ -33,15 +19,26 @@ config BIND_LIBXML2
                libxml2 is required to report server statistics in XML
                format. Building with libjson support will require the
                libxml2 package to be installed as well.
+endif
+
+if PACKAGE_bind-libs
 
-config BIND_ENABLE_EDDSA
-    bool
-    default n
-    prompt "Include Edwards Curve DNSSEC signature support"
-    help
-        Enable BIND support for Edwards Curve DNSSEC signing algorithms
-        described in RFC 8080.
+config BIND_ENABLE_DOH
+       bool
+       default y
+       prompt "Include DNS-over-HTTPS support in bind"
+       help
+               BIND 9 supports DNS-over-HTTPS and enables it by
+               default.  This requires linking against libnghttp2.
+               You can disable DoHTTPS if you do not need it or need
+               to avoid the additional library dependency.
+
+config BIND_ENABLE_GSSAPI
+       bool
+       default n
+       prompt "Include GSSPAI support in bind"
+       help
+               BIND 9 supports GSSAPI. This depends on libcomerr and krb5-libs.
+               Disable it by default as krb5-libs is rather large.
 
-        Note that this requires OpenSSL 1.1, which is not currently
-        the available in OpenWRT, so it is disabled by default.
 endif