Path to this page:
Subject: CVS commit: wip/opendnssec
From: Fredrik Pettai
Date: 2009-10-02 23:29:02
Message id: E1Mtpgj-00052a-9N@ddv4jf1.ch3.sourceforge.com
Log Message:
* kasp_check command added to check the conf.xml and kasp.xml
configuration files for sanity and consistency
* communicated and keygend combined to form "enforcerd" (although this
name will change).
* ksmutil command line changes. Most commands have changed slightly, some
have changed lots.
See http://svn.opendnssec.org/docs/command-tools-syntax.txt .
* enforcer database now has a version number. If it differs from a #define
in the code then the software will not connect to the database.
* "ksmutil list keys" now displays the keytag if the -l flag is passed \
to it.
* "Emergency Keys" renamed to "Standby Keys" as this better \
reflects their
role as we use them.
* The behaviour of SOA Serial value 'counter' changed according to Ticket #31.
* changes to the KASP DB, please apply:
If want to use your old database, use the following commands to upgrade:
sqlite3 <PATH_TO_ENFORCER.DB> < enforcer/utils/migrate_090922_1.sqlite3
sqlite3 <PATH_TO_ENFORCER.DB> < enforcer/utils/migrate_090930_1.sqlite3
Or start fresh (with loss of information. User should remove old keys
from the HSM):
ksmutil setup
* move xml/ to conf/ (part of repository clean)
Bugfixes:
* Make sure that parenthesis in zonefiles don't concatenate rdata fields.
Known issues:
* TCP-support for LDNS on Solaris is currently broken due to an issue with
SO_RCVTIMEO. The result is that the zonefetcher doesn't work. No other parts
of OpenDNSSEC is affected by this bug. There is currently no workaround.
Files: