Path to this page:
Subject: CVS commit: pkgsrc/security/opendnssec2
From: Havard Eidnes
Date: 2020-10-05 09:19:33
Message id: 20201005071933.4BF70FB28@cvs.NetBSD.org
Log Message:
Update OpenDNSSEC version 2 to 2.1.7.
Upstream changes:
OpenDNSSEC 2.1.7 - 2020-10-05
* OPENDNSSEC-949: Fix for migration bug not keeping proper parameters of NSEC3
signed zones. Amongst others the zone become NSEC. Loading the policies
fixes the situation, migration scripts now corrected. Since 1.4 does not
require a salt, a resalt might be automatic after migrating, as this is
a required parameter.
* OPENDNSSEC-948: do not recreate signatures for keys that are moving out
this fixes unexpected double signatures in the zone.
* SUPPORT-253: Incorrect keytag used when using Combined Signing keys (CSK)
(Thanks to Simon Arlott)
* SUPPORT-257: Export keys by locator (Thansk to Simon Arlott)
* SUPPORT-222: Support ED25519/ED448 keys. This requires library ldns 1.7.0
or better, otherwise unavailable. (Thanks again to Simon Arlott)
* SUPPORT-260: Crash on OpenBSD systems in ixfr_del_rr; possible unverified
fix.
* Load libsqlite3.so.0 and fall back on libsqlite3.so.0 to allow to run
migration tool on systems without libsqlite3.so.0 soft link.
(Thanks to Paul Wouters)
* Some compilation warnings, o.a. gcc10 related, code quality and
initialization improvements.
(Thanks to Jonas Berlin, and Mathieu MirMont, and Paul Wouters).
Files: