non port: dns/opendnssec/pkg-plist |
Number of commits found: 15 |
Tuesday, 6 Oct 2015
|
13:54 erwin
Upgrade from version 1.4.7 to 1.4.8.2
NEWS:
* Support for RFC5011 style KSK rollovers. KSK section in the KASP now
accepts <RFC5011/> element.
* Enforcer: New repository option <AllowExtraction/> allows to generate
keys with CKA_EXTRACTABLE attribute set to TRUE so keys can be wrapped
and extracted from HSM.
Bugfixes:
* SUPPORT-145: EOF handling an ARM architecture caused signer to hang.
* Fixed signer hitting assertion on short reply XFR handler.
* Include revoke bit in keytag calculation.
* Increased stacksize on some systems (thanks Patrik Lundin!).
* Stop ods-signerd on SIGINT.
Fixes port problem (reported by *geoffroy desvernay*)
* Now also installs previous missing migration script convert_database.pl
PR: 203574
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Sponsored by: DK Hostmaster A/S
|
Tuesday, 9 Dec 2014
|
11:09 bapt
Cleanup plist
|
Monday, 28 Jul 2014
|
08:40 erwin
- Fix ownership of var/run/opendnssec
- Fix minor whitespace warning
Approved by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
|
Wednesday, 23 Jul 2014
|
08:30 erwin
- Fix location of libsofthsm.so [1]
- Fix depency on sqlite with non-default LOCALBASE [2]
- Update to 1.4.6
Updates:
Signer Engine: Print secondary server address when logging notify reply errors.
Build: Fixed various OpenBSD compatibility issues found by Patrik Lundin
<patrik.lundin.swe () gmail.com>.
OPENDNSSEC-621: conf.xml: New options: <PidFile> for both enforcer and signer,
and <SocketFile> for the signer.
New tool: ods-getconf: to retrieve a configuration value from conf.xml given an
expression.
Bugfixes:
OPENDNSSEC-469: ods-ksmutil: 'zone add' command when zonelist.xml.backup can't
be written zone is still added to database, solved it by checking the
zonelist.xml.backup is writable before adding zones, and add error message when
add zone failed.
OPENDNSSEC-617: Signer Engine: Fix DNS Input Adapter to not reject zone the
first time due to RFC 1982 serial arethmetic.
OPENDNSSEC-619: memory leak when signer failed, solved it by add
ldns_rr_free(signature) in libhsm.c
OPENDNSSEC-627: Signer Engine: Unable to update serial after restart when the
backup files has been removed.
OPENDNSSEC-628: Signer Engine: Ingored notifies log level is changed from debug
to info.
OPENDNSSEC-630: Signer Engine: Fix inbound zone transfer for root zone.
libhsm: Fixed a few other memory leaks.
simple-dnskey-mailer.sh: Fix syntax error. (by Patrik Lundin
https://github.com/eest)
PR: 191272 [1], 192021 [2], 192023 [3]
Submitted by: Andrew Fyfe <andrew@neptune-one.net> [1],
jhujhiti@adjectivism.org [2],
Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer) [3]
|
Thursday, 15 May 2014
|
15:58 erwin
Fix some outstanding issues with staging and make it work with both
pkg_install and pkgng.
PR: 189823
Submitted by: erwin
Prodded by: swills
Approved by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
|
Wednesday, 30 Apr 2014
|
08:45 erwin
- Update to 1.4.5
Added Staging support;
Modern options handling where possible.
Bugfixes:
OPENDNSSEC-607: libhsm not using all mandatory attributes for GOST key
generation.
OPENDNSSEC-609: ods-ksmutil: 'key list' command fails with error in 1.4.4 on
MySQL. Reported by Mark Elkins <mje@posix.co.za>
Includes the update to 1.4.4:
Updates:
SUPPORT-114: libhsm: Optimize storage in HSM by deleting the public key directly
if SkipPublicKey is used [OPENDNSSEC-574].
OPENDNSSEC-358: ods-ksmutil: Extend 'key list' command with options to filter on
key type and state. This allows keys in the GENERATE and DEAD state to be
output.
OPENDNSSEC-549: Signer Engine: Put NSEC3 records on empty non-terminals derived
from unsigned delegations (be compatible with servers that are incompatible with
RFC 5155 errata 3441).
Bugfixes:
SUPPORT-86: Fixed build on OS X [OPENDNSSEC-512].
SUPPORT-97: Signer Engine: Fix after restart signer thinks zone has expired
[OPENDNSSEC-526].
SUPPORT-101: Signer Engine: Fix multiple zone transfer to single file bug
[OPENDNSSEC-529].
SUPPORT-102: Signer Engine: Fix statistics (count can be negative)/
SUPPORT-108: Signer Engine: Don't replace tabs in RRs with whitespace
[OPENDNSSEC-520].
SUPPORT-116: ods-ksmutil: 'key import' date validation fails on certain dates
[OPENDNSSEC-553].
SUPPORT-128: ods-ksmutil. Man page had incorrect formatting [OPENDNSSEC-576].
SUPPORT-127: ods-signer: Fix manpage sections.
OPENDNSSEC-457: ods-ksmutil: Add a check on the 'zone add' input/output type
parameter to allow only File or DNS.
OPENDNSSEC-481: libhsm: Fix an off-by-one length check error.
OPENDNSSEC-482: libhsm: Improved cleanup for C_FindObjects.
OPENDNSSEC-531: ods-ksmutil: Exported value of in 'policy export' output could
be wrong on MySQL.
OPENDNSSEC-537: libhsm: Possible memory corruption in hsm_get_slot_id.
OPENDNSSEC-544: Signer Engine: Fix assertion error that happens on an IXFR
request with EDNS.
OPENDNSSEC-546: enforcer & ods-ksmutil: Improve logging on key creation and
alloctaion.
OPENDNSSEC-560: Signer Engine: Don't crash when unsigned zone has no SOA.
Signer Engine: Fix a race condition when stopping daemon.
PR: 188482
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl>
Sponsored by: DK Hostmaster A/S
|
Monday, 3 Jun 2013
|
22:13 wg
- Update to 1.4.0 [1]
- Add PORTDOCS
- Install extra migration files
- Preserve 1.3.x as dns/opendnssec13
Changes: https://wiki.opendnssec.org/display/DOCS/New+in+OpenDNSSEC+1.4
PR: ports/178861 [1]
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> [1]
Approved by: culot (mentor), maintainer
|
Sunday, 8 Jul 2012
|
12:39 scheidell
- Update to 1.3.9
- Add GIDs/UIDs 215
PR: ports/169646
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
|
Sunday, 18 Dec 2011
|
08:54 miwi
- Update to 1.3.4
PR: 163080
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
|
Friday, 15 Jul 2011
|
20:55 jlaffaye
Update to 1.3.0
PR: ports/158865
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Approved by: bapt (mentor)
|
Thursday, 24 Mar 2011
|
16:33 dhn
- Update to 1.2.1
PR: ports/155889
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
|
Wednesday, 19 Jan 2011
|
10:49 pav
- Update to 1.2.0
PR: ports/154026
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Feature safe: yes
|
Saturday, 29 May 2010
|
11:47 sylvio
- Update to 1.1.0
PR: ports/147134
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
|
Thursday, 11 Feb 2010
|
10:33 pav
- Update to 1.0.0 release
PR: ports/143712
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
|
Thursday, 7 Jan 2010
|
06:25 wen
OpenDNSSEC was created as an open-source turn-key solution for
DNSSEC. It secures zone data just before it is published in an
authoritative name server.
WWW: http://www.opendnssec.org
PR: ports/142103
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl>
|
Number of commits found: 15 |