[Opendnssec-develop] EnfNG 2nd Alpha

Rickard Bellgrim rickard at opendnssec.org
Tue Oct 11 11:58:03 UTC 2011


Please add these changes to the NEWS file, if it has not been done yet.

Then it is just for Jakob to make the release. I am a little bit
occupied the coming days, maybe someone else can update the WordPress
and send an announce to the list?

// Rickard

On Mon, Oct 10, 2011 at 2:36 PM, Yuri Schaeffer <yuri at nlnetlabs.nl> wrote:
>> Release early, release often! Just say the magic word.
>
> Magic word? hmm...
> Go-Go-Gadget-Release?
>
>
> Changes since first alpha release:
>
> - Support for RollOverType in kasp.xml
> - Fixed concurrency related crashes.
> - Automatically retract never submitted DS records.
> - Schedule the purging of keys.
>
> Alpha 2 introduces the KskRollType, ZskRollType, and CskRollType
> elements in kasp.xml for use in the KSK, ZSK and CSK sections.
> Valid values are:
>
> [ KskDoubleRRset | KskDoubleDS | KskDoubleSignature |
> ZskDoubleSignature | ZskPrePublication | ZskDoubleRRsig |
> CskDoubleRRset | CskSingleSignature | CskDoubleDS |
> CskDoubleSignature | CskPrePublication ]
>
> These values correspond directly with the rollover types described
> in the Internet Draft: draft-mekking-dnsop-dnssec-key-timing-bis-02
> The various Rollover Types influence the traffic to your zone and the
> speed of a rollover. The enforcer uses them as a strong hint, in
> case of a conflict (for example ZskPrePublication is impossible
> during a algorithm rollover) these hints are relaxed.
>
>
> --
> Yuri Schaeffer
> NLnet Labs
> http://www.nlnetlabs.nl
> _______________________________________________
> Opendnssec-develop mailing list
> Opendnssec-develop at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop
>



More information about the Opendnssec-develop mailing list