[Opendnssec-announce] OpenDNSSEC 1.3.0b1

Rickard Bellgrim rickard.bellgrim at iis.se
Wed Mar 23 14:46:38 UTC 2011


Version 1.3.0b1 of OpenDNSSEC has now been released.

* Enforcer: Stop import of policy if it is not consistent.
* ods-signer: The queue command will now also show what tasks the workers are working on.
* Signer Engine: Just warn if occluded zone data was found, don’t stop signing process.
* Signer Engine: Simpler serial maintenance, reduces the number of conflicts. Less chance to hit a ‘cannot update: serial too small’ error message.
* Signer Engine: Simpler NSEC(3) maintenance.
* Signer Engine: Multithreaded signer.
* Signer Engine: Set number of <SignerThreads> in conf.xml to get peak performance from HSMs that can handle multiple threads.

Bugfixes:
* Replace tab with white-space when writing to syslog.
* Signer Engine: Do not block update command while signing.
* Bugreport #198: Zone updates ignored?
* Signer Engine: NSEC chain could become broken if the predecessor domain of a deleted domain was a glue domain.

Download the tarball from: http://www.opendnssec.org/files/source/opendnssec-1.3.0b1.tar.gz

// OpenDNSSEC team




More information about the Opendnssec-announce mailing list