From yuri at nlnetlabs.nl Mon Oct 5 10:22:48 2015 From: yuri at nlnetlabs.nl (Yuri Schaeffer) Date: Mon, 5 Oct 2015 12:22:48 +0200 Subject: [Opendnssec-maintainers] OpenDNSSEC 1.4.8 Message-ID: <56124F78.3040909@nlnetlabs.nl> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Version 1.4.8 of OpenDNSSEC has now been released. There have been no changes since rc1. NEWS: * Support for RFC5011 style KSK rollovers. KSK section in the KASP now accepts element. * Enforcer: New repository option allows to generate keys with CKA_EXTRACTABLE attribute set to TRUE so keys can be wrapped and extracted from HSM. Bugfixes: * SUPPORT-145: EOF handling an ARM architecture caused signer to hang. * Fixed signer hitting assertion on short reply XFR handler. * Include revoke bit in keytag calculation. * Increased stacksize on some systems (thanks Patrik Lundin!). * Stop ods-signerd on SIGINT. Download: * https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.tar.gz * https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.tar.gz.sig * Checksum SHA256: a9742839e8ea49cae4cf98081722f943170defc727450ebed7cdcffb2deb0fff // OpenDNSSEC team -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlYST3cACgkQI3PTR4mhaviTgACeI28CnF20E1XPFigFDHwMWHNr njUAnjF6KrJEzz6acz+QQ+uG919tIeLG =Dz/q -----END PGP SIGNATURE----- From yuri at nlnetlabs.nl Mon Oct 5 11:43:34 2015 From: yuri at nlnetlabs.nl (Yuri Schaeffer) Date: Mon, 5 Oct 2015 13:43:34 +0200 Subject: [Opendnssec-maintainers] OpenDNSSEC 1.4.8 In-Reply-To: <56124F78.3040909@nlnetlabs.nl> References: <56124F78.3040909@nlnetlabs.nl> Message-ID: <56126266.2040902@nlnetlabs.nl> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > Version 1.4.8 of OpenDNSSEC has now been released. There have been > no changes since rc1. It has come to my attention that we are in need for a migration script when upgrading an existing installation. This fell through the cracks unfortunately. I see if I can create one. Regards, Yuri -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlYSYmYACgkQI3PTR4mhavjSvQCggc5/j9K6XLH48lLH9LpDoPDO ItUAn35xd4yZhIcJvp+hkhaG8pbrkHyf =C+Oe -----END PGP SIGNATURE----- From yuri at nlnetlabs.nl Mon Oct 5 13:26:11 2015 From: yuri at nlnetlabs.nl (Yuri Schaeffer) Date: Mon, 5 Oct 2015 15:26:11 +0200 Subject: [Opendnssec-maintainers] OpenDNSSEC 1.4.8 In-Reply-To: <56124F78.3040909@nlnetlabs.nl> References: <56124F78.3040909@nlnetlabs.nl> Message-ID: <56127A73.9070909@nlnetlabs.nl> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > Version 1.4.8 of OpenDNSSEC has now been released. There have been > no changes since rc1. Unfortunately we did not catch the need for a database migration script. Therefore we just released 1.4.8.1. Please use this version instead and refer to the MIGRATION file at the root for instructions. Download: * https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.1.tar.gz * https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.1.tar.gz.s ig * Checksum SHA256: cff4aabedac99a9341f41ee07fe44c0bdae035e1fc366c26ebeff264dcda5882 // OpenDNSSEC team > NEWS: > > * Support for RFC5011 style KSK rollovers. KSK section in the KASP > now accepts element. * Enforcer: New repository option > allows to generate keys with CKA_EXTRACTABLE > attribute set to TRUE so keys can be wrapped and extracted from > HSM. > > Bugfixes: * SUPPORT-145: EOF handling an ARM architecture caused > signer to hang. * Fixed signer hitting assertion on short reply XFR > handler. * Include revoke bit in keytag calculation. * Increased > stacksize on some systems (thanks Patrik Lundin!). * Stop > ods-signerd on SIGINT. > > > Download: > > * > https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.tar.gz > * > https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.tar.gz.sig > > * Checksum SHA256: > a9742839e8ea49cae4cf98081722f943170defc727450ebed7cdcffb2deb0fff > > > // OpenDNSSEC team _______________________________________________ > Opendnssec-maintainers mailing list > Opendnssec-maintainers at lists.opendnssec.org > https://lists.opendnssec.org/mailman/listinfo/opendnssec-maintainers > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlYSenMACgkQI3PTR4mhavj4EgCeJ9tUi7PHljCCbXeA/6cLBT6w qEkAoJPLicUyAZt9phw08ASAK1UuJeqa =lTfa -----END PGP SIGNATURE----- From yuri at nlnetlabs.nl Mon Oct 5 14:28:40 2015 From: yuri at nlnetlabs.nl (Yuri Schaeffer) Date: Mon, 5 Oct 2015 16:28:40 +0200 Subject: [Opendnssec-maintainers] OpenDNSSEC 1.4.8.2 In-Reply-To: <56124F78.3040909@nlnetlabs.nl> References: <56124F78.3040909@nlnetlabs.nl> Message-ID: <56128918.4080008@nlnetlabs.nl> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > Version 1.4.8 of OpenDNSSEC has now been released. There have been > no changes since rc1. I'm getting increasingly angry at myself. * https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.2.tar.gz * https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.2.tar.gz.s ig * Checksum SHA256: 7fd553ee39173e807477ed1daff6ee2f8b1c83875cd2e52a1df3315bf0015513 The migration scripts did not end up in the tarball. At least I'm getting plenty of practice in release and anger management. Regards, Yuri Schaeffer > > NEWS: > > * Support for RFC5011 style KSK rollovers. KSK section in the KASP > now accepts element. * Enforcer: New repository option > allows to generate keys with CKA_EXTRACTABLE > attribute set to TRUE so keys can be wrapped and extracted from > HSM. > > Bugfixes: * SUPPORT-145: EOF handling an ARM architecture caused > signer to hang. * Fixed signer hitting assertion on short reply XFR > handler. * Include revoke bit in keytag calculation. * Increased > stacksize on some systems (thanks Patrik Lundin!). * Stop > ods-signerd on SIGINT. > > > Download: > > * > https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.tar.gz > * > https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.tar.gz.sig > > * Checksum SHA256: > a9742839e8ea49cae4cf98081722f943170defc727450ebed7cdcffb2deb0fff > > > // OpenDNSSEC team _______________________________________________ > Opendnssec-maintainers mailing list > Opendnssec-maintainers at lists.opendnssec.org > https://lists.opendnssec.org/mailman/listinfo/opendnssec-maintainers > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlYSiRcACgkQI3PTR4mhavghoACgsTKTdPLwXZIVyVcXia9CDIa8 44oAoKpiCWGoqDaAOaKGwIom1rD0VZ/N =+2Sz -----END PGP SIGNATURE----- From yuri at nlnetlabs.nl Mon Oct 5 14:31:03 2015 From: yuri at nlnetlabs.nl (Yuri Schaeffer) Date: Mon, 5 Oct 2015 16:31:03 +0200 Subject: [Opendnssec-maintainers] OpenDNSSEC 1.4.8.2 In-Reply-To: <56124F78.3040909@nlnetlabs.nl> References: <56124F78.3040909@nlnetlabs.nl> Message-ID: <561289A7.3020005@nlnetlabs.nl> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > Version 1.4.8 of OpenDNSSEC has now been released. There have been > no changes since rc1. I'm getting increasingly angry at myself. Also I need to provide working links. (thanks Wytze!) * https://dist.opendnssec.org/source/opendnssec-1.4.8.2.tar.gz * https://dist.opendnssec.org/source/opendnssec-1.4.8.2.tar.gz.s ig * Checksum SHA256: 7fd553ee39173e807477ed1daff6ee2f8b1c83875cd2e52a1df3315bf0015513 The migration scripts did not end up in the tarball. At least I'm getting plenty of practice in release and anger management. Regards, Yuri Schaeffer -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlYSiacACgkQI3PTR4mhavgxlwCfbqjNO6IJAns5Aw35uQ0kllZ+ eSwAnR11vGxe4cezg93+HDQjh8mii8lo =/YG6 -----END PGP SIGNATURE-----