From yuri at nlnetlabs.nl Mon Oct 5 10:22:48 2015
From: yuri at nlnetlabs.nl (Yuri Schaeffer)
Date: Mon, 5 Oct 2015 12:22:48 +0200
Subject: [Opendnssec-maintainers] OpenDNSSEC 1.4.8
Message-ID: <56124F78.3040909@nlnetlabs.nl>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Version 1.4.8 of OpenDNSSEC has now been released. There have been no
changes since rc1.
NEWS:
* Support for RFC5011 style KSK rollovers. KSK section in the KASP now
accepts element.
* Enforcer: New repository option allows to generate
keys with CKA_EXTRACTABLE attribute set to TRUE so keys can be wrapped
and extracted from HSM.
Bugfixes:
* SUPPORT-145: EOF handling an ARM architecture caused signer to hang.
* Fixed signer hitting assertion on short reply XFR handler.
* Include revoke bit in keytag calculation.
* Increased stacksize on some systems (thanks Patrik Lundin!).
* Stop ods-signerd on SIGINT.
Download:
* https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.tar.gz
* https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.tar.gz.sig
* Checksum SHA256:
a9742839e8ea49cae4cf98081722f943170defc727450ebed7cdcffb2deb0fff
// OpenDNSSEC team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iEYEARECAAYFAlYST3cACgkQI3PTR4mhaviTgACeI28CnF20E1XPFigFDHwMWHNr
njUAnjF6KrJEzz6acz+QQ+uG919tIeLG
=Dz/q
-----END PGP SIGNATURE-----
From yuri at nlnetlabs.nl Mon Oct 5 11:43:34 2015
From: yuri at nlnetlabs.nl (Yuri Schaeffer)
Date: Mon, 5 Oct 2015 13:43:34 +0200
Subject: [Opendnssec-maintainers] OpenDNSSEC 1.4.8
In-Reply-To: <56124F78.3040909@nlnetlabs.nl>
References: <56124F78.3040909@nlnetlabs.nl>
Message-ID: <56126266.2040902@nlnetlabs.nl>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> Version 1.4.8 of OpenDNSSEC has now been released. There have been
> no changes since rc1.
It has come to my attention that we are in need for a migration script
when upgrading an existing installation. This fell through the cracks
unfortunately. I see if I can create one.
Regards,
Yuri
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iEYEARECAAYFAlYSYmYACgkQI3PTR4mhavjSvQCggc5/j9K6XLH48lLH9LpDoPDO
ItUAn35xd4yZhIcJvp+hkhaG8pbrkHyf
=C+Oe
-----END PGP SIGNATURE-----
From yuri at nlnetlabs.nl Mon Oct 5 13:26:11 2015
From: yuri at nlnetlabs.nl (Yuri Schaeffer)
Date: Mon, 5 Oct 2015 15:26:11 +0200
Subject: [Opendnssec-maintainers] OpenDNSSEC 1.4.8
In-Reply-To: <56124F78.3040909@nlnetlabs.nl>
References: <56124F78.3040909@nlnetlabs.nl>
Message-ID: <56127A73.9070909@nlnetlabs.nl>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> Version 1.4.8 of OpenDNSSEC has now been released. There have been
> no changes since rc1.
Unfortunately we did not catch the need for a database migration
script. Therefore we just released 1.4.8.1. Please use this version
instead and refer to the MIGRATION file at the root for instructions.
Download:
* https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.1.tar.gz
* https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.1.tar.gz.s
ig
* Checksum SHA256:
cff4aabedac99a9341f41ee07fe44c0bdae035e1fc366c26ebeff264dcda5882
// OpenDNSSEC team
> NEWS:
>
> * Support for RFC5011 style KSK rollovers. KSK section in the KASP
> now accepts element. * Enforcer: New repository option
> allows to generate keys with CKA_EXTRACTABLE
> attribute set to TRUE so keys can be wrapped and extracted from
> HSM.
>
> Bugfixes: * SUPPORT-145: EOF handling an ARM architecture caused
> signer to hang. * Fixed signer hitting assertion on short reply XFR
> handler. * Include revoke bit in keytag calculation. * Increased
> stacksize on some systems (thanks Patrik Lundin!). * Stop
> ods-signerd on SIGINT.
>
>
> Download:
>
> *
> https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.tar.gz
> *
> https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.tar.gz.sig
>
>
* Checksum SHA256:
> a9742839e8ea49cae4cf98081722f943170defc727450ebed7cdcffb2deb0fff
>
>
> // OpenDNSSEC team _______________________________________________
> Opendnssec-maintainers mailing list
> Opendnssec-maintainers at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-maintainers
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iEYEARECAAYFAlYSenMACgkQI3PTR4mhavj4EgCeJ9tUi7PHljCCbXeA/6cLBT6w
qEkAoJPLicUyAZt9phw08ASAK1UuJeqa
=lTfa
-----END PGP SIGNATURE-----
From yuri at nlnetlabs.nl Mon Oct 5 14:28:40 2015
From: yuri at nlnetlabs.nl (Yuri Schaeffer)
Date: Mon, 5 Oct 2015 16:28:40 +0200
Subject: [Opendnssec-maintainers] OpenDNSSEC 1.4.8.2
In-Reply-To: <56124F78.3040909@nlnetlabs.nl>
References: <56124F78.3040909@nlnetlabs.nl>
Message-ID: <56128918.4080008@nlnetlabs.nl>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> Version 1.4.8 of OpenDNSSEC has now been released. There have been
> no changes since rc1.
I'm getting increasingly angry at myself.
* https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.2.tar.gz
* https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.2.tar.gz.s
ig
* Checksum SHA256:
7fd553ee39173e807477ed1daff6ee2f8b1c83875cd2e52a1df3315bf0015513
The migration scripts did not end up in the tarball. At least I'm
getting plenty of practice in release and anger management.
Regards,
Yuri Schaeffer
>
> NEWS:
>
> * Support for RFC5011 style KSK rollovers. KSK section in the KASP
> now accepts element. * Enforcer: New repository option
> allows to generate keys with CKA_EXTRACTABLE
> attribute set to TRUE so keys can be wrapped and extracted from
> HSM.
>
> Bugfixes: * SUPPORT-145: EOF handling an ARM architecture caused
> signer to hang. * Fixed signer hitting assertion on short reply XFR
> handler. * Include revoke bit in keytag calculation. * Increased
> stacksize on some systems (thanks Patrik Lundin!). * Stop
> ods-signerd on SIGINT.
>
>
> Download:
>
> *
> https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.tar.gz
> *
> https://dist.opendnssec.org/source/testing/opendnssec-1.4.8.tar.gz.sig
>
>
* Checksum SHA256:
> a9742839e8ea49cae4cf98081722f943170defc727450ebed7cdcffb2deb0fff
>
>
> // OpenDNSSEC team _______________________________________________
> Opendnssec-maintainers mailing list
> Opendnssec-maintainers at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-maintainers
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iEYEARECAAYFAlYSiRcACgkQI3PTR4mhavghoACgsTKTdPLwXZIVyVcXia9CDIa8
44oAoKpiCWGoqDaAOaKGwIom1rD0VZ/N
=+2Sz
-----END PGP SIGNATURE-----
From yuri at nlnetlabs.nl Mon Oct 5 14:31:03 2015
From: yuri at nlnetlabs.nl (Yuri Schaeffer)
Date: Mon, 5 Oct 2015 16:31:03 +0200
Subject: [Opendnssec-maintainers] OpenDNSSEC 1.4.8.2
In-Reply-To: <56124F78.3040909@nlnetlabs.nl>
References: <56124F78.3040909@nlnetlabs.nl>
Message-ID: <561289A7.3020005@nlnetlabs.nl>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> Version 1.4.8 of OpenDNSSEC has now been released. There have been
> no changes since rc1.
I'm getting increasingly angry at myself. Also I need to provide
working links. (thanks Wytze!)
* https://dist.opendnssec.org/source/opendnssec-1.4.8.2.tar.gz
* https://dist.opendnssec.org/source/opendnssec-1.4.8.2.tar.gz.s
ig
* Checksum SHA256:
7fd553ee39173e807477ed1daff6ee2f8b1c83875cd2e52a1df3315bf0015513
The migration scripts did not end up in the tarball. At least I'm
getting plenty of practice in release and anger management.
Regards,
Yuri Schaeffer
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iEYEARECAAYFAlYSiacACgkQI3PTR4mhavgxlwCfbqjNO6IJAns5Aw35uQ0kllZ+
eSwAnR11vGxe4cezg93+HDQjh8mii8lo
=/YG6
-----END PGP SIGNATURE-----