[Opendnssec-maintainers] OpenDNSSEC 2.1.3 released

[Yuri Schaeffer]

Dear maintainers,

As of today version 2.1.3 of OpenDNSSEC has been released. No special
migration steps are required when upgrading from a previous 2.x.x
release. It includes fixes to the build system, some regressions w.r.t.
OpenDNSSEC 1.4 and a signing bug. Please note that version 2.1.2 was
skipped for release.

Build fixes:

* OPENDNSSEC-904: autoconfigure fails to properly identify functions in
  ssl library on some distributions. This caused the "tsig unknown
  algorithm hmac-sha256" error.
* OPENDNSSEC-894: repair configuration script to allow excluding the
  build of the enforcer.

Regressions:

* OPENDNSSEC-508: Tag <RolloverNotification> was not functioning
  correctly
* OPENDNSSEC-901: Enforcer would ignore <ManualKeyGeneration/> tag in
  conf.xml
* OPENDNSSEC-906: Tag <AllowExtraction> tag included from late 1.4
  development

Bugs Fixed:

* OPENDNSSEC-886: Improper time calculation on 32 bits machine causes
  purge of keys not being scheduled. The purge would happen but some
  time later than expected.
* OPENDNSSEC-890: Mismatching TTLs in record sets would cause bogus
  signatures.
* OPENDNSSEC-908: Warn when TTL of resource record exceeds KASP's
  MaxZoneTTL. Formerly the signer would cap such TTLs to prevent
  situations where those records could get bogus during ZSK rollover.
  However it has been realized that this can potentially lead to failing
  IXFRs. We intend to bring back this feature in the near future when
  our internal data representation allows this.

Download:

 * https://dist.opendnssec.org/source/opendnssec-2.1.3.tar.gz
 * https://dist.opendnssec.org/source/opendnssec-2.1.3.tar.gz.sig
 * Checksum SHA256:
   3de2a03edc9e2b8c366bf0ab541004f984777d4813057cbba7a78045d8cbfe7e

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: <http://lists.opendnssec.org/pipermail/opendnssec-maintainers/attachments/20170810/a3ad05cc/attachment.bin>