The OpenDNSSEC project

OpenDNSSEC is a policy-based zone signer that automates the process of keeping track of DNSSEC keys and the signing of zones. The goal of the project is to make DNSSEC easy to deploy. The project is Open Source and intends to drive adoption of Domain Name System Security Extensions (DNSSEC) to further enhance Internet security.

OpenDNSSEC 2.1.13

Version 2.1.13 of OpenDNSSEC has been released on 2023-06-26.

News

This release fixes a bug that affects both signer and enforcer command
line handling. Under heavy usage of the command line there was a small
change for a crash.
Furthermore there is a small behavioural change for users of the “keep”
policy. The back-off for retrying a sign task change is now equal to
the resign period in case the input file isn’t available or updated.
This because users nearly always will emit an external sign command for
this period. This will reduce logging errors.

Download

OpenDNSSEC 2.1.12

Version 2.1.12 of OpenDNSSEC has been released on 2022-11-08.

News

This is a maintenance release of OpenDNSSEC addressing additional issues relating to the previous bug-fix release. Both installations that use shared keys or want to use salt lengths of zero must use this release. Other installations will benefit to from better reporting in case of issues.

RPM for RHEL/CentOS, deb and tgz packages will be provided for at the same download location.

Issues

  • Ensure debug symbols on RPM-style builds;
  • Bug fix that prevented restoring state from when salt length was zero;
  • Bug fix for enforcer daemon crash after deleting key on some systems.

Download

OpenDNSSEC 2.1.11

Version 2.1.11 of OpenDNSSEC has been released on 2022-10-17.

News

This is a maintenance release of OpenDNSSEC addressing a number of different issues. Installation that use shared keys should migrate to this version especially. Also installations that want to migrate to a NSEC3 salt of length 0 will benefit (this applies to migration-to only).

RPM for RHEL/CentOS, deb and tgz packages will be provided for at the same download location.

Issues

  • Fixed improper re-use of already used keys when using as a consequence of previous bug in 2.1.6;
  • Improved reporting upon aborts of daemon process;
  • Fix for migration to salt of length 0;
  • Fix for empty IXFR cases;
  • Degraded log message key_update_failed because this action is retried.

Download