OpenDNSSEC 1.2.0rc2

Version 1.2.0rc2 of OpenDNSSEC has now been released.

Migration:

There is a kasp schema change from the 1.1 branch (or trunk if you built prior to r3823). To make this transition you have 2 options:

  1. Run ods-ksmutil setup again. This will remove _all_ the current information from the kasp database and start you off again with a fresh environment. If that is not an option, or you want to try something else then:
  2. Run one of the migration scripts:
    enforcer/utils/migrate_keyshare_mysql.pl
    or
    enforcer/utils/migrate_keyshare_sqlite3.pl
    depending on your database.

NOTE: Although these scripts have been tested it is recommended to make a backup of your database prior to running them.

Bugfixes:

  • Signer Engine: Use the correct TTL for RRs after the $INCLUDE directive.
  • Signer Engine: Also create new signature if TTL of RR has changed.
  • Signer Engine: Drop old NSEC/NSEC3 records.
  • ods-ksmutil: Fixed some memory leaks.

Download the tarball from: opendnssec-1.2.0rc2.tar.gz

Comments are closed.