OpenDNSSEC 1.3.15

Version 1.3.15 of OpenDNSSEC has now been released:


  • SUPPORT-58: Extend ods-signer sign <zone> with –serial <nr> so that the user  can specify the SOA serial to use in the signed zone [OPENDNSSEC-423].
  • OPENDNSSEC-428: Add option for ‘ods-ksmutil key generate’ to take total  number of zones as a parameter
  • OPENDNSSEC-448: Signer Engine: Enhancements to signer debug locks.


  • SUPPORT-75: Signer Engine: Fix double free crash in case of HSM connection error during signing [OPENDNSSEC-452].
  • OPENDNSSEC-397: Change “hsmutil list” output so that the table header goes to stdout not stderr
  • OPENDNSSEC-438: ‘ods-ksmutil key generate’ and the enforcer can create  too many keys for <SharedKeys/> policies when KSK and ZSK use same  algorithm and length
  • OPENDNSSEC-445: ods-ksmutil: Clean up of hsm connection handling




Comments are closed.