OpenDNSSEC

SoftHSM v1.2.0 has now been released Changes in this release: Added mechanism CKM_RSA_X_509 (use Botan 1.9.7 to fix a bug when verifying these signatures) The softhsm command now have the option –module. To use a PKCS#11 library other than SoftHSM. ... [More] The softhsm command now import all parts of the RSA key. CKA_EXPONENT_1, CKA_EXPONENT_2, and CKA_COEFFICIENT is not needed by SoftHSM but might be [...] [Less]

Version 1.1.3 of OpenDNSSEC has now been released. Bugfixes: Bugreport #183: Partial zone could get signed if zone transfer failed when using zone_fetcher Download the tarball from: opendnssec-1.1.3.tar.gz

Version 1.1.2 of OpenDNSSEC has now been released. Dnsruby 1.49 now required (for correct zone parsing) ldns 1.6.6 is required to fix the zone fetcher bug Bugfixes: ods-control stop did not stopped zone fetcher (bug was introduced in 1.1.0) ... [More] Auditor correctly handles chains of empty nonterminals Zone fetcher can block zone transfers if AXFR once failed. This is a bug in ldns [...] [Less]

Version 1.1.1 of OpenDNSSEC has now been released. Bugfixes: Bugreport #127: Large SOA serial numbers were not handled properly by signer Bugreport #133: Better handling of SOA serial when setting is ‘keep’ Bugreport #136: quicksorter could not ... [More] handle standard bind format SOA rdata The Auditor could not handle the new way of rolling KSKs One log message in the Enforcer referred [...] [Less]

Version 1.1.0 of OpenDNSSEC has now been released. There is no changes between between this version and the rc3. Download the tarball from: opendnssec-1.1.0.tar.gz Release plan for OpenDNSSEC 1.2 (August 2010) Improved handling of shared keys Only ... [More] the private key object on the HSM is needed, will save space Replace the Python engine with a C engine Configurable auditing program Performance improvements for large [...] [Less]

Version 1.1.0rc3 of OpenDNSSEC has now been released. The difference between rc3 and rc2 is: Could not compile quicksorter on FreeBSD Bugreport #131: test suite fails in 1.1.0rc2 Auditor complained about missing RRs in some cases Download the tarball from: opendnssec-1.1.0rc3.tar.gz

Version 1.1.0rc2 of OpenDNSSEC has now been released. The difference between rc1 and rc2 is: Fix semantics of refresh value in Signer Engine. Download the tarball from: opendnssec-1.1.0rc2.tar.gz

We are now releasing rc1 of OpenDNSSEC 1.1.0 The rc1 is only available in our repository and not as a tarball. Use the following commands to get it installed: svn co http://svn.opendnssec.org/tags/OpenDNSSEC-1.1.0rc1/ OpenDNSSEC cd OpenDNSSEC sh ... [More] autogen.sh ./configure make sudo make install Please test it and come back with feedback. You can find the changes in the following file: http://svn.opendnssec.org/tags/OpenDNSSEC-1.1.0rc1/NEWS http://svn.opendnssec.org/tags/OpenDNSSEC-1.1.0rc1/KNOWN_ISSUES [Less]

We are now getting closer to a release of OpenDNSSEC 1.1.0. We are releasing it as a beta version for testing, before we release the final version. The beta is only available in our repository and not as a tarball. Use the following commands to get ... [More] it installed: svn co http://svn.opendnssec.org/branches/OpenDNSSEC-1.1/ OpenDNSSEC cd OpenDNSSEC sh autogen.sh ./configure make sudo make install Please test [...] [Less]

SoftHSM has now been released as version 1.1.4 Changes in this release Respect –disable-64bit Respect $DESTDIR for config files The binaries can now show the version number softhsm-keyconv could not handle –ttl properly Link softhsm static with ... [More] libsofthsm Build libsofthsm.so without version number libsofthsm.so is now a loadable module Download the tarball from: softhsm-1.1.4.tar.gz [Less]