OpenDNSSEC

Version 1.4.0a1 of OpenDNSSEC has now been released. Auditor: The Auditor has been removed. Enforcer: Key label logging upon deletion (#192 Sebastian Castro) Enforcer: Stop multiple instances of the Enforcer running by checking for the pidfile at ... [More] startup. If you want to run multiple instances then a different pidfile will need to be specified with [...] [Less]

Version 1.3.7 of OpenDNSSEC has now been released. OPENDNSSEC-215: Signer Engine: Always recover serial from backup, even if it is corrupted, preventing unnecessary serial decrementals. OPENDNSSEC-217: Enforcer: Tries to detect pidfile staleness, so ... [More] that the daemon will start after a power failure. Bugfixes: ods-hsmutil: Fixed a small memory leak when printing a DNSKEY. OPENDNSSEC-216: Signer [...] [Less]

Version 1.3.2 of SoftHSM has now been released. Update the README with information on moving the database between different architectures. Bugfixes: Fix the destruction order of the Singleton objects. Download the tarball from: softhsm-1.3.2.tar.gz

Version 1.3.6 of OpenDNSSEC has now been released. OPENDNSSEC-33: Signer Engine: Check HSM connection before use, attempt to reconnect if it is not valid. OPENDNSSEC-178: Signer Engine: Instead of waiting an arbitrary amount of time, let worker wait ... [More] with pushing sign operations until the queue is non-full. Signer Engine: Adjust some log messages. Bugfixes: ods-control: [...] [Less]

Version 1.3.5 of OpenDNSSEC has now been released. Auditor: Include the zone name in the log messages. ldns 1.6.12 is required for bugfixes. ods-ksmutil: Suppress database connection information when no -v flag is given. ods-enforcerd: Stop multiple ... [More] instances of the enforcer running by checking for the pidfile at startup. If you want to run multiple instances then [...] [Less]

Version 1.3.1 of SoftHSM has now been released. The library is now installed in $libdir/softhsm/ Bugfixes: Do not give a warning about the schema version if the token  has not been initialized yet. The tools now return the correct exit code. Download the tarball from: softhsm-1.3.1.tar.gz

During the end of last year, a bug was uncovered in the library ldns. The bug had an off-by-one error which caused some signatures to have the expiration date set to December 31 2012. 64-bit versions are unaffected. Affected versions: ldns < 1.6.12 (32-bit) Fixed versions: ldns >= 1.6.12 (32-bit) Description: The 32-bit version of [...]

Version 1.3.4 of OpenDNSSEC has now been released. Bugfixes: Signer: Use debug instead of warning for drudgers queue being full, also sleep 10 ms if it is full to not hog CPU. This increased signing speed on single core machines by a factor of 2. Download the tarball from: opendnssec-1.3.4.tar.gz

Version 1.3.3 of OpenDNSSEC has now been released. Bugfixes: Auditor: Handle ruby 1.9 differences in ods-kaspcheck. Auditor: Require dnsruby 1.53 for bugfixes. Bugfix #262: Drudgers seem to be in a waiting state, but the RRset FIFO queue is full. Do ... [More] an additional broadcast. Enforcer: Check HSM connection when waking up from sleep, attempt to reconnect if it [...] [Less]

We have now release a second alpha snapshot of the upcoming version of Enforcer. This version should only be used for testing, but we welcome feedback on it. Changes: Support for RollOverType in kasp.xml Fixed concurrency related crashes. ... [More] Automatically retract never submitted DS records. Schedule the purging of keys. Automatic introduce keys marked as manual, [...] [Less]