OpenDNSSEC

Version 2.5.0 of SoftHSM has been released. Updates: Issue #323: Support for EDDSA with vendor defined mechanisms. (Patch from Francis Dupont) Issue #362: CMake Build System Support for SoftHSM. (Patch from Constantine Grantcharov) Issue #368: ... [More] Support migrating 32-bit SoftHSMv1 DB on 64-bit system (LP64). Issue #385: Default is not to build EDDSA since it has […] [Less]

Version 2.4.0 of SoftHSM has been released. Updates: Issue #135: Support PKCS#8 for GOST. Issue #140: Support for CKA_ALLOWED_MECHANISMS. (Patch from Brad Hess) Issue #141: Support CKA_ALWAYS_AUTHENTICATE for private key objects. Issue #220: Support ... [More] for CKM_DES3_CMAC and CKM_AES_CMAC. Issue #226: Configuration option for Windows build to enable build with static CRT (/MT). Issue #325: Support […] [Less]

Version 2.1.3 of OpenDNSSEC has been released on 2017-08-10. News As of today version 2.1.3 of OpenDNSSEC has been released. No special migration steps are required when upgrading from a previous 2.x.x release. It includes fixes to the build system ... [More] , some regressions w.r.t. OpenDNSSEC 1.4 and a signing bug. Build fixes OPENDNSSEC-904: autoconfigure fails to […] [Less]

Version 2.3.0 of SoftHSM has been released. Updates: Issue #130: Upgraded to PKCS#11 v2.40. Minor changes to some return values. Added CKA_DESTROYABLE to all objects. Used by C_DestroyObject(). Added CKA_PUBLIC_KEY_INFO to certificates, private, and ... [More] public key objects. Will be accepted from application, but SoftHSM will currently not calculate it. Issue #142: Support for CKM_AES_CTR. Issue […] [Less]

The CrypTech Alpha is a fully open source hardware cryptographic engine. This week the CrypTech team released version 3 of their software and firmware. We gave it a test run and found that their efforts did pay off. OpenDNSSEC 2.1.1 is found to be working smoothly with the Alpha Board. Thank you CrypTech!

Version 1.4.14 of OpenDNSSEC has been released on 2017-04-28. News Hereby we announce the OpenDNSSEC 1.4.14 release. Bugs Fixed OPENDNSSEC-888: Fix up MySQLSQLite3 database conversion script. OPENDNSSEC-752: Incorrect calculated number of KSKs needed ... [More] when KSK and ZSK have exactly the same parameters. This would prevent KSK rollovers. OPENDNSSEC-890: Bogus signatures on mismatching TTLs within the […] [Less]

Version 2.1.1 of OpenDNSSEC has been released on 2017-04-28. News OpenDNSSEC 2.1.1 addresses a number of bug fixes. No migration steps are required when upgrading from an earlier 2.X release. In case you are still on the 1.4.X branch and like to upgrade to 2.1.1 you are advised to do so directly rather than installing […]

Version 2.1.0 of OpenDNSSEC has been released on 2017-02-22. News OpenDNSSEC 2.1 development was focused on improving the daemon code for the Signer and Enforcer. As such it is much more a steady incremental improvement rather than revolutionary. With this style of development we hope that a migration from 1.4, for which an end-of-life is […]

Version 1.4.13 of OpenDNSSEC has been released on 2017-01-20. News Hereby we announce the OpenDNSSEC 1.4.13 release. It includes a small number of bug fixes and no migration steps are needed. Some minor code adjustments where made to make linking to OpenSSL 1.1.0 possible. This release is signed by our new (Jan 11th) PGP key. […]

Version 2.0.4 of OpenDNSSEC has been released on 2017-01-13. News As of now OpenDNSSEC 2.0.4 is released. This version is a minimal change over 2.0.3, fixing a reported crash of the Enforcer daemon. No additional migration steps are required. In the near future, we aim at the end of January, we are planning to release […]