OpenDNSSEC

We have now release an alpha snapshot of the upcoming version of Enforcer. This software should only be used for testing, but we welcome feedback on it. HIGH-LEVEL DESIGN GOALS Support for a large number of zones. The enforcer should reasonably be useable with many zones. Think order of magnitude 50.000 concurrent zones. Allow for future [...]

Version 1.3.2 of OpenDNSSEC has now been released. Bugfixes: Bugfix #257: Error in ods-signerd, where a corrupted backup file results in an invalid pointer free(). Signer Engine: Mark that a zone has a valid signer configuration, after recovering the zone from the backup files. Download the tarball from: opendnssec-1.3.2.tar.gz

Version 1.3.1 of OpenDNSSEC has now been released. Bugfixes: Auditor: Fix ‘ZSK in use too long’ message to handle new signer behaviour. Bugfix #255: RHEL6 patch to contrib/opendnssec.spec. (Rick van Rein) Bugfix #256: Make sure argument in ... [More] “ods-control signer” is not stripped off. Bugfix #259: ods-ksmutil: Prevent MySQL username or password being interpreted by the [...] [Less]

Version 1.3.0 of SoftHSM has now been released. Can now read CKA_ALWAYS_AUTHENTICATE but does not use it. Encryption and decryption using CKM_RSA_PKCS. Support X.509 certificates. (Patch from Thomas Calderon) Updated backup instructions. Only a ... [More] Security Officer can set CKA_TRUSTED to true. The softhsm tool can set the value of CKA_TRUSTED. Support Botan 1.10.0. Better signing [...] [Less]

Version 1.2.2 of OpenDNSSEC has now been released. Bugfixes: signconf.rnc now allows NSEC3 Iterations of 0 Auditor: Fix delegation checks. Bugfix #242: Race condition when receiving multiple NOTIFIES for a zone. Enforcer: Change message about KSK ... [More] retirement to make it less confusing. ods-ksmutil: manual keyroll on zones which have moved policies fixed. Signer Engine: Handle [...] [Less]

Version 1.3.0 of OpenDNSSEC has now been released. Changes between 1.3.0 and 1.3.0rc3 Include simple-dnskey-mailer-plugin in dist. Enforcer: Change message about KSK retirement to make it less confusing. Bugfixes: ods-control: If the Enforcer did not ... [More] close down, you entered an infinite loop. Signer Engine: Fix log message typos. Signer Engine: Fix crash where ods-signer update [...] [Less]

Version 1.3.0rc3 of OpenDNSSEC has now been released. Do not distribute trang. Bugfixes: Fix test for java executable and others. Auditor: Fix delegation checks. Bugfix #242: Race condition when receiving multiple NOTIFIES for a zone. (Need an ... [More] end-user acceptance test before closing the ticket) ods-kaspcheck: Do not expect resalt in NSEC policy. Signer Engine: Ifdef a [...] [Less]

Version 1.3.0rc2 of OpenDNSSEC has now been released. Match the names of the signer pidfile and enforcer pidfile. Include check for resign < resalt in ods-kaspcheck. Bugfixes: Bugfix #231: Fix MySQL version check. ods-ksmutil: Update now sends a ... [More] HUP to the enforcerd. Signer Engine: Fix assertion failure if zone was just added. Signer Engine: Don’t [...] [Less]

Version 1.2.1 of SoftHSM has now been released. Backport mutex handling from v2 for increased multithreaded performance. Remove signature verification used for debugging purposes. (was enabled with ./configure –enable-sigver) Added an index to the ... [More] attribute table in the database. Optimization of the database handling. Download the tarball from: softhsm-1.2.1.tar.gz [Less]

Version 1.3.0rc1 of OpenDNSSEC has now been released. is enabled for SoftHSM in the default configuration. It improves the performance by only using the private key objects. Document the tag in conf.xml. Bugfixes: Bugfix #221: Segmentation Fault ... [More] on schedule.c:232 Enforcer: ‘make check’ now works. Enforcer: Fixed some memory leaks in the tests. Signer Engine: Coverity report fixes some leaks and [...] [Less]