* Fri Apr 18 2014 Paul Wouters <pwouters@redhat.com> - 1.4.5-2

- Updated to 1.4.5
- Added patch for serial 0 bug in XFR adapter

.gitignore

@@ -10,3 +10,4 @@
 /opendnssec-1.4.2.tar.gz
 /opendnssec-1.4.3.tar.gz
 /opendnssec-1.4.4.tar.gz
+/opendnssec-1.4.5.tar.gz

opendnssec-1.4.5-serial0.patch

@@ -0,0 +1,13 @@
+diff -Naur opendnssec-1.4.5-orig/signer/src/adapter/addns.c opendnssec-1.4.5/signer/src/adapter/addns.c
+--- opendnssec-1.4.5-orig/signer/src/adapter/addns.c	2014-03-25 06:45:44.000000000 +0000
++++ opendnssec-1.4.5/signer/src/adapter/addns.c	2014-04-18 16:26:39.079974120 +0000
+@@ -243,7 +243,8 @@
+             tmp_serial =
+                 ldns_rdf2native_int32(ldns_rr_rdf(rr, SE_SOA_RDATA_SERIAL));
+             old_serial = adapi_get_serial(zone);
+-            if (!util_serial_gt(tmp_serial, old_serial)) {
++            if (!util_serial_gt(tmp_serial, old_serial)
++		&& zone->db->is_initialized) {
+                 ods_log_info("[%s] zone %s is already up to date, have "
+                     "serial %u, got serial %u", adapter_str, zone->name,
+                     old_serial, tmp_serial);

opendnssec.spec

@@ -3,8 +3,8 @@
 
 Summary: DNSSEC key and zone management software
 Name: opendnssec
-Version: 1.4.4
-Release: 3%{?prever}%{?dist}
+Version: 1.4.5
+Release: 1%{?prever}%{?dist}
 License: BSD
 Url: http://www.opendnssec.org/
 Source0: http://www.opendnssec.org/files/source/%{?prever:testing/}%{name}-%{version}%{?prever}.tar.gz
@@ -14,6 +14,8 @@ Source3: ods.sysconfig
 Source4: conf.xml
 Source5: tmpfiles-opendnssec.conf
 Source6: opendnssec.cron
+Patch1: opendnssec-1.4.5-serial0.patch
+
 Group: Applications/System
 Requires: opencryptoki, softhsm, systemd-units
 Requires: libxml2, libxslt
@@ -41,6 +43,7 @@ name server. It requires a PKCS#11 crypto module library, such as softhsm
 %setup -q -n %{name}-%{version}%{?prever}
 # bump default policy ZSK keysize to 2048
 sed -i "s/1024/2048/" conf/kasp.xml.in
+%patch -p1
 
 %build
 export LDFLAGS="-Wl,-z,relro,-z,now -pie -specs=/usr/lib/rpm/redhat/redhat-hardened-ld"
@@ -117,6 +120,9 @@ ods-ksmutil update all >/dev/null 2>/dev/null ||:
 %systemd_postun_with_restart ods-signerd.service
 
 %changelog
+* Fri Apr 18 2014 Paul Wouters <pwouters@redhat.com> - 1.4.5-2
+- Added patch for serial 0 bug in XFR adapter
+
 * Tue Apr 01 2014 Paul Wouters <pwouters@redhat.com> - 1.4.4-3
 - Add buildrequires for ods-kasp2html (rhbz#1073313)
 

sources

@@ -1 +1 @@
-2b8f2c6921953c7a1472b54fd6dfe495  opendnssec-1.4.4.tar.gz
+76eb0e2165de2081f5018ab04ec532aa  opendnssec-1.4.5.tar.gz