rpms/opendnssec
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Update to 2.1.10

Browse Source 
Issues reported fixed by upstream (same as 2.1.9):
- OPENDNSSEC-955: Prevent concurrency between certain valid
  PKCS#11 HSM operations to avoid some keys to be (transiently)
  unavailable.

- OPENDNSSEC-956: Harden signing procedure to still sign zones
  for which there are unused keys specified in the zone which are
  unavailable.

Issues newly reported fixed:
- OPENDNSSEC-957: Fix exit code signer daemon to not always report
  failure.

- OPENDNSSEC-958: Fix immediate resalting after migration from 1.4.

- OPENDNSSEC-959: Emit warning on ods-kaspcheck for NSEC iteration
  count that is deemed too high.

- SUPPORT-265: Resolve conflict when deleting keys from HSM whilst
  also performing step in key roll process. Typically a message
  “key_data_update failed” is present in logs.
This commit is contained in:
François Cami 2021-10-18 20:42:54 +02:00
parent c199a0094f
commit e09e7a2680
3 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.gitignore vendored
View File

@ -20,3 +20,5 @@
/opendnssec-2.1.8.tar.gz
/opendnssec-2.1.9.tar.gz
/opendnssec-2.1.9.tar.gz.sig
/opendnssec-2.1.10.tar.gz.sig
/opendnssec-2.1.10.tar.gz

7
opendnssec.spec
View File

@ -3,8 +3,8 @@
Summary: DNSSEC key and zone management software
Name: opendnssec
Version: 2.1.9
Release: 3%{?dist}
Version: 2.1.10
Release: 1%{?dist}
License: BSD
Url: http://www.opendnssec.org/
Source0: http://www.opendnssec.org/files/source/%{?prever:testing/}%{name}-%{version}%{?prever}.tar.gz
@ -178,6 +178,9 @@ ods-enforcer update all >/dev/null 2>/dev/null ||:
%systemd_postun_with_restart ods-signerd.service
%changelog
* Mon Oct 18 2021 François Cami <fcami@redhat.com> - 2.1.10-1
- Update to 2.1.10 (rhbz#2003250).
* Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 2.1.9-3
- Rebuilt with OpenSSL 3.0.0

4
sources
View File

@ -1,2 +1,2 @@
SHA512 (opendnssec-2.1.9.tar.gz) = 011a50606559651db1787949dcedbbc8727b8ec5c71e95425bfdae94b6db6b731e662ce4cb9f05b34d4ec3512067227869a72a2b2c8a6c14eb547036e4b6e02e
SHA512 (opendnssec-2.1.9.tar.gz.sig) = a3e60e231dfe2a3bdcc0756a4cc601d6b4aef7e98b8a60b19b0e51a8ab2efb5b75c1a72f87a1b95378d0f5d586dd6952ffd13b8c13aaac7bcb3dae637df9b909
SHA512 (opendnssec-2.1.10.tar.gz.sig) = edae30f551465a70a8c9476dc91e079d36a0fa2cf84e1973cbcce6ee2c6a2eba4a773deb9f18fe6787189ce7d3ae7a2c948dee0a6f6cf2f59b745d5cbe68d7b8
SHA512 (opendnssec-2.1.10.tar.gz) = c7fdbf1c3867d7b53ac11ab5cb5e636af4595dbee8d704429c7fb84cc3a6b2082ed490c33aad7747d4ee1a2c580afcf24a260bc3ed29eaf5e9d337004045b82d