[Bug 250293] dns/opendnssec2: update to 2.1.7

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250293

            Bug ID: 250293
           Summary: dns/opendnssec2: update to 2.1.7
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
               URL: https://www.opendnssec.org
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs at FreeBSD.org
          Reporter: jaap at NLnetLabs.nl
 Attachment #218688 maintainer-approval+
             Flags:

Created attachment 218688
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=218688&action=edit
patch to update

NEWS

This release of 2.1.7 fixes a bug in the migration script to migrate
from 1.4 to 2.1. Additionally a bug in creating unnecessary signatures
during a ZSK roll was fixed. We also had some contributions regarding
edward curves and exporting keys by CKA identifier and other
corrections and improvements, see the full list below.

Issues

* OPENDNSSEC-949: Fix for migration bug not keeping proper parameters
  of NSEC3 signed zones. Amongst others the zone become NSEC. Loading
  the policies

* fixes the situation, migration scripts now corrected. Since 1.4
  does not require a salt, a resalt might be automatic after
  migrating, as this is a required parameter.

* OPENDNSSEC-948: do not recreate signatures for keys that are
  moving out this fixes unexpected double signatures in the zone.

* SUPPORT-253: Incorrect keytag used when using Combined Signing
  keys (CSK) (Thanks to Simon Arlott)

* SUPPORT-257: Export keys by locator (Thansk to Simon Arlott)

* SUPPORT-222: Support ED25519/ED448 keys. This requires library
  ldns 1.7.0 or better, otherwise unavailable. (Thanks again to
  Simon Arlott)

* Load libsqlite3.so.0 and fall back on libsqlite3.so.0 to allow
  to run migration tool on systems without libsqlite3.so.0 soft
  link.  (Thanks to Paul Wouters)

* Some compilation warnings, o.a. gcc10 related, code quality and
  initialization improvements. (Thanks to Jonas Berlin, and Mathieu
  MirMont, and Paul Wouters)

-- 
You are receiving this mail because:
You are the assignee for the bug.