Message ID | 20210620121520.1351-1-matthias.fischer@ipfire.org |
---|---|
State | Accepted |
Commit | 9e1f2150dfdb499f9d964501e023e9e5c2629a18 |
Headers |
Return-Path: <development-bounces@lists.ipfire.org> Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4G7BSc4NbGz3wcf for <patchwork@web04.haj.ipfire.org>; Sun, 20 Jun 2021 12:15:28 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4G7BSb4GZXz1Sq; Sun, 20 Jun 2021 12:15:27 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4G7BSb39dJz2xgx; Sun, 20 Jun 2021 12:15:27 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4G7BSZ0Gxvz2xBf for <development@lists.ipfire.org>; Sun, 20 Jun 2021 12:15:26 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4G7BSY293hzZb for <development@lists.ipfire.org>; Sun, 20 Jun 2021 12:15:25 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1624191325; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=mgs5fefYxrHSXt9Hy0uf6rwGhCdxe/Gpmf5LqswB3Rk=; b=qIJAVDawLkQguPEqRqsLkUBdgtMFIk9XMCC/nbQIEUCOAPCSUjwKOXsifEE9kkkpyNI2wJ NaxLyIv1/YBc2kBw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1624191325; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=mgs5fefYxrHSXt9Hy0uf6rwGhCdxe/Gpmf5LqswB3Rk=; b=jUcdrfq8T9kf0bB2yvVhvtuLJ+CWFPx8ujH32lehmMLgh57TBRuGfG4y0/G0Xe1b30L4lg yZZh+qsWn8mxObTffDF7IQHId5+dObzMX/052r4nKK7A6a7dM+pykZMyd8l92MKWoKV4WJ u+wjCE9q3VD7n3g7iCJIMo2/3U5nQ/K9Dix+MDS1svt7clQIF/S72HtIbnioL+EErk8Wjp sAc5DgE5BxtFIjB84fO8h61a9lsiKvDW3f6NXwbaC3GiBDE2PTFcWGSSmsZMz/ZUTsV9+S Mfv5KpA1OjEhd93c1kmFtbklkilEzNmjQpBZy1BsrPsB5aTTuMsCLTyt+ph6lQ== From: Matthias Fischer <matthias.fischer@ipfire.org> To: development@lists.ipfire.org Subject: [PATCH] knot: Update to 3.0.7 Date: Sun, 20 Jun 2021 14:15:20 +0200 Message-Id: <20210620121520.1351-1-matthias.fischer@ipfire.org> X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk <development.lists.ipfire.org> List-Unsubscribe: <https://lists.ipfire.org/mailman/options/development>, <mailto:development-request@lists.ipfire.org?subject=unsubscribe> List-Archive: <http://lists.ipfire.org/pipermail/development/> List-Post: <mailto:development@lists.ipfire.org> List-Help: <mailto:development-request@lists.ipfire.org?subject=help> List-Subscribe: <https://lists.ipfire.org/mailman/listinfo/development>, <mailto:development-request@lists.ipfire.org?subject=subscribe> Errors-To: development-bounces@lists.ipfire.org Sender: "Development" <development-bounces@lists.ipfire.org> |
Series |
knot: Update to 3.0.7
|
|
Commit Message
Matthias Fischer
June 20, 2021, 12:15 p.m. UTC
For details see:
https://www.knot-dns.cz/2021-06-16-version-307.html
Features:
knotd: new configuration policy option for CDS digest algorithm setting #738
keymgr: new command for primary SOA serial manipulation in on-secondary signing mode
Improvements:
knotd: improved algorithm rollover to shorten the last step of old RRSIG publication
Bugfixes:
knotd: zone is flushed upon server start, despite DNSSEC signing is up-to-date
knotd: wildcard nonexistence is proved on empty-non-terminal query
knotd: redundant wildcard proof for non-authoritative data in a reply
knotd: missing wildcard proofs in a wildcard-cname loop reply
knotd: incorrectly synthesized CNAME owner from a wildcard record #715
knotd: zone-in-journal changeset ignores journal-max-usage limit #736
knotd: incorrect processing of zone-in-journal changeset with SOA serial 0
knotd: broken initialization of processing workers if SO_REUSEPORT(_LB) not available
kjournalprint: reported journal usage is incorrect #736
keymgr: cannot parse algorithm name ed448 #739
keymgr: default key size not set properly
kdig: failed to process huge DoH responses
libknot/probe: some corner-case bugs
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
---
lfs/knot | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
Comments
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org> On 20/06/2021 14:15, Matthias Fischer wrote: > For details see: > https://www.knot-dns.cz/2021-06-16-version-307.html > > Features: > > knotd: new configuration policy option for CDS digest algorithm setting #738 > keymgr: new command for primary SOA serial manipulation in on-secondary signing mode > > Improvements: > > knotd: improved algorithm rollover to shorten the last step of old RRSIG publication > > Bugfixes: > > knotd: zone is flushed upon server start, despite DNSSEC signing is up-to-date > knotd: wildcard nonexistence is proved on empty-non-terminal query > knotd: redundant wildcard proof for non-authoritative data in a reply > knotd: missing wildcard proofs in a wildcard-cname loop reply > knotd: incorrectly synthesized CNAME owner from a wildcard record #715 > knotd: zone-in-journal changeset ignores journal-max-usage limit #736 > knotd: incorrect processing of zone-in-journal changeset with SOA serial 0 > knotd: broken initialization of processing workers if SO_REUSEPORT(_LB) not available > kjournalprint: reported journal usage is incorrect #736 > keymgr: cannot parse algorithm name ed448 #739 > keymgr: default key size not set properly > kdig: failed to process huge DoH responses > libknot/probe: some corner-case bugs > > Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org> > --- > lfs/knot | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/lfs/knot b/lfs/knot > index ec6ec4deb..7e8bbc202 100644 > --- a/lfs/knot > +++ b/lfs/knot > @@ -24,7 +24,7 @@ > > include Config > > -VER = 3.0.6 > +VER = 3.0.7 > > THISAPP = knot-$(VER) > DL_FILE = $(THISAPP).tar.xz > @@ -40,7 +40,7 @@ objects = $(DL_FILE) > > $(DL_FILE) = $(DL_FROM)/$(DL_FILE) > > -$(DL_FILE)_MD5 = 0d8aaa8e5214623c12123c67b5f2c460 > +$(DL_FILE)_MD5 = a7ac9e92989184437a45578d0e23990a > > install : $(TARGET) >
diff --git a/lfs/knot b/lfs/knot index ec6ec4deb..7e8bbc202 100644 --- a/lfs/knot +++ b/lfs/knot @@ -24,7 +24,7 @@ include Config -VER = 3.0.6 +VER = 3.0.7 THISAPP = knot-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 0d8aaa8e5214623c12123c67b5f2c460 +$(DL_FILE)_MD5 = a7ac9e92989184437a45578d0e23990a install : $(TARGET)