[Dnssec-trigger] dnssec-trigger release 0.6

W.C.A. Wijngaards wouter at NLnetLabs.nl
Fri Oct 21 08:34:03 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Dnssec Trigger 0.6 is release, get it at our new webpage:
nlnetlabs.nl/projects/dnssec-trigger
svn is available: http://www.nlnetlabs.nl/svn/dnssec-trigger
you can browse it with a browser or svn co it.


http://nlnetlabs.nl/downloads/dnssec-trigger/dnssec-trigger-0.6.tar.gz
sha1 21ab4134c2a8c5585f1158e59e856666a2c3f838
sha256 abd39400a4550802e212550c22c00b4d2e8c5d368b7120c4ae36bdf92a7ac120


GUI: XFCE and Ubuntu-Unity support.  Windows worked for me in a test.
(GTK and OSX still work of course).

Detect: transparent proxy trouble and insecure fail after tcp443 test.

Security: Race condition gone, really secure (during bootup).  Possibly
an issue on Linux without ext234fs (chattr immutable is used).


Changelog
    * detect transparent proxies and avoid them.
    * Fix insecure mode after dnstcp443 has been probed.
    * Fix race condition between system and dnssec-trigger where briefly
the DHCP insecure response was dominant. On OSX and Windows a system
preference (like from the control panel) is created. On Linux chattr
immutable, on BSD chflag immutable. On exit, it enters 127.0.0.1 even if
in insecure mode, so that a later reboot will be secure. The override is
removed on uninstall.
    * windows package work, tested Vista.
    * the dnssec-trigger-panel (gtk2 without libappindicator) works on
the XFCE desktop.
    * libappindicator support, for Ubuntu Unity desktop GUI. Just
install libappindicator-dev and build and a Unity GUI tray icon is produced.
    * can build outside of sourcedir.
    * Manpage fixes
    * Add @ to echo in Makefile.
    * print error on control unknown command, and exit status 1.

Best regards,
   Wouter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.15 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/
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=1/AS
-----END PGP SIGNATURE-----



More information about the dnssec-trigger mailing list