[ldns-users] ldns 1.6.2 released

[Matthijs Mekking]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

A new release of ldns, version 1.6.2, has been released this morning.

We have enabled SHA2 by default.
Be aware that old versions of OpenSSL don't support the SHA2 functions,
so you might need to update your OpenSSL to 0.9.8 or higher, or you need
to disable SHA2 with --disable-sha2 to make ldns work.

Furthermore, this release contains two more features and lots of bug
fixes, see the Changelog below.

The release can be downloaded at:

http://www.nlnetlabs.nl/downloads/ldns/ldns-1.6.2.tar.gz

Sha1sum: d8650b9466f5f2793ef72a1e571606c8479b5cf7


Hope you like it.

Matthijs


Changelog:

1.6.2   2009-11-05
    * Fix Makefile patch from Havard Eidnes, better install.sh usage.
    * Fix parse error on SOA serial of 2910532839.
      Fix print of ';' and readback of '\;' in names, also for '\\'.
      Fix parse of '\(' and '\)' in names.  Also for file read. Also
      '\.'
    * Fix signature creation when TTLs are different for RRs in RRset.
    * bug273: fix so EDNS rdata is included in pkt to wire conversion.
    * bug274: fix use of c++ keyword 'class' for RR class in the code.
    * bug275: fix memory leak of packet edns rdata.
    * Fix timeout procedure for TCP and AXFR on Solaris.
    * Fix occasional NSEC bitmap bogus
    * Fix rr comparing (was in reversed order since 1.6.0)
    * bug278: fix parsing HINFO rdata (and other cases).
    * Fix previous owner name: also pick up if owner name is @.
    * RFC5702: enabled sha2 functions by default. This requires OpenSSL
      0.9.8 or higher.
      Reason for this default is the root to be signed with RSASHA256.
    * Fix various LDNS RR parsing issues: IPSECKEY, WKS, NSAP, very long
      lines
    * Fix: Make ldns_dname_is_subdomain case insensitive.
    * Fix ldns-verify-zone so that address records at zone NS set are
      not considered glue (Or glue records fall below delegation)
    * Fix LOC RR altitude printing.
    * Feature: Added period (e.g. '3m6d') support at explicit TTLs.
    * Feature: DNSKEY rrset by default signed with minimal signatures
        but -A option for ldns-signzone to sign it with all keys.
        This makes the DNSKEY responses smaller for signed domains.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBAgAGBQJK++msAAoJEA8yVCPsQCW5WZsIAKAk6kFm7FLthibQ/X0Y2Z4P
b6T1yVpL8jLMeqHaJy6vBpJj99vLdu6a1jSeInxAB5fEJG94i3AMRYjx9V8zsjx/
ZnHLtFrWQRt3X87pxDNXdl2BNnoqdIwlRrQ53v/P6o9tdVabs0w9B6Ngpd2FaxJN
JpHZWuRrHvBzTs+05dltA2q1eD1atpuA4tQmiuFkZkQDQG2XcDsA3lRelxM+FieQ
5NTq7vNPH2C5/zOdiFm0tzyXYOBwSiSpGRT7rg35XL6tkT7jtjKuTV31p4XZaMgO
UrFHZ9Ev4HWRgl6B7ZqnHm8nb4c8OkCLEAv9Qv5PJgzU9sXbANk+Y65ABaF1TWU=
=obp8
-----END PGP SIGNATURE-----