[ldns-users] ldns 1.6.13 released

Willem Toorop Willem at NLnetLabs.nl
Mon May 21 13:59:18 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Version 1.6.13 of ldns is now available.

This is mostly a bugfix release. Most notable new features are ECDSA
support (RFC 6605) and command-line options for ldns-verify-zone for
validating against given keys and for safety margins on signatures
inception and expiration times.

Best regards,

Willem Toorop

link: http://www.nlnetlabs.nl/downloads/ldns/ldns-1.6.13.tar.gz
sha1: 859f633d10b763f06b602e2113828cbbd964c7eb

Changelog:
* New -S option for ldns-verify-zone to chase signatures online.
* New -k option for ldns-verify-zone to validate using a trusted key.
* New inception and expiration margin options (-i and -e) to
  ldns-verify-zone.
* New ldns_dnssec_zone_new_frm_fp and ldns_dnssec_zone_new_frm_fp_l
  functions.
* New ldns_duration* functions (copied from OpenDNSSEC source)
* fix ldns-verify-zone to allow NSEC3 signatures to come before
  the NSEC3 RR in all cases. Thanks Wolfgang Nagele.
* Zero the correct flag (opt-out) when creating NSEC3PARAMS.
  Thanks Peter van Dijk.
* Canonicalize RRSIG's Signer's name too when validating, because
  bind and unbound do that too. Thanks Peter van Dijk.
* bugfix #433: Allocate rdf using ldns_rdf_new in ldns_dname_label
* bugfix #432: Use LDNS_MALLOC & LDNS_FREE i.s.o. malloc & free
* bugfix #431: Added error message for LDNS_STATUS_INVALID_B32_EXT
* bugfix #427: Explicitely link ssl with the programs that use it.
* Fix reading \DDD: Error on values that are outside range (>255).
* bugfix #429: fix doxyparse.pl fails on NetBSD because specified
  path to perl.
* New ECDSA support (RFC 6605), use --disable-ecdsa for older openssl.
* fix verifying denial of existence for DS's in NSEC3 Opt-Out zones.
  Thanks John Barnitz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=p4Ac
-----END PGP SIGNATURE-----



More information about the ldns-users mailing list