[net-dns-users] Release candidate for Net::DNS 1.20 and Net::DNS::SEC 1.12

Willem Toorop willem at nlnetlabs.nl
Tue Mar 12 14:32:42 UTC 2019


Dear all,

We have a candidate for the upcoming 1.20 release of Net::DNS and the
upcoming 1.12 release of Net::DNS::SEC.

The Net::DNS candidate has a single bugfix that addresses correctly
caching IP’s for delegations in the Recurse.pm module.

Besides this bugfix, this release has

  * TSIG MAC representation changed to Base64 (like with dig)
  * Updated IANA parameters
  * updated examples that use AAAA instead of A records.
  * Overall improvements in code and test scripts

The Net::DNS::SEC candidate contains simplified (more robust) support
for the different versions of Open & LibreSSL, including a fix for the
future OpenSSL 3.0.0. Current thought is to support latest two LibreSSL
releases.


Please review these candidates carefully. If no issues arise, the actual
releases will follow Tuesday the 19th of March 2019.


link  : https://www.net-dns.org/download/Net-DNS-1.19_02.tar.gz
sha256: 20605a05d1ec20705d5658966faa5a4cf4b3b4e626d7403b2ec2335ef05ab6c7
asc   : https://www.net-dns.org/download/Net-DNS-1.19_02.tar.gz.asc

Regression test results: https://www.net-dns.org/regression


link  : https://www.net-dns.org/download/Net-DNS-SEC-1.11_01.tar.gz
sha256: e443e07d5852dfa683dce35c1391b2f13326220b1c480ff037cadea9b5723775
asc   : https://www.net-dns.org/download/Net-DNS-SEC-1.11_01.tar.gz.asc



Net::DNS Changes
================

**** 1.20 [unreleased]

        Revise documentation examples to use AAAA instead of A records.

        TSIG MAC representation changed to Base64 (align with BIND).

        Update Parameters.pm to resync with IANA registry.

        Refactor resolver test scripts.

Fix rt.cpan.org #128081

        Recurse.pm fails to resolve domain “kickboxingireland.ie”

Fix rt.cpan.org #127307

        Provide a more informative exception report if application code
        has no "use Net::DNS::SEC" declaration but nevertheless attempts
        to invoke the DNSSEC sign or verify features.


Net::DNS::SEC Changes
=====================
**** 1.12 [unreleased]

        Avoid use of EC_POINT_set_affine_coordinates_GFp which is
        deprecated in OpenSSL 3.0.0

        Reduce level of support for OpenSSL non-LTS releases.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.nlnetlabs.nl/pipermail/net-dns-users/attachments/20190312/959ff685/attachment.bin>


More information about the net-dns-users mailing list