[RPKI] Krill 0.10.0-RC2 'Hush' released

Tim Bruijnzeels tim at nlnetlabs.nl
Thu Jul 28 15:01:14 UTC 2022


Dear list,

We just released RC2 for Krill 0.10.0 'Hush'.

This release candidate fixes the following issues identified
in RC1:

- Using a jitter of 0 results in a panic #859
- Make krill.lock file optional and opt-in #856
- BGPSec Router Certificate should NOT contain SIA extension #854
- Manifest of 0.10.0-rc1 includes CRL, but nothing else #853

We deployed this version to our own test as well as production
environments and will monitor it over the coming week at least.

Of course, we welcome you all to do additional testing. If you
find any issues, or have any questions or comments, please let
us know.

On behalf of the NLnet Labs RPKI Team,

Tim

> On 24 Jul 2022, at 05:33, Tim Bruijnzeels <tim at nlnetlabs.nl> wrote:
> 
> Dear list,
> 
> An issue has been found with the BGPSec Router Certificates produced by this
> release candidate. In addition, we found an issue in manifest generation.
> 
> We will fix these issues and let you know when a new release candidate is ready
> for testing.
> 
> On behalf of the NLnet Labs RPKI Team,
> 
> Tim
> 
>> On 22 Jul 2022, at 15:00, Tim Bruijnzeels via RPKI <rpki at lists.nlnetlabs.nl> wrote:
>> 
>> Dear list,
>> 
>> We just released RC1 for Krill 0.10.0 'Hush'.
>> 
>> We upgraded our own production CA as well as our public testbed to
>> this release candidate and we will closely monitor both environments
>> in the days and weeks to come.
>> 
>> If you want to try out the release candidate, then you can use our
>> proposed repository, see here:
>> https://nlnetlabs.nl/packages/
>> 
>> Any feedback is highly appreciated!
>> 
>> In this release candidate we introduce the following major features:
>> - BGPSec Router Certificate Signing
>> - Support the use of Hardware Security Modules (HSMs) for key operations
>> 
>> The documentation for the 'latest' Krill version has more information:
>> https://krill.docs.nlnetlabs.nl/en/latest/index.html
>> 
>> Specifically, you may want to have a look at the following pages:
>> API changes: https://krill.docs.nlnetlabs.nl/en/latest/upgrade.html#v0-10-0
>> BGPSec:      https://krill.docs.nlnetlabs.nl/en/latest/cli.html#krillc-bgpsec
>> HSM support: https://krill.docs.nlnetlabs.nl/en/latest/hsm.html
>> 
>> Besides these major features we added a number of small improvements
>> and bugfixes:
>> - CRL revocation dates in the future #788
>> - Prevent that two krill instances modify the same data #829
>> - Let user force RRDP session reset on restore #828
>> - Various code improvements aimed at maintainability
>> 
>> The full list of changes can be found here:
>> https://github.com/NLnetLabs/krill/projects/19
>> 
>> On behalf of the NLnet Labs RPKI Team,
>> 
>> Tim
>> -- 
>> RPKI mailing list
>> RPKI at lists.nlnetlabs.nl
>> https://lists.nlnetlabs.nl/mailman/listinfo/rpki
> 



More information about the RPKI mailing list