[RPKI] Krill 0.14.0-rc1 released

Tim Bruijnzeels tim at nlnetlabs.nl
Tue Oct 17 17:01:42 UTC 2023

Dear list,

We just released the first release candidate for the coming 0.14.0 Krill release. We invite all interested users to test this version, but please do not upgrade your production environment until 0.14.0 has been released.

This release introduces the following small features and fixes:
- Add traditional and simplified Chinese translations #1075
- Let the testbed automatically renew the TA manifest and CRL #1095
- Show the delete icon for AS0 ROA when there is another existing announcement #1109

But, we spent the main effort in this release on improving how Krill stores its data. This will help improve robustness today and pave the way for introducing support for Krill clustering using a database back-end in a future release. For now, these issues have been done:
- Improve transactionality of changes (e.g. #1076-1078, #1085, #1108, #1090)
- Remove no longer needed 'always_recover_data' function #1086
- Improve upgrade failed error: tell users to downgrade #1042
- Crash Krill if the task scheduler encounters a fatal error. #1132
- Add support for importing delegated child CAs #1133

Note that this release still uses the now outdated ASPA object syntax. We plan to make another focused release to address this immediately after 0.14.0 is released. See issue #1080.

Note that if you were running 0.13.1 as a testbed, you might have symlinked the "signer" directory to "ta_signer" to support a manual workaround for re-signing the trust anchor CRL and manifest (issue #1095). If you did, you may need to delete any surplus files and directories under "/var/lib/krill/data/ta_signer" other than the " ta " directory.

Please let us know if you have any issues, questions or comments. We are running this release candidate in our production environment and will continue testing it in the wild over the coming weeks. If no issues arise, we will release Krill 0.14.0 on Monday, 30 October.

On behalf of the NLnet Labs RPKI Team,


More information about the RPKI mailing list