CVS commit: pkgsrc/security/opendnssec

[Fredrik Pettai <pettai%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   pettai
Date:           Wed Jun 16 00:19:08 UTC 2010

Modified Files:
        pkgsrc/security/opendnssec: Makefile PLIST distinfo
        pkgsrc/security/opendnssec/patches: patch-aa

Log Message:
OpenDNSSEC 1.1.0:

* Partial Auditor added
* Dnsruby-1.46 required
* Improved error messages when the system runs out of keys
* Optimise communication of signconfs for multiple zones sharing keys.
  Group zones in zonelist.xml by policy to get this benefit.
* Bugreport #101: Signer Engine now maintains its own pidfile.
* Jitter redefined: now in the range of [-jitter, ..., +jitter]
* Optimized sorter: quicksorter (sorter becomes obsolete).
* Optimized zone_reader, includes nseccing/nsec3ing (nseccer and nsec3er
  become obsolete).
* Enable database selection using --with-database-backend={sqlite3|mysql}
* Enable the EPP-client using --enable-eppclient
  For sending DS RR to the parent zone (experimental)
* Turn NSEC3 OptOut off by default
* Install kasp2html XML stylesheet
* Add simple kasp2html conversion script
* DNSKEY records communicated to an external script if configured
* The command 'ods-signer restart' is removed.
* Signer Engine now also reuses signatures after a change in NSEC(3)
  configuration or rolling keys.
* Quicksorter defaults to class IN.

And a lot of bugfixes...


To generate a diff of this commit:
cvs rdiff -u -r1.2 -r1.3 pkgsrc/security/opendnssec/Makefile
cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/security/opendnssec/PLIST \
    pkgsrc/security/opendnssec/distinfo
cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/security/opendnssec/patches/patch-aa

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.