58dcb46d3f
Changelog: Knot DNS 2.8.1 (2019-04-09) =========================== Improvements: ------------- - Possible zone transaction is aborted by zone events to avoid inconsistency - Added log message if no persistent config DB is available during 'conf-begin' - New environment setting 'KNOT_VERSION_FORMAT=release' for extended version suppression - Various improvements in the documentation Bugfixes: --------- - Broken NSEC3-wildcard-nonexistence proof after NSEC3 re-salt - Glue records under delegation are sometimes signed - RRL doesn't work correctly on big-endian architectures - NSEC3 not re-salted during AXFR refresh - Failed to sign new zone contents if added dynamically #641 - NSEC3 opt-out signing doesn't work in some cases - Broken NSEC3 chain after adding new sub-delegations - Redundant SOA RRSIG on slave if RRSIG TTL changed on master - Sometimes confusing log error message for NOTIFY event - Improper include for LMDB #638 Knot DNS 2.8.0 (2019-03-05) =========================== Features: --------- - New offline-KSK mode of operation - Configurable multithreaded DNSSEC signing for large zones - Extended ACL configuration for dynamic updates - New knotc trigger 'zone-key-rollover' for immediate DNSKEY rollover - Added support for OPENPGPKEY, CSYNC, SMIMEA, and ZONEMD RR types - New 'double-ds' option for CDS/CDNSKEY publication Improvements: ------------- - Significant speed-up of zone updates - Knotc supports force option in the interactive mode - Copy-on-write support for QP-trie (Thanks to Tony Finch) - Unified and more efficient LMDB layer for journal, timer, and KASP databases - DS check event is re-planned according to KASP even when purged timers - Module DNS Cookies supports explicit Server Secret configuration - Zone mtime is verified against full-precision timestamp (Thanks to Daniel Kahn Gillmor) - Extended logging (loaded SOA serials, refresh duration, tiny cleanup) - Relaxed fixed-length condition for DNSSEC key ID - Extended semantic checks for DNAME and NS RR types - Added support for FreeBSD's SO_REUSEPORT_LB - Improved performance of geoip module - Various improvements in the documentation Compatibility: -------------- - Changed configuration default for 'cds-cdnskey-publish' to 'rollover' - Journal DB format changes are not downgrade-compatible - Keymgr no longer prints DS for algorithm SHA-1
91 lines
2.3 KiB
Text
91 lines
2.3 KiB
Text
@comment $NetBSD: PLIST,v 1.16 2019/04/15 16:23:03 ryoon Exp $
|
|
bin/kdig
|
|
bin/khost
|
|
bin/knsec3hash
|
|
bin/knsupdate
|
|
bin/kzonecheck
|
|
include/knot/module.h
|
|
include/libdnssec/binary.h
|
|
include/libdnssec/crypto.h
|
|
include/libdnssec/dnssec.h
|
|
include/libdnssec/error.h
|
|
include/libdnssec/key.h
|
|
include/libdnssec/keyid.h
|
|
include/libdnssec/keystore.h
|
|
include/libdnssec/keytag.h
|
|
include/libdnssec/nsec.h
|
|
include/libdnssec/pem.h
|
|
include/libdnssec/random.h
|
|
include/libdnssec/sign.h
|
|
include/libdnssec/tsig.h
|
|
include/libdnssec/version.h
|
|
include/libknot/attribute.h
|
|
include/libknot/codes.h
|
|
include/libknot/consts.h
|
|
include/libknot/control/control.h
|
|
include/libknot/cookies.h
|
|
include/libknot/db/db.h
|
|
include/libknot/db/db_lmdb.h
|
|
include/libknot/db/db_trie.h
|
|
include/libknot/descriptor.h
|
|
include/libknot/dname.h
|
|
include/libknot/endian.h
|
|
include/libknot/errcode.h
|
|
include/libknot/error.h
|
|
include/libknot/libknot.h
|
|
include/libknot/lookup.h
|
|
include/libknot/mm_ctx.h
|
|
include/libknot/packet/compr.h
|
|
include/libknot/packet/pkt.h
|
|
include/libknot/packet/rrset-wire.h
|
|
include/libknot/packet/wire.h
|
|
include/libknot/rdata.h
|
|
include/libknot/rdataset.h
|
|
include/libknot/rrset-dump.h
|
|
include/libknot/rrset.h
|
|
include/libknot/rrtype/dnskey.h
|
|
include/libknot/rrtype/ds.h
|
|
include/libknot/rrtype/naptr.h
|
|
include/libknot/rrtype/nsec.h
|
|
include/libknot/rrtype/nsec3.h
|
|
include/libknot/rrtype/nsec3param.h
|
|
include/libknot/rrtype/opt.h
|
|
include/libknot/rrtype/rdname.h
|
|
include/libknot/rrtype/rrsig.h
|
|
include/libknot/rrtype/soa.h
|
|
include/libknot/rrtype/tsig.h
|
|
include/libknot/tsig-op.h
|
|
include/libknot/tsig.h
|
|
include/libknot/version.h
|
|
include/libknot/wire.h
|
|
include/libknot/yparser/yparser.h
|
|
include/libknot/yparser/ypformat.h
|
|
include/libknot/yparser/ypschema.h
|
|
include/libknot/yparser/yptrafo.h
|
|
include/libzscanner/error.h
|
|
include/libzscanner/scanner.h
|
|
include/libzscanner/version.h
|
|
lib/libdnssec.la
|
|
lib/libknot.la
|
|
lib/libzscanner.la
|
|
lib/pkgconfig/knotd.pc
|
|
lib/pkgconfig/libdnssec.pc
|
|
lib/pkgconfig/libknot.pc
|
|
lib/pkgconfig/libzscanner.pc
|
|
man/man1/kdig.1
|
|
man/man1/khost.1
|
|
man/man1/knsec3hash.1
|
|
man/man1/knsupdate.1
|
|
man/man1/kzonecheck.1
|
|
man/man5/knot.conf.5
|
|
man/man8/keymgr.8
|
|
man/man8/kjournalprint.8
|
|
man/man8/knotc.8
|
|
man/man8/knotd.8
|
|
sbin/keymgr
|
|
sbin/kjournalprint
|
|
sbin/knotc
|
|
sbin/knotd
|
|
share/examples/knot/example.com.zone
|
|
share/examples/knot/knot.sample.conf
|
|
@pkgdir etc/knot
|