27185456ce
Changelog:
Version 3.0.0
Wednesday, September 9, 2020
Features:
+ High-performance networking mode using XDP sockets (requires Linux
4.18+)
+ Support for Catalog zones including kcatalogprint utility
+ New DNSSEC validation mode
+ New kzonesign utility --- an interface for manual DNSSEC signing
+ New kxdpgun utility --- high-performance DNS over UDP traffic generator
for Linux
+ DoH support in kdig using GnuTLS and libnghttp2
+ New KSK revoked state (RFC 5011) in manual DNSSEC key management mode
+ Deterministic signing with ECDSA algorithms (requires GnuTLS 3.6.10+)
+ Module synthrecord supports reverse pointer shortening
+ Safe persistent zone data backup and restore
Improvements:
+ Processing depth of CNAME and DNAME chains is limited to 20
+ Non-FQDN is allowed as 'update-owner-name' configuration option value
+ Kdig prints detailed algorithm idendifier for PRIVATEDNS and PRIVATEOID
in multiline mode #334
+ Queries with QTYPE ANY or RRSIG are always responded with at most one
random RRSet
+ The statistics module has negligible performance overhead on modern
CPUs
+ If multithreaded zone signing is enabled, some additional zone
maintenance steps are newly parallelized
+ ACL can be configured by reference to a remote
+ Better CPU cache locality for higher query processing performance
+ Logging to non-syslog streams contains timestamps with the timezone
+ Keeping initial DNSKEY TTL and zone maximum TTL in KASP database to
ensure proper rollover timing in case of TTL changes during the
rollover
+ Responding FORMERR to queries with more OPT records
Bugfixes:
+ Module onlinesign responds NXDOMAIN insted of NOERROR (NODATA) if
DNSSEC not requested
+ Outgoing multi-message transfer can contain invalid compression
pointers under specific conditions
Version 2.9.6
Monday, August 31, 2020
Features:
+ New kdig option '+[no]opttext' to print unknown EDNS options as text if
possible (Thanks to Robert Edmonds)
Improvements:
+ Better error message if no key is ready for submission
+ Improved logging when master is not usable
+ Improved control logging of zone-flush errors if output directory is
specified
+ More precise system error messages when a zone transfer fails
+ Some documentation improvements (especially Offline KSK)
Bugfixes:
+ In the case of many zones, control operations over all zones take lots
of memory
+ Misleading error message on keymgr import-bind #683
+ DS push is triggered upon every zone change even though CDS wasn't
changed
+ Kzonecheck performance penalty with passive keys #688
CSK->KSK+ZSK scheme rollover can end too early
95 lines
2.3 KiB
Text
95 lines
2.3 KiB
Text
@comment $NetBSD: PLIST,v 1.17 2020/10/01 03:37:02 ryoon Exp $
|
|
bin/kdig
|
|
bin/khost
|
|
bin/knsec3hash
|
|
bin/knsupdate
|
|
bin/kzonecheck
|
|
bin/kzonesign
|
|
include/knot/module.h
|
|
include/libdnssec/binary.h
|
|
include/libdnssec/crypto.h
|
|
include/libdnssec/dnssec.h
|
|
include/libdnssec/error.h
|
|
include/libdnssec/key.h
|
|
include/libdnssec/keyid.h
|
|
include/libdnssec/keystore.h
|
|
include/libdnssec/keytag.h
|
|
include/libdnssec/nsec.h
|
|
include/libdnssec/pem.h
|
|
include/libdnssec/random.h
|
|
include/libdnssec/sign.h
|
|
include/libdnssec/tsig.h
|
|
include/libdnssec/version.h
|
|
include/libknot/attribute.h
|
|
include/libknot/codes.h
|
|
include/libknot/consts.h
|
|
include/libknot/control/control.h
|
|
include/libknot/cookies.h
|
|
include/libknot/db/db.h
|
|
include/libknot/db/db_lmdb.h
|
|
include/libknot/db/db_trie.h
|
|
include/libknot/descriptor.h
|
|
include/libknot/dname.h
|
|
include/libknot/endian.h
|
|
include/libknot/errcode.h
|
|
include/libknot/error.h
|
|
include/libknot/libknot.h
|
|
include/libknot/lookup.h
|
|
include/libknot/mm_ctx.h
|
|
include/libknot/packet/compr.h
|
|
include/libknot/packet/pkt.h
|
|
include/libknot/packet/rrset-wire.h
|
|
include/libknot/packet/wire.h
|
|
include/libknot/rdata.h
|
|
include/libknot/rdataset.h
|
|
include/libknot/rrset-dump.h
|
|
include/libknot/rrset.h
|
|
include/libknot/rrtype/dnskey.h
|
|
include/libknot/rrtype/ds.h
|
|
include/libknot/rrtype/naptr.h
|
|
include/libknot/rrtype/nsec.h
|
|
include/libknot/rrtype/nsec3.h
|
|
include/libknot/rrtype/nsec3param.h
|
|
include/libknot/rrtype/opt.h
|
|
include/libknot/rrtype/rdname.h
|
|
include/libknot/rrtype/rrsig.h
|
|
include/libknot/rrtype/soa.h
|
|
include/libknot/rrtype/tsig.h
|
|
include/libknot/tsig-op.h
|
|
include/libknot/tsig.h
|
|
include/libknot/version.h
|
|
include/libknot/wire.h
|
|
include/libknot/yparser/yparser.h
|
|
include/libknot/yparser/ypformat.h
|
|
include/libknot/yparser/ypschema.h
|
|
include/libknot/yparser/yptrafo.h
|
|
include/libzscanner/error.h
|
|
include/libzscanner/scanner.h
|
|
include/libzscanner/version.h
|
|
lib/libdnssec.la
|
|
lib/libknot.la
|
|
lib/libzscanner.la
|
|
lib/pkgconfig/knotd.pc
|
|
lib/pkgconfig/libdnssec.pc
|
|
lib/pkgconfig/libknot.pc
|
|
lib/pkgconfig/libzscanner.pc
|
|
man/man1/kdig.1
|
|
man/man1/khost.1
|
|
man/man1/knsec3hash.1
|
|
man/man1/knsupdate.1
|
|
man/man1/kzonecheck.1
|
|
man/man1/kzonesign.1
|
|
man/man5/knot.conf.5
|
|
man/man8/kcatalogprint.8
|
|
man/man8/keymgr.8
|
|
man/man8/kjournalprint.8
|
|
man/man8/knotc.8
|
|
man/man8/knotd.8
|
|
sbin/kcatalogprint
|
|
sbin/keymgr
|
|
sbin/kjournalprint
|
|
sbin/knotc
|
|
sbin/knotd
|
|
share/examples/knot/example.com.zone
|
|
share/examples/knot/knot.sample.conf
|
|
@pkgdir etc/knot
|