---
- branch: MAIN
  date: Sat Mar 12 16:46:05 UTC 2011
  files:
  - new: '1.2'
    old: 1.1.1.1
    path: pkgsrc/security/zkt/Makefile
    pathrev: pkgsrc/security/zkt/Makefile@1.2
    type: modified
  - new: '1.2'
    old: 1.1.1.1
    path: pkgsrc/security/zkt/PLIST
    pathrev: pkgsrc/security/zkt/PLIST@1.2
    type: modified
  - new: '1.2'
    old: 1.1.1.1
    path: pkgsrc/security/zkt/distinfo
    pathrev: pkgsrc/security/zkt/distinfo@1.2
    type: modified
  id: 20110312T164605Z.69079d225dc3703ad8597687d6e1c687927dd9cd
  log: |
    zkt 1.0 -- 15. June 2010

    * feat  "/dev/urandom" check added to checkconfig()
    * feat  Config compability switch (-C) added to zkt-conf
    * feat  zkt-ls has a new switch -s to change sorting of domains from
            subdomain before parent to subdomain below the parent
    * feat  "zkt-ls -T" prints only parent trust anchor

    zkt 1.0rc1 -- 1. Apr 2010 (The 1.0 release was sponsored by DOMINIC(r) )

    * feat  Several config parameter are printed now in a more consistent and
            user friendly form.
            SerialFormat "Incremental" could be abbreviated as "inc" on input.
    * bug   use of AC_ARG_ENABLE macros changed in a way that it is possible
            to use it as a "--disable-FEATURE" switch.
    * port  no longer checking for malloc() in configue script.
            Mainly because it checks only if malloc(0) is allowed and we do
            not need this.
    * port  --disable-color-mode added to configure script
    * bug   Makro PRINT_AGE_OF_YEAR renamed to PRINT_AGE_WITH_YEAR in configure.ac
    * misc  man page zkt-keyman added
    * misc  New command zkt-keyman added as replacement for dnssec-zkt's key
            management functionality
    * misc  man page zkt-ls added
    * port  Check for ncurses added to Makefile.in
    * misc  Color mode (Option -C) added to zkt-ls (experimental)
            New source file tcap.c.
    * misc  Deprecate "single linked list" version of ZKT. The binary tree
            version is the default for years, so the VERSION string does no
            longer contain a "T".  Now, if someone insist on the single link
            list version (configure --disable-tree) a "S" is added to the
            version string.
            Anyway, the code for the single link list version does no longer
            have the same functionality and will be removed in one of the later
            releases.
    * misc  New command zkt-ls added as replacement for dnssec-zkt's key
            listing functionality
    * func  New key algorithms RSASHA256 and RSAHSHA512 added to dki.[ch]
            and zconf.c
            New parameter NSEC3 added. Now it's possible to configure
            an NSEC3_OPTOUT zone.
    * bug   Token parsing function gettok() fixed to recognize tokens
            with dashes ("zone-statistics" was seen as "zone").
            Thanks to Andreas Baess for finding this bug.
    * bug   Fixed bug in (re)salting dynamic zones.
            sig_zone() and gensalt() needs parameter change for this
    * func  New option -a added to zkt-conf
    * func  In zconf.c CONF_TIMEINT parameter are now able to recognize
            "unset" values (which is represented internaly as 0)
    * func  Set Max_TTL to sig lifetime for dynamic zones or if Max_TTL
            is less than 1.
            max_ttl checks in checkconfig() fixed.
    * func  printconfigdiff() added to zconf.c and used by zkt-conf.
            Now local configs are printed as diff to site wide config.
    * misc  man page zkt-signer.8 changed to new command syntax
    * func  Per domain logging added. Use parameter LogDomainDir to
            enable it. For more details see file README.logging.
    * func  distribute.sh supports new action type "distkeys" but is
            currently not used
    * misc  LOG_FNAMETMPL changed and moved from config_zkt.h to log.h
    * misc  Default soa serial format changed from "Incremental"
            to "Unixtime"
    * func  dnssec-signer command renamed to zkt-signer. Man page updated.
    * func  New command zkt-conf added as replacement for dnssec-zkt -Z
    * misc  timeint2str() is now global (zconf.c)
    * func  zfparse.c - a rudimentary zone file parser
            scans minimum and maximum ttl values; adds $INCLUDE dnskey.db

    zkt 0.99d -- Not released

    * func  Option SIG_DnsKeyKSK for DNSKEY signing with KSK only added
    * misc  BIND 9.7 compability
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/security/zkt'
  unixtime: '1299948365'
  user: pettai