Received: from mail.netbsd.org (mail.netbsd.org [149.20.53.66]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "mail.NetBSD.org", Issuer "Postmaster NetBSD.org" (verified OK)) by mollari.NetBSD.org (Postfix) with ESMTPS id A229A70A97 for ; Sat, 15 Jun 2013 19:57:26 +0000 (UTC) Received: by mail.netbsd.org (Postfix, from userid 605) id BF12B14A1E1; Sat, 15 Jun 2013 19:57:25 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id CD8F514A1DD for ; Sat, 15 Jun 2013 19:57:21 +0000 (UTC) X-Virus-Scanned: amavisd-new at NetBSD.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.NetBSD.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id ADtGqXOtBOxz for ; Sat, 15 Jun 2013 19:57:21 +0000 (UTC) Received: from cvs.netbsd.org (cvs.NetBSD.org [IPv6:2001:4f8:3:7:2e0:81ff:fe30:95bd]) by mail.netbsd.org (Postfix) with ESMTP id 0FBCC14A1CE for ; Sat, 15 Jun 2013 19:57:21 +0000 (UTC) Received: by cvs.netbsd.org (Postfix, from userid 500) id 09B2396; Sat, 15 Jun 2013 19:57:21 +0000 (UTC) Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" MIME-Version: 1.0 Date: Sat, 15 Jun 2013 19:57:21 +0000 From: "Fredrik Pettai" Subject: CVS commit: pkgsrc/security/dnssec-tools To: pkgsrc-changes@NetBSD.org Reply-To: pettai@netbsd.org X-Mailer: log_accum Message-Id: <20130615195721.09B2396@cvs.netbsd.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk Module Name: pkgsrc Committed By: pettai Date: Sat Jun 15 19:57:20 UTC 2013 Modified Files: pkgsrc/security/dnssec-tools: Makefile PLIST distinfo pkgsrc/security/dnssec-tools/patches: patch-aa patch-ab Log Message: 1.14 - New Features - dnssec-nodes - Many new features, including validation tree graphing, on-the-wire traffic display, pcap dump file display, increased data logging and display, improved simultaneous updating, etc. - Libval: - Added initial support for the TLSA rrtype - Added support for ECDSA - Implemented checking for AI_ADDRCONFIG in getaddrinfo - Memory optimizations to improve speed-up - dnssec-check - increased stability across all platforms. - All Around: - Many bug fixes and other minor improvements 1.13 - New Features - rollerd: - Added support for the signzone command. Allow zones to be signed while in the midst of a rollover wait. - Added autosigning of modified zone files. Zone files are considered modified when their "last modification" timestamp is more recent than that of the associated signed zone file. This functionality includes adding the -autosign option and config field. - Added additional commands (via rollctl) to allow greater control over zone rollover actions. - Added -zsargs option to allow global options to be passed to zonesigner. - realms: - Added the realms feature to manage multiple simultaneous rollover environments. Several commands and modules (e.g., dtrealms, realms.pm, buildrealms) were added for the realms feature. - zonesigner: - Added the -threshold option to specify a signing threshold. - Better handling of serial numbers in zone files. - keymod: - New tool that can be used to modify key generation parameters in a keyrec file. - dnssec-check - significant rewrite since the 1.12 release, though individual updates have been available already. - Asynchronous support for non-interrupting GUI support - Letter grades assigned to each resolver - Various user-interface improvements - libval: - Bug fixes - Renamed all validator command-line apps to have a dt- prefix in order to avoid conflicts with pre-existing executables in certain platforms. - dnsval python module - Add python wrapper module for the validator library. Code contributed by Bob Novas. - trustman: - Added an option for use by monitoring systems. - nagios - Added the dt_donuts plugin for running trustman on remote machines. - Added the dt_trustman plugin for monitoring trust anchors. - firefox - updated nspr and firefox patches to work with mozilla-central and nspr-4.9 - webmin: - Added the ability to perform DNSSEC operations on DNSSEC-Tools managed signed zones using the Webmin front-end. - ssh: - Update the patch for enabling local DNSSEC validation to work with OpenSSH 6.0p1. To generate a diff of this commit: cvs rdiff -u -r1.18 -r1.19 pkgsrc/security/dnssec-tools/Makefile cvs rdiff -u -r1.6 -r1.7 pkgsrc/security/dnssec-tools/PLIST cvs rdiff -u -r1.9 -r1.10 pkgsrc/security/dnssec-tools/distinfo cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/security/dnssec-tools/patches/patch-aa \ pkgsrc/security/dnssec-tools/patches/patch-ab Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.