Created attachment 161750 [details] Patch for upgrade Upgrade from version 1.4.7 to 1.4.8.2 NEWS: * Support for RFC5011 style KSK rollovers. KSK section in the KASP now accepts <RFC5011/> element. * Enforcer: New repository option <AllowExtraction/> allows to generate keys with CKA_EXTRACTABLE attribute set to TRUE so keys can be wrapped and extracted from HSM. Bugfixes: * SUPPORT-145: EOF handling an ARM architecture caused signer to hang. * Fixed signer hitting assertion on short reply XFR handler. * Include revoke bit in keytag calculation. * Increased stacksize on some systems (thanks Patrik Lundin!). * Stop ods-signerd on SIGINT. Fixes port problem (reported by *geoffroy desvernay*) * Now also installs previous missing migration script convert_database.pl
A commit references this bug: Author: erwin Date: Tue Oct 6 13:54:33 UTC 2015 New revision: 398698 URL: https://svnweb.freebsd.org/changeset/ports/398698 Log: Upgrade from version 1.4.7 to 1.4.8.2 NEWS: * Support for RFC5011 style KSK rollovers. KSK section in the KASP now accepts <RFC5011/> element. * Enforcer: New repository option <AllowExtraction/> allows to generate keys with CKA_EXTRACTABLE attribute set to TRUE so keys can be wrapped and extracted from HSM. Bugfixes: * SUPPORT-145: EOF handling an ARM architecture caused signer to hang. * Fixed signer hitting assertion on short reply XFR handler. * Include revoke bit in keytag calculation. * Increased stacksize on some systems (thanks Patrik Lundin!). * Stop ods-signerd on SIGINT. Fixes port problem (reported by *geoffroy desvernay*) * Now also installs previous missing migration script convert_database.pl PR: 203574 Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer) Sponsored by: DK Hostmaster A/S Changes: head/dns/opendnssec/Makefile head/dns/opendnssec/distinfo head/dns/opendnssec/pkg-plist
Committed, thanks!