Created attachment 185640 [details] Patch to update This release fixes RFC5011 trust anchor tracking for users that install between sep-11 and oct-11 2017. Existing root.key files created before sep11 are fine, the 5011 tracking works for them. Changes: - Fix install of trust anchor when two anchors are present, makes both valid. Checks hash of DS but not signature of new key. This the root.key file created in cases where unbound is installed between sep-11 and oct-11 2017.
A commit references this bug: Author: swills Date: Mon Aug 21 21:45:28 UTC 2017 New revision: 448504 URL: https://svnweb.freebsd.org/changeset/ports/448504 Log: dns/unbound: Upgrade to 1.6.5 PR: 221692 Submitted by: jaap@NLnetLabs.nl (maintainer) Changes: head/dns/unbound/Makefile head/dns/unbound/distinfo head/dns/unbound/pkg-plist
Committed, thanks!