Created attachment 185640 [details]
Patch to update
This release fixes RFC5011 trust anchor tracking for users that install
between sep-11 and oct-11 2017.
Existing root.key files created before sep11 are fine, the 5011 tracking
works for them.
- Fix install of trust anchor when two anchors are present, makes both
valid. Checks hash of DS but not signature of new key. This the root.key file created in cases where unbound is installed between sep-11 and oct-11 2017.
A commit references this bug:
Date: Mon Aug 21 21:45:28 UTC 2017
New revision: 448504
dns/unbound: Upgrade to 1.6.5
Submitted by: jaap@NLnetLabs.nl (maintainer)