OpenDNSSEC

[OpenDNSSEC @opendnssec]

📢 Just in! OpenDNSSEC 2.1.13 is out now! 🚀🔐 Update your systems today and enjoy the bug fixes and enhancements in this release. Check out the announcement at: https://t.co/2SCMNMdve7 #OpenDNSSEC #SoftwareUpdate

[Jaroslav Imrich @jimrichsk]

I've just released Pkcs11Admin 0.6.0 that adds support for YKCS11 library from @Yubico and improves support for SoftHSMv2 from @opendnssec 🥳

[OpenDNSSEC @opendnssec]

Last week we released OpenDNSSEC 2.1.12. It is a maintenance release that along with fixes in ODS 2.1.11 makes it easy to follow the new RFC 9276 Guidance for NSEC3 Parameter Settings.

See for release notes and downloads https://t.co/C1QycPPOn3

[APNIC @apnic]

Disaster recovery with #DNSSEC. @SIDN's Stefan Ubbink and @BHalderen explore how to recover from losing all the keys in your HSMs
https://t.co/NJLd8gzNIy

[OpenDNSSEC @opendnssec]

The latest version of OpenDNSSEC 2.1.10 is available. This release addresses automatic resulting after migrating from 1.4 and some HSM and key management issues.
See for release notes https://t.co/QsKz5Eo3hS.

[OpenDNSSEC @opendnssec]

OpenDNSSEC 2.1.9 has been released with two changes that prevent problems with certain HSM configurations, one of which is SoftHSMv2 in database back-end mode.

See for more information and downloads https://t.co/ffNsuLEmSu.

[OpenDNSSEC @opendnssec]

There is a release candidate for OpenDNSSEC 2.1.9 available at:
https://t.co/GCW520N6WP

This release fixes some problems with certain
HSM configurations (incl. SoftHSMv2). We already received some positive results, so release will be after a week if no other things come up.

[NLnet Labs — @[email protected] @NLnetLabs]

OpenDNSSEC 2.1.8 is available for download. This version increases stability for some corner cases. We strongly recommend that operators migrate to the latest version of ODS. For help https://t.co/l8chlaozNb or direct contact.

Information & release notes https://t.co/S2AQbridwB

[OpenDNSSEC @opendnssec]

OpenDNSSEC 2.1.8 has been released. Don't forget to migrate if you are still running ODS 1.4 (it is EOL!).

This version fixes a number of bugs related to the purging of keys, and a few rare but nasty potential crashes. Release notes https://t.co/uqwO5K3Rz8.

[OpenDNSSEC @opendnssec]

OpenDNSSEC 2.1.8 has been released. Don't forget to migrate if you are still running ODS 1.4 (it is EOL!).

This version fixes a number of bugs related to the purging of keys, and a few rare but nasty potential crashes. Release notes https://t.co/uqwO5K3Rz8.

[OpenDNSSEC @opendnssec]

DNSSEC Key Ceremony blueprint and toolset, and use-case integration with OpenDNSSEC.

[NLnet Labs — @[email protected] @NLnetLabs]

With support from the NGI0 PET project, we have developed a functional prototype of a standardised DNSSEC Key Ceremony, consisting of both guidelines on how to set up a ceremony and tools to help automate it. Read about it in our blog: https://t.co/3OHKbYy3n7

[OpenDNSSEC @opendnssec]

@ankerstal Hi. Please contact us via our mailing list opendnssec-users. We provide community support there and we can answer your questions regarding HSMs.

[OpenDNSSEC @opendnssec]

OpenDNSSEC 2.1.7 has just been released, with bug fix in the migration script for migration from 1.4 to 2.1. Also unnecessary signatures during a ZSK roll have been fixed. New: Edward curves, key export by CKA identifier, plus more. See https://t.co/kSOaWYu3cG

[OpenDNSSEC @opendnssec]

@ieugen222 If I follow (click on) the link you mentioned in the tweet, I end up at the webpage (HTML) as shown here:

[OpenDNSSEC @opendnssec]

@jpmens @NLnetLabs Thanks @jpmens. We are now using LetsEncrypt CA and some other foo to make https://t.co/b9U6gKcRkE accessible again via https. We noticed this problem last week, but it took a while to repair it.

[OpenDNSSEC @opendnssec]

SoftHSM version 2.6.1 has been released. The SoftHSM 2.6 branch is the current version of SoftHSM and replaces previous releases. The 2.6.1 release mainly improves some compilation issues on specific platforms.

For download and bug fix information, see https://t.co/CRyvYHdOuS.

[OpenDNSSEC @opendnssec]

OpenDNSSEC 2.1.6 is released. This release fixes a small memory leak in the enforcer and corrects how keys are displayed. It also includes a bug fix for signing w/ CSK.
https://t.co/aPuRr8NrAu

[Guillaume-J Herbiet @gjherbiet]

@bortzmeyer @asimonstweets @dnsviz @dnsoarc @ZonemasterNet Yes #RFC6781, section 4.1.4 is the reference (at least mine for the upcoming algorithm rollover at my ccTLD). It implies introducing the RRSIG of the new algorithm before the corresponding DNSSKEY RRSET. Some automated tools like @NLnetLabs @opendnssec can help...

[OpenDNSSEC @opendnssec]

@jpmens And a presentation of our plans for ODS and CreDNS in 2019-2020.

Including a CreDNS picture inspired by/accredited to @jpmens!

https://t.co/3fraa7dHJy

[OpenDNSSEC @opendnssec]

@jpmens Thanks for caring! We announced in October end-of-life of ODS 1.4 next year and advice to migrate to ODS 2.1. And just last week announced the ODS 2.1.5 release.