[opendnssec/el6] Updated to 1.4.0rc1 Applied opendnssec-ksk-premature-retirement.patch (svn r6952)

Paul Wouters pwouters at fedoraproject.org
Sun Jan 20 23:04:39 UTC 2013


commit e86b6e93ff88a3e042db798b1ebed39b64a5a9d6
Author: Patrick Uiterwijk <puiterwijk at gmail.com>
Date:   Fri Jan 18 19:29:12 2013 +0100

    Updated to 1.4.0rc1
    Applied opendnssec-ksk-premature-retirement.patch (svn r6952)
    
    Conflicts:
    	opendnssec-aggressive-retry.patch
    	opendnssec.spec

 .gitignore                                |    1 +
 opendnssec-1.4.0a1-deleterr.patch         |   12 -----
 opendnssec-1.4.0a3-cpu.patch              |   68 -----------------------------
 opendnssec-1.4.0a3-nsec3param.patch       |   12 -----
 opendnssec-1.4.0b1-occluded.patch         |   37 ----------------
 opendnssec-ksk-premature-retirement.patch |   20 ++++++++
 opendnssec.spec                           |    8 +++-
 sources                                   |    2 +-
 8 files changed, 29 insertions(+), 131 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index dc88a48..379f1b1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
 /opendnssec-1.4.0b1.tar.gz
 /opendnssec-1.4.0b2.tar.gz
+/opendnssec-1.4.0rc1.tar.gz
diff --git a/opendnssec-ksk-premature-retirement.patch b/opendnssec-ksk-premature-retirement.patch
new file mode 100644
index 0000000..0b59af8
--- /dev/null
+++ b/opendnssec-ksk-premature-retirement.patch
@@ -0,0 +1,20 @@
+--- enforcer/enforcerd/enforcer.c   (revision 6951)
++++ enforcer/enforcerd/enforcer.c   (revision 6952)
+@@ -1291,7 +1291,7 @@
+                 /* turn this zone and policy into a file */
+ #ifdef ENFORCER_USE_WORKERS
+                 {
+-                    int NewDS;
++                    int NewDS = 0;
+                     status2 = commGenSignConf(zone_name, zone_id, current_filename, policy, &signer_flag, config->interval, config->manualKeyGeneration, config->DSSubmitCmd, config->DSSubCKA_ID, &NewDS);
+                     if (status2 == 0) {
+                         /* If the DS set changed then log/do something about it */
+--- NEWS    (revision 6951)
++++ NEWS    (revision 6952)
+@@ -1,5 +1,7 @@
+ $Id: NEWS 6934 2013-01-10 14:32:16Z jerry $
+ 
++* OPENDNSSEC-365: Enforcer: Nasty bug where KSKs could get prematurely retired.
++
+ 
+ OpenDNSSEC 1.4.0rc1 - 2013-01-10
diff --git a/opendnssec.spec b/opendnssec.spec
index 48917c6..a937ed8 100644
--- a/opendnssec.spec
+++ b/opendnssec.spec
@@ -1,4 +1,4 @@
-%global prever b2
+%global prever rc1
 Summary: DNSSEC key and zone management software
 Name: opendnssec
 Version: 1.4.0
@@ -12,6 +12,7 @@ Source3: ods.sysconfig
 Source4: conf.xml
 Source5: opendnssec.cron
 Source6: kasp.xml
+Patch:   opendnssec-ksk-premature-retirement.patch
 Group: Applications/System
 Requires: opencryptoki, softhsm
 BuildRequires: ldns-devel >= 1.6.13, sqlite-devel , openssl-devel
@@ -32,6 +33,7 @@ name server. It requires a PKCS#11 crypto module library, such as softhsm
 
 %prep
 %setup -q -n %{name}-%{version}%{?prever}
+%patch
 
 %build
 %configure --with-ldns=%{_libdir}
@@ -110,6 +112,10 @@ if [ "$1" -ge "1" ]; then
 fi
 
 %changelog
+* Fri Jan 18 2013 Patrick Uiterwijk <puiterwijk at gmail.com> - 1.4.0-0.6.rc1
+- Updated to 1.4.0rc1
+- Applied opendnssec-ksk-premature-retirement.patch (svn r6952)
+
 * Tue Dec 18 2012 Paul Wouters <pwouters at redhat.com> - 1.4.0-0.6.b2
 - Updated to 1.4.0b2
 - All patches synced to/from with new release
diff --git a/sources b/sources
index b7e3f52..b2f5549 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-17fd1b721fb568817be6866a82b19991  opendnssec-1.4.0b2.tar.gz
+bfd92b2830e1723acc90f20e575cf8cb  opendnssec-1.4.0rc1.tar.gz


More information about the scm-commits mailing list