Work at SourceForge, help us to make it a better place! We have an immediate need for a Support Technician in our San Francisco or Denver office.

Close

dnssec tools / News: Recent posts

DNSSEC-Tools 1.5 released

I'm happy to announce the release of DNSSEC-Tools 1.5. It contains the following updates:

1.5
- New Features:
- zonesigner: - NSEC3 support: --usensec3 (requires bind 9.6)
- donuts: - NSEC3 support
- rollerd: - Added a -pidfile option
- Added a -singlerun option
- Added a -foreground option
- Added a -alwayssign flag
- New rollrec fields to partial-support RFC5011 rolling:
'istrustanchor' and 'holddowntime'
- lsdnssec: - A new tool to display DNSSEC keying/rolling status
- mapper: - added two new options: --edge-style and --node-style
- getds: - a new tool to calculate a DS record from a key lookup
- dnspktflow: - Added output options for svg, svgz, and postscript
- maketestzone: - Added a NSEC3 subzone... read more

Posted by Wes Hardaker 2009-03-06

DNSSEC-Tools 1.5.rc2 posted

DNSSEC-Tools 1.5.rc2 contains a few more features than 1.5.rc1, so check it out!

Posted by Wes Hardaker 2009-02-16

DNSSEC-Tools 1.5.rc1 posted

We decided that there was enough goodies waiting to warrant a 1.5 release and decided to skip the 1.4.2 release that we previously had planned so you could play with more of the goodies!

We'd love feedback (positive or negative) about this first release candidate for 1.5. Here's the details on what's new in what will be 1.5.

1.5
- New Features:
- zonesigner: - NSEC3 support: --usensec3 (requires bind 9.6)
- donuts: - NSEC3 support
- rollerd: - Added a -pidfile option
- Added a -singlerun option
- Added a -foreground option
- mapper: - added two new options: --edge-style and --node-style
- getds: - a new tool to calculate a DS record from a key lookup
- dnspktflow: - Added output options for svg, svgz, and postscript
- maketestzone: - Added a NSEC3 subzone... read more

Posted by Wes Hardaker 2009-02-06

1.4.2 release candidate 1 posted

We intend to release a real 1.4.2 in the next month or so, and the first release candidate has been made available for download. The code should be fairly stable so it should be safe to test. If you want to give us early feedback on any issues encountered, we'd appreciate it.

Posted by Wes Hardaker 2009-01-22

SECURITY: DNSSEC-Tools 1.4.1 Released

1.4.1
- Security Issue:
The DNSSEC-Tools libval validating resolver library does suffer
from the same issues that the other DNS resolvers were faced with
as described by: http://www.kb.cert.org/vuls/id/800113

Although DNSSEC will prevent the issues, it is assumed that not
everyone is using libval with only 100% DNSSEC protected zones.

The supporting tools that do not use libval are not affected by
this problem (eg, zonesigner, rollerd, donuts, etc are just fine).... read more

Posted by Wes Hardaker 2008-07-23

DNSSEC-Tools 1.4 released

- Documentation:
- Much more extensive documentation has been written about the
tools and how to get started using them. See the following web
page for details:

http://www.dnssec-tools.org/wiki/index.php/Tutorials

- Applications:
- trustman has seen a lot of usability improvements and now has
more extensive documentation.
- rollerd and it's controlling scripts can now handle user
initiated KSK rollovers.
- zonesigner handles keys stored in other directories better.
- donuts output has been made more user friendly and the verbosity
level can now be more finely tuned.
- donuts rule definitions have been cleaned up and the API for
writing rules has been simplified.... read more

Posted by Wes Hardaker 2008-06-18

1.3 released

DNSSEC-Tools 1.3 has been released. It contains many many features and bug fixes over the previous releases (too many to summarize here).

Posted by Wes Hardaker 2007-10-31

dnssec-tools 1.2 released

1.2 brings many improvements over the 1.1.1 release. See the NEWS file for full details.

Posted by Wes Hardaker 2007-05-22

FC6 RPMs for firefox released

New FC6 RPMs for firefox 1.5.0.10 are available for grabbing. They require dnssec-tools 1.1.1.

Posted by Wes Hardaker 2007-03-27

dnssec-tools 1.1.1 released

Version 1.1.1 is now available and contains minor bug fixes over the 1.1 release.

Posted by Wes Hardaker 2007-03-24

DNSSEC-Tools 1.1 released

DNSSEC-Tools 1.1 has been released and contains the following major changes:

- zonesigner
- Support for one method of KSK rollover (double signing period)
- Group keys into signing sets.
- Allow multiple KSKs to be used in a single signing set.
- Other keyrec-related tools were updated to accomodate
zonesigner changes.
- Bug fixes.

- trustman
- now at version 0.9
- new keys are now added to named.conf and dnsval.conf
when holddown time has been reached
- storage of data in order to survive reboots/restarts has
been started... read more

Posted by Wes Hardaker 2007-02-08

DNSSEC-Tools Version 1.0 available!

We're happy to announce the 1.0 version of the DNSSEC-Tools package. Both source and RPM releases are available from the web site, as is documentation about the project components.

Posted by Wes Hardaker 2006-12-05

dnssec-tools 0.9.2-5 rpms available

Newer RPMs are available (0.9.2-5) for the dnssec-tools package. The primary changes are better compliance with the fedora packaging requirements and some other small patches to fix path and perl module naming issues.

Posted by Wes Hardaker 2006-09-22

Firefox 1.5.0.7 RPMs available

Linux FC5 RPMs are available for the latest 1.5.0.7 version of firefox with the added dnssec validation support patches.

Posted by Wes Hardaker 2006-09-22

New FireFox 1.5.0.6 linux FC5 RPMs avaliable

FireFox 1.5.0.6 with dnssec support are now available at http://wwwtest.hardakers.net/resources/download.html

This update is the latest firefox release and paired with the latest dnssec-tools release. The result is a very functional firefox that can use dnssec when possible (follows policy in /etc/dnsval.conf)

Posted by Wes Hardaker 2006-09-07

DNSSEC-Tools 0.9.2 Released

We released DNSSEC-Tools 0.9.2 in July (this announcement is a bit late).

See our download page for instructions:
http://wwwtest.hardakers.net/resources/download.html

Posted by Wes Hardaker 2006-09-07

DNSSEC-Tools 0.9.1 released

Version 0.9.1 has been released and is available on our download site. It contains many improvements over the 0.9 release. See the enclosed NEWS file for major details.

Posted by Wes Hardaker 2006-06-20

DNSSEC-Tools converted to SVN from CVS

We've recently changed our repository to use SVN instead of CVS... To check out our main line code from SVN use:

svn co https://svn.sourceforge.net/svnroot/dnssec-tools/trunk/dnssec-tools dnssec-tools

Posted by Wes Hardaker 2006-05-10

New DNSSEC Firefox RPMs published

I've published newer RPMs for firefox. These have improved locking support (actually lack of) for dns lookups and other minor fixes for building. The only bad news is that I forgot to augment the name with .fc4, on which they were built.

Posted by Wes Hardaker 2006-02-27

DNSSEC aware Firefox RPMs available

You can now download a firefox 1.5 release containing dnssec aware functionality. Note: It requires the dnssec-tools rpms as well. See the main web page for installation details ( http://www.dnssec-tools.org/ )

Posted by Wes Hardaker 2006-02-15

DNSSEC-tools 0.9 released

We've released DNSSEC-tools 0.9, which is the latest snapshot of our DNSSEC aware tools and libraries. Get it from http://sourceforge.net/project/showfiles.php?group_id=121671 !

Posted by Wes Hardaker 2006-02-11

Test-Zone live

The dnssec-tools test zone is fully live. See http://www.dnssec-tools.org/testzone/ for details on a large variety of test zone names that can be submitted to applications to test their ability to handle dnssec errors of various kinds.

Posted by Wes Hardaker 2005-12-28

dnssec-tools 0.2 released

I'm happy to announce the availability of dnssec-tools 0.2. It has a huge number of improvements and new tools and features over the last release.

Posted by Wes Hardaker 2005-08-31