Maintenance Blog

Dear all,

We have candidates for the upcoming fast-track 1.25 and 1.17 releases of Net::DNS and Net::DNS::SEC.

The recommended method of generating TSIG keys changed between 1.23 and 1.24 in favour of using tsig-keygen (for named algorithms). Unfortunately this led to a backwards incompatibility issue. This release introduces more robust TSIG key parsing to deal with this.

TSIG keys generated with dnssec-keygen are still accepted for backwards compatibility, but are expected to have the ISC BIND’s keyfile naming convention, or be a symbolic link to a key using this naming convention. A warning will be generated for keys without the naming convention.

Because of the minimal changes and the resolution of a backwards compatibility issue, these release candidates will be released more quickly than usual.

Please review these candidates carefully, if no issues arise actual release will follow Friday 26th of June 2020.

Regression test results: https://www.net-dns.org/regression