Maintenance Blog

Dear all,

We are pleased to announce Net::DNS 1.25 and Net::DNS::SEC 1.17.

The recommended method of generating TSIG keys changed between 1.23 and 1.24 in favour of using tsig-keygen (for named algorithms). Unfortunately this had led to a backwards incompatibility issue. This release introduces more robust TSIG key parsing to deal with this.

TSIG keys generated with dnssec-keygen are still accepted for backwards compatibility, but are expected to have the ISC BIND’s keyfile naming convention, or be a symbolic link to a key using this naming convention. A warning will be generated for keys without the naming convention.

See also Net::DNS Changes and Net::DNS::SEC Changes

Regression test results: https://www.net-dns.org/regression