NSD 4.1.24 released

Hi,

NSD 4.1.24 is available for download
https://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.24.tar.gz
sha256 4fb687c8e494610ad8692a127ac101ed73df851142a42766c33de06e54449311
pgp https://www.nlnetlabs.nl/downloads/nsd/nsd-4.1.24.tar.gz.asc

This version has a fix for a bug in resigning zones with different NSEC3
salt, where NSD would not pick up the NSEC3PARAM record, and serve
answers that omit NSEC3 records.  NSD is now lenient and when
NSEC3PARAMs exist that point to nonworking NSEC3 chains, NSD attempts to
find an alternative NSEC3PARAM with NSEC3 records.

It is possible to use nsd-control over a command pipe, without using
TLS, by setting the name of the control socket file.  Access permissions
on that file then act as the access control.  No TLS is used, because it
is not network traffic, and this is likely faster.

Also systemd support is added for readiness signalling.  Enabled with
use-systemd: yes.



4.1.24
================
FEATURES:
- #4102: control interface via local socket.
  configure it with control-interface: "/path/nsd.ctl"  The path
  has to start with a / to separate it from an IP address.
  The local socket does not use SSL, but unencrypted traffic, use
  file and containing directory permissions to restrict access.
- configure --enable-systemd (needs pkg-config and libsystemd) can
  be used to then use-systemd: yes in nsd.conf and have readiness
  signalling with systemd.
- RFC8162 support, for record type SMIMEA.

BUG FIXES:
- Patch to fix openwrt for mac os build darwin detection in configure.
- Fix that first control-interface determines if TLS is used.  Warn
  when IP address interfaces are used without TLS.
- #4106: Fix that stats printed from nsd-control are recast from
  unsigned long to unsigned (remote.c).
- Fix that type CAA (and URI) in the zone file can contain
  dots when not in quotes.
- #4133: Fix that when IXFR contains a zone with broken NSEC3PARAM
  chain, NSD leniently attempts to find a working NSEC3PARAM.


Best regards, Wouter

_______________________________________________
nsd-users mailing list
[email protected]
https://open.nlnetlabs.nl/mailman/listinfo/nsd-users

-----BEGIN PGP SIGNATURE-----
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=0Sn/
-----END PGP SIGNATURE-----