1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
|
dns-root-data (2024041802) unstable; urgency=medium
* Stop installing root.hints.sig, since no package actually uses the file.
* Stop the package from FTBFS in the periods between when root-anchors.xml
is updated and the new root KSK is actually published in the DNS.
-- Marco d'Itri <md@linux.it> Sun, 18 Aug 2024 02:18:32 +0200
dns-root-data (2024041801) unstable; urgency=medium
* Add myself to the Uploaders field, as discussed with Ondřej.
* Fix the package description. (Closes: #1064829)
* Update the expired Verisign GRS PGP key.
* Update the root hints file to version 2024041801, with:
+ updated A and AAAA records for B. (Closes: #1054393)
-- Marco d'Itri <md@linux.it> Tue, 21 May 2024 16:25:44 +0200
dns-root-data (2023010101) unstable; urgency=medium
* merge current root hints and signatures (same contents as before)
* d/copyright: bump to 2023
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 11 Jan 2023 10:00:11 -0500
dns-root-data (2022120101) unstable; urgency=medium
* Updated upstream root data (same contents as before)
* d/copyright: update for 2022
* Standards-Version: bump to 4.6.1 (no changes needed)
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Tue, 20 Dec 2022 18:51:44 -0500
dns-root-data (2021011101) unstable; urgency=medium
* updated upstream root data (same contents as before)
* wrap-and-sort -ast
* improve autopkgtest (Closes: #979840)
* move to dh 13
* Standards-Version: bump to 4.5.1 (no changes needed)
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Fri, 12 Feb 2021 20:54:19 -0500
dns-root-data (2019052802) unstable; urgency=medium
* use https for data.iana.org
* update root data to 2019052802
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 29 May 2019 13:05:03 -0400
dns-root-data (2019031302) unstable; urgency=medium
* cryptographically verify root.hints
* get_orig_source: refresh root-anchors.{xml,p7s} as well
* update root data to 2019031302
* standards-version: bump to 4.3.0 (no changes needed)
* parse-root-anchors.sh: account for validity windows
* check: deliberately skip the TTL generated by ldns-key2ds
* dns-root-data is Multi-Arch: foreign
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Sat, 23 Mar 2019 15:33:17 +0100
dns-root-data (2018091102) unstable; urgency=medium
* new upstream version of root.hints, 2018091102
* use DEP-14 branches
* Standards-Version: 4.2.1 (no changes needed)
* add Rules-Requires-Root: no
* add baseline autopkgtest
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Mon, 15 Oct 2018 13:45:59 -0400
dns-root-data (2018013001) unstable; urgency=medium
* new upstream version of root.hints, 2018013001
* use wrap-and-sort -ast
* added myself to uploaders
* d/control: use dns-root-data@packages.debian.org as Maintainer
* Standards-Version: bump to 4.1.3 (no changes needed)
* d/control: move Vcs-* to salsa.debian.org
* move to debhelper 11
* d/rules: clean up get_orig_source
* sort generated .ds files by key tag
* d/rules: trim trailing whitespace
* d/copyright: Format: use https
* d/copyright: add my own copyright to debian/*
* d/copyright: name upstream data grant "ICANN-Public"
* d/copyright: Source: use https:
* update README.source to cover the different origins of the data
* Update order of root.key to follow output of unbound-anchor
-- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 31 Jan 2018 23:02:05 -0500
dns-root-data (2017072601) unstable; urgency=medium
* Update root.hints to 2017072601 version
-- Ondřej Surý <ondrej@debian.org> Wed, 23 Aug 2017 08:45:33 +0200
dns-root-data (2017071401) unstable; urgency=medium
* Update the root.hints to 2017060102 version
* Change the state of KSK-2017 to VALID
-- Ondřej Surý <ondrej@debian.org> Fri, 14 Jul 2017 14:12:52 +0200
dns-root-data (2017041102) unstable; urgency=high
[ Robert Edmonds ]
* Change DS creation to omit TTL and use spaces instead of tabs
(Closes: #864016)
-- Ondřej Surý <ondrej@debian.org> Tue, 06 Jun 2017 12:54:28 +0200
dns-root-data (2017041101) unstable; urgency=medium
* Fix parse-root-anchors.sh in non-dash shells (Closes: #862252)
* Update to 2017041101 version of root zone
* Remove timestamps from root.key to make the build reproducible
* Shell syntax cleanup
-- Ondřej Surý <ondrej@debian.org> Mon, 29 May 2017 14:05:37 +0200
dns-root-data (2017020200) unstable; urgency=medium
* Update to 2016102001 version of the root.zone
* Add KSK-2017 (valid from 2017-02-02) into root.key file
* Reduce number of IANA files as they don't exist at upstream anymore
* draft-icann-dnssec-trust-anchor is now RFC 7958
* Update all other IANA DNSSEC files to 2017-02-02 versions
* Strip the GPG verification as IANA doesn't provide the GPG signatures
anymore
* Rewrite DS creation check to xml2 and ldnsutils, as neither xmllint
nor bind9utils handle multiple DNSKEY in one file correctly
-- Ondřej Surý <ondrej@debian.org> Wed, 22 Mar 2017 09:06:08 +0100
dns-root-data (2015052300+h+1) unstable; urgency=medium
* Update root.hints to 2015052300 version
* Move the package under Debian DNS Maintainers umbrella
* Implement the H.ROOT-SERVERS.NET IP addresses changes
that's scheduled for December 1st, but operational now
-- Ondřej Surý <ondrej@debian.org> Tue, 01 Sep 2015 13:32:02 +0200
dns-root-data (2014060201+2) unstable; urgency=medium
* Use full path for dnssec-dsfromkey (Closes: #760103)
-- Ondřej Surý <ondrej@debian.org> Thu, 04 Sep 2014 13:12:40 +0200
dns-root-data (2014060201+1) unstable; urgency=low
* Add Robert Edmonds as co-maintainer
* Don't install root zone (it changes too often) and install static data
into /usr/share/dns/
* Also install dnssec-trust-anchor documentation into the package
* Strip unbound-anchor metadata from root.key when fetching new root.key
-- Ondřej Surý <ondrej@debian.org> Mon, 30 Jun 2014 10:42:07 +0200
dns-root-data (2014060201) unstable; urgency=low
* Initial release (Closes: #752745)
-- Ondřej Surý <ondrej@debian.org> Thu, 26 Jun 2014 10:46:45 +0200
|
