Maintenance Blog

Dear all,

We have a candidate for the 1.04 release of Net::DNS::SEC.

Net::DNS::SEC is dependent on the Crypt::OpenSSL::(DSA|ECDSA|RSA) modules for the cryptographic operations. Unfortunately these modules have not remained up-to-date with the underlying OpenSSL C library and are now non functional with OpenSSL releases from version 1.1.0 and higher.

This release contains a Perl foreign function interface on the OpenSSL libcrypto library directly and is no longer dependent on the Crypt::OpenSSL::(DSA|ECDSA|RSA) modules, providing more flexibility in OpenSSL upgrade strategies.

This is a non trivial architectural change. Therefore we ask you to review this candidate extra thoroughly. If no issues arise, the actual release will follow Wednesday the 14 February 2018.

For a complete list of changes and bugfixes see the CHANGES file.