Maintenance Blog

Dear all,

I’m pleased to announce a new release, version 1.05 of Net::DNS::SEC.

This release contains an interim Net::DNS::SEC implementation of the Ed25519 and Ed488 curves (algorithm 15 and 16). However, it is provided as a building-kit from which some pieces have to come from a pre-build openssl-1.1.1* source tree.

Build instructions can be found in the include/Ed25519.h and include/Ed448.h files from the source tarball.

The current state of the Crypt::OpenSSL::RSA module (with respect to newer versions of OpenSSL), has made the private RSA key generation function of Net::DNS::SEC challenging (to say the least). Key generation with Net::DNS::SEC was already limited and restricted to RSA. This and readily available better private key generation tools, such as the BIND dnssec-keygen tool (which we already recommended), made us decide to drop this function.

This release has also a single bugfix, resolving an issue with missing attributes in private key files.

For a complete list of changes and bugfixes see the CHANGES file.