[Freeipa-devel] [PATCH 0251-0256] Add support for NSEC3

Petr Spacek pspacek at redhat.com
Mon Nov 3 12:45:05 UTC 2014


On 21.5.2014 13:56, Tomas Hozza wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 05/21/2014 11:33 AM, Petr Spacek wrote:
>> >On 7.5.2014 15:27, Petr Spacek wrote:
>>> >>On 29.4.2014 23:34, Petr Spacek wrote:
>>>> >>>This patch set adds support for NSEC3. See commit messages for details.
>>> >>
>>> >>Patch 253 was obsoleted by patches 244v2 and 246v2.
>>> >>
>>> >>You can download latest & greatest version from dnssec branch on github:
>>> >>
>>> >>https://github.com/spacekpe/bind-dyndb-ldap/tree/dnssec
>> >
>> >Patch 256v2 removes dead code from zone_master_reconfigure_nsec3param()
>> >function.
>> >
>> >You can download latest & greatest version from dnssec branch on github.
>> >
>> >This doesn't solve a race condition somewhere in start-up sequence, I'm
>> >looking into it.
>> >
> Hi.
>
> I tested and reviewed patches 244-256 (all latest versions) and tested
> thehttps://github.com/spacekpe/bind-dyndb-ldap/tree/dnssec  HEAD.
>
> Everything works as expected in constraints described in commit messages.
>
> There is still a race condition with signing that Petr is aware of and
> is working on it. (The zone is sometimes not signed if started using
> systemd).
>
> So I'm ACKing the patch-set 244-256

This is delayed push notice:
c125ae548b77fffc5af9fc9c5e0f5b3c0b83bfbb
3b120f9a1536b56616f0c2da946039bcdb548025
f72976d1f73470fbbd00791d2cb8f823d9053f61
9ae956c448b0b60123e2d26eb60b37eab08b4393
b26e562c7dc19cca9cfcd51907ecbdeb0d8856f6

Patch 253 was obsoleted by patches 244v2 and 246v2.

-- 
Petr^2 Spacek




More information about the Freeipa-devel mailing list