NSD 4.2.4 released

Hi,

NSD 4.2.4 is available:
https://nlnetlabs.nl/downloads/nsd/nsd-4.2.4.tar.gz
sha256 9ebd6d766765631a56c0eb332eac26b310fa39f662e5582c8210488cf91ef27c
pgp https://nlnetlabs.nl/downloads/nsd/nsd-4.2.4.tar.gz.asc

This release fixes the regressions in the config for the
minimal-responses, round-robin and log-time-ascii options, where the
previous release ignored the config settings for them. Also there are
some portability fixes.

4.2.4

I cannot find the signing key used anywhere because all pgp servers are
failing on HPK and HTTP(S) ?

Since this is a new key not used before, I would like to verify it
with known other pgp signatures before trusting the nsd package siganture.

Is this key published anywhere else?

Paul

Hi Paul,

The key is no more than a day old, so it is rather new. It has been
published to hkps.pool.sks-keyservers.net yesterday and has been signed
by Wouter Wijngaards too. I've placed the Key ID on
https://nlnetlabs.nl/people/ this morning.

Best,
Jeroen Koekkoek

Thanks. I managed to get the key from there and verify it,

Paul

minor doc item:

- use-systemd does not have a man page entry in nsd.conf man page and
   does not appear in the nsd.conf.sample.in at all ?

- Every release I end up having to fix some white space in nsd.conf and
   it makes my diff harder to read.

Patch attached,

Paul

(attachments)

nsd-4.2.4-whitespace.patch (4.07 KB)

Hi,

NSD 4.2.4 is available:
https://nlnetlabs.nl/downloads/nsd/nsd-4.2.4.tar.gz
sha256 9ebd6d766765631a56c0eb332eac26b310fa39f662e5582c8210488cf91ef27c
pgp https://nlnetlabs.nl/downloads/nsd/nsd-4.2.4.tar.gz.asc

minor doc item:

Added the patch, thank you very much for it.

The use-systemd is ignored in nsd.conf, but when NSD is compiled with
libsystemd NSD always signals readiness, if possible. And does not need
configuration to do so.

It could be good to document that but I am not sure where I would need
to document the need to not have to set an option to make it work. But
it is good to fix the whitespace, and option itself, if you add it to
nsd.conf is simply ignored, it'll work anyhow.

Best regards, Wouter

Ahh. I did not know that. I've removed the option from our nsd.conf.

I would mention it as a "regular" option in the man page, but just say
"this option is deprecated and ignored".

Paul