OpenDNSSEC 1.2.1:

* ldns 1.6.9 is required for bugfixes.
* dnsruby-1.52 required for bugfixes.

Bugfixes:
* Auditor: 'make check' now works when srcdir != builddir.
* Auditor: Include the 'make check' files in the tarball.
* Enforcer: Fix the migration script for SQLite.
* Enforcer: Increase size of keypairs(id) field in MySQL to allow more than
  32767 keys; see MIGRATION for details.
* Enforcer: Minor change to NOT_READY_KEY error message.
* libhsm: Increase the maximum number of attached HSM:s from 10 to 100.
* ods-ksmutil: Send trivial MySQL messages to stdout when exporting zonelist
  etc. Otherwise the resulting XML needs to be edited by hand.
* ods-control: Fix for Bourne shell.
* Signer Engine: Prevent race condition when setting up the workers and
  the command handler.
* Signer Engine: Check if the signature exists before recycling it.
* Signer Engine: Quit when there are errors in the configuration.
* Signer Engine: Enable core dump on failure.
* Signer Engine: Explicitly close down log msg with null.
* Signer Engine: Backup state after writing output.
* Signer Engine: Allow update of serial if internal structure is not
  initialized.

4 files changed, 21 insertions, 11 deletions

diff --git a/security/opendnssec/MESSAGE b/security/opendnssec/MESSAGE
index f93d4727738..5c7788d1da3 100644
--- a/security/opendnssec/MESSAGE
+++ b/security/opendnssec/MESSAGE
@@ -1,7 +1,10 @@
 ===========================================================================
-$NetBSD: MESSAGE,v 1.2 2010/05/09 19:04:47 pettai Exp $
+$NetBSD: MESSAGE,v 1.3 2011/03/21 15:52:25 pettai Exp $
 
 For latest information about configuring OpenDNSSEC, see:
 http://www.opendnssec.org/documentation/using-opendnssec/
 
+(If you are upgrading from OpenDNSSEC v1.1.x -> 1.2.x, 
+have a look at the included share/doc/opendnssec/MIGRATION file)
+
 ===========================================================================
diff --git a/security/opendnssec/Makefile b/security/opendnssec/Makefile
index c6bc25b1d2b..3bbef697eb0 100644
--- a/security/opendnssec/Makefile
+++ b/security/opendnssec/Makefile
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.9 2011/01/24 20:30:28 pettai Exp $
+# $NetBSD: Makefile,v 1.10 2011/03/21 15:52:25 pettai Exp $
 #
 
-DISTNAME=	opendnssec-1.2.0
+DISTNAME=	opendnssec-1.2.1
 CATEGORIES=	security net
 MASTER_SITES=	http://www.opendnssec.org/files/source/
 
@@ -10,9 +10,9 @@ HOMEPAGE=	http://www.opendnssec.org/
 COMMENT=	OSS for a fast and easy DNSSEC deployment
 LICENSE=	2-clause-bsd
 
-DEPENDS+=	ldns>=1.6.7:../../net/ldns
+DEPENDS+=	ldns>=1.6.9:../../net/ldns
 DEPENDS+=	${RUBY_PKGPREFIX}-rubygems-[0-9]*:../../misc/rubygems
-DEPENDS+=	${RUBY_PKGPREFIX}-dnsruby>=1.51:../../net/ruby-dnsruby
+DEPENDS+=	${RUBY_PKGPREFIX}-dnsruby>=1.52:../../net/ruby-dnsruby
 BUILD_DEPENDS+=	CUnit-[0-9]*:../../devel/cunit
 
 PKG_DESTDIR_SUPPORT=	user-destdir
@@ -41,6 +41,7 @@ PKG_USERS_VARS+=	ODS_USER
 PKG_GROUPS_VARS+=	ODS_GROUP
 
 EGDIR=			${PREFIX}/share/examples/opendnssec
+DOCDIR=			${PREFIX}/share/doc/opendnssec
 ODS_SYSCONFDIR=		${PKG_SYSCONFDIR}/opendnssec
 
 SUBST_CLASSES+=		paths
@@ -59,7 +60,7 @@ CONF_FILES+=	${EGDIR}/zonefetch.xml.sample \
 CONF_FILES+=	${EGDIR}/zonelist.xml.sample \
 			${ODS_SYSCONFDIR}/zonelist.xml
 
-INSTALLATION_DIRS=	${EGDIR} ${ODS_SYSCONFDIR}
+INSTALLATION_DIRS=	${DOCDIR} ${EGDIR} ${ODS_SYSCONFDIR}
 INSTALLATION_DIRS+=	share/opendnssec
 INSTALLATION_DIRS+=	lib/opendnssec
 INSTALLATION_DIRS+=	lib/opendnssec/signer
@@ -75,6 +76,10 @@ OWN_DIRS+=		${VARBASE}/opendnssec/unsigned
 pre-install:
 	${MKDIR} ${DESTDIR}${PKG_SYSCONFDIR}/opendnssec
 
+post-install:
+	${INSTALL} ${WRKSRC}/KNOWN_ISSUES ${DESTDIR}${DOCDIR}
+	${INSTALL} ${WRKSRC}/MIGRATION ${DESTDIR}${DOCDIR}
+
 #.include "../../devel/cunit/buildlink3.mk"
 .include "../../textproc/libxml2/buildlink3.mk"
 .include "../../net/ldns/buildlink3.mk"
diff --git a/security/opendnssec/PLIST b/security/opendnssec/PLIST
index e9c7d8643f6..91a49a834b8 100644
--- a/security/opendnssec/PLIST
+++ b/security/opendnssec/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.3 2011/01/24 20:30:28 pettai Exp $
+@comment $NetBSD: PLIST,v 1.4 2011/03/21 15:52:25 pettai Exp $
 bin/ods-auditor
 bin/ods-hsmspeed
 bin/ods-hsmutil
@@ -31,6 +31,8 @@ sbin/ods-control
 sbin/ods-enforcerd
 sbin/ods-signer
 sbin/ods-signerd
+share/doc/opendnssec/KNOWN_ISSUES
+share/doc/opendnssec/MIGRATION
 share/examples/opendnssec/conf.xml
 share/examples/opendnssec/conf.xml.sample
 share/examples/opendnssec/kasp.xml
diff --git a/security/opendnssec/distinfo b/security/opendnssec/distinfo
index 03dd37f48dd..bb59b326c6b 100644
--- a/security/opendnssec/distinfo
+++ b/security/opendnssec/distinfo
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.6 2011/01/24 20:30:28 pettai Exp $
+$NetBSD: distinfo,v 1.7 2011/03/21 15:52:25 pettai Exp $
 
-SHA1 (opendnssec-1.2.0.tar.gz) = 51e169f283bd1b69892bead8be9b6b7446e607de
-RMD160 (opendnssec-1.2.0.tar.gz) = b243c9e6edccd15e1ccb8fb8839c931a77e613df
-Size (opendnssec-1.2.0.tar.gz) = 1614858 bytes
+SHA1 (opendnssec-1.2.1.tar.gz) = e9fd9a4e33dc6d02f08ebf7454183fb53b4818a2
+RMD160 (opendnssec-1.2.1.tar.gz) = 5cc50ee68bf4e531b400f70a0a07cbe6d2047b43
+Size (opendnssec-1.2.1.tar.gz) = 1649465 bytes
 SHA1 (patch-aa) = ec0db5d0fe2cb5f0808e5113006b1243040b547d