From 348bb47217e42111b38cd7299e6ca4624cb4e1e9 Mon Sep 17 00:00:00 2001 From: Tim Bruijnzeels Date: Tue, 11 May 2021 16:38:25 +0200 Subject: [PATCH] Update release version for 0.9.0-rc2 --- Cargo.lock | 2 +- Cargo.toml | 2 +- Changelog.md | 12 ++++++++++-- 3 files changed, 12 insertions(+), 4 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index e99a970e..257a93aa 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1112,7 +1112,7 @@ dependencies = [ [[package]] name = "krill" -version = "0.9.0-dev" +version = "0.9.0-rc2" dependencies = [ "base64 0.13.0", "basic-cookies", diff --git a/Cargo.toml b/Cargo.toml index 08c6004b..c2b87ef3 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -1,7 +1,7 @@ [package] # Note: some of these values are also used when building Debian packages below. name = "krill" -version = "0.9.0-dev" +version = "0.9.0-rc2" edition = "2018" authors = [ "The NLnet Labs RPKI team " ] description = "Resource Public Key Infrastructure (RPKI) daemon" diff --git a/Changelog.md b/Changelog.md index ecaf797f..62c38f9f 100644 --- a/Changelog.md +++ b/Changelog.md @@ -1,6 +1,6 @@ # Change Log -## 0.9.0 RC +## 0.9.0 RC 2 Welcome to the Krill 0.9.0 Release Candidate. @@ -21,7 +21,7 @@ migration of course, but still we would very much like to encourage existing use this further on real data. In order to test the upgrade you can do the following: -- install Krill 0.9.0-rc1 on a test machine +- install Krill 0.9.0-rc2 on a test machine - copy over your existing data directory, but exclude the `keys` directory - set the ENV variable KRILL_UPGRADE_ONLY - start krill v0.9.0-rc1 using your copied data directory @@ -162,6 +162,14 @@ the rather unlikely case that a parent CA temporarily removed one of your resour Let the Publication Server write the notification.xml file to a new file, and then rename it. This prevents that Relying Parties can retrieve a half-written file. (#352) +Logging is now much less noisy. And Krill CAs will report *which* new resources were received +from, or removed by a parent. As part of this change we also fix a harmless, but annoying, bug +in certificate request logic. Krill would wrongfully report that a parent had reduced the +eligible 'not after' time, when in fact it had extended it. Furthermore Krill will now request +a new certificate only if the new 'not after' time is more than 10% further into the future +compared to the current certificate - this is safe and will reduce noise levels where parent +CAs use a simple strategy which returns a new 'not after' time for every request. (#513, #514) + ## 0.8.2 'Can't touch this' As it turned out the previous release (0.8.1) still insisted on cleaning up 'redundant ROAs'