From eb758024a9c2fb841326ccd8e59d98bd3b975ff9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Vladim=C3=ADr=20=C4=8Cun=C3=A1t?= Date: Thu, 31 Jul 2025 08:55:46 +0200 Subject: [PATCH] knot-resolver: update DNSSEC root trust anchors MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This is long overdue. Honestly I dislike that packaging is hardcoding it this way. It's error-prone, as we can see. Knot Resolver source does contain the up to date anchors, and it also (optionally) installs them. Still, I'm not up to larger changes in OpenWrt packaging right now. Signed-off-by: Vladimír Čunát (cherry picked from commit 47f8b88f43c614b7f683dcdf941e47d4c1e45b98) --- net/knot-resolver/Makefile | 2 +- net/knot-resolver/files/root.keys | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/net/knot-resolver/Makefile b/net/knot-resolver/Makefile index 5484509a16..cd66089ec6 100644 --- a/net/knot-resolver/Makefile +++ b/net/knot-resolver/Makefile @@ -11,7 +11,7 @@ include $(TOPDIR)/rules.mk PKG_NAME:=knot-resolver PKG_VERSION:=5.7.4 -PKG_RELEASE:=1 +PKG_RELEASE:=2 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz PKG_SOURCE_URL:=https://secure.nic.cz/files/knot-resolver diff --git a/net/knot-resolver/files/root.keys b/net/knot-resolver/files/root.keys index 6ee35a4989..3009e81f27 100644 --- a/net/knot-resolver/files/root.keys +++ b/net/knot-resolver/files/root.keys @@ -1 +1,2 @@ -. IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d +. IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D +. IN DS 38696 8 2 683D2D0ACB8C9B712A1948B27F741219298D0A450D612C483AF444A4C0FB2B16