Skip to content

Slash

Compare
Choose a tag to compare
@timbru timbru released this 08 Sep 11:34
· 296 commits to main since this release

This bug-fix release ensures that XML files used in the set up of a CA, which were generated by pre 0.10.0 Krill versions can be used. See issue #922

Other than that this release introduces no changes compared to Krill 0.10.0 'Hush'. For convenience will repeat the release notes here. The Krill 0.10.x series introduces the following major features:

  • BGPSec Router Certificate Signing
  • Support the use of Hardware Security Modules (HSMs) for key operations

The documentation has more information:

Subject Section
API changes https://krill.docs.nlnetlabs.nl/en/stable/upgrade.html#v0-10-0
BGPSec https://krill.docs.nlnetlabs.nl/en/stable/cli.html#krillc-bgpsec
HSM support https://krill.docs.nlnetlabs.nl/en/stable/hsm.html

Besides these major features we added a number of small improvements and bug fixes:

  • CRL revocation dates in the future #788
  • Prevent that two krill instances modify the same data #829
  • Let user force RRDP session reset on restore #828
  • Various code improvements aimed at maintainability
  • Using a jitter of 0 results in a panic #859
  • Security fixes in KMIP dependencies #860 (HSM support)
  • Add SSLKEYLOGFILE support #615
  • Allow explicit disabling of HTTPS #913

The full list of changes can be found here:
https://github.com/NLnetLabs/krill/projects/19