[Bug 293598] net/krill: Update to version 0.16.0
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 293598] net/krill: Update to version 0.16.0"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 293598] net/krill: Update to version 0.16.0"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 293598] net/krill: Update to version 0.16.0"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 05 Mar 2026 10:20:30 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293598
Bug ID: 293598
Summary: net/krill: Update to version 0.16.0
Product: Ports & Packages
Version: Latest
Hardware: Any
URL: https://github.com/NLnetLabs/krill/releases
OS: Any
Status: New
Severity: Affects Some People
Priority: ---
Component: Individual Port(s)
Assignee: ports-bugs@FreeBSD.org
Reporter: jaap@NLnetLabs.nl
Attachment #268556 maintainer-approval+
Flags:
Created attachment 268556
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=268556&action=edit
patch to update
0.16.0 ‘Früher war mehr Lametta’
Breaking changes
* Reverted the use of Roto API for the ROA analysis to downloading
RISwhois route origin data and optimized the way this data is
stored in memory.
* Removed the bgp_api_enabled, bgp_api_uri, and bgp_api_cache_duration
fields and added bgp_riswhois_enabled, bgp_riswhois_v4_uri,
bgp_riswhois_v6_uri, and bgp_riswhois_refresh_duration fields,
all of which are optional. (#1329
* Krill will now refuse to start if the config file contains unknown
options. (#1322)
New
* A local krillc can now talk to the server via a Unix socket. In
this case it will use the name of the local user for authentication
purposes. By default, only the root user is allowed with the admin
role, but both allowed users and what role they are mapped to can
be configure. (#1322)
* Added a krillc parents refresh command to
allow refreshing the parents of a single CA rather than having
to do a bulk refresh which can take a very long time if there are
many CAs. (#1353) Bug fixes
* Fixed an issue with the new BGP API code which false returns
missing announcement info. (#1326)
* Fixed an issue where deleting
children or parents of a CA fails before a successful communication
with the remote CA. (#1331)
* Fixed an error message when trying
to delete a CA which does not have any parents, children, or
repositories despite actually removing the CA. (#1331) Start
sweeping the authenticator cache upon daemon startup. This merely
reduces memory consumption of the cache. Expired authentication
tokens were not used either way. (#1337)
* Fixed a bug introduced
in 0.15.0 where CAs do to not clear fulfilled certification
requests causing them to re-request a certificate every time they
contact their parent. ([#1345]) Do not re-try syncing with a
parent of a CA when that parent isn’t known. (#1349)
* Fixed un-suspending child CAs: rather then re-publishing the previously
revoked certificate, a new certificate is now issued. (#1341)
Other changes
* The default config files don’t serve as config documentation any
more. Rather, there is now a krill.conf.5 manual page. This manual
page is also included in the Krill manual. (#1322)
* The cryptography
library used by the rustls TLS implementation has been switched
to aws-lc-rs. This has some consequences for packaging:
* Dropped
packaging for Ubuntu 20.04 (Focal Fossa). (#1359)
--
You are receiving this mail because:
You are the assignee for the bug.