[Bug 293598] net/krill: Update to version 0.16.0

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 05 Mar 2026 10:20:30 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293598

            Bug ID: 293598
           Summary: net/krill: Update to version 0.16.0
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
               URL: https://github.com/NLnetLabs/krill/releases
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: jaap@NLnetLabs.nl
 Attachment #268556 maintainer-approval+
             Flags:

Created attachment 268556
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=268556&action=edit
patch to update

0.16.0 ‘Früher war mehr Lametta’

Breaking changes

* Reverted the use of Roto API for the ROA analysis to downloading
  RISwhois route origin data and optimized the way this data is
  stored in memory.

* Removed the bgp_api_enabled, bgp_api_uri, and bgp_api_cache_duration
  fields and added bgp_riswhois_enabled, bgp_riswhois_v4_uri,
  bgp_riswhois_v6_uri, and bgp_riswhois_refresh_duration fields,
  all of which are optional. (#1329

* Krill will now refuse to start if the config file contains unknown
  options. (#1322)

  New

* A local krillc can now talk to the server via a Unix socket. In
  this case it will use the name of the local user for authentication
  purposes. By default, only the root user is allowed with the admin
  role, but both allowed users and what role they are mapped to can
  be configure. (#1322)

* Added a krillc parents refresh command to
  allow refreshing the parents of a single CA rather than having
  to do a bulk refresh which can take a very long time if there are
  many CAs. (#1353) Bug fixes

* Fixed an issue with the new BGP API code which false returns
  missing announcement info. (#1326)

* Fixed an issue where deleting
  children or parents of a CA fails before a successful communication
  with the remote CA. (#1331)

* Fixed an error message when trying
  to delete a CA which does not have any parents, children, or
  repositories despite actually removing the CA. (#1331) Start
  sweeping the authenticator cache upon daemon startup. This merely
  reduces memory consumption of the cache. Expired authentication
  tokens were not used either way. (#1337)

* Fixed a bug introduced
  in 0.15.0 where CAs do to not clear fulfilled certification
  requests causing them to re-request a certificate every time they
  contact their parent. ([#1345]) Do not re-try syncing with a
  parent of a CA when that parent isn’t known. (#1349)

* Fixed un-suspending child CAs: rather then re-publishing the previously
  revoked certificate, a new certificate is now issued.  (#1341)

Other changes

* The default config files don’t serve as config documentation any
  more. Rather, there is now a krill.conf.5 manual page. This manual
  page is also included in the Krill manual. (#1322)

* The cryptography
  library used by the rustls TLS implementation has been switched
  to aws-lc-rs. This has some consequences for packaging:

* Dropped
  packaging for Ubuntu 20.04 (Focal Fossa). (#1359)

-- 
You are receiving this mail because:
You are the assignee for the bug.