openwrt-packages/net/unbound
Eric Luehrsen a4f23e52bf unbound: improve maintenance of trust anchor
Unbound UCI tries to protect embedded flash from excess
use. Unbound RFC5011 KSK tracking can rewrite root.key
every few minutes to an hour. It also writes and destroys
files in the same directory during the process.

Recommended UCI delays for copying busy work in /var/
back to /etc/ may be too conservative. These are all
changed from 28 to 9 days.

The RFC5011 KSK results were also destroyed by an
init.d restart, even if /var/ is mounted on persistent
storage like USB drive. /var/lib/unbound/root.key is
now preserved during this process, unless a newer key
is installed in /etc/ manually or package update.

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2017-03-02 00:55:16 -05:00
..
files unbound: improve maintenance of trust anchor 2017-03-02 00:55:16 -05:00
patches unbound: Update to 1.6.1 with 2017 trust anchor 2017-02-25 23:36:21 -05:00
Makefile unbound: improve maintenance of trust anchor 2017-03-02 00:55:16 -05:00