Version 2.6.8


  • New 'import-pkcs11' command in keymgr


  • Unixtime serial policy mimics Bind – increment if lower #593


  • Creeping memory consuption upon server reload #584
  • Kdig incorrectly detects QNAME if 'notify' is a prefix
  • Server crashes when zone sign fails #587
  • CSK->KZSK rollover retires CSK early #588
  • Server crashes when zone expires during outgoing multi-message transfer
  • Kjournalprint doesn't convert zone name argument to lower-case
  • Cannot switch to a previously used ksk-shared dnssec policy #589