Version 2.7.5


  • Keymgr supports NSEC3 salt handling


  • Zone history in journal is dropped apon AXFR-like zone update
  • Libdnssec is no longer linked against libm #628
  • Libdnssec is explicitly linked against libpthread if PKCS #11 enabled #629
  • Better support for libknot packaging in Python
  • Manually generated KSK is 'ready' by default
  • Kdig supports '+timeout' as an alias for '+time'
  • Kdig supports '+nocomments' option
  • Kdig no longer prints empty lines between retries
  • Kdig returns failure if operations not successfully resolved #632
  • Fixed repeating of the 'KSK submission, waiting for confirmation' log
  • Various improvements in documentation, Dockerfile, and tests


  • Knotc fails to unset huge configuration section
  • Kjournalprint sometimes fails to display zone journal content
  • Improper timing of ZSK removal during ZSK rollover
  • Missing UTC time zone indication in the 'iso' keymgr list output
  • A race condition in the online signing module