Require libknot 2.6.4 to avoid mysterious problems with DNS-over-TLS.

Respdiff on kresd under load showed that DNS-over-TLS has higher ratio
of SERVFAILs than other transports. For some reason the problem
disappeared after upgrading from libknot 2.6.3 to 2.6.4, and appeared
again after downgrade.

diff --git a/Makefile b/Makefile
index 80269b214a392bc8b1ff9482ff9f0dfe0da1013d..27b6c50a2ebc51ae66822237907e2d07de0c2abd 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -16,7 +16,7 @@ lint-lua: $(patsubst %.lua.in,%.lua,$(wildcard */*/*.lua.in))
 .PHONY: all install check clean doc info lint
 
 # Dependencies
-KNOT_MINVER := 2.4.0
+KNOT_MINVER := 2.6.4
 $(eval $(call find_lib,libknot,$(KNOT_MINVER),yes))
 $(eval $(call find_lib,libdnssec,$(KNOT_MINVER),yes))
 $(eval $(call find_lib,libzscanner,$(KNOT_MINVER),yes))

diff --git a/NEWS b/NEWS
index 2cae8a224e53cc9b6c286b97c8ef526a5b362d1e..dcd7b1791160255364920ca3b0a0fcb5c2c8466e 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -7,6 +7,7 @@ Incompatible changes
 - systemd: more chages in default unit files (TODO)
 - ta_sentinel: implement protocol draft-ietf-dnsop-kskroll-sentinel-01
   (our draft-ietf-dnsop-kskroll-sentinel-00 implementation had inverted logic)
+- libknot: require version 2.6.4 or newer to get bugfixes for DNS-over-TLS
 
 Bugfixes
 --------