BSD Ports

dns/opendnssec2 2.1.14 DragonFly

Tool suite for maintaining DNSSEC

System
DragonFly
Repository
DPorts
Maintainer
[email protected] (as in FreeBSD)
License
BSD3CLAUSE
Categories
dns
Package size
399.6 KiB, 1704.2 KiB installed

Description

OpenDNSSEC was created as an open-source turn-key solution for DNSSEC. It secures zone data just before it is published in an authoritative name server.

In the other systems

The newest version among them is 2.1.14, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
DragonFlydns/opendnssec22.1.14 newestnone known-[email protected]-
FreeBSDdns/opendnssec22.1.14_2 newestnone known-[email protected]-
NetBSDsecurity/opendnssec2 by name2.1.14nb10 newestnone known-[email protected]2026-08-24
HardenedBSDdns/opendnssec22.1.14_2 newestno data-[email protected]-
GhostBSDdns/opendnssec22.1.14_2 newestno data-[email protected]-

Compare across BSDs

Install

Binary package:

pkg install opendnssec2

From DPorts:

cd /usr/dports/dns/opendnssec2 && make install clean

Dependency graph

Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.

Dependencies

Run dependencies 4

No port depends on this one.

Configuration

No options to configure.

Service scripts
none

Message after installing

A manual migration step is needed to migration from 1.4 to 2.0.

 First migrate to at least the 1.4.10 release if you have not already done
 so.

 Review the documentation on the OpenDNSSEC site.  This can be
 updated in between releases to provide more help.  Especially if
 you have tooling around OpenDNSSEC you should be aware that some
 command line utilities have changed.  A fair amount of backward
 compatibility has been respected, but changes are present.
 
 The enforcer does require a full migration, as the internal database has
 been completely revised.  See the documentation in 
 /usr/local/share/doc/opendnssec/1.4-2.0_db_convert/README.md for a description.
 
 Migration scripts are installed in /usr/local/share/doc/opendnssec.

 The signer does not require any migration.  Backward compatibility is
 respected from earlier 1.4 release.  The signer should not require a
 full resign of your zone when upgrading, however if you decide to downgrade
 a full resign is required.

An HowTo is provided at
<https://wiki.opendnssec.org/display/DOCS20/Quick+start+guide>