From d5f9afb5777b4a022fca6ffc12a083b672999e21 Mon Sep 17 00:00:00 2001
From: Fedora Release Monitoring <release-monitoring@fedoraproject.org>
Date: Sat, 20 Feb 2021 21:52:14 +0000
Subject: [PATCH 1/2] Update to 2.1.8 (#1931143)

---
 .gitignore      | 1 +
 opendnssec.spec | 7 +++++--
 sources         | 2 +-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index e6788c2..8249a75 100644
--- a/.gitignore
+++ b/.gitignore
@@ -17,3 +17,4 @@
 /opendnssec-1.4.14.tar.gz
 /opendnssec-2.1.6.tar.gz
 /opendnssec-2.1.7.tar.gz
+/opendnssec-2.1.8.tar.gz
diff --git a/opendnssec.spec b/opendnssec.spec
index 5605d70..2cbe50b 100644
--- a/opendnssec.spec
+++ b/opendnssec.spec
@@ -3,8 +3,8 @@
 
 Summary: DNSSEC key and zone management software
 Name: opendnssec
-Version: 2.1.7
-Release: 4%{?prever}%{?dist}
+Version: 2.1.8
+Release: 1%{?dist}
 License: BSD
 Url: http://www.opendnssec.org/
 Source0: http://www.opendnssec.org/files/source/%{?prever:testing/}%{name}-%{version}%{?prever}.tar.gz
@@ -178,6 +178,9 @@ ods-enforcer update all >/dev/null 2>/dev/null ||:
 %systemd_postun_with_restart ods-signerd.service
 
 %changelog
+* Sat Feb 20 2021 Fedora Release Monitoring <release-monitoring@fedoraproject.org> - 2.1.8-1
+- Update to 2.1.8 (#1931143)
+
 * Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.7-4
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
 
diff --git a/sources b/sources
index 4310ec1..e8c6324 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (opendnssec-2.1.7.tar.gz) = 6f2ca2115195fd2fcd0b22186c41c9e64ec24d98b34a10a8a75d64b4671b5afe3a655f32bbd241a0df84affda1f6cecd4daac0e6fa7081e4c9fa02d1bb4ed1eb
+SHA512 (opendnssec-2.1.8.tar.gz) = 48fa9e1efe54d00bba1c97d42d8680a7b33d90360cbb12e333835384447a9d42ffc6508ee6b455bfa4522907b371d4703068e4fd184fd72ea6d950427029cc1c

From 9314236ecb903e65c017ba72e5b321ee26a8cf4f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fran=C3=A7ois=20Cami?= <fcami@redhat.com>
Date: Tue, 6 Jul 2021 16:47:58 +0200
Subject: [PATCH 2/2] Update to 2.1.9

Issues solved:
- OPENDNSSEC-955: Prevent concurrency between certain valid
                  PKCS#11 HSM operations to avoid some keys
                  to be (transiently) unavailable.
- OPENDNSSEC-956: Harden signing procedure to still sign zones
                  for which there are unused keys specified in
                  the zone which are unavailable.

Known issue:
- OPENDNSSEC-957: Signer daemon stops with failure exit code
                  even when no error occured.
---
 .gitignore      | 2 ++
 opendnssec.spec | 6 +++++-
 sources         | 3 ++-
 3 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/.gitignore b/.gitignore
index 8249a75..7dc1c43 100644
--- a/.gitignore
+++ b/.gitignore
@@ -18,3 +18,5 @@
 /opendnssec-2.1.6.tar.gz
 /opendnssec-2.1.7.tar.gz
 /opendnssec-2.1.8.tar.gz
+/opendnssec-2.1.9.tar.gz
+/opendnssec-2.1.9.tar.gz.sig
diff --git a/opendnssec.spec b/opendnssec.spec
index 2cbe50b..7312f5f 100644
--- a/opendnssec.spec
+++ b/opendnssec.spec
@@ -3,7 +3,7 @@
 
 Summary: DNSSEC key and zone management software
 Name: opendnssec
-Version: 2.1.8
+Version: 2.1.9
 Release: 1%{?dist}
 License: BSD
 Url: http://www.opendnssec.org/
@@ -178,6 +178,10 @@ ods-enforcer update all >/dev/null 2>/dev/null ||:
 %systemd_postun_with_restart ods-signerd.service
 
 %changelog
+* Tue Jul 06 2021 François Cami <fcami@redhat.com> - 2.1.9-1
+- Update to 2.1.9 (rhbz#1956561). Solves OPENDNSSEC-955 and OPENDNSSEC-956.
+- Known issue: OPENDNSSEC-957: Signer daemon stops with failure exit code even when no error occured.
+
 * Sat Feb 20 2021 Fedora Release Monitoring <release-monitoring@fedoraproject.org> - 2.1.8-1
 - Update to 2.1.8 (#1931143)
 
diff --git a/sources b/sources
index e8c6324..6d1eac2 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
-SHA512 (opendnssec-2.1.8.tar.gz) = 48fa9e1efe54d00bba1c97d42d8680a7b33d90360cbb12e333835384447a9d42ffc6508ee6b455bfa4522907b371d4703068e4fd184fd72ea6d950427029cc1c
+SHA512 (opendnssec-2.1.9.tar.gz) = 011a50606559651db1787949dcedbbc8727b8ec5c71e95425bfdae94b6db6b731e662ce4cb9f05b34d4ec3512067227869a72a2b2c8a6c14eb547036e4b6e02e
+SHA512 (opendnssec-2.1.9.tar.gz.sig) = a3e60e231dfe2a3bdcc0756a4cc601d6b4aef7e98b8a60b19b0e51a8ab2efb5b75c1a72f87a1b95378d0f5d586dd6952ffd13b8c13aaac7bcb3dae637df9b909