[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#694542: unblock: opendnssec/1.3.9-3



Hi Adam,

On Sat, Dec 29, 2012 at 12:47 AM, Adam D. Barratt
<adam@adam-barratt.org.uk> wrote:
> Hi,
>
> Apologies for the delay in getting back to you about this.

same here.

> On Wed, 2012-11-28 at 08:33 +0100, Ondřej Surý wrote:
>> On Tue, Nov 27, 2012 at 9:37 PM, Adam D. Barratt
>> <adam@adam-barratt.org.uk> wrote:
>> > On Tue, 2012-11-27 at 14:55 +0100, Ondřej Surý wrote:
>> >>  + OPENDNSSEC-338: ods-ksmutil zone delete --all does not work
>> > [...]
>> > +    If you have created your database in version 1.3.9, you should run
>> > +    following statement in your OpenDNSSEC MySQL database:
>> > +
>> > +        alter table dnsseckeys drop foreign key dnsseckeys_ibfk_1;
>> >
>> > Apologies for a possibly stupid question, but is there any way that
>> > could be automated rather than users having to make manual changes?
>>
>> Not stupid question at all. I thought about automating the process
>> myself, but then I realized that I have no way of knowing if the
>> database was created with version 1.3.9.
>
> Would something along the lines of "if key exists alter table" be
> feasible? Presumably if the key exists then the likelihood is that the
> package created it.


Well, I tried and I have ended with a scary patch which I am attaching
for a reference. I don't think it's good idea to go this way at this
moment.

>> E.g. this is triggered (and the alter table should be run) only in
>> rare circumstances when the user has installed opendnssec 1.3.9-X from
>> wheezy for a first time. People upgrading from squeeze or people
>> upgrading from older releases should not be affected by this bug.
>
> This also means that all opendnssec users upgrading from squeeze will
> potentially be presented with the prompt, which isn't an ideal upgrade
> experience.

True. I have decided to remove the NEWS file, since the conditions of
triggering this bug are rare (deleting all keys), and number people
using MySQL with OpenDNSSEC is low. I just put the text to
README.Debian, where it could happily live.

I will be uploading new version with those changes today.

O.
--
Ondřej Surý <ondrej@sury.org>

Attachment: dropFK.patch
Description: Binary data


Reply to: