panel/dnssec-trigger-panel.desktop.in | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 dnssec-trigger-panel.desktop is built without interpolating @bindir@
 and @uidir@

example.conf.in | 3 0 + 3 - 0 !
1 file changed, 3 deletions(-)

 strip version number from config file to make the build reproducible

More information about reproducible builds can be found at
https://reproducible-builds.org/ website

01-dnssec-trigger.in | 20 10 + 10 - 0 !
1 file changed, 10 insertions(+), 10 deletions(-)

 remove bashisms, to make dnssec-trigger script compatible with dash

Makefile.in | 10 5 + 5 - 0 !
configure.ac | 14 14 + 0 - 0 !
2 files changed, 19 insertions(+), 5 deletions(-)

 get the correct systemd services path from pkg-config
 --variable=systemdsystemunitdir systemd

01-dnssec-trigger.in | 2 1 + 1 - 0 !
Makefile.in | 43 26 + 17 - 0 !
configure.ac | 14 12 + 2 - 0 !
dnssec-trigger-script.in | 16 8 + 8 - 0 !
dnssec-triggerd-keygen.service | 8 0 + 8 - 0 !
dnssec-triggerd-keygen.service.in | 8 8 + 0 - 0 !
riggerd/reshook.c | 4 2 + 2 - 0 !
7 files changed, 57 insertions(+), 38 deletions(-)

 unhardcode most of the paths

Makefile.in | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 make the build reproducible

dnssec-trigger-control-setup.sh.in | 51 38 + 13 - 0 !
1 file changed, 38 insertions(+), 13 deletions(-)

 delete keys that are too small
Bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=898969

dnssec-trigger-script.in | 3 2 + 1 - 0 !
1 file changed, 2 insertions(+), 1 deletion(-)

 under some conditions dnssec-trigger-script would crash
 because it was trying to delete a name that wasn't in its cache.
 This at least avoids the crash so other cleanup steps can succeed
Bug: https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=4217

riggerd/svr.c | 1 0 + 1 - 0 !
1 file changed, 1 deletion(-)

 avoid double free
Bug: https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=4218

===================================================================

Changelog | 5 5 + 0 - 0 !
riggerd/reshook.c | 4 3 + 1 - 0 !
2 files changed, 8 insertions(+), 1 deletion(-)

 [patch] - add edns0 and trust-ad options when writing resolvconf to
 point   to 127.0.0.1, because unbound is set up to validate and supports  
 EDNS0.  Fixes #2 and #5.