opendnssec-enforcer for Debian
------------------------------

This package is part of OpenDNSSEC suite, and is probably useless
without the other parts (unless you really know, what you're doing),
so you may want to install opendnssec meta package which pulls all
necessary dependencies to run OpenDNSSEC system.

If you are going to use softhsm, you need to allow opendnssec user
to access /var/lib/softhsm (or another place where you keep your
softHSM database).  On standard debian system, it should be sufficient
to add opendnssec user to softhsm group by issuing:

  # adduser opendnssec softhsm

 -- Ondřej Surý <ondrej@debian.org>, Fri, 13 Jun 2014 13:56:02 +0200

Previous versions of OpenDNSSEC had an invalid foreign key in the
MySQL database, which causes issues when deleting --all zones from
KASP database.

If you have created your database in version 1.3.9, you should run
following statement in your OpenDNSSEC MySQL database:
  
    alter table dnsseckeys drop foreign key dnsseckeys_ibfk_1;

For more information see: 
    https://issues.opendnssec.org/browse/OPENDNSSEC-338

 -- Ondřej Surý <ondrej@debian.org>, Tue, 27 Nov 2012 14:26:47 +0100
