v1.21
- Enable DLV per default on systems that support /etc/sysconfig/dnssec
  (Fedora, RHEL, Centos)
- Fixes for Debian/Ubuntu by Ondřej Surý <ondrej@debian.org>
- Change default install to /usr/local
- Added key for .org.

v1.20
- dnssec-configure was not adding the reverse keys and DLV key to the
  named.conf file when enabling DLV for bind.
- dnssec-configure was not removing the DLV key from named.conf when
  disabling DLV.
- Bind did not properly support DLV's other then dlv.isc.org.

v1.19
- Added --nocheck option to be able to run dnssec-configure in %post of
  specfile, while there are no unbound key/pem files yet, and therefor
  unbound-checkconf would give an error. We cannot generate key files
  in %post, as we might not have enough entropy and would block an rpm
  process.

v1.18
- Fix for when Bind was installed, but Unbound was not [Adam Tkac]
- Added key for .th (Thailand) to testing
- Updated all reverse keys for RIPE's reverse zones

v1.17
- Added --norestart option to ease use of dnssec-configure in initscripts
- Added support for /etc/sysconfig/ dir when using Fedora/RHEL/CentOS

v1.16
- .gov went in production. Move key from testing to production
  See http://dotgov.gov/dnssecinfo.aspx
- Removed dnsops.gov from testing, its chains from .gov now exists.

v1.15
- New zones with keys assigned to RIPE: 109.in-addr.arpa. and 178.in-addr.arpa.
- .bg added a key and is in rollover.
- .gov key added to testing. They will not publish their DNSKEY outside
  DNS until they are considered production. Then the key should appear
  at https://www.dotgov.gov/dnssecinfo.aspx
- Don't use GNU extensions for cp. [Chris Lee]
- Look for the configuration files in more then just the Fedora places.
- Added key id's to all in-addr.arpa keys
- Removed dnsx.xelerance.com key. It was not meant to be in the public package

v1.14
- Added proper exit status for dnkey-pull

v1.13
- Clarify license in source files
- Fix mixed use of $RPM_BUILD_ROOT and %{buildroot}
- Source tag fully qualified now

v1.12
- Work around for unbound parser bug where a space must follow a colon
- Added key id's to those keys that did not yet list them (created with
  on older version of dnskey-pull)
- Minor updates on some keys in /etc/pki/dnssec-keys/testing/ 

v1.11 dud

v1.10
- Added --set, --query, and show options to dnssec-configure
- Removed testing key for gr. - it vanished again.
- Updated RIPE's keys

v1.09
- Added testing key for gr.

v1.08
- Fix Bind to generate and include the key files
- Rename package from dnssec-keys to dnssec-conf
- Fix wildcard processing for unbound-checkconf via unbound patches
- Fix wildcard processing for bind via generated named.dnssec.keys include
- Added new IANA keys from https://ns.iana.org/dnssec/status.html in
  disabled state

v1.05
- Patched unbound, so we no longer need to create *.conf files
- Removed keepkeyconfs 

v1.04
- Initial pre-release
