Upgrade from version 1.4.7 to 1.4.8.2

NEWS:

• Support for RFC5011 style KSK rollovers. KSK section in the KASP now accepts <RFC5011/> element.
• Enforcer: New repository option <AllowExtraction/> allows to generate keys with CKA_EXTRACTABLE attribute set to TRUE so keys can be wrapped and extracted from HSM.

Bugfixes:

• SUPPORT-145: EOF handling an ARM architecture caused signer to hang.
• Fixed signer hitting assertion on short reply XFR handler.
• Include revoke bit in keytag calculation.
• Increased stacksize on some systems (thanks Patrik Lundin!).
• Stop ods-signerd on SIGINT.

Fixes port problem (reported by *geoffroy desvernay*)

• Now also installs previous missing migration script convert_database.pl

PR: 203574
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Sponsored by: DK Hostmaster A/S