From 50cb6eaae631b6b1a8b4ea6b2f9147b471838e6d Mon Sep 17 00:00:00 2001
From: Tomas Krizek <tomas.krizek@nic.cz>
Date: Jan 10 2019 14:32:36 +0000
Subject: new upstream relase 3.2.1


---

diff --git a/knot-resolver.spec b/knot-resolver.spec
index 42b23a2..93d42b3 100644
--- a/knot-resolver.spec
+++ b/knot-resolver.spec
@@ -2,7 +2,7 @@
 %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}}
 
 %define GPG_CHECK 1
-%define VERSION 3.2.0
+%define VERSION 3.2.1
 %define repodir %{_builddir}/%{name}-%{version}
 
 Name:           knot-resolver
@@ -230,6 +230,29 @@ getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysc
 %endif
 
 %changelog
+* Thu Jan 10 2019 Tomas Krizek <tomas.krizek@nic.cz> - 3.2.1-1
+Knot Resolver 3.2.1 (2019-01-10)
+================================
+
+Bugfixes
+--------
+- trust_anchors: respect validity time range during TA bootstrap (!748)
+- fix TLS rehandshake handling (!739)
+- make TLS_FORWARD compatible with GnuTLS 3.3 (!741)
+- special thanks to Grigorii Demidov for his long-term work on Knot Resolver!
+
+Improvements
+------------
+- improve handling of timeouted outgoing TCP connections (!734)
+- trust_anchors: check syntax of public keys in DNSKEY RRs (!748)
+- validator: clarify message about bogus non-authoritative data (!735)
+- dnssec validation failures contain more verbose reasoning (!735)
+- new function trust_anchors.summary() describes state of DNSSEC TAs (!737),
+  and logs new state of trust anchors after start up and automatic changes
+- trust anchors: refuse revoked DNSKEY even if specified explicitly,
+  and downgrade missing the SEP bit to a warning
+
+
 * Mon Dec 17 2018 Tomas Krizek <tomas.krizek@nic.cz> - 3.2.0-1
 Knot Resolver 3.2.0 (2018-12-17)
 ================================
diff --git a/sources b/sources
index 01c787c..f76543f 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (knot-resolver-3.2.0.tar.xz) = e80163a1790c5855921ae1536950b77fb74b73b75234920e49ffb956f799820b53ccacb5e6eafabe96fd0a7c1c67424a1cb687cadbe7e68db57294df7e461f3f
-SHA512 (knot-resolver-3.2.0.tar.xz.asc) = 157596495faa22125d8515e3aae75479a1603c65b5fc0e7be7036bdbe4358114e6c68a955311d8f847617401fb6332c2f452a341ec9bd0a769251c7baa8788f1
+SHA512 (knot-resolver-3.2.1.tar.xz) = 2ed79176183a685bf6365081706e68e4add05965a5f53a6f38ae4a5c204d29952eaf511ffbf18c646a0a843a032b425eb0592de27dafbf977d976946a3437351
+SHA512 (knot-resolver-3.2.1.tar.xz.asc) = a9e2b491e4b7e7e4e6c34f0e293fb6799a39c78a4a85c698549da0481e67c8b0ca7e14f66fb9e7f2281d661e9d21d15c3607724dd37ee0aa0aaa5cc7dbfa6f73