upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-11 09:48:34 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Merge branch 'aram/arm-xot-and-ddns-update-forwarding-v9_18' into 'v9_18'

Browse source 
[v9_18] Document dynamic update forwarding limitation when XoT is enabled

See merge request isc-projects/bind9!6765
This commit is contained in:
Arаm Sаrgsyаn 2022-09-22 11:43:53 +00:00
commit 588ee1f581
2 changed files with 10 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
doc/arm/reference.rst
View file

@ -1074,6 +1074,13 @@ where ``tls-configuration-name`` refers to a previously defined
observers but does not protect from man-in-the-middle attacks on
zone transfers.
.. warning::
Please note that this version of BIND 9 does not support dynamic updates
forwarding (see :any:`allow-update-forwarding`) in conjuction with zone
transfers over TLS (XoT), that is when the :any:`tls` keyword is used with
:any:`primaries`, e.g. ``primaries { 192.0.2.1 tls tls-configuration-name; };``.
.. _options_grammar:
``options`` Block Grammar

4
doc/notes/notes-current.rst
View file

@ -20,7 +20,9 @@ Security Fixes
Known Issues
~~~~~~~~~~~~
- None.
- BIND 9.18 does not support dynamic updates forwarding (see
:any:`allow-update-forwarding`) in conjuction with zone transfers
over TLS (XoT). :gl:`#3512`
New Features
~~~~~~~~~~~~