mirror of
https://github.com/isc-projects/bind9.git
synced 2026-06-12 06:40:01 -04:00
regen v9_10
This commit is contained in:
parent
a089f3bc84
commit
c00585facb
25 changed files with 66 additions and 43 deletions
2
FAQ
2
FAQ
|
|
@ -92,7 +92,7 @@ Q: I'm trying to use TSIG to authenticate dynamic updates or zone
|
|||
rejecting the TSIG. Why?
|
||||
|
||||
A: This may be a clock skew problem. Check that the the clocks on the
|
||||
client and server are properly synchronised (e.g., using ntp).
|
||||
client and server are properly synchronized (e.g., using ntp).
|
||||
|
||||
Q: I see a log message like the following. Why?
|
||||
|
||||
|
|
|
|||
2
FAQ.xml
2
FAQ.xml
|
|
@ -220,7 +220,7 @@ view "chaos" chaos {
|
|||
<answer>
|
||||
<para>
|
||||
This may be a clock skew problem. Check that the the clocks
|
||||
on the client and server are properly synchronised (e.g.,
|
||||
on the client and server are properly synchronized (e.g.,
|
||||
using ntp).
|
||||
</para>
|
||||
</answer>
|
||||
|
|
|
|||
|
|
@ -44,7 +44,7 @@
|
|||
.\" * MAIN CONTENT STARTS HERE *
|
||||
.\" -----------------------------------------------------------------
|
||||
.SH "NAME"
|
||||
dnssec-importkey \- Import DNSKEY records from external systems so they can be managed\&.
|
||||
dnssec-importkey \- import DNSKEY records from external systems so they can be managed
|
||||
.SH "SYNOPSIS"
|
||||
.HP \w'\fBdnssec\-importkey\fR\ 'u
|
||||
\fBdnssec\-importkey\fR [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-L\ \fR\fB\fIttl\fR\fR] [\fB\-P\ \fR\fB\fIdate/offset\fR\fR] [\fB\-D\ \fR\fB\fIdate/offset\fR\fR] [\fB\-h\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-V\fR] {\fBkeyfile\fR}
|
||||
|
|
|
|||
|
|
@ -24,7 +24,7 @@
|
|||
<a name="man.dnssec-importkey"></a><div class="titlepage"></div>
|
||||
<div class="refnamediv">
|
||||
<h2>Name</h2>
|
||||
<p><span class="application">dnssec-importkey</span> — Import DNSKEY records from external systems so they can be managed.</p>
|
||||
<p><span class="application">dnssec-importkey</span> — import DNSKEY records from external systems so they can be managed</p>
|
||||
</div>
|
||||
<div class="refsynopsisdiv">
|
||||
<h2>Synopsis</h2>
|
||||
|
|
|
|||
|
|
@ -44,7 +44,7 @@
|
|||
.\" * MAIN CONTENT STARTS HERE *
|
||||
.\" -----------------------------------------------------------------
|
||||
.SH "NAME"
|
||||
dnssec-revoke \- Set the REVOKED bit on a DNSSEC key
|
||||
dnssec-revoke \- set the REVOKED bit on a DNSSEC key
|
||||
.SH "SYNOPSIS"
|
||||
.HP \w'\fBdnssec\-revoke\fR\ 'u
|
||||
\fBdnssec\-revoke\fR [\fB\-hr\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-V\fR] [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-E\ \fR\fB\fIengine\fR\fR] [\fB\-f\fR] [\fB\-R\fR] {keyfile}
|
||||
|
|
|
|||
|
|
@ -23,7 +23,7 @@
|
|||
<a name="man.dnssec-revoke"></a><div class="titlepage"></div>
|
||||
<div class="refnamediv">
|
||||
<h2>Name</h2>
|
||||
<p><span class="application">dnssec-revoke</span> — Set the REVOKED bit on a DNSSEC key</p>
|
||||
<p><span class="application">dnssec-revoke</span> — set the REVOKED bit on a DNSSEC key</p>
|
||||
</div>
|
||||
<div class="refsynopsisdiv">
|
||||
<h2>Synopsis</h2>
|
||||
|
|
|
|||
|
|
@ -44,7 +44,7 @@
|
|||
.\" * MAIN CONTENT STARTS HERE *
|
||||
.\" -----------------------------------------------------------------
|
||||
.SH "NAME"
|
||||
dnssec-settime \- Set the key timing metadata for a DNSSEC key
|
||||
dnssec-settime \- set the key timing metadata for a DNSSEC key
|
||||
.SH "SYNOPSIS"
|
||||
.HP \w'\fBdnssec\-settime\fR\ 'u
|
||||
\fBdnssec\-settime\fR [\fB\-f\fR] [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-L\ \fR\fB\fIttl\fR\fR] [\fB\-P\ \fR\fB\fIdate/offset\fR\fR] [\fB\-A\ \fR\fB\fIdate/offset\fR\fR] [\fB\-R\ \fR\fB\fIdate/offset\fR\fR] [\fB\-I\ \fR\fB\fIdate/offset\fR\fR] [\fB\-D\ \fR\fB\fIdate/offset\fR\fR] [\fB\-h\fR] [\fB\-V\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-E\ \fR\fB\fIengine\fR\fR] {keyfile}
|
||||
|
|
|
|||
|
|
@ -23,7 +23,7 @@
|
|||
<a name="man.dnssec-settime"></a><div class="titlepage"></div>
|
||||
<div class="refnamediv">
|
||||
<h2>Name</h2>
|
||||
<p><span class="application">dnssec-settime</span> — Set the key timing metadata for a DNSSEC key</p>
|
||||
<p><span class="application">dnssec-settime</span> — set the key timing metadata for a DNSSEC key</p>
|
||||
</div>
|
||||
<div class="refsynopsisdiv">
|
||||
<h2>Synopsis</h2>
|
||||
|
|
|
|||
|
|
@ -44,7 +44,7 @@
|
|||
.\" * MAIN CONTENT STARTS HERE *
|
||||
.\" -----------------------------------------------------------------
|
||||
.SH "NAME"
|
||||
dnssec-checkds \- A DNSSEC delegation consistency checking tool\&.
|
||||
dnssec-checkds \- DNSSEC delegation consistency checking tool
|
||||
.SH "SYNOPSIS"
|
||||
.HP \w'\fBdnssec\-checkds\fR\ 'u
|
||||
\fBdnssec\-checkds\fR [\fB\-l\ \fR\fB\fIdomain\fR\fR] [\fB\-f\ \fR\fB\fIfile\fR\fR] [\fB\-d\ \fR\fB\fIdig\ path\fR\fR] [\fB\-D\ \fR\fB\fIdsfromkey\ path\fR\fR] {zone}
|
||||
|
|
|
|||
|
|
@ -23,7 +23,7 @@
|
|||
<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
|
||||
<div class="refnamediv">
|
||||
<h2>Name</h2>
|
||||
<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
|
||||
<p><span class="application">dnssec-checkds</span> — DNSSEC delegation consistency checking tool</p>
|
||||
</div>
|
||||
<div class="refsynopsisdiv">
|
||||
<h2>Synopsis</h2>
|
||||
|
|
|
|||
|
|
@ -44,7 +44,7 @@
|
|||
.\" * MAIN CONTENT STARTS HERE *
|
||||
.\" -----------------------------------------------------------------
|
||||
.SH "NAME"
|
||||
named-rrchecker \- A syntax checker for individual DNS resource records
|
||||
named-rrchecker \- syntax checker for individual DNS resource records
|
||||
.SH "SYNOPSIS"
|
||||
.HP \w'\fBnamed\-rrchecker\fR\ 'u
|
||||
\fBnamed\-rrchecker\fR [\fB\-h\fR] [\fB\-o\ \fR\fB\fIorigin\fR\fR] [\fB\-p\fR] [\fB\-u\fR] [\fB\-C\fR] [\fB\-T\fR] [\fB\-P\fR]
|
||||
|
|
|
|||
|
|
@ -24,7 +24,7 @@
|
|||
<a name="man.named-rrchecker"></a><div class="titlepage"></div>
|
||||
<div class="refnamediv">
|
||||
<h2>Name</h2>
|
||||
<p><span class="application">named-rrchecker</span> — A syntax checker for individual DNS resource records</p>
|
||||
<p><span class="application">named-rrchecker</span> — syntax checker for individual DNS resource records</p>
|
||||
</div>
|
||||
<div class="refsynopsisdiv">
|
||||
<h2>Synopsis</h2>
|
||||
|
|
|
|||
|
|
@ -129,12 +129,14 @@
|
|||
</p>
|
||||
<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
|
||||
<h3 class="title">Note</h3>
|
||||
<p>
|
||||
As a slave zone can also be a master to other slaves, <span class="command"><strong>named</strong></span>,
|
||||
by default, sends <span class="command"><strong>NOTIFY</strong></span> messages for every zone
|
||||
it loads. Specifying <span class="command"><strong>notify master-only;</strong></span> will
|
||||
cause <span class="command"><strong>named</strong></span> to only send <span class="command"><strong>NOTIFY</strong></span> for master
|
||||
zones that it loads.
|
||||
</div>
|
||||
</p>
|
||||
</div>
|
||||
</div>
|
||||
<div class="section">
|
||||
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
|
||||
|
|
@ -1059,9 +1061,11 @@ options {
|
|||
</pre>
|
||||
<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
|
||||
<h3 class="title">Note</h3>
|
||||
<p>
|
||||
None of the keys listed in this example are valid. In particular,
|
||||
the root key is not valid.
|
||||
</div>
|
||||
</p>
|
||||
</div>
|
||||
<p>
|
||||
When DNSSEC validation is enabled and properly configured,
|
||||
the resolver will reject any answers from signed, secure zones
|
||||
|
|
@ -1609,12 +1613,14 @@ $ <strong class="userinput"><code> /opt/pkcs11/usr/bin/softhsm-util --init-token
|
|||
</p>
|
||||
<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
|
||||
<h3 class="title">Note</h3>
|
||||
<p>
|
||||
The latest OpenSSL versions as of this writing (January 2015)
|
||||
are 0.9.8zc, 1.0.0o, and 1.0.1j.
|
||||
ISC will provide updated patches as new versions of OpenSSL
|
||||
are released. The version number in the following examples
|
||||
is expected to change.
|
||||
</div>
|
||||
</p>
|
||||
</div>
|
||||
<p>
|
||||
Before building BIND 9 with PKCS#11 support, it will be
|
||||
necessary to build OpenSSL with the patch in place, and configure
|
||||
|
|
@ -1637,10 +1643,12 @@ $ <strong class="userinput"><code>patch -p1 -d openssl-0.9.8zc \
|
|||
</pre>
|
||||
<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
|
||||
<h3 class="title">Note</h3>
|
||||
Note that the patch file may not be compatible with the
|
||||
<p>
|
||||
The patch file may not be compatible with the
|
||||
"patch" utility on all operating systems. You may need to
|
||||
install GNU patch.
|
||||
</div>
|
||||
</p>
|
||||
</div>
|
||||
<p>
|
||||
When building OpenSSL, place it in a non-standard
|
||||
location so that it does not interfere with OpenSSL libraries
|
||||
|
|
|
|||
|
|
@ -3580,7 +3580,6 @@ options {
|
|||
queries.
|
||||
Caching may still occur as an effect the server's internal
|
||||
operation, such as NOTIFY address lookups.
|
||||
See also <span class="command"><strong>fetch-glue</strong></span> above.
|
||||
</p></dd>
|
||||
<dt><span class="term"><span class="command"><strong>request-nsid</strong></span></span></dt>
|
||||
<dd><p>
|
||||
|
|
@ -4898,13 +4897,15 @@ avoid-v6-udp-ports {};
|
|||
</p>
|
||||
<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
|
||||
<h3 class="title">Note</h3>
|
||||
<p>
|
||||
If you do not wish the alternate transfer source
|
||||
to be used, you should set
|
||||
<span class="command"><strong>use-alt-transfer-source</strong></span>
|
||||
appropriately and you should not depend upon
|
||||
getting an answer back to the first refresh
|
||||
query.
|
||||
</div>
|
||||
</p>
|
||||
</div>
|
||||
</dd>
|
||||
<dt><span class="term"><span class="command"><strong>alt-transfer-source-v6</strong></span></span></dt>
|
||||
<dd><p>
|
||||
|
|
@ -6234,11 +6235,13 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
|
|||
</p>
|
||||
<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
|
||||
<h3 class="title">Note</h3>
|
||||
<p>
|
||||
The real parent servers for these zones should disable all
|
||||
empty zone under the parent zone they serve. For the real
|
||||
root servers, this is all built-in empty zones. This will
|
||||
enable them to return referrals to deeper in the tree.
|
||||
</div>
|
||||
</p>
|
||||
</div>
|
||||
<div class="variablelist"><dl class="variablelist">
|
||||
<dt><span class="term"><span class="command"><strong>empty-server</strong></span></span></dt>
|
||||
<dd><p>
|
||||
|
|
@ -8924,7 +8927,7 @@ example.com. NS ns2.example.net.
|
|||
The <em class="replaceable"><code>name</code></em> field
|
||||
is subject to DNS wildcard expansion, and
|
||||
this rule matches when the name being updated
|
||||
name is a valid expansion of the wildcard.
|
||||
is a valid expansion of the wildcard.
|
||||
</p>
|
||||
</td>
|
||||
</tr>
|
||||
|
|
|
|||
|
|
@ -181,10 +181,12 @@ zone "example.com" {
|
|||
</p>
|
||||
<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
|
||||
<h3 class="title">Note</h3>
|
||||
Note that if the <span class="command"><strong>named</strong></span> daemon is running as an
|
||||
<p>
|
||||
If the <span class="command"><strong>named</strong></span> daemon is running as an
|
||||
unprivileged user, it will not be able to bind to new restricted
|
||||
ports if the server is reloaded.
|
||||
</div>
|
||||
</p>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div class="section">
|
||||
|
|
|
|||
|
|
@ -88,7 +88,7 @@
|
|||
records with an incorrect class to be be accepted,
|
||||
triggering a REQUIRE failure when those records
|
||||
were subsequently cached. This flaw is disclosed
|
||||
in CVE-2015-8000. [RT #4098]
|
||||
in CVE-2015-8000. [RT #40987]
|
||||
</p></li>
|
||||
<li class="listitem"><p>
|
||||
An incorrect boundary check in the OPENPGPKEY rdatatype
|
||||
|
|
@ -194,6 +194,9 @@
|
|||
<div class="titlepage"><div><div><h3 class="title">
|
||||
<a name="relnotes_changes"></a>Feature Changes</h3></div></div></div>
|
||||
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
|
||||
<li class="listitem"><p>
|
||||
Updated the complied in addresses for H.ROOT-SERVERS.NET.
|
||||
</p></li>
|
||||
<li class="listitem"><p>
|
||||
Large inline-signing changes should be less disruptive.
|
||||
Signature generation is now done incrementally; the number
|
||||
|
|
|
|||
|
|
@ -432,9 +432,13 @@ $ <strong class="userinput"><code>make</code></strong>
|
|||
</p></dd>
|
||||
</dl></div>
|
||||
<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
|
||||
<h3 class="title">Note</h3>In practice, either -a or -r must be specified. Others can
|
||||
be optional; the underlying library routine tries to identify the
|
||||
appropriate server and the zone name for the update.</div>
|
||||
<h3 class="title">Note</h3>
|
||||
<p>
|
||||
In practice, either -a or -r must be specified. Others can
|
||||
be optional; the underlying library routine tries to identify the
|
||||
appropriate server and the zone name for the update.
|
||||
</p>
|
||||
</div>
|
||||
<p>
|
||||
Examples: assuming the primary authoritative server of the
|
||||
dynamic.example.com zone has an IPv6 address 2001:db8::1234,
|
||||
|
|
|
|||
|
|
@ -57,7 +57,7 @@
|
|||
<span class="refentrytitle"><a href="man.delv.html">delv</a></span><span class="refpurpose"> — DNS lookup and validation utility</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.dnssec-checkds.html"><span class="application">dnssec-checkds</span></a></span><span class="refpurpose"> — A DNSSEC delegation consistency checking tool.</span>
|
||||
<span class="refentrytitle"><a href="man.dnssec-checkds.html"><span class="application">dnssec-checkds</span></a></span><span class="refpurpose"> — DNSSEC delegation consistency checking tool</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.dnssec-coverage.html"><span class="application">dnssec-coverage</span></a></span><span class="refpurpose"> — checks future DNSKEY coverage for a zone</span>
|
||||
|
|
@ -66,7 +66,7 @@
|
|||
<span class="refentrytitle"><a href="man.dnssec-dsfromkey.html"><span class="application">dnssec-dsfromkey</span></a></span><span class="refpurpose"> — DNSSEC DS RR generation tool</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.dnssec-importkey.html"><span class="application">dnssec-importkey</span></a></span><span class="refpurpose"> — Import DNSKEY records from external systems so they can be managed.</span>
|
||||
<span class="refentrytitle"><a href="man.dnssec-importkey.html"><span class="application">dnssec-importkey</span></a></span><span class="refpurpose"> — import DNSKEY records from external systems so they can be managed</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.dnssec-keyfromlabel.html"><span class="application">dnssec-keyfromlabel</span></a></span><span class="refpurpose"> — DNSSEC key generation tool</span>
|
||||
|
|
@ -75,10 +75,10 @@
|
|||
<span class="refentrytitle"><a href="man.dnssec-keygen.html"><span class="application">dnssec-keygen</span></a></span><span class="refpurpose"> — DNSSEC key generation tool</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.dnssec-revoke.html"><span class="application">dnssec-revoke</span></a></span><span class="refpurpose"> — Set the REVOKED bit on a DNSSEC key</span>
|
||||
<span class="refentrytitle"><a href="man.dnssec-revoke.html"><span class="application">dnssec-revoke</span></a></span><span class="refpurpose"> — set the REVOKED bit on a DNSSEC key</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.dnssec-settime.html"><span class="application">dnssec-settime</span></a></span><span class="refpurpose"> — Set the key timing metadata for a DNSSEC key</span>
|
||||
<span class="refentrytitle"><a href="man.dnssec-settime.html"><span class="application">dnssec-settime</span></a></span><span class="refpurpose"> — set the key timing metadata for a DNSSEC key</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.dnssec-signzone.html"><span class="application">dnssec-signzone</span></a></span><span class="refpurpose"> — DNSSEC zone signing tool</span>
|
||||
|
|
@ -105,7 +105,7 @@
|
|||
<span class="refentrytitle"><a href="man.named-journalprint.html"><span class="application">named-journalprint</span></a></span><span class="refpurpose"> — print zone journal in human-readable form</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.named-rrchecker.html"><span class="application">named-rrchecker</span></a></span><span class="refpurpose"> — A syntax checker for individual DNS resource records</span>
|
||||
<span class="refentrytitle"><a href="man.named-rrchecker.html"><span class="application">named-rrchecker</span></a></span><span class="refpurpose"> — syntax checker for individual DNS resource records</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.nsupdate.html"><span class="application">nsupdate</span></a></span><span class="refpurpose"> — Dynamic DNS update utility</span>
|
||||
|
|
|
|||
|
|
@ -287,7 +287,7 @@
|
|||
<span class="refentrytitle"><a href="man.delv.html">delv</a></span><span class="refpurpose"> — DNS lookup and validation utility</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.dnssec-checkds.html"><span class="application">dnssec-checkds</span></a></span><span class="refpurpose"> — A DNSSEC delegation consistency checking tool.</span>
|
||||
<span class="refentrytitle"><a href="man.dnssec-checkds.html"><span class="application">dnssec-checkds</span></a></span><span class="refpurpose"> — DNSSEC delegation consistency checking tool</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.dnssec-coverage.html"><span class="application">dnssec-coverage</span></a></span><span class="refpurpose"> — checks future DNSKEY coverage for a zone</span>
|
||||
|
|
@ -296,7 +296,7 @@
|
|||
<span class="refentrytitle"><a href="man.dnssec-dsfromkey.html"><span class="application">dnssec-dsfromkey</span></a></span><span class="refpurpose"> — DNSSEC DS RR generation tool</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.dnssec-importkey.html"><span class="application">dnssec-importkey</span></a></span><span class="refpurpose"> — Import DNSKEY records from external systems so they can be managed.</span>
|
||||
<span class="refentrytitle"><a href="man.dnssec-importkey.html"><span class="application">dnssec-importkey</span></a></span><span class="refpurpose"> — import DNSKEY records from external systems so they can be managed</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.dnssec-keyfromlabel.html"><span class="application">dnssec-keyfromlabel</span></a></span><span class="refpurpose"> — DNSSEC key generation tool</span>
|
||||
|
|
@ -305,10 +305,10 @@
|
|||
<span class="refentrytitle"><a href="man.dnssec-keygen.html"><span class="application">dnssec-keygen</span></a></span><span class="refpurpose"> — DNSSEC key generation tool</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.dnssec-revoke.html"><span class="application">dnssec-revoke</span></a></span><span class="refpurpose"> — Set the REVOKED bit on a DNSSEC key</span>
|
||||
<span class="refentrytitle"><a href="man.dnssec-revoke.html"><span class="application">dnssec-revoke</span></a></span><span class="refpurpose"> — set the REVOKED bit on a DNSSEC key</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.dnssec-settime.html"><span class="application">dnssec-settime</span></a></span><span class="refpurpose"> — Set the key timing metadata for a DNSSEC key</span>
|
||||
<span class="refentrytitle"><a href="man.dnssec-settime.html"><span class="application">dnssec-settime</span></a></span><span class="refpurpose"> — set the key timing metadata for a DNSSEC key</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.dnssec-signzone.html"><span class="application">dnssec-signzone</span></a></span><span class="refpurpose"> — DNSSEC zone signing tool</span>
|
||||
|
|
@ -335,7 +335,7 @@
|
|||
<span class="refentrytitle"><a href="man.named-journalprint.html"><span class="application">named-journalprint</span></a></span><span class="refpurpose"> — print zone journal in human-readable form</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.named-rrchecker.html"><span class="application">named-rrchecker</span></a></span><span class="refpurpose"> — A syntax checker for individual DNS resource records</span>
|
||||
<span class="refentrytitle"><a href="man.named-rrchecker.html"><span class="application">named-rrchecker</span></a></span><span class="refpurpose"> — syntax checker for individual DNS resource records</span>
|
||||
</dt>
|
||||
<dt>
|
||||
<span class="refentrytitle"><a href="man.nsupdate.html"><span class="application">nsupdate</span></a></span><span class="refpurpose"> — Dynamic DNS update utility</span>
|
||||
|
|
|
|||
|
|
@ -42,7 +42,7 @@
|
|||
<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
|
||||
<div class="refnamediv">
|
||||
<h2>Name</h2>
|
||||
<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
|
||||
<p><span class="application">dnssec-checkds</span> — DNSSEC delegation consistency checking tool</p>
|
||||
</div>
|
||||
<div class="refsynopsisdiv">
|
||||
<h2>Synopsis</h2>
|
||||
|
|
|
|||
|
|
@ -42,7 +42,7 @@
|
|||
<a name="man.dnssec-importkey"></a><div class="titlepage"></div>
|
||||
<div class="refnamediv">
|
||||
<h2>Name</h2>
|
||||
<p><span class="application">dnssec-importkey</span> — Import DNSKEY records from external systems so they can be managed.</p>
|
||||
<p><span class="application">dnssec-importkey</span> — import DNSKEY records from external systems so they can be managed</p>
|
||||
</div>
|
||||
<div class="refsynopsisdiv">
|
||||
<h2>Synopsis</h2>
|
||||
|
|
|
|||
|
|
@ -42,7 +42,7 @@
|
|||
<a name="man.dnssec-revoke"></a><div class="titlepage"></div>
|
||||
<div class="refnamediv">
|
||||
<h2>Name</h2>
|
||||
<p><span class="application">dnssec-revoke</span> — Set the REVOKED bit on a DNSSEC key</p>
|
||||
<p><span class="application">dnssec-revoke</span> — set the REVOKED bit on a DNSSEC key</p>
|
||||
</div>
|
||||
<div class="refsynopsisdiv">
|
||||
<h2>Synopsis</h2>
|
||||
|
|
|
|||
|
|
@ -42,7 +42,7 @@
|
|||
<a name="man.dnssec-settime"></a><div class="titlepage"></div>
|
||||
<div class="refnamediv">
|
||||
<h2>Name</h2>
|
||||
<p><span class="application">dnssec-settime</span> — Set the key timing metadata for a DNSSEC key</p>
|
||||
<p><span class="application">dnssec-settime</span> — set the key timing metadata for a DNSSEC key</p>
|
||||
</div>
|
||||
<div class="refsynopsisdiv">
|
||||
<h2>Synopsis</h2>
|
||||
|
|
|
|||
|
|
@ -42,7 +42,7 @@
|
|||
<a name="man.named-rrchecker"></a><div class="titlepage"></div>
|
||||
<div class="refnamediv">
|
||||
<h2>Name</h2>
|
||||
<p><span class="application">named-rrchecker</span> — A syntax checker for individual DNS resource records</p>
|
||||
<p><span class="application">named-rrchecker</span> — syntax checker for individual DNS resource records</p>
|
||||
</div>
|
||||
<div class="refsynopsisdiv">
|
||||
<h2>Synopsis</h2>
|
||||
|
|
|
|||
|
|
@ -49,7 +49,7 @@
|
|||
records with an incorrect class to be be accepted,
|
||||
triggering a REQUIRE failure when those records
|
||||
were subsequently cached. This flaw is disclosed
|
||||
in CVE-2015-8000. [RT #4098]
|
||||
in CVE-2015-8000. [RT #40987]
|
||||
</p></li>
|
||||
<li class="listitem"><p>
|
||||
An incorrect boundary check in the OPENPGPKEY rdatatype
|
||||
|
|
@ -155,6 +155,9 @@
|
|||
<div class="titlepage"><div><div><h3 class="title">
|
||||
<a name="relnotes_changes"></a>Feature Changes</h3></div></div></div>
|
||||
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
|
||||
<li class="listitem"><p>
|
||||
Updated the complied in addresses for H.ROOT-SERVERS.NET.
|
||||
</p></li>
|
||||
<li class="listitem"><p>
|
||||
Large inline-signing changes should be less disruptive.
|
||||
Signature generation is now done incrementally; the number
|
||||
|
|
|
|||
Loading…
Reference in a new issue