From d271d444aa27275131648af8b12e380ecb2d83ab Mon Sep 17 00:00:00 2001
From: Tinderbox User
Date: Wed, 12 Feb 2020 16:46:55 +0000
Subject: [PATCH] prep v9.14.11
---
CHANGES | 4 +-
HISTORY | 2 +-
README | 4 +
README.md | 4 +
bin/dig/nslookup.1 | 5 +-
bin/dig/nslookup.html | 48 +++++-----
bin/dnssec/dnssec-keyfromlabel.8 | 2 +-
bin/dnssec/dnssec-keyfromlabel.html | 4 +-
doc/arm/Bv9ARM.ch01.html | 2 +-
doc/arm/Bv9ARM.ch02.html | 2 +-
doc/arm/Bv9ARM.ch03.html | 2 +-
doc/arm/Bv9ARM.ch04.html | 2 +-
doc/arm/Bv9ARM.ch05.html | 134 ++++++++++++++++-----------
doc/arm/Bv9ARM.ch06.html | 2 +-
doc/arm/Bv9ARM.ch07.html | 2 +-
doc/arm/Bv9ARM.ch08.html | 23 ++++-
doc/arm/Bv9ARM.ch09.html | 2 +-
doc/arm/Bv9ARM.ch10.html | 2 +-
doc/arm/Bv9ARM.ch11.html | 2 +-
doc/arm/Bv9ARM.ch12.html | 2 +-
doc/arm/Bv9ARM.html | 7 +-
doc/arm/Bv9ARM.pdf | Bin 1102691 -> 1104402 bytes
doc/arm/man.arpaname.html | 2 +-
doc/arm/man.ddns-confgen.html | 2 +-
doc/arm/man.delv.html | 2 +-
doc/arm/man.dig.html | 2 +-
doc/arm/man.dnssec-cds.html | 2 +-
doc/arm/man.dnssec-checkds.html | 2 +-
doc/arm/man.dnssec-coverage.html | 2 +-
doc/arm/man.dnssec-dsfromkey.html | 2 +-
doc/arm/man.dnssec-importkey.html | 2 +-
doc/arm/man.dnssec-keyfromlabel.html | 6 +-
doc/arm/man.dnssec-keygen.html | 2 +-
doc/arm/man.dnssec-keymgr.html | 2 +-
doc/arm/man.dnssec-revoke.html | 2 +-
doc/arm/man.dnssec-settime.html | 2 +-
doc/arm/man.dnssec-signzone.html | 2 +-
doc/arm/man.dnssec-verify.html | 2 +-
doc/arm/man.dnstap-read.html | 2 +-
doc/arm/man.filter-aaaa.html | 2 +-
doc/arm/man.host.html | 2 +-
doc/arm/man.mdig.html | 2 +-
doc/arm/man.named-checkconf.html | 2 +-
doc/arm/man.named-checkzone.html | 2 +-
doc/arm/man.named-journalprint.html | 2 +-
doc/arm/man.named-nzd2nzf.html | 2 +-
doc/arm/man.named-rrchecker.html | 2 +-
doc/arm/man.named.conf.html | 2 +-
doc/arm/man.named.html | 2 +-
doc/arm/man.nsec3hash.html | 2 +-
doc/arm/man.nslookup.html | 50 +++++-----
doc/arm/man.nsupdate.html | 2 +-
doc/arm/man.pkcs11-destroy.html | 2 +-
doc/arm/man.pkcs11-keygen.html | 2 +-
doc/arm/man.pkcs11-list.html | 2 +-
doc/arm/man.pkcs11-tokens.html | 2 +-
doc/arm/man.rndc-confgen.html | 2 +-
doc/arm/man.rndc.conf.html | 2 +-
doc/arm/man.rndc.html | 2 +-
doc/arm/notes.html | 18 +++-
doc/arm/notes.pdf | Bin 92183 -> 92735 bytes
doc/arm/notes.txt | 17 +++-
lib/dns/api | 2 +-
lib/isc/api | 4 +-
version | 2 +-
65 files changed, 255 insertions(+), 171 deletions(-)
diff --git a/CHANGES b/CHANGES
index e02133964c..0b0c021538 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,5 @@
+ --- 9.14.11 released ---
+
5353. [doc] Document port and dscp parameters in forwarders
configuration option. [GL #914]
@@ -12,7 +14,7 @@
non-existent record. [GL #1540]
5348. [bug] dnssec-settime -Psync was not being honoured.
- [GL !2893]
+ [GL !2925]
--- 9.14.10 released ---
diff --git a/HISTORY b/HISTORY
index 90f3558388..6091aeebef 100644
--- a/HISTORY
+++ b/HISTORY
@@ -69,7 +69,7 @@ releases. New features include:
* "rndc modzone" reconfigures a single zone, without requiring the
entire server to be reconfigured.
* "rndc showzone" displays the current configuration of a zone.
- * "rndc managed-keys" can be used to check the status of RFC 5001
+ * "rndc managed-keys" can be used to check the status of RFC 5011
managed trust anchors, or to force trust anchors to be refreshed.
* "max-cache-size" can now be set to a percentage of available memory.
The default is 90%.
diff --git a/README b/README
index 2d9a268107..bf1ca02193 100644
--- a/README
+++ b/README
@@ -196,6 +196,10 @@ BIND 9.14.10
BIND 9.14.10 is a maintenance release.
+BIND 9.14.11
+
+BIND 9.14.11 is a maintenance release.
+
Building BIND
Minimally, BIND requires a UNIX or Linux system with an ANSI C compiler,
diff --git a/README.md b/README.md
index ca0cc5fb34..d8419ad7a7 100644
--- a/README.md
+++ b/README.md
@@ -213,6 +213,10 @@ BIND 9.14.9 is a maintenance release.
BIND 9.14.10 is a maintenance release.
+#### BIND 9.14.11
+
+BIND 9.14.11 is a maintenance release.
+
### Building BIND
Minimally, BIND requires a UNIX or Linux system with an ANSI C compiler,
diff --git a/bin/dig/nslookup.1 b/bin/dig/nslookup.1
index 752d52d98b..84afa0758e 100644
--- a/bin/dig/nslookup.1
+++ b/bin/dig/nslookup.1
@@ -233,7 +233,10 @@ Change the default TCP/UDP name server port to
.RS 4
Change the type of the information query\&.
.sp
-(Default = A; abbreviations = q, ty)
+(Default = A and then AAAA; abbreviations = q, ty)
+.sp
+\fBNote:\fR
+It is only possible to specify one query type, only the default behavior looks up both when an alternative is not specified\&.
.RE
.PP
\fB\fI[no]\fR\fR\fBrecurse\fR
diff --git a/bin/dig/nslookup.html b/bin/dig/nslookup.html
index dc8c5c236a..9ec3e4bfd6 100644
--- a/bin/dig/nslookup.html
+++ b/bin/dig/nslookup.html
@@ -229,17 +229,17 @@ nslookup -query=hinfo -timeout=10
The class specifies the protocol group of the information.
-
+
(Default = IN; abbreviation = cl)
[no]debug
- Turn on or off the display of the full response packet and
- any intermediate response packets when searching.
+ Turn on or off the display of the full response packet and
+ any intermediate response packets when searching.
-
+
(Default = nodebug; abbreviation = [no]deb)
@@ -247,9 +247,9 @@ nslookup -query=hinfo -timeout=10
Turn debugging mode on or off. This displays more about
- what nslookup is doing.
+ what nslookup is doing.
-
+
(Default = nod2)
@@ -267,7 +267,7 @@ nslookup -query=hinfo -timeout=10
names in the domain search list to the request until an
answer is received.
-
+
(Default = search)
@@ -276,7 +276,7 @@ nslookup -query=hinfo -timeout=10
Change the default TCP/UDP name server port to value.
-
+
(Default = 53; abbreviation = po)
@@ -289,9 +289,15 @@ nslookup -query=hinfo -timeout=10
Change the type of the information query.
-
- (Default = A; abbreviations = q, ty)
+
+ (Default = A and then AAAA; abbreviations = q, ty)
+
+ Note: It is
+ only possible to specify one query type, only
+ the default behavior looks up both when an
+ alternative is not specified.
+
[no]recurse
@@ -300,16 +306,16 @@ nslookup -query=hinfo -timeout=10
have the
information.
-
+
(Default = recurse; abbreviation = [no]rec)
ndots=number
- Set the number of dots (label separators) in a domain
- that will disable searching. Absolute names always
- stop searching.
+ Set the number of dots (label separators) in a domain
+ that will disable searching. Absolute names always
+ stop searching.
retry=number
@@ -331,21 +337,21 @@ nslookup -query=hinfo -timeout=10
Always use a virtual circuit when sending requests to the
server.
-
+
(Default = novc)
[no]fail
- Try the next nameserver if a nameserver responds with
- SERVFAIL or a referral (nofail) or terminate query
- (fail) on such a response.
-
-
+ Try the next nameserver if a nameserver responds with
+ SERVFAIL or a referral (nofail) or terminate query
+ (fail) on such a response.
+
+
(Default = nofail)
-
+
diff --git a/bin/dnssec/dnssec-keyfromlabel.8 b/bin/dnssec/dnssec-keyfromlabel.8
index 16c5546ee3..02ce4a8e59 100644
--- a/bin/dnssec/dnssec-keyfromlabel.8
+++ b/bin/dnssec/dnssec-keyfromlabel.8
@@ -92,7 +92,7 @@ Specifies the label for a key pair in the crypto hardware\&.
.sp
When
BIND
-9 is built with OpenSSL\-based PKCS#11 support, the label is an arbitrary string that identifies a particular key\&. It may be preceded by an optional OpenSSL engine name, followed by a colon, as in "pkcs11:\fIkeylabel\fR"\&.
+9 is built with OpenSSL\-based PKCS#11 support, the label is an arbitrary string that identifies a particular key\&.
.sp
When
BIND
diff --git a/bin/dnssec/dnssec-keyfromlabel.html b/bin/dnssec/dnssec-keyfromlabel.html
index ac53995ca0..92c4e3cf4c 100644
--- a/bin/dnssec/dnssec-keyfromlabel.html
+++ b/bin/dnssec/dnssec-keyfromlabel.html
@@ -146,9 +146,7 @@
When BIND 9 is built with OpenSSL-based
PKCS#11 support, the label is an arbitrary string that
- identifies a particular key. It may be preceded by an
- optional OpenSSL engine name, followed by a colon, as in
- "pkcs11:keylabel".
+ identifies a particular key.
When BIND 9 is built with native PKCS#11
diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html
index c140f02447..6c6200765c 100644
--- a/doc/arm/Bv9ARM.ch01.html
+++ b/doc/arm/Bv9ARM.ch01.html
@@ -614,6 +614,6 @@
-
BIND 9.14.10 (Stable Release)
+BIND 9.14.11 (Stable Release)