upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-12 17:39:59 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

CHANGES and release note

Browse source
This commit is contained in:
Evan Hunt 2018-05-16 11:58:52 -07:00 committed by Ondřej Surý
parent a7a2fa296a
commit d91e313337
2 changed files with 19 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
CHANGES
View file

@ -1,3 +1,11 @@
4957. [func] The default setting for "dnssec-validation" is now
"auto", which activates DNSSEC validation using the
IANA root key. (The default can be changed back to
"yes", which activates DNSSEC validation only when keys
are explicitly configured in named.conf, by building
BIND with "configure --disable-auto-validation".)
[GL #30]
4956. [func] Change isc_random() to be just PRNG using xoshiro128**,
and add isc_nonce_buf() that uses CSPRNG. [GL #289]

11
doc/arm/notes.xml
View file

@ -196,6 +196,17 @@
resort. [GL #221]
</para>
</listitem>
<listitem>
<para>
The default setting for <command>dnssec-validation</command> is
now <userinput>auto</userinput>, which activates DNSSEC
validation using the IANA root key. (The default can be changed
back to <userinput>yes</userinput>, which activates DNSSEC
validation only when keys are explicitly configured in
<filename>named.conf</filename>, by building BIND with
<command>configure --disable-auto-validation</command>.) [GL #30]
</para>
</listitem>
<listitem>
<para>
BIND can no longer be built without DNSSEC support. A cryptography