diff --git a/configure b/configure index 84a29b6b9f..548fbeca95 100755 --- a/configure +++ b/configure @@ -936,7 +936,6 @@ infodir docdir oldincludedir includedir -runstatedir localstatedir sharedstatedir sysconfdir @@ -1099,7 +1098,6 @@ datadir='${datarootdir}' sysconfdir='${prefix}/etc' sharedstatedir='${prefix}/com' localstatedir='${prefix}/var' -runstatedir='${localstatedir}/run' includedir='${prefix}/include' oldincludedir='/usr/include' docdir='${datarootdir}/doc/${PACKAGE_TARNAME}' @@ -1352,15 +1350,6 @@ do | -silent | --silent | --silen | --sile | --sil) silent=yes ;; - -runstatedir | --runstatedir | --runstatedi | --runstated \ - | --runstate | --runstat | --runsta | --runst | --runs \ - | --run | --ru | --r) - ac_prev=runstatedir ;; - -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \ - | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \ - | --run=* | --ru=* | --r=*) - runstatedir=$ac_optarg ;; - -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb) ac_prev=sbindir ;; -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \ @@ -1498,7 +1487,7 @@ fi for ac_var in exec_prefix prefix bindir sbindir libexecdir datarootdir \ datadir sysconfdir sharedstatedir localstatedir includedir \ oldincludedir docdir infodir htmldir dvidir pdfdir psdir \ - libdir localedir mandir runstatedir + libdir localedir mandir do eval ac_val=\$$ac_var # Remove trailing slashes. @@ -1651,7 +1640,6 @@ Fine tuning of the installation directories: --sysconfdir=DIR read-only single-machine data [PREFIX/etc] --sharedstatedir=DIR modifiable architecture-independent data [PREFIX/com] --localstatedir=DIR modifiable single-machine data [PREFIX/var] - --runstatedir=DIR modifiable per-process data [LOCALSTATEDIR/run] --libdir=DIR object code libraries [EPREFIX/lib] --includedir=DIR C header files [PREFIX/include] --oldincludedir=DIR C header files for non-gcc [/usr/include] diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html index 3ba97d8440..6f7d0c16fb 100644 --- a/doc/arm/Bv9ARM.ch09.html +++ b/doc/arm/Bv9ARM.ch09.html @@ -308,8 +308,8 @@
- The print-time option in the
- logging configuration can now take arguments
+ The print-time option in the
+ logging configuration can now take arguments
local, iso8601 or
iso8601-utc to indicate the format in
which the date and time should be logged. For backward
@@ -411,6 +411,24 @@
"[ECS address/source/scope]".
+ When named is linked with OpenSSL, the
+ OpenSSL RAND routine can be used as the source of entropy/
+ randomness by specifying
+ random-device openssl; in
+ named.conf. It can also be used in tools
+ such as dnssec-keygen,
+ tsig-keygen,
+ and nsupdate by specifying
+ -r openssl on the command line.
+ This is suitable for a virtual machine environment without
+ a hardware random number generator.
+ This behavior can be overridden by using
+ configure --disable-crypto-rand or
+ building with native PKCS#11. [RT #31459]
+
dnssec-keygen no longer has default
algorithm settings. It is necessary to explicitly specify the
- algorithm on the command line with the -a option
+ algorithm on the command line with the -a option
when generating keys. This may cause errors with existing signing
scripts if they rely on current defaults. The intent is to
reduce the long-term cost of transitioning to newer algorithms in
@@ -487,7 +505,7 @@
The default output format for dnstap-read has
been updated to include these addresses, with the initiating
address first and the responding address second, separated by
- "-%gt;" or "%lt;-" to indicate in which direction the message
+ "->" or "<-" to indicate in which direction the message
was sent. [RT #43595]
- The print-time option in the
- logging configuration can now take arguments
+ The print-time option in the
+ logging configuration can now take arguments
local, iso8601 or
iso8601-utc to indicate the format in
which the date and time should be logged. For backward
@@ -372,6 +372,24 @@
"[ECS address/source/scope]".
+ When named is linked with OpenSSL, the
+ OpenSSL RAND routine can be used as the source of entropy/
+ randomness by specifying
+ random-device openssl; in
+ named.conf. It can also be used in tools
+ such as dnssec-keygen,
+ tsig-keygen,
+ and nsupdate by specifying
+ -r openssl on the command line.
+ This is suitable for a virtual machine environment without
+ a hardware random number generator.
+ This behavior can be overridden by using
+ configure --disable-crypto-rand or
+ building with native PKCS#11. [RT #31459]
+
dnssec-keygen no longer has default
algorithm settings. It is necessary to explicitly specify the
- algorithm on the command line with the -a option
+ algorithm on the command line with the -a option
when generating keys. This may cause errors with existing signing
scripts if they rely on current defaults. The intent is to
reduce the long-term cost of transitioning to newer algorithms in
@@ -448,7 +466,7 @@
The default output format for dnstap-read has
been updated to include these addresses, with the initiating
address first and the responding address second, separated by
- "-%gt;" or "%lt;-" to indicate in which direction the message
+ "->" or "<-" to indicate in which direction the message
was sent. [RT #43595]