upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-11 07:40:00 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Add change entry and release note for #3486

Browse source 
News worthy.

(cherry picked from commit 2669eb2a34ef65935f8045a6c9d271af486f38d5)
This commit is contained in:
Matthijs Mekking 2022-08-10 16:52:53 +02:00
parent 73431eef8f
commit ffc0c321ca
2 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
CHANGES
View file

@ -1,3 +1,6 @@
5947. [func] Change dnssec-policy to allow graceful transition from
an NSEC only zone to NSEC3. [GL #3486]
5946. [bug] Fix statistics channel's handling of multiple HTTP
requests in a single connection which have non-empty
request bodies. [GL #3463]

6
doc/notes/notes-current.rst
View file

@ -37,6 +37,12 @@ Feature Changes
- None.
- When reconfiguring ``dnssec-policy`` from using NSEC with an NSEC-only DNSKEY
algorithm (e.g. RSASHA1) to a policy that uses NSEC3, BIND will no longer fail
to sign the zone, but keep using NSEC for a little longer until the offending
DNSKEY records have been removed from the zone, then switch to using NSEC3.
:gl:`#3486`
Bug Fixes
~~~~~~~~~