Michal Nowak
4fae72e2de
Set up release notes for BIND 9.19.25
2024-05-03 15:51:53 +02:00
Aydın Mercan
042bb98846
Add CHANGES and release note for [GL #4523 ]
2024-04-26 16:12:29 +03:00
Ondřej Surý
9305ebdabe
Add CHANGES and release note for [GL #1879 ]
2024-04-24 22:49:26 +02:00
Matthijs Mekking
e7525cab4f
Add CHANGES and release note
...
Introduce the new 'dnssec-ksr' tool.
2024-04-19 13:52:21 +02:00
Matthijs Mekking
e033e58a85
dnssec-keygen: allow -f and -k together
...
The 'dnssec-keygen' tool now allows the options '-k <dnssec-policy>'
and '-f <flags>' together to create keys from a DNSSEC policy that only
match the given role. Allow setting '-fZ' to only create ZSKs, while
'-fK' will only create KSKs.
2024-04-19 10:41:04 +02:00
Matthijs Mekking
77d4afba1b
Introduce new DNSSEC tool dnssec-ksr
...
Introduce a new DNSSEC tool, dnssec-ksr, for creating signed key
response (SKR) files, given one or more key signing requests (KSRs).
For now it is just a dummy tool, but the future purpose of this utility
is to pregenerate ZSKs and signed RRsets for DNSKEY, CDNSKEY, and CDS
for a given period that a KSK is to be offline.
2024-04-19 10:41:04 +02:00
Ondřej Surý
cbbc0051a3
Add CHANGES note for [GL #4416 ]
2024-04-18 20:09:47 +02:00
Ondřej Surý
5d4233c2c2
Add CHANGES and release notes for [GL #4586 ]
2024-04-18 16:05:32 +02:00
Petr Špaček
da607d6a06
Update Sphinx version used for documentation build
2024-04-18 12:46:13 +02:00
Ondřej Surý
fbea3bb255
Add CHANGES and release note for [GL #4680 ]
2024-04-18 10:53:31 +02:00
Matthijs Mekking
c3d8932f79
Add checkconf check for signatures-jitter
...
Having a value higher than signatures-validity does not make sense
and should be treated as a configuration error.
2024-04-18 09:50:33 +02:00
Matthijs Mekking
8b7785bc23
Add release notes and CHANGES for #4554
...
Mention the new signature jitter option.
2024-04-18 09:50:31 +02:00
Matthijs Mekking
2a4daaedca
Add signatures-jitter option
...
Add an option to speficy signatures jitter.
2024-04-18 09:50:10 +02:00
Petr Špaček
c9ff77c067
Merge tag 'v9.19.23'
2024-04-18 09:21:47 +02:00
Petr Špaček
1341a1a734
Set up release notes for BIND 9.19.24
2024-04-04 19:35:03 +02:00
Suzanne Goldlust
4c0db2ee3c
Tweak and reword release notes
2024-04-02 17:45:25 +02:00
Petr Špaček
e4344b7d1a
Add release note for GL #4622 and #4652
2024-04-02 17:31:42 +02:00
Petr Špaček
3989b99a0b
Add release note for GL #4614
2024-04-02 17:31:42 +02:00
Petr Špaček
1076bd3c78
Add release note for GL #4552
2024-04-02 17:31:42 +02:00
Petr Špaček
bf92e16c0e
Prepare release notes for BIND 9.19.23
2024-04-02 17:31:42 +02:00
Ondřej Surý
792ac13d60
Add CHANGES and release note for [GL #4446 ]
2024-04-02 15:21:00 +00:00
Ondřej Surý
304b5ec1ad
Deprecate fixed value for the rrset-order option
...
Mark the "fixed" value for the "rrset-order" option deprecated, so we
can remove it in the future.
2024-04-02 15:21:00 +00:00
Ondřej Surý
dfefc89b7e
Add CHANGES and release note for [GL #4593 ]
2024-04-02 16:27:03 +02:00
Ondřej Surý
7c96bf3e71
Deprecate sortlist option
...
Mark the sortlist option deprecated, so we can remove it in the
future.
2024-04-02 16:26:39 +02:00
Mark Andrews
ecb043fc7b
Add release note for [GL #4580 ]
2024-03-21 07:45:55 +11:00
Mark Andrews
49561277de
Add RESOLVER.ARPA to the built in empty zones
...
RFC 9462 adds RESOLVER.ARPA to the list of built in empty zones.
2024-03-21 07:45:55 +11:00
Michał Kępień
22591ae0a7
Merge tag 'v9.19.22'
2024-03-20 14:04:49 +01:00
Michal Nowak
9019985d2d
Add FreeBSD 13.3
2024-03-18 15:36:54 +01:00
Matthijs Mekking
5b5f43babc
Add RFC 9460 to list of supported RFCs
...
The specification was implemented (#1132 ) when it was a draft. Now that
it is RFC, add the RFC to the list of supported RFCs.
2024-03-14 12:52:42 +00:00
Matthijs Mekking
bc600ae2a1
Add CHANGES and release note for #4624
2024-03-14 09:07:44 +01:00
Michał Kępień
33bdbfe2f5
Set up release notes for BIND 9.19.23
2024-03-13 09:51:24 +01:00
Petr Špaček
59dd8c7de5
Tweak and reword release notes
2024-03-12 09:19:53 +01:00
Petr Špaček
2fac89f039
Add release note for GL #4591
2024-03-12 09:19:53 +01:00
Petr Špaček
1b039fdfc5
Reorder release notes
2024-03-12 09:19:53 +01:00
Petr Špaček
cd117a932f
Add release note for GL #4413
2024-03-12 09:19:53 +01:00
Petr Špaček
353ebedb94
Prepare release notes for BIND 9.19.22
2024-03-12 09:19:53 +01:00
Ondřej Surý
b48dfae41a
Add CHANGES and release note for [GL #4621 ]
2024-03-06 18:33:44 +01:00
Evan Hunt
92b305be4b
add a compile-time option to select default zone and cache DB
...
by default, QPDB is the database used by named and all tools and
unit tests. the old default of RBTDB can now be restored by using
"configure --with-zonedb=rbt --with-cachedb=rbt".
some tests have been fixed so they will work correctly with either
database.
CHANGES and release notes have been updated to reflect this change.
2024-03-06 10:49:02 +01:00
Matthijs Mekking
a49a211852
Add CHANGES and release notes for #4411
...
It is worthwile mentioning the switch to qp-tries.
2024-03-06 10:49:02 +01:00
Ondřej Surý
f447557667
Add CHANGES and release note for [GL #4596 ]
2024-02-29 11:23:04 +01:00
Artem Boldariev
1ab0f6d918
Improve documentation on ephemeral TLS configuration
...
This commit improves the documentation on the ephemeral TLS
configuration and describes in more detail what is happening with TLS
configurations on reconfiguration in general.
2024-02-28 20:30:38 +02:00
Mark Andrews
4f8539ac23
Add CHANGES and release note for [GL #4495 ]
2024-02-23 12:00:12 +01:00
Aram Sargsyan
152c6e2274
Add CHANGES and release notes for [GL #4447 ]
2024-02-16 08:42:47 +00:00
Aram Sargsyan
bd7463914f
Disallow stale-answer-client-timeout non-zero values
...
Remove all the code and tests which support non-zero
stale-answer-client-timeout values, and adjust the
documentation.
2024-02-16 08:41:52 +00:00
Michał Kępień
01ac86f90b
Retroactively add release note for CVE-2023-50868
...
A release note for CVE-2023-50868 was not included in BIND 9.19.21, even
though that vulnerability was already addressed in that release (by the
fix for CVE-2023-50387). Retroactively add a relevant release note for
BIND 9.19.21.
2024-02-14 14:49:49 +01:00
Michał Kępień
8610799317
BIND 9.19.21
...
-----BEGIN SSH SIGNATURE-----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-----END SSH SIGNATURE-----
gpgsig -----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAg25GGAuUyFX1gxo7QocNm8V6J/8
frHSduYX7Aqk4iJLwAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQEGqBHXwCtEJxRzHbTp6CfBNjqwIAjRD9G+HC4M7q77KBEBgc6dRf15ZRRgiWJCk5P
iHMZkEMyWCnELMzhiTzgE=
-----END SSH SIGNATURE-----
Merge tag 'v9.19.21'
BIND 9.19.21
2024-02-14 13:24:56 +01:00
Ondřej Surý
76997983fd
Use EXIT_SUCCESS and EXIT_FAILURE
...
Instead of randomly using -1 or 1 as a failure status, properly utilize
the EXIT_FAILURE define that's platform specific (as it should be).
2024-02-08 08:01:58 +01:00
Aram Sargsyan
1d064d3257
Add a release note for [GL #4241 ]
2024-02-05 17:45:19 +00:00
Aram Sargsyan
85f966a8f6
Document a specific 'dnssec-validation yes' usage incompatibility
...
Static trust anchor for the root zone can not be used with
'dnssec-validation auto'.
2024-02-02 19:54:09 +00:00
Aram Sargsyan
fdb7e4e3f5
Add CHANGES and release notes for [GL #4373 ]
2024-02-02 19:54:08 +00:00