upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-04-26 00:30:05 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
39544 commits 18 branches 854 tags 440 MiB
Commit graph

7118 commits

Author SHA1 Message Date
Matthijs Mekking
bd00c2ce4e Add release note and CHANGES for GL #3677 
News worthy.
 2023-08-01 06:55:48 +00:00
Matthijs Mekking
1e0f77b349 Remove redundant inline-signing lines from docs 
Now that inline-signing is explicitly set in dnssec-policy, remove
the redundant "inline-signing yes;" lines from the documentation.
 2023-08-01 06:55:48 +00:00
Matthijs Mekking
bbfdcc36c8 Add inline-signing to dnssec-policy 
Add an option to enable/disable inline-signing inside the
dnssec-policy clause. The existing inline-signing option that is
set in the zone clause takes priority, but if it is omitted, then the
value that is set in dnssec-policy is taken.

The built-in policies use inline-signing.

This means that if you want to use the default policy without
inline-signing you either have to set it explicitly in the zone
clause:

    zone "example" {
        ...
        dnssec-policy default;
        inline-signing no;
    };

Or create a new policy, only overriding the inline-signing option:

    dnssec-policy "default-dynamic" {
        inline-signing no;
    };

    zone "example" {
        ...
        dnssec-policy default-dynamic;
    };

This also means that if you are going insecure with a dynamic zone,
the built-in "insecure" policy needs to be accompanied with
"inline-signing no;".
 2023-08-01 06:55:48 +00:00
Matthijs Mekking
6504b563cb Add release note and CHANGES for #3672 
"The king is dead. Long live the king."
 2023-07-20 12:44:19 +02:00
Matthijs Mekking
042c89ac69 Obsolete dnssec-update-mode 
We no longer support 'no-resign' and thus the configuration option
becomes obsolete. Remove the corresponding dnssec system test cases.
 2023-07-20 12:44:19 +02:00
Matthijs Mekking
3e49223a67 Obsolete dnssec-dnskey-kskonly update-check-ksk 
These two configuration options worked in conjunction with 'auto-dnssec'
to determine KSK usage, and thus are now obsoleted.

However, in the code we keep KSK processing so that when a zone is
reconfigured from using 'dnssec-policy' immediately to 'none' (without
going through 'insecure'), the zone is not immediately made bogus.

Add one more test case for going straight to none, now with a dynamic
zone (no inline-signing).
 2023-07-20 12:40:54 +02:00
Matthijs Mekking
88a687106f Obsolete sig-validity-interval dnskey-sig-validity 
These two configuration options worked in conjunction with 'auto-dnssec'
to set the signature validity, and thus are now obsoleted.
 2023-07-20 11:04:24 +02:00
Matthijs Mekking
10bb8f92a1 Remove auto-dnssec from documentation 
Update the ARM and DNSSEC guide, removing references to 'auto-dnssec',
replacing them with 'dnssec-policy' if needed.

The section "Alternative Ways" of signing has to be refactored, since
we now only focus on one alternative way, that is manual signing.
 2023-07-20 11:04:24 +02:00
Matthijs Mekking
71af4f4e0b Remove the auto-dnssec option 
Mark the "auto-dnssec" option ancient (effectively disallowing it from
the configuration).
 2023-07-20 11:04:23 +02:00
Tom Krizek
5b5d5f9f22 Merge tag 'v9.19.15' 2023-07-19 14:16:32 +02:00
Ondřej Surý
d9d2527a19
Add CHANGES and release note for [GL #4185] 2023-07-18 11:57:11 +02:00
Mark Andrews
cf923e4ad3 Add release note for [GL #4194] 2023-07-13 01:58:53 +00:00
Tom Krizek
c49bad79eb Set up release notes for BIND 9.19.16 2023-07-10 15:08:50 +02:00
Michał Kępień
80cc7f077c
Add release note for GL #4132, GL #4136, GL #4171 2023-07-06 15:38:48 +02:00
Michał Kępień
c2a298245f
Tweak and reword release notes 2023-07-06 15:38:48 +02:00
Michał Kępień
bc8ad4e807
Prepare release notes for BIND 9.19.15 2023-07-06 15:38:48 +02:00
Michał Kępień
09a4ffa1c8
Update sample query log excerpt in the ARM 2023-07-06 15:38:48 +02:00
Michał Kępień
13c35ab0b3 Add Google Site Verification tag to the TOC page 
This should allow tracking HTTP 404 errors for Read the Docs using the
Google Search Console.
 2023-06-29 18:32:50 +02:00
Mark Andrews
91cb94dcbb Add release note entry for [GL #4154] 2023-06-29 08:28:48 +10:00
Mark Andrews
2a71ed47a7 Add release note for [GL #3325] 2023-06-28 18:07:03 +10:00
Mark Andrews
dd00b3c50b Use NS rather than A records for qname-minimization relaxed 
Remove all references to DNS_FETCHOPT_QMIN_USE_A and adjust
the expected tests results in the qmin system test.
 2023-06-28 11:45:59 +10:00
Michal Nowak
71439d0c3a BIND 9.19.14 
-----BEGIN SSH SIGNATURE-----
 U1NIU0lHAAAAAQAAARcAAAAHc3NoLXJzYQAAAAMBAAEAAAEBANamVSTMToLcHCXRu1f52e
 tTJWV3T1GSVrPYXwAGe6EVC7m9CTl06FZ9ZG/ymn1S1++dk4ByVZXf6dODe2Mu0RuqGmyf
 MUEMKXVdj3cEQhgRaMjBXvIZoYAsQlbHO2BEttomq8PhrpLRizDBq4Bv2aThM0XN2QqSGS
 ozwYMcPiGUoMVNcVrC4ZQ+Cptb5C4liqAcpRqrSo8l1vcNg5b1Hk6r7NFPdx542gsGMLae
 wZrnKn3LWz3ZXTGeK2cRmBxm/bydiVSCsc9XjB+tWtIGUpQsfaXqZ7Hs6t+1f1vsnu88oJ
 oi1dRBo3YNRl49UiCukXWayQrPJa8wwxURS9W28JMAAAADZ2l0AAAAAAAAAAZzaGE1MTIA
 AAEUAAAADHJzYS1zaGEyLTUxMgAAAQAu10jzUEy+7ZqX04XsavbHCyBwIB35UXbDL4NdRR
 wxRd/9Fjid0bCKw87eWzf1xpJWjeVDHIiMFLVpMwizh63vZ2l2YqgU6hTjSqficY+KH8FQ
 xY4Vi3RlERGbe/HEy0elmXA1NL0WAlVfl/2obdS/cbOCQU8tozjUOWwHS7tKZAmAErJUyT
 vjPjwBkW1crAO6iM7DrzGe8Hy+1FFCpJzp1mAp7YHc7qD2eguRdNWe88UOb2Rq/vZz3YPJ
 6xj5LgqIr5QmzEli31GkDdqNFAdikZWvGKViYMIo4aFw/+agnn3QrnMcskUPESoY65IIT0
 FFa6kgzLQmCQqqopY98Byl
 -----END SSH SIGNATURE-----
gpgsig -----BEGIN SSH SIGNATURE-----
 U1NIU0lHAAAAAQAAARcAAAAHc3NoLXJzYQAAAAMBAAEAAAEBANamVSTMToLcHCXRu1f52e
 tTJWV3T1GSVrPYXwAGe6EVC7m9CTl06FZ9ZG/ymn1S1++dk4ByVZXf6dODe2Mu0RuqGmyf
 MUEMKXVdj3cEQhgRaMjBXvIZoYAsQlbHO2BEttomq8PhrpLRizDBq4Bv2aThM0XN2QqSGS
 ozwYMcPiGUoMVNcVrC4ZQ+Cptb5C4liqAcpRqrSo8l1vcNg5b1Hk6r7NFPdx542gsGMLae
 wZrnKn3LWz3ZXTGeK2cRmBxm/bydiVSCsc9XjB+tWtIGUpQsfaXqZ7Hs6t+1f1vsnu88oJ
 oi1dRBo3YNRl49UiCukXWayQrPJa8wwxURS9W28JMAAAADZ2l0AAAAAAAAAAZzaGE1MTIA
 AAEUAAAADHJzYS1zaGEyLTUxMgAAAQBnBEXJLIDrP/GdkUqz7Ni02bzO5/bIppEPfUefvN
 F4Nf0ltG8Vq8IHbh9FNG2mLDXONMFc5wO7ArT5YQfLBMMrh/SQ8m3saKxXJLo7/k4sAKn1
 A4W84NkXl3anAwRcZzITwBlKEl48GJcMGWFKLpfwxmOvsy1kBX1kGgnYvQmZnunIfSBYpf
 Xh4MIZz1QIlcJDBSMe6AnYTOvvN1CSrPeWBDbG5za5qu4TdIlTSA6zcqfSw8pOOzDnVMxt
 0hD38e9mkPnpAyS2OOI0eRQ3GMMF6kRY7F7elc6zVbG+PeoJOKBx79IoBe4fUq/632Husi
 OmT32VXIIEEkejnr0gxENA
 -----END SSH SIGNATURE-----

Merge tag 'v9.19.14'

BIND 9.19.14
 2023-06-21 19:31:57 +02:00
Tom Krizek
5893debf46
Remove trailing whitespace from all text files 
I've used the following command to remove the trailing whitespace for
all tracked text files:

git grep -Il '' | xargs sed -i 's/[ \t]*$//'
 2023-06-13 15:05:40 +02:00
Michal Nowak
a04301f936
Set up release notes for BIND 9.19.15 2023-06-12 16:12:40 +02:00
Michał Kępień
466530c73b
Add release note for #4049 2023-06-09 11:53:33 +02:00
Michał Kępień
f933f1856b
Reorder release notes 2023-06-09 11:53:33 +02:00
Michał Kępień
76877a83be
Tweak and reword release notes 2023-06-09 11:53:33 +02:00
Michał Kępień
1f48e1c998
Prepare release notes for BIND 9.19.14 2023-06-09 11:53:33 +02:00
Michał Kępień
350613af9d
Drop "Known Issues" entry for #4006 as it is fixed 2023-06-09 11:53:33 +02:00
Michał Kępień
f251588176
Add a missing word to the release note for #4004 2023-06-09 11:53:33 +02:00
Michal Nowak
1afde574e9
Set max-cache-size expectations for low values 2023-06-08 12:11:09 +02:00
Ondřej Surý
616bd7a96e
Add CHANGES and release note for [GL #4055] 2023-06-08 12:11:09 +02:00
Aram Sargsyan
27c30fe8a4 QryDropped stats counter documentation update 
Document which dropped queries are calculated by the QryDropped
statistics counter.
 2023-06-07 13:06:58 +00:00
Artem Boldariev
8672d54847
Update CHANGES and release note [GL #4038] 
Mention that memory usage was reduced by allocating properly sized
send buffers for stream-based transports.
 2023-06-06 13:40:42 +02:00
Aram Sargsyan
466a7d9b5f Add CHANGES and release notes for [GL #4074] 2023-06-01 08:14:31 +00:00
Michal Nowak
ddb846454d
Add Alpine Linux 3.18 2023-05-31 12:01:26 +02:00
Aram Sargsyan
08ebf39d1e Update the documentation of the resolver statistics counters 
The reference manual doesn't document all the available resolver
statistics counters. Add information about the missing counters.
 2023-05-31 09:08:58 +00:00
Evan Hunt
f58b9e9d2c CHANGES and release notes for [GL #4012] 2023-05-30 15:36:15 -07:00
Matthijs Mekking
23dbb6ba72 Add release note and changes for #3950 
Fixing another serve-stale bug is still news.
 2023-05-30 11:58:50 +02:00
Matthijs Mekking
7a39651da5 Add notes and change entry 2023-05-23 08:53:22 +02:00
Tom Krizek
fd889bf0ad
Add CHANGES and release note for [GL #3978] 2023-05-22 14:11:41 +02:00
Michal Nowak
2e0550970b
Add Fedora 38 2023-05-19 13:47:53 +02:00
Michał Kępień
ddbbb8612d BIND 9.19.13 
-----BEGIN PGP SIGNATURE-----
 
 iQJDBAABCgAtFiEENKwGS3ftSQfs1TU17QVz/8hFYQUFAmRY+ukPHG1pY2hhbEBp
 c2Mub3JnAAoJEO0Fc//IRWEFksoP/Rx7KTI4Htbh7+oE630S23Yi5NpxUVJWLEtV
 0fL97kg3Yq3/AIwYXs+Gr3GzsTOYGZAxYi/n7q+OyLBQjsigAegmdHGwyUzzr9yY
 o3WRi3GH/PH3CUg/Be6wh2y747b1O/aXRAAFf429Qe4IVX2iLcNveqVx6Z6otI9B
 pf7ZrqhK2Na5FCms58XfMbMLNDdZGaJ0/oWjtwnnbKEtAzMqsiAfLH67FfLL8L5H
 rymlHSpMSOZpBFv0m8aHMsf7tfFqL4ouOvOhiSpuyDLAkuvF5LUoKKpYUQOp7kj/
 9Bem2Yf1zCq8o2YdKGF/zPkK4sjga15JIC+E6qLY6gXPhyGiTwUJLocvx47nLds3
 PN9Q9y/AA79MOTN5yRD0EC/gkTYDolfZg0nkM6K3aM00DccUl0OeNZMj1dxYT3Vn
 JQxnoL9VPlKyaKxuqcDwl0IX7FSguYn6BPwVsSSHOfGqq6+MFHLdEOtxlSBVgV+2
 gnCMp3YkSwGs1rVu+zxr9DT0Gr2x+E5/Zv75Xaz1/z81FxZdYyyHTwR8MU+fSz/c
 yxD4TIOEhsaeuhwvzMIvHKwbQ68/vnKIesRPao+jtkrtQ+3l5b/XohWtPPqDGFtK
 rZ88HsnLVnL8BT0294/yYM/WJQaD7gKYSj0/VJkw3xslBW2JJiWzz9cseo0hLrTp
 52sp68Bt
 =sw5x
 -----END PGP SIGNATURE-----
gpgsig -----BEGIN SSH SIGNATURE-----
 U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAg25GGAuUyFX1gxo7QocNm8V6J/8
 frHSduYX7Aqk4iJLwAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
 AAAAQItgB8Uzd8nX/JAJsnR7vqOIyPjMA4+mq730TN43PBT/CFnQngS1ARI6VuXym/i4Mg
 a68t/1QoApXb4/5ESrwwA=
 -----END SSH SIGNATURE-----

Merge tag 'v9.19.13'

BIND 9.19.13
 2023-05-18 14:06:04 +02:00
Michal Nowak
ff52cd9604
Add OpenBSD 7.3 2023-05-15 18:55:38 +02:00
Michal Nowak
81ad645d7d
Add FreeBSD 13.2 2023-05-15 18:31:07 +02:00
Tony Finch
fc770a8bd0
Remove the now-unused ISC_STACK 
We are using the liburcu concurrent data structures instead.
 2023-05-12 20:49:43 +01:00
Tony Finch
05ca11e122
Remove isc_qsbr (we are using liburcu instead) 
This commit breaks the qp-trie code.
 2023-05-12 20:48:31 +01:00
Evan Hunt
0ee38f905f CHANGES and release note for part 2 of [GL #4046] 2023-05-12 11:29:16 -07:00
Ondřej Surý
575a976e48
Add CHANGES and release note for [GL #4045] 2023-05-12 13:26:00 +02:00
Matthijs Mekking
2a2f8b6b39 Add release note and CHANGES for cdnskey option 2023-05-11 17:07:51 +02:00