Michał Kępień
d30902f9cf
Merge tag 'v9.18.20' into bind-9.18
2023-11-15 14:57:53 +01:00
Michal Nowak
59b2452c7a
Add Fedora 39
...
(cherry picked from commit cdb4b97b28 )
2023-11-14 19:34:52 +01:00
Michał Kępień
87c0ac8cf9
Prepare release notes for BIND 9.18.20
2023-11-09 13:10:33 +01:00
Michał Kępień
d50b55ef6d
Tweak CVE-2021-25219 reference
2023-11-09 13:10:33 +01:00
Ondřej Surý
ac63acdb3b
Split the CPU architectures into more categories
...
Move i386 and other less common or ancient CPU architectures to
Community-Maintened category. Move armhf and arm64 to the Best-Effort
category as we do test them as part of development work (new MacBooks
are all arm64), we don't really do full set of tests in the CI.
(cherry picked from commit db94c7526c )
2023-11-08 13:01:40 +01:00
Michal Nowak
0c3bd09595
Add OpenBSD 7.4
...
(cherry picked from commit f8733fc051 )
2023-10-30 12:12:50 +01:00
Michal Nowak
6d100c4a32
Drop Ubuntu 18.04 "bionic"
...
Ubuntu 18.04 LTS (Bionic Beaver) is EOL.
Move gcc:bionic:amd64-specific CFLAGS and EXTRA_CONFIGURE to
gcc:jammy:amd64.
2023-10-23 11:47:01 +02:00
Petr Špaček
43f39a266a
Describe BIND threat model
...
Basically all local data is considered trusted, and proper ACLs and
limits need to be explicitly configured. We are also free to let
protocol non-compliant servers burn in flames.
(cherry picked from commit fc907baa7f )
2023-10-13 09:26:57 +02:00
Petr Špaček
241de55536
Fix no-case-compress description in the ARM
...
We confused ourselves, it seems.
(cherry picked from commit 6451462a93 )
2023-10-03 14:37:16 +02:00
Michal Nowak
5477f97643
Add a Sphinx role for linking CVEs to the ISC Knowledgebase
...
The new :cve: Sphinx role takes a CVE number as an argument and creates
a hyperlink to the relevant ISC Knowledgebase document that might have
more up-to-date or verbose information than the relevant release note.
This makes reaching ISC Knowledgebase pages directly from the release
notes easier.
Make all CVE references in the release notes use the new Sphinx role.
(cherry picked from commit 41b857e567 )
2023-09-21 14:24:24 +02:00
Michał Kępień
fa7fc9084f
Update Sphinx and sphinx_rtd_theme
...
Update Sphinx-related Python packages to their current versions pulled
in by "pip install sphinx-rtd-theme" run in a fresh virtual environment.
(cherry picked from commit 2f879cdec3 )
2023-09-20 17:21:50 +02:00
Michał Kępień
2f08b622bf
Merge tag 'v9.18.19' into bind-9.18
2023-09-20 16:52:16 +02:00
Michal Nowak
32822140b5
Prepare release notes for BIND 9.18.19
2023-09-08 12:22:38 +02:00
Ondřej Surý
c9d6f0e400
Deprecate 'dnssec-must-be-secure' option
...
The dnssec-must-be-secure feature was added in the early days of BIND 9
and DNSSEC and it makes sense only as a debugging feature.
Remove the feature to simplify the code.
(cherry picked from commit 9e0b348a2b )
2023-09-04 17:27:14 +02:00
Matthijs Mekking
44cd3788ac
Explain lifetime format
...
Add the text "TTL-style unit suffixes or ISO 8601 duration formats",
just like we do at other places that are duration option types.
Also, in the dnssec-policy "keys" example, use a TTL-style unit too.
(cherry picked from commit b5a757c452 )
2023-09-01 10:18:31 +02:00
Matthijs Mekking
a3f94bf002
Add a glossary definition for duration
...
We don't yet explain the syntax of TTL-style suffixes or ISO 8601
duration formats.
(cherry picked from commit cc122d22b4 )
2023-09-01 10:18:31 +02:00
Matthijs Mekking
caf5eeb141
Fix keys reference link in ARM
...
There's a statement that says: "Here is an example (for illustration
purposes only) of some possible entries in a [keys] list:", and that
links to the wrong "keys" statement (it links to the TSIG keys section).
Remove the reference, as we are already in the right section.
(cherry picked from commit 07c70ea2bd )
2023-09-01 10:18:31 +02:00
Tom Krizek
8bd5468fb7
Update sphinx_rtd_theme
...
To resolve the version select and search issue on readthedocs.org,
sphinx_rtd_theme>=1.2.1 is required.
Related https://github.com/readthedocs/sphinx_rtd_theme/issues/1452
(cherry picked from commit 92143fa960 )
2023-08-29 10:11:08 +02:00
Michal Nowak
84911e693b
Reintroduce Debian 11 "bullseye" Clang and GCC jobs
...
(cherry picked from commit 5e1120d9a3 )
2023-08-21 17:25:41 +02:00
Michal Nowak
eebe045d46
Make Debian 12 "bookworm" the base image
...
Just replace "bullseye" with "bookworm" and reintroduce Debian 11
"bullseye" later.
(cherry picked from commit 2d18c57c54 )
2023-08-21 17:24:30 +02:00
Michał Kępień
223fcb0fe2
Merge tag 'v9.18.18' into bind-9.18
2023-08-17 14:14:42 +02:00
Michał Kępień
682f018150
Prepare release notes for BIND 9.18.18
2023-08-04 11:08:44 +02:00
Evan Hunt
3cc1e5e12a
deprecate "dialup" and "heartbeat-interval"
...
these options concentrate zone maintenance actions into
bursts for the benefit of servers with intermittent connections.
that's no longer something we really need to optimize.
(cherry picked from commit eeeccec67c )
2023-08-01 18:41:49 -07:00
Tom Krizek
42d7c0e92a
Merge tag 'v9.18.17' into bind-9.18
2023-07-19 14:36:57 +02:00
Tom Krizek
5512e8fd6b
Synchronize Sphinx package version on ReadTheDocs with our CI
...
Related: isc-projects/images!228
2023-07-18 16:17:36 +02:00
Michał Kępień
01491c5a29
Prepare release notes for BIND 9.18.17
2023-07-06 15:46:16 +02:00
Michał Kępień
e237ab6614
Update sample query log excerpt in the ARM
2023-07-06 15:46:16 +02:00
Michał Kępień
83e811f518
Add Google Site Verification tag to the TOC page
...
This should allow tracking HTTP 404 errors for Read the Docs using the
Google Search Console.
(cherry picked from commit 13c35ab0b3 )
2023-06-29 18:48:31 +02:00
Mark Andrews
b3a97da7a7
Use NS rather than A records for qname-minimization relaxed
...
Remove all references to DNS_FETCHOPT_QMIN_USE_A and adjust
the expected tests results in the qmin system test.
(cherry picked from commit dd00b3c50b )
2023-06-28 12:31:49 +02:00
Michal Nowak
d527fca768
BIND 9.18.16
...
-----BEGIN SSH SIGNATURE-----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-----END SSH SIGNATURE-----
gpgsig -----BEGIN SSH SIGNATURE-----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-----END SSH SIGNATURE-----
Merge tag 'v9.18.16' into bind-9.18
BIND 9.18.16
2023-06-21 19:51:22 +02:00
Tom Krizek
644a0b80c8
Remove trailing whitespace from all text files
...
I've used the following command to remove the trailing whitespace for
all tracked text files:
git grep -Il '' | xargs sed -i 's/[ \t]*$//'
2023-06-13 16:13:16 +02:00
Michal Nowak
ddfa545022
Prepare release notes for BIND 9.18.16
2023-06-09 15:17:23 +02:00
Michal Nowak
ec72e11ee4
Set max-cache-size expectations for low values
2023-06-08 11:47:04 +02:00
Aram Sargsyan
dd2973996f
QryDropped stats counter documentation update
...
Document which dropped queries are calculated by the QryDropped
statistics counter.
(cherry picked from commit 27c30fe8a4 )
2023-06-07 14:01:46 +00:00
Aram Sargsyan
b6eec9ee51
Update the documentation of the resolver statistics counters
...
The reference manual doesn't document all the available resolver
statistics counters. Add information about the missing counters.
(cherry picked from commit 08ebf39d1e )
2023-05-31 11:07:08 +00:00
Michal Nowak
46e98810d7
Add Alpine Linux 3.18
...
(cherry picked from commit ddb846454d )
2023-05-31 12:03:52 +02:00
Evan Hunt
88383aa158
mark 'tkey-dhkey' as deprecated
...
Diffie-Hellman TKEY mode has been removed for 9.20.
2023-05-28 00:55:34 -07:00
Michal Nowak
465a797014
Add Fedora 38
...
(cherry picked from commit 2e0550970b )
2023-05-19 13:56:34 +02:00
Michał Kępień
c65a405827
BIND 9.18.15
...
-----BEGIN PGP SIGNATURE-----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=GAly
-----END PGP SIGNATURE-----
gpgsig -----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAg25GGAuUyFX1gxo7QocNm8V6J/8
frHSduYX7Aqk4iJLwAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQLBbARmD2V81bh+bmta6Lr54aeUBWyJQHV6U+AZRN42Nh7cQmxIW5fi0wY3xn7L+LH
2+uAPTqPDkAaUVzwcgYgI=
-----END SSH SIGNATURE-----
Merge tag 'v9.18.15' into bind-9.18
BIND 9.18.15
2023-05-18 14:10:33 +02:00
Michal Nowak
1cf4231d29
Add OpenBSD 7.3
...
(cherry picked from commit ff52cd9604 )
2023-05-15 19:47:23 +02:00
Michal Nowak
3af5c8badb
Add FreeBSD 13.2
...
(cherry picked from commit 81ad645d7d )
2023-05-15 18:33:02 +02:00
Michał Kępień
0841eadd59
Prepare release notes for BIND 9.18.15
2023-05-09 12:36:44 +02:00
JP Mens
6862b5724e
Fix typo in the ARM - missed -> missing
...
(cherry picked from commit 7bfffa1bd8 )
2023-04-24 17:12:23 +02:00
Ondřej Surý
fa2cb06c75
Implement maximum global and idle time for incoming XFR
...
After the dns_xfrin was changed to use network manager, the maximum
global (max-transfer-time-in) and idle (max-transfer-idle-in) times for
incoming transfers were turned inoperational because of missing
implementation.
Restore this functionality by implementing the timers for the incoming
transfers.
(cherry picked from commit d2377f8e04 )
2023-04-21 17:21:32 +02:00
Michał Kępień
cdff6bb8ba
BIND 9.18.14
...
-----BEGIN PGP SIGNATURE-----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=Dd5k
-----END PGP SIGNATURE-----
gpgsig -----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAg25GGAuUyFX1gxo7QocNm8V6J/8
frHSduYX7Aqk4iJLwAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQLjSdQAEA9BtnuRMc+PyXOf1nJ3a7PzJdCxHmt17rklHis408vm9RQx1miTBAh160G
Ci+PsFDy1x8aOPLkobbwU=
-----END SSH SIGNATURE-----
Merge tag 'v9.18.14' into bind-9.18
BIND 9.18.14
2023-04-20 12:52:22 +02:00
Petr Špaček
59c5d95290
Prepare release notes for BIND 9.18.14
2023-04-11 17:25:37 +02:00
Petr Špaček
9659d40148
Remove erroneous cross-references to suffix statement
...
Logging section referenced to "suffix" statement definition for dns64.
(cherry picked from commit 1dada31187 )
2023-04-05 16:03:24 +02:00
Ondřej Surý
01b578f67e
Clarify the documentation about DF-flag
...
Remove the reference to setting the DF-flag as we don't do that right
now. Rephrase the paragraph that the default value should not be
causing fragmentation.
(cherry picked from commit 61f276d5a4 )
2023-04-03 12:29:07 +02:00
Tom Krizek
86d23a1d9c
Apply suppress_grammar directive in ARM docs
...
With a newline before the :suppress_grammar: directive, it wasn't
actually interpreted as a directive, but rather as node content.
Therefore, the directive was ignored and the grammar was incorrectly
printed out.
(cherry picked from commit 36a5c098bd )
2023-03-27 17:08:31 +02:00
Tom Krizek
90842d1f8d
Add missing newline in documentation code example
...
(cherry picked from commit 1849c02606 )
2023-03-27 17:08:29 +02:00