mirror of
https://github.com/isc-projects/bind9.git
synced 2026-06-10 20:00:00 -04:00
992f815770
This commit adds the ability to specify allowed TLS protocols versions within the "tls" clause. If an unsupported TLS protocol version is specified in a file, the configuration file will not pass verification. Also, this commit adds strict checks for "tls" clauses verification, in particular: - it ensures that loading configuration files containing duplicated "tls" clauses is not allowed; - it ensures that loading configuration files containing "tls" clauses missing "cert-file" or "key-file" is not allowed; - it ensures that loading configuration files containing "tls" clauses named as "ephemeral" or "none" is not allowed. |
||
|---|---|---|
| .. | ||
| .gitattributes | ||
| .gitignore | ||
| advanced.rst | ||
| catz.rst | ||
| conf.py | ||
| configuration.rst | ||
| dlz.rst | ||
| dnssec-guide.rst | ||
| dnssec.rst | ||
| dyndb.rst | ||
| general.rst | ||
| history.rst | ||
| index.rst | ||
| introduction.rst | ||
| isc-logo.pdf | ||
| logging-categories.rst | ||
| Makefile.am | ||
| managed-keys.rst | ||
| manpages.rst | ||
| notes.rst | ||
| pkcs11.rst | ||
| plugins.rst | ||
| reference.rst | ||
| requirements.rst | ||
| requirements.txt | ||
| security.rst | ||
| troubleshooting.rst | ||