mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 14:35:26 +00:00
Code Issues Releases Wiki Activity

Add Known Issue about config incompatibility

Browse Source
This commit is contained in:
Petr Špaček
2022-10-05 15:21:36 +02:00
parent 058c1744ba
commit 5589d0a49c
1 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
doc/notes/notes-current.rst
View File

@@ -20,7 +20,17 @@ Security Fixes
Known Issues
~~~~~~~~~~~~
- None.
- Upgrading from BIND 9.16.32, 9.18.6, or older, may require a manual
configuration change. The following configurations are affected:
- :any:`type primary` zones configured with :any:`dnssec-policy` but without
either :any:`allow-update` or :any:`update-policy`
- :any:`type secondary` zones configured with :any:`dnssec-policy`
In these cases please add :namedconf:ref:`inline-signing yes;
<inline-signing>` to individual zone configuration(s). Without applying this
change :iscman:`named` will fail to start. For more details see
https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
New Features
~~~~~~~~~~~~