2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-22 10:10:06 +00:00

prep 9.17.0

The files configure.ac and version are already up to date.

Updated CHANGES with 9.17.0 release line.

Fixed CHANGES by adding GitLab reference to entry 5357 and fix
grammar mistakes.

Add missing /util/check-make-install.in to .gitattributes.

The lib/*/api are already updated to match the new ranges.

I listed two new features under BIND 9.17 features that to me
seemed noteworthy.

The release notes look good to me.
This commit is contained in:
Tinderbox User 2020-03-12 09:08:46 +00:00 committed by Matthijs Mekking
parent 2fafcc2c2d
commit 678b8d27d6
3 changed files with 15 additions and 7 deletions

1
.gitattributes vendored
View File

@ -7,4 +7,5 @@
/doc/dev export-ignore /doc/dev export-ignore
/util/** export-ignore /util/** export-ignore
/util/bindkeys.pl -export-ignore /util/bindkeys.pl -export-ignore
/util/check-make-install.in -export-ignore
/util/mksymtbl.pl -export-ignore /util/mksymtbl.pl -export-ignore

14
CHANGES
View File

@ -8,20 +8,21 @@
5367. [placeholder] 5367. [placeholder]
--- 9.17.0 released ---
5366. [bug] Fix a race condition with the keymgr when the same 5366. [bug] Fix a race condition with the keymgr when the same
zone plus dnssec-policy is configured in multiple zone plus dnssec-policy is configured in multiple
views. [GL #1653] views. [GL #1653]
5365. [bug] Algorithm rollover was stuck on submitting DS 5365. [bug] Algorithm rollover was stuck on submitting DS
because keymgr thought it would move to an invalid because keymgr thought it would move to an invalid
state. Fixed by when checking the current key, state. Fixed by checking the current key against
check it against the desired state, not the existing the desired state, not the existing state. [GL #1626]
state. [GL #1626]
5364. [bug] Algorithm rollover waited too long before introducing 5364. [bug] Algorithm rollover waited too long before introducing
zone signatures. It waited to make sure all signatures zone signatures. It waited to make sure all signatures
were resigned, but when introducing a new algorithm, were regenerated, but when introducing a new algorithm,
all signatures are resigned immediately. Only all signatures are regenerated immediately. Only
add the sign delay if there is a predecessor key. add the sign delay if there is a predecessor key.
[GL #1625] [GL #1625]
@ -53,7 +54,8 @@
5357. [bug] Newly added RRSIG records with expiry times before 5357. [bug] Newly added RRSIG records with expiry times before
the previous earliest expiry times might not be the previous earliest expiry times might not be
re-signed in time. The was a side effect of 5315. re-signed in time. This was a side effect of 5315.
[GL !3137]
5356. [func] Update dnssec-policy configuration statements: 5356. [func] Update dnssec-policy configuration statements:
- Rename "zone-max-ttl" dnssec-policy option to - Rename "zone-max-ttl" dnssec-policy option to

View File

@ -128,7 +128,12 @@ including your patch as an attachment, preferably generated by
### <a name="features"/> BIND 9.17 features ### <a name="features"/> BIND 9.17 features
BIND 9.17 is the newest development branch of BIND 9. It includes a BIND 9.17 is the newest development branch of BIND 9. It includes a
number of changes from BIND 9.16 and earlier releases. number of changes from BIND 9.16 and earlier releases. New features include:
* New option "max-ixfr-ratio" to limit the size of outgoing IXFR responses
before falling back to full zone transfers.
* "rndc nta -d" and "rndc secroots" now include "validate-except" entries
when listing negative trust anchors.
### <a name="build"/> Building BIND ### <a name="build"/> Building BIND