From ad94787cca8ae1d839e865189940045dabf43b9c Mon Sep 17 00:00:00 2001
From: Evan Hunt
Date: Fri, 8 Jun 2018 12:50:21 -0700
Subject: [PATCH] prepare 9.13.1 release
---
CHANGES | 2 +
README | 1 +
README.md | 1 +
bin/dnssec/dnssec-cds.8 | 2 +-
bin/dnssec/dnssec-cds.html | 2 +-
bin/dnssec/dnssec-dsfromkey.8 | 2 +-
bin/dnssec/dnssec-keyfromlabel.8 | 2 +-
bin/dnssec/dnssec-keyfromlabel.html | 2 +-
bin/dnssec/dnssec-keygen.8 | 2 +-
bin/dnssec/dnssec-keygen.html | 2 +-
bin/rndc/rndc.8 | 22 ++++--
bin/rndc/rndc.html | 28 ++++---
doc/arm/Bv9ARM.ch01.html | 2 +-
doc/arm/Bv9ARM.ch02.html | 2 +-
doc/arm/Bv9ARM.ch03.html | 2 +-
doc/arm/Bv9ARM.ch04.html | 36 +++++----
doc/arm/Bv9ARM.ch05.html | 113 ++++++++++++++++++---------
doc/arm/Bv9ARM.ch06.html | 42 +---------
doc/arm/Bv9ARM.ch07.html | 2 +-
doc/arm/Bv9ARM.ch08.html | 65 +++++++++++++--
doc/arm/Bv9ARM.ch09.html | 2 +-
doc/arm/Bv9ARM.ch10.html | 2 +-
doc/arm/Bv9ARM.ch11.html | 2 +-
doc/arm/Bv9ARM.ch12.html | 2 +-
doc/arm/Bv9ARM.html | 6 +-
doc/arm/Bv9ARM.pdf | Bin 1310533 -> 1310766 bytes
doc/arm/man.arpaname.html | 2 +-
doc/arm/man.ddns-confgen.html | 2 +-
doc/arm/man.delv.html | 2 +-
doc/arm/man.dig.html | 2 +-
doc/arm/man.dnssec-cds.html | 4 +-
doc/arm/man.dnssec-checkds.html | 2 +-
doc/arm/man.dnssec-coverage.html | 2 +-
doc/arm/man.dnssec-dsfromkey.html | 4 +-
doc/arm/man.dnssec-importkey.html | 2 +-
doc/arm/man.dnssec-keyfromlabel.html | 4 +-
doc/arm/man.dnssec-keygen.html | 4 +-
doc/arm/man.dnssec-keymgr.html | 2 +-
doc/arm/man.dnssec-revoke.html | 2 +-
doc/arm/man.dnssec-settime.html | 2 +-
doc/arm/man.dnssec-signzone.html | 2 +-
doc/arm/man.dnssec-verify.html | 2 +-
doc/arm/man.dnstap-read.html | 2 +-
doc/arm/man.host.html | 2 +-
doc/arm/man.mdig.html | 2 +-
doc/arm/man.named-checkconf.html | 2 +-
doc/arm/man.named-checkzone.html | 2 +-
doc/arm/man.named-journalprint.html | 2 +-
doc/arm/man.named-nzd2nzf.html | 2 +-
doc/arm/man.named-rrchecker.html | 2 +-
doc/arm/man.named.conf.html | 2 +-
doc/arm/man.named.html | 2 +-
doc/arm/man.nsec3hash.html | 2 +-
doc/arm/man.nslookup.html | 2 +-
doc/arm/man.nsupdate.html | 2 +-
doc/arm/man.pkcs11-destroy.html | 2 +-
doc/arm/man.pkcs11-keygen.html | 2 +-
doc/arm/man.pkcs11-list.html | 2 +-
doc/arm/man.pkcs11-tokens.html | 2 +-
doc/arm/man.rndc-confgen.html | 2 +-
doc/arm/man.rndc.conf.html | 2 +-
doc/arm/man.rndc.html | 30 ++++---
doc/arm/notes.html | 61 ++++++++++++++-
doc/arm/notes.pdf | Bin 61123 -> 69076 bytes
doc/arm/notes.txt | 41 +++++++++-
doc/misc/options | 1 +
lib/bind9/api | 2 +-
lib/dns/api | 2 +-
lib/isc/api | 2 +-
lib/isccfg/api | 4 +-
lib/ns/api | 4 +-
version | 2 +-
72 files changed, 379 insertions(+), 194 deletions(-)
diff --git a/CHANGES b/CHANGES
index 5e10b9dc99..e06bf62a3b 100644
--- a/CHANGES
+++ b/CHANGES
@@ -16,6 +16,8 @@
4969. [cleanup] Refactor zone logging functions. [GL #269]
+ --- 9.13.1 released ---
+
4968. [bug] If glue records are signed, attempt to validate them.
[GL #209]
diff --git a/README b/README
index 702af86c0b..8f4315eb58 100644
--- a/README
+++ b/README
@@ -104,6 +104,7 @@ BIND 9.13 features
BIND 9.13 is the newest development branch of BIND 9. It includes a number
of changes from BIND 9.12 and earlier releases. New features include:
+ * The default value of "dnssec-validation" is now "auto".
* Support for IDNA2008 when linking with libidn2.
* "Root key sentinel" support, enabling validating resolvers to indicate
via a special query which trust anchors are configured for the root
diff --git a/README.md b/README.md
index 58bd522a0a..17a4ce6368 100644
--- a/README.md
+++ b/README.md
@@ -122,6 +122,7 @@ BIND 9.13 is the newest development branch of BIND 9. It includes a
number of changes from BIND 9.12 and earlier releases. New features
include:
+* The default value of "dnssec-validation" is now "auto".
* Support for IDNA2008 when linking with `libidn2`.
* "Root key sentinel" support, enabling validating resolvers to indicate
via a special query which trust anchors are configured for the root zone.
diff --git a/bin/dnssec/dnssec-cds.8 b/bin/dnssec/dnssec-cds.8
index 2eaa5318e8..2048dcec58 100644
--- a/bin/dnssec/dnssec-cds.8
+++ b/bin/dnssec/dnssec-cds.8
@@ -102,7 +102,7 @@ Specify a digest algorithm to use when converting CDNSKEY records to DS records\
.sp
The
\fIalgorithm\fR
-must be one of SHA\-1 (SHA1), SHA\-256 (SHA256), GOST, or SHA\-384 (SHA384)\&. These values are case insensitive\&. If no algorithm is specified, the default is SHA\-256\&.
+must be one of SHA\-1 (SHA1), SHA\-256 (SHA256), or SHA\-384 (SHA384)\&. These values are case insensitive\&. If no algorithm is specified, the default is SHA\-256\&.
.RE
.PP
\-c \fIclass\fR
diff --git a/bin/dnssec/dnssec-cds.html b/bin/dnssec/dnssec-cds.html
index c4639d1bcb..cadb69607f 100644
--- a/bin/dnssec/dnssec-cds.html
+++ b/bin/dnssec/dnssec-cds.html
@@ -130,7 +130,7 @@
The algorithm
must be one of SHA-1
- (SHA1), SHA-256 (SHA256), GOST, or SHA-384 (SHA384). These
+ (SHA1), SHA-256 (SHA256), or SHA-384 (SHA384). These
values are case insensitive. If no algorithm is specified,
the default is SHA-256.
diff --git a/bin/dnssec/dnssec-dsfromkey.8 b/bin/dnssec/dnssec-dsfromkey.8
index 942c657b7a..173ac49d93 100644
--- a/bin/dnssec/dnssec-dsfromkey.8
+++ b/bin/dnssec/dnssec-dsfromkey.8
@@ -64,7 +64,7 @@ Use SHA\-256 as the digest algorithm\&.
.RS 4
Select the digest algorithm\&. The value of
\fBalgorithm\fR
-must be one of SHA\-1 (SHA1), SHA\-256 (SHA256), GOST or SHA\-384 (SHA384)\&. These values are case insensitive\&.
+must be one of SHA\-1 (SHA1), SHA\-256 (SHA256) or SHA\-384 (SHA384)\&. These values are case insensitive\&.
.RE
.PP
\-C
diff --git a/bin/dnssec/dnssec-keyfromlabel.8 b/bin/dnssec/dnssec-keyfromlabel.8
index d444567da7..ebc20c17f9 100644
--- a/bin/dnssec/dnssec-keyfromlabel.8
+++ b/bin/dnssec/dnssec-keyfromlabel.8
@@ -55,7 +55,7 @@ of the key is specified on the command line\&. This must match the name of the z
.RS 4
Selects the cryptographic algorithm\&. The value of
\fBalgorithm\fR
-must be one of RSAMD5, RSASHA1, DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512, ECCGOST, ECDSAP256SHA256, ECDSAP384SHA384, ED25519 or ED448\&.
+must be one of RSAMD5, RSASHA1, DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512, ECDSAP256SHA256, ECDSAP384SHA384, ED25519 or ED448\&.
.sp
If no algorithm is specified, then RSASHA1 will be used by default, unless the
\fB\-3\fR
diff --git a/bin/dnssec/dnssec-keyfromlabel.html b/bin/dnssec/dnssec-keyfromlabel.html
index 05e32c9fce..d25dcebd62 100644
--- a/bin/dnssec/dnssec-keyfromlabel.html
+++ b/bin/dnssec/dnssec-keyfromlabel.html
@@ -90,7 +90,7 @@
Selects the cryptographic algorithm. The value of
algorithm
must be one of RSAMD5, RSASHA1,
- DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512, ECCGOST,
+ DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512,
ECDSAP256SHA256, ECDSAP384SHA384, ED25519 or ED448.
diff --git a/bin/dnssec/dnssec-keygen.8 b/bin/dnssec/dnssec-keygen.8
index 0aef038c8e..5300ed81a1 100644
--- a/bin/dnssec/dnssec-keygen.8
+++ b/bin/dnssec/dnssec-keygen.8
@@ -62,7 +62,7 @@ may be preferable to direct use of
.RS 4
Selects the cryptographic algorithm\&. For DNSSEC keys, the value of
\fBalgorithm\fR
-must be one of RSAMD5, RSASHA1, DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512, ECCGOST, ECDSAP256SHA256, ECDSAP384SHA384, ED25519 or ED448\&. For TKEY, the value must be DH (Diffie Hellman); specifying his value will automatically set the
+must be one of RSAMD5, RSASHA1, DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512, ECDSAP256SHA256, ECDSAP384SHA384, ED25519 or ED448\&. For TKEY, the value must be DH (Diffie Hellman); specifying his value will automatically set the
\fB\-T KEY\fR
option as well\&.
.sp
diff --git a/bin/dnssec/dnssec-keygen.html b/bin/dnssec/dnssec-keygen.html
index 19e3e83b4b..fe28bb439e 100644
--- a/bin/dnssec/dnssec-keygen.html
+++ b/bin/dnssec/dnssec-keygen.html
@@ -100,7 +100,7 @@
Selects the cryptographic algorithm. For DNSSEC keys, the value
of algorithm
must be one of RSAMD5, RSASHA1,
- DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512, ECCGOST,
+ DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512,
ECDSAP256SHA256, ECDSAP384SHA384, ED25519 or ED448. For
TKEY, the value must be DH (Diffie Hellman); specifying
his value will automatically set the -T KEY
diff --git a/bin/rndc/rndc.8 b/bin/rndc/rndc.8
index c8b4be5aa4..ca2daec1b1 100644
--- a/bin/rndc/rndc.8
+++ b/bin/rndc/rndc.8
@@ -524,13 +524,25 @@ See also
\fBrndc managed\-keys\fR\&.
.RE
.PP
-\fBserve\-stale ( on | off | status | reset ) \fR\fB[\fIclass\fR [\fIview\fR]]\fR
+\fBserve\-stale ( on | off | reset | status ) \fR\fB[\fIclass\fR [\fIview\fR]]\fR
.RS 4
-Enable, disable, or reset the serving of stale answers as configured in named\&.conf\&. Serving of stale answers will remain disabled across
-named\&.conf
-reloads if disabled via rndc until it is reset via rndc\&.
+Enable, disable, reset, or report the current status of the serving of stale answers as configured in
+named\&.conf\&.
.sp
-Status will report whether serving of stale answers is currently enabled, disabled or not configured for a view\&. If serving of stale records is configured then the values of stale\-answer\-ttl and max\-stale\-ttl are reported\&.
+If serving of stale answers is disabled by
+\fBrndc\-serve\-stale off\fR, then it will remain disabled even if
+\fBnamed\fR
+is reloaded or reconfigured\&.
+\fBrndc serve\-stale reset\fR
+restores the setting as configured in
+named\&.conf\&.
+.sp
+\fBrndc serve\-stale status\fR
+will report whether serving of stale answers is currently enabled, disabled by the configuration, or disabled by
+\fBrndc\fR\&. It will also report the values of
+\fBstale\-answer\-ttl\fR
+and
+\fBmax\-stale\-ttl\fR\&.
.RE
.PP
\fBshowzone \fR\fB\fIzone\fR\fR\fB \fR\fB[\fIclass\fR [\fIview\fR]]\fR\fB \fR
diff --git a/bin/rndc/rndc.html b/bin/rndc/rndc.html
index adc67481b5..97b77cb8dc 100644
--- a/bin/rndc/rndc.html
+++ b/bin/rndc/rndc.html
@@ -664,20 +664,28 @@
See also rndc managed-keys.
-serve-stale ( on | off | status | reset ) [class
[view
]]
+serve-stale ( on | off | reset | status ) [class
[view
]]
- Enable, disable, or reset the serving of stale answers
- as configured in named.conf. Serving of stale answers
- will remain disabled across named.conf
- reloads if disabled via rndc until it is reset via rndc.
+ Enable, disable, reset, or report the current status
+ of the serving of stale answers as configured in
+ named.conf
.
- Status will report whether serving of stale answers is
- currently enabled, disabled or not configured for a
- view. If serving of stale records is configured then
- the values of stale-answer-ttl and max-stale-ttl are
- reported.
+ If serving of stale answers is disabled by
+ rndc-serve-stale off, then it
+ will remain disabled even if named
+ is reloaded or reconfigured.
+ rndc serve-stale reset restores
+ the setting as configured in named.conf
.
+
+
+ rndc serve-stale status will report
+ whether serving of stale answers is currently enabled,
+ disabled by the configuration, or disabled by
+ rndc. It will also report the
+ values of stale-answer-ttl and
+ max-stale-ttl.
showzone zone
[class
[view
]]
diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html
index dd9928894e..d3bcf3cd74 100644
--- a/doc/arm/Bv9ARM.ch01.html
+++ b/doc/arm/Bv9ARM.ch01.html
@@ -614,6 +614,6 @@
-BIND 9.13.0 (Development Release)
+BIND 9.13.1 (Development Release)