2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-02 23:55:27 +00:00
Commit Graph

2591 Commits

Author SHA1 Message Date
Tinderbox User
ec91dfaf80 regen master 2017-12-20 01:08:42 +00:00
Tinderbox User
9448aacadb regen master 2017-12-16 01:09:51 +00:00
Evan Hunt
79c2400d91 [master] allow primary/secondary as synonyms for master/slave
4848.	[func]		Zone types "primary" and "secondary" can now be used
			as synonyms for "master" and "slave" in named.conf.
			[RT #46713]
2017-12-15 01:47:05 -08:00
Evan Hunt
d40f4c9885 [master] clear out release notes so they can be repopulated for 9.13 2017-12-15 01:40:16 -08:00
Tinderbox User
ab6f49d969 regen master 2017-12-15 01:08:34 +00:00
Tinderbox User
e5ac12b76d regen master 2017-12-13 01:08:15 +00:00
Michał Kępień
e8bbb76620 [master] Correct the default value of print-time in ARM 2017-12-12 11:47:18 +01:00
Tinderbox User
71eec55e0d regen master 2017-12-09 01:09:51 +00:00
Evan Hunt
5ea0100639 [master] document "fixedpoint" 2017-12-07 18:59:52 -08:00
Tinderbox User
f9c3aba9b3 regen master 2017-12-06 17:32:49 +00:00
Tinderbox User
7308316d92 regen master 2017-12-06 01:09:54 +00:00
Mark Andrews
77f9623439 add [RT #46774] 2017-12-05 16:14:15 +11:00
Tinderbox User
6074bd498f regen master 2017-12-05 01:08:12 +00:00
Evan Hunt
b695f77533 [master] revised release note 2017-12-04 15:37:09 -08:00
Mark Andrews
9ff34db455 add note for [RT #46743] and [RT #46754] 2017-12-05 09:52:12 +11:00
Tinderbox User
a30f8d214d regenerate 2017-11-30 22:51:12 +00:00
Tinderbox User
0b315a0b25 regen master 2017-11-30 22:46:39 +00:00
Evan Hunt
e197a2bd15 [master] fix "allow-transfer" inheritance and clean up ACL configuration
4836.	[bug]		Zones created using "rndc addzone" could
			temporarily fail to inherit an "allow-transfer"
			ACL that had been configured in the options
			statement. [RT #46603]
2017-11-30 12:37:08 -08:00
Tinderbox User
0cba7ca6af regen master 2017-11-09 01:07:39 +00:00
Evan Hunt
f4b2356359 [master] remove extra comma 2017-11-08 09:31:25 -08:00
Tinderbox User
a1aa42b9cd regenerate 2017-11-08 17:28:38 +00:00
Tinderbox User
c999531fa4 regen master 2017-11-08 17:26:53 +00:00
Evan Hunt
00827f59d2 [master] revise incorrect release note 2017-11-08 09:18:29 -08:00
Tinderbox User
a41e41d6a4 regenerate 2017-11-07 21:48:23 +00:00
Tinderbox User
0e29543a3d regen master 2017-11-07 21:42:32 +00:00
Tinderbox User
72ddd51e74 regen master 2017-11-03 01:08:09 +00:00
Evan Hunt
c3d0ccdc8f [master] update logging categories in doc 2017-11-02 12:53:33 -07:00
Tinderbox User
f305a705c4 regenerate 2017-11-02 18:59:07 +00:00
Tinderbox User
490c321e25 regen master 2017-11-02 18:58:45 +00:00
Evan Hunt
e7b53943fe [master] copyrights 2017-11-02 11:50:43 -07:00
Evan Hunt
95dce4e68c [master] clarify doc on zone refresh and expiry 2017-11-01 23:06:20 -07:00
Evan Hunt
3b5718a8c9 [master] removed references to obsolete versions in documentation 2017-11-01 22:19:11 -07:00
Tinderbox User
40298d8bee regen master 2017-11-02 01:09:26 +00:00
Tinderbox User
9b3fc207df regen master 2017-11-01 01:09:07 +00:00
Tinderbox User
4ae8f28711 regen master 2017-10-30 01:08:21 +00:00
Mark Andrews
f5e1b555c5 4801. [func] 'dnssec-lookaside auto;' and 'dnssec-lookaside .
trust-anchor dlv.isc.org;' now elicit warnings rather
                        than being fatal configuration errors. [RT #46410]
2017-10-30 07:40:59 +11:00
Tinderbox User
497f3f913e regen master 2017-10-28 01:12:35 +00:00
Evan Hunt
c9f8165a06 [master] tag initializing keys
4798.	[func]		Keys specified in "managed-keys" statements
			are tagged as "initializing" until they have been
			updated by a key refresh query. If initialization
			fails it will be visible from "rndc secroots".
			[RT #46267]
2017-10-27 15:49:44 -07:00
Evan Hunt
1d57d460d4 [master] change rndc-confgen default algorithm
this completes change 4785. the CHANGES note has been revised:

4785.	[func]		The hmac-md5 algorithm is no longer recommended for
			use with RNDC keys.  The default in rndc-confgen
			is now hmac-sha256. [RT #42272]
2017-10-27 10:56:43 -07:00
Evan Hunt
959d294067 [master] remove isc-hmac-fixup
4797.	[func]		Removed "isc-hmac-fixup", as the versions of BIND that
			had the bug it worked around are long past end of
			life. [RT #46411]
2017-10-27 09:56:11 -07:00
Brian Conry
864bc6b56e [master] Increase the maximum TCP keepalive timeout to 65535
4796.	[bug]		Increase the maximum configurable TCP keepalive
			timeout to 65535. [RT #44710]
2017-10-27 14:58:48 +02:00
Evan Hunt
06049b1c6c [master] stats counter for priming queries
4795.	[func]		A new statistics counter has been added to track
			priming queries. [RT #46313]
2017-10-26 21:38:43 -07:00
Evan Hunt
3b4f23cdbf [master] dnssec-checkds -s
4794.	[func]		"dnssec-checkds -s" specifies a file from which
			to read a DS set rather than querying the parent.
			[RT #44667]
2017-10-26 21:05:11 -07:00
Tinderbox User
d3e8e9bdbb regen master 2017-10-26 01:09:30 +00:00
Evan Hunt
81570e84a2 [master] fix some documentation errors [RT #45527] 2017-10-25 11:02:26 -07:00
Evan Hunt
6a59e53a69 [master] fixed libdns doc
4791.	[doc]		Fixed outdated documentation about export libraries.
			[RT #46341]
2017-10-25 10:55:34 -07:00
Evan Hunt
eb2ef7b53e [master] check new-zones-directory
4789.	[cleanup]	Check writability of new-zones-directory. [RT #46308]
2017-10-25 01:19:46 -07:00
Evan Hunt
65314b0fd8 [master] "enable-filter-aaaa" no longer optional
4786.	[func]		The "filter-aaaa-on-v4" and "filter-aaaa-on-v6"
			options are no longer conditionally compiled.
			[RT #46340]
2017-10-25 00:33:51 -07:00
Tinderbox User
a53e03205a regen master 2017-10-25 01:08:58 +00:00
Evan Hunt
21761bfe79 [master] deprecate HMAC in dnssec-keygen, MD5 in rndc-confgen
4785.	[func]		The hmac-md5 algorithm is no longer recommended for
			use with RNDC keys. For compatibility reasons, it
			it is still the default algorithm in rndc-confgen,
			but this will be changed to hmac-sha256 in a future
			release. [RT #42272]

4784.	[func]		The use of dnssec-keygen to generate HMAC keys is
			deprecated in favor of tsig-keygen.  dnssec-keygen
			will print a warning when used for this purpose.
			All HMAC algorithms will be removed from
			dnssec-keygen in a future release. [RT #42272]
2017-10-24 15:35:13 -07:00