mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-08-27 04:28:33 +00:00
73 lines
2.4 KiB
ReStructuredText
73 lines
2.4 KiB
ReStructuredText
.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
..
|
|
.. SPDX-License-Identifier: MPL-2.0
|
|
..
|
|
.. This Source Code Form is subject to the terms of the Mozilla Public
|
|
.. License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
..
|
|
.. See the COPYRIGHT file distributed with this work for additional
|
|
.. information regarding copyright ownership.
|
|
|
|
Notes for BIND 9.19.14
|
|
----------------------
|
|
|
|
Security Fixes
|
|
~~~~~~~~~~~~~~
|
|
|
|
- None.
|
|
|
|
New Features
|
|
~~~~~~~~~~~~
|
|
|
|
- Add support for multi-signer model 2 (RFC 8901) when using
|
|
``inline-signing``. :gl:`#2710`
|
|
|
|
- A new option to :any:`dnssec-policy` has been added, :any:`cdnskey`, that
|
|
allows you to enable or disable the publication of CDNSKEY records.
|
|
:gl:`#4050`
|
|
|
|
- The read timeout in ``rndc`` can now be specified on the command line
|
|
using the ``-t`` option, allowing commands that take a long time to
|
|
complete sufficient time to do so. :gl:`#4046`
|
|
|
|
- The system test suite can now be executed with pytest (along with
|
|
pytest-xdist for parallel execution). :gl:`#3978`
|
|
|
|
Removed Features
|
|
~~~~~~~~~~~~~~~~
|
|
|
|
- Special-case code that was originally added to allow GSS-TSIG to work
|
|
around bugs in the Windows 2000 version of Active Directory has now
|
|
been removed since Windows 2000 is long past end-of-life.
|
|
The ``nsupdate -o`` option and the ``oldgsstsig`` command to ``nsupdate``
|
|
have been deprecated, and are now treated as synonyms for ``nsupdate -g``
|
|
and ``gsstsig`` respectively. :gl:`#4012`
|
|
|
|
Feature Changes
|
|
~~~~~~~~~~~~~~~
|
|
|
|
- Improve the responsiveness of the ``named`` serving as an authoritative DNS
|
|
server for a delegation-heavy zone(s) shortly after loading such zone(s).
|
|
:gl:`#4045`
|
|
|
|
Bug Fixes
|
|
~~~~~~~~~
|
|
|
|
- When the :any:`stale-answer-enable` option was enabled and the
|
|
:any:`stale-answer-client-timeout` option was enabled and larger than 0,
|
|
``named`` was taking two places from the :any:`clients-per-query` limit for
|
|
each client and was failing to gradually auto-tune its value, as configured.
|
|
This has been fixed. :gl:`#4074`
|
|
|
|
- It could happen that after the :any:`stale-answer-client-timeout` duration,
|
|
a delegation from cache was returned to the client. This has now been fixed.
|
|
:gl:`#3950`
|
|
|
|
Known Issues
|
|
~~~~~~~~~~~~
|
|
|
|
- There are no new known issues with this release. See :ref:`above
|
|
<relnotes_known_issues>` for a list of all known issues affecting this
|
|
BIND 9 branch.
|