ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Merge branch '4421-deprecate-AES-based-DNS-cookies' into 'main'

Browse Source 
Deprecate AES algorithm for DNS cookies

Closes #4421

See merge request isc-projects/bind9!8472
This commit is contained in:
Ondřej Surý
2023-11-13 15:00:48 +00:00
parent fd4ad5f0ba 2a3b3beaf1
commit 4ee7b803b6
3 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGES
View File

@@ -1,3 +1,5 @@
6282. [func] Deprecate AES-based DNS cookies. [GL #4421]
6281. [bug] Fix a data race in dns_tsigkeyring_dump(). [GL #4328]
6280. [bug] Fix missing newlines in the output of "rndc nta -dump".

3
doc/notes/notes-current.rst
View File

@@ -27,6 +27,9 @@ Removed Features
- None.
- The support for AES algorithm for DNS cookies has been deprecated.
:gl:`#4421`
Feature Changes
~~~~~~~~~~~~~~~

4
lib/isccfg/check.c
View File

@@ -1561,6 +1561,10 @@ check_options(const cfg_obj_t *options, const cfg_obj_t *config,
(void)cfg_map_get(options, "cookie-algorithm", &obj);
if (obj != NULL) {
ccalg = cfg_obj_asstring(obj);
if (strcasecmp(ccalg, "aes") == 0) {
cfg_obj_log(obj, logctx, ISC_LOG_WARNING,
"cookie-algorithm 'aes' is deprecated");
}
}
obj = NULL;