ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Add change entry and release note for #3486

Browse Source 
News worthy.
This commit is contained in:
Matthijs Mekking
2022-08-10 16:52:53 +02:00
parent 6e534c1cd1
commit 4f2a15b52a
2 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
CHANGES
View File

@@ -1,3 +1,6 @@
5947. [func] Change dnssec-policy to allow graceful transition from
an NSEC only zone to NSEC3. [GL #3486]
5946. [bug] Fix statistics channel's handling of multiple HTTP
requests in a single connection which have non-empty
request bodies. [GL #3463]

6
doc/notes/notes-current.rst
View File

@@ -38,6 +38,12 @@ Feature Changes
- Zones using ``dnssec-policy`` now require dynamic DNS or
``inline-signing`` to be configured explicitly :gl:`#3381`.
- When reconfiguring ``dnssec-policy`` from using NSEC with an NSEC-only DNSKEY
algorithm (e.g. RSASHA1) to a policy that uses NSEC3, BIND will no longer fail
to sign the zone, but keep using NSEC for a little longer until the offending
DNSKEY records have been removed from the zone, then switch to using NSEC3.
:gl:`#3486`
Bug Fixes
~~~~~~~~~