ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Add change and release note for #3381

Browse Source 
Because folks want to know.

(cherry picked from commit 2b95c11905a1a5faff9efa97a4f2498aadfa467b)
This commit is contained in:
Matthijs Mekking
2022-06-07 15:44:36 +02:00
parent 5c4c32114f
commit b232fabe89
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
CHANGES
View File

@@ -34,6 +34,9 @@
5942. [bug] Fix tkey.c:buildquery() function's error handling by
adding the missing cleanup code. [GL #3492]
5941. [func] Zones with dnssec-policy now require dynamic DNS or
inline-siging to be configured explicitly. [GL #3381]
5938. [bug] An integer type overflow could cause an assertion
failure when freeing memory. [GL #3483]

3
doc/notes/notes-current.rst
View File

@@ -35,7 +35,8 @@ Removed Features
Feature Changes
~~~~~~~~~~~~~~~
- None.
- Zones using ``dnssec-policy`` now require dynamic DNS or
``inline-signing`` to be configured explicitly :gl:`#3381`.
- When reconfiguring ``dnssec-policy`` from using NSEC with an NSEC-only DNSKEY
algorithm (e.g. RSASHA1) to a policy that uses NSEC3, BIND will no longer fail