ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Add change and release notes [#2710]

Browse Source
This commit is contained in:
Matthijs Mekking
2021-07-13 17:34:30 +02:00
parent 577bf913b9
commit ba5869943d
2 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
CHANGES
View File

@@ -1,9 +1,15 @@
5681. [func] Relax the "zone_cdscheck" function to allow CDS and
CDNSKEY records in the zone that do not match an
existing DNSKEY record, so long as the algorithm
does match. This allows a clean rollover from one
provider to another in a multi-signer DNSSEC
configuration. [GL #2710].
5680. [bug] Fix a crash in DoH code caused by GET requests without
query strings. [GL !5268]
5679. [bug] Disable setting the thread affinity. [GL #2822]
5678. [bug] The "check DS" code failed to release all resources upon
named shutdown when a refresh was in progress. This has
been fixed. [GL #2811]

6
doc/notes/notes-current.rst
View File

@@ -64,6 +64,12 @@ Feature Changes
that incorrectly echo back the query message with the RCODE field
set to FORMERR and the QR bit set to 1. :gl:`#2249`
- CDS and CDNSKEY records may now be published in a zone without the
requirement that they exactly match an existing DNSKEY record, so long
the zone is signed with an algorithm represented in the CDS or CDNSKEY
record. This allows a clean rollover from one DNS provider to another
when using a multiple-signer DNSSEC configuration. :gl:`#2710`
Bug Fixes
~~~~~~~~~