4801. [func] 'dnssec-lookaside auto;' and 'dnssec-lookaside .

trust-anchor dlv.isc.org;' now elicit warnings rather
                        than being fatal configuration errors. [RT #46410]
This commit is contained in:
Mark Andrews
2017-10-30 07:40:59 +11:00
parent 4e2ba60f3c
commit f5e1b555c5
8 changed files with 56 additions and 25 deletions

View File

@@ -464,15 +464,15 @@
<itemizedlist>
<listitem>
<para>
The ISC DNSSEC Lookaside Validation (DLV) service has been shut
down; all DLV records in the dlv.isc.org zone have been removed.
References to the service have been removed from BIND documentation.
Lookaside validation is no longer used by default by
<command>delv</command>. The DLV key has been removed from
<filename>bind.keys</filename>. Setting
<command>dnssec-lookaside</command> to
The ISC DNSSEC Lookaside Validation (DLV) service has
been shut down; all DLV records in the dlv.isc.org zone
have been removed. References to the service have been
removed from BIND documentation. Lookaside validation
is no longer used by default by <command>delv</command>.
The DLV key has been removed from <filename>bind.keys</filename>.
Setting <command>dnssec-lookaside</command> to
<command>auto</command> or to use dlv.isc.org as a trust
anchor is now a fatal configuration error. [RT #46155]
anchor results in a warning being issued.
</para>
</listitem>
<listitem>