ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
39,543 Commits 589 Branches 805 Tags
1e0f77b349ba6487e4026b648eac47400a97f6ab
Commit Graph

7117 Commits

Author SHA1 Message Date
Matthijs Mekking
1e0f77b349 Remove redundant inline-signing lines from docs 
Now that inline-signing is explicitly set in dnssec-policy, remove
the redundant "inline-signing yes;" lines from the documentation.
 2023-08-01 06:55:48 +00:00
Matthijs Mekking
bbfdcc36c8 Add inline-signing to dnssec-policy 
Add an option to enable/disable inline-signing inside the
dnssec-policy clause. The existing inline-signing option that is
set in the zone clause takes priority, but if it is omitted, then the
value that is set in dnssec-policy is taken.

The built-in policies use inline-signing.

This means that if you want to use the default policy without
inline-signing you either have to set it explicitly in the zone
clause:

    zone "example" {
        ...
        dnssec-policy default;
        inline-signing no;
    };

Or create a new policy, only overriding the inline-signing option:

    dnssec-policy "default-dynamic" {
        inline-signing no;
    };

    zone "example" {
        ...
        dnssec-policy default-dynamic;
    };

This also means that if you are going insecure with a dynamic zone,
the built-in "insecure" policy needs to be accompanied with
"inline-signing no;".
 2023-08-01 06:55:48 +00:00
Matthijs Mekking
6504b563cb Add release note and CHANGES for #3672 
"The king is dead. Long live the king."
 2023-07-20 12:44:19 +02:00
Matthijs Mekking
042c89ac69 Obsolete dnssec-update-mode 
We no longer support 'no-resign' and thus the configuration option
becomes obsolete. Remove the corresponding dnssec system test cases.
 2023-07-20 12:44:19 +02:00
Matthijs Mekking
3e49223a67 Obsolete dnssec-dnskey-kskonly update-check-ksk 
These two configuration options worked in conjunction with 'auto-dnssec'
to determine KSK usage, and thus are now obsoleted.

However, in the code we keep KSK processing so that when a zone is
reconfigured from using 'dnssec-policy' immediately to 'none' (without
going through 'insecure'), the zone is not immediately made bogus.

Add one more test case for going straight to none, now with a dynamic
zone (no inline-signing).
 2023-07-20 12:40:54 +02:00
Matthijs Mekking
88a687106f Obsolete sig-validity-interval dnskey-sig-validity 
These two configuration options worked in conjunction with 'auto-dnssec'
to set the signature validity, and thus are now obsoleted.
 2023-07-20 11:04:24 +02:00
Matthijs Mekking
10bb8f92a1 Remove auto-dnssec from documentation 
Update the ARM and DNSSEC guide, removing references to 'auto-dnssec',
replacing them with 'dnssec-policy' if needed.

The section "Alternative Ways" of signing has to be refactored, since
we now only focus on one alternative way, that is manual signing.
 2023-07-20 11:04:24 +02:00
Matthijs Mekking
71af4f4e0b Remove the auto-dnssec option 
Mark the "auto-dnssec" option ancient (effectively disallowing it from
the configuration).
 2023-07-20 11:04:23 +02:00
Tom Krizek
5b5d5f9f22 Merge tag 'v9.19.15' 2023-07-19 14:16:32 +02:00
Ondřej Surý
d9d2527a19 Add CHANGES and release note for [GL #4185] 2023-07-18 11:57:11 +02:00
Mark Andrews
cf923e4ad3 Add release note for [GL #4194] 2023-07-13 01:58:53 +00:00
Tom Krizek
c49bad79eb Set up release notes for BIND 9.19.16 2023-07-10 15:08:50 +02:00
Michał Kępień
80cc7f077c Add release note for GL #4132, GL #4136, GL #4171 2023-07-06 15:38:48 +02:00
Michał Kępień
c2a298245f Tweak and reword release notes 2023-07-06 15:38:48 +02:00
Michał Kępień
bc8ad4e807 Prepare release notes for BIND 9.19.15 2023-07-06 15:38:48 +02:00
Michał Kępień
09a4ffa1c8 Update sample query log excerpt in the ARM 2023-07-06 15:38:48 +02:00
Michał Kępień
13c35ab0b3 Add Google Site Verification tag to the TOC page 
This should allow tracking HTTP 404 errors for Read the Docs using the
Google Search Console.
 2023-06-29 18:32:50 +02:00
Mark Andrews
91cb94dcbb Add release note entry for [GL #4154] 2023-06-29 08:28:48 +10:00
Mark Andrews
2a71ed47a7 Add release note for [GL #3325] 2023-06-28 18:07:03 +10:00
Mark Andrews
dd00b3c50b Use NS rather than A records for qname-minimization relaxed 
Remove all references to DNS_FETCHOPT_QMIN_USE_A and adjust
the expected tests results in the qmin system test.
 2023-06-28 11:45:59 +10:00
Michal Nowak
71439d0c3a Merge tag 'v9.19.14' 
BIND 9.19.14
 2023-06-21 19:31:57 +02:00
Tom Krizek
5893debf46 Remove trailing whitespace from all text files 
I've used the following command to remove the trailing whitespace for
all tracked text files:

git grep -Il '' | xargs sed -i 's/[ \t]*$//'
 2023-06-13 15:05:40 +02:00
Michal Nowak
a04301f936 Set up release notes for BIND 9.19.15 2023-06-12 16:12:40 +02:00
Michał Kępień
466530c73b Add release note for #4049 2023-06-09 11:53:33 +02:00
Michał Kępień
f933f1856b Reorder release notes 2023-06-09 11:53:33 +02:00
Michał Kępień
76877a83be Tweak and reword release notes 2023-06-09 11:53:33 +02:00
Michał Kępień
1f48e1c998 Prepare release notes for BIND 9.19.14 2023-06-09 11:53:33 +02:00
Michał Kępień
350613af9d Drop "Known Issues" entry for #4006 as it is fixed 2023-06-09 11:53:33 +02:00
Michał Kępień
f251588176 Add a missing word to the release note for #4004 2023-06-09 11:53:33 +02:00
Michal Nowak
1afde574e9 Set max-cache-size expectations for low values 2023-06-08 12:11:09 +02:00
Ondřej Surý
616bd7a96e Add CHANGES and release note for [GL #4055] 2023-06-08 12:11:09 +02:00
Aram Sargsyan
27c30fe8a4 QryDropped stats counter documentation update 
Document which dropped queries are calculated by the QryDropped
statistics counter.
 2023-06-07 13:06:58 +00:00
Artem Boldariev
8672d54847 Update CHANGES and release note [GL #4038] 
Mention that memory usage was reduced by allocating properly sized
send buffers for stream-based transports.
 2023-06-06 13:40:42 +02:00
Aram Sargsyan
466a7d9b5f Add CHANGES and release notes for [GL #4074] 2023-06-01 08:14:31 +00:00
Michal Nowak
ddb846454d Add Alpine Linux 3.18 2023-05-31 12:01:26 +02:00
Aram Sargsyan
08ebf39d1e Update the documentation of the resolver statistics counters 
The reference manual doesn't document all the available resolver
statistics counters. Add information about the missing counters.
 2023-05-31 09:08:58 +00:00
Evan Hunt
f58b9e9d2c CHANGES and release notes for [GL #4012] 2023-05-30 15:36:15 -07:00
Matthijs Mekking
23dbb6ba72 Add release note and changes for #3950 
Fixing another serve-stale bug is still news.
 2023-05-30 11:58:50 +02:00
Matthijs Mekking
7a39651da5 Add notes and change entry 2023-05-23 08:53:22 +02:00
Tom Krizek
fd889bf0ad Add CHANGES and release note for [GL #3978] 2023-05-22 14:11:41 +02:00
Michal Nowak
2e0550970b Add Fedora 38 2023-05-19 13:47:53 +02:00
Michał Kępień
ddbbb8612d Merge tag 'v9.19.13' 
BIND 9.19.13
 2023-05-18 14:06:04 +02:00
Michal Nowak
ff52cd9604 Add OpenBSD 7.3 2023-05-15 18:55:38 +02:00
Michal Nowak
81ad645d7d Add FreeBSD 13.2 2023-05-15 18:31:07 +02:00
Tony Finch
fc770a8bd0 Remove the now-unused ISC_STACK 
We are using the liburcu concurrent data structures instead.
 2023-05-12 20:49:43 +01:00
Tony Finch
05ca11e122 Remove isc_qsbr (we are using liburcu instead) 
This commit breaks the qp-trie code.
 2023-05-12 20:48:31 +01:00
Evan Hunt
0ee38f905f CHANGES and release note for part 2 of [GL #4046] 2023-05-12 11:29:16 -07:00
Ondřej Surý
575a976e48 Add CHANGES and release note for [GL #4045] 2023-05-12 13:26:00 +02:00
Matthijs Mekking
2a2f8b6b39 Add release note and CHANGES for cdnskey option 2023-05-11 17:07:51 +02:00
Matthijs Mekking
8be61d1845 Add configuration option 'cdnskey' 
Add the 'cdnskey' configuration option to 'dnssec-policy'.
 2023-05-11 17:07:51 +02:00