ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
32,845 Commits 589 Branches 805 Tags
2011efa99dac5bbe2f557bcac1fb4e849f2b397b
Commit Graph
132 Commits
Author SHA1 Message Date
Matthijs Mekking bcadb31f44 Add CHANGES and release notes for GL #2503 
(cherry picked from commit a404eaaffd)
 2021-02-25 12:07:43 +01:00
Matthijs Mekking 8475d0bd61 Add changes and notes for [#2498] 
(cherry picked from commit 89c47b3b42)
 2021-02-25 10:56:46 +01:00
Matthijs Mekking a3e9c05bfb Add changes and notes for [#2408] 
(cherry picked from commit 5a99a124fb)
 2021-02-23 09:20:20 +01:00
Mark Andrews 65013e5c32 Add release note for [GL #2499] 
(cherry picked from commit 3d340ecfd2)
 2021-02-19 11:39:47 +11:00
Michał Kępień f08646ea4d Set up release notes for BIND 9.16.13 2021-02-17 22:39:53 +01:00
Michał Kępień 84708ad977 Prepare release notes for BIND 9.16.12 2021-02-17 22:36:08 +01:00
Michał Kępień 996c9135ca Add release note for GL #2073 2021-02-17 22:36:08 +01:00
Michał Kępień 3bfc7756e4 Reorder release notes 2021-02-17 22:36:08 +01:00
Michał Kępień 70d8f9182c Tweak and reword release notes 2021-02-17 22:36:08 +01:00
Michał Kępień dcf5204f7a Use :rfc:<number> references in release notes 2021-02-17 22:36:08 +01:00
Ondřej SurýandMichał Kępień 55e103dfe0 Add CHANGES and release note for GL #2354 2021-02-17 22:36:08 +01:00
Ondřej SurýandOndřej Surý c1292e126f Add CHANGES and release notes for GL #2487 
(cherry picked from commit 6d442e9c04)
 2021-02-17 14:42:53 +01:00
Evan Hunt df541c63c6 some release note corrections 
(cherry picked from commit 3126eb652d)
 2021-02-16 17:00:21 -08:00
Matthijs Mekking e02ce9e833 Add notes and change entry for [#2434] 
This concludes the serve-stale improvements.

(cherry picked from commit ed8421693c)
 2021-02-08 16:09:36 +01:00
Mark AndrewsandMatthijs Mekking 4bd8bcf236 Add release note entry 
(cherry picked from commit 1294918702)
 2021-02-03 16:32:43 +01:00
Matthijs Mekking c0e98d8adb Add change and release note for [#2375] 
News worthy.

(cherry picked from commit 7947f7f9c6)
 2021-02-03 15:48:09 +01:00
Matthijs Mekking 4170288a91 Correctly initialize old key with state file 
The 'key_init()' function is used to initialize a state file for keys
that don't have one yet. This can happen if you are migrating from a
'auto-dnssec' or 'inline-signing' to a 'dnssec-policy' configuration.

It did not look at the "Inactive" and "Delete" timing metadata and so
old keys left behind in the key directory would also be considered as
a possible active key. This commit fixes this and now explicitly sets
the key goal to OMNIPRESENT for keys that have their "Active/Publish"
timing metadata in the past, but their "Inactive/Delete" timing
metadata in the future. If the "Inactive/Delete" timing metadata is
also in the past, the key goal is set to HIDDEN.

If the "Inactive/Delete" timing metadata is in the past, also the
key states are adjusted to either UNRETENTIVE or HIDDEN, depending on
how far in the past the metadata is set.

(cherry picked from commit 76cf72e65a)
 2021-02-03 08:42:32 +01:00
Diego FronzaandMatthijs Mekking b89fc52cd1 Add documentation for stale-answer-client-timeout 
(cherry picked from commit 6ab9070457)
 2021-01-29 10:39:31 +01:00
Mark Andrews 4d08f4aa4f Add release note for [GL #2413] 
(cherry picked from commit 79fad620a2)
 2021-01-28 13:43:48 +11:00
Matthijs Mekking 56b0861049 Add notes and changes for [#2178] 
(cherry picked from commit 37d11f5be0)
 2021-01-26 15:04:30 +01:00
Evan HuntandOndřej Surý f5362ed135 CHANGES and release note 2021-01-26 12:38:32 +01:00
Ondřej SurýandMichał Kępień 88c098b467 Add CHANGES and release note for GL #2387 
(cherry picked from commit b30aaa3748)
 2021-01-25 15:28:09 +01:00
Michał Kępień 0847e40635 Set up release notes for BIND 9.16.12 2021-01-21 09:33:16 +01:00
Michał Kępień 2e8eb485e9 Prepare release notes for BIND 9.16.11 2021-01-21 09:11:54 +01:00
Michał Kępień 19bd23df6a Add release note for GL #2091 2021-01-21 09:11:54 +01:00
Michał Kępień db3380e5ee Reorder release notes 2021-01-21 09:11:54 +01:00
Michał Kępień 9396f3ef13 Tweak and reword release notes 2021-01-21 09:11:54 +01:00
Michał Kępień d17c8903cf Restore release note for GL #2245 2021-01-21 09:11:54 +01:00
Matthijs Mekking 4d48df7f97 Update serve-stale config defaults 
Change the serve-stale configuration defaults so that they match the
recommendations from RFC 8767.

(cherry picked from commit e15a433b23)
 2021-01-15 10:38:30 +01:00
Evan HuntandMichał Kępień aa13408757 CHANGES, release note 
(cherry picked from commit 565f99f9e5)
 2021-01-12 15:21:14 +01:00
Matthijs Mekking c4520620dc Fix signatures-validity config option 
KASP was using 'signatures-validity-dnskey' instead of
'signatures-validity'.

(cherry picked from commit ad63e9e4f8)
 2021-01-12 13:13:05 +01:00
Mark Andrews 5874c04d13 Add release note 
(cherry picked from commit 584e589d84)
 2021-01-06 16:33:32 +11:00
Matthijs Mekking 7fdd0f7be9 Add notes for [#2341] 
Mention the bugfix in the release.

(cherry picked from commit 08b6e8c2c9)
 2020-12-23 12:06:35 +01:00
Matthijs Mekking decdd1d3e1 Add documentation and notes for [#1750] 
(cherry picked from commit 7825d8f916)
 2020-12-23 12:06:09 +01:00
Mark Andrews b8c44c8e1f Add CHANGES and release notes for [GL #2245] 
(cherry picked from commit fc4af548e7)
 2020-12-23 09:26:50 +11:00
Ondřej SurýandOndřej Surý 66bb0a1e80 Add CHANGES and release notes for GL #2058 
(cherry picked from commit ba887a688c)
 2020-12-12 08:08:49 +01:00
Ondřej Surý 099fc1fdf8 Add CHANGES and release notes 2020-12-09 10:46:16 +01:00
Michał KępieńandOndřej Surý a01961260d Prepare release notes for BIND 9.16.10 2020-12-09 10:46:16 +01:00
Michał KępieńandOndřej Surý 2ef1784b85 Reorder release notes 2020-12-09 10:45:49 +01:00
Michał KępieńandOndřej Surý 3f6f0b9f66 Tweak and reword release notes 2020-12-09 10:45:49 +01:00
Ondřej SurýandOndřej Surý 9d35c9b96d Add CHANGES and release not for GL #2250 
(cherry picked from commit c7d81f12f8)
 2020-12-02 12:02:10 +01:00
Mark Andrews 5c10b5a4e8 Adjust default value of "max-recursion-queries" 
Since the queries sent towards root and TLD servers are now included in
the count (as a result of the fix for CVE-2020-8616),
"max-recursion-queries" has a higher chance of being exceeded by
non-attack queries.  Increase its default value from 75 to 100.

(cherry picked from commit ab0bf49203)
 2020-12-02 00:53:49 +11:00
Mark Andrews 45719ff249 Add release note for [GL #2315] 
(cherry picked from commit 356243aaec)
 2020-12-01 23:29:43 +11:00
Mark Andrews e98edb871d Add release note for [GL #2275] 
(cherry picked from commit d0dd71380b)
 2020-11-27 08:44:00 +11:00
Matthijs Mekking 6db879160f Detect NSEC3 salt collisions 
When generating a new salt, compare it with the previous NSEC3
paremeters to ensure the new parameters are different from the
previous ones.

This moves the salt generation call from 'bin/named/*.s' to
'lib/dns/zone.c'. When setting new NSEC3 parameters, you can set a new
function parameter 'resalt' to enforce a new salt to be generated. A
new salt will also be generated if 'salt' is set to NULL.

Logging salt with zone context can now be done with 'dnssec_log',
removing the need for 'dns_nsec3_log_salt'.

(cherry picked from commit 6b5d7357df)
 2020-11-26 14:15:05 +00:00
Matthijs Mekking c993bc19a0 Add changes and notes for kasp NSEC3 support 
This feature is news worthy.

(cherry picked from commit 9adad77ac3)
 2020-11-26 14:15:03 +00:00
Michał Kępień ce18f66336 Set up release notes for BIND 9.16.10 2020-11-26 12:30:25 +01:00
Michał Kępień 259bcc5cc2 Prepare release notes for BIND 9.16.9 2020-11-26 12:25:53 +01:00
Michał Kępień d857435c02 Add release note for GL #2244 2020-11-26 12:25:53 +01:00
Michał Kępień 6a99a2f5e0 Add release note for GL #2236 2020-11-26 12:25:53 +01:00