Matthijs Mekking
c63b533690
Change default stale-answer-client-timeout to off
...
Using "stale-answer-client-timeout" turns out to have unforeseen
negative consequences, and thus it is better to disable the feature
by default for the time being.
(cherry picked from commit e443279bbf
2021-04-07 14:46:55 +02:00
Matthijs Mekking
4b25333037
Add notes and changes for [ #2594 ]
...
Pretty newsworthy.
(cherry picked from commit e44bcc6f53
2021-04-02 13:28:48 +02:00
Mark Andrews
99132eda0e
Add CHANGES and release note for GL #2607
2021-04-01 16:11:25 +02:00
Matthijs Mekking
d12b40f6fb
Rekey immediately after rndc checkds/rollover
...
Call 'dns_zone_rekey' after a 'rndc dnssec -checkds' or 'rndc dnssec
-rollover' command is received, because such a command may influence
the next key event. Updating the keys immediately avoids unnecessary
rollover delays.
The kasp system test no longer needs to call 'rndc loadkeys' after
a 'rndc dnssec -checkds' or 'rndc dnssec -rollover' command.
(cherry picked from commit 82f72ae249
2021-03-22 15:35:22 +01:00
Matthijs Mekking
3156c0d103
Add CHANGES and notes for [ #2517 ]
...
(cherry picked from commit 841e90c6fc
2021-03-22 13:57:10 +01:00
Michal Nowak
63cb814f3c
Set up release notes for BIND 9.16.14
2021-03-19 10:10:59 +01:00
Michal Nowak
d0444472d8
Prepare release notes for BIND 9.16.13
2021-03-19 09:57:51 +01:00
Michal Nowak
7ce5609e8b
Add release note for GL #2041
2021-03-19 09:57:51 +01:00
Michal Nowak
ed42c89938
Reorder release notes
2021-03-19 09:57:51 +01:00
Michal Nowak
4af8825c27
Tweak and reword release notes
2021-03-19 09:57:36 +01:00
Diego Fronza
392a08bc95
Add CHANGES and release notes
2021-03-18 18:20:18 -03:00
Ondřej Surý
e822b77dc0
Add CHANGES and release note for GL #2573
2021-03-18 15:16:13 +01:00
Matthijs Mekking
3ae16d0480
Fix "unable to thaw dynamic kasp zone"
...
Dynamic zones with dnssec-policy could not be thawed because KASP
zones were considered always dynamic. But a dynamic KASP zone should
also check whether updates are disabled.
(cherry picked from commit b518ed9f46
2021-03-17 11:12:29 +01:00
Evan Hunt
c7d5329ae0
CHANGES, release note
...
(cherry picked from commit 82b82bb821
2021-03-03 19:21:19 -08:00
Matthijs Mekking
bcadb31f44
Add CHANGES and release notes for GL #2503
...
(cherry picked from commit a404eaaffd
2021-02-25 12:07:43 +01:00
Matthijs Mekking
8475d0bd61
Add changes and notes for [ #2498 ]
...
(cherry picked from commit 89c47b3b42
2021-02-25 10:56:46 +01:00
Matthijs Mekking
a3e9c05bfb
Add changes and notes for [ #2408 ]
...
(cherry picked from commit 5a99a124fb
2021-02-23 09:20:20 +01:00
Mark Andrews
65013e5c32
Add release note for [GL #2499 ]
...
(cherry picked from commit 3d340ecfd2
2021-02-19 11:39:47 +11:00
Michał Kępień
f08646ea4d
Set up release notes for BIND 9.16.13
2021-02-17 22:39:53 +01:00
Michał Kępień
84708ad977
Prepare release notes for BIND 9.16.12
2021-02-17 22:36:08 +01:00
Michał Kępień
996c9135ca
Add release note for GL #2073
2021-02-17 22:36:08 +01:00
Michał Kępień
3bfc7756e4
Reorder release notes
2021-02-17 22:36:08 +01:00
Michał Kępień
70d8f9182c
Tweak and reword release notes
2021-02-17 22:36:08 +01:00
Michał Kępień
dcf5204f7a
Use :rfc:<number> references in release notes
2021-02-17 22:36:08 +01:00
Ondřej Surý
55e103dfe0
Add CHANGES and release note for GL #2354
2021-02-17 22:36:08 +01:00
Ondřej Surý
c1292e126f
Add CHANGES and release notes for GL #2487
...
(cherry picked from commit 6d442e9c04
2021-02-17 14:42:53 +01:00
Evan Hunt
df541c63c6
some release note corrections
...
(cherry picked from commit 3126eb652d
2021-02-16 17:00:21 -08:00
Matthijs Mekking
e02ce9e833
Add notes and change entry for [ #2434 ]
...
This concludes the serve-stale improvements.
(cherry picked from commit ed8421693c
2021-02-08 16:09:36 +01:00
Mark Andrews
4bd8bcf236
Add release note entry
...
(cherry picked from commit 1294918702
2021-02-03 16:32:43 +01:00
Matthijs Mekking
c0e98d8adb
Add change and release note for [ #2375 ]
...
News worthy.
(cherry picked from commit 7947f7f9c6
2021-02-03 15:48:09 +01:00
Matthijs Mekking
4170288a91
Correctly initialize old key with state file
...
The 'key_init()' function is used to initialize a state file for keys
that don't have one yet. This can happen if you are migrating from a
'auto-dnssec' or 'inline-signing' to a 'dnssec-policy' configuration.
It did not look at the "Inactive" and "Delete" timing metadata and so
old keys left behind in the key directory would also be considered as
a possible active key. This commit fixes this and now explicitly sets
the key goal to OMNIPRESENT for keys that have their "Active/Publish"
timing metadata in the past, but their "Inactive/Delete" timing
metadata in the future. If the "Inactive/Delete" timing metadata is
also in the past, the key goal is set to HIDDEN.
If the "Inactive/Delete" timing metadata is in the past, also the
key states are adjusted to either UNRETENTIVE or HIDDEN, depending on
how far in the past the metadata is set.
(cherry picked from commit 76cf72e65a
2021-02-03 08:42:32 +01:00
Diego Fronza
b89fc52cd1
Add documentation for stale-answer-client-timeout
...
(cherry picked from commit 6ab9070457
2021-01-29 10:39:31 +01:00
Mark Andrews
4d08f4aa4f
Add release note for [GL #2413 ]
...
(cherry picked from commit 79fad620a2
2021-01-28 13:43:48 +11:00
Matthijs Mekking
56b0861049
Add notes and changes for [ #2178 ]
...
(cherry picked from commit 37d11f5be0
2021-01-26 15:04:30 +01:00
Evan Hunt
f5362ed135
CHANGES and release note
2021-01-26 12:38:32 +01:00
Ondřej Surý
88c098b467
Add CHANGES and release note for GL #2387
...
(cherry picked from commit b30aaa3748
2021-01-25 15:28:09 +01:00
Michał Kępień
0847e40635
Set up release notes for BIND 9.16.12
2021-01-21 09:33:16 +01:00
Michał Kępień
2e8eb485e9
Prepare release notes for BIND 9.16.11
2021-01-21 09:11:54 +01:00
Michał Kępień
19bd23df6a
Add release note for GL #2091
2021-01-21 09:11:54 +01:00
Michał Kępień
db3380e5ee
Reorder release notes
2021-01-21 09:11:54 +01:00
Michał Kępień
9396f3ef13
Tweak and reword release notes
2021-01-21 09:11:54 +01:00
Michał Kępień
d17c8903cf
Restore release note for GL #2245
2021-01-21 09:11:54 +01:00
Matthijs Mekking
4d48df7f97
Update serve-stale config defaults
...
Change the serve-stale configuration defaults so that they match the
recommendations from RFC 8767.
(cherry picked from commit e15a433b23
2021-01-15 10:38:30 +01:00
Evan Hunt
aa13408757
CHANGES, release note
...
(cherry picked from commit 565f99f9e5
2021-01-12 15:21:14 +01:00
Matthijs Mekking
c4520620dc
Fix signatures-validity config option
...
KASP was using 'signatures-validity-dnskey' instead of
'signatures-validity'.
(cherry picked from commit ad63e9e4f8
2021-01-12 13:13:05 +01:00
Mark Andrews
5874c04d13
Add release note
...
(cherry picked from commit 584e589d84
2021-01-06 16:33:32 +11:00
Matthijs Mekking
7fdd0f7be9
Add notes for [ #2341 ]
...
Mention the bugfix in the release.
(cherry picked from commit 08b6e8c2c9
2020-12-23 12:06:35 +01:00
Matthijs Mekking
decdd1d3e1
Add documentation and notes for [ #1750 ]
...
(cherry picked from commit 7825d8f916
2020-12-23 12:06:09 +01:00
Mark Andrews
b8c44c8e1f
Add CHANGES and release notes for [GL #2245 ]
...
(cherry picked from commit fc4af548e7
2020-12-23 09:26:50 +11:00
Ondřej Surý
66bb0a1e80
Add CHANGES and release notes for GL #2058
...
(cherry picked from commit ba887a688c
2020-12-12 08:08:49 +01:00
