ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
39,656 Commits 589 Branches 805 Tags
cfb06dabfe877f0760ad5bd522bf8c7e2b7ad323
Commit Graph
7131 Commits
Author SHA1 Message Date
Michal Nowak 5e1120d9a3 Reintroduce Debian 11 "bullseye" Clang and GCC jobs 2023-08-21 16:35:52 +02:00
Michal Nowak 2d18c57c54 Make Debian 12 "bookworm" the base image 
Just replace "bullseye" with "bookworm" and reintroduce Debian 11
"bullseye" later.
 2023-08-21 16:35:52 +02:00
Ondřej Surý 58a8de5246 Add release note for [GL #4125] 2023-08-21 15:16:41 +02:00
Michał Kępień e27a33e621 Merge tag 'v9.19.16' 2023-08-17 14:10:53 +02:00
Ondřej Surý 57c8bdaff5 Add CHANGES and release notes for [GL #4124] 2023-08-14 11:30:45 +02:00
Michał Kępień c0a6068215 Set up release notes for BIND 9.19.17 2023-08-07 10:23:55 +02:00
Michał Kępień 7d754c2113 Add release note for GL #4215 2023-08-04 11:17:54 +02:00
Michał Kępień f6a8008e8f Reorder release notes 2023-08-04 11:17:54 +02:00
Michał Kępień 24b45a1e03 Tweak and reword release notes 2023-08-04 11:17:54 +02:00
Michał Kępień 89617cd3d6 Prepare release notes for BIND 9.19.16 2023-08-04 11:17:54 +02:00
Evan Hunt d10b6a4b39 CHANGES and release note for [GL #3700] 2023-08-01 18:10:44 -07:00
Evan Hunt eeeccec67c deprecate "dialup" and "heartbeat-interval" 
these options concentrate zone maintenance actions into
bursts for the benefit of servers with intermittent connections.
that's no longer something we really need to optimize.
 2023-08-01 18:10:44 -07:00
Matthijs Mekking 0bdf1980c4 Add CHANGES and release note for #4032 2023-08-01 08:57:11 +02:00
Matthijs Mekking bd00c2ce4e Add release note and CHANGES for GL #3677 
News worthy.
 2023-08-01 06:55:48 +00:00
Matthijs Mekking 1e0f77b349 Remove redundant inline-signing lines from docs 
Now that inline-signing is explicitly set in dnssec-policy, remove
the redundant "inline-signing yes;" lines from the documentation.
 2023-08-01 06:55:48 +00:00
Matthijs Mekking bbfdcc36c8 Add inline-signing to dnssec-policy 
Add an option to enable/disable inline-signing inside the
dnssec-policy clause. The existing inline-signing option that is
set in the zone clause takes priority, but if it is omitted, then the
value that is set in dnssec-policy is taken.

The built-in policies use inline-signing.

This means that if you want to use the default policy without
inline-signing you either have to set it explicitly in the zone
clause:

    zone "example" {
        ...
        dnssec-policy default;
        inline-signing no;
    };

Or create a new policy, only overriding the inline-signing option:

    dnssec-policy "default-dynamic" {
        inline-signing no;
    };

    zone "example" {
        ...
        dnssec-policy default-dynamic;
    };

This also means that if you are going insecure with a dynamic zone,
the built-in "insecure" policy needs to be accompanied with
"inline-signing no;".
 2023-08-01 06:55:48 +00:00
Matthijs Mekking 6504b563cb Add release note and CHANGES for #3672 
"The king is dead. Long live the king."
 2023-07-20 12:44:19 +02:00
Matthijs Mekking 042c89ac69 Obsolete dnssec-update-mode 
We no longer support 'no-resign' and thus the configuration option
becomes obsolete. Remove the corresponding dnssec system test cases.
 2023-07-20 12:44:19 +02:00
Matthijs Mekking 3e49223a67 Obsolete dnssec-dnskey-kskonly update-check-ksk 
These two configuration options worked in conjunction with 'auto-dnssec'
to determine KSK usage, and thus are now obsoleted.

However, in the code we keep KSK processing so that when a zone is
reconfigured from using 'dnssec-policy' immediately to 'none' (without
going through 'insecure'), the zone is not immediately made bogus.

Add one more test case for going straight to none, now with a dynamic
zone (no inline-signing).
 2023-07-20 12:40:54 +02:00
Matthijs Mekking 88a687106f Obsolete sig-validity-interval dnskey-sig-validity 
These two configuration options worked in conjunction with 'auto-dnssec'
to set the signature validity, and thus are now obsoleted.
 2023-07-20 11:04:24 +02:00
Matthijs Mekking 10bb8f92a1 Remove auto-dnssec from documentation 
Update the ARM and DNSSEC guide, removing references to 'auto-dnssec',
replacing them with 'dnssec-policy' if needed.

The section "Alternative Ways" of signing has to be refactored, since
we now only focus on one alternative way, that is manual signing.
 2023-07-20 11:04:24 +02:00
Matthijs Mekking 71af4f4e0b Remove the auto-dnssec option 
Mark the "auto-dnssec" option ancient (effectively disallowing it from
the configuration).
 2023-07-20 11:04:23 +02:00
Tom Krizek 5b5d5f9f22 Merge tag 'v9.19.15' 2023-07-19 14:16:32 +02:00
Ondřej Surý d9d2527a19 Add CHANGES and release note for [GL #4185] 2023-07-18 11:57:11 +02:00
Mark Andrews cf923e4ad3 Add release note for [GL #4194] 2023-07-13 01:58:53 +00:00
Tom Krizek c49bad79eb Set up release notes for BIND 9.19.16 2023-07-10 15:08:50 +02:00
Michał Kępień 80cc7f077c Add release note for GL #4132, GL #4136, GL #4171 2023-07-06 15:38:48 +02:00
Michał Kępień c2a298245f Tweak and reword release notes 2023-07-06 15:38:48 +02:00
Michał Kępień bc8ad4e807 Prepare release notes for BIND 9.19.15 2023-07-06 15:38:48 +02:00
Michał Kępień 09a4ffa1c8 Update sample query log excerpt in the ARM 2023-07-06 15:38:48 +02:00
Michał Kępień 13c35ab0b3 Add Google Site Verification tag to the TOC page 
This should allow tracking HTTP 404 errors for Read the Docs using the
Google Search Console.
 2023-06-29 18:32:50 +02:00
Mark Andrews 91cb94dcbb Add release note entry for [GL #4154] 2023-06-29 08:28:48 +10:00
Mark Andrews 2a71ed47a7 Add release note for [GL #3325] 2023-06-28 18:07:03 +10:00
Mark Andrews dd00b3c50b Use NS rather than A records for qname-minimization relaxed 
Remove all references to DNS_FETCHOPT_QMIN_USE_A and adjust
the expected tests results in the qmin system test.
 2023-06-28 11:45:59 +10:00
Michal Nowak 71439d0c3a Merge tag 'v9.19.14' 
BIND 9.19.14
 2023-06-21 19:31:57 +02:00
Tom Krizek 5893debf46 Remove trailing whitespace from all text files 
I've used the following command to remove the trailing whitespace for
all tracked text files:

git grep -Il '' | xargs sed -i 's/[ \t]*$//'
 2023-06-13 15:05:40 +02:00
Michal Nowak a04301f936 Set up release notes for BIND 9.19.15 2023-06-12 16:12:40 +02:00
Michał KępieńandMichal Nowak 466530c73b Add release note for #4049 2023-06-09 11:53:33 +02:00
Michał KępieńandMichal Nowak f933f1856b Reorder release notes 2023-06-09 11:53:33 +02:00
Michał KępieńandMichal Nowak 76877a83be Tweak and reword release notes 2023-06-09 11:53:33 +02:00
Michał KępieńandMichal Nowak 1f48e1c998 Prepare release notes for BIND 9.19.14 2023-06-09 11:53:33 +02:00
Michał KępieńandMichal Nowak 350613af9d Drop "Known Issues" entry for #4006 as it is fixed 2023-06-09 11:53:33 +02:00
Michał KępieńandMichal Nowak f251588176 Add a missing word to the release note for #4004 2023-06-09 11:53:33 +02:00
Michal Nowak 1afde574e9 Set max-cache-size expectations for low values 2023-06-08 12:11:09 +02:00
Ondřej SurýandMichal Nowak 616bd7a96e Add CHANGES and release note for [GL #4055] 2023-06-08 12:11:09 +02:00
Aram Sargsyan 27c30fe8a4 QryDropped stats counter documentation update 
Document which dropped queries are calculated by the QryDropped
statistics counter.
 2023-06-07 13:06:58 +00:00
Artem BoldarievandOndřej Surý 8672d54847 Update CHANGES and release note [GL #4038] 
Mention that memory usage was reduced by allocating properly sized
send buffers for stream-based transports.
 2023-06-06 13:40:42 +02:00
Aram Sargsyan 466a7d9b5f Add CHANGES and release notes for [GL #4074] 2023-06-01 08:14:31 +00:00
Michal Nowak ddb846454d Add Alpine Linux 3.18 2023-05-31 12:01:26 +02:00
Aram Sargsyan 08ebf39d1e Update the documentation of the resolver statistics counters 
The reference manual doesn't document all the available resolver
statistics counters. Add information about the missing counters.
 2023-05-31 09:08:58 +00:00