Commit Graph
144 Commits
Author SHA1 Message Date
Mark AndrewsandOndřej Surý 99132eda0e Add CHANGES and release note for GL #2607 2021-04-01 16:11:25 +02:00
Matthijs Mekking d12b40f6fb Rekey immediately after rndc checkds/rollover
Call 'dns_zone_rekey' after a 'rndc dnssec -checkds' or 'rndc dnssec
-rollover' command is received, because such a command may influence
the next key event. Updating the keys immediately avoids unnecessary
rollover delays.

The kasp system test no longer needs to call 'rndc loadkeys' after
a 'rndc dnssec -checkds' or 'rndc dnssec -rollover' command.

(cherry picked from commit 82f72ae249)
2021-03-22 15:35:22 +01:00
Matthijs Mekking 3156c0d103 Add CHANGES and notes for [#2517]
(cherry picked from commit 841e90c6fc)
2021-03-22 13:57:10 +01:00
Michal Nowak 63cb814f3c Set up release notes for BIND 9.16.14 2021-03-19 10:10:59 +01:00
Michal Nowak d0444472d8 Prepare release notes for BIND 9.16.13 2021-03-19 09:57:51 +01:00
Michal Nowak 7ce5609e8b Add release note for GL #2041 2021-03-19 09:57:51 +01:00
Michal Nowak ed42c89938 Reorder release notes 2021-03-19 09:57:51 +01:00
Michal Nowak 4af8825c27 Tweak and reword release notes 2021-03-19 09:57:36 +01:00
Diego Fronza 392a08bc95 Add CHANGES and release notes 2021-03-18 18:20:18 -03:00
Ondřej Surý e822b77dc0 Add CHANGES and release note for GL #2573 2021-03-18 15:16:13 +01:00
Matthijs Mekking 3ae16d0480 Fix "unable to thaw dynamic kasp zone"
Dynamic zones with dnssec-policy could not be thawed because KASP
zones were considered always dynamic. But a dynamic KASP zone should
also check whether updates are disabled.

(cherry picked from commit b518ed9f46)
2021-03-17 11:12:29 +01:00
Evan Hunt c7d5329ae0 CHANGES, release note
(cherry picked from commit 82b82bb821)
2021-03-03 19:21:19 -08:00
Matthijs Mekking bcadb31f44 Add CHANGES and release notes for GL #2503
(cherry picked from commit a404eaaffd)
2021-02-25 12:07:43 +01:00
Matthijs Mekking 8475d0bd61 Add changes and notes for [#2498]
(cherry picked from commit 89c47b3b42)
2021-02-25 10:56:46 +01:00
Matthijs Mekking a3e9c05bfb Add changes and notes for [#2408]
(cherry picked from commit 5a99a124fb)
2021-02-23 09:20:20 +01:00
Mark Andrews 65013e5c32 Add release note for [GL #2499]
(cherry picked from commit 3d340ecfd2)
2021-02-19 11:39:47 +11:00
Michał Kępień f08646ea4d Set up release notes for BIND 9.16.13 2021-02-17 22:39:53 +01:00
Michał Kępień 84708ad977 Prepare release notes for BIND 9.16.12 2021-02-17 22:36:08 +01:00
Michał Kępień 996c9135ca Add release note for GL #2073 2021-02-17 22:36:08 +01:00
Michał Kępień 3bfc7756e4 Reorder release notes 2021-02-17 22:36:08 +01:00
Michał Kępień 70d8f9182c Tweak and reword release notes 2021-02-17 22:36:08 +01:00
Michał Kępień dcf5204f7a Use :rfc:<number> references in release notes 2021-02-17 22:36:08 +01:00
Ondřej SurýandMichał Kępień 55e103dfe0 Add CHANGES and release note for GL #2354 2021-02-17 22:36:08 +01:00
Ondřej SurýandOndřej Surý c1292e126f Add CHANGES and release notes for GL #2487
(cherry picked from commit 6d442e9c04)
2021-02-17 14:42:53 +01:00
Evan Hunt df541c63c6 some release note corrections
(cherry picked from commit 3126eb652d)
2021-02-16 17:00:21 -08:00
Matthijs Mekking e02ce9e833 Add notes and change entry for [#2434]
This concludes the serve-stale improvements.

(cherry picked from commit ed8421693c)
2021-02-08 16:09:36 +01:00
Mark AndrewsandMatthijs Mekking 4bd8bcf236 Add release note entry
(cherry picked from commit 1294918702)
2021-02-03 16:32:43 +01:00
Matthijs Mekking c0e98d8adb Add change and release note for [#2375]
News worthy.

(cherry picked from commit 7947f7f9c6)
2021-02-03 15:48:09 +01:00
Matthijs Mekking 4170288a91 Correctly initialize old key with state file
The 'key_init()' function is used to initialize a state file for keys
that don't have one yet. This can happen if you are migrating from a
'auto-dnssec' or 'inline-signing' to a 'dnssec-policy' configuration.

It did not look at the "Inactive" and "Delete" timing metadata and so
old keys left behind in the key directory would also be considered as
a possible active key. This commit fixes this and now explicitly sets
the key goal to OMNIPRESENT for keys that have their "Active/Publish"
timing metadata in the past, but their "Inactive/Delete" timing
metadata in the future. If the "Inactive/Delete" timing metadata is
also in the past, the key goal is set to HIDDEN.

If the "Inactive/Delete" timing metadata is in the past, also the
key states are adjusted to either UNRETENTIVE or HIDDEN, depending on
how far in the past the metadata is set.

(cherry picked from commit 76cf72e65a)
2021-02-03 08:42:32 +01:00
Diego FronzaandMatthijs Mekking b89fc52cd1 Add documentation for stale-answer-client-timeout
(cherry picked from commit 6ab9070457)
2021-01-29 10:39:31 +01:00
Mark Andrews 4d08f4aa4f Add release note for [GL #2413]
(cherry picked from commit 79fad620a2)
2021-01-28 13:43:48 +11:00
Matthijs Mekking 56b0861049 Add notes and changes for [#2178]
(cherry picked from commit 37d11f5be0)
2021-01-26 15:04:30 +01:00
Evan HuntandOndřej Surý f5362ed135 CHANGES and release note 2021-01-26 12:38:32 +01:00
Ondřej SurýandMichał Kępień 88c098b467 Add CHANGES and release note for GL #2387
(cherry picked from commit b30aaa3748)
2021-01-25 15:28:09 +01:00
Michał Kępień 0847e40635 Set up release notes for BIND 9.16.12 2021-01-21 09:33:16 +01:00
Michał Kępień 2e8eb485e9 Prepare release notes for BIND 9.16.11 2021-01-21 09:11:54 +01:00
Michał Kępień 19bd23df6a Add release note for GL #2091 2021-01-21 09:11:54 +01:00
Michał Kępień db3380e5ee Reorder release notes 2021-01-21 09:11:54 +01:00
Michał Kępień 9396f3ef13 Tweak and reword release notes 2021-01-21 09:11:54 +01:00
Michał Kępień d17c8903cf Restore release note for GL #2245 2021-01-21 09:11:54 +01:00
Matthijs Mekking 4d48df7f97 Update serve-stale config defaults
Change the serve-stale configuration defaults so that they match the
recommendations from RFC 8767.

(cherry picked from commit e15a433b23)
2021-01-15 10:38:30 +01:00
Evan HuntandMichał Kępień aa13408757 CHANGES, release note
(cherry picked from commit 565f99f9e5)
2021-01-12 15:21:14 +01:00
Matthijs Mekking c4520620dc Fix signatures-validity config option
KASP was using 'signatures-validity-dnskey' instead of
'signatures-validity'.

(cherry picked from commit ad63e9e4f8)
2021-01-12 13:13:05 +01:00
Mark Andrews 5874c04d13 Add release note
(cherry picked from commit 584e589d84)
2021-01-06 16:33:32 +11:00
Matthijs Mekking 7fdd0f7be9 Add notes for [#2341]
Mention the bugfix in the release.

(cherry picked from commit 08b6e8c2c9)
2020-12-23 12:06:35 +01:00
Matthijs Mekking decdd1d3e1 Add documentation and notes for [#1750]
(cherry picked from commit 7825d8f916)
2020-12-23 12:06:09 +01:00
Mark Andrews b8c44c8e1f Add CHANGES and release notes for [GL #2245]
(cherry picked from commit fc4af548e7)
2020-12-23 09:26:50 +11:00
Ondřej SurýandOndřej Surý 66bb0a1e80 Add CHANGES and release notes for GL #2058
(cherry picked from commit ba887a688c)
2020-12-12 08:08:49 +01:00
Ondřej Surý 099fc1fdf8 Add CHANGES and release notes 2020-12-09 10:46:16 +01:00
Michał KępieńandOndřej Surý a01961260d Prepare release notes for BIND 9.16.10 2020-12-09 10:46:16 +01:00