CHANGES, release notes

This commit is contained in:
Evan Hunt 2019-02-07 22:45:28 -08:00
parent 37e79bd79c
commit cdc4388ac3
2 changed files with 15 additions and 1 deletions

View file

@ -1,3 +1,8 @@
5228. [func] If trusted-keys and managed-keys were configured
simultaneously for the same name, the key could
not be be rolled automatically. This is now
a fatal configuration error. [GL #868]
5227. [placeholder]
5226. [placeholder]

View file

@ -132,7 +132,16 @@
<itemizedlist>
<listitem>
<para>
None.
When <command>trusted-keys</command> and
<command>managed-keys</command> were both configured for the
same name, or when <command>trusted-keys</command> was used to
configure a trust anchor for the root zone and
<command>dnssec-validation</command> was set to the default
value of <literal>auto</literal>, automatic RFC 5011 key
rollovers would be disabled. This combination of settings was
never intended to work, but there was no check for it in the
parser. This has been corrected, and it is now a fatal
configuration error. [GL #868]
</para>
</listitem>
</itemizedlist>