Commit graph

396 commits

Author SHA1 Message Date
Petr Špaček
dba86ce710
Add hyperlinks to all unique statement names
This shell script added hyperlinks to all unique statement names:

    UNIQSTATEMENTS=$(\
        sort \
            <(git grep '.. namedconf:statement::' '*.rst' | sed -e 's/^.*:: //') \
            <(git grep '.. rndcconf:statement::' '*.rst' | sed -e 's/^.*:: //') \
        | uniq --unique)
    ARMFILES=$(git ls-files 'doc/*.rst' | grep -v 'doc/man')
    for STATEMENT in $UNIQSTATEMENTS; \
        do sed -i -e "s/\`\`$STATEMENT\`\`/:any:\`$STATEMENT\`/g" $ARMFILES; \
    done

This needs manual cleanup (see next commit) to fix syntax errors.
2022-07-04 16:08:59 +02:00
Petr Špaček
bd1ad27ff4
Update NSEC3 guidance to match draft-ietf-dnsop-nsec3-guidance-10
https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-nsec3-guidance-10
is on it's way to become RFC, so let's update our recommendations in the
docs to be in line with it.

(cherry picked from commit 2ee3f4e6c8)
2022-06-15 17:57:40 +02:00
Michał Kępień
64fcf1e464 BIND 9.18.4
-----BEGIN PGP SIGNATURE-----
 
 iQJDBAABCgAtFiEENKwGS3ftSQfs1TU17QVz/8hFYQUFAmKZClMPHG1pY2hhbEBp
 c2Mub3JnAAoJEO0Fc//IRWEFNbsQAKCOxV9aJheb2HP01UUeB4MNEpepCpcFwG0k
 lc9wZe8PzFF6wZ9jpLMFB6M7iS3fRQvTSYXzX9tzODVHu5kKxCYTwr6Vg2Lzvymh
 MrnzXicjAHrLfP6iB/Xoxq84N9Z8j5TeDllw8I2WT09K+ZJxFZ3yWet6eCPuwxg0
 ldmJNBmbNPzGPTMr0n6khRNhRlmYDyzadAcs9LkDodZ18LfBmZu7D8q8V2FsDgad
 AMlyabaWCo0P3qR6XbBEClWRlMXp4Y/GRTRxVZGHHtkc9TbXm6/E9NbJTxK5/nXi
 0ut5ux/MvZo85hxSMwDsuaTJmRzyiqTihauAxFA00Epa9wtbCAyFipzLX1OnS/ya
 hUuaJYNw11AK2fxh4QNcV+4ufHSGqgrWP5dPiMSWLBNBDbxLS2/v3OWb+50RaouX
 DTX83D8ymaa4t48HA4XiaMMrYlniVDVhjao9d4qTb7q7BimJtg4IkbZH/0nnsahB
 Z+di+a4GgemSjIMUCsxa8SF++569viu5s8x3NfdxboDVES1QIgyUbacoV/8UULtO
 PrWILyVzeXM5CyvXcTf4dp4sCIyzKhGkRbZnCQiQ0HIcfSu89BZE98e8/D7+3CxQ
 An//YL0lXsz1AP7weaDzovqGcrwsGwDjFZNCMsoq0ABZh+8XLzgqBcTjFrTygTuj
 0a7f5wkk
 =Qd4z
 -----END PGP SIGNATURE-----

Merge tag 'v9_18_4' into v9_18

BIND 9.18.4
2022-06-15 15:58:14 +02:00
Ondřej Surý
e644acbfae Add CHANGES and release note for [GL #3400]
(cherry picked from commit 646df5cbbc)
2022-06-14 11:54:11 +02:00
Petr Špaček
47c214644b
Set default number of additional NSEC3 iterations to 0 in dnssec-signzone
We forgot to update dnssec-signzone while updating KASP defaults.

Closes: #3395
Related: #2956
(cherry picked from commit d029d6374d)
2022-06-14 09:08:07 +02:00
Aram Sargsyan
b870d52970 Add CHANGES and release note for [GL #2506]
(cherry picked from commit 3191eabbc7)
2022-06-09 10:51:45 +00:00
Michał Kępień
05a320b476 Set up release notes for BIND 9.18.5 2022-06-03 11:03:26 +02:00
Michał Kępień
9a36774aee Add release note for GL #3327 2022-06-02 20:43:07 +02:00
Michał Kępień
f353ea526b Reorder release notes 2022-06-02 20:43:07 +02:00
Michał Kępień
71d315a461 Tweak and reword release notes 2022-06-02 20:43:07 +02:00
Michał Kępień
16006e959f Prepare release notes for BIND 9.18.4 2022-06-02 20:43:07 +02:00
Aram Sargsyan
ee7d54164e Add CHANGES and release note for [GL #3380]
(cherry picked from commit b8073cbe72)
2022-06-02 10:21:35 +00:00
Matthijs Mekking
c18dce4c49 Add CHANGE and release note for #1611
Feature change.

(cherry picked from commit 92f98002e7)
2022-05-31 17:16:59 +02:00
Michal Nowak
4dde80f655 BIND 9.18.3
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEIz+ZTe/bbr1Q+/5RJKPoRjruXlYFAmJ5PF8ACgkQJKPoRjru
 XlZqfg/+NRV6vVEJFKbL+GEUebt9Wfx+6Oqss78FutKqUjblHX18Ga8rEBHirnSr
 DsUB7LczqGUl/GJfgHkRyteBBrbEjpszkAtxXBCniJhz+mOuYRTrutB1xP43Wj/i
 2XeG3cWhjkBymVblL0xKBdBtl1ySblA+xWdp4G3vF3gRzOf/APVmdhKciA5km02s
 Kk4P2TeCjlNfSzPdwSByydnq/Ik/N1dGZDe+FKuIleULg5WZI6PMfzSy35rPDaYW
 e8NIaybjFiboTPv65L0kW/nEainNIiam4jeEOnQs0M/iKKHqILwZx/+j74E8f4qh
 P/Xdjy9voHkJpAeKSl/ZkOaBVGY9yNm5dXrNMB1926tKJ1FciH6qdfBI/s0AhZ0g
 QEVpBigM2L1rl6MobuHQ3WPkax8NcUpndDdCteZkdh5HcmRrGrw/JH1GvzSNq+75
 L3P2wciNoC9aZaXOo3FOSPRiOENUNGZjcLxntCLsJZ/B0n4Zv+vOFeNZGQTt4PC5
 Aly1LbsrOn/kbXKOiZcoEny4YQGPG55lEU+Yb6SLe5vahx24bGe2K3aP12WRy7x+
 2hcAbanoI97t+95Q1el8i3ekg9nYsE/tIbKAlHmnb/xChd4n4BSCHJBAZMgMA5Tk
 n0JbhxwTTWW3dewQzTr6jvCqi/2i5tQJCuGlhnerkgWZezk47Ko=
 =hIP4
 -----END PGP SIGNATURE-----
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEIz+ZTe/bbr1Q+/5RJKPoRjruXlYFAmKGFw4ACgkQJKPoRjru
 XlZK2Q//fy+tcGiqwxMBwhVhrkMGL4L2CKrlMgs4/DZJKnTb01IHr3DwB+Ag4iVk
 LkK9e8plr/Hf/VZ5LaV2mkk5fCdImZdP24AgpIg9VSaf+tlm6PhdPadWL6ucXayI
 TndnxLV6TdXkySu4zzWcXxgwFxUy3mku4QlAQD3UNCsikqyiUGDOP3Z/BNi9OU10
 YidisnDiPWMNBCvOU9ThPAKcGIHCwvk5rkcno771d/izvLbBWrtQh/8iKqMP6gyT
 dsB8Oq4mlPJ5gh4yv0LLmyUiNFg4CSEVxfWd6PRmZlvXtwOQqA1tKR7srPXwrHxd
 bx+5bbZtQKqEi8l/UYdHhyqaPdPWnUaydzU1LzhUSHJK2f9pEDOfBlOj82Z0hMm2
 T6EaoyykIqyhngSFK9Ef+sCAZ3qrss96bRPSN8gOpn6I6sioH+Bp+E3cBDVTkyRA
 rVKTA0HLegRH2/QnPJjHAu7I6YPE36LZu7kZdEiw8ysqWcIEva8E/PFv2YBJxAv1
 SjEdhzfxVf9ncWndrgC1OjsoDucxYolg1sUCZ776e/E7MzAkOo1cqTXqhi6pcHT0
 OGMmJVitPXJ5bxiZpK1QZ46DqxwHLolk9gImnNvE01vJRxltWKqtdV1dH6Ca6MWo
 s6qMxFcIwmI4Zgq3V933CoD8HCmYW8W7UQ1tEXmDfPwEueqzoTs=
 =/ei9
 -----END PGP SIGNATURE-----

Merge tag 'v9_18_3' into v9_18

BIND 9.18.3
2022-05-19 12:07:45 +02:00
Matthijs Mekking
7cfc5e51ed Add changes and release notes for #3302
Add a comment to make danger happy.

(cherry picked from commit 0f89f0b134)
2022-05-16 10:37:39 +02:00
Michal Nowak
bcd564089a
Set up release notes for BIND 9.18.4 2022-05-11 10:52:47 +02:00
Michal Nowak
87f017bec3
Reorder release notes 2022-05-09 11:29:18 +02:00
Michal Nowak
b2e3ecf859
Tweak and reword release notes 2022-05-09 11:26:57 +02:00
Michal Nowak
46819373e3
Prepare release notes for BIND 9.18.3 2022-05-06 17:02:29 +02:00
Artem Boldariev
ea223b9b44
Add release note entry for [GL #3216]
(cherry picked from commit 6791500e96)
2022-05-04 19:57:37 +02:00
Aram Sargsyan
50b804cf4c Add release note for catalog zones schema version 2 support
(cherry picked from commit bc3dc2eb41)
2022-05-03 16:44:14 +00:00
Artem Boldariev
a86575034c Mention TLS certs verification in the CHANGES and Release Notes
This commit adds points to the CHANGES and the release notes about
supporting remote TLS certificates verification and support for Strict
and Mutual TLS transport connections verification.
2022-04-28 13:39:21 +03:00
Artem Boldariev
8c9532f8cf Update the "Known Issues"
Mention that some old cryptographic library versions lack the
functionality to implement ignoring the Subject field (and thus the
Common Name) when establishing DoT connections.
2022-04-28 13:39:21 +03:00
Matthijs Mekking
7ad1603ac3 Add CHANGES and release notes for #2267
(cherry picked from commit a320f4ed04)
2022-04-28 11:21:28 +02:00
Michał Kępień
0deec48487 BIND 9.18.2
-----BEGIN PGP SIGNATURE-----
 
 iQJDBAABCgAtFiEENKwGS3ftSQfs1TU17QVz/8hFYQUFAmJUNK8PHG1pY2hhbEBp
 c2Mub3JnAAoJEO0Fc//IRWEFEdAQAI/9Cm/hLNw13C9Uye0Pd9tgyc45s+UtMvJ6
 Zbw6Cap7rl4eNYGqbTuI1N7PjjKzjNdM2erHd2MY7R2BGXR9z9WqK/VhFZg6NMBg
 J59xi3Vgh14CdnkuWLJv3F1WW2fYy86Kh5lFONLskfBCteGaFT/aHafCsV10CApv
 kGgH89l+z/eI9LvIVwzugUv4MG/RgASlosrNTmuuj++0XqveqkQwudmXIX4l0XLU
 /0WZAZF2VBw0Ms5LIjXZ7TqvyTPQrgXrjKLsgyaaBXeMtCN1SuZs+GydrC9WIeDd
 GI7XwJ/tPmiUe+LNx73CaNnOkcG8eSDhX/NMp7wXnzs3Mu4CL1gnvX+r0hEBpKrM
 mjdZXWHb5kerwnjrIDyXsZqAX8FWPddgv1iLb/r/KjPRZQAfN9f7wyBkLD2nP8oc
 NxfboETyEh/BPoOx8NfpxUX8AS1VXgDU6rkUkZvAuKf7X9mrH8hgKihoL5Qh973G
 vjm3SsyGo3JSKCWFFJ8GCwJDjoV/K3HEonGXWi2jvM5igDYZByUk/b4qLplOwqyp
 CgZMeBmhT32ZzbR6ltK0csFCR6o44WZav0ur/UyymQgmn6QVV4RLYmB//QxST8QF
 4lNyI7JuHIyfzRGj4cbE2D8KQcpHh8aVTncELdp/SxjDY2DwkulRG7gTm/hKTnXF
 u22FbRmc
 =dOlg
 -----END PGP SIGNATURE-----

Merge tag 'v9_18_2' into v9_18

BIND 9.18.2
2022-04-21 09:44:56 +02:00
Matthijs Mekking
c678065eaa Add CHANGE and release note for #2931
Release note worthy.

(cherry picked from commit ebbcf4c34f)
2022-04-13 14:44:18 +02:00
Michał Kępień
55221e61c0 Set up release notes for BIND 9.18.3 2022-04-12 14:13:32 +02:00
Michał Kępień
4ec20be2ae Prepare release notes for BIND 9.18.2 2022-04-11 15:56:43 +02:00
Michał Kępień
b91083494e Add release note for miscellaneous dig fixes 2022-04-11 15:56:43 +02:00
Michał Kępień
a4cc916c5b Reorder release notes 2022-04-11 15:56:43 +02:00
Michał Kępień
5c0e3a1d8d Tweak and reword release notes 2022-04-11 15:56:43 +02:00
Tony Finch
4191fd01be Ensure that dns_request_createvia() has a retry limit
There are a couple of problems with dns_request_createvia(): a UDP
retry count of zero means unlimited retries (it should mean no
retries), and the overall request timeout is not enforced. The
combination of these bugs means that requests can be retried forever.

This change alters calls to dns_request_createvia() to avoid the
infinite retry bug by providing an explicit retry count. Previously,
the calls specified infinite retries and relied on the limit implied
by the overall request timeout and the UDP timeout (which did not work
because the overall timeout is not enforced). The `udpretries`
argument is also changed to be the number of retries; previously, zero
was interpreted as infinity because of an underflow to UINT_MAX, which
appeared to be a mistake. And `mdig` is updated to match the change in
retry accounting.

The bug could be triggered by zone maintenance queries, including
NOTIFY messages, DS parental checks, refresh SOA queries and stub zone
nameserver lookups. It could also occur with `nsupdate -r 0`.
(But `mdig` had its own code to avoid the bug.)

(cherry picked from commit 71ce8b0a51)
2022-04-06 18:17:55 +01:00
Ondřej Surý
a1f3ff0dd1 Rename the configuration option to load balance sockets to reuseport
After some back and forth, it was decidede to match the configuration
option with unbound ("so-reuseport"), PowerDNS ("reuseport") and/or
nginx ("reuseport").

(cherry picked from commit 7e71c4d0cc)
2022-04-06 17:24:13 +02:00
Ondřej Surý
c8a0899ddd Revert "Add CHANGES and release note for [GL #3190]"
This reverts commit f3ae14d8c3.
2022-04-06 10:30:04 +02:00
Ondřej Surý
4c8e94fa71 Add CHANGES and release note for [GL #3249]
(cherry picked from commit 855f49cfba)
2022-04-05 00:00:17 +02:00
Ondřej Surý
f3ae14d8c3 Add CHANGES and release note for [GL #3190]
(cherry picked from commit 23a4559b34)
2022-04-04 22:59:59 +02:00
Michał Kępień
cc59e6fd3f Set up release notes for BIND 9.18.2 2022-03-16 23:18:18 +01:00
Michał Kępień
2841d81160 Prepare release notes for BIND 9.18.1 2022-03-16 23:18:18 +01:00
Michał Kępień
4f51dc7408 Reorder release notes 2022-03-16 23:18:18 +01:00
Michał Kępień
305c5bb5fa Tweak and reword release notes 2022-03-16 23:18:18 +01:00
Michał Kępień
5a7c04b520 Remove outdated release notes 2022-03-16 23:18:18 +01:00
Aram Sargsyan
897e332b6c Add CHANGES and release note for [GL #3129] 2022-03-16 23:18:18 +01:00
Mark Andrews
4a23672009 Add CHANGES and release note for [GL #3158] 2022-03-16 23:18:18 +01:00
Ondřej Surý
4a025c19b9 Add CHANGES and release note for [GL #3112] 2022-03-16 23:18:18 +01:00
Petr Špaček
1e11351d50 Add Release Note for [GL #2950] 2022-03-16 23:18:18 +01:00
Petr Špaček
07044325eb
Hyperlink program names to their manual pages
Use the new role :iscman: to replace all occurences or ``binary``
with :iscman:`binary`, creating a hyperlink to the manual page.

Generated using:
    find bin -name *.rst | xargs fgrep --files-with-matches '.. iscman' | xargs -I{} -n1 basename {} .rst > /tmp/progs
    for PROG in $(cat /tmp/progs); do find -name '*.rst' | xargs sed -i -e "s/\`\`$PROG\`\`/:iscman:\`$PROG\`/g"; done

Additional hand-edits were done mainly around filter-aaaa and
filter-a which are program names and and option names at the
same time. Couple more edits was neede to fix .rst syntax broken by
automatic replacement.

(cherry picked from commit 53a5776025)
2022-03-14 11:01:31 +01:00
Ondřej Surý
ab2dfec43f Add CHANGES and release note for [GL #3200]
(cherry picked from commit 8ace9e0c62)
2022-03-11 10:52:43 +01:00
Mark Andrews
63f194995a Add release note for [GL #3142]
(cherry picked from commit e48af36981)
2022-03-08 14:29:32 +11:00
Petr Špaček
51180dc3e4
Add release note about removal of Python tools
The release note should have been added in commit
98b3b93791.

Related: !985
2022-03-03 10:36:07 +01:00
Michał Kępień
d1f27a336a Add release note for GL #3147
(cherry picked from commit 1c462a63ec)
2022-02-23 14:43:09 +01:00