mirror of
https://github.com/opnsense/src.git
synced 2026-02-10 06:15:40 -05:00
Notable new features: * Elliptic Curve Digital Signature Algorithm keys and signatures in DNSSEC are now supported per RFC 6605. [RT #21918] * Introduces a new tool "dnssec-verify" that validates a signed zone, checking for the correctness of signatures and NSEC/NSEC3 chains. [RT #23673] * BIND now recognizes the TLSA resource record type, created to support IETF DANE (DNS-based Authentication of Named Entities) [RT #28989] * The new "inline-signing" option, in combination with the "auto-dnssec" option that was introduced in BIND 9.7, allows named to sign zones completely transparently. Approved by: delphij (mentor) MFC after: 3 days Sponsored by: DK Hostmaster A/S |
||
|---|---|---|
| .. | ||
| bind9 | ||
| dns | ||
| isc | ||
| isccc | ||
| isccfg | ||
| lwres | ||
| config.h | ||
| config.mk | ||
| Makefile | ||