GitLab

don't use the ERR macro as GCC 7 only does a partial static analysis which generates false positives for fallthrough. [RT #46115]

                        required by POSIX.  Supply a alternative in
                        isc_file_isdirwritable. [RT #46394]

awk on Solaris does not support the FNR variable.  As nextpart() only
reads from one file, replace FNR with NR.

4802.	[test]		Refactor mkeys system test to make it quicker and more
			reliable. [RT #45293]

                        trust-anchor dlv.isc.org;' now elicit warnings rather
                        than being fatal configuration errors. [RT #46410]

4799.	[cleanup]	Improve clarity of keytable unit tests. [RT #46407]

4798.	[func]		Keys specified in "managed-keys" statements
			are tagged as "initializing" until they have been
			updated by a key refresh query. If initialization
			fails it will be visible from "rndc secroots".
			[RT #46267]

this completes change 4785. the CHANGES note has been revised:

4785.	[func]		The hmac-md5 algorithm is no longer recommended for
			use with RNDC keys.  The default in rndc-confgen
			is now hmac-sha256. [RT #42272]

4797.	[func]		Removed "isc-hmac-fixup", as the versions of BIND that
			had the bug it worked around are long past end of
			life. [RT #46411]

Brian Conry authored Oct 27, 2017 and Ondřej Surý committed Oct 27, 2017

4796.	[bug]		Increase the maximum configurable TCP keepalive
			timeout to 65535. [RT #44710]

4795.	[func]		A new statistics counter has been added to track
			priming queries. [RT #46313]

4794.	[func]		"dnssec-checkds -s" specifies a file from which
			to read a DS set rather than querying the parent.
			[RT #44667]

- add info about rdatasets, etc, to dev.md (thanks to Tony Finch)
- convert rdata.html to markdown