GitLab

                        connections to be shared. [RT #37039]

3811.	[func]		"serial-update-method date;" sets serial number
			on dynamic update to today's date in YYYYMMDDNN
			format. (Thanks to Bradley Forschinger.) [RT #24903]

3746.	[func]		New "max-zone-ttl" option enforces maximum
			TTLs for zones. If loading a zone containing a
			higher TTL, the load fails. DDNS updates with
			higher TTLs are accepted but the TTL is truncated.
			(Note: Currently supported for master zones only;
			inline-signing slaves will be added.) [RT #38405]

3714.	[test]		System tests that need to test for cryptography
			support before running can now use a common
			"testcrypto.sh" script to do so. [RT #35213]

                        in a key zone. [RT #34238]

3490.	[bug]		When logging RDATA during update, truncate if it's
                        too long. [RT #32365]

cherry picked from:
        commit 16ddb566e5a5b57bf925adef2b5543dddc1de49b
        commit cd97e0c23b09f38aac49aabab66ee13c68b7a3f3
        commit d087fa982649c081d58c5bb16e63da3428e2b89d
        commit d0795bdffef57612dd7654ffd09c9f4216eee2c8

3474.	[bug]		nsupdate could assert when the local and remote
			address families didn't match. [RT #22897]

3448.	[bug]		The allow-query-on ACL was not processed correctly.
			[RT #29486]

3431.	[bug]		ddns-confgen: Some valid key algorithms were
			not accepted. [RT #31927]

                        if built with readline support. [RT #29550]

			Also simplified nsupdate syntax to make "update"
			and "prereq" optional. [RT #24659]

                        zone's serial number.  Two methods are currently
                        defined using serial-update-method, "increment"
                        (default) and "unixtime".  [RT #23849]

			negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets. [RT #24777]

3123.	[security]	Change #2912 exposed a latent flaw in
			dns_rdataset_totext() that could cause named to
			crash with an assertion failure. [RT #24777]

			SIG(0) keys. [RT #24604]

			as a zone's masters clause.  This means it is
			now possible to specify a TSIG key to use when
			sending notifies to a given server, or to include
			an explicit named masters list in an also-notfiy
			statement.  [RT #23508]

                        signing records for any remaing DNSKEY changes.
                        [RT #22590]

                        TTL of the NSEC3PARAM RRset. [RT #22363]

                        [RT #21670]

			consistency check examining the existing version
			of the zone rather than the new version resulting
			from the UPDATE. [RT #22413]

apparent transfer failure on the initial calls to dig.  Adding a test
here to make sure the zones are fully loaded before attempting to query
them.

			added a regression test to check it. [RT #20007]