GitLab

4809.	[port]		Check at configure time whether -latomic is needed
			for stdatomic.h. [RT #46324]

Mukund Sivaraman authored Nov 06, 2017 and Evan Hunt committed Nov 06, 2017

4807.	[cleanup]	isc_rng_randombytes() returns a specified number of
			bytes from the PRNG; this is now used instead of
			calling isc_rng_random() multiple times. [RT #46230]

4806.	[func]		Log messages related to loading of zones are now
			directed to the "zoneload" logging category.
			[RT #41640]

                        correctly. [RT #46454]

                        required by POSIX.  Supply a alternative in
                        isc_file_isdirwritable. [RT #46394]

4802.	[test]		Refactor mkeys system test to make it quicker and more
			reliable. [RT #45293]

                        trust-anchor dlv.isc.org;' now elicit warnings rather
                        than being fatal configuration errors. [RT #46410]

4799.	[cleanup]	Improve clarity of keytable unit tests. [RT #46407]

4798.	[func]		Keys specified in "managed-keys" statements
			are tagged as "initializing" until they have been
			updated by a key refresh query. If initialization
			fails it will be visible from "rndc secroots".
			[RT #46267]

this completes change 4785. the CHANGES note has been revised:

4785.	[func]		The hmac-md5 algorithm is no longer recommended for
			use with RNDC keys.  The default in rndc-confgen
			is now hmac-sha256. [RT #42272]

4797.	[func]		Removed "isc-hmac-fixup", as the versions of BIND that
			had the bug it worked around are long past end of
			life. [RT #46411]

Brian Conry authored Oct 27, 2017 and Ondřej Surý committed Oct 27, 2017

4796.	[bug]		Increase the maximum configurable TCP keepalive
			timeout to 65535. [RT #44710]

4795.	[func]		A new statistics counter has been added to track
			priming queries. [RT #46313]

4794.	[func]		"dnssec-checkds -s" specifies a file from which
			to read a DS set rather than querying the parent.
			[RT #44667]

                        addresses. [RT #46402]

4792.	[bug]		Fix map file header correctness check. [RT #38418]

4791.	[doc]		Fixed outdated documentation about export libraries.
			[RT #46341]

                        update to the second address of the server.
                        [RT #45731]

4789.	[cleanup]	Check writability of new-zones-directory. [RT #46308]

4788.	[cleanup]	When using "update-policy local", log a warning
			when an update matching the session key is received
			from a remote host. [RT #46213]

- this completes change #4762.

[master] Rename nsec3param_salt_totext() to dns_nsec3param_salttotext(), make it public, add unit tests

4786.	[cleanup]	Turn nsec3param_salt_totext() into a public function,
			dns_nsec3param_salttotext(), and add unit tests for it.
			[RT #46289]

4786.	[func]		The "filter-aaaa-on-v4" and "filter-aaaa-on-v6"
			options are no longer conditionally compiled.
			[RT #46340]

4785.	[func]		The hmac-md5 algorithm is no longer recommended for
			use with RNDC keys. For compatibility reasons, it
			it is still the default algorithm in rndc-confgen,
			but this will be changed to hmac-sha256 in a future
			release. [RT #42272]

4784.	[func]		The use of dnssec-keygen to generate HMAC keys is
			deprecated in favor of tsig-keygen.  dnssec-keygen
			will print a warning when used for this purpose.
			All HMAC algorithms will be removed from
			dnssec-keygen in a future release. [RT #42272]

                        NSEC3 chain generation failed' required more time
                        on some machines for the IXFR to complete. [RT #46388]

                        with negative trust anchors' required more time to
                        complete on some machines. [RT #46386]

4780.	[bug]		When answering ANY queries, don't include the NS
			RRset in the authority section if it was already
			in the answer section. [RT #44543]

                        the expiry value if the record has already expired
                        after a successful check. [RT #46368]

4777.	[cleanup]	Removed a redundant call to configure_view_acl().
			[RT #46369]

                        [RT #46281]

                        header files. [RT #46311]

4773.	[doc]		Fixed generating Doxygen documentation for functions
			annotated using certain macros.  Miscellaneous
			Doxygen-related cleanups. [RT #46276]