From b441152036282ed11c583a5cf5a9b3287ab94afc Mon Sep 17 00:00:00 2001
From: Tinderbox User
Date: Sat, 6 Apr 2019 20:09:50 +0000
Subject: [PATCH] doc rebuild
---
README | 5 +
bin/dnssec/dnssec-keygen.8 | 15 +-
bin/dnssec/dnssec-keygen.html | 15 +-
doc/arm/Bv9ARM.ch01.html | 2 +-
doc/arm/Bv9ARM.ch02.html | 2 +-
doc/arm/Bv9ARM.ch03.html | 2 +-
doc/arm/Bv9ARM.ch04.html | 2 +-
doc/arm/Bv9ARM.ch05.html | 37 +-
doc/arm/Bv9ARM.ch06.html | 2 +-
doc/arm/Bv9ARM.ch07.html | 2 +-
doc/arm/Bv9ARM.ch08.html | 521 +++------------------------
doc/arm/Bv9ARM.ch09.html | 2 +-
doc/arm/Bv9ARM.ch10.html | 2 +-
doc/arm/Bv9ARM.ch11.html | 2 +-
doc/arm/Bv9ARM.ch12.html | 2 +-
doc/arm/Bv9ARM.html | 10 +-
doc/arm/Bv9ARM.pdf | Bin 1089242 -> 1076723 bytes
doc/arm/man.arpaname.html | 2 +-
doc/arm/man.ddns-confgen.html | 2 +-
doc/arm/man.delv.html | 2 +-
doc/arm/man.dig.html | 2 +-
doc/arm/man.dnssec-cds.html | 2 +-
doc/arm/man.dnssec-checkds.html | 2 +-
doc/arm/man.dnssec-coverage.html | 2 +-
doc/arm/man.dnssec-dsfromkey.html | 2 +-
doc/arm/man.dnssec-importkey.html | 2 +-
doc/arm/man.dnssec-keyfromlabel.html | 2 +-
doc/arm/man.dnssec-keygen.html | 17 +-
doc/arm/man.dnssec-keymgr.html | 2 +-
doc/arm/man.dnssec-revoke.html | 2 +-
doc/arm/man.dnssec-settime.html | 2 +-
doc/arm/man.dnssec-signzone.html | 2 +-
doc/arm/man.dnssec-verify.html | 2 +-
doc/arm/man.dnstap-read.html | 2 +-
doc/arm/man.filter-aaaa.html | 2 +-
doc/arm/man.host.html | 2 +-
doc/arm/man.mdig.html | 2 +-
doc/arm/man.named-checkconf.html | 2 +-
doc/arm/man.named-checkzone.html | 2 +-
doc/arm/man.named-journalprint.html | 2 +-
doc/arm/man.named-nzd2nzf.html | 2 +-
doc/arm/man.named-rrchecker.html | 2 +-
doc/arm/man.named.conf.html | 2 +-
doc/arm/man.named.html | 2 +-
doc/arm/man.nsec3hash.html | 2 +-
doc/arm/man.nslookup.html | 2 +-
doc/arm/man.nsupdate.html | 2 +-
doc/arm/man.pkcs11-destroy.html | 2 +-
doc/arm/man.pkcs11-keygen.html | 2 +-
doc/arm/man.pkcs11-list.html | 2 +-
doc/arm/man.pkcs11-tokens.html | 2 +-
doc/arm/man.rndc-confgen.html | 2 +-
doc/arm/man.rndc.conf.html | 2 +-
doc/arm/man.rndc.html | 2 +-
doc/arm/notes.html | 513 ++------------------------
doc/arm/notes.pdf | Bin 82976 -> 58311 bytes
doc/arm/notes.txt | 291 +--------------
doc/misc/options | 6 +-
58 files changed, 209 insertions(+), 1313 deletions(-)
diff --git a/README b/README
index 75ed2e9cae..de9fce81d9 100644
--- a/README
+++ b/README
@@ -143,6 +143,11 @@ addition to OpenSSL, BIND now requires support for IPv6, threads, and
standard atomic operations provided by the C compiler. Non-threaded builds
are no longer supported.
+BIND 9.14.1
+
+BIND 9.14.1 is a maintenance release, and addresses security
+vulnerabilities disclosed in CVE-2018-5743 and CVE-2019-6467.
+
Building BIND
Minimally, BIND requires a UNIX or Linux system with an ANSI C compiler,
diff --git a/bin/dnssec/dnssec-keygen.8 b/bin/dnssec/dnssec-keygen.8
index 2cdddaebae..7758ae9d3e 100644
--- a/bin/dnssec/dnssec-keygen.8
+++ b/bin/dnssec/dnssec-keygen.8
@@ -308,17 +308,18 @@ contains the private key\&.
.PP
The
\&.key
-file contains a DNS KEY record that can be inserted into a zone file (directly or with a $INCLUDE statement)\&.
+file contains a DNSKEY or KEY record\&. When a zone is being signed by
+\fBnamed\fR
+or
+\fBdnssec\-signzone\fR\fB\-S\fR, DNSKEY records are included automatically\&. In other cases, the
+\&.key
+file can be inserted into a zone file manually or with a
+\fB$INCLUDE\fR
+statement\&.
.PP
The
\&.private
file contains algorithm\-specific fields\&. For obvious security reasons, this file does not have general read permission\&.
-.PP
-Both
-\&.key
-and
-\&.private
-files are generated for symmetric cryptography algorithms such as HMAC\-MD5, even though the public and private key are equivalent\&.
.SH "EXAMPLE"
.PP
To generate an ECDSAP256SHA256 zone\-signing key for the zone
diff --git a/bin/dnssec/dnssec-keygen.html b/bin/dnssec/dnssec-keygen.html
index 73591c031d..b23904790a 100644
--- a/bin/dnssec/dnssec-keygen.html
+++ b/bin/dnssec/dnssec-keygen.html
@@ -462,10 +462,12 @@
key.
- The .key
file contains a DNS KEY record
- that
- can be inserted into a zone file (directly or with a $INCLUDE
- statement).
+ The .key
file contains a DNSKEY or KEY record.
+ When a zone is being signed by named
+ or dnssec-signzone -S
, DNSKEY
+ records are included automatically. In other cases,
+ the .key
file can be inserted into a zone file
+ manually or with a $INCLUDE
statement.
The .private
file contains
@@ -473,11 +475,6 @@
fields. For obvious security reasons, this file does not have
general read permission.
-
- Both .key
and .private
- files are generated for symmetric cryptography algorithms such as
- HMAC-MD5, even though the public and private key are equivalent.
-
diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html
index 62c2ca5564..0c46be3166 100644
--- a/doc/arm/Bv9ARM.ch01.html
+++ b/doc/arm/Bv9ARM.ch01.html
@@ -614,6 +614,6 @@
-BIND 9.14.0 (Stable Release)
+BIND 9.14.1 (Stable Release)