1 .. Copyright (C) Internet Systems Consortium, Inc. ("ISC") 2 .. 3 .. SPDX-License-Identifier: MPL-2.0 4 .. 5 .. This Source Code Form is subject to the terms of the Mozilla Public 6 .. License, v. 2.0. If a copy of the MPL was not distributed with this 7 .. file, you can obtain one at https://mozilla.org/MPL/2.0/. 8 .. 9 .. See the COPYRIGHT file distributed with this work for additional 10 .. information regarding copyright ownership. 11 12 Notes for BIND 9.20.16 13 ---------------------- 14 15 Bug Fixes 16 ~~~~~~~~~ 17 18 - Skip unsupported algorithms when looking for a signing key. 19 20 A mix of supported and unsupported DNSSEC algorithms in the same zone 21 could cause validation failures. Unsupported algorithms are now 22 ignored when looking for signing keys. :gl:`#5622` 23 24 - Fix :iscman:`dnssec-keygen` key collision checking for KEY RRtype 25 keys. 26 27 The :iscman:`dnssec-keygen` utility program failed to detect possible 28 KEY ID collisions with existing keys generated using the non-default 29 ``-T KEY`` option (e.g., for ``SIG(0)``). This has been fixed. 30 :gl:`#5506` 31 32 - :iscman:`dnssec-verify` now uses exit code 1 when failing due to 33 illegal options. 34 35 Previously, :iscman:`dnssec-verify` exited with code 0 if the options 36 could not be parsed. This has been fixed. :gl:`#5574` 37 38 - Prevent assertion failures of :iscman:`dig` when a server is specified 39 before the ``-b`` option. 40 41 Previously, :iscman:`dig` could exit with an assertion failure when 42 a server was specified before the :option:`dig -b` option. This has 43 been fixed. :gl:`#5609` 44 45 - Skip buffer allocations if not logging. 46 47 Previously, we allocated a 2KB buffer for IXFR change logging, 48 regardless of the log level. 49 50 This results in a 28% speedup in some scenarios. 51 52 53
Indexes created Wed Apr 29 00:23:26 UTC 2026