notes-9.20.16.rst revision 1.1.1.1 1 .. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
2 ..
3 .. SPDX-License-Identifier: MPL-2.0
4 ..
5 .. This Source Code Form is subject to the terms of the Mozilla Public
6 .. License, v. 2.0. If a copy of the MPL was not distributed with this
7 .. file, you can obtain one at https://mozilla.org/MPL/2.0/.
8 ..
9 .. See the COPYRIGHT file distributed with this work for additional
10 .. information regarding copyright ownership.
11
12 Notes for BIND 9.20.16
13 ----------------------
14
15 Bug Fixes
16 ~~~~~~~~~
17
18 - Skip unsupported algorithms when looking for a signing key.
19
20 A mix of supported and unsupported DNSSEC algorithms in the same zone
21 could cause validation failures. Unsupported algorithms are now
22 ignored when looking for signing keys. :gl:`#5622`
23
24 - Fix :iscman:`dnssec-keygen` key collision checking for KEY RRtype
25 keys.
26
27 The :iscman:`dnssec-keygen` utility program failed to detect possible
28 KEY ID collisions with existing keys generated using the non-default
29 ``-T KEY`` option (e.g., for ``SIG(0)``). This has been fixed.
30 :gl:`#5506`
31
32 - :iscman:`dnssec-verify` now uses exit code 1 when failing due to
33 illegal options.
34
35 Previously, :iscman:`dnssec-verify` exited with code 0 if the options
36 could not be parsed. This has been fixed. :gl:`#5574`
37
38 - Prevent assertion failures of :iscman:`dig` when a server is specified
39 before the ``-b`` option.
40
41 Previously, :iscman:`dig` could exit with an assertion failure when
42 a server was specified before the :option:`dig -b` option. This has
43 been fixed. :gl:`#5609`
44
45 - Skip buffer allocations if not logging.
46
47 Previously, we allocated a 2KB buffer for IXFR change logging,
48 regardless of the log level.
49
50 This results in a 28% speedup in some scenarios.
51
52
53