Bug Fixes
~~~~~~~~~
-- After ``rndc checkds -checkds`` or ``rndc dnssec -rollover`` is used,
- ``named`` now immediately attempts to reconfigure zone keys. This
- change prevents unnecessary key rollover delays. [GL #2488]
-
-- Zones using KASP could not be thawed after they were frozen using
- ``rndc freeze``. This has been fixed. [GL #2523]
-
-- CDS/CDNSKEY DELETE records are now removed when a zone transitions
- from a secure to an insecure state. ``named-checkzone`` also no longer
- reports an error when such records are found in an unsigned zone.
- [GL #2517]
-
-- ``named`` crashed after skipping a primary server while transferring a
- zone over TLS. This has been fixed. [GL #2562]
-
- TCP idle and initial timeouts were being incorrectly applied: only the
``tcp-initial-timeout`` was applied on the whole connection, even if
the connection were still active, which could prevent a large zone
corrupt state. (Other zone journal files were not affected.) This has
been fixed. If a corrupt journal file is detected, ``named`` can now
recover from it. [GL #2600]
+
+- CDS/CDNSKEY DELETE records are now removed when a zone transitions
+ from a secure to an insecure state. ``named-checkzone`` also no longer
+ reports an error when such records are found in an unsigned zone.
+ [GL #2517]
+
+- Zones using KASP could not be thawed after they were frozen using
+ ``rndc freeze``. This has been fixed. [GL #2523]
+
+- After ``rndc checkds -checkds`` or ``rndc dnssec -rollover`` is used,
+ ``named`` now immediately attempts to reconfigure zone keys. This
+ change prevents unnecessary key rollover delays. [GL #2488]
+
+- ``named`` crashed after skipping a primary server while transferring a
+ zone over TLS. This has been fixed. [GL #2562]