]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
Add note about removing ECC-GOST to release notes
authorOndřej Surý <ondrej@sury.org>
Fri, 25 May 2018 14:33:46 +0000 (16:33 +0200)
committerOndřej Surý <ondrej@sury.org>
Tue, 5 Jun 2018 07:14:14 +0000 (09:14 +0200)
doc/arm/notes.xml

index 553c7da716afdf4e98f982c50fd5b0aed82b092e..1c7085fda4ea5364fab62960c10c0a3b19f32e4e 100644 (file)
          command.
        </para>
       </listitem>
+      <listitem>
+       <para>
+         Support for ECC-GOST (GOST R 34.11-94) algorithm has been
+         removed from BIND as the algorithm has been superseded by
+         GOST R 34.11-2012 in RFC6986 and it must not be used in new
+         deployments.  BIND will neither create new DNSSEC keys,
+         signatures and digest, nor it will validate them.
+       </para>
+      </listitem>
     </itemizedlist>
   </section>