From: Dan Theisen Date: Fri, 7 Jan 2022 02:11:49 +0000 (-0800) Subject: docs: Update ARM to reflect changes to acceptable cookie-secret values X-Git-Tag: v9.18.0~13^2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=acf1d502d6e06d01cf6ea0a6f6621a7c88050dc0;p=thirdparty%2Fbind9.git docs: Update ARM to reflect changes to acceptable cookie-secret values --- diff --git a/doc/arm/reference.rst b/doc/arm/reference.rst index d7931e018e4..3fc60e17864 100644 --- a/doc/arm/reference.rst +++ b/doc/arm/reference.rst @@ -1928,8 +1928,8 @@ Boolean Options If set, this is a shared secret used for generating and verifying EDNS COOKIE options within an anycast cluster. If not set, the system generates a random secret at startup. The shared secret is - encoded as a hex string and needs to be 128 bits for AES128, 160 bits - for SHA1, and 256 bits for SHA256. + encoded as a hex string and needs to be 128 bits for either "siphash24" + or "aes". If there are multiple secrets specified, the first one listed in ``named.conf`` is used to generate new server cookies. The others