From: Arаm Sаrgsyаn <aram@isc.org>
Date: Fri, 12 Jun 2026 15:36:57 +0000 (+0000)
Subject: fix: usr: Fix a zone transfer over TLS (XoT) issue when using the opportunistic TLS... 
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e0d84f8370e67030498e95c60a4d5434b03d2519;p=thirdparty%2Fbind9.git

fix: usr: Fix a zone transfer over TLS (XoT) issue when using the opportunistic TLS mode

The :iscman:`named` process, running as secondary DNS server,
configured to transfer a zone from a primary server using an
encrypted XoT transport in opportunistic TLS mode (i.e. without
peer certificate/hostname validation) could terminate unexpectedly
when the TLS ALPN negotiation with primary server was unsuccessful.
This has been fixed.

Closes #5957

Merge branch '5957-xot-xfrin_connect_done-bug-fix' into 'main'

See merge request isc-projects/bind9!12081
---

e0d84f8370e67030498e95c60a4d5434b03d2519