From e936887b3c3dd78a42de0af8e04c30ef72516a09 Mon Sep 17 00:00:00 2001 From: Otto Moerbeek Date: Wed, 5 Nov 2025 15:39:50 +0100 Subject: [PATCH] rec: Update upgrade guide and correct version info for cookie support Signed-off-by: Otto Moerbeek --- pdns/recursordist/docs/upgrade.rst | 4 ++-- pdns/recursordist/rec-rust-lib/table.py | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/pdns/recursordist/docs/upgrade.rst b/pdns/recursordist/docs/upgrade.rst index 2dbca467f9..5ad43f9c7c 100644 --- a/pdns/recursordist/docs/upgrade.rst +++ b/pdns/recursordist/docs/upgrade.rst @@ -12,12 +12,12 @@ New Settings - The :ref:`setting-yaml-outgoing.cookies` setting has been introduced to implement cookie support for contacting authoritative servers and forwarders. See :rfc:`7873` and :rfc:`9018`. - The :ref:`setting-yaml-outgoing.cookies_unsupported` setting has been introduced to permanently mark authoritative servers as not supporting cookies. +- The :ref:`setting-yaml-outgoing.tls_configurations` setting has been introduced to be able to force certificate validation and other properties of outgoing DoT connections. :program:`rec_control` ^^^^^^^^^^^^^^^^^^^^^^ -- The ``dump-cookies`` subcommand has been added to dump a table showing cookie support for each -authoritative server contacted recently. +- The ``dump-cookies`` subcommand has been added to dump a table showing cookie support for each authoritative server contacted recently. - The ``clear-cookies`` subcommand has been added to clear entries from the cookie support table. - The ``add-cookies-unsupported`` subcommand has been added to mark an authoritative server as not supporting cookies. diff --git a/pdns/recursordist/rec-rust-lib/table.py b/pdns/recursordist/rec-rust-lib/table.py index 1740e3496a..eeb2c6620e 100644 --- a/pdns/recursordist/rec-rust-lib/table.py +++ b/pdns/recursordist/rec-rust-lib/table.py @@ -3628,7 +3628,7 @@ Sequence of ForwardingCatalogZone. This setting cannot be combined with :ref:`se 'doc': ''' Enable DNS cookies (:rfc:`7873`, :rfc:`9018`) when contacting authoritative servers or forwarders. ''', - 'versionadded': '5.3.0', + 'versionadded': '5.4.0', }, { 'name' : 'cookies_unsupported', @@ -3640,7 +3640,7 @@ Enable DNS cookies (:rfc:`7873`, :rfc:`9018`) when contacting authoritative serv 'doc': ''' Addresses of servers that do not properly support DNS cookies (:rfc:`7873`, :rfc:`9018`). Recursor wil not even try to probe these servers for cookie support. If no port is specified port 53 is used. ''', - 'versionadded': '5.3.0', + 'versionadded': '5.4.0', }, { 'name' : 'tls_configurations', -- 2.47.3