From: Otto Moerbeek Date: Wed, 5 Nov 2025 14:39:50 +0000 (+0100) Subject: rec: Update upgrade guide and correct version info for cookie support X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F16434%2Fhead;p=thirdparty%2Fpdns.git rec: Update upgrade guide and correct version info for cookie support Signed-off-by: Otto Moerbeek --- diff --git a/pdns/recursordist/docs/upgrade.rst b/pdns/recursordist/docs/upgrade.rst index 2dbca467f9..5ad43f9c7c 100644 --- a/pdns/recursordist/docs/upgrade.rst +++ b/pdns/recursordist/docs/upgrade.rst @@ -12,12 +12,12 @@ New Settings - The :ref:`setting-yaml-outgoing.cookies` setting has been introduced to implement cookie support for contacting authoritative servers and forwarders. See :rfc:`7873` and :rfc:`9018`. - The :ref:`setting-yaml-outgoing.cookies_unsupported` setting has been introduced to permanently mark authoritative servers as not supporting cookies. +- The :ref:`setting-yaml-outgoing.tls_configurations` setting has been introduced to be able to force certificate validation and other properties of outgoing DoT connections. :program:`rec_control` ^^^^^^^^^^^^^^^^^^^^^^ -- The ``dump-cookies`` subcommand has been added to dump a table showing cookie support for each -authoritative server contacted recently. +- The ``dump-cookies`` subcommand has been added to dump a table showing cookie support for each authoritative server contacted recently. - The ``clear-cookies`` subcommand has been added to clear entries from the cookie support table. - The ``add-cookies-unsupported`` subcommand has been added to mark an authoritative server as not supporting cookies. diff --git a/pdns/recursordist/rec-rust-lib/table.py b/pdns/recursordist/rec-rust-lib/table.py index 1740e3496a..eeb2c6620e 100644 --- a/pdns/recursordist/rec-rust-lib/table.py +++ b/pdns/recursordist/rec-rust-lib/table.py @@ -3628,7 +3628,7 @@ Sequence of ForwardingCatalogZone. This setting cannot be combined with :ref:`se 'doc': ''' Enable DNS cookies (:rfc:`7873`, :rfc:`9018`) when contacting authoritative servers or forwarders. ''', - 'versionadded': '5.3.0', + 'versionadded': '5.4.0', }, { 'name' : 'cookies_unsupported', @@ -3640,7 +3640,7 @@ Enable DNS cookies (:rfc:`7873`, :rfc:`9018`) when contacting authoritative serv 'doc': ''' Addresses of servers that do not properly support DNS cookies (:rfc:`7873`, :rfc:`9018`). Recursor wil not even try to probe these servers for cookie support. If no port is specified port 53 is used. ''', - 'versionadded': '5.3.0', + 'versionadded': '5.4.0', }, { 'name' : 'tls_configurations',