From: Matthijs Mekking Date: Tue, 11 Jul 2023 14:57:42 +0000 (+0200) Subject: Add release note and CHANGES for #3672 X-Git-Tag: v9.19.16~32^2~1 X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=6504b563cbd93f92b7723949a758b8cbc2e132c6;p=thirdparty%2Fbind9.git Add release note and CHANGES for #3672 "The king is dead. Long live the king." --- diff --git a/CHANGES b/CHANGES index 66de1c0c14f..923e0d1907d 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,8 @@ +6211. [func] Remove 'auto-dnssec'. This obsoletes the configuration + options 'dnskey-sig-validity', 'dnssec-dnskey-kskonly', + 'dnssec-update-mode', 'sig-validity-interval', and + 'update-check-ksk'. [GL #3672] + 6210. [func] Don't add signing records for DNSKEY added with dynamic update. The dynamic update DNSSEC management feature was removed with GL #3686. [GL !8070] diff --git a/doc/notes/notes-9.19.8.rst b/doc/notes/notes-9.19.8.rst index a0fed9bc864..257b96d7297 100644 --- a/doc/notes/notes-9.19.8.rst +++ b/doc/notes/notes-9.19.8.rst @@ -38,7 +38,7 @@ Feature Changes ``--with-tuning`` option) has either been removed or changed to a sensible default. :gl:`#3664` -- The :any:`auto-dnssec` option has been deprecated and will be removed +- The ``auto-dnssec`` option has been deprecated and will be removed in a future BIND 9.19.x release. Please migrate to :any:`dnssec-policy`. :gl:`#3667` diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst index 0da2da6adad..7e8907db101 100644 --- a/doc/notes/notes-current.rst +++ b/doc/notes/notes-current.rst @@ -25,7 +25,11 @@ New Features Removed Features ~~~~~~~~~~~~~~~~ -- None. +- The 'auto-dnssec' configuration option has now been removed. Please + use :any:`dnssec-policy` or manual signing instead. The following options + have become obsolete: :any:`dnskey-sig-validity`, :any:`dnssec-dnskey-kskonly`, + :any:`dnssec-update-mode`, :any:`sig-validity-interval`, and + :any:`update-check-ksk`. :gl:`#3672`. Feature Changes ~~~~~~~~~~~~~~~