Bv9ARM.ch09.html revision 32098293b78922a5fbd10906afa28624820d3756
1633838b8255282d10af15c5c84cee5a51466712Bob Halley<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
1633838b8255282d10af15c5c84cee5a51466712Bob Halley - Copyright (C) 2000-2017 Internet Systems Consortium, Inc. ("ISC")
1633838b8255282d10af15c5c84cee5a51466712Bob Halley - This Source Code Form is subject to the terms of the Mozilla Public
1633838b8255282d10af15c5c84cee5a51466712Bob Halley - License, v. 2.0. If a copy of the MPL was not distributed with this
1633838b8255282d10af15c5c84cee5a51466712Bob Halley - file, You can obtain one at http://mozilla.org/MPL/2.0/.
1633838b8255282d10af15c5c84cee5a51466712Bob Halley<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
1633838b8255282d10af15c5c84cee5a51466712Bob Halley<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
1633838b8255282d10af15c5c84cee5a51466712Bob Halley<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
1633838b8255282d10af15c5c84cee5a51466712Bob Halley<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
1633838b8255282d10af15c5c84cee5a51466712Bob Halley<link rel="prev" href="Bv9ARM.ch08.html" title="Chapter�8.�Troubleshooting">
c50fd34a4e0e6978f8ca5f6f3ad8545549c3cfeeBob Halley<link rel="next" href="Bv9ARM.ch10.html" title="Appendix�B.�A Brief History of the DNS and BIND">
c50fd34a4e0e6978f8ca5f6f3ad8545549c3cfeeBob Halley<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
e4e071ae12aee942fefc2c0a3280e402938669deBob Halley<tr><th colspan="3" align="center">Appendix�A.�Release Notes</th></tr>
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a>�</td>
904a5734375869ffb504ed8cde6b68cafadb6d64Bob Halley<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch10.html">Next</a>
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington<div class="titlepage"><div><div><h1 class="title">
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington<a name="Bv9ARM.ch09"></a>Release Notes</h1></div></div></div>
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.2b1</a></span></dt>
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington<dt><span class="section"><a href="Bv9ARM.ch09.html#root_key">New DNSSEC Root Key</a></span></dt>
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_license">License Change</a></span></dt>
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_security">Security Fixes</a></span></dt>
c50fd34a4e0e6978f8ca5f6f3ad8545549c3cfeeBob Halley<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_changes">Feature Changes</a></span></dt>
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_bugs">Bug Fixes</a></span></dt>
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley<dt><span class="section"><a href="Bv9ARM.ch09.html#end_of_life">End of Life</a></span></dt>
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_thanks">Thank You</a></span></dt>
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington<div class="titlepage"><div><div><h2 class="title" style="clear: both">
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.2b1</h2></div></div></div>
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington<div class="titlepage"><div><div><h3 class="title">
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington<a name="relnotes_intro"></a>Introduction</h3></div></div></div>
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington This document summarizes changes since the last production
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington release on the BIND 9.11 branch.
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington Please see the <code class="filename">CHANGES</code> file for a further
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley list of bug fixes and other changes.
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington<div class="titlepage"><div><div><h3 class="title">
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington<a name="relnotes_download"></a>Download</h3></div></div></div>
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington The latest versions of BIND 9 software can always be found at
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington <a class="link" href="http://www.isc.org/downloads/" target="_top">http://www.isc.org/downloads/</a>.
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington There you will find additional information about each release,
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington source code, and pre-compiled versions for Microsoft Windows
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington operating systems.
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington<div class="titlepage"><div><div><h3 class="title">
125d72976ab6b8fa6629a5ace276a86e9fef91acBrian Wellington<a name="root_key"></a>New DNSSEC Root Key</h3></div></div></div>
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley ICANN is in the process of introducing a new Key Signing Key (KSK) for
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley the global root zone. BIND has multiple methods for managing DNSSEC
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley trust anchors, with somewhat different behaviors. If the root
308c7ad5f68301d19f023af616f62f3e7cbce632Andreas Gustafsson key is configured using the <span class="command"><strong>managed-keys</strong></span>
04b8111f2137a9cf9b0b71228f76b3e40ffa1173Brian Wellington statement, or if the pre-configured root key is enabled by using
04b8111f2137a9cf9b0b71228f76b3e40ffa1173Brian Wellington <span class="command"><strong>dnssec-validation auto</strong></span>, then BIND can keep
ccad3c9ecbe8a1060ff7b407a318ccd592de536eBrian Wellington keys up to date automatically. Servers configured in this way
ccad3c9ecbe8a1060ff7b407a318ccd592de536eBrian Wellington will roll seamlessly to the new key when it is published in
ccad3c9ecbe8a1060ff7b407a318ccd592de536eBrian Wellington the root zone. However, keys configured using the
ccad3c9ecbe8a1060ff7b407a318ccd592de536eBrian Wellington <span class="command"><strong>trusted-keys</strong></span> statement are not automatically
ccad3c9ecbe8a1060ff7b407a318ccd592de536eBrian Wellington maintained. If your server is performing DNSSEC validation
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley and is configured using <span class="command"><strong>trusted-keys</strong></span>, you are
ccad3c9ecbe8a1060ff7b407a318ccd592de536eBrian Wellington advised to change your configuration before the root zone begins
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley signing with the new KSK. This is currently scheduled for
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley October 11, 2017.
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley This release includes an updated version of the
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley <code class="filename">bind.keys</code> file containing the new root
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley key. This file can also be downloaded from
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley <a class="link" href="https://www.isc.org/bind-keys" target="_top">
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley<div class="titlepage"><div><div><h3 class="title">
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley<a name="relnotes_license"></a>License Change</h3></div></div></div>
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley With the release of BIND 9.11.0, ISC changed to the open
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley source license for BIND from the ISC license to the Mozilla
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley Public License (MPL 2.0).
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley The MPL-2.0 license requires that if you make changes to
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley licensed software (e.g. BIND) and distribute them outside
c50fd34a4e0e6978f8ca5f6f3ad8545549c3cfeeBob Halley your organization, that you publish those changes under that
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley same license. It does not require that you publish or disclose
25e43e68b7431d5e4ff8b5427108cd7f5f9bcf3eBob Halley anything other than the changes you made to our software.
904a5734375869ffb504ed8cde6b68cafadb6d64Bob Halley This new requirement will not affect anyone who is using BIND
904a5734375869ffb504ed8cde6b68cafadb6d64Bob Halley without redistributing it, nor anyone redistributing it without
c50fd34a4e0e6978f8ca5f6f3ad8545549c3cfeeBob Halley changes, therefore this change will be without consequence
license may contact ISC at <a class="link" href="https://www.isc.org/mission/contact/" target="_top">
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
<a class="link" href="https://www.isc.org/downloads/software-support-policy/" target="_top">https://www.isc.org/downloads/software-support-policy/</a>