notes.html revision 164ade1482251e1da962b42e5bf0d3aa02a11e03
a2b3d5bb602a9a0d970b6640948f1d7d75ce78bfEugen Kuksa - This Source Code Form is subject to the terms of the Mozilla Public
a2b3d5bb602a9a0d970b6640948f1d7d75ce78bfEugen Kuksa - License, v. 2.0. If a copy of the MPL was not distributed with this
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger - file, You can obtain one at http://mozilla.org/MPL/2.0/.
3bba6fbf5fce9f7d72b39197fde41b9db2d4f9b5Eugen Kuksa<!-- $Id$ -->
3bba6fbf5fce9f7d72b39197fde41b9db2d4f9b5Eugen Kuksa<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
3bba6fbf5fce9f7d72b39197fde41b9db2d4f9b5Eugen Kuksa<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
3bba6fbf5fce9f7d72b39197fde41b9db2d4f9b5Eugen Kuksa<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="article">
3bba6fbf5fce9f7d72b39197fde41b9db2d4f9b5Eugen Kuksa<div class="titlepage"><div><div><h2 class="title" style="clear: both">
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger<a name="id-1.2"></a>Release Notes for BIND Version 9.11.2b1</h2></div></div></div>
3bba6fbf5fce9f7d72b39197fde41b9db2d4f9b5Eugen Kuksa<div class="titlepage"><div><div><h3 class="title">
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger<a name="relnotes_intro"></a>Introduction</h3></div></div></div>
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger This document summarizes changes since the last production
3bba6fbf5fce9f7d72b39197fde41b9db2d4f9b5Eugen Kuksa release on the BIND 9.11 branch.
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger Please see the <code class="filename">CHANGES</code> file for a further
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger list of bug fixes and other changes.
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger<div class="titlepage"><div><div><h3 class="title">
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger<a name="relnotes_download"></a>Download</h3></div></div></div>
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger The latest versions of BIND 9 software can always be found at
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger <a class="link" href="http://www.isc.org/downloads/" target="_top">http://www.isc.org/downloads/</a>.
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger There you will find additional information about each release,
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger source code, and pre-compiled versions for Microsoft Windows
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger operating systems.
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger<div class="titlepage"><div><div><h3 class="title">
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger<a name="root_key"></a>New DNSSEC Root Key</h3></div></div></div>
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger ICANN is in the process of introducing a new Key Signing Key (KSK) for
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger the global root zone. BIND has multiple methods for managing DNSSEC
3bba6fbf5fce9f7d72b39197fde41b9db2d4f9b5Eugen Kuksa trust anchors, with somewhat different behaviors. If the root
3bba6fbf5fce9f7d72b39197fde41b9db2d4f9b5Eugen Kuksa key is configured using the <span class="command"><strong>managed-keys</strong></span>
3bba6fbf5fce9f7d72b39197fde41b9db2d4f9b5Eugen Kuksa statement, or if the pre-configured root key is enabled by using
3bba6fbf5fce9f7d72b39197fde41b9db2d4f9b5Eugen Kuksa <span class="command"><strong>dnssec-validation auto</strong></span>, then BIND can keep
7a2c573f6c4d0c58a06630edb9f26f4210405107Eugen Kuksa keys up to date automatically. Servers configured in this way
3bba6fbf5fce9f7d72b39197fde41b9db2d4f9b5Eugen Kuksa will roll seamlessly to the new key when it is published in
7a2c573f6c4d0c58a06630edb9f26f4210405107Eugen Kuksa the root zone. However, keys configured using the
7809c2488a3ccdea588497a9e6caf42ee68ae92eEugen Kuksa <span class="command"><strong>trusted-keys</strong></span> statement are not automatically
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger maintained. If your server is performing DNSSEC validation
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger and is configured using <span class="command"><strong>trusted-keys</strong></span>, you are
2725ada6b2a776abaadd22b0006097eae9ba2b02Julian Kornberger advised to change your configuration before the root zone begins
452917beccb615a9b87e602d53b66be2d1296c10Eugen Kuksa signing with the new KSK. This is currently scheduled for
6f4c86ff1ef1c5836e5e3c749ecaf2566e9b763a= October 11, 2017.
3bba6fbf5fce9f7d72b39197fde41b9db2d4f9b5Eugen Kuksa This release includes an updated version of the
3bba6fbf5fce9f7d72b39197fde41b9db2d4f9b5Eugen Kuksa <code class="filename">bind.keys</code> file containing the new root
3bba6fbf5fce9f7d72b39197fde41b9db2d4f9b5Eugen Kuksa key. This file can also be downloaded from
3bba6fbf5fce9f7d72b39197fde41b9db2d4f9b5Eugen Kuksa <a class="link" href="https://www.isc.org/bind-keys" target="_top">
a2b3d5bb602a9a0d970b6640948f1d7d75ce78bfEugen Kuksa<div class="titlepage"><div><div><h3 class="title">
licensed software (e.g. BIND) and distribute them outside
license may contact ISC at <a class="link" href="https://www.isc.org/mission/contact/" target="_top">
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
<a class="link" href="https://www.isc.org/downloads/software-support-policy/" target="_top">https://www.isc.org/downloads/software-support-policy/</a>