diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-13 08:02:46 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-13 08:02:46 +0000 |
| commit | e4e8d437fe47a4d97ab469fc9116e50ab1601c54 (patch) | |
| tree | d573aafc30201b68be84aba1a44a8f5f2fc30d4e /NEWS | |
| parent | Adding debian version 3.3.4-1.1. (diff) | |
| download | knot-e4e8d437fe47a4d97ab469fc9116e50ab1601c54.tar.xz knot-e4e8d437fe47a4d97ab469fc9116e50ab1601c54.zip | |
Merging upstream version 3.3.5.
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to '')
| -rw-r--r-- | NEWS | 23 |
1 files changed, 23 insertions, 0 deletions
@@ -1,3 +1,26 @@ +Knot DNS 3.3.5 (2024-03-06) +=========================== + +Features: +--------- + - knotd: new module mod-authsignal for automatic authenticated DNSSEC + bootstrapping records synthesis (Thanks to Peter Thomassen) + - kzonecheck: new optional ZONEMD verification (see option '-z') + +Improvements: +------------- + - knotd: new DNSSEC key rollover log informs about next planned key action + - knotd, kzonecheck: added limit on non-matching keys with a duplicate keytag + - knot-exporter: added counter-type variant for each metric (Thanks to Marcel Koch) + - libs: upgraded embedded libngtcp2 to 1.3.0 + - doc: various fixes and updates + +Bugfixes: +--------- + - knotd, kzonecheck: failed to validate RRSIG if there are more keys with the same keytag + - knotd, kzonecheck: failed to validate zone with more CSK keys + - libknot: insufficient check for malformed TCP header options over XDP + Knot DNS 3.3.4 (2024-01-24) =========================== |