Date: Fri, 31 Jul 2015 11:10:44 +0000 (UTC) From: Erwin Lansing <erwin@FreeBSD.org> To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-stable@freebsd.org, svn-src-stable-9@freebsd.org Subject: svn commit: r286124 - in stable/9/contrib/bind9: . doc/arm lib/dns lib/lwres/man Message-ID: <201507311110.t6VBAiRp075679@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: erwin Date: Fri Jul 31 11:10:43 2015 New Revision: 286124 URL: https://svnweb.freebsd.org/changeset/base/286124 Log: Update BIND to 9.9.7-P2 This is a direct commit to stable/9 as BIND is no longer in head. Sponsored by: DK Hostmaster A/S Modified: stable/9/contrib/bind9/CHANGES stable/9/contrib/bind9/README stable/9/contrib/bind9/doc/arm/Bv9ARM.ch01.html stable/9/contrib/bind9/doc/arm/Bv9ARM.ch02.html stable/9/contrib/bind9/doc/arm/Bv9ARM.ch03.html stable/9/contrib/bind9/doc/arm/Bv9ARM.ch04.html stable/9/contrib/bind9/doc/arm/Bv9ARM.ch05.html stable/9/contrib/bind9/doc/arm/Bv9ARM.ch06.html stable/9/contrib/bind9/doc/arm/Bv9ARM.ch07.html stable/9/contrib/bind9/doc/arm/Bv9ARM.ch08.html stable/9/contrib/bind9/doc/arm/Bv9ARM.ch09.html stable/9/contrib/bind9/doc/arm/Bv9ARM.ch10.html stable/9/contrib/bind9/doc/arm/Bv9ARM.ch11.html stable/9/contrib/bind9/doc/arm/Bv9ARM.ch12.html stable/9/contrib/bind9/doc/arm/Bv9ARM.ch13.html stable/9/contrib/bind9/doc/arm/Bv9ARM.html stable/9/contrib/bind9/doc/arm/Bv9ARM.pdf stable/9/contrib/bind9/doc/arm/man.arpaname.html stable/9/contrib/bind9/doc/arm/man.ddns-confgen.html stable/9/contrib/bind9/doc/arm/man.dig.html stable/9/contrib/bind9/doc/arm/man.dnssec-checkds.html stable/9/contrib/bind9/doc/arm/man.dnssec-coverage.html stable/9/contrib/bind9/doc/arm/man.dnssec-dsfromkey.html stable/9/contrib/bind9/doc/arm/man.dnssec-keyfromlabel.html stable/9/contrib/bind9/doc/arm/man.dnssec-keygen.html stable/9/contrib/bind9/doc/arm/man.dnssec-revoke.html stable/9/contrib/bind9/doc/arm/man.dnssec-settime.html stable/9/contrib/bind9/doc/arm/man.dnssec-signzone.html stable/9/contrib/bind9/doc/arm/man.dnssec-verify.html stable/9/contrib/bind9/doc/arm/man.genrandom.html stable/9/contrib/bind9/doc/arm/man.host.html stable/9/contrib/bind9/doc/arm/man.isc-hmac-fixup.html stable/9/contrib/bind9/doc/arm/man.named-checkconf.html stable/9/contrib/bind9/doc/arm/man.named-checkzone.html stable/9/contrib/bind9/doc/arm/man.named-journalprint.html stable/9/contrib/bind9/doc/arm/man.named.html stable/9/contrib/bind9/doc/arm/man.nsec3hash.html stable/9/contrib/bind9/doc/arm/man.nsupdate.html stable/9/contrib/bind9/doc/arm/man.rndc-confgen.html stable/9/contrib/bind9/doc/arm/man.rndc.conf.html stable/9/contrib/bind9/doc/arm/man.rndc.html stable/9/contrib/bind9/doc/arm/notes.html stable/9/contrib/bind9/doc/arm/notes.pdf stable/9/contrib/bind9/doc/arm/notes.xml stable/9/contrib/bind9/lib/dns/api stable/9/contrib/bind9/lib/lwres/man/lwres.html stable/9/contrib/bind9/lib/lwres/man/lwres_buffer.html stable/9/contrib/bind9/lib/lwres/man/lwres_config.html stable/9/contrib/bind9/lib/lwres/man/lwres_context.html stable/9/contrib/bind9/lib/lwres/man/lwres_gabn.html stable/9/contrib/bind9/lib/lwres/man/lwres_gai_strerror.html stable/9/contrib/bind9/lib/lwres/man/lwres_getaddrinfo.html stable/9/contrib/bind9/lib/lwres/man/lwres_gethostent.html stable/9/contrib/bind9/lib/lwres/man/lwres_getipnode.html stable/9/contrib/bind9/lib/lwres/man/lwres_getnameinfo.html stable/9/contrib/bind9/lib/lwres/man/lwres_getrrsetbyname.html stable/9/contrib/bind9/lib/lwres/man/lwres_gnba.html stable/9/contrib/bind9/lib/lwres/man/lwres_hstrerror.html stable/9/contrib/bind9/lib/lwres/man/lwres_inetntop.html stable/9/contrib/bind9/lib/lwres/man/lwres_noop.html stable/9/contrib/bind9/lib/lwres/man/lwres_packet.html stable/9/contrib/bind9/lib/lwres/man/lwres_resutil.html stable/9/contrib/bind9/version Directory Properties: stable/9/contrib/bind9/ (props changed) Modified: stable/9/contrib/bind9/CHANGES ============================================================================== --- stable/9/contrib/bind9/CHANGES Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/CHANGES Fri Jul 31 11:10:43 2015 (r286124) @@ -1,3 +1,14 @@ + --- 9.9.7-P2 released --- + +4165. [security] A failure to reset a value to NULL in tkey.c could + result in an assertion failure. (CVE-2015-5477) + [RT #40046] + + --- 9.9.7-P1 released --- + +4138. [bug] An uninitialized value in validator.c could result + in an assertion failure. (CVE-2015-4620) [RT #39795] + --- 9.9.7 released --- --- 9.9.7rc2 released --- @@ -8380,7 +8391,7 @@ on the responses. [RT #2454] 1208. [bug] dns_master_load*() failed to log a error message if - an error was detected when parsing the ownername of + an error was detected when parsing the owner name of a record. [RT #2448] 1207. [bug] libbind: getaddrinfo() could call freeaddrinfo() with Modified: stable/9/contrib/bind9/README ============================================================================== --- stable/9/contrib/bind9/README Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/README Fri Jul 31 11:10:43 2015 (r286124) @@ -51,6 +51,15 @@ BIND 9 For up-to-date release notes and errata, see http://www.isc.org/software/bind9/releasenotes +BIND 9.9.7-P2 + + BIND 9.9.7-P1 is a security release addressing the flaw + described in CVE-2015-5477. + +BIND 9.9.7-P1 + + BIND 9.9.7-P1 is a security release addressing the flaw + described in CVE-2015-4620. BIND 9.9.7 Modified: stable/9/contrib/bind9/doc/arm/Bv9ARM.ch01.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/Bv9ARM.ch01.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/Bv9ARM.ch01.html Fri Jul 31 11:10:43 2015 (r286124) @@ -556,6 +556,6 @@ </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/Bv9ARM.ch02.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/Bv9ARM.ch02.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/Bv9ARM.ch02.html Fri Jul 31 11:10:43 2015 (r286124) @@ -154,6 +154,6 @@ </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/Bv9ARM.ch03.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/Bv9ARM.ch03.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/Bv9ARM.ch03.html Fri Jul 31 11:10:43 2015 (r286124) @@ -665,6 +665,6 @@ controls { </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/Bv9ARM.ch04.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/Bv9ARM.ch04.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/Bv9ARM.ch04.html Fri Jul 31 11:10:43 2015 (r286124) @@ -1935,6 +1935,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2. </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/Bv9ARM.ch05.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/Bv9ARM.ch05.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/Bv9ARM.ch05.html Fri Jul 31 11:10:43 2015 (r286124) @@ -139,6 +139,6 @@ </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/Bv9ARM.ch06.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/Bv9ARM.ch06.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/Bv9ARM.ch06.html Fri Jul 31 11:10:43 2015 (r286124) @@ -11642,6 +11642,6 @@ HOST-127.EXAMPLE. MX 0 . </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/Bv9ARM.ch07.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/Bv9ARM.ch07.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/Bv9ARM.ch07.html Fri Jul 31 11:10:43 2015 (r286124) @@ -247,6 +247,6 @@ zone "example.com" { </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/Bv9ARM.ch08.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/Bv9ARM.ch08.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/Bv9ARM.ch08.html Fri Jul 31 11:10:43 2015 (r286124) @@ -135,6 +135,6 @@ </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/Bv9ARM.ch09.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/Bv9ARM.ch09.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/Bv9ARM.ch09.html Fri Jul 31 11:10:43 2015 (r286124) @@ -45,7 +45,7 @@ <div class="toc"> <p><b>Table of Contents</b></p> <dl> -<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2563588">Release Notes for BIND Version 9.9.7</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2563588">Release Notes for BIND Version 9.9.7-P2</a></span></dt> <dd><dl> <dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt> @@ -60,13 +60,18 @@ </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2563588"></a>Release Notes for BIND Version 9.9.7</h2></div></div></div> +<a name="id2563588"></a>Release Notes for BIND Version 9.9.7-P2</h2></div></div></div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> <a name="relnotes_intro"></a>Introduction</h3></div></div></div> <p> - This document summarizes changes since the last production release - of BIND on the corresponding major release branch. + This document summarizes changes since BIND 9.9.7. + </p> +<p> + BIND 9.9.7-P2 addresses a security issue described in CVE-2015-5477. + </p> +<p> + BIND 9.9.7-P1 addresses a security issue described in CVE-2015-4620. </p> </div> <div class="sect2" lang="en"> @@ -86,42 +91,23 @@ <div class="itemizedlist"><ul type="disc"> <li> <p> - On servers configured to perform DNSSEC validation using - managed trust anchors (i.e., keys configured explicitly - via <span><strong class="command">managed-keys</strong></span>, or implicitly - via <span><strong class="command">dnssec-validation auto;</strong></span> or - <span><strong class="command">dnssec-lookaside auto;</strong></span>), revoking - a trust anchor and sending a new untrusted replacement - could cause <span><strong class="command">named</strong></span> to crash with an - assertion failure. This could occur in the event of a - botched key rollover, or potentially as a result of a - deliberate attack if the attacker was in position to - monitor the victim's DNS traffic. + A specially crafted query could trigger an assertion failure + in message.c. </p> <p> - This flaw was discovered by Jan-Piet Mens, and is - disclosed in CVE-2015-1349. [RT #38344] + This flaw was discovered by Jonathan Foote, and is disclosed + in CVE-2015-5477. [RT #39795] </p> </li> <li> <p> - A flaw in delegation handling could be exploited to put - <span><strong class="command">named</strong></span> into an infinite loop, in which - each lookup of a name server triggered additional lookups - of more name servers. This has been addressed by placing - limits on the number of levels of recursion - <span><strong class="command">named</strong></span> will allow (default 7), and - on the number of queries that it will send before - terminating a recursive query (default 50). - </p> -<p> - The recursion depth limit is configured via the - <code class="option">max-recursion-depth</code> option, and the query limit - via the <code class="option">max-recursion-queries</code> option. + On servers configured to perform DNSSEC validation, an + assertion failure could be triggered on answers from + a specially configured server. </p> <p> - The flaw was discovered by Florian Maury of ANSSI, and is - disclosed in CVE-2014-8500. [RT #37580] + This flaw was discovered by Breno Silveira Soares, and is + disclosed in CVE-2015-4620. [RT #39795] </p> </li> </ul></div> @@ -134,143 +120,12 @@ <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> <a name="relnotes_changes"></a>Feature Changes</h3></div></div></div> -<div class="itemizedlist"><ul type="disc"> -<li><p> - NXDOMAIN responses to queries of type DS are now cached separately - from those for other types. This helps when using "grafted" zones - of type forward, for which the parent zone does not contain a - delegation, such as local top-level domains. Previously a query - of type DS for such a zone could cause the zone apex to be cached - as NXDOMAIN, blocking all subsequent queries. (Note: This - change is only helpful when DNSSEC validation is not enabled. - "Grafted" zones without a delegation in the parent are not a - recommended configuration.) - </p></li> -<li><p> - NOTIFY messages that are sent because a zone has been updated - are now given priority above NOTIFY messages that were scheduled - when the server started up. This should mitigate delays in zone - propagation when servers are restarted frequently. - </p></li> -<li><p> - Errors reported when running <span><strong class="command">rndc addzone</strong></span> - (e.g., when a zone file cannot be loaded) have been clarified - to make it easier to diagnose problems. - </p></li> -<li><p> - Added support for OPENPGPKEY type. - </p></li> -<li><p> - When encountering an authoritative name server whose name is - an alias pointing to another name, the resolver treats - this as an error and skips to the next server. Previously - this happened silently; now the error will be logged to - the newly-created "cname" log category. - </p></li> -<li><p> - If named is not configured to validate the answer then - allow fallback to plain DNS on timeout even when we know - the server supports EDNS. This will allow the server to - potentially resolve signed queries when TCP is being - blocked. - </p></li> -</ul></div> +<div class="itemizedlist"><ul type="disc"><li><p>None</p></li></ul></div> </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> <a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div> -<div class="itemizedlist"><ul type="disc"> -<li><p> - <span><strong class="command">dig</strong></span>, <span><strong class="command">host</strong></span> and - <span><strong class="command">nslookup</strong></span> aborted when encountering - a name which, after appending search list elements, - exceeded 255 bytes. Such names are now skipped, but - processing of other names will continue. [RT #36892] - </p></li> -<li><p> - The error message generated when - <span><strong class="command">named-checkzone</strong></span> or - <span><strong class="command">named-checkconf -z</strong></span> encounters a - <code class="option">$TTL</code> directive without a value has - been clarified. [RT #37138] - </p></li> -<li><p> - Semicolon characters (;) included in TXT records were - incorrectly escaped with a backslash when the record was - displayed as text. This is actually only necessary when there - are no quotation marks. [RT #37159] - </p></li> -<li><p> - When files opened for writing by <span><strong class="command">named</strong></span>, - such as zone journal files, were referenced more than once - in <code class="filename">named.conf</code>, it could lead to file - corruption as multiple threads wrote to the same file. This - is now detected when loading <code class="filename">named.conf</code> - and reported as an error. [RT #37172] - </p></li> -<li><p> - <span><strong class="command">dnssec-keygen -S</strong></span> failed to generate successor - keys for some algorithm types (including ECDSA and GOST) due to - a difference in the content of private key files. This has been - corrected. [RT #37183] - </p></li> -<li><p> - UPDATE messages that arrived too soon after - an <span><strong class="command">rndc thaw</strong></span> could be lost. [RT #37233] - </p></li> -<li><p> - Forwarding of UPDATE messages did not work when they were - signed with SIG(0); they resulted in a BADSIG response code. - [RT #37216] - </p></li> -<li><p> - When checking for updates to trust anchors listed in - <code class="option">managed-keys</code>, <span><strong class="command">named</strong></span> - now revalidates keys based on the current set of - active trust anchors, without relying on any cached - record of previous validation. [RT #37506] - </p></li> -<li><p> - When NXDOMAIN redirection is in use, queries for a name - that is present in the redirection zone but a type that - is not present will now return NOERROR instead of NXDOMAIN. - </p></li> -<li><p> - When a zone contained a delegation to an IPv6 name server - but not an IPv4 name server, it was possible for a memory - reference to be left un-freed. This caused an assertion - failure on server shutdown, but was otherwise harmless. - [RT #37796] - </p></li> -<li><p> - Due to an inadvertent removal of code in the previous - release, when <span><strong class="command">named</strong></span> encountered an - authoritative name server which dropped all EDNS queries, - it did not always try plain DNS. This has been corrected. - [RT #37965] - </p></li> -<li><p> - A regression caused nsupdate to use the default recursive servers - rather than the SOA MNAME server when sending the UPDATE. - </p></li> -<li><p> - Adjusted max-recursion-queries to better accommodate empty - caches. - </p></li> -<li><p> - Built-in "empty" zones did not correctly inherit the - "allow-transfer" ACL from the options or view. [RT #38310] - </p></li> -<li><p> - A mutex leak was fixed that could cause <span><strong class="command">named</strong></span> - processes to grow to very large sizes. [RT #38454] - </p></li> -<li><p> - Fixed some bugs in RFC 5011 trust anchor management, - including a memory leak and a possible loss of state - information.[RT #38458] - </p></li> -</ul></div> +<div class="itemizedlist"><ul type="disc"><li><p>None</p></li></ul></div> </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> @@ -310,6 +165,6 @@ </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/Bv9ARM.ch10.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/Bv9ARM.ch10.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/Bv9ARM.ch10.html Fri Jul 31 11:10:43 2015 (r286124) @@ -163,6 +163,6 @@ </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/Bv9ARM.ch11.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/Bv9ARM.ch11.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/Bv9ARM.ch11.html Fri Jul 31 11:10:43 2015 (r286124) @@ -514,6 +514,6 @@ </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/Bv9ARM.ch12.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/Bv9ARM.ch12.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/Bv9ARM.ch12.html Fri Jul 31 11:10:43 2015 (r286124) @@ -47,13 +47,13 @@ <dl> <dt><span class="sect1"><a href="Bv9ARM.ch12.html#bind9.library">BIND 9 DNS Library Support</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2611396">Prerequisite</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2610723">Compilation</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2610747">Installation</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2610778">Known Defects/Restrictions</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2610855">The dns.conf File</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2610882">Sample Applications</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2611718">Library References</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2611115">Prerequisite</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2611125">Compilation</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2609306">Installation</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2609337">Known Defects/Restrictions</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2610301">The dns.conf File</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2610328">Sample Applications</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2611437">Library References</a></span></dt> </dl></dd> </dl> </div> @@ -89,7 +89,7 @@ </ul></div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2611396"></a>Prerequisite</h3></div></div></div> +<a name="id2611115"></a>Prerequisite</h3></div></div></div> <p>GNU make is required to build the export libraries (other part of BIND 9 can still be built with other types of make). In the reminder of this document, "make" means GNU make. Note that @@ -98,7 +98,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2610723"></a>Compilation</h3></div></div></div> +<a name="id2611125"></a>Compilation</h3></div></div></div> <pre class="screen"> $ <strong class="userinput"><code>./configure --enable-exportlib <em class="replaceable"><code>[other flags]</code></em></code></strong> $ <strong class="userinput"><code>make</code></strong> @@ -113,7 +113,7 @@ $ <strong class="userinput"><code>make</ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2610747"></a>Installation</h3></div></div></div> +<a name="id2609306"></a>Installation</h3></div></div></div> <pre class="screen"> $ <strong class="userinput"><code>cd lib/export</code></strong> $ <strong class="userinput"><code>make install</code></strong> @@ -135,7 +135,7 @@ $ <strong class="userinput"><code>make i </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2610778"></a>Known Defects/Restrictions</h3></div></div></div> +<a name="id2609337"></a>Known Defects/Restrictions</h3></div></div></div> <div class="itemizedlist"><ul type="disc"> <li><p>Currently, win32 is not supported for the export library. (Normal BIND 9 application can be built as @@ -175,7 +175,7 @@ $ <strong class="userinput"><code>make</ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2610855"></a>The dns.conf File</h3></div></div></div> +<a name="id2610301"></a>The dns.conf File</h3></div></div></div> <p>The IRS library supports an "advanced" configuration file related to the DNS library for configuration parameters that would be beyond the capability of the @@ -193,14 +193,14 @@ $ <strong class="userinput"><code>make</ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2610882"></a>Sample Applications</h3></div></div></div> +<a name="id2610328"></a>Sample Applications</h3></div></div></div> <p>Some sample application programs using this API are provided for reference. The following is a brief description of these applications. </p> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2610890"></a>sample: a simple stub resolver utility</h4></div></div></div> +<a name="id2610337"></a>sample: a simple stub resolver utility</h4></div></div></div> <p> It sends a query of a given name (of a given optional RR type) to a specified recursive server, and prints the result as a list of @@ -264,7 +264,7 @@ $ <strong class="userinput"><code>make</ </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2610981"></a>sample-async: a simple stub resolver, working asynchronously</h4></div></div></div> +<a name="id2610427"></a>sample-async: a simple stub resolver, working asynchronously</h4></div></div></div> <p> Similar to "sample", but accepts a list of (query) domain names as a separate file and resolves the names @@ -305,7 +305,7 @@ $ <strong class="userinput"><code>make</ </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2611102"></a>sample-request: a simple DNS transaction client</h4></div></div></div> +<a name="id2610481"></a>sample-request: a simple DNS transaction client</h4></div></div></div> <p> It sends a query to a specified server, and prints the response with minimal processing. It doesn't act as a @@ -346,7 +346,7 @@ $ <strong class="userinput"><code>make</ </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2611166"></a>sample-gai: getaddrinfo() and getnameinfo() test code</h4></div></div></div> +<a name="id2610818"></a>sample-gai: getaddrinfo() and getnameinfo() test code</h4></div></div></div> <p> This is a test program to check getaddrinfo() and getnameinfo() behavior. It takes a @@ -363,7 +363,7 @@ $ <strong class="userinput"><code>make</ </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2611181"></a>sample-update: a simple dynamic update client program</h4></div></div></div> +<a name="id2610833"></a>sample-update: a simple dynamic update client program</h4></div></div></div> <p> It accepts a single update command as a command-line argument, sends an update request message to the @@ -458,7 +458,7 @@ $ <strong class="userinput"><code>sample </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2611654"></a>nsprobe: domain/name server checker in terms of RFC 4074</h4></div></div></div> +<a name="id2611373"></a>nsprobe: domain/name server checker in terms of RFC 4074</h4></div></div></div> <p> It checks a set of domains to see the name servers of the domains behave @@ -515,7 +515,7 @@ $ <strong class="userinput"><code>sample </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2611718"></a>Library References</h3></div></div></div> +<a name="id2611437"></a>Library References</h3></div></div></div> <p>As of this writing, there is no formal "manual" of the libraries, except this document, header files (some of them provide pretty detailed explanations), and sample application @@ -540,6 +540,6 @@ $ <strong class="userinput"><code>sample </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/Bv9ARM.ch13.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/Bv9ARM.ch13.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/Bv9ARM.ch13.html Fri Jul 31 11:10:43 2015 (r286124) @@ -140,6 +140,6 @@ </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/Bv9ARM.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/Bv9ARM.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/Bv9ARM.html Fri Jul 31 11:10:43 2015 (r286124) @@ -41,7 +41,7 @@ <div> <div><h1 class="title"> <a name="id2563180"></a>BIND 9 Administrator Reference Manual</h1></div> -<div><p class="releaseinfo">BIND Version 9.9.7</p></div> +<div><p class="releaseinfo">BIND Version 9.9.7-P2</p></div> <div><p class="copyright">Copyright © 2004-2015 Internet Systems Consortium, Inc. ("ISC")</p></div> <div><p class="copyright">Copyright © 2000-2003 Internet Software Consortium.</p></div> </div> @@ -234,7 +234,7 @@ </dl></dd> <dt><span class="appendix"><a href="Bv9ARM.ch09.html">A. Release Notes</a></span></dt> <dd><dl> -<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2563588">Release Notes for BIND Version 9.9.7</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2563588">Release Notes for BIND Version 9.9.7-P2</a></span></dt> <dd><dl> <dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt> @@ -262,13 +262,13 @@ <dd><dl> <dt><span class="sect1"><a href="Bv9ARM.ch12.html#bind9.library">BIND 9 DNS Library Support</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2611396">Prerequisite</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2610723">Compilation</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2610747">Installation</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2610778">Known Defects/Restrictions</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2610855">The dns.conf File</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2610882">Sample Applications</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2611718">Library References</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2611115">Prerequisite</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2611125">Compilation</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2609306">Installation</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2609337">Known Defects/Restrictions</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2610301">The dns.conf File</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2610328">Sample Applications</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch12.html#id2611437">Library References</a></span></dt> </dl></dd> </dl></dd> <dt><span class="reference"><a href="Bv9ARM.ch13.html">I. Manual pages</a></span></dt> @@ -365,6 +365,6 @@ </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/Bv9ARM.pdf ============================================================================== Binary file (source and/or target). No diff available. Modified: stable/9/contrib/bind9/doc/arm/man.arpaname.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/man.arpaname.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/man.arpaname.html Fri Jul 31 11:10:43 2015 (r286124) @@ -50,20 +50,20 @@ <div class="cmdsynopsis"><p><code class="command">arpaname</code> {<em class="replaceable"><code>ipaddress </code></em>...}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2620725"></a><h2>DESCRIPTION</h2> +<a name="id2618396"></a><h2>DESCRIPTION</h2> <p> <span><strong class="command">arpaname</strong></span> translates IP addresses (IPv4 and IPv6) to the corresponding IN-ADDR.ARPA or IP6.ARPA names. </p> </div> <div class="refsect1" lang="en"> -<a name="id2620740"></a><h2>SEE ALSO</h2> +<a name="id2618411"></a><h2>SEE ALSO</h2> <p> <em class="citetitle">BIND 9 Administrator Reference Manual</em>. </p> </div> <div class="refsect1" lang="en"> -<a name="id2620754"></a><h2>AUTHOR</h2> +<a name="id2618425"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> @@ -87,6 +87,6 @@ </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/man.ddns-confgen.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/man.ddns-confgen.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/man.ddns-confgen.html Fri Jul 31 11:10:43 2015 (r286124) @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">ddns-confgen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [ -s <em class="replaceable"><code>name</code></em> | -z <em class="replaceable"><code>zone</code></em> ] [<code class="option">-q</code>] [name]</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2654880"></a><h2>DESCRIPTION</h2> +<a name="id2657944"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">ddns-confgen</strong></span> generates a key for use by <span><strong class="command">nsupdate</strong></span> and <span><strong class="command">named</strong></span>. It simplifies configuration @@ -77,7 +77,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2656469"></a><h2>OPTIONS</h2> +<a name="id2658032"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt> <dd><p> @@ -144,7 +144,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2656669"></a><h2>SEE ALSO</h2> +<a name="id2658710"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">nsupdate</span>(1)</span>, <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>, <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>, @@ -152,7 +152,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2656708"></a><h2>AUTHOR</h2> +<a name="id2658817"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> @@ -176,6 +176,6 @@ </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/man.dig.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/man.dig.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/man.dig.html Fri Jul 31 11:10:43 2015 (r286124) @@ -52,7 +52,7 @@ <div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2612260"></a><h2>DESCRIPTION</h2> +<a name="id2611911"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">dig</strong></span> (domain information groper) is a flexible tool for interrogating DNS name servers. It performs DNS lookups and @@ -99,7 +99,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2612362"></a><h2>SIMPLE USAGE</h2> +<a name="id2612013"></a><h2>SIMPLE USAGE</h2> <p> A typical invocation of <span><strong class="command">dig</strong></span> looks like: </p> @@ -152,7 +152,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2612829"></a><h2>OPTIONS</h2> +<a name="id2612276"></a><h2>OPTIONS</h2> <p> The <code class="option">-b</code> option sets the source IP address of the query to <em class="parameter"><code>address</code></em>. This must be a valid @@ -260,7 +260,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2664316"></a><h2>QUERY OPTIONS</h2> +<a name="id2664309"></a><h2>QUERY OPTIONS</h2> <p><span><strong class="command">dig</strong></span> provides a number of query options which affect the way in which lookups are made and the results displayed. Some of @@ -618,7 +618,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2665499"></a><h2>MULTIPLE QUERIES</h2> +<a name="id2665492"></a><h2>MULTIPLE QUERIES</h2> <p> The BIND 9 implementation of <span><strong class="command">dig </strong></span> supports @@ -664,7 +664,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc </p> </div> <div class="refsect1" lang="en"> -<a name="id2665653"></a><h2>IDN SUPPORT</h2> +<a name="id2665577"></a><h2>IDN SUPPORT</h2> <p> If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized domain name) support, it can accept and display non-ASCII domain names. @@ -678,14 +678,14 @@ dig +qr www.isc.org any -x 127.0.0.1 isc </p> </div> <div class="refsect1" lang="en"> -<a name="id2665750"></a><h2>FILES</h2> +<a name="id2665606"></a><h2>FILES</h2> <p><code class="filename">/etc/resolv.conf</code> </p> <p><code class="filename">${HOME}/.digrc</code> </p> </div> <div class="refsect1" lang="en"> -<a name="id2665771"></a><h2>SEE ALSO</h2> +<a name="id2665627"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>, <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>, @@ -693,7 +693,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc </p> </div> <div class="refsect1" lang="en"> -<a name="id2665809"></a><h2>BUGS</h2> +<a name="id2665665"></a><h2>BUGS</h2> <p> There are probably too many query options. </p> @@ -716,6 +716,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/man.dnssec-checkds.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/man.dnssec-checkds.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/man.dnssec-checkds.html Fri Jul 31 11:10:43 2015 (r286124) @@ -51,7 +51,7 @@ <div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2614344"></a><h2>DESCRIPTION</h2> +<a name="id2614337"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">dnssec-checkds</strong></span> verifies the correctness of Delegation Signer (DS) or DNSSEC Lookaside Validation (DLV) resource records for keys in a specified @@ -59,7 +59,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2614358"></a><h2>OPTIONS</h2> +<a name="id2614350"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt> <dd><p> @@ -88,14 +88,14 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2614460"></a><h2>SEE ALSO</h2> +<a name="id2614453"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>, </p> </div> <div class="refsect1" lang="en"> -<a name="id2614494"></a><h2>AUTHOR</h2> +<a name="id2614487"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> @@ -118,6 +118,6 @@ </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/man.dnssec-coverage.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/man.dnssec-coverage.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/man.dnssec-coverage.html Fri Jul 31 11:10:43 2015 (r286124) @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">dnssec-coverage</code> [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>DNSKEY TTL</code></em></code>] [<code class="option">-m <em class="replaceable"><code>max TTL</code></em></code>] [<code class="option">-r <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-c <em class="replaceable"><code>compilezone path</code></em></code>] [zone]</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2615065"></a><h2>DESCRIPTION</h2> +<a name="id2614580"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">dnssec-coverage</strong></span> verifies that the DNSSEC keys for a given zone or a set of zones have timing metadata set properly to ensure no future lapses in DNSSEC @@ -78,7 +78,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2615160"></a><h2>OPTIONS</h2> +<a name="id2614606"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt> <dd><p> @@ -168,7 +168,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2615411"></a><h2>SEE ALSO</h2> +<a name="id2615335"></a><h2>SEE ALSO</h2> <p> <span class="citerefentry"><span class="refentrytitle">dnssec-checkds</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>, @@ -177,7 +177,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2615454"></a><h2>AUTHOR</h2> +<a name="id2615379"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> @@ -201,6 +201,6 @@ </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/man.dnssec-dsfromkey.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/man.dnssec-dsfromkey.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/man.dnssec-dsfromkey.html Fri Jul 31 11:10:43 2015 (r286124) @@ -52,14 +52,14 @@ <div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-h</code>] [<code class="option">-V</code>]</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2616890"></a><h2>DESCRIPTION</h2> +<a name="id2615790"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">dnssec-dsfromkey</strong></span> outputs the Delegation Signer (DS) resource record (RR), as defined in RFC 3658 and RFC 4509, for the given key(s). </p> </div> <div class="refsect1" lang="en"> -<a name="id2616904"></a><h2>OPTIONS</h2> +<a name="id2615804"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-1</span></dt> <dd><p> @@ -144,7 +144,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2618395"></a><h2>EXAMPLE</h2> +<a name="id2616476"></a><h2>EXAMPLE</h2> <p> To build the SHA-256 DS RR from the <strong class="userinput"><code>Kexample.com.+003+26160</code></strong> @@ -159,7 +159,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2618432"></a><h2>FILES</h2> +<a name="id2616513"></a><h2>FILES</h2> <p> The keyfile can be designed by the key identification <code class="filename">Knnnn.+aaa+iiiii</code> or the full file name @@ -173,13 +173,13 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2618473"></a><h2>CAVEAT</h2> +<a name="id2617510"></a><h2>CAVEAT</h2> <p> A keyfile error can give a "file not found" even if the file exists. </p> </div> <div class="refsect1" lang="en"> -<a name="id2618483"></a><h2>SEE ALSO</h2> +<a name="id2617520"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>, <em class="citetitle">BIND 9 Administrator Reference Manual</em>, @@ -189,7 +189,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2618522"></a><h2>AUTHOR</h2> +<a name="id2617559"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> @@ -213,6 +213,6 @@ </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/man.dnssec-keyfromlabel.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/man.dnssec-keyfromlabel.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/man.dnssec-keyfromlabel.html Fri Jul 31 11:10:43 2015 (r286124) @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">dnssec-keyfromlabel</code> {-l <em class="replaceable"><code>label</code></em>} [<code class="option">-3</code>] [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-G</code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-k</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code cl ass="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-S <em class="replaceable"><code>key</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">-y</code>] {name}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2617657"></a><h2>DESCRIPTION</h2> +<a name="id2616899"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">dnssec-keyfromlabel</strong></span> generates a key pair of files that referencing a key object stored in a cryptographic hardware service module (HSM). The private key @@ -66,7 +66,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2617683"></a><h2>OPTIONS</h2> +<a name="id2616924"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt> <dd> @@ -209,7 +209,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2620021"></a><h2>TIMING OPTIONS</h2> +<a name="id2670258"></a><h2>TIMING OPTIONS</h2> <p> Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '-', it is interpreted as @@ -281,7 +281,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2668339"></a><h2>GENERATED KEY FILES</h2> +<a name="id2670379"></a><h2>GENERATED KEY FILES</h2> <p> When <span><strong class="command">dnssec-keyfromlabel</strong></span> completes successfully, @@ -320,7 +320,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2668433"></a><h2>SEE ALSO</h2> +<a name="id2670541"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>, <em class="citetitle">BIND 9 Administrator Reference Manual</em>, @@ -328,7 +328,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2668466"></a><h2>AUTHOR</h2> +<a name="id2670574"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> @@ -352,6 +352,6 @@ </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.7 (Extended Support Version)</p> +<p style="text-align: center;">BIND 9.9.7-P2 (Extended Support Version)</p> </body> </html> Modified: stable/9/contrib/bind9/doc/arm/man.dnssec-keygen.html ============================================================================== --- stable/9/contrib/bind9/doc/arm/man.dnssec-keygen.html Fri Jul 31 10:46:45 2015 (r286123) +++ stable/9/contrib/bind9/doc/arm/man.dnssec-keygen.html Fri Jul 31 11:10:43 2015 (r286124) @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">dnssec-keygen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-b <em class="replaceable"><code>keysize</code></em></code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-3</code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-C</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-G</code>] [<code class="option">-g <em class="replaceable"><code>generator</code></em></code>] [<code class="option">-h</code>] [<code class="option">-I <em class="rep laceable"><code>date/offset</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-k</code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-q</code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-S <em class="replaceable"><code>key</code></em></code>] [<code class="option">-s <em class="replaceable"><code>strength</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"> <code>level</code></em></code>] [<code class! ="option">-V</code>] [<code class="option">-z</code>] {name}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2618705"></a><h2>DESCRIPTION</h2> +<a name="id2618014"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">dnssec-keygen</strong></span> generates keys for DNSSEC (Secure DNS), as defined in RFC 2535 and RFC 4034. It can also generate keys for use with @@ -64,7 +64,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2618725"></a><h2>OPTIONS</h2> *** DIFF OUTPUT TRUNCATED AT 1000 LINES ***
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201507311110.t6VBAiRp075679>