> https://salsa.debian.org/dns-
> team/bind9/commit/94c7cd6f039b971e9cd9f0cde0a1ec17774aa6f8
> also mentions
> "there are rather important inline signing bugs in 9.11.4 prior to -P2."
>
> But this is targetted at Disco/Eoan which have 9.11.5.P1 and should have these
> right?
> Maybe before upload double check what came into 11.4.P2 to ensure they are in
> the version we re-enable this here.
All but one change in P2 were about signed zones (none specific to the algos we are enabling here, btw):
> https:/ /salsa. debian. org/dns- commit/ 94c7cd6f039b971 e9cd9f0cde0a1ec 17774aa6f8
> team/bind9/
> also mentions
> "there are rather important inline signing bugs in 9.11.4 prior to -P2."
>
> But this is targetted at Disco/Eoan which have 9.11.5.P1 and should have these
> right?
> Maybe before upload double check what came into 11.4.P2 to ensure they are in
> the version we re-enable this here.
All but one change in P2 were about signed zones (none specific to the algos we are enabling here, btw):
--- 9.11.4-P2 released ---
5022. [doc] Update ms-self, ms-subdomain, krb5-self, and
krb5- subdomain documentation. [GL !708]
5015. [bug] Reloading all zones caused zone maintenance to cease
for inline-signed zones. [GL #435]
5014. [bug] Signatures loaded from the journal for the signed
refresh. [GL #482]
version of an inline-signed zone were not scheduled for
5004. [bug] 'rndc reconfig' could cause inline zones to stop
re- signing. [GL #439]