BIND 9.19 is an unstable development release of BIND. This document summarizes new features and functional changes that have been introduced on this branch. With each development release leading up to the stable BIND 9.20 release, this document will be updated with additional features added and bugs fixed. Please see the CHANGES file for a more detailed list of changes and bug fixes.
The latest versions of BIND 9 software can always be found at https://www.isc.org/download/. There you will find additional information about each release, and source code.
Key files were updated every time the
dnssec-policykey manager ran, whether the metadata has changed or not. BIND now checks if changes were applied before writing out the key files. [GL #3302].
According to RFC 8310, Section 8.1, the
Subjectfield MUST NOT be inspected when verifying a remote certificate while establishing a DNS-over-TLS connection. Only
subjectAltNamemust be checked instead. Unfortunately, some quite old versions of cryptographic libraries might lack the ability to ignore the
Subjectfield. This should have minimal production-use consequences, as most of the production-ready certificates issued by certificate authorities will have
subjectAltNameset. In such cases, the
Subjectfield is ignored. Only old platforms are affected by this, e.g. those supplied with OpenSSL versions older than 1.1.1. [GL #3163]
BIND 9 is open source software licensed under the terms of the Mozilla Public
License, version 2.0 (see the
COPYING file for the full text).
Those wishing to discuss license compliance may contact ISC at https://www.isc.org/contact/.
BIND 9.19 is an unstable development branch. When its development is complete, it will be renamed to BIND 9.20, which will be a stable branch. The end-of-life date for BIND 9.20 has not yet been determined. For those needing long-term stability, the current Extended Support Version (ESV) is BIND 9.16, which will be supported until at least December 2023. See https://kb.isc.org/docs/aa-00896 for details of ISC’s software support policy.
Thank you to everyone who assisted us in making this release possible.