dsa-check-dnssec-delegation: accept any ds/dnskey combination whose intersection...

[mirror/dsa-nagios.git] / dsa-nagios-checks / debian / changelog

diff --git a/dsa-nagios-checks/debian/changelog b/dsa-nagios-checks/debian/changelog
index cc04d15..9914100 100644 (file)
--- a/dsa-nagios-checks/debian/changelog
+++ b/dsa-nagios-checks/debian/changelog
@@ -1,8 +1,32 @@
-dsa-nagios-checks (95) UNRELEASED; urgency=low
+dsa-nagios-checks (96) UNRELEASED; urgency=low
+
+  * dsa-check-zone-rrsig-expiration, dsa-check-zone-rrsig-expiration-many:
+    Allow supplying the nameservers to start recursion at (per zone).
+    This is useful for reverse zones of RFC1918 space.
+  * dsa-check-bacula: exit status fix.
+  * dsa-check-hpacucli:
+    - support filtering controllers.
+    - add an option to accept no-controllers as an OK state.
+  * remove weak keys check
+  * dsa-check-dnssec-delegation
+    - handle zones with no keys that have the SEP bit.
+    - warn on all domains where parent has a non-empty DS bit that does
+      not match ours, even if we did not expect it to have one at all.
+  * dsa-check-zone-rrsig-expiration-many:
+    - expect dnssec by default now.
+  * dsa-check-zone-rrsig-expiration:
+    - in the OK message, clarify we only check sigs at the zone apex.
+  * dsa-check-dnssec-delegation:
+    - accept any ds/dnskey combination whose intersection is not empty.
+      (previously we required them to match exactly.)
+
+ -- Peter Palfrader <weasel@debian.org>  Tue, 23 Apr 2013 20:12:09 +0200
+
+dsa-nagios-checks (95) unstable; urgency=low
 
   * dsa-check-running-kernel: Try to fix zcat kernel case.
 
- -- Peter Palfrader <weasel@debian.org>  Tue, 16 Apr 2013 11:33:59 +0200
+ -- Peter Palfrader <weasel@debian.org>  Tue, 16 Apr 2013 17:40:49 +0200
 
 dsa-nagios-checks (94) unstable; urgency=low