Version 2.9.8


  • On-slave signing produces broken NSEC(3) chain if glue node becomes (un-)orphaned #705
  • If more masters configured, zone retransfer triggers AXFR from all masters
  • KSK imported from BIND doesn't roll over automatically
  • kzonecheck fails on case-sensitivity of owner names in NSEC records #699
  • Server responds NOTIMPL to queries with QDCOUNT 0 and known OPCODE
  • Kdig crashes if source address and dnstap logging are specified together #702
  • Keymgr is unable to import BIND-style private key if it contains empty lines
  • Knotc fails to display error returned from zone freeze or zone thaw