DomiNIC Release Notes

Important: Release 8.2.2 requires NIC-Container 7.0 or higher

Improvements

• Input options and description improved for TLSA records.
• SOAP API: specification of the nameserver group is now optional for ZoneModify/DomainZoneModify operations.
• Default value for session timeout set to 20 minutes.

Bugfixes

• Fxed issue with display of registrar lock flags.
• Fixed issue regarding the Issuer-Critical-Flag of the CAA resource record.
• Updated polling message for automatic contact deletion at nic.at.
• Fixed issue for automatic renew of IDN domains via polling message.
• Fixed issue with download of domain and order attachments.
• Fixed issue with malfunction of icon for the selection of files for an upload.
• Fixed issue with polling messages for domains that are not in the DomiNIC domain inventory.
• Fixed issue with missing owner handles after transfer.
• Fixed issue with zone lock operation.
• Fixed issue with use of the domain account in Soap/batch interface.
• GUI issue: domain name in the ordering process is on the left hand side as usual.
• Improved information for changes from full name service to no name service.
• Tooltip information corrected for system parameter dmw.login.sessiontimeout.

Important: Release 8.2.0 requires NIC-Container 7.0 or higher

New Features

• Zone archive. This new premium feature creates a history for each dns zone that is managed by DomiNIC. The history can be browsed and exported. Different zone versions can be compared and restored. In addition to that, users can now add comments for zone changes. Learn more about this new feature here: Zone archive
• Prices for SSL certificates can now be uploaded and will be displayed during the purchase process.
• Accounting files can be generated for SSL certificate orders.
• DS resource records can be added manually to handle DNSSEC signed sub zones. This is a premium feature.
• TLSA resource records are now available as a premium feature.
• Domain RDAP queries can be executed via Tools menu. This is a premium feature.
• Norwegian localization added as premium feature.

Improvements

• License warning messages will now only appear for users that belong to the root customer, or the operator customer.
• A new mechanism prevents multiple users from starting orders for the same domain/zone at the same time.
• The option “Import zone from DNS” for the data synchronization is not activated by default any more to lower the risk of accidental use.
• Zone validation for queued orders started via SOAP API will not be performed directly, but only when the order is running. This reduces the risk of invalid validations due to other running and queued orders
• SOAP API poll message for removed domains is now being sent when the domain is really deleted at the end of  the redemption period.
• Zone validation in the BPE for large zones will only validate resource records now, instead of the whole order.
• Domain authcodes will be shown in the order correspondence for soap api requests and email notifications only if the user has the appropriate right.
• Empty lines in uploaded CSR files will be ignored now.
• The display of the checkbox for the terms and conditions at the end of the ordering process can now be set by a user right.
• Display of the resend button for the user account activation email will now be displayed according to user rights and system configuration.
• Improved display of time selection fields.
• User and customer data are now displayed on separate tabs  on the “My profile” page.
• Removed default asterisk for the domain name filter in the domain inventory.
• GUI layout improvements

Bugfixes

• Internal name server groups are no longer used for data synchronization with a NIC.
• Domain imports from a NIC  are now checking for the correct account.
• SIDN: Notification for removed domain contacts is handled correctly now
• Nic.at: Notifications for deleted domains (“domain-deleted”) are handled correctly now.
• Fixed parsing of poll messages from Norid that contain embedded messages
• Fixed an issue with DNSSEC transfers for already signed domains, using the manual key-management
• Fixed issue for failed orders that could not be restarted when the user did not have the rights to edit all contact data.
• Host objects will no longer be created at  the NIC when the name server is  a hidden primary
• Fixed zone provisioning for some special cases where name servers are updated.
• Fixed issue where cancelling an SSL order could lead to incorrect display of available authentication methods in the  SSL ordering process.
• TLD specific information messages on the domain contact page within the ordering process will be displayed as info messages instead of error messages
• Fixed validation of null mx resource records when multiple mx records are used
• Fixed usage of the $DOMINIC_ROOT variable in system configurations
• Improved validation of system configuration.
• Fixed layout issues within the translation manager

Important: Release 8.2.1 requires NIC-Container 7.0 or higher

Improvements

• Upated Jetty version to 9.4.36.v20210114.
• Scheduled orders can now be started immediately within the result table of the “Search Orders” page.
• DNSSEC support for split dns domains.
• New download option for SSL certificates which contains the certificate, the root certificate and all intermediate certificates as separate files.
• Added a separate user right for ttl controlled jobs.
• The standalone page for link order confirmations (e.g. for owner changes) will no longer contain resource records. This reduces the amount of information shown to the customer and makes the page clearer.

Bugfixes

• Fixed an issue where name server ip address changes where mistakenly detected for name servers that had assigned more than one ipv4 or ipv6 address
• Fixed a connection issue with Denic that occured from time to time during NIC operations
• The domain status “Authinfo1 created” will only be stored again for TLDs that uses temporary authcodes like .de and .eu
• Fixed an issue that could cause accounting files to be overridden when accouting is activated for both domains and SSL certificates
• Fixed an issue where the language code could not be selected when a failed order had been reloaded
• Fixed some issues with the display of messages within certain popup panels
• Fixed an issue in the WfE interface that caused problems with the handling of multiple jobs.

Important: Release 8.1.5 requires NIC-Container 6.4 or higher

Improvements

• SSL certificate ordering: Contact details can differ from the data given in the CSR file now.
• Improved text for authinfo-creation notification emails.
• TTL value “0” for resource records: This value is now allowed in system configuration entry “dominic.dmw.resourcerecord.ttls”.
• Improved waiting times for KSK rollover orders before and after the new DS record is published at the NIC. This adjustment minimizes the risk of validation errors due to old (cached) records within resolvers.

Bugfixes

• Order approvals for domain expire orders can now be confirmed by end customers again
• Domain import orders that import data directly from the order are now able to import resource records again

Important: Release 8.1.4 requires NIC-Container 6.4 or higher

Improvements

• Support for service discovery TXT resource records according to RFC 6763

Bugfixes

• Fixed issue with email notifications for ssl orders
• Name server groups will not be renamed after KSK rollovers anymore

Important: Release 8.1.0 requires NIC-Container 6.0 or higher

New Features

• DoS prevention filter added for Jetty client gateways. This feature is not part of the DomiNIC standard, but can be added at an additional charge. Please contact us for more information.

Improvements

• SOAP API operation domainZoneModify will not accept other name server groups than the currently assigned group any more. This prevents unintended name server changes and secures the state of the current zone
• It is now possible to create individual email templates in case of a new user account creation and when a user forgot his password
• Compatibility for new Eurid API version 2.4

Bugfixes

• Fixed issue with customer changes for zones and in some cases for domains
• A, AAAA and MX resource records for idn domains can now contain underscores in the name field
  
• Fixed issue that prevented users to add PTR records to reverse zones for subnets of class-c networks
• Fixed issue with KSK rollovers for domains managed by CORE
  
• For transfers of dnssec signed domains, the current dnssec key is now queried from the public dns instead of the name servers in the order
  
• Failed updates after transfers due to zone validation errors detected by the NIC will now trigger a partial success email. The reservation only status will not be set, since the transfer had been completed successfully
• Fixed an issue where domain import orders with full contact sets (including handles) failed, if the contacts were not already stored in the database
  
• Fixed behavior of domain registrations and transfers with dnssec in combination with zone validation errors detected by the NIC
  
• Dns updates are now possible, after a domain import or data synchronization with failed dns synchronization
  
• Fixed behavior of Key-Systems domains with detected zone validation errors
  
• Fixed issue where host check operations failed for CORE, if the host object is assigned to another account