diff --git a/CHANGES b/CHANGES index 4df3e1fc81..518332d120 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,33 @@ +3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917] + +3924. [bug] Improve 'rndc addzone' error reporting. [RT #35187] + +3923. [bug] Sanity check the xml2-config output. [RT #22246] + +3922. [bug] When resigning, dnssec-signzone was removing + all signatures from delegation nodes. It now + retains DS and (if applicable) NSEC signatures. + [RT #36946] + +3921. [bug] AD was inappopriately set on RPZ responses. [RT #36833] + +3920. [doc] Added doc for masterfile-style. [RT #36823] + +3919. [bug] dig: continue to next line if a address lookup fails + in batch mode. [RT #36755] + +3918. [doc] Update check-spf documentation. [RT #36910] + +3917. [bug] dig, nslookup and host now continue on names that are + too long after applying a search list elements. + [RT #36892] + +3916. [contrib] zone2sqlite checked wrong result code. Address + compiler warnings. [RT #36931] + +3915. [bug] Address a assertion if a route event arrived while + shutting down. [RT #36887] + 3914. [bug] Allow the URI target and CAA value fields to be zero length. [RT #36737] diff --git a/bin/dig/dig.1 b/bin/dig/dig.1 index b25760e7a6..0e5e27502c 100644 --- a/bin/dig/dig.1 +++ b/bin/dig/dig.1 @@ -346,7 +346,7 @@ option were given. .PP \fB+dscp=value\fR .RS 4 -Set the DSCP code point to be used when sending the query. Valid DSCP code points are in the range [0..63]. By default no code point is explictly set. +Set the DSCP code point to be used when sending the query. Valid DSCP code points are in the range [0..63]. By default no code point is explicitly set. .RE .PP \fB+[no]edns[=#]\fR @@ -516,7 +516,7 @@ This query option toggles the printing of statistics: when the query was made, t .PP \fB+[no]subnet=addr/prefix\fR .RS 4 -Send an EDNS Client Subnet option with the speciifed IP address or network prefix. +Send an EDNS Client Subnet option with the specified IP address or network prefix. .RE .PP \fB+[no]tcp\fR diff --git a/bin/dig/dig.c b/bin/dig/dig.c index 7e72c4f09b..d27bb90552 100644 --- a/bin/dig/dig.c +++ b/bin/dig/dig.c @@ -1677,7 +1677,8 @@ preparse_args(int argc, char **argv) { static void parse_args(isc_boolean_t is_batchfile, isc_boolean_t config_only, - int argc, char **argv) { + int argc, char **argv) +{ isc_result_t result; isc_textregion_t tr; isc_boolean_t firstarg = ISC_TRUE; @@ -1771,7 +1772,24 @@ parse_args(isc_boolean_t is_batchfile, isc_boolean_t config_only, if (strncmp(rv[0], "%", 1) == 0) break; if (rv[0][0] == '@') { - addresscount = getaddresses(lookup, &rv[0][1], NULL); + + if (is_batchfile && !config_only) { + addresscount = getaddresses(lookup, &rv[0][1], + &result); + if (result != ISC_R_SUCCESS) { + fprintf(stderr, "couldn't get address " + "for '%s': %s: skipping " + "lookup\n", &rv[0][1], + isc_result_totext(result)); + if (ISC_LINK_LINKED(lookup, link)) + ISC_LIST_DEQUEUE(lookup_list, + lookup, link); + destroy_lookup(lookup); + return; + } + } else + addresscount = getaddresses(lookup, &rv[0][1], + NULL); } else if (rv[0][0] == '+') { plus_option(&rv[0][1], is_batchfile, lookup); diff --git a/bin/dig/dig.html b/bin/dig/dig.html index 0a5a85ee29..0e11541dbc 100644 --- a/bin/dig/dig.html +++ b/bin/dig/dig.html @@ -374,7 +374,7 @@
Set the DSCP code point to be used when sending the query. Valid DSCP code points are in the range - [0..63]. By default no code point is explictly set. + [0..63]. By default no code point is explicitly set.
+[no]edns[=#]@@ -545,7 +545,7 @@
+[no]subnet=addr/prefix- Send an EDNS Client Subnet option with the speciifed + Send an EDNS Client Subnet option with the specified IP address or network prefix.
+[no]tcp
This option is mandatory unless the -f has
been used to specify a zone file. (If -f has
- been specified, this option may still be used; it will overrde
+ been specified, this option may still be used; it will override
the value found in the file.)
-L to
dnssec-keygen. (If either of those is true,
- this option may still be used; it will overrde the value found
+ this option may still be used; it will override the value found
in the zone or key file.)
diff --git a/bin/rndc/rndc.8 b/bin/rndc/rndc.8
index fd1b2e0bdf..8758edd908 100644
--- a/bin/rndc/rndc.8
+++ b/bin/rndc/rndc.8
@@ -20,11 +20,11 @@
.\" Title: rndc
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 flushtree [-all] name [view] flushtree name [view] Flushes the given name, and all of its subdomains, from the server's DNS cache, the address database, @@ -581,7 +581,7 @@
There is currently no way to provide the shared secret for a
key_id without using the configuration file.
@@ -591,7 +591,7 @@
./configure --enable-native-pkcs11 \
The modified OpenSSL code is included in the BIND 9 release,
- in the form of a context diff against the latest verions of
+ in the form of a context diff against the latest versions of
OpenSSL. OpenSSL 0.9.8, 1.0.0, and 1.0.1 are supported; there are
separate diffs for each version. In the examples to follow,
we use OpenSSL 0.9.8, but the same methods work with OpenSSL
@@ -2020,7 +2020,7 @@ $ dnssec-signzone -E '' -S example.net
- DLZ (Dynamically Loadable Zones) is an extention to BIND 9 that allows
+ DLZ (Dynamically Loadable Zones) is an extension to BIND 9 that allows
zone data to be retrieved directly from an external database. There is
no required format or schema. DLZ drivers exist for several different
database backends including PostgreSQL, MySQL, and LDAP and can be
diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html
index ec241708ec..5115b571ac 100644
--- a/doc/arm/Bv9ARM.ch06.html
+++ b/doc/arm/Bv9ARM.ch06.html
@@ -437,7 +437,7 @@
In most cases, setting a value to 0 does not
literally mean zero; it means "undefined" or
"as big as possible", depending on the context.
- See the expalantions of particular parameters
+ See the explanations of particular parameters
that use size_spec
for details on how they interpret its use.
@@ -3082,7 +3082,7 @@ options {
restarted (NTA's do not persist across restarts).
- For convienience, TTL-style time unit suffixes can be
+ For convenience, TTL-style time unit suffixes can be
used to specify the NTA lifetime in seconds, minutes
or hours. nta-lifetime defaults to
one hour. It cannot exceed one day.
@@ -3107,13 +3107,13 @@ options {
the negative trust anchor is allowed to expire early.
- Validity checks can be disabled for an indivdiual
+ Validity checks can be disabled for an individual
NTA by using rndc nta -f, or
for all NTA's by setting nta-recheck
to zero.
- For convienience, TTL-style time unit suffixes can be
+ For convenience, TTL-style time unit suffixes can be
used to specify the NTA recheck interval in seconds,
minutes or hours. The default is five minutes.
@@ -4406,7 +4406,7 @@ options {
than matching the case of the records entered in
the zone file. This allows responses to exactly
match the query, which is required by some clients
- due to incorrect use of case-sensitive comparisions.
+ due to incorrect use of case-sensitive comparisons.
Case-insensitive compression is always
@@ -4414,12 +4414,12 @@ options {
the client matches this ACL.
- There are circusmstances in which named
+ There are circumstances in which named
will not preserve the case of owner names of records:
if a zone file defines records of different types with
the same name, but the capitalization of the name is
different (e.g., "www.example.com/A" and
- "WWW.EXAMPLE.COM/AAAA"), then all resposnes for that
+ "WWW.EXAMPLE.COM/AAAA"), then all responses for that
name will use the first version
of the name that was used in the zone file. This
limitation may be addressed in a future release. However,
@@ -6772,7 +6772,7 @@ rate-limit {
is over 1000 and the ratio is over 10),
the one that appears last in the configuration file is the
one chosen. To eliminate any ambiguity, it is recommended
- that under normal circumstnaces, rate limiting bands should
+ that under normal circumstances, rate limiting bands should
be configured using either size or
ratio parameters, but not both.
@@ -10316,8 +10316,7 @@ view external {
Each RR can have a TTL as the second
field in the RR, which will control how long other
- servers can cache
- the it.
+ servers can cache it.
diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html
index 086e266214..6d3e33fa49 100644
--- a/doc/arm/Bv9ARM.ch09.html
+++ b/doc/arm/Bv9ARM.ch09.html
@@ -57,13 +57,13 @@
BIND 9 DNS Library Support
-- Prerequisite
-- Compilation
-- Installation
-- Known Defects/Restrictions
-- The dns.conf File
-- Sample Applications
-- Library References
+- Prerequisite
+- Compilation
+- Installation
+- Known Defects/Restrictions
+- The dns.conf File
+- Sample Applications
+- Library References
@@ -648,7 +648,7 @@
GNU make is required to build the export libraries (other
part of BIND 9 can still be built with other types of make). In
the reminder of this document, "make" means GNU make. Note that
@@ -657,7 +657,7 @@
$ ./configure --enable-exportlib [other flags]
$ make
@@ -672,7 +672,7 @@ $ make
$ cd lib/export
$ make install
@@ -694,7 +694,7 @@ $ make install
Currently, win32 is not supported for the export
library. (Normal BIND 9 application can be built as
@@ -734,7 +734,7 @@ $ make
The IRS library supports an "advanced" configuration file
related to the DNS library for configuration parameters that
would be beyond the capability of the
@@ -752,14 +752,14 @@ $ make
Some sample application programs using this API are
provided for reference. The following is a brief description of
these applications.
It sends a query of a given name (of a given optional RR type) to a
specified recursive server, and prints the result as a list of
@@ -823,7 +823,7 @@ $ make
Similar to "sample", but accepts a list
of (query) domain names as a separate file and resolves the names
@@ -856,7 +856,7 @@ $ make
consists of a single domain name. Example:
www.example.com
- mx.examle.net
+ mx.example.net
ns.xxx.example
@@ -864,7 +864,7 @@ $ make
It sends a query to a specified server, and
prints the response with minimal processing. It doesn't act as a
@@ -905,7 +905,7 @@ $ make
This is a test program
to check getaddrinfo() and getnameinfo() behavior. It takes a
@@ -922,7 +922,7 @@ $ make
It accepts a single update command as a
command-line argument, sends an update request message to the
@@ -1017,7 +1017,7 @@ $ sample-update -a sample-update -k Kxxx.+nnn+mm
It checks a set
of domains to see the name servers of the domains behave
@@ -1074,7 +1074,7 @@ $ sample-update -a sample-update -k Kxxx.+nnn+mm
As of this writing, there is no formal "manual" of the
libraries, except this document, header files (some of them
provide pretty detailed explanations), and sample application
diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html
index f010db7c88..ad13583dfa 100644
--- a/doc/arm/Bv9ARM.html
+++ b/doc/arm/Bv9ARM.html
@@ -251,13 +251,13 @@
BIND 9 DNS Library Support
I. Manual pages
diff --git a/doc/arm/dlz.xml b/doc/arm/dlz.xml
index 74a9f2a500..d98bc698f9 100644
--- a/doc/arm/dlz.xml
+++ b/doc/arm/dlz.xml
@@ -1,6 +1,6 @@