Commit graph

167 commits

Author SHA1 Message Date
Evan Hunt
9d86a2e1c1 one more compatibility note 2010-01-21 21:24:03 +00:00
Evan Hunt
77fdd17568 Added new compatibility notes and information about key ID collisions. 2010-01-21 21:11:17 +00:00
Evan Hunt
306b36adb6 - moved NSEC3-NOTES to README.dnssec
- moved README.idnkit to contrib/idn
2009-12-04 20:14:28 +00:00
Evan Hunt
af104911b7 missing period in a sentence 2009-11-02 20:04:39 +00:00
Mark Andrews
2847930722 2708. [func] Insecure to secure and NSEC3 parameter changes via
update are now fully supported and no longer require
                        defines to enable.  We now no longer overload the
                        NSEC3PARAM flag field, nor the NSEC OPT bit at the
                        apex.  Secure to insecure changes are controlled by
                        by the named.conf option 'secure-to-insecure'.

                        Warning: If you had previously enabled support by
                        adding defines at compile time to BIND 9.6 you should
                        ensure that all changes that are in progress have
                        completed prior to upgrading to BIND 9.7.  BIND 9.7
                        is not backwards compatible.
2009-10-08 23:13:07 +00:00
Evan Hunt
a88f8c2dd1 update README for 9.7.0b1 release 2009-10-05 22:02:44 +00:00
Evan Hunt
0e4fda8862 typo fix 2009-09-15 19:30:28 +00:00
Evan Hunt
523598fafa - update README for a3 release
- update README.rfc5011 to remove info now in the ARM, and to add
  smart-signing info
2009-09-08 16:33:01 +00:00
Evan Hunt
d699672160 Initial prep for 9.7.0a3 release. 2009-09-02 06:41:31 +00:00
Tatuya JINMEI 神明達哉
307d208450 2660. [func] Add a new set of DNS libraries for non-BIND9
applications.  See README.libdns. [RT #19369]
2009-09-01 00:22:28 +00:00
Evan Hunt
553ead32ff 2636. [func] Simplify zone signing and key maintenance with the
dnssec-* tools.  Major changes:
			- all dnssec-* tools now take a -K option to
			  specify a directory in which key files will be
			  stored
			- DNSSEC can now store metadata indicating when
			  they are scheduled to be published, acttivated,
			  revoked or removed; these values can be set by
			  dnssec-keygen or overwritten by the new
			  dnssec-settime command
			- dnssec-signzone -S (for "smart") option reads key
			  metadata and uses it to determine automatically
			  which keys to publish to the zone, use for
			  signing, revoke, or remove from the zone
			[RT #19816]
2009-07-19 04:18:05 +00:00
Evan Hunt
b272d38cc5 2612. [func] Add default values for the arguments to
dnssec-keygen.  Without arguments, it will now
			generate a 1024-bit RSASHA1 zone-signing key,
			or with the -f KSK option, a 2048-bit RSASHA1
			key-signing key. [RT #19300]

2611.	[func]		Add -l option to dnssec-dsfromkey to generate
			DLV records instead of DS records. [RT #19300]
2009-06-17 06:51:44 +00:00
Evan Hunt
76786c2904 - assorted changes needed for windows build
- began versioning for 9.7.0a1
2009-06-12 02:33:21 +00:00
Tatuya JINMEI 神明達哉
40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
2009-05-29 22:22:37 +00:00
Mark Andrews
e80b693272 2539. [security] Update the interaction between recursion, allow-query,
allow-query-cache and allow-recursion.  [RT #19198]
2009-01-30 03:48:54 +00:00
Tatuya JINMEI 神明達哉
492df05874 added new features for 9.7.0 so that they won't be forgotten (we can remove
them later if they are considered minor details).
2009-01-10 03:02:37 +00:00
Jeremy Reed
df6663c900 Add another NetBSD version. (I use that.)
These lists of operating systems and versions need to be updated
-- working on that in bugs ticket 16378.
2008-12-19 18:22:37 +00:00
Tatuya JINMEI 神明達哉
35726c4745 wording consistency 2008-11-08 22:44:10 +00:00
Tatuya JINMEI 神明達哉
f99fd90097 2489. [port] solaris: Workaround Solaris's kernel bug about
/dev/poll:
			http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
			Define ISC_SOCKET_USE_POLLWATCH at build time to enable
			this workaround. [RT #18870]
2008-11-08 22:35:12 +00:00
Mark Andrews
f6f1672b4e 2486. [func] The default locations for named.pid and lwresd.pid
are now /var/run/named/named.pid and
                        /var/run/lwresd/lwresd.pid respectively.

                        This allows the owner of the containing directory
                        to be set, for "named -u" support, and allows there
                        to be a permanent symbolic link in the path, for
                        "named -t" support.  [RT #18306]
2008-11-06 05:30:24 +00:00
Mark Andrews
831fb092e8 named-checkzone defaults 2008-10-24 00:52:49 +00:00
Mark Andrews
e2a24b6e79 document --enable-largefile 2008-10-14 03:33:01 +00:00
Evan Hunt
711f3ea3e3 remove "NSID support" from 9.6.0 features 2008-09-25 22:12:59 +00:00
Mark Andrews
bcfb2cead5 update 2008-09-25 04:30:42 +00:00
Evan Hunt
6cdaeb94d4 Moved libbind out as a separate product. 2008-09-24 04:16:53 +00:00
Evan Hunt
ce24920229 Further updates to README to clarify the situation with Windows builds. 2008-09-12 06:10:03 +00:00
Mark Andrews
d07e6bc6a6 update libtool and sunos4 2008-07-15 14:44:48 +00:00
Evan Hunt
767c53c304 Document changes to "rrset-order fixed" [rt17977] 2008-05-06 01:09:00 +00:00
Tatuya JINMEI 神明達哉
2fff8b8280 bind8-compat statistics updates 2008-04-09 22:48:17 +00:00
Mark Andrews
0f3264c8d1 2335. [port] sunos: libbind and *printf() support for long long.
[RT #17513]
2008-02-18 03:50:46 +00:00
Evan Hunt
9c114f36da Fix typo, "documention"->"documentation" 2008-01-29 19:53:34 +00:00
Jonathan Casey
0bdc099a35 Updating build list of OSes from both staff and recent community reports. 2007-11-14 16:36:56 +00:00
Evan Hunt
ffc65cc90d Updated for 9.5.0a7 2007-10-19 17:52:33 +00:00
Evan Hunt
19bcb91965 Release 9.5.0a7 2007-09-27 02:56:01 +00:00
Mark Andrews
9ab3b369d9 use "if set, otherwise" for allow-query-set 2007-09-06 01:39:05 +00:00
Mark Andrews
772069cf5a update allow-query-cache description 2007-09-06 01:32:41 +00:00
Mark Andrews
65085946d4 2162. [func] Allow "rrset-order fixed" to be disabled at compile
time. [RT #16665]
: ----------------------------------------------------------------------
2007-03-14 05:57:10 +00:00
Mark Andrews
5a8bebe00d 9.5.0a1 2006-12-22 03:07:29 +00:00
Mark Andrews
4a5fe00122 sunos 4 and --with-libtool 2006-06-14 04:00:10 +00:00
Mark Andrews
bce4c27420 OpenBSD 2006-06-06 00:17:12 +00:00
Mark Andrews
118394ef2e 1956. [bug] Improve cross compile support, 'gen' is now built
by native compiler.  See README for additional
                        cross compile support information. [RT #15148]
2006-01-05 00:30:34 +00:00
Mark Andrews
05d32f6b0f 1951. [security] Drop queries from particular well known ports.
Don't return FORMERR to queries from particular
                        well known ports.  [RT #15636]
2006-01-04 05:06:10 +00:00
Mark Andrews
309a3b5808 include 9.4 2005-12-06 02:24:28 +00:00
Mark Andrews
f829b1f42a Mac OS X 10.3.8 2005-04-05 03:04:02 +00:00
Mark Andrews
673b53417f Irix, MipsPRO 7.4.1m not 7.3.1m 2005-03-31 04:22:31 +00:00
Mark Andrews
260be76e8e Irix, MipsPRO 7.3.1m is known to cause problems. 2005-03-30 23:55:52 +00:00
Mark Andrews
cc4eef2a53 gcc-3.3.5 powerpc generates incorrect code at -02 2005-02-02 05:05:16 +00:00
Mark Andrews
3b71206de9 update to reflect current lab platforms 2004-08-20 05:57:05 +00:00
Mark Andrews
9f7d51ee32 1688. [bug] LDFLAGS was not supported. 2004-07-20 07:13:43 +00:00
Mark Andrews
8d0d941054 bind9-users -> bind-users 2004-06-08 00:17:09 +00:00