Commit graph

2978 commits

Author SHA1 Message Date
Tinderbox User
0478b1d205 update copyright notice / whitespace 2018-01-22 23:49:47 +00:00
Mukund Sivaraman
ef838436ef Don't permit loading meta RR types such as TKEY from master files (#47009)
(cherry picked from commit 8a4ce20172)
(cherry picked from commit c8eb726046)
(cherry picked from commit 6fb3db01ac)
(cherry picked from commit 96456c0834)
2018-01-22 15:03:31 +05:30
Tinderbox User
8d5a01a868 update copyright notice / whitespace 2018-01-13 23:50:30 +00:00
Mark Andrews
a8b6d87ebe ret was not being set to 1 on dig error. [RT #46990]
(cherry picked from commit 69c4c987f6)
2018-01-13 13:18:15 +11:00
Mark Andrews
7210904eb9 backport support for Windows differences 2017-12-13 17:51:29 +11:00
Mark Andrews
26facb12cb test for key != NULL on error path
(cherry picked from commit 9bad78cbc2)
2017-12-13 15:13:30 +11:00
Mark Andrews
93b42ff4cc 4846. [test] Adjust timing values in runtime system test. Address
named.pid removal races in runtime system test.
                        [RT #46800]

(cherry picked from commit c67180f09b)
(cherry picked from commit 0f14b04132)
(cherry picked from commit 265ba7d08b)
2017-12-13 10:38:48 +11:00
Mark Andrews
60a1305469 increment test number
(cherry picked from commit e5c2cfdbf9)
2017-12-08 14:51:37 +11:00
Tinderbox User
92c1063230 update copyright notice / whitespace 2017-12-06 23:48:04 +00:00
Mark Andrews
4a51a6fd40 4840. [test] Add tests to cover fallback to using ZSK on inactive
KSK. [RT #46787]

(cherry picked from commit 32d09cd7e0)
(cherry picked from commit 0d6328ce5f)
(cherry picked from commit 51f13bcd2f)
2017-12-06 20:50:56 +11:00
Tinderbox User
d114b94481 update copyright notice / whitespace 2017-12-05 23:48:43 +00:00
Curtis Blackburn
60b4b5ead3 clarify "stage 1" and "stage 2" in autosign test 2017-12-05 10:05:21 -08:00
Mark Andrews
02324ce60a set the DNSKEY deletion time to now+5 once we got all the zones into their initial state
(cherry picked from commit ecafa2ae50)
(cherry picked from commit 15057131d5)
2017-12-05 21:43:13 +11:00
Mark Andrews
124a44db43 use 9.11 and earlier syntax for dnssec-keygen
(cherry picked from commit 7f31784c52)
2017-12-05 20:44:20 +11:00
Mark Andrews
3666b9bfb6 4839. [bug] zone.c:zone_sign was not properly determining
if there were active KSK and ZSK keys for
                        a algorithm when update-check-ksk is true
                        (default) leaving records unsigned with one or
                        more DNSKEY algorithms. [RT #46774]

(cherry picked from commit 00f5ea91cf)
2017-12-05 16:12:05 +11:00
Tinderbox User
55da37ecc7 update copyright notice / whitespace 2017-12-04 23:51:02 +00:00
Evan Hunt
36794f5653 [v9_9] fix test descriptions 2017-12-04 15:48:09 -08:00
Mark Andrews
2c0a365200 4838. [bug] zone.c:add_sigs was not properly determining
if there were active KSK and ZSK keys for
                        a algorithm when update-check-ksk is true
                        (default) leaving records unsigned with one or
                        more DNSKEY algorithms. [RT #46754]

(cherry picked from commit 6fa2a0691e)
(cherry picked from commit 677f507de7)
2017-12-05 09:44:49 +11:00
Tinderbox User
bd9577293b update copyright notice / whitespace 2017-12-03 23:47:49 +00:00
Mark Andrews
5ed673c0d2 4837. [bug] dns_update_signatures{inc} (add_sigs) was not
properly determining if there were active KSK and
                        ZSK keys for a algorithm when update-check-ksk is
                        true (default) leaving records unsigned. [RT #46743]

(cherry picked from commit 196e01da5f)
(cherry picked from commit bf459d24a1)
(cherry picked from commit 5623f65cc4)
2017-12-04 10:09:45 +11:00
Tinderbox User
03674299c7 update copyright notice / whitespace 2017-11-30 23:50:30 +00:00
Evan Hunt
17122341fe [v9_9] fix "allow-transfer" inheritance and clean up ACL configuration
4836.	[bug]		Zones created using "rndc addzone" could
			temporarily fail to inherit an "allow-transfer"
			ACL that had been configured in the options
			statement. [RT #46603]

(cherry picked from commit e197a2bd15)
(cherry picked from commit f53e0bda46)
(cherry picked from commit 9dfff4e378)
2017-11-30 13:34:53 -08:00
Tinderbox User
230916c184 update copyright notice / whitespace 2017-11-27 23:50:30 +00:00
Michał Kępień
a59eb10b23 [v9_9] Stabilize nsupdate system test [RT #46673]
(cherry picked from commit 00ff44c7c2)
2017-11-27 10:16:09 +01:00
Tinderbox User
f2f3b68ac7 update copyright notice / whitespace 2017-11-21 23:47:58 +00:00
Michał Kępień
bbfa83da40 [v9_9] Refactor reclimit system test
4823.	[test]		Refactor reclimit system test to improve its
			reliability and speed. [RT #46632]

(cherry picked from commit 1fd4803e84)
2017-11-21 10:34:03 +01:00
Tinderbox User
7fed20ed8f update copyright notice / whitespace 2017-11-16 23:48:10 +00:00
Michał Kępień
a3b4977931 [v9_9] Stabilize logfileconfig system test
4818.	[test]		The logfileconfig system test could intermittently
			report false negatives on some platforms. [RT #46615]

(cherry picked from commit 169ce30bf7)
2017-11-16 08:17:18 +01:00
Tinderbox User
ec547a9877 update copyright notice / whitespace 2017-11-08 23:48:10 +00:00
Michał Kępień
14e1eac55c [v9_9] Do not NOTIFY back the master view from slave views in notify system test
This prevents a Linux kernel bug discussed in RT #32355 from being
triggered and thus makes "checking notify to multiple views using tsig"
stable.

(cherry picked from commit 27bf48327c)
2017-11-08 09:22:31 +01:00
Mark Andrews
38400d2bec 4810. [test] The chain system test failed if the IPv6 interfaces
were not configured. [RT #46508]

(cherry picked from commit c652213857)
2017-11-08 10:18:47 +11:00
Mark Andrews
3b9332a20d 4804. [port] win32: access() does not work on directories as
required by POSIX.  Supply a alternative in
                        isc_file_isdirwritable. [RT #46394]
2017-11-01 09:47:52 +11:00
Evan Hunt
5f0cc4be38 [v9_9] copyrights 2017-10-29 16:44:31 -07:00
Mark Andrews
e1dd822fc3 number tests 2017-10-30 08:32:18 +11:00
Mark Andrews
24592f9f78 Add system tests and remove redundent logging from:
4801.   [func]          'dnssec-lookaside auto;' and 'dnssec-lookaside .
                        trust-anchor dlv.isc.org;' now elicit warnings rather
                        than being fatal configuration errors. [RT #46410]

(cherry picked from commit f5e1b555c5)
2017-10-30 08:20:51 +11:00
Evan Hunt
dcaf355f00 [v9_9] log when update-policy local gets a key match from a remote host
4788.	[cleanup]	When using "update-policy local", log a warning
			when an update matching the session key is received
			from a remote host. [RT #46213]

- this completes change #4762.
2017-10-25 01:09:41 -07:00
Mark Andrews
42f1b7e3e8 read dig.out.ns3.test$n rather than dig.out.ns2.test$n
(cherry picked from commit 80739779fc)
2017-10-25 15:03:28 +11:00
Tinderbox User
c53d3336d6 update copyright notice / whitespace 2017-10-24 23:53:22 +00:00
Mark Andrews
8221d208a7 4783. [test] dnssec: 'check that NOTIFY is sent at the end of
NSEC3 chain generation failed' required more time
                        on some machines for the IXFR to complete. [RT #46388]

(cherry picked from commit 969d923536)
2017-10-25 09:22:28 +11:00
Mark Andrews
6455eec8e2 remove redundent reconfig; number tests 2017-10-24 14:46:27 +11:00
Evan Hunt
0a5b0a447e [v9_9] omit NS from authority section if it was in answer
4780.	[bug]		When answering ANY queries, don't include the NS
			RRset in the authority section if it was already
			in the answer section. [RT #44543]

(cherry picked from commit b7b76d6b85)
(cherry picked from commit 13435af49a)
2017-10-23 19:38:29 -07:00
Mark Andrews
ab342443aa report if named.run or named.memstats not removed after successful test
(cherry picked from commit 5bead588b7)
2017-10-24 12:48:51 +11:00
Evan Hunt
9c84f65183 [v9_9] test for Net::DNS::Nameserver in prereq.sh
(cherry picked from commit 475c51cce0)
2017-10-21 00:29:27 -07:00
Mark Andrews
1a26741d87 include "../mkd"; as we have already changed working directory
(cherry picked from commit b71747f765)
2017-10-20 11:50:06 +11:00
Evan Hunt
9ad9f7694d [v9_9] skip managed-keys reconfig tests in runtime if no crypto [RT #46327]
(cherry picked from commit b093b684a6)
(cherry picked from commit b5c1d2bc01)
2017-10-18 22:29:21 -07:00
Evan Hunt
eb66afdde0 [v9_9] copyrights 2017-10-18 17:34:15 -07:00
Evan Hunt
8b35d08f70 [v9_9] require writable managed keys directory
4769.	[bug]		Enforce the requirement that the managed keys
			directory (specified by "managed-keys-directory",
			and defaulting to the working directory if not
			specified) must be writable. [RT #46077]

(cherry picked from commit 56e30ebae6)
(cherry picked from commit b6b2b0b9b5)
2017-10-17 21:39:05 -07:00
Michał Kępień
3a38ada70d [v9_9] Regenerate presigned zone for the filter-aaaa system test [RT #46283]
Fix the filter-aaaa system test for builds without DNSSEC support.
2017-10-16 09:48:05 +02:00
Tinderbox User
148bd18c76 update copyright notice / whitespace 2017-10-13 23:48:17 +00:00
Evan Hunt
a510be00ad [v9_9] fix filter-aaaa test [RT #46268]
(cherry picked from commit 666af25a92)
2017-10-13 11:12:29 -07:00