Commit graph

157 commits

Author SHA1 Message Date
Evan Hunt
553ead32ff 2636. [func] Simplify zone signing and key maintenance with the
dnssec-* tools.  Major changes:
			- all dnssec-* tools now take a -K option to
			  specify a directory in which key files will be
			  stored
			- DNSSEC can now store metadata indicating when
			  they are scheduled to be published, acttivated,
			  revoked or removed; these values can be set by
			  dnssec-keygen or overwritten by the new
			  dnssec-settime command
			- dnssec-signzone -S (for "smart") option reads key
			  metadata and uses it to determine automatically
			  which keys to publish to the zone, use for
			  signing, revoke, or remove from the zone
			[RT #19816]
2009-07-19 04:18:05 +00:00
Evan Hunt
b272d38cc5 2612. [func] Add default values for the arguments to
dnssec-keygen.  Without arguments, it will now
			generate a 1024-bit RSASHA1 zone-signing key,
			or with the -f KSK option, a 2048-bit RSASHA1
			key-signing key. [RT #19300]

2611.	[func]		Add -l option to dnssec-dsfromkey to generate
			DLV records instead of DS records. [RT #19300]
2009-06-17 06:51:44 +00:00
Evan Hunt
76786c2904 - assorted changes needed for windows build
- began versioning for 9.7.0a1
2009-06-12 02:33:21 +00:00
Tatuya JINMEI 神明達哉
40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
2009-05-29 22:22:37 +00:00
Mark Andrews
e80b693272 2539. [security] Update the interaction between recursion, allow-query,
allow-query-cache and allow-recursion.  [RT #19198]
2009-01-30 03:48:54 +00:00
Tatuya JINMEI 神明達哉
492df05874 added new features for 9.7.0 so that they won't be forgotten (we can remove
them later if they are considered minor details).
2009-01-10 03:02:37 +00:00
Jeremy Reed
df6663c900 Add another NetBSD version. (I use that.)
These lists of operating systems and versions need to be updated
-- working on that in bugs ticket 16378.
2008-12-19 18:22:37 +00:00
Tatuya JINMEI 神明達哉
35726c4745 wording consistency 2008-11-08 22:44:10 +00:00
Tatuya JINMEI 神明達哉
f99fd90097 2489. [port] solaris: Workaround Solaris's kernel bug about
/dev/poll:
			http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
			Define ISC_SOCKET_USE_POLLWATCH at build time to enable
			this workaround. [RT #18870]
2008-11-08 22:35:12 +00:00
Mark Andrews
f6f1672b4e 2486. [func] The default locations for named.pid and lwresd.pid
are now /var/run/named/named.pid and
                        /var/run/lwresd/lwresd.pid respectively.

                        This allows the owner of the containing directory
                        to be set, for "named -u" support, and allows there
                        to be a permanent symbolic link in the path, for
                        "named -t" support.  [RT #18306]
2008-11-06 05:30:24 +00:00
Mark Andrews
831fb092e8 named-checkzone defaults 2008-10-24 00:52:49 +00:00
Mark Andrews
e2a24b6e79 document --enable-largefile 2008-10-14 03:33:01 +00:00
Evan Hunt
711f3ea3e3 remove "NSID support" from 9.6.0 features 2008-09-25 22:12:59 +00:00
Mark Andrews
bcfb2cead5 update 2008-09-25 04:30:42 +00:00
Evan Hunt
6cdaeb94d4 Moved libbind out as a separate product. 2008-09-24 04:16:53 +00:00
Evan Hunt
ce24920229 Further updates to README to clarify the situation with Windows builds. 2008-09-12 06:10:03 +00:00
Mark Andrews
d07e6bc6a6 update libtool and sunos4 2008-07-15 14:44:48 +00:00
Evan Hunt
767c53c304 Document changes to "rrset-order fixed" [rt17977] 2008-05-06 01:09:00 +00:00
Tatuya JINMEI 神明達哉
2fff8b8280 bind8-compat statistics updates 2008-04-09 22:48:17 +00:00
Mark Andrews
0f3264c8d1 2335. [port] sunos: libbind and *printf() support for long long.
[RT #17513]
2008-02-18 03:50:46 +00:00
Evan Hunt
9c114f36da Fix typo, "documention"->"documentation" 2008-01-29 19:53:34 +00:00
Jonathan Casey
0bdc099a35 Updating build list of OSes from both staff and recent community reports. 2007-11-14 16:36:56 +00:00
Evan Hunt
ffc65cc90d Updated for 9.5.0a7 2007-10-19 17:52:33 +00:00
Evan Hunt
19bcb91965 Release 9.5.0a7 2007-09-27 02:56:01 +00:00
Mark Andrews
9ab3b369d9 use "if set, otherwise" for allow-query-set 2007-09-06 01:39:05 +00:00
Mark Andrews
772069cf5a update allow-query-cache description 2007-09-06 01:32:41 +00:00
Mark Andrews
65085946d4 2162. [func] Allow "rrset-order fixed" to be disabled at compile
time. [RT #16665]
: ----------------------------------------------------------------------
2007-03-14 05:57:10 +00:00
Mark Andrews
5a8bebe00d 9.5.0a1 2006-12-22 03:07:29 +00:00
Mark Andrews
4a5fe00122 sunos 4 and --with-libtool 2006-06-14 04:00:10 +00:00
Mark Andrews
bce4c27420 OpenBSD 2006-06-06 00:17:12 +00:00
Mark Andrews
118394ef2e 1956. [bug] Improve cross compile support, 'gen' is now built
by native compiler.  See README for additional
                        cross compile support information. [RT #15148]
2006-01-05 00:30:34 +00:00
Mark Andrews
05d32f6b0f 1951. [security] Drop queries from particular well known ports.
Don't return FORMERR to queries from particular
                        well known ports.  [RT #15636]
2006-01-04 05:06:10 +00:00
Mark Andrews
309a3b5808 include 9.4 2005-12-06 02:24:28 +00:00
Mark Andrews
f829b1f42a Mac OS X 10.3.8 2005-04-05 03:04:02 +00:00
Mark Andrews
673b53417f Irix, MipsPRO 7.4.1m not 7.3.1m 2005-03-31 04:22:31 +00:00
Mark Andrews
260be76e8e Irix, MipsPRO 7.3.1m is known to cause problems. 2005-03-30 23:55:52 +00:00
Mark Andrews
cc4eef2a53 gcc-3.3.5 powerpc generates incorrect code at -02 2005-02-02 05:05:16 +00:00
Mark Andrews
3b71206de9 update to reflect current lab platforms 2004-08-20 05:57:05 +00:00
Mark Andrews
9f7d51ee32 1688. [bug] LDFLAGS was not supported. 2004-07-20 07:13:43 +00:00
Mark Andrews
8d0d941054 bind9-users -> bind-users 2004-06-08 00:17:09 +00:00
Mark Andrews
1ae75c1024 1609. [func] dig now has support to chase DNSSEC signature chains.
Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.
2004-04-13 02:39:35 +00:00
Mark Andrews
1676408640 pullup silence compiler fixes
ifconfig.sh for Solaris 9
README updates
2004-03-18 02:58:08 +00:00
Mark Andrews
438e3090de update list archive url 2004-03-09 04:19:16 +00:00
Mark Andrews
4d1ade9343 gcc ultrasparc update 2003-03-25 23:28:13 +00:00
Mark Andrews
fd9b6f253e remove reference to bit string labels 2003-03-25 01:20:00 +00:00
Mark Andrews
ff69418be4 gcc generates bad code 2003-02-21 04:52:48 +00:00
Mark Andrews
b587e1d83f spelling 2003-02-07 01:13:13 +00:00
Mark Andrews
3e480b2f81 update for Darwin 5.5 and 6.0. 2002-09-16 05:35:43 +00:00
Mark Andrews
c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews
614a25ce3c bind9-workers -> bind-workers 2002-07-10 02:47:11 +00:00