Commit graph

588 commits

Author SHA1 Message Date
Evan Hunt
4103d428a9 use genrandom to produce random data for input to ddns-confgen 2009-07-30 15:11:41 +00:00
Automatic Updater
0282f038eb update copyright notice 2009-07-29 23:47:43 +00:00
Evan Hunt
9069215eac 2641. [bug] Fixed an error in parsing update-policy syntax,
added a regression test to check it. [RT #20007]
2009-07-29 17:52:00 +00:00
Automatic Updater
26d8ffe715 update copyright notice 2009-07-19 23:47:55 +00:00
Evan Hunt
553ead32ff 2636. [func] Simplify zone signing and key maintenance with the
dnssec-* tools.  Major changes:
			- all dnssec-* tools now take a -K option to
			  specify a directory in which key files will be
			  stored
			- DNSSEC can now store metadata indicating when
			  they are scheduled to be published, acttivated,
			  revoked or removed; these values can be set by
			  dnssec-keygen or overwritten by the new
			  dnssec-settime command
			- dnssec-signzone -S (for "smart") option reads key
			  metadata and uses it to determine automatically
			  which keys to publish to the zone, use for
			  signing, revoke, or remove from the zone
			[RT #19816]
2009-07-19 04:18:05 +00:00
Automatic Updater
6815ef40df update copyright notice 2009-06-26 23:47:58 +00:00
Mark Andrews
870332fb6d 2617. [bug] ifconfig.sh failed to emit an error message when
run from the wrong location. [RT #19375]
2009-06-26 06:08:40 +00:00
Automatic Updater
39844d4710 update copyright notice 2009-06-04 02:56:47 +00:00
Mark Andrews
2534a73a59 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-04 02:13:37 +00:00
Automatic Updater
e6ada020f5 update copyright notice 2009-05-29 23:47:49 +00:00
Tatuya JINMEI 神明達哉
40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
2009-05-29 22:22:37 +00:00
Automatic Updater
4f91bcae43 update copyright notice 2009-03-02 23:47:43 +00:00
Evan Hunt
ca42dcc068 2569. [func] Move journalprint, nsec3hash, and genrandom
commands from bin/tests into bin/tools;
                        "make install" will put them in $sbindir. [RT #19301]
2009-03-02 03:54:10 +00:00
Mark Andrews
e4c6491bbf 2565. [func] Add support for HIP record. Includes new functions
dns_rdata_hip_first(), dns_rdata_hip_next()
                        and dns_rdata_hip_current().  [RT #19384]
2009-02-26 06:09:19 +00:00
Automatic Updater
8b835581b4 update copyright notice 2009-01-30 23:47:50 +00:00
Mark Andrews
14810640b7 2539. [security] Update the interaction between recursion, allow-query,
allow-query-cache and allow-recursion.  [RT #19198]
2009-01-30 08:19:00 +00:00
Automatic Updater
83b86f3936 update copyright notice 2009-01-21 23:47:27 +00:00
Mark Andrews
31b7a2fed6 2534. [func] Check NAPTR records regular expressions and
replacement strings to ensure they are syntaxically
                        valid and consistant. [RT #18168]
2009-01-21 05:37:55 +00:00
Evan Hunt
95de316a5d suppress an error message on solaris. [rt18253] 2008-10-09 21:27:52 +00:00
Automatic Updater
3398334b3a update copyright notice 2008-09-25 04:02:39 +00:00
Mark Andrews
6098d364b6 2448. [func] Add NSEC3 support. [RT #15452] 2008-09-24 02:46:23 +00:00
Francis Dupont
cbb8a1b7cb Support Solaris 2.11 and over. [RT #18362] 2008-07-25 20:40:07 +00:00
Evan Hunt
7ed4399c65 remove 'grep -q' from acl test script, some platforms don't
support it. [rt18253]
2008-07-19 00:02:14 +00:00
Mark Andrews
862015b91f cleanup 2008-07-17 01:15:34 +00:00
Automatic Updater
1dd754dcdf update copyright notice 2008-04-24 23:46:59 +00:00
Evan Hunt
66e50468dd Change rrsetorder test two ways:
1) only test "fixed" ordering if it was compiled in
2) test whether "cyclic" ordering is cyclic, but don't
   rely on the initial state being predictable
[rt17977]
2008-04-24 21:50:27 +00:00
Automatic Updater
a687db7ce8 update copyright notice 2008-04-02 23:46:58 +00:00
Mark Andrews
3f42cf2f3e 2349. [func] Provide incremental re-signing support for secure
dynamic zones. [RT #1091]

back out incorrect branch rt1091 and apply correct branch rt1091a.
2008-04-02 02:37:42 +00:00
Automatic Updater
f9760f7b6a update copyright notice 2008-03-03 23:47:02 +00:00
Mark Andrews
d9936b218d 2340. [port] openbsd: interface configuration. [RT #17700] 2008-03-03 01:20:03 +00:00
Evan Hunt
262c39b236 IPv6 addresses could match IPv4 ACL entries and vice versa. [RT #17462] 2008-01-21 20:38:54 +00:00
Automatic Updater
9d5ed744c4 update copyright notice 2008-01-14 23:46:56 +00:00
Mark Andrews
034f775ae1 2301. [bug] Remove resource leak and fix error messages in
bin/tests/system/lwresd/lwtest.c. [RT #17474]
2008-01-14 12:02:11 +00:00
Automatic Updater
6f2e211d39 update copyright notice 2008-01-10 23:47:01 +00:00
Mark Andrews
1c9f629c18 2293. [func] Add ACL regression test. [RT #17375] 2008-01-10 01:10:01 +00:00
Automatic Updater
1da14e066c update copyright notice 2008-01-02 23:47:02 +00:00
Mark Andrews
f5d0f49584 2285. [func] Test framework for client memory context management.
[RT #17377]
2008-01-02 05:03:07 +00:00
Mark Andrews
604419a812 2282. [bug] Acl code fixups. [RT #17346] 2007-12-20 01:48:29 +00:00
Mark Andrews
8b6418238d remove ns2/dlv.db when cleaning 2007-10-30 23:56:09 +00:00
Mark Andrews
a1e2170ad5 2250. [func] New flag 'memstatistics' to state whether the
memory statistics file should be written or not.
                        Additionally named's -m option will cause the
                        statistics file to be written. [RT #17113]
2007-09-26 03:22:45 +00:00
Mark Andrews
8c76634f88 2246. [bug] Make the startup of test servers (ans.pl) more
robust. [RT #17147]
2007-09-24 04:13:25 +00:00
Mark Andrews
12e0477d4e Part 2 of:
2233.   [func]          Add support for O(1) ACL processing, based on
                        radix tree code originally written by kevin
                        brintnall. [RT #16288]
2007-09-14 01:46:06 +00:00
Evan Hunt
d468b1b7b2 Fix compiler warnings on SCO OSr5 2007-09-13 04:45:18 +00:00
Automatic Updater
70e5a7403f update copyright notice 2007-06-19 23:47:24 +00:00
Automatic Updater
ec5347e2c7 update copyright notice 2007-06-18 23:47:57 +00:00
Automatic Updater
db100c22d6 update copyright notice 2007-04-26 23:46:52 +00:00
Mark Andrews
429e23d2f5 2170. [func] Add acache processing to test suite. [RT #16711] 2007-04-26 04:06:50 +00:00
Automatic Updater
1b5a345334 update copyright notice 2007-03-06 02:12:39 +00:00
Mark Andrews
a56f5ada43 2157. [func] dns_db_transfernode() created. [RT #16685]
2156.   [bug]           Fix node reference leaks in lookup.c:lookup_find(),
                        resolver.c:validated() and resolver.c:cache_name().
                        Fix a memory leak in rbtdb.c:free_noqname().
                        Make lookup.c:lookup_find() robust against
                        event leaks. [RT #16685]
2007-03-06 00:38:58 +00:00
Mark Andrews
92f56936fb update copyright notice 2007-01-09 03:11:16 +00:00