Commit graph

5476 commits

Author SHA1 Message Date
Evan Hunt
2d79f736cc 3133. [bug] Change #3114 was incomplete. [RT #24577] 2011-07-08 01:45:58 +00:00
Evan Hunt
5a62160124 Add the newly discovered PoD to the nsupdate test. (No CHANGES note.) 2011-06-21 22:14:54 +00:00
Automatic Updater
caf476f0e2 update copyright notice 2011-06-17 23:47:12 +00:00
Evan Hunt
8c22e52db1 3129. [bug] Named could crash on 'rndc reconfig' when
allow-new-zones was set to yes and named ACLs
			were used, [RT #22739]
2011-06-17 07:04:32 +00:00
Mark Andrews
31dcd78366 3126. [security] Using DNAME record to generate replacements caused
RPZ to exit with a assertion failure. [RT #23766]
2011-06-09 03:14:04 +00:00
Mark Andrews
eff7004cdd 3125. [security] Using wildcard CNAME records as a replacement with
RPZ caused named to exit with a assertion failure.
                        [RT #24715]
2011-06-09 00:53:55 +00:00
Evan Hunt
32209f69cd Fixed an nsupdate test error 2011-06-09 00:15:16 +00:00
Evan Hunt
5d0d5c6641 3124. [bug] Use an rdataset attribute flag to indicate
negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets. [RT #24777]

3123.	[security]	Change #2912 exposed a latent flaw in
			dns_rdataset_totext() that could cause named to
			crash with an assertion failure. [RT #24777]
2011-06-08 23:02:43 +00:00
Evan Hunt
52f6ab64a9 3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664] 2011-06-02 20:24:11 +00:00
Mark Andrews
d12179ca91 date +%s is not portable, use perl -e 'print time();', Adjust messages 2011-05-30 22:31:28 +00:00
Mark Andrews
aa7d0857f0 The old active key could be deleted before the "former standby key has now
signed fully" ran causing it to fail.  Delay the deletion by 10 seconds.
2011-05-30 07:26:41 +00:00
Automatic Updater
9e914eadd0 update copyright notice 2011-05-26 23:47:06 +00:00
Mark Andrews
22fdcb03cc 3120. [bug] Named could fail to validate zones list in a DLV
that validated insecure without using DLV and had
                        DS records in the parent zone. [RT #24631]
2011-05-26 04:47:16 +00:00
Evan Hunt
17968c1451 3118. [bug] When rolling to a new DNSSEC key, a private-type
record could be created and never marked complete.
			[RT #23253]
2011-05-26 04:25:09 +00:00
Evan Hunt
77b55b7446 3118. [bug] nsupdate could dump core on shutdown when using
SIG(0) keys. [RT #24604]
2011-05-23 22:12:15 +00:00
Evan Hunt
2127785ad7 3117. [cleanup] Remove doc and parser references to the
never-implemented 'auto-dnssec create' option.
			[RT #24533]
2011-05-23 20:56:11 +00:00
Mark Andrews
7e773a23d9 3115. [bug] Named could fail to return requested data when
following a CNAME that points into the same zone.
                        [RT #2445]
2011-05-20 05:12:18 +00:00
Evan Hunt
b62b7fbe9e 3114. [bug] Retain expired RRSIGs in dynamic zones if key is
inactive and there is no replacement key. [RT #23136]
2011-05-19 04:42:51 +00:00
Mark Andrews
8e9cba0e58 named.conf copyrights 2011-05-08 07:09:28 +00:00
Automatic Updater
699be80fb2 update copyright notice 2011-05-07 23:47:05 +00:00
Evan Hunt
13ab5f75cb 3111. [bug] Improved consistency checks for dnssec-enable and
dnssec-validation, added test cases to the
                        checkconf system test. [RT #24398]
2011-05-07 05:53:24 +00:00
Evan Hunt
79951b66bd 3110. [bug] dnssec-signzone: Wrong error message could appear
when attempting to sign with no KSK. [RT #24369]
2011-05-07 00:24:41 +00:00
Automatic Updater
75569ec3ab update copyright notice 2011-05-06 23:47:05 +00:00
Evan Hunt
46994fc008 3107. [bug] dnssec-signzone: Report the correct number of ZSKs
when using -x. [RT #20852]
2011-05-06 21:07:50 +00:00
Mark Andrews
d079f5a6af set/reset client->signer. 2011-05-05 23:53:16 +00:00
Automatic Updater
f4264361da update copyright notice 2011-05-05 23:46:53 +00:00
Scott Mann
4ffc24ee8a remove trailing newline from pid (RT #24388) 2011-05-05 22:58:59 +00:00
Evan Hunt
f4b07b09d0 3103. [bug] Configuring 'dnssec-validation auto' in a view
instead of in the options statement could trigger
			an assertion failure in named-checkconf. [RT #24382]
2011-05-05 16:11:43 +00:00
Mark Andrews
0be165b93f explictly kill the process if the server fails to start, check for a non zero length pid file 2011-05-05 04:55:46 +00:00
Mark Andrews
4304925ee2 grep was not precise enough leading to test failure 2011-05-03 16:09:23 +00:00
Mark Andrews
6ce2aace2e treat abs(x) < 500ms as 0 2011-05-03 00:36:47 +00:00
Mark Andrews
fe7fbb3e26 force numeric comparision 2011-05-02 05:03:28 +00:00
Mark Andrews
9e37015bd6 handle end of day 2011-05-02 01:40:59 +00:00
Mark Andrews
985d667732 fix expression 2011-05-01 21:37:53 +00:00
Mark Andrews
446554d615 awk -v is not portable, add floating point arithmetic effects 2011-05-01 11:32:34 +00:00
Evan Hunt
9cde8e0c6c 3101. [bug] Zones using automatic key maintenance could fail
to check the key repository for updates. [RT #23744]
2011-04-29 21:42:00 +00:00
Automatic Updater
1076a78dd9 update copyright notice 2011-04-27 23:47:01 +00:00
Evan Hunt
e3579205fe 3100. [security] Certain response policy zone configurations could
trigger an INSIST when receiving a query of type
			RRSIG. [RT #24280]
2011-04-27 17:43:07 +00:00
Automatic Updater
f13dc3a4ea update copyright notice 2011-04-19 23:47:31 +00:00
Evan Hunt
6ecc5850ef 3099. [test] "dlz" system test now runs but gives R:SKIPPED if
not compiled with --with-dlz-filesystem.  [RT #24146]

3098.	[bug]		DLZ zones were answering without setting the AA bit.
			[RT #24146]
2011-04-19 22:31:43 +00:00
Scott Mann
f7b8c29abb forgot to add these files for RT #23836. 2011-04-19 22:12:14 +00:00
Scott Mann
4bbb19b67f backport --with-gssapi and fixes (RT 23836/23738) 2011-04-19 21:23:35 +00:00
Evan Hunt
711f69c266 3097. [test] Add a tool to test handling of malformed packets.
[RT #24096]
2011-04-15 01:00:08 +00:00
Evan Hunt
613b6fc9c7 Corrected a bug in the dnssec test introduced in change #3046. 2011-03-31 15:56:44 +00:00
Mark Andrews
3218c3f491 style 2011-03-28 05:14:18 +00:00
Mark Andrews
475175e93c while (1) -> for (;;) 2011-03-28 05:13:16 +00:00
Automatic Updater
44ecaec099 update copyright notice 2011-03-26 23:47:13 +00:00
Evan Hunt
b74ca0bcea Forgot to add a data file for the autosign test. 2011-03-26 01:08:26 +00:00
Evan Hunt
f2f94ddeb4 3092. [bug] Signatures for records at the zone apex could go
stale due to an incorrect timer setting. [RT #23769]

3091.	[bug]		Fixed a bug in which zone keys that were published
			and then subsequently activated could fail to trigger
			automatic signing. [RT #22991]
2011-03-25 23:53:52 +00:00
Automatic Updater
5cabfa26d2 update copyright notice 2011-03-22 23:47:07 +00:00