Commit graph

8339 commits

Author SHA1 Message Date
Evan Hunt
2d79f736cc 3133. [bug] Change #3114 was incomplete. [RT #24577] 2011-07-08 01:45:58 +00:00
Evan Hunt
20f2b0b61d 3132. [tuning] Expanded zone task table from 8 to 17 buckets,
added ZONE_TASKS define in zone.c to make it easier
			to hand-tune this value. [RT #24406]
2011-07-06 19:02:40 +00:00
Automatic Updater
caf476f0e2 update copyright notice 2011-06-17 23:47:12 +00:00
Mark Andrews
c4d4634ad8 update for api changes 2011-06-17 07:29:35 +00:00
Evan Hunt
8c22e52db1 3129. [bug] Named could crash on 'rndc reconfig' when
allow-new-zones was set to yes and named ACLs
			were used, [RT #22739]
2011-06-17 07:04:32 +00:00
Evan Hunt
5d0d5c6641 3124. [bug] Use an rdataset attribute flag to indicate
negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets. [RT #24777]

3123.	[security]	Change #2912 exposed a latent flaw in
			dns_rdataset_totext() that could cause named to
			crash with an assertion failure. [RT #24777]
2011-06-08 23:02:43 +00:00
Mark Andrews
6b81040520 9.8.1b2 2011-05-31 23:28:39 +00:00
Automatic Updater
d089451dca update copyright notice 2011-05-28 00:27:48 +00:00
Mark Andrews
57f287577f move dns_trust_totext from masterdump.c to rdataset.c so that exportlib will build 2011-05-27 04:40:09 +00:00
Evan Hunt
9b1f733801 3121. [security] An authoritative name server sending a negative
response containing a very large RRset could
                        trigger an off-by-one error in the ncache code
                        and crash named. [RT #24650]
2011-05-26 23:10:44 +00:00
Mark Andrews
22fdcb03cc 3120. [bug] Named could fail to validate zones list in a DLV
that validated insecure without using DLV and had
                        DS records in the parent zone. [RT #24631]
2011-05-26 04:47:16 +00:00
Evan Hunt
17968c1451 3118. [bug] When rolling to a new DNSSEC key, a private-type
record could be created and never marked complete.
			[RT #23253]
2011-05-26 04:25:09 +00:00
Evan Hunt
2127785ad7 3117. [cleanup] Remove doc and parser references to the
never-implemented 'auto-dnssec create' option.
			[RT #24533]
2011-05-23 20:56:11 +00:00
Automatic Updater
79f2487b9d update copyright notice 2011-05-19 23:46:59 +00:00
Evan Hunt
d96c88531b another post-commit fix for change 3114: call dns_db_resigned()/
dns_db_setsigningtime() only when incrementally resigning, not other
times.
2011-05-19 21:28:26 +00:00
Evan Hunt
b62b7fbe9e 3114. [bug] Retain expired RRSIGs in dynamic zones if key is
inactive and there is no replacement key. [RT #23136]
2011-05-19 04:42:51 +00:00
Evan Hunt
e86659f1d9 add dns_dnssec_signs 2011-05-17 00:58:58 +00:00
Automatic Updater
7552cfd6b8 update copyright notice 2011-05-16 23:47:17 +00:00
Evan Hunt
6d7afbc9c5 "make install" was failing when building with both exportlibs and libtool.
(trivial makefile fix, no CHANGES note.) [RT #24425]
2011-05-16 22:53:19 +00:00
Evan Hunt
13ab5f75cb 3111. [bug] Improved consistency checks for dnssec-enable and
dnssec-validation, added test cases to the
                        checkconf system test. [RT #24398]
2011-05-07 05:53:24 +00:00
Automatic Updater
75569ec3ab update copyright notice 2011-05-06 23:47:05 +00:00
Evan Hunt
46994fc008 3107. [bug] dnssec-signzone: Report the correct number of ZSKs
when using -x. [RT #20852]
2011-05-06 21:07:50 +00:00
Evan Hunt
4c08095355 fixed an error in prior commit 2011-05-05 18:02:09 +00:00
Evan Hunt
f4b07b09d0 3103. [bug] Configuring 'dnssec-validation auto' in a view
instead of in the options statement could trigger
			an assertion failure in named-checkconf. [RT #24382]
2011-05-05 16:11:43 +00:00
Evan Hunt
9cde8e0c6c 3101. [bug] Zones using automatic key maintenance could fail
to check the key repository for updates. [RT #23744]
2011-04-29 21:42:00 +00:00
Mark Andrews
af19cac9eb isc_file_isplainfile 2011-04-08 05:35:14 +00:00
Mark Andrews
e058e18cc7 dns_cache_create3 2011-04-08 04:45:44 +00:00
Mark Andrews
db01c31d2c 9.8.1b1 2011-04-08 02:43:47 +00:00
Mark Andrews
22cb217141 3096. [bug] Set KRB5_KTNAME before calling log_cred() in
dst_gssapi_acceptctx(). [RT #24004]
2011-04-07 23:05:01 +00:00
Mark Andrews
7cb1434cf3 3095. [bug] Handle isolated reserved ports in the port range.
[RT #23957]
2011-04-06 10:30:08 +00:00
Mark Andrews
496b6de81d format portability: cast socklen_t -> long and use %ld 2011-04-05 06:35:00 +00:00
Mark Andrews
afc75dc9ec 1 -> 1U 2011-04-04 11:10:57 +00:00
Mark Andrews
8b415e804b unsigned constants 2011-03-28 05:36:05 +00:00
Mark Andrews
8e234ee3a2 unsigned constants 2011-03-28 05:22:25 +00:00
Mark Andrews
63b4606640 unsigned constants 2011-03-28 03:45:28 +00:00
Evan Hunt
f2f94ddeb4 3092. [bug] Signatures for records at the zone apex could go
stale due to an incorrect timer setting. [RT #23769]

3091.	[bug]		Fixed a bug in which zone keys that were published
			and then subsequently activated could fail to trigger
			automatic signing. [RT #22991]
2011-03-25 23:53:52 +00:00
Evan Hunt
2cac211c0a 3087. [bug] DDNS updates using SIG(0) with update-policy match
type "external" could cause a crash. [RT #23735]
2011-03-21 19:53:35 +00:00
Mark Andrews
38a1f591f1 3083. [bug] NOTIFY messages were not being sent when generating
a NSEC3 chain incrementally. [RT #23702]
2011-03-21 01:06:50 +00:00
Automatic Updater
3d17bbed19 update copyright notice 2011-03-19 23:47:24 +00:00
Evan Hunt
7ed60027f2 revert last commit, was applied to wrong branch by mistake 2011-03-19 02:08:44 +00:00
Evan Hunt
cdb5d32d0c skip non-dynamic zones when calling "rndc freeze" on all zones. 2011-03-19 02:06:57 +00:00
Automatic Updater
d1b1f7ca64 update copyright notice 2011-03-18 23:47:15 +00:00
Francis Dupont
7d264d8cf6 introduce STDTIME_ON_32BITS 2011-03-18 09:05:29 +00:00
Automatic Updater
b18bf607c8 update copyright notice 2011-03-17 23:47:06 +00:00
Francis Dupont
c38842e702 silent compiler warnings for DLZ exernal driver support and example 2011-03-17 09:41:07 +00:00
Mark Andrews
5af77c3eec 3077. [bug] zone.c:zone_refreshkeys() incorrectly called
dns_zone_attach(), use zone->irefs instead. [RT #23303]
2011-03-17 05:27:52 +00:00
Mark Andrews
0180f3028a 3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistant
timestamp when determining which keys are active.
                        [RT #23642]
2011-03-17 01:20:49 +00:00
Francis Dupont
624aa62045 isc_mutex_destroy() returns a value 2011-03-14 13:40:14 +00:00
Mark Andrews
a1b458cbf8 3074. [bug] Make the adb cache read through for zone data and
glue learn for zone named is authoritative for.
                        [RT #22842]
2011-03-13 03:36:47 +00:00
Automatic Updater
b7f0a015a5 update copyright notice 2011-03-12 04:59:19 +00:00