Witold Krecicki
cc51cd2d20
4487. [test] Make system tests work on Windows. [RT #42931 ]
2016-10-19 17:21:13 +02:00
Witold Krecicki
3783f45e68
Fix merge error in bin/tests/system/conf.sh.in, add missing cleanups in tests
2016-07-26 20:33:06 +02:00
Evan Hunt
801707fe19
[v9_11] store "addzone" zone config in a NZD database
...
4421. [func] When built with LMDB (Lightning Memory-mapped
Database), named will now use a database to store
the configuration for zones added by "rndc addzone"
instead of using a flat NZF file. This improves
performance of "rndc delzone" and "rndc modzone"
significantly. Existing NZF files will
automatically by converted to NZD databases.
To view the contents of an NZD or to roll back to
NZF format, use "named-nzd2nzf". To disable
this feature, use "configure --without-lmdb".
[RT #39837 ]
2016-07-21 11:14:16 -07:00
Mark Andrews
0c27b3fe77
4401. [misc] Change LICENSE to MPL 2.0.
2016-06-27 14:56:38 +10:00
Mark Andrews
3635d8f910
do not overflow exit status. [RT #42643 ]
2016-06-14 13:48:39 +10:00
Tinderbox User
4df65ccfec
update copyright notice / whitespace
2016-01-25 23:45:24 +00:00
Mark Andrews
9478de25bb
4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534 ]
2016-01-26 00:27:44 +11:00
Mark Andrews
ecfedec0e0
perform a more complete cleanup after running system tests [rt41255]
2015-12-16 11:29:18 +11:00
Tinderbox User
4ba2689c1f
update copyright notice / whitespace
2015-11-05 23:45:25 +00:00
Mark Andrews
e939674d53
4252. [func] Add support for automating the generation CDS and
...
CDNSKEY rrsets to named and dnssec-signzone.
[RT #40424 ]
2015-11-05 12:09:48 +11:00
Mukund Sivaraman
47d837a499
Make named a singleton process [RT#37908]
...
Conflicts:
bin/tests/system/conf.sh.in
lib/dns/win32/libdns.def.in
lib/isc/win32/file.c
The merge also needed to update files in legacy and tcp system tests
(newly introduced in master after branch was created) to introduce use
of lockfile.
2014-12-18 12:31:25 +05:30
Mark Andrews
1c95f67232
use $PERL
2014-06-24 13:50:14 +10:00
Mukund Sivaraman
79d27f505a
[35063] Don't publish an activated key automatically before its publish time
2014-06-04 14:31:42 +05:30
Evan Hunt
60988462e5
[master] use posix-compatible shell in system tests
...
3839. [test] Use only posix-compatible shell in system tests.
[RT #35625 ]
2014-05-06 22:06:04 -07:00
Evan Hunt
92fe6db3e4
[master] use test -r in system tests
...
3806. [test] Improved system test portability. [RT #35625 ]
2014-04-09 20:29:52 -07:00
Tinderbox User
aa7b16ec2a
update copyright notice
2014-01-21 23:46:16 +00:00
Evan Hunt
d58e33bfab
[master] testcrypto.sh in system tests
...
3714. [test] System tests that need to test for cryptography
support before running can now use a common
"testcrypto.sh" script to do so. [RT #35213 ]
2014-01-20 16:08:09 -08:00
Mark Andrews
e20788e121
update copyrights
2014-01-16 15:19:24 +11:00
Evan Hunt
ba751492fc
[master] native PKCS#11 support
...
3705. [func] "configure --enable-native-pkcs11" enables BIND
to use the PKCS#11 API for all cryptographic
functions, so that it can drive a hardware service
module directly without the need to use a modified
OpenSSL as intermediary (so long as the HSM's vendor
provides a complete-enough implementation of the
PKCS#11 interface). This has been tested successfully
with the Thales nShield HSM and with SoftHSMv2 from
the OpenDNSSEC project. [RT #29031 ]
2014-01-14 15:40:56 -08:00
Mark Andrews
2c089bf6d2
whitspace
2013-09-16 10:14:07 +10:00
Tinderbox User
a989ffdbb3
update copyright notice
2013-09-10 23:46:14 +00:00
Evan Hunt
78f20eda3c
[master] clean up tests, update .gitignore
2013-09-09 19:37:17 -07:00
Tinderbox User
377b774598
update copyright notice
2013-08-15 23:46:17 +00:00
Mark Andrews
d1e22676de
3635. [bug] Signatures were not being removed from a zone with
...
only KSK keys for a algorithm. [RT #24439 ]
2013-08-15 13:37:07 +10:00
Tinderbox User
cfa2326b5c
update copyright notice
2013-03-14 23:46:11 +00:00
Evan Hunt
4eb998928b
[master] algorithm flexibility for rndc
...
3525. [func] Support for additional signing algorithms in rndc:
hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
The -A option to rndc-confgen can be used to
select the algorithm for the generated key.
(The default is still hmac-md5; this may
change in a future release.) [RT #20363 ]
2013-03-13 17:53:11 -07:00
Mark Andrews
3ff483ed84
loop 'I:checking expired signatures were updated' test
2012-12-03 09:30:38 +11:00
Tinderbox User
a3128c1995
update copyright notice
2012-06-29 23:45:57 +00:00
Mark Andrews
bf8267aa45
reverse bad copyright update
2012-06-29 11:39:47 +10:00
Tinderbox User
247bf37860
update copyright notice
2012-06-29 01:22:18 +00:00
Mark Andrews
ad127d839d
3341. [func] New "dnssec-verify" command checks a signed zone
...
to ensure correctness of signatures and of NSEC/NSEC3
chains. [RT #23673 ]
2012-06-25 13:57:32 +10:00
ckb
7829fad409
merging fast format zone files
...
Conflicts:
.gitignore
bin/named/zoneconf.c
bin/tests/.gitignore
bin/tests/system/autosign/tests.sh
bin/tests/system/masterformat/clean.sh
bin/tests/system/masterformat/ns1/compile.sh
bin/tests/system/masterformat/tests.sh
configure
lib/dns/db.c
lib/dns/include/dns/db.h
lib/dns/include/dns/types.h
lib/dns/master.c
lib/dns/masterdump.c
lib/dns/rbt.c
lib/dns/rbtdb.c
lib/dns/sdb.c
lib/dns/sdlz.c
lib/dns/tests/.cvsignore
lib/dns/tests/Makefile.in
lib/dns/win32/libdns.def
lib/dns/xfrin.c
lib/dns/zone.c
lib/export/dns/Makefile.in
lib/isc/include/isc/file.h
lib/isc/unix/file.c
lib/isc/win32/file.c
lib/isccfg/namedconf.c
2012-06-20 14:13:12 -05:00
Francis Dupont
6a2ebd69b5
fix key name variable in autosign
2012-05-12 07:54:45 +02:00
Mark Andrews
021ea88ee5
ignore more test artifacts
2012-03-14 16:03:42 +11:00
Mark Andrews
25291eb87a
additional cleanup
2012-03-14 16:02:52 +11:00
Evan Hunt
e41d5a00bc
added gitignore, removed cvsignore
2012-03-03 23:10:05 -08:00
Evan Hunt
f4bd753e0b
fixed a test error that caused autosign to fail on freebsd
2012-02-07 00:33:19 +00:00
Automatic Updater
2f4561bc9c
update copyright notice
2012-02-06 23:46:49 +00:00
Evan Hunt
99f6179191
3277. [bug] Make sure automatic key maintenance is started
...
when "auto-dnssec maintain" is turned on during
"rndc reconfig". [RT #26805 ]
2012-02-06 21:33:50 +00:00
Automatic Updater
c2f843fc2b
update copyright notice
2012-02-02 23:47:33 +00:00
Mark Andrews
92a83eeb2d
portable code, ok'd bu Evan
2012-02-02 03:47:39 +00:00
Mark Andrews
9892bae7b7
forcing full sign with unreadable keys
2011-12-22 11:57:30 +00:00
Mark Andrews
281a31ad37
+/- 500ms was too small a fudge factor (-582ms seen in testing), raise to +/- 1000ms
2011-12-22 02:15:24 +00:00
Mark Andrews
91013b0e19
join line for old awk
2011-12-12 12:08:09 +00:00
Mark Andrews
6c1a778723
chech that the final time is within 10 seconds but no greater than the expected interval
2011-12-12 06:51:12 +00:00
Mark Andrews
374b677c50
make grep more precise
2011-11-27 12:04:27 +00:00
Evan Hunt
094672b313
some files were missing from clean.sh
2011-10-30 23:05:13 +00:00
Evan Hunt
9c03f13e18
3185. [func] New 'rndc signing' option for auto-dnssec zones:
...
- 'rndc signing -list' displays the current
state of signing operations
- 'rndc signing -clear' clears the signing state
records for keys that have fully signed the zone
- 'rndc signing -nsec3param' sets the NSEC3
parameters for the zone
The 'rndc keydone' syntax is removed. [RT #23729 ]
2011-10-28 06:20:07 +00:00
Automatic Updater
dfc015bc7e
update copyright notice
2011-10-20 23:46:51 +00:00
Mark Andrews
1946c596b4
3174. [bug] Always compute to revoked key tag from scratch.
...
[RT #24711 ]
2011-10-20 21:20:02 +00:00