Commit graph

2008 commits

Author SHA1 Message Date
Tinderbox User
b7f3400f3b update copyright notice / whitespace 2016-01-28 23:45:29 +00:00
Mark Andrews
832ab79d1f 4305. [bug] dnssec-signzone was not removing unnecessary rrsigs
from the zone's apex. [RT #41483]
2016-01-28 15:42:34 +11:00
Mark Andrews
9d85a77382 4304. [port] xfer system test failed as 'tail -n +value' is not
portable. [RT #41315]
2016-01-28 15:38:06 +11:00
Evan Hunt
8ede7a974b [master] fix dig=+subnet zero-length prefix
4303.	[bug]		"dig +subnet" was unable to send a prefix length of
			zero, as it was incorrectly changed to 32 for v4
			prefixes or 128 for v6 prefixes. In addition to
			fixing this, "dig +subnet=0" has been added as a
			short form for 0.0.0.0/0. The same changes have
			also been made in "mdig". [RT #41553]
2016-01-27 19:03:54 -08:00
Tinderbox User
4df65ccfec update copyright notice / whitespace 2016-01-25 23:45:24 +00:00
Mark Andrews
9478de25bb 4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534] 2016-01-26 00:27:44 +11:00
Tinderbox User
7d4f45f6bd update copyright notice / whitespace 2016-01-21 23:45:23 +00:00
Evan Hunt
9b789c54f8 [master] add regression test for RT #41518
4297.	[test]		Ensure delegations in RPZ zones fail robustly.
			[RT #41518]
2016-01-20 17:44:11 -08:00
Evan Hunt
d40154cab7 [master] cacluate TCP packet sizes correctly
4296.	[bug]		TCP packet sizes were calculated incorrectly in the
			stats channel; they could be counted in the wrong
			histogram bucket. [RT #40587]
2016-01-20 17:30:27 -08:00
Tinderbox User
16201b15a6 update copyright notice / whitespace 2016-01-17 23:45:21 +00:00
Curtis Blackburn
3948d9c7c6 rrl test was failing on some systems because not all versions of perl understand '-E'. changed to '-e' 2016-01-15 14:35:12 -08:00
Curtis Blackburn
a66619fe32 [rt39196] Added a new nameserver to test rrl "log-only yes".
Added test for RT #39197. Made the rrl test more
              tolerant of minor differences in results due to
              timing. Removed the failure override for the rrl
              test.

commit 01a15bc80ef4c20171ddfe9b5ceb2ebe008c8e0d
Author: Curtis Blackburn <ckb@isc.org>
Date:   Tue Dec 15 15:08:03 2015 -0800

    added a new nameserver to the rrl test
2016-01-11 19:37:17 -08:00
Tinderbox User
7321d8df7b update copyright notice / whitespace 2015-12-27 23:45:24 +00:00
Evan Hunt
fbed5f0f44 [master] fix geoip options
4284.	[bug]		Some GeoIP options were incorrectly documented
			using abbreviated forms which were not accepted by
			named.  The code has been updated to allow both
			long and abbreviated forms. [RT #41381]
2015-12-26 10:50:32 -08:00
Curtis Blackburn
df59681bd2 [rt40109] added a test for +dscp to the digdelv tests 2015-12-21 14:13:03 -08:00
Mark Andrews
49762dffc4 4282. [func] 'dig +[no]mapped' determine whether the use of mapped
IPv4 addresses over IPv6 is permitted or not.  The
                        default is +mapped.  [RT #41307]
2015-12-19 09:47:11 +11:00
Tinderbox User
4688741c5c update copyright notice / whitespace 2015-12-16 23:45:26 +00:00
Mark Andrews
f1fcadccc4 remove named.conf 2015-12-16 21:37:21 +11:00
Mark Andrews
1583a214cd check for non removed files 2015-12-16 21:25:04 +11:00
Mark Andrews
ecfedec0e0 perform a more complete cleanup after running system tests [rt41255] 2015-12-16 11:29:18 +11:00
Tinderbox User
ea2ea0914c update copyright notice / whitespace 2015-12-15 23:45:23 +00:00
Evan Hunt
0321aa184e [master] reclimit test was broken with v6 2015-12-15 15:01:58 -08:00
Curtis Blackburn
9effea437d [rt41269] additional tests for dig and delv,
fix for --disable-ipv6 on osx,
              fixes for tests with --disable-ipv6
2015-12-15 11:58:28 -08:00
Mark Andrews
f647c0df9f 4281. [bug] Teach dns_message_totext about BADCOOKIE. [RT #41257] 2015-12-15 19:49:40 +11:00
Mukund Sivaraman
ecc06cbc32 Use optimal message sizes to improve compression in AXFRs (#40996) 2015-12-15 13:24:14 +05:30
Evan Hunt
b96366252b [master] add +nocookie and use perl for query burst 2015-12-14 21:27:49 -08:00
Evan Hunt
362d2d46aa [master] fixed an incorrect test case in rpzrecurse 2015-12-13 14:15:47 -08:00
Curtis Blackburn
21c6e49a77 [rt40106] add tests for dig +[no]ttlunits 2015-12-10 12:08:57 -08:00
Mark Andrews
505d311709 4278. [bug] 'delv +short +[no]split[=##]' didn't work as expected.
[RT #41238]
2015-12-10 12:43:50 +11:00
Curtis Blackburn
6fe5cc5aea [rt41263] add a system test for dig +qr +ednsopt<invalid> 2015-12-09 16:21:02 -08:00
Tinderbox User
2a37470065 update copyright notice / whitespace 2015-12-09 23:45:23 +00:00
Mukund Sivaraman
5d79b60fc5 Improve performance of RBT (#41165) 2015-12-09 19:10:55 +05:30
Curtis Blackburn
aeb7b6e145 [rt40105] add a system test for dig +zflag 2015-12-08 16:06:39 -08:00
Curtis Blackburn
ce0d8b1c0e [rt40104] changed one occurrence of +noednsneg to +noednsnegotiation 2015-12-08 16:03:01 -08:00
Curtis Blackburn
4d1ea2336c [rt40107] add system tests for dig +header-only 2015-12-08 15:57:53 -08:00
Curtis Blackburn
ab94dd50e8 [rt40181] added tests for dig +short +nosplit/+rrcomments (see rt39291) 2015-12-08 15:13:52 -08:00
Mark Andrews
322e6b5be7 4276. [protocol] Add support for SMIMEA. [RT #40513] 2015-12-08 08:16:41 +11:00
Evan Hunt
464c2c673b [master] fix dig +norrcomments
4272.	[bug]		dig: the +norrcomments option didn't work with +multi.
			[RT #41234]
2015-12-04 16:16:59 -08:00
Tinderbox User
8c20f8635a update copyright notice / whitespace 2015-12-03 23:45:24 +00:00
Mark Andrews
26177be294 4267. [test] Check sdlz error handling. [RT #41142] 2015-12-02 13:00:42 +11:00
Mark Andrews
c8821d124c 4260. [security] Insufficient testing when parsing a message allowed
records with an incorrect class to be be accepted,
                        triggering a REQUIRE failure when those records
                        were subsequently cached. (CVE-2015-8000) [RT #4098]
2015-11-16 13:12:20 +11:00
Tinderbox User
3ebda3f46b update copyright notice / whitespace 2015-11-12 23:45:23 +00:00
Mark Andrews
d0afc2d1c4 use a test key 2015-11-12 10:54:59 +11:00
Tinderbox User
4949f39716 update copyright notice / whitespace 2015-11-11 23:45:23 +00:00
Mukund Sivaraman
53cf70ef7d Cleanup *.nta files after rndc system test 2015-11-11 13:49:21 +05:30
Mukund Sivaraman
58f7af60e7 Allow non-destructive control channel access using a "read-only" clause (#40498) 2015-11-11 13:46:57 +05:30
Tinderbox User
3865e18d3d update copyright notice / whitespace 2015-11-09 23:45:22 +00:00
Evan Hunt
e13d04fda9 [master] fix python script versions
4257.	[cleanup]	Python scripts reported incorrect version. [RT #41080]
2015-11-08 21:34:24 -08:00
Tinderbox User
dae43e88b7 update copyright notice / whitespace 2015-11-06 23:45:24 +00:00
Evan Hunt
b513918481 [master] allow spaces in rndc arguments
4256.	[bug]		Allow rndc command arguments to be quoted so as
			to allow spaces. [RT #36665]
2015-11-05 19:51:54 -08:00
Tinderbox User
4ba2689c1f update copyright notice / whitespace 2015-11-05 23:45:25 +00:00
Witold Krecicki
bfd4b9e11a 4255. [func] Add 'message-compression' option to disable DNS compression in responses. [RT #40726] 2015-11-05 12:19:04 +01:00
Mark Andrews
e939674d53 4252. [func] Add support for automating the generation CDS and
CDNSKEY rrsets to named and dnssec-signzone.
                        [RT #40424]
2015-11-05 12:09:48 +11:00
Evan Hunt
6b8519147a [master] NTAs did not survive reoad/reconfig
4251.	[bug]		NTAs were deleted when the server was reconfigured
			or reloaded. [RT #41058]
2015-11-04 10:34:28 -08:00
Evan Hunt
aa9b64060f [master] fix statschannel with no libjson
4246.	[test]		Ensure the statschannel system test runs when BIND
			is not built with libjson. [RT #40944]
2015-10-28 20:19:31 -07:00
Mark Andrews
a70fc47e9d 4243. [func] Improved stats reporting from Timothe Litt. [RT #38941] 2015-10-28 09:45:46 +11:00
Francis Dupont
638e82b134 spelling 2015-10-07 14:49:51 +02:00
Evan Hunt
b66b333f59 [master] dnstap
4235.	[func]		Added support in named for "dnstap", a fast method of
			capturing and logging DNS traffic, and a new command
			"dnstap-read" to read a dnstap log file.  Use
			"configure --enable-dnstap" to enable this
			feature (note that this requires libprotobuf-c
			and libfstrm). See the ARM for configuration details.

			Thanks to Robert Edmonds of Farsight Security.
			[RT #40211]
2015-10-02 12:32:42 -07:00
Witold Krecicki
a239044323 4234. [func] Add deflate compression in statistics channel HTTP
server. [RT #40861]
2015-10-02 10:45:10 +02:00
Tinderbox User
e13c3286a5 update copyright notice / whitespace 2015-10-01 23:45:31 +00:00
Mark Andrews
3ed714b961 emit "E:TESTNAME:DATE" when we can't start a server 2015-10-01 16:01:34 +10:00
Tinderbox User
551e0d486d update copyright notice / whitespace 2015-09-30 23:45:36 +00:00
Mark Andrews
65d59a4307 4232. [test] Add tests for CDS and CDNSKEY with delegation-only.
[RT #40597]
2015-09-30 15:55:14 +10:00
Mark Andrews
0d990f57ae silence compiler warnings 2015-09-30 14:04:28 +10:00
Mark Andrews
1a0e5b0504 address linking issues 2015-09-30 12:38:07 +10:00
Tinderbox User
55cfbf322d update copyright notice / whitespace 2015-09-29 23:45:32 +00:00
Mark Andrews
ab8b419a79 #include <isc/string.h> for memset 2015-09-30 00:46:33 +10:00
Mark Andrews
ac6bb3dd36 add missing libraries 2015-09-30 00:44:49 +10:00
Evan Hunt
a00f9e2f50 [master] merge dyndb
4224.	[func]		Added support for "dyndb", a new interface for loading
			zone data from an external database, developed by
			Red Hat for the FreeIPA project.

			DynDB drivers fully implement the BIND database
			API, and are capable of significantly better
			performance and functionality than DLZ drivers,
			while taking advantage of advanced database
			features not available in BIND such as multi-master
			replication.

			Thanks to Adam Tkac and Petr Spacek of Red Hat.
			[RT #35271]
2015-09-28 23:12:35 -07:00
Witold Krecicki
e6d0a391f5 4223. [func] Add support for setting max-cache-size to percentage
of available physical memory, set default to 90%.
			[RT #38442]
2015-09-28 11:08:50 +02:00
Mark Andrews
f6e45a5c54 4217. [protocol] Add support for CSYNC. [RT #40532] 2015-09-18 23:45:12 +10:00
Tinderbox User
7dbeeeaa1e update copyright notice / whitespace 2015-09-17 23:45:24 +00:00
Mark Andrews
e0a30050c8 4214. [protocol] Add support for TALINK. [RT #40544] 2015-09-18 07:43:43 +10:00
Mark Andrews
dd1bcab25c 4213. [bug] Don't reuse a cache across multiple classes.
[RT #40205]
2015-09-17 14:51:21 +10:00
Mark Andrews
1d5ebfc05f address race condition in ecdsa system test leading to differing authority sections. [RT #40283]; no CHANGES entry. 2015-09-17 14:23:44 +10:00
Mark Andrews
0f2ecf4b5c 4207. [bug] Handle class mismatches with raw zone files.
[RT #40746]
2015-09-16 10:43:22 +10:00
Evan Hunt
226339ed43 [master] spurious spaces in named-checkconf -p
4205.	[bug]		'named-checkconf -p' could include unwanted spaces
			when printing tuples with unset optional fields.
			[RT #40731]
2015-09-14 08:50:17 -07:00
Tinderbox User
96f6f5dfc2 update copyright notice / whitespace 2015-09-11 23:45:36 +00:00
Mark Andrews
5a49f61ca9 4199. [protocol] Add support for NINFO, RKEY, SINK, TA.
[RT #40545] [RT #40547] [RT #40561] [RT #40563]
2015-09-11 17:35:01 +10:00
Evan Hunt
aec8a3b7cf [master] improve rrchecker test
4203.	[test]		The rrchecker system test now tests conversion
			to and from unkonwn-type format. [RT #40584]
2015-09-11 00:24:47 -07:00
Tinderbox User
f28c6dc514 update copyright notice / whitespace 2015-09-10 23:46:28 +00:00
Mark Andrews
3dd63ba00f 4199. [protocol] Add support for NINFO, RKEY, TA.
[RT #40545] [RT #40547] [RT #40563]
2015-09-10 17:58:29 +10:00
Mark Andrews
63874956de 4199. [protocol] Add support for NINFO, RKEY. [RT #40547] [RT #40563] 2015-09-10 17:07:05 +10:00
Mark Andrews
8b29fc0b7a 4199. [protocol] Add support for RKEY. [RT #40563] 2015-09-10 14:50:20 +10:00
Mark Andrews
5be3128599 address race condition rt40242 2015-09-09 18:12:05 +10:00
Mark Andrews
075a3d60c2 4197. [bug] 'named-checkconf -z' didn't handle 'in-view' clauses.
[RT #40603]
2015-09-09 17:56:23 +10:00
Mark Andrews
4ca7391e64 4196. [doc] Improve how "enum + other" types are documented.
[RT #40608]

4195.   [bug]           'max-zone-ttl unlimited;' was broken. [RT #40608]
2015-09-09 17:02:11 +10:00
Mark Andrews
fbd9aaa58c 4194. [bug] named-checkconf -p failed to properly print a port
range.  [RT #40634]
2015-09-09 16:49:11 +10:00
Tinderbox User
0d5b7ed79d update copyright notice / whitespace 2015-08-25 23:45:27 +00:00
Mark Andrews
9b956d342e 4192. [bug] The default rrset-order of random was not always being
applied. [RT #40456]
2015-08-25 14:52:27 +10:00
Mark Andrews
5855fd79e3 4191. [protocol] Accept DNS-SD non LDH PTR records in reverse zones
as per RFC 6763. [RT #37889]
2015-08-25 14:46:06 +10:00
Tinderbox User
5d68969ab3 update copyright notice / whitespace 2015-08-22 23:45:23 +00:00
Mark Andrews
dc3912f3ca 4190. [protocol] Accept Active Diretory gc._msdcs.<forest> name as
valid with check-names.  <forest> still needs to be
                        LDH. [RT #40399]
2015-08-22 15:27:33 +10:00
Mark Andrews
416265e4d4 add /
(cherry picked from commit 820a9517ad)
2015-08-20 14:02:08 +10:00
Mark Andrews
b5caf98644 ignore xmlstats 2015-08-20 14:00:23 +10:00
Tinderbox User
161b5249b9 update copyright notice / whitespace 2015-08-19 23:45:23 +00:00
Mark Andrews
5c1c62cd8a awk on solaris doesn't like // as a pattern 2015-08-19 08:35:12 +10:00
Mukund Sivaraman
bf350c9f1a Fix RPZ bugs related to wildcard triggers (#40357) 2015-08-18 19:39:53 +05:30
Mark Andrews
1a38ba7b41 add statistics 2015-08-18 22:31:13 +10:00
Mark Andrews
d9aeaf35ea check for libxml2 2015-08-18 22:29:35 +10:00
Mark Andrews
486c763015 use grep rather than xmllint 2015-08-18 10:03:58 +10:00
Mark Andrews
bce42685ab add missing echo 2015-08-18 09:37:14 +10:00
Mark Andrews
55df11d4e1 use sed instead of count 2015-08-18 00:35:06 +10:00
Mark Andrews
5f7540f12f improve failure diagnostics 2015-08-17 17:42:58 +10:00
Mark Andrews
741c65c4d8 ignore leading zeros of revoked keyid 2015-08-17 17:10:46 +10:00
Mukund Sivaraman
984d2bb9e5 Fix assertion failure in parsing UNSPEC(103) RR from text (#40274) 2015-08-14 13:30:52 +05:30
Mukund Sivaraman
474921d733 Fix assertion failure in parsing NSAP records from text 2015-08-14 13:11:26 +05:30
Tinderbox User
ed91aca9e6 update copyright notice / whitespace 2015-08-12 23:45:25 +00:00
Mark Andrews
c631ff56bf Updated CHANGES note to include require-server-cookie:
4152.   [func]          Implement DNS COOKIE option.  This replaces the
                        experimental SIT option of BIND 9.10.  The following
                        named.conf directives are available: send-cookie,
                        cookie-secret, cookie-algorithm, nocookie-udp-size
                        and require-server-cookie.  The following dig options
                        are available: +[no]cookie[=value] and +[no]badcookie.
                        [RT #39928]
2015-08-13 08:26:23 +10:00
Mark Andrews
151f1bcd5e 4172. [bug] Named / named-checkconf didn't handle a view of CLASS0.
[RT #40265]
2015-08-12 19:06:00 +10:00
Evan Hunt
05b1684791 [master] fix an awk portability issue 2015-08-03 14:21:16 -07:00
Tinderbox User
f3cbd0e029 update copyright notice / whitespace 2015-08-02 23:45:22 +00:00
Evan Hunt
68116c5a5f [master] add +nocookie options where needed 2015-08-02 11:18:12 -07:00
Evan Hunt
a3b21effd7 [master] missing 'use' caused test failure 2015-07-21 13:49:54 -07:00
Evan Hunt
a32ca13d12 [master] statschannel test failed when only JSON was available 2015-07-20 19:09:22 -07:00
Evan Hunt
9501aa9d5a [master] portability 2015-07-20 19:01:29 -07:00
Tinderbox User
35af5049f8 update copyright notice / whitespace 2015-07-10 23:45:23 +00:00
Evan Hunt
b716b9cddc [master] add JSON and more XML tests
4161.	[test]		Add JSON test for traffic size stats; also test
			for consistency between "rndc stats" and the XML
			and JSON statistics channel contents. [RT #38700]
2015-07-09 21:18:42 -07:00
Tinderbox User
f16a6bfb6c update copyright notice / whitespace 2015-07-09 23:45:22 +00:00
Evan Hunt
1479200aa0 [master] DDoS mitigation features
3938.	[func]		Added quotas to be used in recursive resolvers
			that are under high query load for names in zones
			whose authoritative servers are nonresponsive or
			are experiencing a denial of service attack.

			- "fetches-per-server" limits the number of
			  simultaneous queries that can be sent to any
			  single authoritative server.  The configured
			  value is a starting point; it is automatically
			  adjusted downward if the server is partially or
			  completely non-responsive. The algorithm used to
			  adjust the quota can be configured via the
			  "fetch-quota-params" option.
			- "fetches-per-zone" limits the number of
			  simultaneous queries that can be sent for names
			  within a single domain.  (Note: Unlike
			  "fetches-per-server", this value is not
			  self-tuning.)
			- New stats counters have been added to count
			  queries spilled due to these quotas.

			See the ARM for details of these options. [RT #37125]
2015-07-08 22:53:39 -07:00
Tinderbox User
9ab5a7d83c update copyright notice / whitespace 2015-07-07 23:45:22 +00:00
Evan Hunt
70d987def5 [master] traffic size stats
4156.	[func]		Added statistics counters to track the sizes
			of incoming queries and outgoing responses in
			histogram buckets, as specified in RSSAC002.
			[RT #39049]
2015-07-06 22:29:06 -07:00
Mukund Sivaraman
33ca26968b Allow RPZ rewrite logging to be configured on a per-zone basis (#39754) 2015-07-06 08:57:51 +05:30
Mark Andrews
3e33f4198d 4154. [bug] A OPT record should be included with the FORMERR
response when there is a malformed EDNS option.
                        [RT #39647]

4153.   [bug]           Dig should zero non significant +subnet bits.  Check
                        that non significant ECS bits are zero on receipt.
                        [RT #39647]
2015-07-06 12:52:37 +10:00
Mark Andrews
ce67023ae3 4152. [func] Implement DNS COOKIE option. This replaces the
experimental SIT option of BIND 9.10.  The following
                        named.conf directives are avaliable: send-cookie,
                        cookie-secret, cookie-algorithm and nocookie-udp-size.
                        The following dig options are available:
                        +[no]cookie[=value] and +[no]badcookie.  [RT #39928]
2015-07-06 09:44:24 +10:00
Tinderbox User
337d408adb update copyright notice / whitespace 2015-06-29 23:45:23 +00:00
Mukund Sivaraman
08f0129732 Fix a bug printing zone names with '/' character in XML and JSON stats (#39873) 2015-06-29 18:33:18 +05:30
Mark Andrews
4a61eae651 4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
was returning referrals rather than nodata responses
                        when the AAAA records were filtered.  [RT #39843]
2015-06-29 15:48:41 +10:00
Witold Krecicki
f10a67dad2 Add statistics counters for nxdomain redirections. [RT #39790] 2015-06-25 09:21:50 +02:00
Tinderbox User
e0ba64bdd2 update copyright notice / whitespace 2015-06-23 23:45:21 +00:00
Mukund Sivaraman
0439bfedd9 Fix parsing of NZFs saved by rndc addzone with view specified (#39845) 2015-06-23 14:19:48 +05:30
Mukund Sivaraman
b4e114e3cd Print unsigned values for serial, etc. in rndc zonestatus output (#39854) 2015-06-23 13:57:33 +05:30
Witold Krecicki
af3770ed93 rndc reconfig reports configuration errors the same way rndc reload does [RT #39635] 2015-06-12 10:19:29 +02:00
Witold Krecicki
f85deb5154 log expired NTA at startup 2015-06-08 13:57:24 +02:00
Mark Andrews
8c74b6a9a1 use sed as tail -n +# is not portable 2015-05-30 11:05:57 +10:00
Tinderbox User
431e5c81db update copyright notice / whitespace 2015-05-28 23:45:24 +00:00
Mark Andrews
52a487f71a link against ISC_OPENSSL_LIBS 2015-05-28 11:06:39 +10:00
Mark Andrews
598b502695 4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
key as per RFC 7344, Section 4.1. [RT #37215]
2015-05-27 15:25:45 +10:00
Evan Hunt
a32b6291aa [master] address regression
4126.	[bug]		Addressed a regression introduced in change #4121.
			[RT #39611]
2015-05-26 19:11:08 -07:00
Tinderbox User
b7b835bfb0 update copyright notice / whitespace 2015-05-24 23:45:24 +00:00
Mark Andrews
83622f9a4c link against libisc 2015-05-24 12:50:56 +10:00
Mark Andrews
cb9b145f39 don't include <isc/print.h> 2015-05-24 12:50:20 +10:00
Mark Andrews
936adc1282 link against libisc 2015-05-24 11:58:15 +10:00
Tinderbox User
d70dac20d2 update copyright notice / whitespace 2015-05-23 23:45:25 +00:00
Mark Andrews
2ac85d943b specfiy where libisc is
(cherry picked from commit c907e7b512e88b641595d514790e2b41575f149e)
2015-05-24 06:03:08 +10:00
Mark Andrews
e6e7de5cda link against ISCLIBS 2015-05-24 05:42:44 +10:00
Francis Dupont
850cfa4e86 Added isc in includes (print.h requires it) 2015-05-23 15:51:34 +02:00
Francis Dupont
3759f10fc5 added print.h includes, updated copyrights 2015-05-23 14:21:51 +02:00
Tinderbox User
46ee7c3260 update copyright notice / whitespace 2015-05-22 23:45:24 +00:00
Curtis Blackburn
717c2b9655 4125. [test] Added tests for dig, renamed delv test to digdelv.
[RT #39490]
2015-05-22 11:47:17 -07:00
Evan Hunt
c55a1da4fc [master] log parsing errors from default config or addzone/modzone
4124.	[func]		Log errors or warnings encountered when parsing the
			internal default configuration.  Clarify the logging
			of errors and warnings encountered in rndc
			addzone or modzone parameters. [RT #39440]
2015-05-21 23:04:29 -07:00
Tinderbox User
0dfc0745c4 update copyright notice / whitespace 2015-05-21 23:45:26 +00:00
Mukund Sivaraman
705cea35a8 Fix RPZ radix tree search() for CLIENT-IP triggers (#39481) 2015-05-21 11:10:49 +05:30
Evan Hunt
7e6cf6fc6e [master] address a possible policy update race
4120.	[bug]		A bug in RPZ could cause the server to crash if
			policy zones were updated while recursion was
			pending for RPZ processing of an active query.
			[RT #39415]
2015-05-19 15:47:42 -07:00
Jeremy C. Reed
20914534e6 add a space after shell here-document name
<<END> foo.out
  to
<<END > foo.out

to be consistent with shell style

discussed via jabber in bind9 room
2015-05-19 13:22:36 -04:00
Mark Andrews
c7463967db 4119. [func] Allow dig to set the message opcode. [RT #39550] 2015-05-19 12:46:06 +10:00
Evan Hunt
d9aefcf5cb [master] there are now 98 automatic zones 2015-05-16 10:07:17 -07:00
Tinderbox User
9ae1588020 update copyright notice / whitespace 2015-05-08 23:45:24 +00:00
Mukund Sivaraman
b947e1a521 Fix a bug in RPZ that could cause unwanted recursion (#39229)
Conflicts:
	doc/arm/notes.xml
2015-05-07 08:29:36 +05:30
Tinderbox User
012142bbe0 update copyright notice / whitespace 2015-05-06 23:45:24 +00:00
Mark Andrews
fe76a64294 restore is_zone on return from redirect lookup [RT #37989b]
(cherry picked from commit 1d405c1412b3a2e5aafb37ea55b332914246349e)
2015-05-07 08:32:42 +10:00
Tinderbox User
4e92a74ec4 update copyright notice / whitespace 2015-05-05 23:45:24 +00:00
Evan Hunt
9e804040a2 [master] add "rndc -r" to print result code
4115.	[func]		"rndc -r" now prints the result code (e.g.,
			ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after
			running the requested command. [RT #38913]
2015-05-05 16:39:09 -07:00
Evan Hunt
d4ed608e0c [master] Allow some tests to run partially if Net::DNS is unavailable 2015-05-05 08:33:09 -07:00
Mukund Sivaraman
8f25faf972 Fix a regression in radix tree implementation introduced by ECS code (#38983) 2015-05-05 13:11:23 +05:30
Tinderbox User
6376559cd3 update copyright notice / whitespace 2015-05-04 23:45:23 +00:00
Evan Hunt
dc877b38a0 [master] check for Net::DNS
4113.	[test]		Check for Net::DNS is some system test
			prerequisites. [RT #39369]
2015-05-04 12:51:38 -07:00
Evan Hunt
1c02dd9dd9 [master] fix root-delegation-only without exclude
4112.	[bug]		Named failed to load when "root-delegation-only"
			was used without a list of domains to exclude.
			[RT #39380]
2015-05-04 12:44:10 -07:00
Tinderbox User
b299727c2e update copyright notice / whitespace 2015-04-23 23:45:22 +00:00
Mark Andrews
c82b378115 4108. [func] A additional nxdomain redirect (nxdomain-redirect)
method is now supported. [RT #37989]
2015-04-23 16:57:15 +10:00
Tinderbox User
37873c28de update copyright notice / whitespace 2015-04-21 23:45:21 +00:00
Jeremy C. Reed
ae6b7bcd92 add some more files to cleanup after successful system test runs 2015-04-21 08:42:09 -04:00
Jeremy C. Reed
6c1e7a347f add gitignore file 2015-04-21 08:37:12 -04:00
Mark Andrews
f1a261ba2d 4104. [bug] Address uninitialized elements. [RT #39252] 2015-04-17 14:04:47 +10:00
Mark Andrews
e834b30f7c use awk for line count rather that wc -l which may space pad 2015-04-16 12:17:59 +10:00
Mark Andrews
c855e7170a 4100. [bug] Inherited owernames on the line immediately following
a $INCLUDE were not working.  [RT #39268]
2015-04-15 12:47:57 +10:00
Tinderbox User
a269ca51cc update copyright notice / whitespace 2015-04-14 23:45:21 +00:00
Mukund Sivaraman
ac31adc3b7 Add additional logging about xfrin transfer status (#39170) 2015-04-14 12:16:26 +05:30
Tinderbox User
1b0b6d7325 update copyright notice / whitespace 2015-04-07 23:45:23 +00:00
Evan Hunt
f28e5058c3 [master] dig can now learn the SIT value when retrying
4093.	[func]		Dig now learns the SIT value from truncated
			responses when it retries over TCP. [RT #39047]
2015-04-06 23:16:54 -07:00
Mark Andrews
febb020dce 4092. [bug] 'in-view' didn't work for zones beneath a empty zone.
[RT #39173]
2015-04-07 13:21:33 +10:00
Tinderbox User
6e61135f10 update copyright notice / whitespace 2015-03-27 23:45:21 +00:00
Mukund Sivaraman
f9f81abff0 Fix a crash while parsing malformed CAA RRs in presentation format (#39003) 2015-03-27 10:32:03 +05:30
Tinderbox User
811acf52b8 update copyright notice / whitespace 2015-03-04 23:45:21 +00:00
Mark Andrews
1b05d22789 4082. [bug] Incrementally sign large inline zone deltas.
[RT #37927]
2015-03-05 09:59:29 +11:00
Mark Andrews
012ce6857e use unique query names 2015-03-04 17:12:37 +11:00
Mark Andrews
2e0d8d74d7 handle daylight savings changes 2015-03-04 15:51:31 +11:00
Evan Hunt
7ae96d8823 [master] add "lock-file" and fix up singleton code
4080.	[func]		Completed change #4022, adding a "lock-file" option
			to named.conf to override the default lock file,
			in addition to the "named -X <filename>" command
			line option.  Setting the lock file to "none"
			using either method disables the check completely.
			[RT #37908]
2015-03-02 19:27:54 -08:00
Tinderbox User
3d787a1213 update copyright notice / whitespace 2015-03-02 23:45:21 +00:00
Mukund Sivaraman
10dd5f62f2 Add support for Valgrind's helgrind tool (#38706)
Also fix one locking issue that helgrind found: Maintain stats->lock
while stats->reference is used.
2015-03-02 13:42:20 +05:30
Tinderbox User
5e93bad21b update copyright notice / whitespace 2015-03-01 23:45:20 +00:00
Mark Andrews
0be58dd2da add $DESCRIPTION 2015-02-28 00:10:56 +11:00
Mark Andrews
0382684a06 add $DESCRIPTION 2015-02-28 00:09:25 +11:00
Mark Andrews
326b84f20e fix version tests 2015-02-27 17:01:25 +11:00
Mark Andrews
a8da00ef95 4079. [func] Preserve the case of the ownername of records to
the RRset level. [RT #37442]
2015-02-27 15:08:38 +11:00
Mark Andrews
be9720ae2c 4077. [test] Add static-stub regression test for DS NXDOMAIN
return making the static stub disappear. [RT #38564]
2015-02-27 12:46:45 +11:00
Tinderbox User
f159b7b5c7 update copyright notice / whitespace 2015-02-25 23:45:22 +00:00
Mukund Sivaraman
5a505fc4c2 Add facility to run system test nameds under Valgrind (#38546) 2015-02-25 09:06:45 +05:30
Evan Hunt
bfc11b9c65 [master] additional mkeys tests
4065.	[test]		Additional RFC 5011 tests. [RT #38569]
2015-02-23 21:07:26 -08:00
Mark Andrews
2b4860c4dc rt38571: handle Time::Piece not being supported by perl 2015-02-18 23:49:33 +11:00
Mark Andrews
82c6bce26a ignore dig's result when expecting 'connection timed out' 2015-02-12 13:44:30 +11:00
Tinderbox User
f6bc0a8608 update copyright notice / whitespace 2015-02-11 23:45:25 +00:00
Mark Andrews
2ff2145ff5 4061. [bug] Handle timeout in legacy system test. [RT #38573] 2015-02-11 16:53:39 +11:00
Tinderbox User
d481ce8bba update copyright notice / whitespace 2015-02-09 23:45:20 +00:00
Mark Andrews
dd06dbd512 add named.conf 2015-02-08 23:12:44 +11:00
Tinderbox User
8a1d7e8e8f update copyright notice / whitespace 2015-02-07 23:45:20 +00:00
Mark Andrews
e10d453eb4 add crypto prerequisite 2015-02-08 08:16:54 +11:00
Tinderbox User
29756974c5 update copyright notice / whitespace 2015-02-06 23:45:21 +00:00
Evan Hunt
29beab1340 [master] fix "initialize with revoked key" test, add missing newline 2015-02-05 23:53:36 -08:00
Mark Andrews
b1de3a999c use $PERL 2015-02-06 16:58:39 +11:00
Evan Hunt
591389c7d4 [master] 5011 tests and fixes
4056.	[bug]		Expanded automatic testing of trust anchor
			management and fixed several small bugs including
			a memory leak and a possible loss of key state
			information. [RT #38458]

4055.	[func]		"rndc managed-keys" can be used to check status
			of trust anchors or to force keys to be refreshed,
			Also, the managed keys data file has easier-to-read
			comments.  [RT #38458]
2015-02-05 17:18:15 -08:00
Tinderbox User
39f68d7b64 update copyright notice / whitespace 2015-01-21 23:45:24 +00:00
Evan Hunt
2817aa56ca [master] "rndc modzone"
4043.	[func]		"rndc modzone" can be used to modify the
			configuration of an existing zone, using similar
			syntax to "rndc addzone". [RT #37895]
2015-01-20 22:34:16 -08:00
Evan Hunt
ff62d4458a [master] allow shared TCP sockets when connecting
4041.	[func]		TCP sockets can now be shared while connecting.
			(This will be used to enable client-side support
			of pipelined queries.) [RT #38231]
2015-01-20 17:22:31 -08:00
Evan Hunt
761d135ed6 [master] add TCP pipelining support
4040.	[func]		Added server-side support for pipelined TCP
			queries. TCP connections are no longer closed after
			the first query received from a client. (The new
			"keep-response-order" option allows clients to be
			specified for which the old behavior will still be
			used.) [RT #37821]
2015-01-20 16:14:09 -08:00
Tinderbox User
c110d61b17 update copyright notice / whitespace 2015-01-20 23:45:26 +00:00
Mark Andrews
f8eb4e5bfd 4037. [bug] also-notify was ignoring the tsig key when checking
for duplicates resulting in some expected notify
                        messages not being sent. [RT #38369]
2015-01-20 16:42:56 +11:00
Tinderbox User
2dd6ffb5cb update copyright notice / whitespace 2015-01-12 23:45:21 +00:00
Mukund Sivaraman
a6f0e9c985 Add NTA persistence (#37087)
4034.   [func]          When added, negative trust anchors (NTA) are now
                        saved to files (viewname.nta), in order to
                        persist across restarts of the named server.
                        [RT #37087]
2015-01-12 09:07:48 +05:30
Tinderbox User
f0cbe180f0 update copyright notice / whitespace 2015-01-10 23:45:22 +00:00
Mark Andrews
7952156995 4032. [bug] Built-in "empty" zones did not correctly inherit the
"allow-transfer" ACL from the options or view.
                        [RT #38310]
2015-01-10 22:01:42 +11:00
Tinderbox User
63b0524b96 update copyright notice / whitespace 2015-01-08 23:45:22 +00:00
Mark Andrews
d1f1f13c7f 4031. [bug] named-checkconf -z failed to report a missing file
with a hint zone. [RT #38294]
2015-01-08 19:19:12 +11:00
Tinderbox User
b129f72d95 update copyright notice / whitespace 2015-01-07 23:45:22 +00:00
Evan Hunt
74eb2f5cbc [master] rndc showzone / rndc delzone of non-added zones
4030.	[func]		"rndc delzone" is now applicable to zones that were
			configured in named.conf, as well as zones that
			were added via "rndc addzone". (Note, however, that
			if named.conf is not also modified, the deleted zone
			will return when named is reloaded.) [RT #37887]

4029.	[func]		"rndc showzone" displays the current configuration
			of a specified zone. [RT #37887]
2015-01-06 22:57:57 -08:00
Mark Andrews
b0c18fffd3 4028. [bug] $GENERATE with a zero step was not being caught as a
error.  A $GENERATE with a / but no step was not being
                        caught as a error. [RT #38262]
2015-01-06 11:31:34 +11:00
Mark Andrews
511ec77fca 4027. [port] Net::DNS 0.81 compatibility. [RT #38165 2014-12-23 08:37:46 +11:00
Tinderbox User
84d939b211 update copyright notice / whitespace 2014-12-21 23:45:20 +00:00
Evan Hunt
5deda448e8 [master] fixes for singleton on hpux
- hpux returns EADDRINUSE when listening on UDP sockets, so
  we need to check for that
- also need to ensure that subsidiary named processes are shut
  down in the runtime system test
2014-12-20 00:31:54 -08:00
Evan Hunt
6963c6048f [master] still needed another -X 2014-12-19 16:57:24 -08:00
Evan Hunt
8249f11121 [master] add -X to lwresd 2014-12-18 22:52:44 -08:00
Mark Andrews
ae454ec746 update copyrights 2014-12-19 10:35:15 +11:00
Mukund Sivaraman
47d837a499 Make named a singleton process [RT#37908]
Conflicts:
	bin/tests/system/conf.sh.in
	lib/dns/win32/libdns.def.in
	lib/isc/win32/file.c

The merge also needed to update files in legacy and tcp system tests
(newly introduced in master after branch was created) to introduce use
of lockfile.
2014-12-18 12:31:25 +05:30
Evan Hunt
be7fba8019 [master] adjust max-recursion-queries
4021.	[bug]		Adjust max-recursion-queries to accommodate
			the need for more queries when the cache is
			empty. [RT #38104]
2014-12-15 22:28:06 -08:00
Mukund Sivaraman
d225dec89f Clean up after reclimit system test 2014-12-08 21:37:53 +05:30
Mark Andrews
39a5e136fb skip subtest if cryptography not compiled in 2014-12-06 00:48:52 +11:00
Mark Andrews
017aa9aef6 4019. [func] If named is not configured to validate the answer
then allow fallback to plain DNS on timeout even
                        when we know the server supports EDNS. [RT #37978]
2014-12-05 17:47:26 +11:00
Mark Andrews
12065c231e clean up intermediates 2014-12-05 08:28:15 +11:00
Mark Andrews
76b242bb77 pre-sign the zones 2014-12-05 07:28:29 +11:00
Tinderbox User
b9097be03b update copyright notice / whitespace 2014-12-03 23:45:24 +00:00
Mark Andrews
693d70f96f 4017. [testing] Add system test to check lookups to legacy servers
with broken DNS behaviour. [RT #37965]
2014-12-04 07:01:52 +11:00
Mark Andrews
ea3aa401bc 4015. [bug] Nameservers that are skipped due to them being
CNAMEs were not being logged. They are now logged
                        to category 'cname' as per BIND 8. [RT #37935]
2014-12-03 11:34:07 +11:00
Tinderbox User
a3d2295829 update copyright notice / whitespace 2014-12-02 23:45:23 +00:00
Mark Andrews
6444de08d1 4014. [bug] When including a master file origin_changed was
not being properly set leading to a potentially
                        spurious 'inherited owner' warning. [RT #37919]
2014-12-03 09:42:30 +11:00
Evan Hunt
aafd2f2637 [master] remove obsolete 'relay' test 2014-12-02 13:57:35 -08:00
Francis Dupont
5c5c6d289d Add a TCP only option to server/peer 2014-12-02 14:17:59 +01:00
Tinderbox User
523ad879ce update copyright notice / whitespace 2014-11-24 23:53:16 +00:00
Mark Andrews
d040fa2f1c 4011. [bug] master's list port and dscp inheritance was not
properly implemented. [RT #37792]
2014-11-24 11:25:06 +11:00
Mark Andrews
7301df07cf extend the permissible number of queries to 25 from 24 2014-11-24 10:20:39 +11:00
Evan Hunt
92384667ff [master] delv +tcp
4009.	[func]		delv: added a +tcp option. [RT #37855]
2014-11-21 09:42:04 -08:00