Commit graph

7766 commits

Author SHA1 Message Date
Mark Andrews
72cae054ad 4541. [bug] rndc addzone should properly reject non master/slave
zones. [RT #43665]

(cherry picked from commit e20db12918)
2016-12-28 10:28:54 +11:00
Tinderbox User
cec9fddbaf update copyright notice / whitespace 2016-12-26 23:47:35 +00:00
Mark Andrews
f1e3dd087b 4540. [bug] Correctly handle ecs entries in dns_acl_isinsecure.
[RT #43601]

(cherry picked from commit 8e333f42ef)
2016-12-27 09:50:08 +11:00
Mark Andrews
23ac7e6634 4539. [bug] Referencing a nonexistant zone with rpz could lead
to a assertion failure when configuring. [RT #43787]

(cherry picked from commit 762c4fc5a8)
2016-12-27 09:13:40 +11:00
Mark Andrews
d84a356d4b 4537. [bug] Handle timouts better in dig/host/nslookup. [RT #43576]
(cherry picked from commit 6089c8df71)
2016-12-14 15:44:02 +11:00
Tinderbox User
8852646542 update copyright notice / whitespace 2016-12-13 23:47:43 +00:00
Mark Andrews
bc2510a6a5 4536. [bug] ISC_SOCKEVENTATTR_USEMINMTU was not being cleared
when reusing the event structure. [RT #43885]

(cherry picked from commit a678e70481)
2016-12-14 10:43:24 +11:00
Mark Andrews
348d80fb84 4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879]
(cherry picked from commit def6b33bad)
2016-12-13 16:27:49 +11:00
Mark Andrews
45f206e6c1 4533. [bug] dns_client_update should terminate on prerequiste
failures (NXDOMAIN, YXDOMAIN, NXRRSET, YXRRSET)
                        and also on BADZONE.  [RT #43865]

(cherry picked from commit 8ca45ba01a)
2016-12-13 15:48:20 +11:00
Mark Andrews
3bab13a6df number all resolver tests
(cherry picked from commit 4914e3ddc6)
2016-12-13 15:05:31 +11:00
Evan Hunt
1b63e3c2fd [v9_11] tweak logfileconfig test so it can pass on slower machines
(cherry picked from commit 76a26842a9)
2016-12-12 12:13:10 -08:00
Mark Andrews
d77cab69bf 4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
in responses resulting in SERVFAIL being returned.
                        [RT #43779]

(cherry picked from commit 60cb462c56)
2016-12-09 12:51:09 +11:00
Tinderbox User
7911e6f9de regen v9_11 2016-12-07 01:09:50 +00:00
Mark Andrews
83a28ca274 4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831]
(cherry picked from commit 1b8ce3b330)
2016-12-07 10:50:50 +11:00
Mark Andrews
b00d77e4f2 look $UNLIMITEDFILE.4 as $UNLIMITEDFILE.5 may not exist yet 2016-12-05 18:20:18 +11:00
Mark Andrews
52254f7526 added -T keepstderr to keep stderr open when daemonizing [RT #43736]
(cherry picked from commit c9ee977f31)
2016-12-05 10:38:50 +11:00
Mark Andrews
74d98566ed 4522. [bug] Handle big gaps in log file version numbers better.
[RT #38688]

(cherry picked from commit cab871f1bc)
2016-11-30 11:00:49 +11:00
Evan Hunt
1c89e89eaf [v9_11] log as error if entropy unavailable
4521.	[cleanup]	Log it as an error if an entropy source is not
			found and there is no fallback available. [RT #43659]

(cherry picked from commit 6bdb70057d)
2016-11-29 11:30:47 -08:00
Mark Andrews
0c2d891abe 4520. [cleanup] Alphabetise more of the grammar when printing it
out. Fix unbalanced indenting. [RT #43755]

(cherry picked from commit 4352551d23)
2016-11-29 15:33:37 +11:00
Curtis Blackburn
294ef74e5a 4515. [port] FreeBSD: Find readline headers when they are in
edit/readline/ instead of readline/. [RT #43658]
2016-11-18 11:12:28 -08:00
Mark Andrews
42a79fde4c check the value of s
(cherry picked from commit 28f344c18a)
2016-11-15 16:52:31 +11:00
Mark Andrews
0bd3042bb3 add --ipv6only=no test
(cherry picked from commit 415eeebda4)
2016-11-11 10:00:33 +11:00
Mark Andrews
fe6557e590 4514. [port] NetBSD: strip -WL, from ld command line. [RT #43204]
(cherry picked from commit 69e77384fa)
2016-11-10 11:34:01 +11:00
Mark Andrews
9eb4bce9e1 don't call dst_lib_destroy in t2_vfy
(cherry picked from commit 1106845b4e)
2016-11-09 17:04:34 +11:00
Mark Andrews
4df43743ab 4512. [bug] win32: @GEOIP_INC@ missing from delv.vcxproj.in.
[RT #43556]

(cherry picked from commit 084d88f67b)
2016-11-07 10:04:30 +11:00
Francis Dupont
fb87feb6e7 Fixed filter-aaaa prereq.sh 2016-11-04 14:56:48 +01:00
Evan Hunt
7a3d063847 [v9_11] make rrl system test more robust
4509.	[test]		Make the rrl system test more reliable on slower
			machines by using mdig instead of dig. [RT #43280]

(cherry picked from commit 1e2aca8d90)
2016-11-02 20:56:27 -07:00
Evan Hunt
7802f7d3a9 [v9_11] corrected typo in nsupdate test (DIG-->$DIG) 2016-11-02 19:34:49 -07:00
Tinderbox User
45571e7374 regen v9_11 2016-11-03 01:12:32 +00:00
Tinderbox User
9ab989b88c update copyright notice / whitespace 2016-11-02 23:48:10 +00:00
Mark Andrews
744c1db635 4504. [security] Allow the maximum number of records in a zone to
be specified.  This provides a control for issues
                        raised in CVE-2016-6170. [RT #42143]

(cherry picked from commit 5f8412a4cb)
2016-11-03 09:48:26 +11:00
Evan Hunt
8a5809527e [v9_11] make uninstall
4503.	[cleanup]	"make uninstall" now removes file installed by
			BIND. (This currently excludes Python files
			due to lack of support in setup.py.) [RT #42912]

(cherry picked from commit 6087f87afb)
2016-11-01 19:17:23 -07:00
Tinderbox User
8d72b87657 regen v9_11 2016-11-02 01:11:47 +00:00
Mark Andrews
2c629a1b84 'I:exit status: <value>' should be outsied of if
(cherry picked from commit e1c93a0f58)
2016-11-02 09:12:02 +11:00
Evan Hunt
4b48e6a89e [v9_11] clean up reporting of R:FAIL so it can't spuriously appear mid-test
(cherry picked from commit 7960fc596b)
2016-11-01 13:47:24 -07:00
Evan Hunt
0b0c74d199 [v9_11] fix backport error 2016-10-31 22:47:57 -07:00
Evan Hunt
6552f33198 [v9_11] 4496. [func] dig: add +idnout to control whether labels are
display in punycode or not.  Requires idn support
                        to be enabled at compile time. [RT #43398]

(cherry picked from commit 42470b0b87)
2016-10-31 20:17:28 -07:00
Mark Andrews
fd44151797 check for LIBRESSL_VERSION_NUMBER
(cherry picked from commit b2c1d6f0a2)
2016-11-01 12:49:13 +11:00
Evan Hunt
45fd95544c [v9_11] simplify prereq checks by using feature-test.c
4498.	[test]		Simplify prerequisite checks in system tests.
			[RT #43516]

(cherry picked from commit 5480a74b70)
2016-10-31 17:47:42 -07:00
Mark Andrews
76af83c9ad 4497. [port] Add support for OpenSSL 1.1.0. [RT #41284]
(cherry picked from commit 1fce0951ed)
2016-10-31 10:05:55 +11:00
Mark Andrews
2a1860ad83 4494. [bug] Look for <editline/readline.h>. [RT #43429]
(cherry picked from commit 6fbb2b51d8)
2016-10-27 15:49:11 +11:00
Mark Andrews
de6469b663 4493. [bug] bin/tests/system/dyndb/driver/Makefile.in should use
SO_TARGETS. [RT# 43336]

(cherry picked from commit c910fc24ce)
2016-10-27 15:38:25 +11:00
Mark Andrews
8d0f8e8c2e change 4487 broke the cacheclean test with old version of perl. [RT #43476]
(cherry picked from commit ecd8e95bb5)
2016-10-27 00:09:41 +11:00
Mark Andrews
54ee0b0eef s/,/;/
(cherry picked from commit 856c77cc40)
2016-10-26 22:38:50 +11:00
Mark Andrews
415d630b63 copyrights 2016-10-21 14:25:50 +11:00
Mark Andrews
2a80bc0153 4488. [port] Darwin: use -framework for Kerberos. [RT #43418]
(cherry picked from commit 8d6fefac31)
2016-10-20 10:26:46 +11:00
Witold Krecicki
cc51cd2d20 4487. [test] Make system tests work on Windows. [RT #42931] 2016-10-19 17:21:13 +02:00
Tinderbox User
17697000bc regen v9_11 2016-10-16 01:10:31 +00:00
Mark Andrews
2e0d02503c add managed keys to view section
(cherry picked from commit 7551ec1ebe)
2016-10-16 08:15:36 +11:00
Mark Andrews
2bbab60f50 4485. [bug] Look in $prefix/lib/pythonX.Y/site-packages for
the python modules we install. [RT #43330]

(cherry picked from commit 01862dfaa5)
2016-10-11 15:21:48 +11:00
Mark Andrews
802e0662ef 4483. [func] Check prefixes in acls to make sure the address and
prefix lengths are consistent.  Warn only in
                        BIND 9.11 and earlier. [RT #43367]
2016-10-11 15:03:24 +11:00
Evan Hunt
94694e720a [v9_11] add cfg_parse_buffer3() function with linenum parameter
4482.	[cleanup]	Change #4455 was incomplete. [RT #43252]

(cherry picked from commit 676ac3cc82)
2016-10-10 17:12:30 -07:00
Mark Andrews
99811850b4 sleep 2 to let in progress lookups complete
(cherry picked from commit d3f29e7a4f)
2016-10-10 14:36:02 +11:00
Evan Hunt
67a42ef55c [v9_11] reset ret between NTA tests
(cherry picked from commit af05768c0e)
2016-10-05 21:07:18 -07:00
Tinderbox User
ea640e04ea regen v9_11 2016-10-06 01:09:07 +00:00
Witold Krecicki
ef1e2f7906 4478. [func] Add +continue option to mdig, allow continue on socket errors. [RT #43281] 2016-10-05 13:51:30 +02:00
Witold Krecicki
e8fab79146 4477. [test] Fix mkeys test timing issues. [RT #41028] 2016-10-05 13:45:37 +02:00
Witold Krecicki
c034b72ba1 4476. [test] Fix reclimit test on slower machines. [RT #43283] 2016-10-05 13:22:22 +02:00
Mark Andrews
7d238ed0c7 4475. [doc] Update named-checkconf documentation. [RT #43153]
(cherry picked from commit 67cdd2d3a4)
2016-10-05 14:22:19 +11:00
Mark Andrews
82a50a619a 4474. [bug] win32: call WSAStartup in fromtext_in_wks so that
getprotobyname and getservbyname work.  [RT #43197]
2016-10-05 12:29:00 +11:00
Mark Andrews
9ee66e3a5b 4472. [bug] Named could fail to find the correct NSEC3 records when
a zone was update between looking for the answer and
                        looking for the NSEC3 records proving non-existance
                        of the answer. [RT #43247]
2016-10-05 10:37:17 +11:00
Witold Krecicki
b4e6d4c724 [master] Disable dig IPv4-to-IPv6 mapping system test on OpenBSD 2016-09-30 12:20:55 +02:00
Mark Andrews
1477c19dd9 make statschannel version number agnostic 2016-09-29 17:01:06 +10:00
Tinderbox User
1ca759b3f5 regen v9_11 2016-09-28 23:05:58 +00:00
Evan Hunt
19977879ca [v9_11] minor cleanup/clarification in dnstap documentation
Patch submitted by Tony Finch (dot@dotat.at).

(cherry picked from commit e9917a51d3)
2016-09-27 20:46:54 -07:00
Evan Hunt
fcadf0b320 [v9_11] render querylog format consistent, and add a release note
4471.	[cleanup]	Render client/query logging format consistent for
			ease of log file parsing. (Note that this affects
			"querylog" format: there is now an additional field
			indicating the client object address.) [RT #43238]

(cherry picked from commit c4b7db4932)
2016-09-22 14:49:26 -07:00
Tinderbox User
cfbd5fb444 regen v9_11 2016-09-14 01:08:07 +00:00
Mark Andrews
db9781d4a2 4468. [bug] Address ECS option handling issues. [RT #43191]
(cherry picked from commit df17290113)
2016-09-14 08:23:07 +10:00
Mark Andrews
48ec547968 4465. [bug] Don't use "%z" as Windows doesn't support it.
[RT #43131]

(cherry picked from commit f1977af0d3)
2016-09-08 14:17:32 +10:00
Mark Andrews
178dc0e1d6 4463. [bug] The dnstap system test failed on some systems.
[RT #43129]

(cherry picked from commit ed7097fc00)
2016-09-08 11:40:47 +10:00
Francis Dupont
086454217d Fixed obvious typo in t_atomic 2016-09-08 01:56:47 +02:00
Mark Andrews
e51ba26500 4461. [bug] win32: not all external data was properly marked
as external data for windows dll. [RT #43161]

(cherry picked from commit 8eceb0bffe)
2016-09-07 14:14:40 +10:00
Tinderbox User
3711866d8b update copyright notice / whitespace 2016-08-30 23:45:56 +00:00
Mark Andrews
15bee593e7 4460. [test] Add system test for dnstap using unix domain sockets.
[RT #42926]

(cherry picked from commit 3e1fa8411b)
2016-08-30 11:21:33 +10:00
Evan Hunt
af326c2e3f [v9_11] fix tcp client memory leak
4459.	[bug]		TCP client objects created to handle pipeline queries
			were not cleaned up correctly, causing uncontrolled
			memory growth. [RT #43106]

(cherry picked from commit a26a62cef2)
2016-08-29 11:56:56 -07:00
Mark Andrews
d6fa26d0ad 4456. [doc] Add DOCTYPE and lang attribute to <html> tags.
[RT #42587]

(cherry picked from commit 63fe88e8d8)
2016-08-26 15:14:32 +10:00
Mark Andrews
1ea64ac3e5 remove spurious 'i'
(cherry picked from commit e1f590a59a)
2016-08-26 13:43:18 +10:00
Evan Hunt
f503aa345b [v9_11] pass source file and line to dyndb load function
4455.	[cleanup]	Allow dyndb modules to correctly log the filename
			and line number when processing configuration text
			from named.conf. [RT #43050]

(cherry picked from commit 02fb764681)
2016-08-25 18:09:45 -07:00
Tinderbox User
a3253fb44c update copyright notice / whitespace 2016-08-25 23:46:16 +00:00
Tinderbox User
7e71f05d86 regen v9_11 2016-08-25 01:08:27 +00:00
Mark Andrews
7df3f06c0b 4454. [bug] 'rndc dnstap -reopen' had a race issue. [RT #43089]
(cherry picked from commit 726cddb564)
2016-08-25 10:05:07 +10:00
Mark Andrews
d1cacbb374 4453. [bug] Prefetching of DS records failed to update their
RRSIGs. [RT #42865]

(cherry picked from commit f431bf02a6)
2016-08-25 09:53:50 +10:00
Mark Andrews
2be9d18ee9 4452. [bug] The default key manager policy file is now
<sysdir>/dnssec-policy.conf (usually
                        /etc/dnssec-policy.conf). [RT #43064]

(cherry picked from commit e09f18e349)
2016-08-25 09:53:33 +10:00
Evan Hunt
28a4d32b05 [v9_11] add dnssec-keygen and nslookup man page links to ARM
(cherry picked from commit 1e50c0d857)
2016-08-24 20:39:52 +00:00
Mark Andrews
fdcfc6bae7 add signing -serial to rndc usage
(cherry picked from commit 7bb9972a1f)
2016-08-23 13:42:25 +10:00
Evan Hunt
32431c79c7 [master] fix dnstap query/response selectors
4427.	[bug]		The "query" and "response" parameters to the
			"dnstap" option had their functions reversed.

(cherry picked from commit e9bd1496ed)
2016-08-19 11:41:07 +10:00
Tinderbox User
281ed127e3 regen v9_11 2016-08-19 01:08:24 +00:00
Mark Andrews
c40906dfad 4450. [port] Provide more nuanced HSM support which better matches
the specific PKCS11 providers capabilities. [RT #42458]

(cherry picked from commit 8ee6f289d8)
2016-08-19 08:05:47 +10:00
Witold Krecicki
f9e49fd80e 4449. [test] Fix catalog zones test on slower systems. [RT #42997] 2016-08-18 18:17:17 +02:00
Mark Andrews
7204d08a31 4447. [tuning] Allow the fstrm_iothr_init() options to be set using
named.conf to control how dnstap manages the data
                        flow. [RT #42974]

(cherry picked from commit 934837913f)
2016-08-18 11:16:58 +10:00
Tinderbox User
a0c1ad17ab update copyright notice / whitespace 2016-08-17 23:46:03 +00:00
Evan Hunt
f5898cf348 [v9_11] fix dyndb issues; isc_errno_toresult()
4445.	[cleanup]	isc_errno_toresult() can now be used to call the
			formerly private function isc__errno2result().
			[RT #43050]

4444.	[bug]		Fixed some issues related to dyndb: A bug caused
			braces to be omitted when passing configuration text
			from named.conf to a dyndb driver, and there was a
			use-after-free in the sample dyndb driver. [RT #43050]

Patch for dyndb driver submitted by Petr Spacek at Red Hat.

(cherry picked from commit 3390d74e33)
2016-08-17 11:39:42 -07:00
Mark Andrews
ab598428c8 update dyndb_init inline documentationi [RT #43050]
(cherry picked from commit 8c2c6b8b42)
2016-08-17 14:12:54 +10:00
Tinderbox User
d621f10ebe update copyright notice / whitespace 2016-08-15 23:45:57 +00:00
Mukund Sivaraman
4e9a1ad226 Fix RPZ CIDR tree insertion bug (#43035)
(cherry picked from commit 131307a70e)
2016-08-15 17:07:50 +05:30
Mark Andrews
d6a0e00dc3 add dnstap to help. [RT #42928]
(cherry picked from commit f814343d1b)
2016-08-15 11:56:37 +10:00
Mark Andrews
555469af35 4441. [cleanup] Alphabetize host's help output. [RT #43031]
(cherry picked from commit 8a98ea9e94)
2016-08-15 11:22:08 +10:00
Mark Andrews
b4bbf49418 4439. [bug] Address race conditions getting ownernames of nodes.
[RT #43005]

(cherry picked from commit c7e021e2e6)
2016-08-12 14:09:34 +10:00
Tinderbox User
0cfa9af7ed regen v9_11 2016-08-12 01:08:44 +00:00
Mark Andrews
2fb6d3782b 4437. [func] Minimal-responses now has two additional modes
no-auth and no-auth-recursive which suppress
                        adding the NS records to the authority section
                        as well as the associated address records for the
                        nameservers. [RT #42005]

(cherry picked from commit 78e31dd187)
2016-08-12 10:49:57 +10:00