Commit graph

7766 commits

Author SHA1 Message Date
Mark Andrews
8d9a134fe7 4405. [bug] Change 4342 introduced a regression where you could
not remove a delegation in a NSEC3 signed zone using
                        OPTOUT via nsupdate. [RT #42702]

(cherry picked from commit d811a7d9ef)
2016-07-06 10:14:01 +10:00
Mark Andrews
f2af4484a8 one -f the -D sync's should have been just -D
(cherry picked from commit 27505a932f)
2016-07-06 08:33:31 +10:00
Mark Andrews
680c1ba73d ignore configure generated files
(cherry picked from commit 0dacb6efdf)
2016-06-29 23:32:27 +10:00
Mark Andrews
e96a2a2b89 ignore configure generated files
(cherry picked from commit cd734243d4)
2016-06-29 23:27:51 +10:00
Mark Andrews
cccfafa311 4403. [bug] Rename variables and arguments that shadow: basename,
clone and gai_error.

(cherry picked from commit ecfa005085)
2016-06-29 11:26:49 +10:00
Witold Krecicki
a77f86b6ca Fix keymgr test for change 4400 [RT #42718] 2016-06-27 12:22:01 +02:00
Tinderbox User
33d0a7767d regen master 2016-06-27 05:29:38 +00:00
Mark Andrews
0c27b3fe77 4401. [misc] Change LICENSE to MPL 2.0. 2016-06-27 14:56:38 +10:00
Mark Andrews
50a3eae6cf 4400. [bug] ttl policy was not being inherited in policy.py.
[RT #42718]
2016-06-27 13:07:45 +10:00
Mark Andrews
8d49a1a0d1 4399. [bug] policy.py 'ECCGOST', 'ECDSAP256SHA256', and
'ECDSAP384SHA384' don't have settable keysize.
                        [RT #42718]
2016-06-27 12:11:37 +10:00
Mark Andrews
97e13cc244 4398. [bug] Correct spelling of ECDSAP256SHA256 in policy.py.
[RT #42718]
2016-06-27 11:49:11 +10:00
Tinderbox User
05da080bbd regen master 2016-06-27 01:25:44 +00:00
Mark Andrews
2616416a67 add missing <para>/<para> tags 2016-06-27 10:53:23 +10:00
Tinderbox User
4677c85720 regen master 2016-06-25 01:05:37 +00:00
Mark Andrews
8927a982bd update copyrights / whitespace 2016-06-24 16:23:26 +10:00
Mark Andrews
9f5443280f 4397. [bug] Update Windows python support. [RT #42538] 2016-06-24 16:04:10 +10:00
Mark Andrews
c1a72112b2 4396. [func] dnssec-keymgr now takes a '-r randomfile' option.
[RT #42455]
2016-06-24 14:12:24 +10:00
Mark Andrews
b709d84755 distclean cleanup 2016-06-24 13:52:01 +10:00
Mark Andrews
4840ef4581 4395 [bug] Improve out-of-tree installation of python modules.
[RT #42586]
2016-06-24 12:20:37 +10:00
Tinderbox User
76cf91b5df regen master 2016-06-24 01:05:13 +00:00
Tinderbox User
b54c2849fb update copyright notice / whitespace 2016-06-23 23:45:21 +00:00
Mark Andrews
7d262a3647 4394. [func] Add rndc command "dnstap-reopen" to close and
reopen dnstap output filed. [RT #41803]
2016-06-24 09:37:04 +10:00
Jeremy C. Reed
e8300d7263 Use test random file for tsig test using keygen
This is for #42565: tsig test hangs and KEYGEN and randomdev

It was okayed there and is a trivial fix. No changes log needed.
2016-06-23 18:48:09 -04:00
Tinderbox User
601645a1e8 update copyright notice / whitespace 2016-06-22 23:45:21 +00:00
Mark Andrews
10966da999 4402. [func] Collect statistics for RSSAC02v3 traffic-volume,
traffic-sizes and rcode-volume reporting. [RT #41475]
2016-06-23 08:44:54 +10:00
Witold Krecicki
4681ab1fc2 4387. [test] Rewritten test suite for catalog zones. [RT #42676]
4386.	[func]		Support for master entries with TSIG keys in catalog
			zones. [RT #42577]
2016-06-22 10:50:09 +02:00
Mark Andrews
b56bd9b59f 4387. [bug] Change 4336 was not complete leading to SERVFAIL
being return as NS records expired. [RT #42683]
2016-06-22 15:26:38 +10:00
Mark Andrews
96beefd76f 4386.[bug]Remove shadowed overmem function/variable. [RT #42706] 2016-06-22 15:13:24 +10:00
Witold Krecicki
3f06b888ae 4385. [func] Add support for allow-query and allow-transfer ACLs
to catalog zones. [RT #42578]
2016-06-20 13:39:44 +02:00
Mark Andrews
c1bf332c7c silence rm error message 2016-06-20 14:33:33 +10:00
Mark Andrews
eff62988e6 checking that default nta's were lifted due to lifetime were not robust 2016-06-20 14:29:11 +10:00
Mark Andrews
bcd6666984 silence compiler warning 2016-06-19 22:59:58 +10:00
Mark Andrews
948fe5822b 4384. [bug] Change 4256 accidentally disabled logging of the
rndc command. [RT #42654]
2016-06-18 00:10:51 +10:00
Mark Andrews
3f0de196f7 report subtest number 2016-06-17 10:50:33 +10:00
Tinderbox User
3939cc42d8 update copyright notice / whitespace 2016-06-16 23:45:22 +00:00
Mark Andrews
caf7c2fd25 style 2016-06-17 07:13:12 +10:00
Tinderbox User
dce54b9b5c update copyright notice / whitespace 2016-06-14 23:45:25 +00:00
Mark Andrews
3635d8f910 do not overflow exit status. [RT #42643] 2016-06-14 13:48:39 +10:00
Mark Andrews
ecff557eeb 4383. [bug] Correct spelling error in stats channel description of
"EDNS client subnet option received". [RT #42633]
2016-06-14 11:31:17 +10:00
Francis Dupont
985d2d1b71 Updated OpenSSL patches for 1.0.[12] (active/supported) 2016-06-13 18:05:33 +02:00
Mark Andrews
eb6d8d7a48 silence coverity warnings 2016-06-12 00:08:31 +10:00
Tinderbox User
ffaab41a01 update copyright notice / whitespace 2016-06-10 23:45:19 +00:00
Evan Hunt
eb3195d211 [master] add a test for dig +subnet with various prefix lengths 2016-06-09 22:49:52 -07:00
Mark Andrews
fbc50678e1 4382. [bug] rndc {addzone,modzone,delzone,showzone} should all
compare the zone name using a canonical format.
                        [RT #42630]
2016-06-10 11:03:53 +10:00
Mark Andrews
eb54bc33a2 also cleanup node 2016-06-03 18:04:37 +10:00
Mark Andrews
92ddd7ad2c detach before restore 2016-06-03 17:23:08 +10:00
Mark Andrews
b4750b5991 reset zversion on restart 2016-06-03 14:33:16 +10:00
Witold Krecicki
c2afbab9dc 4381. [bug] Missing "zone-directory" option in catalog zone
definition caused BIND to crash. [RT #42579]
2016-06-02 21:41:02 +02:00
Tinderbox User
e76f113739 regen master 2016-06-02 01:05:09 +00:00
Mark Andrews
d055178624 simplify poorly written conditional 2016-06-02 10:18:17 +10:00
Tinderbox User
1c6d1ca335 update copyright notice / whitespace 2016-06-01 23:45:30 +00:00
Francis Dupont
3933e5c763 Merged rt42563 (ht.c fixes) 2016-06-01 14:49:01 +02:00
Francis Dupont
2a8aa10492 Merged rt42505 (misc DNSSEC bugs) 2016-06-01 09:18:49 +02:00
Tinderbox User
7336a12983 update copyright notice / whitespace 2016-05-31 23:45:29 +00:00
Evan Hunt
3d0b7d5cc3 [master] zone-directory option for catalog zones
4380.	[experimental]	Added a "zone-directory" option to "catalog-zones"
			syntax, allowing local masterfiles for slaves
			that are provisioned by catalog zones to be stored
			in a directory other than the server's working
			directory. [RT #42527]
2016-05-31 10:36:27 -07:00
Tinderbox User
262bebd081 update copyright notice / whitespace 2016-05-27 23:45:23 +00:00
Mark Andrews
9268297baa 4379. [bug] An INSIST could be triggered if a zone contains
RRSIG records with expiry fields that loop
                        using serial number arithmetic. [RT #40571]
2016-05-27 15:24:30 +10:00
Evan Hunt
e3f231023c [master] use $DIG not dig 2016-05-26 18:39:07 -07:00
Tinderbox User
260e8e04b0 regen master 2016-05-27 01:05:21 +00:00
Mark Andrews
aabcb1fde0 4377. [bug] Don't reuse zero TTL responses beyond the current
client set (excludes ANY/SIG/RRSIG queries).
                        [RT #42142]
2016-05-27 09:59:46 +10:00
Evan Hunt
6c2a76b3e2 [master] copyrights, win32 definitions 2016-05-26 12:36:17 -07:00
Witold Krecicki
7a00d69909 4376. [experimental] Added support for Catalog Zones, a new method for
provisioning secondary servers in which a list of
                        zones to be served is stored in a DNS zone and can
                        be propagated to slaves via AXFR/IXFR. [RT #41581]

4375.   [func]          Add support for automatic reallocation of isc_buffer
                        to isc_buffer_put* functions. [RT #42394]
2016-05-26 21:23:19 +02:00
Evan Hunt
bfe9697f92 [master] correct summary 2016-05-26 09:53:09 -07:00
Mark Andrews
3d1b521b5b update dnssec-keymgr documentation. [RT #42454] 2016-05-26 16:02:46 +10:00
Mark Andrews
32e1f3cda0 improve error message for missing dnssec-keygen/dnssec-settime. [RT #42456] 2016-05-26 15:46:10 +10:00
Mark Andrews
28784b996b minor host man page cleanups from Tony Finch [RT #42476] 2016-05-26 13:56:42 +10:00
Mark Andrews
ac11084829 4374. [bug] Use SAVE/RESTORE macros in query.c to reduce the
probability of reference counting errors as seen
                        in 4365. [RT #42405]
2016-05-26 12:11:00 +10:00
Mark Andrews
10f8dc8456 4370. [bug] Address python3 compatibility issues with RNDC module.
[RT #42499] [RT #42506]
2016-05-26 12:01:31 +10:00
Tinderbox User
7173647ada update copyright notice / whitespace 2016-05-25 23:45:21 +00:00
Evan Hunt
0cbe448914 [master] minimal-any
4371.	[func]		New "minimal-any" option reduces the size of UDP
			responses for qtype ANY by returning a single
			arbitrarily selected RRset instead of all RRsets.
			Thanks to Tony Finch. [RT #41615]
2016-05-25 13:54:34 -07:00
Mark Andrews
9c6a57d7c7 address python2/python3 differences 2016-05-25 15:19:25 +10:00
Mark Andrews
d4a9a6c4a9 pass $KEYGEN to $KEYMGR 2016-05-25 14:05:26 +10:00
Mark Andrews
e6d09e71d0 style 2016-05-25 13:41:48 +10:00
Mark Andrews
ecb9c56ff6 use python3 compatible syntax 2016-05-25 13:37:07 +10:00
Mark Andrews
9dede25430 4370. [bug] Address python3 compatibility issues with RNDC module.
[RT #42499]
2016-05-25 11:48:52 +10:00
Mark Andrews
d3600bb89d 4369. [bug] Fix 'make' and 'make install' out-of-tree python
support. [RT #42484]
2016-05-24 09:50:23 +10:00
Mark Andrews
7abac4a395 silence warning 2016-05-17 17:26:27 +10:00
Mark Andrews
4f200033d1 explict conversion 2016-05-17 17:22:51 +10:00
Mark Andrews
c3beecc1bc 4365. [bug] Address zone reference counting errors involving
nxdomain-redirect. [RT #42258]
2016-05-13 11:54:25 +10:00
Mark Andrews
32148399a2 ignore missing SERVFAIL 2016-05-12 14:25:43 +10:00
Tinderbox User
f5489931d7 update copyright notice / whitespace 2016-05-09 23:45:56 +00:00
Mark Andrews
8090ceb932 4363. [port] Turn off triggering UAC when running BINDInstall
temporarily.
2016-05-09 19:07:07 +10:00
Mark Andrews
97e9fc9e53 add missing dependancy 2016-05-09 15:42:57 +10:00
Mark Andrews
2b96f36d0c remember dig/rndc outputs 2016-05-09 07:59:19 +10:00
Mark Andrews
9e14bf1f86 add test counter 2016-05-09 07:29:43 +10:00
Witold Krecicki
9852ad2408 Fix awk compatibility issue in rndc system test 2016-05-07 13:33:51 +02:00
Tinderbox User
f89adb2c2a update copyright notice / whitespace 2016-05-05 23:45:48 +00:00
Evan Hunt
7614afdab2 [master] remove copyright header from policy.good 2016-05-05 14:26:15 -07:00
Witold Krecicki
e846f127d6 4362. [func] Changed rndc reconfig behaviour so that newly added
zones are loaded asynchronously and the loading does
			not block the server. [RT #41934]
2016-05-05 21:41:12 +02:00
Mark Andrews
5ac427050f 4360. [bug] Silence spurious 'bad key type' message when there is
a existing TSIG key. [RT #42195]
2016-05-05 22:27:08 +10:00
Mark Andrews
594d15df25 4359. [bug] Inherited 'also-notify' lists were not being checked
by named-checkconf. [RT #42174]
2016-05-05 21:59:09 +10:00
Witold Krecicki
19d80ce584 4358. [test] Added American Fuzzy Lop harness that allows
feeding fuzzed packets into BIND.
			[RT #41723]
2016-05-05 11:49:38 +02:00
Witold Krecicki
dc2a4887c4 4357. [func] Add the python RNDC module. [RT #42093] 2016-05-05 11:33:47 +02:00
Mark Andrews
08e36aa5a5 4356. [func] Add the ability to specify whether to wait for
nameserver addresses to be looked up or not to
                        rpz with a new modifying directive 'nsip-wait-recurse'.                         [RT #35009]
2016-05-05 16:29:05 +10:00
Evan Hunt
f1a2709aad [master] add extractability to pkcs11-list
4354.	[func]		"pkcs11-list" now displays the extractability
			attribute of private or secret keys stored in
			an HSM, as either "true", "false", or "never"
			Thanks to Daniel Stirnimann. [RT #36557]
2016-05-04 21:56:48 -07:00
Tinderbox User
99bbb58ce7 update copyright notice / whitespace 2016-05-04 23:45:36 +00:00
Evan Hunt
699f790c49 [master] update pkcs11 headers
4353.	[cleanup]	Update PKCS#11 header files. [RT #42175]
2016-05-04 15:55:03 -07:00
Evan Hunt
66074f152f [master] log message when using ISC DLV
4352.	[cleanup]	The ISC DNSSEC Lookaside Validation (DLV) service
			is scheduled to be disabled in 2017.  A warning is
			now logged when named is configured to use it,
			either explicitly or via "dnssec-lookaside auto;"
			[RT #42207]
2016-05-04 14:37:25 -07:00
Tinderbox User
9e6e0881fa update copyright notice / whitespace 2016-04-30 23:45:50 +00:00
Mark Andrews
cbad856135 support truncated hashes longer that 7
(cherry picked from commit 5b291f619e312689e25de8fd5662b0b9d4a62679)
2016-05-01 07:48:40 +10:00
Tinderbox User
3241ddcf93 regen master 2016-04-30 01:05:59 +00:00
Tinderbox User
21635968f7 update copyright notice / whitespace 2016-04-29 23:45:42 +00:00
Evan Hunt
470af54b4e [master] more python2/3 compatibility fixes; use setup.py to install 2016-04-29 14:40:45 -07:00
Evan Hunt
304d16f08f [master] address some python2/3 incompatibilities 2016-04-29 10:38:35 -07:00
Tinderbox User
17e9d6023e Add .8 and .html files for dnssec-keymgr 2016-04-29 16:42:23 +00:00
Evan Hunt
90c7806bb6 [master] remove gnu make dependency 2016-04-29 09:36:36 -07:00
Evan Hunt
a27dc50157 [master] copyrights 2016-04-28 22:30:53 -07:00
Mark Andrews
86f221492f alphabetize 2016-04-29 13:10:26 +10:00
Mark Andrews
48bf87ba83 4351. [bug] 'dig +noignore' didn't work. [RT #42273] 2016-04-29 12:41:02 +10:00
Mark Andrews
cf69e3d8b2 alphabetize host options 2016-04-29 11:21:49 +10:00
Tinderbox User
aa70afe5c1 update copyright notice / whitespace 2016-04-28 23:45:37 +00:00
Evan Hunt
f6096b958c [master] dnssec-keymgr
4349.   [contrib]       kasp2policy: A python script to create a DNSSEC
                        policy file from an OpenDNSSEC KASP XML file.

4348.	[func]		dnssec-keymgr: A new python-based DNSSEC key
			management utility, which reads a policy definition
			file and can create or update DNSSEC keys as needed
			to ensure that a zone's keys match policy, roll over
			correctly on schedule, etc.  Thanks to Sebastian
			Castro for assistance in development. [RT #39211]
2016-04-28 00:16:01 -07:00
Evan Hunt
5ecfee97ba [master] copyrights 2016-04-14 19:12:13 -07:00
Evan Hunt
3cd204c4a4 [master] fixed revoked key regression
4436.	[bug]		Fixed a regression introduced in change #4337 which
			caused signed domains with revoked KSKs to fail
			validation. [RT #42147]
2016-04-14 18:52:52 -07:00
Mark Andrews
7f79448198 remove unnecessary return 2016-04-08 04:24:47 +10:00
Tinderbox User
a0132868d1 update copyright notice / whitespace 2016-03-25 23:45:16 +00:00
Mark Andrews
42f6b7a890 add mdig.exe; fix typo in isc-hmac-fixup.exe 2016-03-26 09:07:54 +11:00
Evan Hunt
4a5f5c4ce1 [master] install mdig to bin not sbin 2016-03-25 09:52:00 -07:00
Tinderbox User
c19f42a378 update copyright notice / whitespace 2016-03-24 23:45:21 +00:00
Tinderbox User
e285c11870 regen master 2016-03-24 01:05:08 +00:00
Mark Andrews
6214c3c93a 4341. [bug] 'rndc flushtree' could fail to clean the tree if there
wasn't a node at the specified name. [RT #41846]
2016-03-24 11:31:25 +11:00
Tinderbox User
a63461cc4b update copyright notice / whitespace 2016-03-23 23:45:22 +00:00
Evan Hunt
7fa4c18451 [master] ECS family 0 handling was still broken 2016-03-23 15:00:30 -07:00
Evan Hunt
05b7b63f17 [master] more ECS handling fixes 2016-03-23 09:59:42 -07:00
Evan Hunt
395e6865d5 [master] fix ECS with family==0
4341.	[bug]		Correct the handling of ECS options with
			address family 0. [RT #41377]
2016-03-23 08:54:46 -07:00
Evan Hunt
d82b18a552 [master] fix uiAccess for win64 build 2016-03-22 17:28:12 -07:00
Evan Hunt
ddf3342cca [master] test pipelining with mdig
4339.	[test]		Use "mdig" to test pipelined queries. [RT #41929]
2016-03-22 17:26:38 -07:00
Evan Hunt
132a571179 [master] fix mkeys TTL 0 issue
4337.	[bug]		The previous change exposed a latent flaw in
			key refresh queries for managed-keys when
			a cached DNSKEY had TTL 0. [RT #41986]
2016-03-22 12:12:32 -07:00
Tinderbox User
27def92931 update copyright notice / whitespace 2016-03-21 23:45:22 +00:00
Mark Andrews
0993cd5f22 4336. [bug] Don't emit records with zero ttl unless the records
were learnt with a zero ttl. [RT #41687]
2016-03-21 13:22:21 +11:00
Mark Andrews
b8dcc13bc5 4335. [bug] zone->view could be detached too early. [RT #41942] 2016-03-21 12:02:00 +11:00
Tinderbox User
b1aac28027 update copyright notice / whitespace 2016-03-16 23:45:17 +00:00
Jeremy C. Reed
e12c78ebf6 add comments about why the configuration is bad
I didn't get review. This is trivial.
2016-03-16 15:42:56 -04:00
Mark Andrews
756c643330 4334. [func] 'named -V' now reports zlib version. [RT #41913] 2016-03-13 07:48:11 +11:00
Jeremy C. Reed
81780ffd74 use -r $RANDFILE for test using keygen
stops hang
this is for ticket #41898
2016-03-11 09:27:15 -05:00
Tinderbox User
4a7004f3ce update copyright notice / whitespace 2016-03-10 23:45:16 +00:00
Mark Andrews
7c52595464 4331. [func] When loading managed signed zones detect if the
RRSIG's inception time is in the future and regenerate
                        the RRSIG immediately. [RT #41808]
2016-03-10 17:01:08 +11:00
Tinderbox User
1fb011b1db regen master 2016-03-08 22:35:32 +00:00
Tinderbox User
2cc103828e update copyright notice / whitespace 2016-03-08 22:29:11 +00:00
Mark Andrews
1188aa3010 add automatic-interface-scan to ARM grammar 2016-03-09 09:00:07 +11:00
Mark Andrews
93ca5ee4c4 update copyrights 2016-03-08 16:21:19 +11:00
Mark Andrews
d6357f09aa 4329. [func] Warn about a common misconfiguration when forwarding
RFC 1918 zones. [RT #41441]
2016-03-08 10:11:23 +11:00
Tinderbox User
220ba6da87 update copyright notice / whitespace 2016-03-04 23:45:23 +00:00
Mark Andrews
8398f00156 4326. [protocol] Add support for AVC. [RT #41819 2016-03-04 18:11:41 +11:00
Mukund Sivaraman
9da98335c1 Code cleanups (#41656) 2016-03-04 12:18:17 +05:30
Evan Hunt
023ba1e6ef [master] add OS details to rndc status
4325.	[func]		Add a line to "rndc status" indicating the
			hostname and operating system details. [RT #41610]
2016-03-03 22:02:52 -08:00
Tinderbox User
f254ab049e update copyright notice / whitespace 2016-03-02 23:45:17 +00:00
Mark Andrews
ce7216c40a 4223. [bug] Improve HTTP header processing on statschannel.
[RT #41674]
2016-03-02 11:04:59 +11:00
Mark Andrews
455c0848f8 4322. [security] Duplicate EDNS COOKIE options in a response could
trigger an assertion failure. (CVE-2016-2088)
                        [RT #41809]
2016-02-27 11:23:50 +11:00
Mark Andrews
7f514657e2 update copyrights 2016-02-25 10:55:40 +11:00
Mark Andrews
f9da4a8e54 4321. [bug] Zones using mapped files containing out-of-zone data
could return SERVFAIL instead of the expected NODATA
                        or NXDOMAIN results. [RT #41596]
2016-02-24 11:13:24 +11:00
Tinderbox User
62735fcde3 update copyright notice / whitespace 2016-02-23 23:45:35 +00:00
Mukund Sivaraman
293a9e9978 Fix allocation for "none" ACL that caused assertion failure (#41745) 2016-02-23 12:51:34 +05:30
Mark Andrews
a125381c60 update usage 2016-02-23 16:57:02 +11:00
Tinderbox User
27424c351d update copyright notice / whitespace 2016-02-20 23:45:16 +00:00
Mark Andrews
c968a257c1 fix subnet prefix 2016-02-20 12:01:30 +11:00
Tinderbox User
53ba272721 update copyright notice / whitespace 2016-02-18 23:45:32 +00:00
Mark Andrews
a2b15b3305 4318. [security] Malformed control messages can trigger assertions
in named and rndc. (CVE-2016-1285) [RT #41666]
2016-02-18 12:11:27 +11:00
Mark Andrews
37176663e0 don't used class in grep e.g. [:space:] 2016-02-17 13:17:40 +11:00
Evan Hunt
93c211afc9 [master] fixed a regression in dyndb due to change #4277 2016-02-12 00:22:45 -08:00
Tinderbox User
6632721990 regen master 2016-02-12 01:04:18 +00:00
Tinderbox User
ee2e5fec65 regen master 2016-02-11 01:04:20 +00:00
Mark Andrews
b91d11bfcc copyrights / whitespace 2016-02-11 10:44:21 +11:00
Evan Hunt
23733a9412 [master] misplaced <varlistentry> 2016-02-09 17:11:26 -08:00
Mukund Sivaraman
79a55d4f4d Add option to tools to print RRs in unknown presentation format (#41595) 2016-02-09 15:39:02 +05:30
Mukund Sivaraman
0c29904b27 Check that configured view class isn't a meta class (#41572) 2016-02-08 13:58:01 +05:30
Mark Andrews
08913705e9 specify what to copy
(cherry picked from commit 88624c9c32)
2016-02-05 13:54:47 +11:00
Mark Andrews
68ecf1c9a5 add missing line break 2016-02-04 11:51:44 +11:00
Mark Andrews
d88ba93712 4313. [bug] Handle ns_client_replace failures in test mode.
[RT #41190]
2016-02-03 14:59:19 +11:00
Tinderbox User
d83a9a980a update copyright notice / whitespace 2016-02-02 23:45:23 +00:00
Mukund Sivaraman
f9b167290a Remove 45 second sleeps from notify system test (#41248)
No CHANGES entry required.
2016-02-02 09:46:57 +05:30
Mark Andrews
8d00c5ab2c 4312. [bug] dig's unknown dns and edns flags (MBZ value) logging
was not consistent. [RT #41600]
2016-02-02 14:19:22 +11:00
Mark Andrews
e370cdf4ba capture rndc output
(cherry picked from commit 2d58f4aee2)
2016-02-02 12:26:23 +11:00
Tinderbox User
8b074bef0c update copyright notice / whitespace 2016-02-01 23:45:25 +00:00
Evan Hunt
ec450fde7c [master] disallow delzone on policiy zones
4311.	[bug]		Prevent "rndc delzone" from being used on
			response-policy zones. [RT #41593]
2016-02-01 09:49:49 -08:00
Tinderbox User
3947e3625a update copyright notice / whitespace 2016-01-31 23:45:23 +00:00
Evan Hunt
1d36ed108a [master] spelling 2016-01-31 09:54:13 -08:00
Tinderbox User
5f4f7c688e update copyright notice / whitespace 2016-01-30 23:45:23 +00:00
Evan Hunt
f02c22d58a [master] add uname data to named -V
4308.	[func]		Added operating system details to "named -V"
			output. [RT #41452]
2016-01-30 11:06:58 -08:00
Evan Hunt
df9a49ee07 [master] dig/mdig could send misformatted ECS options
4307.	[bug]		"dig +subnet" and "mdig +subnet" could send
			incorrectly-formatted Client Subnet options
			if the prefix length was not divisble by 8.
			Also fixed a memory leak in "mdig". [RT #45178]
2016-01-29 17:41:29 -08:00
Tinderbox User
6825f304c5 regen master 2016-01-29 01:04:18 +00:00
Tinderbox User
b7f3400f3b update copyright notice / whitespace 2016-01-28 23:45:29 +00:00
Evan Hunt
e073205a88 [master] openssl 1.0.2f patch
4306.	[maint]		Added a PKCS#11 openssl patch supporting
			version 1.0.2f [RT #38312]
2016-01-28 13:27:29 -08:00
Mark Andrews
832ab79d1f 4305. [bug] dnssec-signzone was not removing unnecessary rrsigs
from the zone's apex. [RT #41483]
2016-01-28 15:42:34 +11:00
Mark Andrews
9d85a77382 4304. [port] xfer system test failed as 'tail -n +value' is not
portable. [RT #41315]
2016-01-28 15:38:06 +11:00
Evan Hunt
8ede7a974b [master] fix dig=+subnet zero-length prefix
4303.	[bug]		"dig +subnet" was unable to send a prefix length of
			zero, as it was incorrectly changed to 32 for v4
			prefixes or 128 for v6 prefixes. In addition to
			fixing this, "dig +subnet=0" has been added as a
			short form for 0.0.0.0/0. The same changes have
			also been made in "mdig". [RT #41553]
2016-01-27 19:03:54 -08:00
Evan Hunt
30370d905e [master] removed /Gy- from VS project files
4302.	[port]		win32: fixed a build error in VS 2015. [RT #41426]
2016-01-27 15:27:57 -08:00
Tinderbox User
4df65ccfec update copyright notice / whitespace 2016-01-25 23:45:24 +00:00
Mark Andrews
9478de25bb 4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534] 2016-01-26 00:27:44 +11:00
Mark Andrews
f8432e3f24 4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534] 2016-01-26 00:09:03 +11:00
Mark Andrews
1fe6b74b9c use 0 not ISC_FALSE for dns_name_fromtext 2016-01-25 16:55:02 +11:00
Tinderbox User
c46ac73c8f update copyright notice / whitespace 2016-01-22 23:45:23 +00:00
Evan Hunt
630b2d0c5a [master] NOSETFC incorrectly applied
4300.	[bug]		A flag could be set in the wrong field when setting
			up nonrecursive queries; this could cause the
			SERVFAIL cache to cache responses it shouldn't.
			New querytrace logging has been added which
			identified this error. [RT #41155]
2016-01-22 13:58:11 -08:00
Tinderbox User
7d4f45f6bd update copyright notice / whitespace 2016-01-21 23:45:23 +00:00
Evan Hunt
9b789c54f8 [master] add regression test for RT #41518
4297.	[test]		Ensure delegations in RPZ zones fail robustly.
			[RT #41518]
2016-01-20 17:44:11 -08:00
Evan Hunt
d40154cab7 [master] cacluate TCP packet sizes correctly
4296.	[bug]		TCP packet sizes were calculated incorrectly in the
			stats channel; they could be counted in the wrong
			histogram bucket. [RT #40587]
2016-01-20 17:30:27 -08:00
Tinderbox User
b3378292d0 update copyright notice / whitespace 2016-01-20 23:45:22 +00:00
Evan Hunt
6bd794171f [master] fixed rndc stop -p
4294.	[bug]		Fixed a regression in which "rndc stop -p" failed
			to print the PID. [RT #41513]
2016-01-20 09:53:26 -08:00
Tinderbox User
16201b15a6 update copyright notice / whitespace 2016-01-17 23:45:21 +00:00
Curtis Blackburn
3948d9c7c6 rrl test was failing on some systems because not all versions of perl understand '-E'. changed to '-e' 2016-01-15 14:35:12 -08:00
Curtis Blackburn
a66619fe32 [rt39196] Added a new nameserver to test rrl "log-only yes".
Added test for RT #39197. Made the rrl test more
              tolerant of minor differences in results due to
              timing. Removed the failure override for the rrl
              test.

commit 01a15bc80ef4c20171ddfe9b5ceb2ebe008c8e0d
Author: Curtis Blackburn <ckb@isc.org>
Date:   Tue Dec 15 15:08:03 2015 -0800

    added a new nameserver to the rrl test
2016-01-11 19:37:17 -08:00
Evan Hunt
bb5d14d724 [master] millisecond granularity for statschannel timers
4290.	[func]		The timers returned by the statistics channel
			(indicating current time, server boot time, and
			most recent reconfiguration time) are now reported
			with millisecond accuracy. [RT #40082]
2016-01-07 15:34:58 -08:00
Tinderbox User
742cb92338 regen master 2016-01-06 01:04:26 +00:00
Tinderbox User
feb1ccdaf1 update copyright notice / whitespace 2016-01-05 23:45:26 +00:00
Tinderbox User
d7dbbf9b7e regen 2016-01-05 23:30:01 +00:00
Tinderbox User
4206bb139c regen master 2016-01-05 01:04:24 +00:00
Tinderbox User
e1836d1fe4 update copyright notice / whitespace 2016-01-04 23:45:26 +00:00
Evan Hunt
8454718b87 [master] document return values from nslookup 2016-01-04 15:38:06 -08:00
Evan Hunt
3bcd09b416 [master] silence noisy logging
4287.	[bug]		Silence an overly noisy log message when message
			parsing fails. [RT #41374]
2016-01-04 13:05:23 -08:00
Francis Dupont
343aeac717 Updated WIN32 files (rt40877) 2016-01-04 17:27:31 +01:00
Evan Hunt
de4c1814dd [master] update stats version number for rssac counters 2016-01-03 22:31:56 -08:00
Tinderbox User
7321d8df7b update copyright notice / whitespace 2015-12-27 23:45:24 +00:00
Evan Hunt
fbed5f0f44 [master] fix geoip options
4284.	[bug]		Some GeoIP options were incorrectly documented
			using abbreviated forms which were not accepted by
			named.  The code has been updated to allow both
			long and abbreviated forms. [RT #41381]
2015-12-26 10:50:32 -08:00
Francis Dupont
66d73c3611 Cleaned up OpenSSL patches 2015-12-23 21:14:36 +01:00
Francis Dupont
2f2dd34a93 Updated OpenSSL 1.0.1 patch 2015-12-23 19:33:31 +01:00
Francis Dupont
5c19058b0a Updated OpenSSL 1.0.0 patch 2015-12-23 18:48:50 +01:00
Francis Dupont
059904647d Updated OpenSSL 0.9.8 patch 2015-12-23 17:53:40 +01:00
Curtis Blackburn
df59681bd2 [rt40109] added a test for +dscp to the digdelv tests 2015-12-21 14:13:03 -08:00
Tinderbox User
0226754d9e regen master 2015-12-19 01:04:14 +00:00
Mark Andrews
49762dffc4 4282. [func] 'dig +[no]mapped' determine whether the use of mapped
IPv4 addresses over IPv6 is permitted or not.  The
                        default is +mapped.  [RT #41307]
2015-12-19 09:47:11 +11:00
Tinderbox User
4688741c5c update copyright notice / whitespace 2015-12-16 23:45:26 +00:00
Mark Andrews
f1fcadccc4 remove named.conf 2015-12-16 21:37:21 +11:00
Mark Andrews
1583a214cd check for non removed files 2015-12-16 21:25:04 +11:00
Tinderbox User
a179cbdf65 regen master 2015-12-16 01:04:13 +00:00
Mark Andrews
ecfedec0e0 perform a more complete cleanup after running system tests [rt41255] 2015-12-16 11:29:18 +11:00
Tinderbox User
ea2ea0914c update copyright notice / whitespace 2015-12-15 23:45:23 +00:00
Evan Hunt
0321aa184e [master] reclimit test was broken with v6 2015-12-15 15:01:58 -08:00
Curtis Blackburn
9effea437d [rt41269] additional tests for dig and delv,
fix for --disable-ipv6 on osx,
              fixes for tests with --disable-ipv6
2015-12-15 11:58:28 -08:00
Mark Andrews
f647c0df9f 4281. [bug] Teach dns_message_totext about BADCOOKIE. [RT #41257] 2015-12-15 19:49:40 +11:00
Mukund Sivaraman
ecc06cbc32 Use optimal message sizes to improve compression in AXFRs (#40996) 2015-12-15 13:24:14 +05:30
Evan Hunt
b96366252b [master] add +nocookie and use perl for query burst 2015-12-14 21:27:49 -08:00
Evan Hunt
362d2d46aa [master] fixed an incorrect test case in rpzrecurse 2015-12-13 14:15:47 -08:00
Evan Hunt
e0638007c8 [master] clarify in the help message that delv -c is a noop 2015-12-10 16:10:19 -08:00
Curtis Blackburn
21c6e49a77 [rt40106] add tests for dig +[no]ttlunits 2015-12-10 12:08:57 -08:00
Mark Andrews
505d311709 4278. [bug] 'delv +short +[no]split[=##]' didn't work as expected.
[RT #41238]
2015-12-10 12:43:50 +11:00
Curtis Blackburn
6fe5cc5aea [rt41263] add a system test for dig +qr +ednsopt<invalid> 2015-12-09 16:21:02 -08:00
Tinderbox User
2a37470065 update copyright notice / whitespace 2015-12-09 23:45:23 +00:00
Mukund Sivaraman
5d79b60fc5 Improve performance of RBT (#41165) 2015-12-09 19:10:55 +05:30
Curtis Blackburn
aeb7b6e145 [rt40105] add a system test for dig +zflag 2015-12-08 16:06:39 -08:00
Curtis Blackburn
ce0d8b1c0e [rt40104] changed one occurrence of +noednsneg to +noednsnegotiation 2015-12-08 16:03:01 -08:00
Curtis Blackburn
4d1ea2336c [rt40107] add system tests for dig +header-only 2015-12-08 15:57:53 -08:00
Curtis Blackburn
ab94dd50e8 [rt40181] added tests for dig +short +nosplit/+rrcomments (see rt39291) 2015-12-08 15:13:52 -08:00
Mark Andrews
322e6b5be7 4276. [protocol] Add support for SMIMEA. [RT #40513] 2015-12-08 08:16:41 +11:00
Evan Hunt
464c2c673b [master] fix dig +norrcomments
4272.	[bug]		dig: the +norrcomments option didn't work with +multi.
			[RT #41234]
2015-12-04 16:16:59 -08:00
Tinderbox User
8c20f8635a update copyright notice / whitespace 2015-12-03 23:45:24 +00:00
Evan Hunt
8f918a34d1 [master] update to previous commit: also list chrootdir if applicable 2015-12-02 19:05:46 -08:00
Evan Hunt
b6214feb63 [master] add conf file to rndc status
4268.	[func]		"rndc status" now reports the path to the
			configuration file. [RT #36470]
2015-12-02 18:54:46 -08:00
Mark Andrews
26177be294 4267. [test] Check sdlz error handling. [RT #41142] 2015-12-02 13:00:42 +11:00
Mark Andrews
447591a49c use isc_buffer_constinit 2015-11-23 07:26:46 +11:00
Tinderbox User
af0bea7aa7 update copyright notice / whitespace 2015-11-20 23:45:23 +00:00