Commit graph

717 commits

Author SHA1 Message Date
Mark Andrews
8bcd80824c 4581. [port] Linux: Add getpid and getrandom to the list of system
calls named uses for seccomp. [RT #44883]

(cherry picked from commit f94f3e2791)
2017-03-16 11:23:36 +11:00
Mark Andrews
800cfc8a5c --enable-developer now compiles bin/tests's XTARGETS [RT #44205]
(cherry picked from commit 434477aa02)
2017-01-12 14:03:05 +11:00
Tinderbox User
36b7137e99 regen v9_11 2017-01-05 01:08:54 +00:00
Tinderbox User
5e013c280f regen v9_11 2017-01-04 01:08:57 +00:00
Evan Hunt
f5c17a057f [v9_11] add support for native pkcs11 on keyper
4547.	[port]		Add support for --enable-native-pkcs11 on the AEP
			Keyper HSM. [RT #42463]
2017-01-03 16:42:07 -08:00
Curtis Blackburn
294ef74e5a 4515. [port] FreeBSD: Find readline headers when they are in
edit/readline/ instead of readline/. [RT #43658]
2016-11-18 11:12:28 -08:00
Mark Andrews
fe6557e590 4514. [port] NetBSD: strip -WL, from ld command line. [RT #43204]
(cherry picked from commit 69e77384fa)
2016-11-10 11:34:01 +11:00
Mark Andrews
21e5f9c5cd 4513. [cleanup] Minimum Python versions are now 2.7 and 3.2.
[RT #43566]

(cherry picked from commit 472e99cfa6)
2016-11-10 09:51:19 +11:00
Evan Hunt
8a5809527e [v9_11] make uninstall
4503.	[cleanup]	"make uninstall" now removes file installed by
			BIND. (This currently excludes Python files
			due to lack of support in setup.py.) [RT #42912]

(cherry picked from commit 6087f87afb)
2016-11-01 19:17:23 -07:00
Evan Hunt
669e108d67 [v9_11] use arc4random_stir() when available
4499.	[port]		MacOSX: silence deprecated function warning
			by using arc4random_stir() when available
			instead of arc4random_addrandom(). [RT #43503]

(cherry picked from commit 3fb62a5a4e)
2016-11-01 14:00:54 -07:00
Mark Andrews
48e1d4823c check for LIBRESSL_VERSION_NUMBER
(cherry picked from commit f53fc4540a)
2016-11-01 12:07:30 +11:00
Evan Hunt
45fd95544c [v9_11] simplify prereq checks by using feature-test.c
4498.	[test]		Simplify prerequisite checks in system tests.
			[RT #43516]

(cherry picked from commit 5480a74b70)
2016-10-31 17:47:42 -07:00
Mark Andrews
76af83c9ad 4497. [port] Add support for OpenSSL 1.1.0. [RT #41284]
(cherry picked from commit 1fce0951ed)
2016-10-31 10:05:55 +11:00
Mark Andrews
2a1860ad83 4494. [bug] Look for <editline/readline.h>. [RT #43429]
(cherry picked from commit 6fbb2b51d8)
2016-10-27 15:49:11 +11:00
Mark Andrews
d389069a39 4492. [bug] irs_resconf_load failed to initialise sortlistnxt
causing bad writes if resolv.conf contained a
                        sortlist directive. [RT #43459]

(cherry picked from commit 55b78fff62)
2016-10-27 13:18:47 +11:00
Mark Andrews
2a80bc0153 4488. [port] Darwin: use -framework for Kerberos. [RT #43418]
(cherry picked from commit 8d6fefac31)
2016-10-20 10:26:46 +11:00
Witold Krecicki
cc51cd2d20 4487. [test] Make system tests work on Windows. [RT #42931] 2016-10-19 17:21:13 +02:00
Mark Andrews
01387de5a7 further readline changes [RT #43139]
(cherry picked from commit 09f914d2d4)
2016-10-12 11:57:38 +11:00
Mark Andrews
a7dff3d9b0 don't clobber readline
(cherry picked from commit ccf0bea98a)
2016-10-11 17:32:05 +11:00
Mark Andrews
0b612b420d 4484. [bug] Failure to find readline when requested should be
fatal to configure. [RT #43328]

(cherry picked from commit 6caac8d9a9)
2016-10-11 15:16:20 +11:00
Evan Hunt
94694e720a [v9_11] add cfg_parse_buffer3() function with linenum parameter
4482.	[cleanup]	Change #4455 was incomplete. [RT #43252]

(cherry picked from commit 676ac3cc82)
2016-10-10 17:12:30 -07:00
Mark Andrews
15bee593e7 4460. [test] Add system test for dnstap using unix domain sockets.
[RT #42926]

(cherry picked from commit 3e1fa8411b)
2016-08-30 11:21:33 +10:00
Evan Hunt
50a8f5f9b8 [v9_11] regen configure (cannot wait for cron)
(cherry picked from commit 228a095c29)
2016-08-22 09:07:32 -07:00
Mark Andrews
c40906dfad 4450. [port] Provide more nuanced HSM support which better matches
the specific PKCS11 providers capabilities. [RT #42458]

(cherry picked from commit 8ee6f289d8)
2016-08-19 08:05:47 +10:00
Mark Andrews
c5342425ea 4440. [func] Enable TCP fast open support when available on the
server side. [RT #42866]

(cherry picked from commit a977bc4c8e)
2016-08-12 15:32:00 +10:00
Mark Andrews
ba800567a3 regen 2016-07-30 07:45:54 +10:00
Mark Andrews
9bff99379e remove spurious breaks
(cherry picked from commit e95391abd4)
2016-07-29 23:56:59 +10:00
Mark Andrews
72cc860dd2 4425. [bug] arpaname and dnstap-read were not being installed
into ${prefix}/bin.  Tidy up installation issues
                        with CHANGE 4421. [RT #42910]

(cherry picked from commit 711aff9fa7)
2016-07-26 06:54:19 +10:00
Evan Hunt
801707fe19 [v9_11] store "addzone" zone config in a NZD database
4421.	[func]		When built with LMDB (Lightning Memory-mapped
			Database), named will now use a database to store
			the configuration for zones added by "rndc addzone"
			instead of using a flat NZF file. This improves
			performance of "rndc delzone" and "rndc modzone"
			significantly. Existing NZF files will
			automatically by converted to NZD databases.
			To view the contents of an NZD or to roll back to
			NZF format, use "named-nzd2nzf". To disable
                        this feature, use "configure --without-lmdb".
                        [RT #39837]
2016-07-21 11:14:16 -07:00
Mukund Sivaraman
a16f42441a Use GCC builtin for clz in RPZ lookup code (#42818)
(cherry picked from commit 27038b159b)
2016-07-11 10:05:06 +05:30
Mark Andrews
c2a6e9d347 4404. [misc] Allow krb5-config to be used when configuring gssapi.
[RT #42580]

(cherry picked from commit c8fb7e488a)
2016-07-04 15:47:27 +10:00
Mark Andrews
e8555412f1 4402. [bug] protoc-c is now a hard requirement for --enable-dnstap.
(cherry picked from commit d75bbd0d98)
2016-06-29 09:31:15 +10:00
Mark Andrews
4840ef4581 4395 [bug] Improve out-of-tree installation of python modules.
[RT #42586]
2016-06-24 12:20:37 +10:00
Mark Andrews
7d262a3647 4394. [func] Add rndc command "dnstap-reopen" to close and
reopen dnstap output filed. [RT #41803]
2016-06-24 09:37:04 +10:00
Evan Hunt
0187198379 [master] prevent spurious warning when configuring native-pkcs11 2016-06-02 10:27:29 -07:00
Mark Andrews
0be436fc39 4364. [port] freebsd: add -Wl,-E to loader flags [RT #41690] 2016-05-12 10:00:00 +10:00
Evan Hunt
28053af04c [master] nanosecond-accurate file modification times
4361.	[cleanup]	Where supported, file modification times returned
			by isc_file_getmodtime() are now accurate to the
			nanosecond. [RT #41968]
2016-05-05 12:22:26 -07:00
Witold Krecicki
19d80ce584 4358. [test] Added American Fuzzy Lop harness that allows
feeding fuzzed packets into BIND.
			[RT #41723]
2016-05-05 11:49:38 +02:00
Evan Hunt
470af54b4e [master] more python2/3 compatibility fixes; use setup.py to install 2016-04-29 14:40:45 -07:00
Evan Hunt
f6096b958c [master] dnssec-keymgr
4349.   [contrib]       kasp2policy: A python script to create a DNSSEC
                        policy file from an OpenDNSSEC KASP XML file.

4348.	[func]		dnssec-keymgr: A new python-based DNSSEC key
			management utility, which reads a policy definition
			file and can create or update DNSSEC keys as needed
			to ensure that a zone's keys match policy, roll over
			correctly on schedule, etc.  Thanks to Sebastian
			Castro for assistance in development. [RT #39211]
2016-04-28 00:16:01 -07:00
Evan Hunt
fb7e1d0e71 [master] fix build error due to incorrect readline probing 2016-04-14 13:46:15 -07:00
Evan Hunt
d3f21e063a [master] fix AES configuration for cross-compiling 2016-03-22 18:01:01 -07:00
Evan Hunt
cf24cbd837 [master] adaptive RW locks
3440.	[performance]	Implement adaptive read-write locks, reducing the
			overhead of locks that are only held briefly.
			[RT #37329]
2016-03-22 17:59:21 -07:00
Mark Andrews
6e3839e1bb don't run 'make clean' if --no-create is specified 2016-03-18 08:28:21 +11:00
Mukund Sivaraman
9da98335c1 Code cleanups (#41656) 2016-03-04 12:18:17 +05:30
Mark Andrews
e09b40bec4 s/use_zlib/with_zlib/ to be consistent 2016-03-02 12:37:41 +11:00
Mark Andrews
a97185d9e0 with-zlib should be auto but forced on by default for developers 2016-03-02 12:33:36 +11:00
Mukund Sivaraman
d1dbf6b20f Use __built_expect() where available (#41411) 2016-02-01 08:59:49 +05:30
Evan Hunt
f02c22d58a [master] add uname data to named -V
4308.	[func]		Added operating system details to "named -V"
			output. [RT #41452]
2016-01-30 11:06:58 -08:00
Mark Andrews
a12a21a843 bracket mismatch; window openssl version check 2015-12-06 23:05:47 +11:00