Commit graph

4579 commits

Author SHA1 Message Date
Evan Hunt
f687e639f0 [master] [rt36786] use INSTALL_PROGRAM for shared libs
3947.	[cleanup]	Set the executable bit on libraries when using
			libtool. [RT #36786]
2014-09-05 10:24:20 -07:00
Evan Hunt
523f3d6302 [master] improve python probing
3946.	[cleanup]	Improved "configure" search for a python interpreter.
			[RT #36992]
2014-09-05 10:20:26 -07:00
Mark Andrews
2fa1fc5332 3945. [bug] Invalid wildcard expansions could be incorrectly
accepted by the validator. [RT #37093]
2014-09-05 12:10:55 +10:00
Evan Hunt
c9e976dc43 [master] [rt37057] server-id tests
3944.	[test]		Added a regression test for "server-id". [RT #37057]
2014-09-04 18:18:36 -07:00
Tinderbox User
948c80ffa8 update copyright notice 2014-09-04 23:45:24 +00:00
Evan Hunt
a878301981 [master] servfail cache
3943.	[func]		SERVFAIL responses can now be cached for a
			limited time (configured by "servfail-ttl",
			default 10 seconds, limit 30). This can reduce
			the frequency of retries when an authoritative
			server is known to be failing, e.g., due to
			ongoing DNSSEC validation problems. [RT #21347]
2014-09-03 23:28:14 -07:00
Mark Andrews
fec7998314 3942. [bug] Wildcard responses from a optout range should be
marked as insecure. [RT #37072]
2014-09-04 13:57:50 +10:00
Evan Hunt
7ae9399897 [master] add version number to ARM
3941.	[doc]		Include the BIND version number in the ARM. [RT #37067]
2014-09-03 20:29:24 -07:00
Evan Hunt
3d066288ad [master] [rt37069] update NTA limit to a week
3940.	[func]		"rndc nta" now allows negative trust anchors to be
			set for up to one week. [RT #37069]
2014-09-03 19:00:03 -07:00
Mark Andrews
74717eef53 3939. [func] Improve UPDATE forwarding performance by allowing TCP
connections to be shared. [RT #37039]
2014-09-04 10:37:45 +10:00
Evan Hunt
2548678376 [master] note libGeoIP requirement in CHANGES 2014-09-02 12:56:54 -07:00
Evan Hunt
c5379f1976 [master] placeholder 2014-08-30 11:55:23 -07:00
Evan Hunt
f5c24a7f48 [master] add better servfail logging
3937.	[func]		Added some debug logging to better indicate the
			conditions causing SERVFAILs when resolving.
			[RT #35538]
2014-08-28 22:37:55 -07:00
Evan Hunt
d46855caed [master] ECS authoritative support
3936.	[func]		Added authoritative support for the EDNS Client
			Subnet (ECS) option.

			ACLs can now include "ecs" elements which specify
			an address or network prefix; if an ECS option is
			included in a DNS query, then the address encoded
			in the option will be matched against "ecs" ACL
			elements.

			Also, if an ECS address is included in a query,
			then it will be used instead of the client source
			address when matching "geoip" ACL elements.  This
			behavior can be overridden with "geoip-use-ecs no;".

			When "ecs" or "geoip" ACL elements are used to
			select a view for a query, the response will include
			an ECS option to indicate which client network the
			answer is valid for.

			(Thanks to Vincent Bernat.) [RT #36781]
2014-08-28 22:05:57 -07:00
Evan Hunt
180319f572 [master] fix geoip asnum matching
3935.	[bug]		"geoip asnum" ACL elements would not match unless
			the full organization name was specified.  They
			can now match against the AS number alone (e.g.,
			AS1234). [RT #36945]
2014-08-28 21:40:32 -07:00
Mark Andrews
9ba4efa4ac spelling 2014-08-29 14:38:23 +10:00
Mark Andrews
7c73ac5e13 3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
sit-secrets documentation. [RT #36980]
2014-08-29 14:35:21 +10:00
Evan Hunt
0c2313eb36 [master] fixes to checkconf test, HIP casecompare
3933.	[bug]		Corrected the implementation of dns_rdata_casecompare()
			for the HIP rdata type.  [RT #36911]

3932.	[test]		Improved named-checkconf tests. [RT #36911]
2014-08-27 21:36:13 -07:00
Mark Andrews
1164997311 3931. [cleanup] Cleanup how dlz grammer is defined. [RT #36879] 2014-08-26 15:01:29 +10:00
Evan Hunt
74745c760c [master] "rndc nta -r" could hang
3930.	[bug]		"rndc nta -r" could cause a server hang if the
			NTA was not found. [RT #36909]
2014-08-25 18:01:26 -07:00
Mark Andrews
905ba39e10 3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963] 2014-08-26 08:27:24 +10:00
Tinderbox User
fea81a5e0e update copyright notice 2014-08-22 23:45:27 +00:00
Evan Hunt
087b3e8d90 [master] add to rndc test
3928.	[test]		Improve rndc system test. [RT #36898]
2014-08-22 16:41:57 -07:00
Evan Hunt
24aaa04401 [master] register pkcs11 error codes in dig
3927.	[bug]		dig: report PKCS#11 error codes correctly when
			compiled with --enable-native-pkcs11. [RT #36956]
2014-08-22 10:40:43 -07:00
Jeremy C. Reed
a0707b6acf [36877] added doc about geoip-directory 2014-08-22 08:36:33 -05:00
Mark Andrews
840d6a4614 3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917 2014-08-22 16:32:19 +10:00
Mark Andrews
251be6e994 add [ 2014-08-22 16:29:40 +10:00
Mark Andrews
d4859b0b2a 3924. [bug] Improve 'rndc addzone' error reporting. RT #35187 2014-08-22 16:18:49 +10:00
Mark Andrews
53f91cbd80 3923. [bug] Sanity check the xml2-config output. [RT #22246] 2014-08-22 16:10:43 +10:00
Evan Hunt
eeb13c7cd2 [master] don't clear signatures from zone cuts
3922.	[bug]		When resigning, dnssec-signzone was removing
			all signatures from delegation nodes. It now
			retains	DS and (if applicable) NSEC signatures.
			[RT #36946]
2014-08-21 22:56:12 -07:00
Mark Andrews
cef76ee5bd 3921. [bug] AD was inappopriately set on RPZ responses. [RT #36833] 2014-08-22 15:45:40 +10:00
Mark Andrews
3d66a979b5 3919. [bug] dig: continue to next line if a address lookup fails
in batch mode. [RT #36755]
2014-08-22 15:40:43 +10:00
Evan Hunt
e0421bf2c5 [master] doc masterfile-style
3919.	[doc]		Added doc for masterfile-style. [RT #36823]
2014-08-21 22:15:36 -07:00
Mark Andrews
d90344224a 3918. [doc] Update check-spf documentation. [RT #36910] 2014-08-22 11:49:58 +10:00
Mark Andrews
f5695ad0e1 3917. [bug] dig, nslookup and host now continue on names that are
too long after applying a search list elements.
                        [RT #36892]
2014-08-21 18:05:55 +10:00
Mark Andrews
58f1ac8dad 3916. [contrib] zone2sqlite checked wrong result code. Address
compiler warnings. [RT #36931]
2014-08-20 23:14:03 +10:00
Mark Andrews
5244e505ad 3915 [bug] Address a assertion if a route event arrived while
shutting down. [RT #36887]
2014-08-18 13:17:35 +10:00
Evan Hunt
4499a6a306 [master] standardize [RT #<number>] formatting 2014-08-14 14:09:45 -07:00
Evan Hunt
cfe32752a6 [master] [36737] allow zero-length URI and CAA fields
3914.	[bug]		Allow the URI target and CAA value fields to
			be zero length. [RT #36737]
2014-08-06 17:40:42 -07:00
Mark Andrews
493f3eb297 3913. [bug] Address race issue in dispatch. [RT #36731] 2014-08-06 18:49:53 +10:00
Mark Andrews
c5734964e6 3912. [bug] Address some unrecoverable lookup failures. [RT #36330] 2014-08-06 14:18:04 +10:00
Evan Hunt
eaa2277753 [master] whitespace 2014-08-05 19:33:46 -07:00
Evan Hunt
d0ffef73fd [35925] add more EDNS EXPIRE doc, clarify CHANGES note 3911 2014-08-05 19:32:46 -07:00
Mark Andrews
43b9737b11 3911. [func] Implement EDNS EXPIRE option client side. [RT #35925] 2014-08-06 11:50:40 +10:00
Mukund Sivaraman
a338c2d947 [36720] Free event early (fixes race to free)
Patch contributed by yhu2 <yadi.hu@windriver.com>.
2014-08-05 17:08:14 +05:30
Evan Hunt
fffcc1b135 [master] fix CHANGES number 2014-08-02 21:10:42 -07:00
Mark Andrews
3e90f6c373 3910. [bug] When computing the number of elements required for a
acl count_acl_elements could have a short count leading
                        to a assertion failure.  Also zero out new acl elements
                        in dns_acl_merge.  [RT #36675]
2014-08-03 10:05:02 +10:00
Mark Andrews
c38341ec43 3908. [bug] rndc now differentiates between a zone in multiple
views and a zone that doesn't exist at all. [RT #36691]
2014-08-02 14:43:26 +10:00
Mark Andrews
d96f74a3cb 3907. [cleanup] Alphabetise rndc help. [RT#36683] 2014-08-01 10:31:41 +10:00
Evan Hunt
7712d1660a [master] [rt36642] fix URI RR format
3906.	[protocol]	Update URI record format to comply with
			draft-faltstrom-uri-08. [RT #36642]
2014-07-30 20:41:59 -07:00