upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-02-26 11:32:01 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
22724 commits 18 branches 854 tags 440 MiB
Commit graph

6794 commits

Author SHA1 Message Date
Mark Andrews
76a17033db also fix the expected count 2014-09-07 20:24:59 +10:00
Mark Andrews
48179343c2 reduce number of nsupdates being simultaeously forked 2014-09-07 20:24:14 +10:00
Mark Andrews
8aa098c633 update copyrights 2014-09-06 09:38:48 +10:00
Tinderbox User
5fa6a064b8 regen master 2014-09-05 19:26:47 +00:00
Evan Hunt
1aa8b80767 [master] fix warnings/doc errors 
- possible use before assignment in query.c
- missing <varlistentry> in ARM
 2014-09-04 18:35:30 -07:00
Evan Hunt
c9e976dc43 [master] [rt37057] server-id tests 
3944.	[test]		Added a regression test for "server-id". [RT #37057]
 2014-09-04 18:18:36 -07:00
Tinderbox User
948c80ffa8 update copyright notice 2014-09-04 23:45:24 +00:00
Evan Hunt
a878301981 [master] servfail cache 
3943.	[func]		SERVFAIL responses can now be cached for a
			limited time (configured by "servfail-ttl",
			default 10 seconds, limit 30). This can reduce
			the frequency of retries when an authoritative
			server is known to be failing, e.g., due to
			ongoing DNSSEC validation problems. [RT #21347]
 2014-09-03 23:28:14 -07:00
Mark Andrews
fec7998314 3942. [bug] Wildcard responses from a optout range should be 
marked as insecure. [RT #37072]
 2014-09-04 13:57:50 +10:00
Evan Hunt
c3d0221104 [master] oops, nta lifetime change broke dnssec test 2014-09-03 20:51:32 -07:00
Evan Hunt
3d066288ad [master] [rt37069] update NTA limit to a week 
3940.	[func]		"rndc nta" now allows negative trust anchors to be
			set for up to one week. [RT #37069]
 2014-09-03 19:00:03 -07:00
Mark Andrews
74717eef53 3939. [func] Improve UPDATE forwarding performance by allowing TCP 
connections to be shared. [RT #37039]
 2014-09-04 10:37:45 +10:00
Mark Andrews
3547641f76 error message was not being returned 2014-08-30 20:26:48 +10:00
Mark Andrews
22e0fcb055 conditional UNUSED(task) 2014-08-30 15:47:25 +10:00
Mark Andrews
1a63fb1d14 update copyrights 2014-08-30 12:27:49 +10:00
Tinderbox User
3278ff814d update copyright notice 2014-08-29 23:45:22 +00:00
Mark Andrews
25c5d8e89e #include isc/print.h> 2014-08-29 16:17:35 +10:00
Evan Hunt
f5c24a7f48 [master] add better servfail logging 
3937.	[func]		Added some debug logging to better indicate the
			conditions causing SERVFAILs when resolving.
			[RT #35538]
 2014-08-28 22:37:55 -07:00
Evan Hunt
d46855caed [master] ECS authoritative support 
3936.	[func]		Added authoritative support for the EDNS Client
			Subnet (ECS) option.

			ACLs can now include "ecs" elements which specify
			an address or network prefix; if an ECS option is
			included in a DNS query, then the address encoded
			in the option will be matched against "ecs" ACL
			elements.

			Also, if an ECS address is included in a query,
			then it will be used instead of the client source
			address when matching "geoip" ACL elements.  This
			behavior can be overridden with "geoip-use-ecs no;".

			When "ecs" or "geoip" ACL elements are used to
			select a view for a query, the response will include
			an ECS option to indicate which client network the
			answer is valid for.

			(Thanks to Vincent Bernat.) [RT #36781]
 2014-08-28 22:05:57 -07:00
Evan Hunt
180319f572 [master] fix geoip asnum matching 
3935.	[bug]		"geoip asnum" ACL elements would not match unless
			the full organization name was specified.  They
			can now match against the AS number alone (e.g.,
			AS1234). [RT #36945]
 2014-08-28 21:40:32 -07:00
Mark Andrews
7c73ac5e13 3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve 
sit-secrets documentation. [RT #36980]
 2014-08-29 14:35:21 +10:00
Evan Hunt
0c2313eb36 [master] fixes to checkconf test, HIP casecompare 
3933.	[bug]		Corrected the implementation of dns_rdata_casecompare()
			for the HIP rdata type.  [RT #36911]

3932.	[test]		Improved named-checkconf tests. [RT #36911]
 2014-08-27 21:36:13 -07:00
Mark Andrews
1164997311 3931. [cleanup] Cleanup how dlz grammer is defined. [RT #36879] 2014-08-26 15:01:29 +10:00
Evan Hunt
74745c760c [master] "rndc nta -r" could hang 
3930.	[bug]		"rndc nta -r" could cause a server hang if the
			NTA was not found. [RT #36909]
 2014-08-25 18:01:26 -07:00
Mark Andrews
905ba39e10 3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963] 2014-08-26 08:27:24 +10:00
Evan Hunt
06f329afe1 [master] silence coverity 2014-08-22 18:19:09 -07:00
Tinderbox User
cefd74ae81 regen master 2014-08-23 01:06:12 +00:00
Tinderbox User
fea81a5e0e update copyright notice 2014-08-22 23:45:27 +00:00
Evan Hunt
087b3e8d90 [master] add to rndc test 
3928.	[test]		Improve rndc system test. [RT #36898]
 2014-08-22 16:41:57 -07:00
Evan Hunt
24aaa04401 [master] register pkcs11 error codes in dig 
3927.	[bug]		dig: report PKCS#11 error codes correctly when
			compiled with --enable-native-pkcs11. [RT #36956]
 2014-08-22 10:40:43 -07:00
Jeremy C. Reed
f3150c99d7 add missing -Q from synopsis 2014-08-22 08:22:17 -05:00
Mark Andrews
840d6a4614 3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917 2014-08-22 16:32:19 +10:00
Mark Andrews
d4859b0b2a 3924. [bug] Improve 'rndc addzone' error reporting. RT #35187 2014-08-22 16:18:49 +10:00
Evan Hunt
eeb13c7cd2 [master] don't clear signatures from zone cuts 
3922.	[bug]		When resigning, dnssec-signzone was removing
			all signatures from delegation nodes. It now
			retains	DS and (if applicable) NSEC signatures.
			[RT #36946]
 2014-08-21 22:56:12 -07:00
Mark Andrews
cef76ee5bd 3921. [bug] AD was inappopriately set on RPZ responses. [RT #36833] 2014-08-22 15:45:40 +10:00
Mark Andrews
3d66a979b5 3919. [bug] dig: continue to next line if a address lookup fails 
in batch mode. [RT #36755]
 2014-08-22 15:40:43 +10:00
Tinderbox User
5165c59007 update copyright notice 2014-08-21 23:45:22 +00:00
Mark Andrews
f5695ad0e1 3917. [bug] dig, nslookup and host now continue on names that are 
too long after applying a search list elements.
                        [RT #36892]
 2014-08-21 18:05:55 +10:00
Tinderbox User
e2eaaf8015 update copyright notice 2014-08-18 23:45:21 +00:00
Mark Andrews
a7d4d52874 quiet mode is -q 2014-08-18 19:38:43 +10:00
Mark Andrews
5244e505ad 3915 [bug] Address a assertion if a route event arrived while 
shutting down. [RT #36887]
 2014-08-18 13:17:35 +10:00
Tinderbox User
a24330c480 regen master 2014-08-16 01:06:20 +00:00
Tinderbox User
aebd0e85bf update copyright notice 2014-08-15 23:45:20 +00:00
Jeremy C. Reed
b0af7cbe92 SEE ALSO cleanup in pkcs11 manuals 
This sorts them, adds missing from one manual, uses correct section number,
and gets rid of a trailing comma.

Okayed via RT ticket 36830.
 2014-08-15 11:39:55 -05:00
Jeremy C. Reed
821350367e fix typos or misspellings 2014-08-15 10:35:31 -05:00
Jeremy C. Reed
2f5461d23b remove the now gone -all switch from flushtree 
This is for RT ticket #36832.
While here update manual page date.
 2014-08-15 09:28:37 -05:00
Jeremy C. Reed
474faea7dd change ecgen to keygen in a few places in manpage 
I didn't create a CHANGES entry for this as it was trivial and
the name of the installed manual didn't change.
This is for RT ticket #36830.
 2014-08-15 09:16:50 -05:00
Tinderbox User
cd14665cdf update copyright notice 2014-08-07 23:45:19 +00:00
Evan Hunt
cfe32752a6 [master] [36737] allow zero-length URI and CAA fields 
3914.	[bug]		Allow the URI target and CAA value fields to
			be zero length. [RT #36737]
 2014-08-06 17:40:42 -07:00
Tinderbox User
1e7501fe07 update copyright notice 2014-08-06 23:45:23 +00:00