Commit graph

1756 commits

Author SHA1 Message Date
Evan Hunt
a3cee5460d Plug a geoip leak and some cleanup [RT #43106]
(cherry picked from commit a26a62cef2)
(cherry picked from commit af326c2e3f)
2016-08-30 00:38:39 +05:30
Mark Andrews
025b1a2396 remove spurious 'i'
(cherry picked from commit e1f590a59a)
2016-08-26 13:43:30 +10:00
Tinderbox User
26beb2a21d update copyright notice / whitespace 2016-08-25 23:46:50 +00:00
Mark Andrews
a33f9a7eff 4453. [bug] Prefetching of DS records failed to update their
RRSIGs. [RT #42865]

(cherry picked from commit f431bf02a6)
2016-08-25 09:55:08 +10:00
Tinderbox User
9831d2c6e5 update copyright notice / whitespace 2016-08-19 01:23:59 +00:00
Mark Andrews
e0449a0a4a 4450. [port] Provide more nuanced HSM support which better matches
the specific PKCS11 providers capabilities. [RT #42458]

(cherry picked from commit 8ee6f289d8)
2016-08-19 08:25:54 +10:00
Tinderbox User
83b6462693 update copyright notice / whitespace 2016-08-17 23:46:31 +00:00
Evan Hunt
845f67f505 [v9_10] fix merge error 2016-08-17 12:34:25 -07:00
Evan Hunt
ddef16e1d9 [v9_10] isc_errno_toresult()
4445.	[cleanup]	isc_errno_toresult() can now be used to call the
			formerly private function isc__errno2result().
			[RT #43050]
2016-08-17 11:32:16 -07:00
Tinderbox User
5591cf2635 update copyright notice / whitespace 2016-08-16 23:46:14 +00:00
Mukund Sivaraman
418b43028e Fix RPZ CIDR tree insertion bug (#43035)
(cherry picked from commit 131307a70e)
2016-08-15 17:07:06 +05:30
Tinderbox User
4858334554 update copyright notice / whitespace 2016-08-11 23:46:19 +00:00
Mark Andrews
db46366e36 4434. [protocol] Return EDNS EXPIRE option for master zones in addition
to slave zones. [RT #43008]

(cherry picked from commit bf2238b064)
2016-08-12 09:33:30 +10:00
Francis Dupont
7a4d54f6c6 Merged rt42840_10 (tcp-only backport) 2016-08-11 14:28:22 +02:00
Tinderbox User
22fabcccbd update copyright notice / whitespace 2016-08-10 23:46:10 +00:00
Mark Andrews
1d62f4c0ba 4432. [testing] Hide rndc output on expected failures in logfileconfig
system test. [RT #27996]

(cherry picked from commit 12895c8d6f)
2016-08-10 13:11:08 +10:00
Tinderbox User
afc53628ef update copyright notice / whitespace 2016-08-09 00:26:15 +00:00
Mark Andrews
73b4cbb1ff 4431. [bug] named-checkconf now checks the rate-limit clause.
[RT #42970]

(cherry picked from commit 632e67baa6)
2016-08-08 23:55:03 +10:00
Mark Andrews
a191925df6 4430. [bug] Lwresd died if a search list was not defined.
Found by 0x710DDDD At Alibaba Security. [RT #42895]

(cherry picked from commit 3146be6fd6)
2016-08-08 10:30:16 +10:00
Tinderbox User
7a90fc75f5 update copyright notice / whitespace 2016-07-22 23:48:53 +00:00
Mark Andrews
aa1a7e1e58 4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
to provide feedback to the trust-anchor administrators
                        about how key rollovers are progressing as per
                        draft-ietf-dnsop-edns-key-tag-02.  This can be
                        disabled using 'trust-anchor-telemetry no;'.
                        [RT #40583]

(cherry picked from commit f20179857a)
2016-07-22 20:16:59 +10:00
Mark Andrews
53b5a45dd2 add more DNS64 default exclude acl tests
(cherry picked from commit d147d56227)
2016-07-13 10:58:37 +10:00
Tinderbox User
390881b8d4 update copyright notice / whitespace 2016-07-11 23:48:11 +00:00
Mark Andrews
c061a3d842 4409. [bug] DNS64 should exlude mapped addresses by default when
a exclude acl is not defined. [RT #42810]
2016-07-11 14:16:15 +10:00
Tinderbox User
c0e570397c update copyright notice / whitespace 2016-07-07 23:47:53 +00:00
Mark Andrews
c465ac56e0 4406. [bug] getrrsetbyname with a non absolute name could
trigger a infinite recursion bug in lwresd
                        and named with lwres configured if when combined
                        with a search list entry the resulting name is
                        too long. [RT #42694]

(cherry picked from commit 38cc2d14e2)
2016-07-07 12:53:45 +10:00
Mark Andrews
c057888f93 ignore bin/tests/system/rndc/ns4/named.conf
(cherry picked from commit 3c88f741c6)
2016-07-07 09:57:18 +10:00
Tinderbox User
96f78dd40a update copyright notice / whitespace 2016-07-06 23:48:14 +00:00
Mark Andrews
aac09340ee 4405. [bug] Change 4342 introduced a regression where you could
not remove a delegation in a NSEC3 signed zone using
                        OPTOUT via nsupdate. [RT #42702]

(cherry picked from commit d811a7d9ef)
2016-07-06 10:20:16 +10:00
Jeremy C. Reed
1b101fe1d7 Use test random file for tsig test using keygen
This is for #42565: tsig test hangs and KEYGEN and randomdev

It was okayed there and is a trivial fix. No changes log needed.
2016-06-23 18:56:38 -04:00
Mark Andrews
71b099bf2e 4387. [bug] Change 4336 was not complete leading to SERVFAIL
being return as NS records expired. [RT #42683]

(cherry picked from commit b56bd9b59f)
2016-06-22 15:44:20 +10:00
Mark Andrews
76d34484c3 report subtest number 2016-06-18 00:45:20 +10:00
Mark Andrews
8ca20861f8 4384. [bug] Change 4256 accidentally disabled logging of the
rndc command. [RT #42654]

(cherry picked from commit 948fe5822b)
2016-06-18 00:28:51 +10:00
Mark Andrews
5913ffb425 report subtest number
(cherry picked from commit 3f0de196f7)
2016-06-17 10:51:10 +10:00
Tinderbox User
9724fd91cb update copyright notice / whitespace 2016-06-14 23:45:50 +00:00
Mark Andrews
0d3fba1448 do not overflow exit status. [RT #42643]
(cherry picked from commit 3635d8f910)
2016-06-14 14:22:51 +10:00
Evan Hunt
c39b7042ba [v9_10] spelling 2016-06-09 23:08:35 -07:00
Tinderbox User
180ab2aef7 update copyright notice / whitespace 2016-05-27 23:45:44 +00:00
Mark Andrews
19a4c5035c 4379. [bug] An INSIST could be triggered if a zone contains
RRSIG records with expiry fields that loop
                        using serial number arithmetic. [RT #40571]

(cherry picked from commit 9268297baa)
2016-05-27 15:25:11 +10:00
Evan Hunt
0017ccff05 [v9_10] use $DIG not dig 2016-05-26 18:39:20 -07:00
Mark Andrews
59c9c592c5 4377. [bug] Don't reuse zero TTL responses beyond the current
client set (excludes ANY/SIG/RRSIG queries).
                        [RT #42142]

(cherry picked from commit aabcb1fde0)
2016-05-27 10:00:36 +10:00
Tinderbox User
5cebccfd7e update copyright notice / whitespace 2016-05-05 23:46:25 +00:00
Mark Andrews
525dc475ee 4360. [bug] Silence spurious 'bad key type' message when there is
a existing TSIG key. [RT #42195]

(cherry picked from commit 5ac427050f)
2016-05-05 22:42:56 +10:00
Mark Andrews
a78ebc0302 4359. [bug] Inherited 'also-notify' lists were not being checked
by named-checkconf. [RT #42174]

(cherry picked from commit 594d15df25)
2016-05-05 22:01:27 +10:00
Tinderbox User
7603a135ff update copyright notice / whitespace 2016-05-04 23:46:09 +00:00
Evan Hunt
707bcb08a7 [v9_10] log message when using ISC DLV
4352.	[cleanup]	The ISC DNSSEC Lookaside Validation (DLV) service
			is scheduled to be disabled in 2017.  A warning is
			now logged when named is configured to use it,
			either explicitly or via "dnssec-lookaside auto;"
			[RT #42207]
2016-05-04 14:38:01 -07:00
Tinderbox User
45d574e0b5 update copyright notice / whitespace 2016-04-30 23:47:22 +00:00
Evan Hunt
3c0195d847 [v9_10] Merge branch 'v9_10' of ssh://repo.isc.org/proj/git/prod/bind9 into v9_10 2016-04-30 15:58:23 -07:00
Mark Andrews
be133c6ad7 support truncated hashes longer that 7
(cherry picked from commit 5b291f619e312689e25de8fd5662b0b9d4a62679)
2016-05-01 07:48:31 +10:00
Evan Hunt
7868ff8b61 [v9_10] fix merge error in coverage test 2016-04-29 19:06:29 -07:00