Brian Wellington
f15af68028
negative responses to cd queries should work now.
2000-07-27 18:42:08 +00:00
David Lawrence
15a4474541
word wrap copyright notice at column 70
2000-07-27 09:55:03 +00:00
David Lawrence
10885eeaae
I was mistaken, FreeBSD needs the stddef.h include
2000-07-27 02:11:19 +00:00
David Lawrence
febf5f8b55
355. [func] Added isc_dir_createunique(), similar to mkdtemp().
2000-07-27 02:04:36 +00:00
Brian Wellington
98d010a24a
If a negative insecurity proof succeeds, set all of the rdatasets in the
...
authority section of the message to non-pending, so that the response
has the ad bit set.
2000-07-27 01:26:15 +00:00
Andreas Gustafsson
4d9b99ccb2
the client control event should be a server event,
...
not a DNS library event
2000-07-26 23:45:55 +00:00
Michael Sawyer
a53151d995
Fix up some of the sanatize code and make kits correctly
2000-07-26 23:40:22 +00:00
Mark Andrews
c9b176a528
353. [bug] double incrememnt in lwrew/gethost.c:copytobuf().
...
(RT# 187)
2000-07-26 22:52:01 +00:00
Andreas Gustafsson
371827c1e0
added missing DNSSAFE license file
2000-07-26 22:41:28 +00:00
David Lawrence
976f44baa3
needed isc/string.h for memset() prototype
2000-07-26 22:36:34 +00:00
David Lawrence
7b04a0e1df
does not need stddef.h, tell emacs to use C mode on the file
2000-07-26 21:56:28 +00:00
David Lawrence
951c247f29
style lint
2000-07-26 21:44:34 +00:00
David Lawrence
f6f4d7ee0f
separate the ISC_R_NRESULTS macro from those that define result codes, for
...
clarity
2000-07-26 21:34:11 +00:00
David Lawrence
894a2f61c9
minor style issue -- missing periods at ends of sentences/phrasesin comments.
2000-07-26 21:32:57 +00:00
David Lawrence
ef4010aae7
cross-reference error strings with their result.h macros
2000-07-26 21:31:52 +00:00
Michael Graff
6d016e34bf
minor formatting issue -- kill trailing whitespace
2000-07-26 20:56:39 +00:00
Michael Graff
bfab56849d
Revamp memory stuff.
...
Now, if you define ISC_MEM_TRACKLINES, and set isc_mem_debugging = 2 first
thing in main(), isc_mem_stats() will dump the file/line where any leaking
allocations were made.
2000-07-26 19:06:20 +00:00
Michael Sawyer
761a1c3761
Add sanitizer and hide per-master key code behind sanitizing #ifdefs
2000-07-26 18:47:43 +00:00
Andreas Gustafsson
a32738e3e4
352. [bug] Race condition in dns_client_t startup could cause
...
an assertion failure.
2000-07-26 17:39:12 +00:00
Andreas Gustafsson
97684ed87d
new functions isc_task_getname() and isc_task_gettag(),
...
to be used for debugging
2000-07-26 17:11:14 +00:00
James Brister
6e1de1f55b
When unsetting option strings pointer wasn't being NULLed.
2000-07-26 15:21:04 +00:00
Brian Wellington
5b0413f993
Call isc_log_wouldlog to potentially avoid extra work in validator_log.
2000-07-26 00:50:02 +00:00
Brian Wellington
53dc771403
The CD bit changes broke insecurity proofs. They work again.
2000-07-26 00:03:18 +00:00
Brian Wellington
6dc130c7c9
351. [bug] Constructing a response with rcode SERVFAIL to a TSIG
...
signed query could crash the server.
2000-07-25 22:51:46 +00:00
Andreas Gustafsson
ec34015017
dns_c_view_getalsonotify() should attach the list
...
like both the global and per-zone counterparts now do
2000-07-25 22:38:29 +00:00
Brian Wellington
94ec6e9a1a
whitespace fixes
2000-07-25 22:04:33 +00:00
Brian Wellington
69a761838b
Support for the cd (checking disabled) bit. Also remove data from the
...
cache if validation fails.
2000-07-25 22:03:25 +00:00
Brian Wellington
7e0d7323d7
Detach from the iplist obtained from *_getalsonotify.
2000-07-25 20:26:11 +00:00
James Brister
b28affc652
Added missing prototypes.
2000-07-25 20:17:52 +00:00
James Brister
07919f7bb8
Do a dns_c_iplist_attach first when returning the iplist from also-notify.
2000-07-25 20:16:00 +00:00
Michael Sawyer
8cfe1a4846
Typo correction in DNS_MAX/MIN_RETRY usage
...
Don't #define mins/maxes if they are already defined. (per MG)
2000-07-25 19:29:00 +00:00
James Brister
d4ab9cd94f
348. [func] New named.conf boolean values 'glue-from-auth' and
...
'glue-from-cache' now supported in view and global
options statement.
2000-07-25 17:55:43 +00:00
Brian Wellington
969f24b04c
dns_dnssec_verifymessage should make sure that it's verifying with the right
...
key (which should be the case anyway, but it never hurts to check). Also
fix a memory leak and change a few _tostruct() calls to not allocate memory.
2000-07-25 17:12:00 +00:00
Andreas Gustafsson
81b94e091c
added new fetch option DNS_FETCHOPT_NOVALIDATE
2000-07-25 17:03:21 +00:00
Brian Wellington
60783293cc
If a failed positive validation led us to try an insecurity proof, and the
...
insecurity proof also failed, the validator event should normally contain
the error from the positive validation.
2000-07-25 01:24:18 +00:00
Andreas Gustafsson
398bdb2710
in deleterdataset(), set the DNS_DBADD_FORCE flag
...
when adding the deletion rdataset so that rdatasets can be deleted
regardless of their trust level
2000-07-25 01:19:51 +00:00
Andreas Gustafsson
9037893f90
add() assumed dns_trust_authsecure is the highest trust level,
...
but this is no longer the case. Thus, the DNS_DBADD_FORCE option did not take effect
if the existing data was at level dns_trust_ultimate. Since the DNS_DBADD_FORCE
option is currently used only with cached data, no actual harm has been done.
2000-07-25 01:06:01 +00:00
Andreas Gustafsson
56f8b1c404
the "done" variable reintroduced in the previous revision
...
was not initialized
2000-07-24 23:55:19 +00:00
Andreas Gustafsson
516b9de0d9
eliminated needless code duplication between
...
the yea_and_nay and notify_setting grammar rules
2000-07-24 23:32:31 +00:00
Brian Wellington
687d363dea
The "Ensures" condition for dns_db_deleterdataset was obviously wrong.
2000-07-24 23:10:50 +00:00
Michael Graff
ef653fbdb1
implement 'notify [ yes | no | explicit ]'
2000-07-24 22:59:44 +00:00
Andreas Gustafsson
6f12e3ca45
Restored the "done" variable removed in 1.150 and made
...
the result code check after the loop deal with ISC_R_SUCCESS
instead. The previous fix had the side effect of keeping multiple
answers to non-ANY queries, causing assertion failures in cache_name()
which is not prepared to deal with this situation
2000-07-24 20:10:26 +00:00
Brian Wellington
1b1775921e
If a message is built for one host, which isn't powered on, the tsig object
...
wasn't removed until the xfer object was deleted, so when the xfer tried the
second master, it asserted.
2000-07-24 05:30:30 +00:00
Michael Sawyer
2f0bfccf31
Remove dead REQUIRE
2000-07-22 00:40:39 +00:00
Michael Sawyer
f592550498
Add comments and make a slight REQUIRE change
2000-07-22 00:27:40 +00:00
Michael Sawyer
0371079513
Wire up key option in masters line.
2000-07-21 23:13:59 +00:00
Brian Wellington
c27767a7b9
tsig keys were not properly ref counted
2000-07-21 23:00:31 +00:00
Brian Wellington
3b2efab212
There's no real difference between the "sring" and "dring" parameters, so
...
call them "ring1" and "ring2" instead. Also remove a bogus assertion.
2000-07-21 22:38:31 +00:00
Brian Wellington
2483a850e8
The call to dns_tsig_verify doesn't need a keyring.
2000-07-21 22:22:55 +00:00
Andreas Gustafsson
5aa7bca733
dns_rbt_printnode() formatted the node name
...
into a buffer of 255 char pointers, not 255 chars; changed it
to use dns_name_format()
2000-07-21 22:08:42 +00:00