Commit graph

7574 commits

Author SHA1 Message Date
Mark Andrews
c61bf9e3c0 4790. [bug] nsupdate could trigger a require when sending a
update to the second address of the server.
                        [RT #45731]

(cherry picked from commit 2bbca9594f)
2017-10-26 00:31:10 +11:00
Evan Hunt
2586526a0a [v9_10] log when update-policy local gets a key match from a remote host
4788.	[cleanup]	When using "update-policy local", log a warning
			when an update matching the session key is received
			from a remote host. [RT #46213]

- this completes change #4762.
2017-10-25 01:08:07 -07:00
Mark Andrews
68a4bb4f09 read dig.out.ns3.test$n rather than dig.out.ns2.test$n
(cherry picked from commit 80739779fc)
2017-10-25 15:03:24 +11:00
Tinderbox User
cab57c79b4 update copyright notice / whitespace 2017-10-24 23:50:30 +00:00
Mark Andrews
bd646f9229 4783. [test] dnssec: 'check that NOTIFY is sent at the end of
NSEC3 chain generation failed' required more time
                        on some machines for the IXFR to complete. [RT #46388]

(cherry picked from commit 969d923536)
2017-10-25 09:22:11 +11:00
Evan Hunt
cd2556d78c [v9_10] fix merge error; missing hunk from change 4780
(cherry picked from commit 4d39bffd95)
2017-10-24 10:09:56 -07:00
Mark Andrews
5ca903ae3d remove redundent reconfig; number tests 2017-10-24 14:49:14 +11:00
Evan Hunt
13435af49a [v9_10] omit NS from authority section if it was in answer
4780.	[bug]		When answering ANY queries, don't include the NS
			RRset in the authority section if it was already
			in the answer section. [RT #44543]

(cherry picked from commit b7b76d6b85)
2017-10-23 19:35:45 -07:00
Mark Andrews
1b13294a44 report if named.run or named.memstats not removed after successful test
(cherry picked from commit 5bead588b7)
2017-10-24 12:47:53 +11:00
Evan Hunt
33ab321a97 [v9_10] clean up a redundancy
4777.	[cleanup]	Removed a redundant call to configure_view_acl().
			[RT #46369]

(cherry picked from commit 89636d8f30)
(cherry picked from commit a06198688f)
2017-10-23 11:13:11 -07:00
Evan Hunt
13b56a42b9 [v9_10] test for Net::DNS::Nameserver in prereq.sh
(cherry picked from commit 475c51cce0)
2017-10-21 00:29:20 -07:00
Mark Andrews
1ba0495b37 include "../mkd"; as we have already changed working directory
(cherry picked from commit b71747f765)
2017-10-20 11:49:56 +11:00
Tinderbox User
3a3d6733ca update copyright notice / whitespace 2017-10-19 23:47:47 +00:00
Evan Hunt
b5c1d2bc01 [v9_10] skip managed-keys reconfig tests in runtime if no crypto [RT #46327]
(cherry picked from commit b093b684a6)
2017-10-18 22:29:14 -07:00
Mark Andrews
20ea1dd8c8 4774. [bug] <isc/util.h> was incorrectly included in several
header files. [RT #46311]
2017-10-19 12:44:15 +11:00
Evan Hunt
937a399a55 [v9_10] copyrights 2017-10-18 17:31:44 -07:00
Evan Hunt
b6b2b0b9b5 [v9_10] require writable managed keys directory
4769.	[bug]		Enforce the requirement that the managed keys
			directory (specified by "managed-keys-directory",
			and defaulting to the working directory if not
			specified) must be writable. [RT #46077]

(cherry picked from commit 56e30ebae6)
2017-10-17 21:35:19 -07:00
Michał Kępień
5e6d28e1b7 [v9_10] Doxygen fixes and cleanups
4773.	[doc]		Fixed generating Doxygen documentation for functions
			annotated using certain macros.  Miscellaneous
			Doxygen-related cleanups. [RT #46276]

(cherry picked from commit ad9772c559)
2017-10-17 08:11:55 +02:00
Michał Kępień
151a7e10b8 [v9_10] Regenerate presigned zone for the filter-aaaa system test [RT #46283]
Fix the filter-aaaa system test for builds without DNSSEC support.
2017-10-16 09:47:10 +02:00
Tinderbox User
8f4a065c62 update copyright notice / whitespace 2017-10-13 23:47:00 +00:00
Evan Hunt
1106e957fb [v9_10] fix filter-aaaa test [RT #46268]
(cherry picked from commit 666af25a92)
2017-10-13 10:28:56 -07:00
Evan Hunt
d761b2da53 [v9_10] use NUL instead of /dev/null for KRB5_CONFIG on windows
(cherry picked from commit 89b2fc092d)
2017-10-11 18:13:13 -07:00
Evan Hunt
4ad546ecf3 [v9_10] Move KRB5_CONFIG=/dev/null to conf.sh.* so the named run in the tests gets the setting
(cherry picked from commit 74f46c45b0)
(cherry picked from commit d1aa5125a9)
2017-10-11 08:51:38 -07:00
Mark Andrews
75438f5c81 don't force souce port
(cherry picked from commit 02a669a9a6)
2017-10-08 06:46:50 +11:00
Mark Andrews
1be17c22cc silence VC compiler warning
(cherry picked from commit e09b9e7a91)
2017-10-07 14:06:08 +11:00
Tinderbox User
2f09ac92f1 update copyright notice / whitespace 2017-10-06 23:47:26 +00:00
Evan Hunt
dddf97d534 [v9_10] further restrict update-policy local
4762.	[func]		"update-policy local" is now restricted to updates
                from local addresses. (Previously, other addresses
                were allowed so long as updates were signed by the
                local session key.) [RT #45492]
2017-10-06 15:43:05 -07:00
Michał Kępień
3402ce550a [v9_10] Add support for DOA
4761.	[protocol]	Add support for DOA. [RT #45612]

(cherry picked from commit 4ee1fbe056)
2017-10-06 12:56:58 +02:00
Mark Andrews
cc158c813d add trust-anchor-telemetry to bring into sync with bin/named/log.c
(cherry picked from commit 1cd67567f7)
2017-10-06 16:44:15 +11:00
Mark Andrews
3a1fa8eeea 4759. [func] Add logging channel "trust-anchor-telementry" to
record trust-anchor-telementry in incoming requests.
                            Both _ta-XXXX.<anchor>/NULL and EDNS KEY-TAG options
                            are logged.  [RT #46124]

    (cherry picked from commit b41c1aacbc)

(cherry picked from commit 1c8aa38b53)
2017-10-06 14:06:40 +11:00
Tinderbox User
fbfb482f6e regen v9_10 2017-10-06 01:22:23 +00:00
Tinderbox User
1476addacf update copyright notice / whitespace 2017-10-05 23:47:09 +00:00
Michał Kępień
1ddb1cd440 [v9_10] Prevent dig INSIST failures and hangs in some failure modes
4756.	[bug]		Interrupting dig could lead to an INSIST failure after
			certain errors were encountered while querying a host
			whose name resolved to more than one address.  Change
			4537 increased the odds of triggering this issue by
			causing dig to hang indefinitely when certain error
			paths were evaluated.  dig now also retries TCP queries
			(once) if the server gracefully closes the connection
			before sending a response. [RT #42832, #45159]

(cherry picked from commit b1ce9b3d54)
2017-10-05 09:48:45 +02:00
Mark Andrews
8360489f0f 4754. [bug] dns_zone_setview needs a two stage commit to properly
handle errors. [RT #45841]

(cherry picked from commit 2732d4922c)
2017-10-05 16:06:07 +11:00
Evan Hunt
18c878a76a [v9_10] copy the color-coded test functions to conf.sh.win32 2017-10-04 09:28:51 -07:00
Mark Andrews
f0462f4a88 add L for wide
(cherry picked from commit 055d310e54)
2017-10-04 20:45:17 +11:00
Mark Andrews
348ffa8054 stderr to /dev/null also
(cherry picked from commit 4615bc5408)
2017-10-04 19:27:05 +11:00
Mark Andrews
60596b7abf test for 'printf'
(cherry picked from commit d1e823af15)
2017-10-04 19:20:09 +11:00
Tinderbox User
aafc292564 update copyright notice / whitespace 2017-10-03 23:47:11 +00:00
Evan Hunt
e43e479d5b [v9_10] de-DLV
4749.	[func]		The ISC DLV service has been shut down, and all
			DLV records have been removed from dlv.isc.org.
			- Removed references to ISC DLV in documentation
			- Removed DLV key from bind.keys
			- No longer use ISC DLV by default in delv
			[RT #46155]
2017-10-03 00:52:58 -07:00
Mark Andrews
825f4a4869 4748. [cleanup] Sprintf to snprintf coversions. [RT #46132]
(cherry picked from commit a009d03a1a)
2017-10-03 14:55:57 +11:00
Tinderbox User
ac5565ee28 update copyright notice / whitespace 2017-09-30 23:51:08 +00:00
Evan Hunt
d7e8c245bf [v9_10] color-coded test output
4745.	[test]		Add color-coded pass/fail messages to system
			tests when running on terminals that support them.
			[RT #45977]

(cherry picked from commit 3bb6150cae)
2017-09-30 10:03:05 -07:00
Mark Andrews
1f2ee1b48c 4744. [bug] Suppress trust-anchor-telementry queries if
validation is disabled. [RT #46131]

(cherry picked from commit dc0a792d94)
2017-09-29 09:34:26 +10:00
Mark Andrews
755e74bb28 4739. [cleanup] Address clang static analysis warnings. [RT #45952]
(cherry picked from commit f9f3f20d2d)
2017-09-27 13:00:57 +10:00
Evan Hunt
a6184ac6ee [v9_10] backport rpz tweaks
4713.	[cleanup]	Minor revisions to RPZ code to reduce
			differences with the development branch. [RT #46037]

(cherry picked from commit 68d7ff133c)
2017-09-26 11:03:26 -07:00
Mark Andrews
abb1a8877b 4738. [port] win32: strftime mishandles %Z. [RT #46039]
(cherry picked from commit 744061a03b)
2017-09-26 23:33:34 +10:00
Tinderbox User
3ea46cae3e update copyright notice / whitespace 2017-09-18 23:55:11 +00:00
Michał Kępień
4ceebc8874 [v9_10] Prevent possible infinite signing loop after retransferring an inline-signed slave using NSEC3
4727.	[bug]		Retransferring an inline-signed slave using NSEC3
			around the time its NSEC3 salt was changed could result
			in an infinite signing loop. [RT #45080]

(cherry picked from commit 62f2fefaec)
2017-09-18 09:28:34 +02:00
Mark Andrews
9411ffc095 4725. [bug] Nsupdate: "recvsoa" was incorrectly reported for
failures in sending the update message.  The correct
                        location to be reported is "update_completed".
                        [RT #46014]

(cherry picked from commit 0bcb8b0b7c)
2017-09-18 14:30:28 +10:00