Mark Andrews
3e48466e0a
4571. [bug] Out-of-tree builds of backtrace_test failed.
2017-02-06 13:46:00 +11:00
Evan Hunt
0f91e968c7
[master] fall back to builtin keys if bind.keys is empty
...
4570. [cleanup] named did not correctly fall back to the built-in
initializing keys if the bind.keys file was present
but empty. [RT #44531 ]
2017-02-04 00:37:37 -08:00
Evan Hunt
650b5e7592
[master] store local and remote addresses in dnstap
...
4569. [func] Store both local and remote addresses in dnstap
logging, and modify dnstap-read output format to
print them. [RT #43595 ]
2017-02-03 17:05:58 -08:00
Tinderbox User
39f68aa480
update copyright notice / whitespace
2017-02-03 23:45:33 +00:00
Tinderbox User
2cd2e915c3
regen
2017-02-03 23:30:02 +00:00
Mark Andrews
8562f6f9f4
set copyright type to zone
2017-02-03 22:14:47 +11:00
Mark Andrews
04ed4dd4db
wait longer for the transfer to complete
2017-02-03 17:51:16 +11:00
Tinderbox User
194f07c628
update copyright notice / whitespace
2017-02-02 23:45:47 +00:00
Evan Hunt
4ecfa356d1
[master] silence warning
2017-02-02 13:24:17 -08:00
Evan Hunt
aace5d0fb3
[master] include ECS in query logging
...
4566. [func] Query logging now includes the ECS option if one
was included in the query. [RT #44476 ]
2017-02-02 11:54:28 -08:00
Mark Andrews
e5fe0d7823
fix not HAVE_LMDB case
2017-02-03 06:18:07 +11:00
Mark Andrews
2f5444972a
perform more testing on rndc <op> -redirect
2017-02-02 17:25:54 +11:00
Mark Andrews
f783c2d579
4562. [func] Add additional memory statistics currently malloced
...
and maxmalloced per memory context. [RT #43593 ]
2017-02-02 15:36:38 +11:00
Tinderbox User
ed1f93cc24
update copyright notice / whitespace
2017-01-31 23:45:34 +00:00
Evan Hunt
cd668ea57f
[master] change 4558 was incomplete
2017-01-30 14:10:30 -08:00
Tinderbox User
ff52f52a31
regen master
2017-01-25 01:04:56 +00:00
Tinderbox User
b5808abc69
update copyright notice / whitespace
2017-01-24 23:45:30 +00:00
Mark Andrews
25da687db7
4560. [bug] mdig: add -m option to enable memory debugging rather
...
than have in on all the time. [RT #44509 ]
4559. [bug] Openssl_link.c didn't compile if ISC_MEM_TRACKLINES
was turned off. [RT #44509 ]
2017-01-24 17:48:31 +11:00
Mark Andrews
b1b5229a47
4556. [security] Combining dns64 and rpz can result in dereferencing
...
a NULL pointer (read). (CVE-2017-3135) [RT#44434]
(cherry picked from commit 5abe80ef13 )
2017-01-24 09:55:51 +11:00
Tinderbox User
4502e3c5dd
regen master
2017-01-21 01:04:48 +00:00
Tinderbox User
96f5064e3c
update copyright notice / whitespace
2017-01-20 23:45:34 +00:00
Evan Hunt
4f744a027f
[master] fix dig +ednsopt padding error
...
4556. [bug] Sending an EDNS Padding option using "dig
+ednsopt" could cause a crash in dig. [RT #44462 ]
2017-01-19 23:52:41 -08:00
Evan Hunt
25a9b90369
[master] symbolic option names for dig +ednsopt
...
4555. [func] dig +ednsopt: EDNS options can now be specified by
name in addition to numeric value. [RT #44461 ]
2017-01-19 23:46:37 -08:00
Tinderbox User
31c2480cd4
update copyright notice / whitespace
2017-01-19 23:45:37 +00:00
Mark Andrews
bf0b649993
whitespace
2017-01-19 13:16:04 +11:00
Tinderbox User
7b665158e9
update copyright notice / whitespace
2017-01-13 23:45:35 +00:00
Mark Andrews
bcfaac260a
remove false negatives (add eol to grep patterns; add missing ret=0)
2017-01-13 15:59:52 +11:00
Tinderbox User
a9e8198788
update copyright notice / whitespace
2017-01-12 23:45:41 +00:00
Evan Hunt
66b61a029d
[master] more specific date for DLV shutdown warning
2017-01-12 09:10:41 -08:00
Mark Andrews
434477aa02
--enable-developer now compiles bin/tests's XTARGETS [RT #44205 ]
2017-01-12 14:02:51 +11:00
Mark Andrews
0c43d50368
remove false positives due to bad grep [RT #44178 ]
2017-01-12 13:59:10 +11:00
Mark Andrews
750619b7a8
4551. [test] Add system tests for integrity checks of MX and
...
SRV records. [RT #43953 ]
2017-01-12 13:29:45 +11:00
Tinderbox User
2067cfdb46
regen master
2017-01-06 01:05:20 +00:00
Tinderbox User
f557aeef7c
update copyright notice / whitespace
2017-01-05 23:45:24 +00:00
Tinderbox User
37ae137942
regen master
2017-01-05 01:05:07 +00:00
Evan Hunt
5804332588
[master] EDNS padding and keepalive support
...
4549. [func] Added support for the EDNS TCP Keepalive option
(RFC 7828). [RT #42126 ]
4548. [func] Added support for the EDNS Padding option (RFC 7830).
[RT #42094 ]
2017-01-04 09:16:30 -08:00
Mark Andrews
1015ce24fc
address discards const warnings; address shadow warning
2016-12-31 14:30:50 +11:00
Tinderbox User
ed07d7a8f5
update copyright notice / whitespace
2016-12-30 23:46:36 +00:00
Mark Andrews
52e2aab392
4546. [func] Extend the use of const declarations. [RT #43379 ]
2016-12-30 15:45:08 +11:00
Mark Andrews
813ff2d277
remove #!/usr/bin/python
2016-12-29 23:37:53 +11:00
Mark Andrews
da40ddaeca
add copyright notice
2016-12-29 23:10:37 +11:00
Mark Andrews
b789eec98c
fix ProjectGuid
2016-12-29 19:47:07 +11:00
Mark Andrews
81ff80e0cd
fix ProjectGuid
2016-12-29 19:46:42 +11:00
Mark Andrews
965c1e910e
fix ProjectGuid
2016-12-29 19:45:56 +11:00
Tinderbox User
6ce6801f3f
regen master
2016-12-29 01:05:39 +00:00
Tinderbox User
4ef83f4333
update copyright notice / whitespace
2016-12-28 23:48:39 +00:00
Mark Andrews
d376792dae
4531. [security] 'is_zone' was not being properly updated by redirect2
...
and subsequently preserved leading to an assertion
failure. (CVE-2016-9778) [RT #43837 ]
2016-12-29 10:25:01 +11:00
wpk
e910d18007
4545. [func] Make dnstap-read output more functionally usable.
...
[RT #43642 ]
4544. [func] Add message/payload size to dnstap-read YAML output.
[RT #43622 ]
2016-12-28 11:57:28 +01:00
Tinderbox User
190ea9e6b8
regen master
2016-12-28 01:05:39 +00:00
Mark Andrews
5093e8d482
4542. [func] Allow rndc to manipulate redirect zones with using
...
-redirect as the zone name (use "-redirect." to
manipulate a zone named "-redirect"). [RT #43971 ]
2016-12-28 11:36:31 +11:00
Tinderbox User
d029dfe95c
update copyright notice / whitespace
2016-12-27 23:46:44 +00:00
Mark Andrews
e20db12918
4541. [bug] rndc addzone should properly reject non master/slave
...
zones. [RT #43665 ]
2016-12-28 10:27:56 +11:00
Tinderbox User
c43f150d0a
update copyright notice / whitespace
2016-12-26 23:46:20 +00:00
Mark Andrews
8e333f42ef
4540. [bug] Correctly handle ecs entries in dns_acl_isinsecure.
...
[RT #43601 ]
2016-12-27 09:49:02 +11:00
Mark Andrews
762c4fc5a8
4539. [bug] Referencing a nonexistant zone with rpz could lead
...
to a assertion failure when configuring. [RT #43787 ]
2016-12-27 08:59:07 +11:00
Mark Andrews
6089c8df71
4537. [bug] Handle timouts better in dig/host/nslookup. [RT #43576 ]
2016-12-14 15:42:43 +11:00
Tinderbox User
29916e6d7c
update copyright notice / whitespace
2016-12-13 23:46:28 +00:00
Mark Andrews
a678e70481
4536. [bug] ISC_SOCKEVENTATTR_USEMINMTU was not being cleared
...
when reusing the event structure. [RT #43885 ]
2016-12-14 10:42:38 +11:00
Mark Andrews
def6b33bad
4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879 ]
2016-12-13 16:27:18 +11:00
Mark Andrews
8ca45ba01a
4533. [bug] dns_client_update should terminate on prerequiste
...
failures (NXDOMAIN, YXDOMAIN, NXRRSET, YXRRSET)
and also on BADZONE. [RT #43865 ]
2016-12-13 15:47:03 +11:00
Mark Andrews
4914e3ddc6
number all resolver tests
2016-12-13 15:02:32 +11:00
Evan Hunt
76a26842a9
[master] tweak logfileconfig test so it can pass on slower machines
2016-12-12 12:12:40 -08:00
Mark Andrews
60cb462c56
4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
...
in responses resulting in SERVFAIL being returned.
[RT #43779 ]
2016-12-09 12:50:18 +11:00
Tinderbox User
16fde7f0b3
regen master
2016-12-07 01:05:34 +00:00
Mark Andrews
1b8ce3b330
4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831 ]
2016-12-07 10:49:55 +11:00
Mark Andrews
24b7aa3df5
look $UNLIMITEDFILE.4 as $UNLIMITEDFILE.5 may not exist yet
2016-12-05 18:20:31 +11:00
Mark Andrews
c9ee977f31
added -T keepstderr to keep stderr open when daemonizing [RT #43736 ]
2016-12-05 10:38:16 +11:00
Mark Andrews
cab871f1bc
4522. [bug] Handle big gaps in log file version numbers better.
...
[RT #38688 ]
2016-11-30 10:55:21 +11:00
Evan Hunt
6bdb70057d
[master] log as error if entropy unavailable
...
4521. [cleanup] Log it as an error if an entropy source is not
found and there is no fallback available. [RT #43659 ]
2016-11-29 11:30:31 -08:00
Mark Andrews
4352551d23
4520. [cleanup] Alphabetise more of the grammar when printing it
...
out. Fix unbalanced indenting. [RT #43755 ]
2016-11-29 15:28:28 +11:00
Mark Andrews
e0c102d9ee
copyrights/whitespace
2016-11-24 11:04:30 +11:00
Evan Hunt
62c85a4a52
[master] allow different time formats: local, iso8601, iso8601-utc
...
4518. [func] The "print-time" option in the logging configuration
can now take arguments "local", "iso8601" or
"iso8601-utc" to indicate the format in which the
date and time should be logged. For backward
compatibility, "yes" is a synonym for "local".
[RT #42585 ]
2016-11-22 23:34:47 -08:00
Curtis Blackburn
eb4ffd6685
4515. [port] FreeBSD: Find readline headers when they are in
...
edit/readline/ instead of readline/. [RT #43658 ]
2016-11-18 11:12:42 -08:00
Mark Andrews
28f344c18a
check the value of s
2016-11-15 16:51:36 +11:00
Mark Andrews
415eeebda4
add --ipv6only=no test
2016-11-11 09:59:58 +11:00
Mark Andrews
69e77384fa
4514. [port] NetBSD: strip -WL, from ld command line. [RT #43204 ]
2016-11-10 11:31:21 +11:00
Mark Andrews
1106845b4e
don't call dst_lib_destroy in t2_vfy
2016-11-09 17:03:34 +11:00
Mark Andrews
084d88f67b
4512. [bug] win32: @GEOIP_INC@ missing from delv.vcxproj.in.
...
[RT #43556 ]
2016-11-07 10:03:24 +11:00
Francis Dupont
7f56936dc7
Fixed filter-aaaa prereq.sh
2016-11-04 14:55:59 +01:00
Evan Hunt
1e2aca8d90
[master] make rrl system test more robust
...
4509. [test] Make the rrl system test more reliable on slower
machines by using mdig instead of dig. [RT #43280 ]
2016-11-02 20:56:02 -07:00
Curtis Blackburn
66b00b1e06
Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9
2016-11-02 18:11:06 -07:00
Curtis Blackburn
f621b255d9
corrected typo in nsupdate test (DIG-->$DIG)
2016-11-02 18:09:37 -07:00
Tinderbox User
8d8839b3a0
regen master
2016-11-03 01:06:32 +00:00
Tinderbox User
e37bc34b31
update copyright notice / whitespace
2016-11-02 23:46:39 +00:00
Mark Andrews
61747916ed
4506. [func] 'named-checkconf -l' will now list the zones found in
...
named.conf. [RT #43154 ]
2016-11-02 17:47:51 +11:00
Mark Andrews
5f8412a4cb
4504. [security] Allow the maximum number of records in a zone to
...
be specified. This provides a control for issues
raised in CVE-2016-6170. [RT #42143 ]
2016-11-02 17:31:27 +11:00
Evan Hunt
6087f87afb
[master] make uninstall
...
4503. [cleanup] "make uninstall" now removes file installed by
BIND. (This currently excludes Python files
due to lack of support in setup.py.) [RT #42912 ]
2016-11-01 19:17:07 -07:00
Mark Andrews
e1c93a0f58
'I:exit status: <value>' should be outsied of if
2016-11-02 09:11:40 +11:00
Evan Hunt
7960fc596b
[master] clean up reporting of R:FAIL so it can't spuriously appear mid-test
2016-11-01 13:46:42 -07:00
Mark Andrews
9bfebc4a6a
check for LIBRESSL_VERSION_NUMBER
...
(cherry picked from commit b2c1d6f0a2 )
2016-11-01 12:49:23 +11:00
Evan Hunt
5480a74b70
[master] simplify prereq checks by using feature-test.c
...
4498. [test] Simplify prerequisite checks in system tests.
[RT #43516 ]
2016-10-31 16:53:37 -07:00
Mark Andrews
1fce0951ed
4497. [port] Add support for OpenSSL 1.1.0. [RT #41284 ]
2016-10-31 10:04:37 +11:00
Tinderbox User
c970f162b6
regen master
2016-10-29 01:06:53 +00:00
Tinderbox User
e24f9b0a33
update copyright notice / whitespace
2016-10-28 23:45:58 +00:00
Mark Andrews
42470b0b87
4496. [func] dig: add +idnout to control whether labels are
...
display in punycode or not. Requires idn support
to be enabled at compile time. [RT #43398 ]
2016-10-28 12:05:19 +11:00
Mark Andrews
6fbb2b51d8
4494. [bug] Look for <editline/readline.h>. [RT #43429 ]
2016-10-27 15:48:51 +11:00
Mark Andrews
c910fc24ce
4493. [bug] bin/tests/system/dyndb/driver/Makefile.in should use
...
SO_TARGETS. [RT# 43336]
2016-10-27 15:37:26 +11:00
Mark Andrews
ecd8e95bb5
change 4487 broke the cacheclean test with old version of perl. [RT #43476 ]
2016-10-27 00:09:21 +11:00
Mark Andrews
856c77cc40
s/,/;/
2016-10-26 22:38:24 +11:00
Mark Andrews
bcbacc4045
copyrights
2016-10-20 11:03:20 +11:00
Mark Andrews
8d6fefac31
4488. [port] Darwin: use -framework for Kerberos. [RT #43418 ]
2016-10-20 10:26:05 +11:00
Witold Krecicki
358dfaee18
4487. [test] Make system tests work on Windows. [RT #42931 ]
2016-10-19 17:18:42 +02:00
Tinderbox User
0b15ee0705
regen master
2016-10-16 01:06:28 +00:00
Mark Andrews
7551ec1ebe
add managed keys to view section
2016-10-16 08:15:15 +11:00
Evan Hunt
e91255b006
[master] gitignore python build directory
...
Patch submitted by Tony Finch (dot@dotat.at )
2016-10-11 13:15:24 -07:00
Mark Andrews
01862dfaa5
4485. [bug] Look in $prefix/lib/pythonX.Y/site-packages for
...
the python modules we install. [RT #43330 ]
2016-10-11 15:20:37 +11:00
Mark Andrews
c5d4cfc8aa
4483. [func] Check prefixes in acls to make sure the address and
...
prefix lengths are consistent. Warn only in
BIND 9.11 and earlier. [RT #43367 ]
2016-10-11 14:52:28 +11:00
Evan Hunt
676ac3cc82
[master] add cfg_parse_buffer3() function with linenum parameter
...
4482. [cleanup] Change #4455 was incomplete. [RT #43252 ]
2016-10-10 17:11:21 -07:00
Mark Andrews
d3f29e7a4f
sleep 2 to let in progress lookups complete
2016-10-10 14:35:36 +11:00
Tinderbox User
5e32012dcf
regen master
2016-10-10 01:04:44 +00:00
Mark Andrews
3b6aba8dcb
4481. [func] dig: make +class, +crypto, +multiline, +rrcomments,
...
+onesoa, +qr, +ttlid, +ttlunits and -u per lookup
rather than global. [RT #42450 ]
2016-10-10 11:55:59 +11:00
Evan Hunt
af05768c0e
[master] reset ret between NTA tests
2016-10-05 21:06:54 -07:00
Tinderbox User
f925373f21
regen master
2016-10-06 01:05:06 +00:00
Witold Krecicki
551f1e02e6
4478. [func] Add +continue option to mdig, allow continue on socket errors. [RT #43281 ]
2016-10-05 13:50:03 +02:00
Witold Krecicki
5aaf7e3a04
4477. [test] Fix mkeys test timing issues. [RT #41028 ]
2016-10-05 13:42:53 +02:00
Witold Krecicki
a0f9aaa103
4476. [test] Fix reclimit test on slower machines. [RT #43283 ]
2016-10-05 11:54:12 +02:00
Mark Andrews
67cdd2d3a4
4475. [doc] Update named-checkconf documentation. [RT #43153 ]
2016-10-05 14:21:41 +11:00
Mark Andrews
f77ee20a6c
4474. [bug] win32: call WSAStartup in fromtext_in_wks so that
...
getprotobyname and getservbyname work. [RT #43197 ]
(cherry picked from commit 82a50a619a )
2016-10-05 12:29:23 +11:00
Mark Andrews
7fbe85c6d7
4472. [bug] Named could fail to find the correct NSEC3 records when
...
a zone was update between looking for the answer and
looking for the NSEC3 records proving non-existance
of the answer. [RT #43247 ]
2016-10-05 10:35:18 +11:00
Witold Krecicki
c5a80c9427
[master] Disable dig IPv4-to-IPv6 mapping system test on OpenBSD
2016-09-30 12:19:44 +02:00
Mark Andrews
966edc2775
make statschannel version number agnostic
...
(cherry picked from commit 1477c19dd9 )
2016-09-29 17:01:53 +10:00
Tinderbox User
f1814f50c9
regen master
2016-09-29 01:05:10 +00:00
Evan Hunt
e9917a51d3
[master] minor cleanup/clarification in dnstap documentation
...
Patch submitted by Tony Finch (dot@dotat.at ).
2016-09-27 20:45:58 -07:00
Evan Hunt
c4b7db4932
[master] render querylog format consistent, and add a release note
...
4471. [cleanup] Render client/query logging format consistent for
ease of log file parsing. (Note that this affects
"querylog" format: there is now an additional field
indicating the client object address.) [RT #43238 ]
2016-09-22 14:48:56 -07:00
Tinderbox User
18c84f3b0b
regen master
2016-09-14 01:04:44 +00:00
Mark Andrews
df17290113
4468. [bug] Address ECS option handling issues. [RT #43191 ]
2016-09-14 08:22:15 +10:00
Mark Andrews
f1977af0d3
4465. [bug] Don't use "%z" as Windows doesn't support it.
...
[RT #43131 ]
2016-09-08 14:16:56 +10:00
Mark Andrews
ed7097fc00
4463. [bug] The dnstap system test failed on some systems.
...
[RT #43129 ]
2016-09-08 11:40:24 +10:00
Francis Dupont
cfa20db199
Fixed obvious typo in t_atomic
2016-09-08 01:54:18 +02:00
Mark Andrews
8eceb0bffe
4461. [bug] win32: not all external data was properly marked
...
as external data for windows dll. [RT #43161 ]
2016-09-07 14:12:11 +10:00
Tinderbox User
4c60000629
update copyright notice / whitespace
2016-08-30 23:45:30 +00:00
Mark Andrews
3e1fa8411b
4460. [test] Add system test for dnstap using unix domain sockets.
...
[RT #42926 ]
2016-08-30 11:20:22 +10:00
Evan Hunt
a26a62cef2
[master] fix tcp client memory leak
...
4459. [bug] TCP client objects created to handle pipeline queries
were not cleaned up correctly, causing uncontrolled
memory growth. [RT #43106 ]
2016-08-29 11:56:36 -07:00
Mark Andrews
63fe88e8d8
4456. [doc] Add DOCTYPE and lang attribute to <html> tags.
...
[RT #42587 ]
2016-08-26 15:14:04 +10:00
Mark Andrews
e1f590a59a
remove spurious 'i'
2016-08-26 13:41:57 +10:00
Evan Hunt
02fb764681
[master] pass source file and line to dyndb load function
...
4455. [cleanup] Allow dyndb modules to correctly log the filename
and line number when processing configuration text
from named.conf. [RT #43050 ]
2016-08-25 18:08:26 -07:00
Tinderbox User
fba207e51a
update copyright notice / whitespace
2016-08-25 23:45:37 +00:00
Tinderbox User
5883460271
regen master
2016-08-25 01:04:54 +00:00
Mark Andrews
726cddb564
4454. [bug] 'rndc dnstap -reopen' had a race issue. [RT #43089 ]
2016-08-25 10:03:22 +10:00
Mark Andrews
f431bf02a6
4453. [bug] Prefetching of DS records failed to update their
...
RRSIGs. [RT #42865 ]
2016-08-25 09:51:31 +10:00
Mark Andrews
e09f18e349
4452. [bug] The default key manager policy file is now
...
<sysdir>/dnssec-policy.conf (usually
/etc/dnssec-policy.conf). [RT #43064 ]
2016-08-25 09:41:50 +10:00
Evan Hunt
1e50c0d857
[master] add dnssec-keygen and nslookup man page links to ARM
2016-08-24 20:39:03 +00:00
Mark Andrews
7bb9972a1f
add signing -serial to rndc usage
2016-08-23 13:41:37 +10:00
Tinderbox User
b297f5cdd5
regen master
2016-08-19 01:04:52 +00:00
Mark Andrews
8ee6f289d8
4450. [port] Provide more nuanced HSM support which better matches
...
the specific PKCS11 providers capabilities. [RT #42458 ]
2016-08-19 08:02:51 +10:00
Witold Krecicki
85342bec80
4449. [test] Fix catalog zones test on slower systems. [RT #42997 ]
2016-08-18 18:17:56 +02:00
Mark Andrews
934837913f
4447. [tuning] Allow the fstrm_iothr_init() options to be set using
...
named.conf to control how dnstap manages the data
flow. [RT #42974 ]
2016-08-18 11:16:06 +10:00
Tinderbox User
0967d759de
update copyright notice / whitespace
2016-08-17 23:45:32 +00:00
Evan Hunt
3390d74e33
[master] fix dyndb issues; isc_errno_toresult()
...
4445. [cleanup] isc_errno_toresult() can now be used to call the
formerly private function isc__errno2result().
[RT #43050 ]
4444. [bug] Fixed some issues related to dyndb: A bug caused
braces to be omitted when passing configuration text
from named.conf to a dyndb driver, and there was a
use-after-free in the sample dyndb driver. [RT #43050 ]
Patch for dyndb driver submitted by Petr Spacek at Red Hat.
2016-08-17 11:37:57 -07:00
Mark Andrews
8c2c6b8b42
update dyndb_init inline documentationi [RT #43050 ]
2016-08-17 14:11:57 +10:00
Tinderbox User
baa0e04675
update copyright notice / whitespace
2016-08-15 23:45:31 +00:00
Mukund Sivaraman
131307a70e
Fix RPZ CIDR tree insertion bug ( #43035 )
2016-08-15 14:17:02 +05:30
Mark Andrews
f814343d1b
add dnstap to help. [RT #42928 ]
2016-08-15 11:56:17 +10:00
Mark Andrews
8a98ea9e94
4441. [cleanup] Alphabetize host's help output. [RT #43031 ]
2016-08-15 11:21:52 +10:00
Mark Andrews
c7e021e2e6
4439. [bug] Address race conditions getting ownernames of nodes.
...
[RT #43005 ]
2016-08-12 14:08:48 +10:00
Tinderbox User
a7115b8b4d
regen master
2016-08-12 01:04:57 +00:00
Mark Andrews
78e31dd187
4437. [func] Minimal-responses now has two additional modes
...
no-auth and no-auth-recursive which suppress
adding the NS records to the authority section
as well as the associated address records for the
nameservers. [RT #42005 ]
2016-08-12 10:48:51 +10:00
Mark Andrews
bb900e62bf
4436. [func] Return TLSA records as additional data for MX and SRV
...
lookups. [RT #42894 ]
2016-08-12 10:03:23 +10:00
Mark Andrews
31ffec1541
4435. [tuning] Only set IPV6_USE_MIN_MTU for UDP when the message
...
will not fit into a single IPv4 encapsulated IPv6
UDP packet when transmitted over a Ethernet link.
[RT #42871 ]
2016-08-12 09:41:59 +10:00
Mark Andrews
bf2238b064
4434. [protocol] Return EDNS EXPIRE option for master zones in addition
...
to slave zones. [RT #43008 ]
2016-08-12 09:31:41 +10:00
Evan Hunt
c38d989fdd
[master] error on bad parameter to 'rndc dumpdb'
...
4433. [cleanup] Report an error when passing an invalid option or
view name to "rndc dumpdb". [RT #42958 ]
2016-08-11 16:02:57 -07:00
Mark Andrews
12895c8d6f
4432. [testing] Hide rndc output on expected failures in logfileconfig
...
system test. [RT #27996 ]
2016-08-10 13:06:40 +10:00
Tinderbox User
2f77f658a0
update copyright notice / whitespace
2016-08-09 00:25:45 +00:00
Mark Andrews
632e67baa6
4431. [bug] named-checkconf now checks the rate-limit clause.
...
[RT #42970 ]
2016-08-08 23:52:40 +10:00
Mark Andrews
3146be6fd6
4430. [bug] Lwresd died if a search list was not defined.
...
Found by 0x710DDDD At Alibaba Security. [RT #42895 ]
2016-08-08 10:22:51 +10:00
Mark Andrews
c1915935cf
4429. [bug] Address potential use after free on fclose() error.
...
[RT #42976 ]
2016-08-08 09:50:34 +10:00
Evan Hunt
e9bd1496ed
[master] fix dnstap query/response selectors
...
4427. [bug] The "query" and "response" parameters to the
"dnstap" option had their functions reversed.
2016-08-06 00:21:04 -07:00
Witold Krecicki
2830b1d597
Remove spurious isc_stdio_open
2016-07-28 14:30:48 +02:00
Witold Krecicki
fe6db06ced
4426. [bug] Addressed Coverity warnings. [RT #42908 ]
2016-07-27 15:46:09 +02:00
Tinderbox User
49834f2f8d
regen master
2016-07-27 01:07:09 +00:00
Witold Krecicki
29d1f6a781
Fix typos in nzd2nzf test
2016-07-26 21:15:18 +02:00
Witold Krecicki
aad10dd583
Fix merge error in bin/tests/system/conf.sh.in, add missing cleanups in tests
2016-07-26 20:29:12 +02:00
Mark Andrews
0408ceba1f
add space in #error message
2016-07-26 11:28:47 +10:00
Mark Andrews
0ac94b80e8
remove comma
2016-07-26 11:17:37 +10:00
Tinderbox User
7ba3e5dc9e
regen master
2016-07-26 01:07:05 +00:00
Mark Andrews
3fdd1a3462
named-rrchecker is also in ${prefix}/bin
2016-07-26 07:12:13 +10:00
Mark Andrews
711aff9fa7
4425. [bug] arpaname and dnstap-read were not being installed
...
into ${prefix}/bin. Tidy up installation issues
with CHANGE 4421. [RT #42910 ]
2016-07-26 06:51:36 +10:00
Witold Krecicki
c854d9c7a8
Fix merge error in bin/tools/Makefile.in
2016-07-25 13:18:47 +02:00
Mark Andrews
f20179857a
4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
...
to provide feedback to the trust-anchor administrators
about how key rollovers are progressing as per
draft-ietf-dnsop-edns-key-tag-02. This can be
disabled using 'trust-anchor-telemetry no;'.
[RT #40583 ]
2016-07-22 20:02:17 +10:00
Mark Andrews
9616761417
copyrights
2016-07-22 15:58:48 +10:00
Tinderbox User
2bc4d454e1
update copyright notice / whitespace
2016-07-21 23:46:03 +00:00
Evan Hunt
d20f0472df
[master] silence clang warnings
...
4422. [port] Silence clang warnings in dig.c and dighost.c.
[RT #42451 ]
2016-07-21 15:53:43 -07:00
Evan Hunt
6c81b492df
[master] add missing file
2016-07-21 12:45:15 -07:00
Evan Hunt
7914f63011
[master] print.h
2016-07-21 11:25:19 -07:00
Evan Hunt
eca74c52c1
[master] store "addzone" zone config in a NZD database
...
4421. [func] When built with LMDB (Lightning Memory-mapped
Database), named will now use a database to store
the configuration for zones added by "rndc addzone"
instead of using a flat NZF file. This improves
performance of "rndc delzone" and "rndc modzone"
significantly. Existing NZF files will
automatically by converted to NZD databases.
To view the contents of an NZD or to roll back to
NZF format, use "named-nzd2nzf". To disable
this feature, use "configure --without-lmdb".
[RT #39837 ]
2016-07-21 11:13:37 -07:00
Mark Andrews
e7e7efe901
4420. [func] nslookup now looks for AAAA as well as A by default.
...
[RT #40420 ]
2016-07-22 03:27:49 +10:00
Witold Krecicki
e4d4de075a
4419. [bug] Don't cause undefined result if the label of an
...
entry in catalog zone is changed. [RT #42708 ]
2016-07-21 13:08:50 +02:00
Mark Andrews
592127b7fa
more copyright cleanups
2016-07-21 19:16:05 +10:00
Mark Andrews
30e4fbdfb5
consolidate copyrights
2016-07-21 17:24:07 +10:00
Tinderbox User
6807a2dc3c
regen master
2016-07-21 07:11:01 +00:00
Mark Andrews
813e9f7ee2
copyright
2016-07-21 17:00:44 +10:00
Evan Hunt
f7b5487474
[master] fix keymgr with low prepublication interval
...
4417. [bug] dnssec-keymgr could fail to create successor keys
if the prepublication interval was set to a value
smaller than the default. [RT #42820 ]
Patch submitted by Nis Wechselberg (enbewe@enbewe.de ).
2016-07-20 15:12:56 -07:00
Evan Hunt
a870e4e773
[master] normalize domain names for trailing dots
...
4416. [bug] dnssec-keymgr: Domain names in policy files could
fail to match due to trailing dots. [RT #42807 ]
Patch submitted by Armin Pech (mail@arminpech.de ).
2016-07-20 14:35:10 -07:00
Evan Hunt
c4fa8b75c2
[master] deleted keys not correctly excluded
...
4415. [bug] dnssec-keymgr: Expired/deleted keys were not always
excluded. [RT #42884 ]
Patch submitted by Nis Wechselberg (enewe@enbewe.de ).
2016-07-20 14:28:15 -07:00
Mark Andrews
63e58ad048
4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
...
was returned. [RT #42733 ]
2016-07-14 15:06:28 +10:00
Mark Andrews
d937f8e999
Visual Studio 2005 doesn't like named elements, construct addr using isc_netaddr_fromin6
2016-07-14 11:29:18 +10:00
Mark Andrews
fef0080f14
Windows doesn't like LLU use ULL instead
2016-07-14 11:15:46 +10:00
Tinderbox User
bc8c067281
regen master
2016-07-14 01:06:14 +00:00
Mukund Sivaraman
4116177ac4
Make fixes for GCC 6 ( #42721 )
2016-07-13 13:55:50 +05:30
Evan Hunt
ffa622d7a3
[master] rndc dnstap -roll
...
4411. [func] "rndc dnstap -roll" automatically rolls the
dnstap output file; the previous version is
saved with ".0" suffix, and earlier versions
with ".1" and so on. An optional numeric argument
indicates how many prior files to save. [RT #42830 ]
2016-07-13 01:12:47 -07:00
Mark Andrews
a2101037d9
4410. [bug] Address use after free and memory leak with dnstap.
...
[RT #42746 ]
2016-07-13 16:56:11 +10:00
Mark Andrews
af052fa2ed
add more DNS64 default exclude acl tests
...
(cherry picked from commit d147d56227 )
2016-07-13 10:58:53 +10:00
Tinderbox User
3e0b34d0ac
update copyright notice / whitespace
2016-07-11 23:46:33 +00:00
Mark Andrews
557c7221fd
4409. [bug] DNS64 should exlude mapped addresses by default when
...
a exclude acl is not defined. [RT #42810 ]
2016-07-11 14:11:34 +10:00
Mark Andrews
ec5e01747a
4408. [func] Continue waiting for expected response when we the
...
response we get does not match the request. [RT #41026 ]
2016-07-11 13:36:16 +10:00
Mark Andrews
38cc2d14e2
4406. [bug] getrrsetbyname with a non absolute name could
...
trigger a infinite recursion bug in lwresd
and named with lwres configured if when combined
with a search list entry the resulting name is
too long. [RT #42694 ]
2016-07-07 12:52:47 +10:00
Mark Andrews
3c88f741c6
ignore bin/tests/system/rndc/ns4/named.conf
2016-07-07 09:55:51 +10:00
Tinderbox User
915994daa9
update copyright notice / whitespace
2016-07-06 23:46:37 +00:00
Tinderbox User
6aba65d9f0
regen master
2016-07-06 01:05:19 +00:00
Mark Andrews
d811a7d9ef
4405. [bug] Change 4342 introduced a regression where you could
...
not remove a delegation in a NSEC3 signed zone using
OPTOUT via nsupdate. [RT #42702 ]
2016-07-06 10:13:15 +10:00
Mark Andrews
27505a932f
one -f the -D sync's should have been just -D
2016-07-06 08:33:02 +10:00
Mark Andrews
0dacb6efdf
ignore configure generated files
2016-06-29 23:32:06 +10:00
Mark Andrews
cd734243d4
ignore configure generated files
2016-06-29 23:27:12 +10:00
Mark Andrews
ecfa005085
4403. [bug] Rename variables and arguments that shadow: basename,
...
clone and gai_error.
2016-06-28 21:25:30 -04:00
Witold Krecicki
dbb82fa26c
Fix keymgr test for change 4400 [RT #42718 ]
2016-06-27 12:22:11 +02:00
Tinderbox User
33d0a7767d
regen master
2016-06-27 05:29:38 +00:00
Mark Andrews
0c27b3fe77
4401. [misc] Change LICENSE to MPL 2.0.
2016-06-27 14:56:38 +10:00
Mark Andrews
50a3eae6cf
4400. [bug] ttl policy was not being inherited in policy.py.
...
[RT #42718 ]
2016-06-27 13:07:45 +10:00
Mark Andrews
8d49a1a0d1
4399. [bug] policy.py 'ECCGOST', 'ECDSAP256SHA256', and
...
'ECDSAP384SHA384' don't have settable keysize.
[RT #42718 ]
2016-06-27 12:11:37 +10:00
Mark Andrews
97e13cc244
4398. [bug] Correct spelling of ECDSAP256SHA256 in policy.py.
...
[RT #42718 ]
2016-06-27 11:49:11 +10:00
Tinderbox User
05da080bbd
regen master
2016-06-27 01:25:44 +00:00
Mark Andrews
2616416a67
add missing <para>/<para> tags
2016-06-27 10:53:23 +10:00
Tinderbox User
4677c85720
regen master
2016-06-25 01:05:37 +00:00
Mark Andrews
8927a982bd
update copyrights / whitespace
2016-06-24 16:23:26 +10:00
Mark Andrews
9f5443280f
4397. [bug] Update Windows python support. [RT #42538 ]
2016-06-24 16:04:10 +10:00
Mark Andrews
c1a72112b2
4396. [func] dnssec-keymgr now takes a '-r randomfile' option.
...
[RT #42455 ]
2016-06-24 14:12:24 +10:00
Mark Andrews
b709d84755
distclean cleanup
2016-06-24 13:52:01 +10:00
Mark Andrews
4840ef4581
4395 [bug] Improve out-of-tree installation of python modules.
...
[RT #42586 ]
2016-06-24 12:20:37 +10:00
Tinderbox User
76cf91b5df
regen master
2016-06-24 01:05:13 +00:00
Tinderbox User
b54c2849fb
update copyright notice / whitespace
2016-06-23 23:45:21 +00:00
Mark Andrews
7d262a3647
4394. [func] Add rndc command "dnstap-reopen" to close and
...
reopen dnstap output filed. [RT #41803 ]
2016-06-24 09:37:04 +10:00
Jeremy C. Reed
e8300d7263
Use test random file for tsig test using keygen
...
This is for #42565 : tsig test hangs and KEYGEN and randomdev
It was okayed there and is a trivial fix. No changes log needed.
2016-06-23 18:48:09 -04:00
Tinderbox User
601645a1e8
update copyright notice / whitespace
2016-06-22 23:45:21 +00:00
Mark Andrews
10966da999
4402. [func] Collect statistics for RSSAC02v3 traffic-volume,
...
traffic-sizes and rcode-volume reporting. [RT #41475 ]
2016-06-23 08:44:54 +10:00
Witold Krecicki
4681ab1fc2
4387. [test] Rewritten test suite for catalog zones. [RT #42676 ]
...
4386. [func] Support for master entries with TSIG keys in catalog
zones. [RT #42577 ]
2016-06-22 10:50:09 +02:00
Mark Andrews
b56bd9b59f
4387. [bug] Change 4336 was not complete leading to SERVFAIL
...
being return as NS records expired. [RT #42683 ]
2016-06-22 15:26:38 +10:00
Mark Andrews
96beefd76f
4386.[bug]Remove shadowed overmem function/variable. [RT #42706 ]
2016-06-22 15:13:24 +10:00
Witold Krecicki
3f06b888ae
4385. [func] Add support for allow-query and allow-transfer ACLs
...
to catalog zones. [RT #42578 ]
2016-06-20 13:39:44 +02:00
Mark Andrews
c1bf332c7c
silence rm error message
2016-06-20 14:33:33 +10:00
Mark Andrews
eff62988e6
checking that default nta's were lifted due to lifetime were not robust
2016-06-20 14:29:11 +10:00
Mark Andrews
bcd6666984
silence compiler warning
2016-06-19 22:59:58 +10:00
Mark Andrews
948fe5822b
4384. [bug] Change 4256 accidentally disabled logging of the
...
rndc command. [RT #42654 ]
2016-06-18 00:10:51 +10:00
Mark Andrews
3f0de196f7
report subtest number
2016-06-17 10:50:33 +10:00
Tinderbox User
3939cc42d8
update copyright notice / whitespace
2016-06-16 23:45:22 +00:00
Mark Andrews
caf7c2fd25
style
2016-06-17 07:13:12 +10:00
Tinderbox User
dce54b9b5c
update copyright notice / whitespace
2016-06-14 23:45:25 +00:00
Mark Andrews
3635d8f910
do not overflow exit status. [RT #42643 ]
2016-06-14 13:48:39 +10:00
Mark Andrews
ecff557eeb
4383. [bug] Correct spelling error in stats channel description of
...
"EDNS client subnet option received". [RT #42633 ]
2016-06-14 11:31:17 +10:00
Francis Dupont
985d2d1b71
Updated OpenSSL patches for 1.0.[12] (active/supported)
2016-06-13 18:05:33 +02:00
Mark Andrews
eb6d8d7a48
silence coverity warnings
2016-06-12 00:08:31 +10:00
Tinderbox User
ffaab41a01
update copyright notice / whitespace
2016-06-10 23:45:19 +00:00
Evan Hunt
eb3195d211
[master] add a test for dig +subnet with various prefix lengths
2016-06-09 22:49:52 -07:00
Mark Andrews
fbc50678e1
4382. [bug] rndc {addzone,modzone,delzone,showzone} should all
...
compare the zone name using a canonical format.
[RT #42630 ]
2016-06-10 11:03:53 +10:00
Mark Andrews
eb54bc33a2
also cleanup node
2016-06-03 18:04:37 +10:00
Mark Andrews
92ddd7ad2c
detach before restore
2016-06-03 17:23:08 +10:00
Mark Andrews
b4750b5991
reset zversion on restart
2016-06-03 14:33:16 +10:00
Witold Krecicki
c2afbab9dc
4381. [bug] Missing "zone-directory" option in catalog zone
...
definition caused BIND to crash. [RT #42579 ]
2016-06-02 21:41:02 +02:00
Tinderbox User
e76f113739
regen master
2016-06-02 01:05:09 +00:00
Mark Andrews
d055178624
simplify poorly written conditional
2016-06-02 10:18:17 +10:00
Tinderbox User
1c6d1ca335
update copyright notice / whitespace
2016-06-01 23:45:30 +00:00
Francis Dupont
3933e5c763
Merged rt42563 (ht.c fixes)
2016-06-01 14:49:01 +02:00
Francis Dupont
2a8aa10492
Merged rt42505 (misc DNSSEC bugs)
2016-06-01 09:18:49 +02:00
Tinderbox User
7336a12983
update copyright notice / whitespace
2016-05-31 23:45:29 +00:00
Evan Hunt
3d0b7d5cc3
[master] zone-directory option for catalog zones
...
4380. [experimental] Added a "zone-directory" option to "catalog-zones"
syntax, allowing local masterfiles for slaves
that are provisioned by catalog zones to be stored
in a directory other than the server's working
directory. [RT #42527 ]
2016-05-31 10:36:27 -07:00
Tinderbox User
262bebd081
update copyright notice / whitespace
2016-05-27 23:45:23 +00:00
Mark Andrews
9268297baa
4379. [bug] An INSIST could be triggered if a zone contains
...
RRSIG records with expiry fields that loop
using serial number arithmetic. [RT #40571 ]
2016-05-27 15:24:30 +10:00
Evan Hunt
e3f231023c
[master] use $DIG not dig
2016-05-26 18:39:07 -07:00
Tinderbox User
260e8e04b0
regen master
2016-05-27 01:05:21 +00:00
Mark Andrews
aabcb1fde0
4377. [bug] Don't reuse zero TTL responses beyond the current
...
client set (excludes ANY/SIG/RRSIG queries).
[RT #42142 ]
2016-05-27 09:59:46 +10:00
Evan Hunt
6c2a76b3e2
[master] copyrights, win32 definitions
2016-05-26 12:36:17 -07:00
Witold Krecicki
7a00d69909
4376. [experimental] Added support for Catalog Zones, a new method for
...
provisioning secondary servers in which a list of
zones to be served is stored in a DNS zone and can
be propagated to slaves via AXFR/IXFR. [RT #41581 ]
4375. [func] Add support for automatic reallocation of isc_buffer
to isc_buffer_put* functions. [RT #42394 ]
2016-05-26 21:23:19 +02:00
Evan Hunt
bfe9697f92
[master] correct summary
2016-05-26 09:53:09 -07:00
Mark Andrews
3d1b521b5b
update dnssec-keymgr documentation. [RT #42454 ]
2016-05-26 16:02:46 +10:00
Mark Andrews
32e1f3cda0
improve error message for missing dnssec-keygen/dnssec-settime. [RT #42456 ]
2016-05-26 15:46:10 +10:00
Mark Andrews
28784b996b
minor host man page cleanups from Tony Finch [RT #42476 ]
2016-05-26 13:56:42 +10:00
Mark Andrews
ac11084829
4374. [bug] Use SAVE/RESTORE macros in query.c to reduce the
...
probability of reference counting errors as seen
in 4365. [RT #42405 ]
2016-05-26 12:11:00 +10:00
Mark Andrews
10f8dc8456
4370. [bug] Address python3 compatibility issues with RNDC module.
...
[RT #42499 ] [RT #42506 ]
2016-05-26 12:01:31 +10:00
Tinderbox User
7173647ada
update copyright notice / whitespace
2016-05-25 23:45:21 +00:00
Evan Hunt
0cbe448914
[master] minimal-any
...
4371. [func] New "minimal-any" option reduces the size of UDP
responses for qtype ANY by returning a single
arbitrarily selected RRset instead of all RRsets.
Thanks to Tony Finch. [RT #41615 ]
2016-05-25 13:54:34 -07:00
Mark Andrews
9c6a57d7c7
address python2/python3 differences
2016-05-25 15:19:25 +10:00
Mark Andrews
d4a9a6c4a9
pass $KEYGEN to $KEYMGR
2016-05-25 14:05:26 +10:00
Mark Andrews
e6d09e71d0
style
2016-05-25 13:41:48 +10:00
Mark Andrews
ecb9c56ff6
use python3 compatible syntax
2016-05-25 13:37:07 +10:00
Mark Andrews
9dede25430
4370. [bug] Address python3 compatibility issues with RNDC module.
...
[RT #42499 ]
2016-05-25 11:48:52 +10:00
Mark Andrews
d3600bb89d
4369. [bug] Fix 'make' and 'make install' out-of-tree python
...
support. [RT #42484 ]
2016-05-24 09:50:23 +10:00
Mark Andrews
7abac4a395
silence warning
2016-05-17 17:26:27 +10:00
Mark Andrews
4f200033d1
explict conversion
2016-05-17 17:22:51 +10:00
Mark Andrews
c3beecc1bc
4365. [bug] Address zone reference counting errors involving
...
nxdomain-redirect. [RT #42258 ]
2016-05-13 11:54:25 +10:00
Mark Andrews
32148399a2
ignore missing SERVFAIL
2016-05-12 14:25:43 +10:00
Tinderbox User
f5489931d7
update copyright notice / whitespace
2016-05-09 23:45:56 +00:00
Mark Andrews
8090ceb932
4363. [port] Turn off triggering UAC when running BINDInstall
...
temporarily.
2016-05-09 19:07:07 +10:00
Mark Andrews
97e9fc9e53
add missing dependancy
2016-05-09 15:42:57 +10:00
Mark Andrews
2b96f36d0c
remember dig/rndc outputs
2016-05-09 07:59:19 +10:00
Mark Andrews
9e14bf1f86
add test counter
2016-05-09 07:29:43 +10:00
Witold Krecicki
9852ad2408
Fix awk compatibility issue in rndc system test
2016-05-07 13:33:51 +02:00
Tinderbox User
f89adb2c2a
update copyright notice / whitespace
2016-05-05 23:45:48 +00:00
Evan Hunt
7614afdab2
[master] remove copyright header from policy.good
2016-05-05 14:26:15 -07:00
Witold Krecicki
e846f127d6
4362. [func] Changed rndc reconfig behaviour so that newly added
...
zones are loaded asynchronously and the loading does
not block the server. [RT #41934 ]
2016-05-05 21:41:12 +02:00
Mark Andrews
5ac427050f
4360. [bug] Silence spurious 'bad key type' message when there is
...
a existing TSIG key. [RT #42195 ]
2016-05-05 22:27:08 +10:00
Mark Andrews
594d15df25
4359. [bug] Inherited 'also-notify' lists were not being checked
...
by named-checkconf. [RT #42174 ]
2016-05-05 21:59:09 +10:00
Witold Krecicki
19d80ce584
4358. [test] Added American Fuzzy Lop harness that allows
...
feeding fuzzed packets into BIND.
[RT #41723 ]
2016-05-05 11:49:38 +02:00
Witold Krecicki
dc2a4887c4
4357. [func] Add the python RNDC module. [RT #42093 ]
2016-05-05 11:33:47 +02:00
Mark Andrews
08e36aa5a5
4356. [func] Add the ability to specify whether to wait for
...
nameserver addresses to be looked up or not to
rpz with a new modifying directive 'nsip-wait-recurse'. [RT #35009 ]
2016-05-05 16:29:05 +10:00
Evan Hunt
f1a2709aad
[master] add extractability to pkcs11-list
...
4354. [func] "pkcs11-list" now displays the extractability
attribute of private or secret keys stored in
an HSM, as either "true", "false", or "never"
Thanks to Daniel Stirnimann. [RT #36557 ]
2016-05-04 21:56:48 -07:00
Tinderbox User
99bbb58ce7
update copyright notice / whitespace
2016-05-04 23:45:36 +00:00
Evan Hunt
699f790c49
[master] update pkcs11 headers
...
4353. [cleanup] Update PKCS#11 header files. [RT #42175 ]
2016-05-04 15:55:03 -07:00
Evan Hunt
66074f152f
[master] log message when using ISC DLV
...
4352. [cleanup] The ISC DNSSEC Lookaside Validation (DLV) service
is scheduled to be disabled in 2017. A warning is
now logged when named is configured to use it,
either explicitly or via "dnssec-lookaside auto;"
[RT #42207 ]
2016-05-04 14:37:25 -07:00
Tinderbox User
9e6e0881fa
update copyright notice / whitespace
2016-04-30 23:45:50 +00:00
Mark Andrews
cbad856135
support truncated hashes longer that 7
...
(cherry picked from commit 5b291f619e312689e25de8fd5662b0b9d4a62679)
2016-05-01 07:48:40 +10:00
Tinderbox User
3241ddcf93
regen master
2016-04-30 01:05:59 +00:00
Tinderbox User
21635968f7
update copyright notice / whitespace
2016-04-29 23:45:42 +00:00
Evan Hunt
470af54b4e
[master] more python2/3 compatibility fixes; use setup.py to install
2016-04-29 14:40:45 -07:00
Evan Hunt
304d16f08f
[master] address some python2/3 incompatibilities
2016-04-29 10:38:35 -07:00
Tinderbox User
17e9d6023e
Add .8 and .html files for dnssec-keymgr
2016-04-29 16:42:23 +00:00
Evan Hunt
90c7806bb6
[master] remove gnu make dependency
2016-04-29 09:36:36 -07:00
Evan Hunt
a27dc50157
[master] copyrights
2016-04-28 22:30:53 -07:00
Mark Andrews
86f221492f
alphabetize
2016-04-29 13:10:26 +10:00
Mark Andrews
48bf87ba83
4351. [bug] 'dig +noignore' didn't work. [RT #42273 ]
2016-04-29 12:41:02 +10:00
Mark Andrews
cf69e3d8b2
alphabetize host options
2016-04-29 11:21:49 +10:00
Tinderbox User
aa70afe5c1
update copyright notice / whitespace
2016-04-28 23:45:37 +00:00
Evan Hunt
f6096b958c
[master] dnssec-keymgr
...
4349. [contrib] kasp2policy: A python script to create a DNSSEC
policy file from an OpenDNSSEC KASP XML file.
4348. [func] dnssec-keymgr: A new python-based DNSSEC key
management utility, which reads a policy definition
file and can create or update DNSSEC keys as needed
to ensure that a zone's keys match policy, roll over
correctly on schedule, etc. Thanks to Sebastian
Castro for assistance in development. [RT #39211 ]
2016-04-28 00:16:01 -07:00
Evan Hunt
5ecfee97ba
[master] copyrights
2016-04-14 19:12:13 -07:00
Evan Hunt
3cd204c4a4
[master] fixed revoked key regression
...
4436. [bug] Fixed a regression introduced in change #4337 which
caused signed domains with revoked KSKs to fail
validation. [RT #42147 ]
2016-04-14 18:52:52 -07:00
Mark Andrews
7f79448198
remove unnecessary return
2016-04-08 04:24:47 +10:00
Tinderbox User
a0132868d1
update copyright notice / whitespace
2016-03-25 23:45:16 +00:00
Mark Andrews
42f6b7a890
add mdig.exe; fix typo in isc-hmac-fixup.exe
2016-03-26 09:07:54 +11:00
Evan Hunt
4a5f5c4ce1
[master] install mdig to bin not sbin
2016-03-25 09:52:00 -07:00
Tinderbox User
c19f42a378
update copyright notice / whitespace
2016-03-24 23:45:21 +00:00
Tinderbox User
e285c11870
regen master
2016-03-24 01:05:08 +00:00
Mark Andrews
6214c3c93a
4341. [bug] 'rndc flushtree' could fail to clean the tree if there
...
wasn't a node at the specified name. [RT #41846 ]
2016-03-24 11:31:25 +11:00
Tinderbox User
a63461cc4b
update copyright notice / whitespace
2016-03-23 23:45:22 +00:00
Evan Hunt
7fa4c18451
[master] ECS family 0 handling was still broken
2016-03-23 15:00:30 -07:00
Evan Hunt
05b7b63f17
[master] more ECS handling fixes
2016-03-23 09:59:42 -07:00
Evan Hunt
395e6865d5
[master] fix ECS with family==0
...
4341. [bug] Correct the handling of ECS options with
address family 0. [RT #41377 ]
2016-03-23 08:54:46 -07:00
Evan Hunt
d82b18a552
[master] fix uiAccess for win64 build
2016-03-22 17:28:12 -07:00
Evan Hunt
ddf3342cca
[master] test pipelining with mdig
...
4339. [test] Use "mdig" to test pipelined queries. [RT #41929 ]
2016-03-22 17:26:38 -07:00
Evan Hunt
132a571179
[master] fix mkeys TTL 0 issue
...
4337. [bug] The previous change exposed a latent flaw in
key refresh queries for managed-keys when
a cached DNSKEY had TTL 0. [RT #41986 ]
2016-03-22 12:12:32 -07:00
Tinderbox User
27def92931
update copyright notice / whitespace
2016-03-21 23:45:22 +00:00
Mark Andrews
0993cd5f22
4336. [bug] Don't emit records with zero ttl unless the records
...
were learnt with a zero ttl. [RT #41687 ]
2016-03-21 13:22:21 +11:00
Mark Andrews
b8dcc13bc5
4335. [bug] zone->view could be detached too early. [RT #41942 ]
2016-03-21 12:02:00 +11:00
Tinderbox User
b1aac28027
update copyright notice / whitespace
2016-03-16 23:45:17 +00:00
Jeremy C. Reed
e12c78ebf6
add comments about why the configuration is bad
...
I didn't get review. This is trivial.
2016-03-16 15:42:56 -04:00
Mark Andrews
756c643330
4334. [func] 'named -V' now reports zlib version. [RT #41913 ]
2016-03-13 07:48:11 +11:00
Jeremy C. Reed
81780ffd74
use -r $RANDFILE for test using keygen
...
stops hang
this is for ticket #41898
2016-03-11 09:27:15 -05:00
Tinderbox User
4a7004f3ce
update copyright notice / whitespace
2016-03-10 23:45:16 +00:00
Mark Andrews
7c52595464
4331. [func] When loading managed signed zones detect if the
...
RRSIG's inception time is in the future and regenerate
the RRSIG immediately. [RT #41808 ]
2016-03-10 17:01:08 +11:00
Tinderbox User
1fb011b1db
regen master
2016-03-08 22:35:32 +00:00
Tinderbox User
2cc103828e
update copyright notice / whitespace
2016-03-08 22:29:11 +00:00
Mark Andrews
1188aa3010
add automatic-interface-scan to ARM grammar
2016-03-09 09:00:07 +11:00
Mark Andrews
93ca5ee4c4
update copyrights
2016-03-08 16:21:19 +11:00
Mark Andrews
d6357f09aa
4329. [func] Warn about a common misconfiguration when forwarding
...
RFC 1918 zones. [RT #41441 ]
2016-03-08 10:11:23 +11:00
Tinderbox User
220ba6da87
update copyright notice / whitespace
2016-03-04 23:45:23 +00:00
Mark Andrews
8398f00156
4326. [protocol] Add support for AVC. [RT #41819
2016-03-04 18:11:41 +11:00
Mukund Sivaraman
9da98335c1
Code cleanups ( #41656 )
2016-03-04 12:18:17 +05:30
Evan Hunt
023ba1e6ef
[master] add OS details to rndc status
...
4325. [func] Add a line to "rndc status" indicating the
hostname and operating system details. [RT #41610 ]
2016-03-03 22:02:52 -08:00
Tinderbox User
f254ab049e
update copyright notice / whitespace
2016-03-02 23:45:17 +00:00
Mark Andrews
ce7216c40a
4223. [bug] Improve HTTP header processing on statschannel.
...
[RT #41674 ]
2016-03-02 11:04:59 +11:00
Mark Andrews
455c0848f8
4322. [security] Duplicate EDNS COOKIE options in a response could
...
trigger an assertion failure. (CVE-2016-2088)
[RT #41809 ]
2016-02-27 11:23:50 +11:00
Mark Andrews
7f514657e2
update copyrights
2016-02-25 10:55:40 +11:00
Mark Andrews
f9da4a8e54
4321. [bug] Zones using mapped files containing out-of-zone data
...
could return SERVFAIL instead of the expected NODATA
or NXDOMAIN results. [RT #41596 ]
2016-02-24 11:13:24 +11:00
Tinderbox User
62735fcde3
update copyright notice / whitespace
2016-02-23 23:45:35 +00:00
Mukund Sivaraman
293a9e9978
Fix allocation for "none" ACL that caused assertion failure ( #41745 )
2016-02-23 12:51:34 +05:30
Mark Andrews
a125381c60
update usage
2016-02-23 16:57:02 +11:00
Tinderbox User
27424c351d
update copyright notice / whitespace
2016-02-20 23:45:16 +00:00
Mark Andrews
c968a257c1
fix subnet prefix
2016-02-20 12:01:30 +11:00
Tinderbox User
53ba272721
update copyright notice / whitespace
2016-02-18 23:45:32 +00:00
Mark Andrews
a2b15b3305
4318. [security] Malformed control messages can trigger assertions
...
in named and rndc. (CVE-2016-1285) [RT #41666 ]
2016-02-18 12:11:27 +11:00
Mark Andrews
37176663e0
don't used class in grep e.g. [:space:]
2016-02-17 13:17:40 +11:00
Evan Hunt
93c211afc9
[master] fixed a regression in dyndb due to change #4277
2016-02-12 00:22:45 -08:00
Tinderbox User
6632721990
regen master
2016-02-12 01:04:18 +00:00
Tinderbox User
ee2e5fec65
regen master
2016-02-11 01:04:20 +00:00
Mark Andrews
b91d11bfcc
copyrights / whitespace
2016-02-11 10:44:21 +11:00
Evan Hunt
23733a9412
[master] misplaced <varlistentry>
2016-02-09 17:11:26 -08:00
Mukund Sivaraman
79a55d4f4d
Add option to tools to print RRs in unknown presentation format ( #41595 )
2016-02-09 15:39:02 +05:30
Mukund Sivaraman
0c29904b27
Check that configured view class isn't a meta class ( #41572 )
2016-02-08 13:58:01 +05:30
Mark Andrews
08913705e9
specify what to copy
...
(cherry picked from commit 88624c9c32 )
2016-02-05 13:54:47 +11:00
Mark Andrews
68ecf1c9a5
add missing line break
2016-02-04 11:51:44 +11:00
Mark Andrews
d88ba93712
4313. [bug] Handle ns_client_replace failures in test mode.
...
[RT #41190 ]
2016-02-03 14:59:19 +11:00
Tinderbox User
d83a9a980a
update copyright notice / whitespace
2016-02-02 23:45:23 +00:00
Mukund Sivaraman
f9b167290a
Remove 45 second sleeps from notify system test ( #41248 )
...
No CHANGES entry required.
2016-02-02 09:46:57 +05:30
Mark Andrews
8d00c5ab2c
4312. [bug] dig's unknown dns and edns flags (MBZ value) logging
...
was not consistent. [RT #41600 ]
2016-02-02 14:19:22 +11:00
Mark Andrews
e370cdf4ba
capture rndc output
...
(cherry picked from commit 2d58f4aee2 )
2016-02-02 12:26:23 +11:00
Tinderbox User
8b074bef0c
update copyright notice / whitespace
2016-02-01 23:45:25 +00:00
Evan Hunt
ec450fde7c
[master] disallow delzone on policiy zones
...
4311. [bug] Prevent "rndc delzone" from being used on
response-policy zones. [RT #41593 ]
2016-02-01 09:49:49 -08:00
Tinderbox User
3947e3625a
update copyright notice / whitespace
2016-01-31 23:45:23 +00:00
Evan Hunt
1d36ed108a
[master] spelling
2016-01-31 09:54:13 -08:00
Tinderbox User
5f4f7c688e
update copyright notice / whitespace
2016-01-30 23:45:23 +00:00
Evan Hunt
f02c22d58a
[master] add uname data to named -V
...
4308. [func] Added operating system details to "named -V"
output. [RT #41452 ]
2016-01-30 11:06:58 -08:00
Evan Hunt
df9a49ee07
[master] dig/mdig could send misformatted ECS options
...
4307. [bug] "dig +subnet" and "mdig +subnet" could send
incorrectly-formatted Client Subnet options
if the prefix length was not divisble by 8.
Also fixed a memory leak in "mdig". [RT #45178 ]
2016-01-29 17:41:29 -08:00
Tinderbox User
6825f304c5
regen master
2016-01-29 01:04:18 +00:00
Tinderbox User
b7f3400f3b
update copyright notice / whitespace
2016-01-28 23:45:29 +00:00
Evan Hunt
e073205a88
[master] openssl 1.0.2f patch
...
4306. [maint] Added a PKCS#11 openssl patch supporting
version 1.0.2f [RT #38312 ]
2016-01-28 13:27:29 -08:00
Mark Andrews
832ab79d1f
4305. [bug] dnssec-signzone was not removing unnecessary rrsigs
...
from the zone's apex. [RT #41483 ]
2016-01-28 15:42:34 +11:00
Mark Andrews
9d85a77382
4304. [port] xfer system test failed as 'tail -n +value' is not
...
portable. [RT #41315 ]
2016-01-28 15:38:06 +11:00
Evan Hunt
8ede7a974b
[master] fix dig=+subnet zero-length prefix
...
4303. [bug] "dig +subnet" was unable to send a prefix length of
zero, as it was incorrectly changed to 32 for v4
prefixes or 128 for v6 prefixes. In addition to
fixing this, "dig +subnet=0" has been added as a
short form for 0.0.0.0/0. The same changes have
also been made in "mdig". [RT #41553 ]
2016-01-27 19:03:54 -08:00
Evan Hunt
30370d905e
[master] removed /Gy- from VS project files
...
4302. [port] win32: fixed a build error in VS 2015. [RT #41426 ]
2016-01-27 15:27:57 -08:00
Tinderbox User
4df65ccfec
update copyright notice / whitespace
2016-01-25 23:45:24 +00:00
Mark Andrews
9478de25bb
4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534 ]
2016-01-26 00:27:44 +11:00
Mark Andrews
f8432e3f24
4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534 ]
2016-01-26 00:09:03 +11:00
Mark Andrews
1fe6b74b9c
use 0 not ISC_FALSE for dns_name_fromtext
2016-01-25 16:55:02 +11:00
Tinderbox User
c46ac73c8f
update copyright notice / whitespace
2016-01-22 23:45:23 +00:00
Evan Hunt
630b2d0c5a
[master] NOSETFC incorrectly applied
...
4300. [bug] A flag could be set in the wrong field when setting
up nonrecursive queries; this could cause the
SERVFAIL cache to cache responses it shouldn't.
New querytrace logging has been added which
identified this error. [RT #41155 ]
2016-01-22 13:58:11 -08:00
Tinderbox User
7d4f45f6bd
update copyright notice / whitespace
2016-01-21 23:45:23 +00:00
Evan Hunt
9b789c54f8
[master] add regression test for RT #41518
...
4297. [test] Ensure delegations in RPZ zones fail robustly.
[RT #41518 ]
2016-01-20 17:44:11 -08:00
Evan Hunt
d40154cab7
[master] cacluate TCP packet sizes correctly
...
4296. [bug] TCP packet sizes were calculated incorrectly in the
stats channel; they could be counted in the wrong
histogram bucket. [RT #40587 ]
2016-01-20 17:30:27 -08:00
Tinderbox User
b3378292d0
update copyright notice / whitespace
2016-01-20 23:45:22 +00:00
Evan Hunt
6bd794171f
[master] fixed rndc stop -p
...
4294. [bug] Fixed a regression in which "rndc stop -p" failed
to print the PID. [RT #41513 ]
2016-01-20 09:53:26 -08:00
Tinderbox User
16201b15a6
update copyright notice / whitespace
2016-01-17 23:45:21 +00:00
Curtis Blackburn
3948d9c7c6
rrl test was failing on some systems because not all versions of perl understand '-E'. changed to '-e'
2016-01-15 14:35:12 -08:00
Curtis Blackburn
a66619fe32
[rt39196] Added a new nameserver to test rrl "log-only yes".
...
Added test for RT #39197 . Made the rrl test more
tolerant of minor differences in results due to
timing. Removed the failure override for the rrl
test.
commit 01a15bc80ef4c20171ddfe9b5ceb2ebe008c8e0d
Author: Curtis Blackburn <ckb@isc.org>
Date: Tue Dec 15 15:08:03 2015 -0800
added a new nameserver to the rrl test
2016-01-11 19:37:17 -08:00
Evan Hunt
bb5d14d724
[master] millisecond granularity for statschannel timers
...
4290. [func] The timers returned by the statistics channel
(indicating current time, server boot time, and
most recent reconfiguration time) are now reported
with millisecond accuracy. [RT #40082 ]
2016-01-07 15:34:58 -08:00
Tinderbox User
742cb92338
regen master
2016-01-06 01:04:26 +00:00
Tinderbox User
feb1ccdaf1
update copyright notice / whitespace
2016-01-05 23:45:26 +00:00
Tinderbox User
d7dbbf9b7e
regen
2016-01-05 23:30:01 +00:00
Tinderbox User
4206bb139c
regen master
2016-01-05 01:04:24 +00:00
Tinderbox User
e1836d1fe4
update copyright notice / whitespace
2016-01-04 23:45:26 +00:00
Evan Hunt
8454718b87
[master] document return values from nslookup
2016-01-04 15:38:06 -08:00
Evan Hunt
3bcd09b416
[master] silence noisy logging
...
4287. [bug] Silence an overly noisy log message when message
parsing fails. [RT #41374 ]
2016-01-04 13:05:23 -08:00
Francis Dupont
343aeac717
Updated WIN32 files (rt40877)
2016-01-04 17:27:31 +01:00
Evan Hunt
de4c1814dd
[master] update stats version number for rssac counters
2016-01-03 22:31:56 -08:00
Tinderbox User
7321d8df7b
update copyright notice / whitespace
2015-12-27 23:45:24 +00:00
Evan Hunt
fbed5f0f44
[master] fix geoip options
...
4284. [bug] Some GeoIP options were incorrectly documented
using abbreviated forms which were not accepted by
named. The code has been updated to allow both
long and abbreviated forms. [RT #41381 ]
2015-12-26 10:50:32 -08:00
Francis Dupont
66d73c3611
Cleaned up OpenSSL patches
2015-12-23 21:14:36 +01:00
Francis Dupont
2f2dd34a93
Updated OpenSSL 1.0.1 patch
2015-12-23 19:33:31 +01:00
Francis Dupont
5c19058b0a
Updated OpenSSL 1.0.0 patch
2015-12-23 18:48:50 +01:00
Francis Dupont
059904647d
Updated OpenSSL 0.9.8 patch
2015-12-23 17:53:40 +01:00
Curtis Blackburn
df59681bd2
[rt40109] added a test for +dscp to the digdelv tests
2015-12-21 14:13:03 -08:00
Tinderbox User
0226754d9e
regen master
2015-12-19 01:04:14 +00:00
Mark Andrews
49762dffc4
4282. [func] 'dig +[no]mapped' determine whether the use of mapped
...
IPv4 addresses over IPv6 is permitted or not. The
default is +mapped. [RT #41307 ]
2015-12-19 09:47:11 +11:00
Tinderbox User
4688741c5c
update copyright notice / whitespace
2015-12-16 23:45:26 +00:00
Mark Andrews
f1fcadccc4
remove named.conf
2015-12-16 21:37:21 +11:00
Mark Andrews
1583a214cd
check for non removed files
2015-12-16 21:25:04 +11:00
Tinderbox User
a179cbdf65
regen master
2015-12-16 01:04:13 +00:00
Mark Andrews
ecfedec0e0
perform a more complete cleanup after running system tests [rt41255]
2015-12-16 11:29:18 +11:00
Tinderbox User
ea2ea0914c
update copyright notice / whitespace
2015-12-15 23:45:23 +00:00
Evan Hunt
0321aa184e
[master] reclimit test was broken with v6
2015-12-15 15:01:58 -08:00
Curtis Blackburn
9effea437d
[rt41269] additional tests for dig and delv,
...
fix for --disable-ipv6 on osx,
fixes for tests with --disable-ipv6
2015-12-15 11:58:28 -08:00
Mark Andrews
f647c0df9f
4281. [bug] Teach dns_message_totext about BADCOOKIE. [RT #41257 ]
2015-12-15 19:49:40 +11:00
Mukund Sivaraman
ecc06cbc32
Use optimal message sizes to improve compression in AXFRs ( #40996 )
2015-12-15 13:24:14 +05:30
Evan Hunt
b96366252b
[master] add +nocookie and use perl for query burst
2015-12-14 21:27:49 -08:00
Evan Hunt
362d2d46aa
[master] fixed an incorrect test case in rpzrecurse
2015-12-13 14:15:47 -08:00
Evan Hunt
e0638007c8
[master] clarify in the help message that delv -c is a noop
2015-12-10 16:10:19 -08:00
Curtis Blackburn
21c6e49a77
[rt40106] add tests for dig +[no]ttlunits
2015-12-10 12:08:57 -08:00
Mark Andrews
505d311709
4278. [bug] 'delv +short +[no]split[=##]' didn't work as expected.
...
[RT #41238 ]
2015-12-10 12:43:50 +11:00
Curtis Blackburn
6fe5cc5aea
[rt41263] add a system test for dig +qr +ednsopt<invalid>
2015-12-09 16:21:02 -08:00
Tinderbox User
2a37470065
update copyright notice / whitespace
2015-12-09 23:45:23 +00:00
Mukund Sivaraman
5d79b60fc5
Improve performance of RBT ( #41165 )
2015-12-09 19:10:55 +05:30
Curtis Blackburn
aeb7b6e145
[rt40105] add a system test for dig +zflag
2015-12-08 16:06:39 -08:00
Curtis Blackburn
ce0d8b1c0e
[rt40104] changed one occurrence of +noednsneg to +noednsnegotiation
2015-12-08 16:03:01 -08:00
Curtis Blackburn
4d1ea2336c
[rt40107] add system tests for dig +header-only
2015-12-08 15:57:53 -08:00
Curtis Blackburn
ab94dd50e8
[rt40181] added tests for dig +short +nosplit/+rrcomments (see rt39291)
2015-12-08 15:13:52 -08:00
Mark Andrews
322e6b5be7
4276. [protocol] Add support for SMIMEA. [RT #40513 ]
2015-12-08 08:16:41 +11:00
Evan Hunt
464c2c673b
[master] fix dig +norrcomments
...
4272. [bug] dig: the +norrcomments option didn't work with +multi.
[RT #41234 ]
2015-12-04 16:16:59 -08:00
Tinderbox User
8c20f8635a
update copyright notice / whitespace
2015-12-03 23:45:24 +00:00
Evan Hunt
8f918a34d1
[master] update to previous commit: also list chrootdir if applicable
2015-12-02 19:05:46 -08:00
Evan Hunt
b6214feb63
[master] add conf file to rndc status
...
4268. [func] "rndc status" now reports the path to the
configuration file. [RT #36470 ]
2015-12-02 18:54:46 -08:00
Mark Andrews
26177be294
4267. [test] Check sdlz error handling. [RT #41142 ]
2015-12-02 13:00:42 +11:00
Mark Andrews
447591a49c
use isc_buffer_constinit
2015-11-23 07:26:46 +11:00
Tinderbox User
af0bea7aa7
update copyright notice / whitespace
2015-11-20 23:45:23 +00:00
Mark Andrews
5b1c7ef35b
4264. [bug] Check const of strchr/strrchr assignments match
...
argument's const status. [RT #41150 ]
2015-11-20 18:38:24 +11:00
Tinderbox User
dec590a3de
regen master
2015-11-18 01:04:11 +00:00
Jeremy C. Reed
22b006e0df
Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9
2015-11-17 10:22:41 -05:00
Tinderbox User
c203aa153c
update copyright notice / whitespace
2015-11-16 23:45:24 +00:00
Mark Andrews
a248b59381
use *newrdatas rather than *oldrdatas in sizeof for consistency [RT #41131 ]
2015-11-17 06:24:32 +11:00
Jeremy C. Reed
414678df72
Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9
2015-11-16 12:53:55 -05:00
Francis Dupont
dd784c18ef
Merged VS 2015 64 bit warnings ( #40373 )
2015-11-16 17:47:10 +01:00
Mark Andrews
c8821d124c
4260. [security] Insufficient testing when parsing a message allowed
...
records with an incorrect class to be be accepted,
triggering a REQUIRE failure when those records
were subsequently cached. (CVE-2015-8000) [RT #4098 ]
2015-11-16 13:12:20 +11:00
Tinderbox User
3ebda3f46b
update copyright notice / whitespace
2015-11-12 23:45:23 +00:00
Mark Andrews
d0afc2d1c4
use a test key
2015-11-12 10:54:59 +11:00
Tinderbox User
4949f39716
update copyright notice / whitespace
2015-11-11 23:45:23 +00:00
Mark Andrews
946e2cd351
check ptr is not NULL
2015-11-11 22:33:57 +11:00
Mukund Sivaraman
53cf70ef7d
Cleanup *.nta files after rndc system test
2015-11-11 13:49:21 +05:30
Mukund Sivaraman
58f7af60e7
Allow non-destructive control channel access using a "read-only" clause ( #40498 )
2015-11-11 13:46:57 +05:30
Mukund Sivaraman
9b17fd447c
Limit rndc query message sizes to 32 KiB ( #41073 )
2015-11-11 09:56:13 +05:30
Jeremy C. Reed
cca02d061f
Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9
2015-11-09 22:07:27 -05:00
Tinderbox User
3865e18d3d
update copyright notice / whitespace
2015-11-09 23:45:22 +00:00
Jeremy C. Reed
dde7a7d357
Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9
2015-11-09 11:25:01 -05:00
Evan Hunt
e13d04fda9
[master] fix python script versions
...
4257. [cleanup] Python scripts reported incorrect version. [RT #41080 ]
2015-11-08 21:34:24 -08:00
Tinderbox User
dae43e88b7
update copyright notice / whitespace
2015-11-06 23:45:24 +00:00
Evan Hunt
b513918481
[master] allow spaces in rndc arguments
...
4256. [bug] Allow rndc command arguments to be quoted so as
to allow spaces. [RT #36665 ]
2015-11-05 19:51:54 -08:00
Tinderbox User
e62b9c9ce6
regen master
2015-11-06 01:04:13 +00:00
Tinderbox User
4ba2689c1f
update copyright notice / whitespace
2015-11-05 23:45:25 +00:00
Jeremy C. Reed
f02194c053
clean up refpurpose contents to be consistent
...
This is to be consistent with other manuals:
- no period punctuation at end
- no capitalization at beginning unless acronym or proper noun
- and no simple article (like "A") to start sentence.
While the docbook specification says refpurpose is a "one sentence",
its examples show it with the rules shown above.
Also compared with many manpages as this is common format for the
.Nd macro's one line description.
2015-11-05 13:01:07 -05:00
Witold Krecicki
bfd4b9e11a
4255. [func] Add 'message-compression' option to disable DNS compression in responses. [RT #40726 ]
2015-11-05 12:19:04 +01:00
Mark Andrews
e939674d53
4252. [func] Add support for automating the generation CDS and
...
CDNSKEY rrsets to named and dnssec-signzone.
[RT #40424 ]
2015-11-05 12:09:48 +11:00
Evan Hunt
6b8519147a
[master] NTAs did not survive reoad/reconfig
...
4251. [bug] NTAs were deleted when the server was reconfigured
or reloaded. [RT #41058 ]
2015-11-04 10:34:28 -08:00
Tinderbox User
d4a69308f5
update copyright notice / whitespace
2015-10-29 23:45:34 +00:00
Mark Andrews
f02e14c74f
#ifdef ISC_PLATFORM_HAVEATOMICSTORE
...
(cherry picked from commit f75f9e1b62 )
2015-10-30 07:06:42 +11:00
Evan Hunt
821ff5e8fa
[master] isc_atomic_storeq()/stats improvements
...
4248. [func] Add an isc_atomic_storeq() function, use it in
stats counters to improve performance.
[RT #39972 ] [RT #39979 ]
2015-10-28 22:19:18 -07:00
Mark Andrews
1ff2118d6c
return dns_dbtable_add result on error [RT #40653 ]
2015-10-29 15:48:01 +11:00
Mark Andrews
f06b6a9b14
4247. [port] Require both HAVE_JSON and JSON_C_VERSION to be
...
defined to report json library version. [RT #41045 ]
2015-10-29 15:22:41 +11:00
Evan Hunt
aa9b64060f
[master] fix statschannel with no libjson
...
4246. [test] Ensure the statschannel system test runs when BIND
is not built with libjson. [RT #40944 ]
2015-10-28 20:19:31 -07:00
Tinderbox User
eadee66609
regen master
2015-10-29 02:56:15 +00:00
Mark Andrews
72ac929f2b
4244. [bug] The parser was not reporting that use-ixfr is obsolete.
...
[RT #41010 ]
2015-10-29 12:51:17 +11:00
Tinderbox User
1b6e38d7b8
regen
2015-10-28 23:30:01 +00:00
Tinderbox User
13908e7551
update copyright notice / whitespace
2015-10-27 23:45:22 +00:00
Tinderbox User
7b26f8d8b9
regen
2015-10-27 23:30:01 +00:00
Mark Andrews
a70fc47e9d
4243. [func] Improved stats reporting from Timothe Litt. [RT #38941 ]
2015-10-28 09:45:46 +11:00
Jeremy C. Reed
fe12c35c3e
fix some spelling typos and standardize some English spellings
...
(to be consistent)
2015-10-23 13:04:09 -04:00
Tinderbox User
9d557856c2
regen master
2015-10-22 05:53:09 +00:00
Mark Andrews
79f0eedd65
cleanup trailing whitespace
2015-10-22 16:24:03 +11:00
Mark Andrews
30eec077db
cleanup trailing white space in SGML like files
2015-10-22 16:09:46 +11:00
Mark Andrews
04893d38e0
add blank line
2015-10-22 12:15:02 +11:00
Mark Andrews
0526268c2b
4242. [bug] Replace the client if not already replaced when
...
prefetching. [RT #41001 ]
2015-10-22 10:58:25 +11:00
Evan Hunt
90174e64f4
[master] shorten default servfail-ttl
...
4239. [func] Changed default servfail-ttl value to 1 second from 10.
Also, the maximum value is now 30 instead of 300. [RT #37556 ]
2015-10-17 13:44:01 -07:00
Francis Dupont
638e82b134
spelling
2015-10-07 14:49:51 +02:00
Tinderbox User
fd2597f756
regen master
2015-10-07 04:11:09 +00:00
Tinderbox User
010a51c427
regen master
2015-10-07 01:06:58 +00:00
Tinderbox User
19c7b1a029
update copyright notice / whitespace
2015-10-06 23:45:23 +00:00
Evan Hunt
6715db6593
[master] fix copyright warnings
2015-10-05 23:14:11 -07:00
Tinderbox User
2eeb74d1cf
regen master
2015-10-06 05:45:21 +00:00
Evan Hunt
14a656f94b
[master] upgrade doc toolchain
...
4237. [doc] Upgraded documentation toolchain to use DocBook 5
and dblatex. [RT #40766 ]
2015-10-05 21:59:35 -07:00
Mukund Sivaraman
31cca00bba
Add note about Windows ( #40761 )
2015-10-06 05:57:26 +05:30
Mukund Sivaraman
1a989c4322
Update named manual page ( #40761 )
2015-10-06 05:52:02 +05:30
Tinderbox User
244d11a227
update copyright notice / whitespace
2015-10-03 23:45:23 +00:00
Mukund Sivaraman
930719e876
Update the default value for number of UDP listeners ( #40761 )
2015-10-03 07:08:55 +05:30
Tinderbox User
10b865e918
regen master
2015-10-03 01:07:28 +00:00
Evan Hunt
b66b333f59
[master] dnstap
...
4235. [func] Added support in named for "dnstap", a fast method of
capturing and logging DNS traffic, and a new command
"dnstap-read" to read a dnstap log file. Use
"configure --enable-dnstap" to enable this
feature (note that this requires libprotobuf-c
and libfstrm). See the ARM for configuration details.
Thanks to Robert Edmonds of Farsight Security.
[RT #40211 ]
2015-10-02 12:32:42 -07:00
Witold Krecicki
a239044323
4234. [func] Add deflate compression in statistics channel HTTP
...
server. [RT #40861 ]
2015-10-02 10:45:10 +02:00
Tinderbox User
e13c3286a5
update copyright notice / whitespace
2015-10-01 23:45:31 +00:00
Mark Andrews
3ed714b961
emit "E:TESTNAME:DATE" when we can't start a server
2015-10-01 16:01:34 +10:00
Mark Andrews
d76496a62a
handle ISC_R_FILENOTFOUND
2015-10-01 15:47:39 +10:00
Tinderbox User
551e0d486d
update copyright notice / whitespace
2015-09-30 23:45:36 +00:00
Mark Andrews
65d59a4307
4232. [test] Add tests for CDS and CDNSKEY with delegation-only.
...
[RT #40597 ]
2015-09-30 15:55:14 +10:00
Mark Andrews
2a12984ce6
4227. [bug] Silence static analysis warnings. [RT #40828
2015-09-30 14:14:47 +10:00
Mark Andrews
0d990f57ae
silence compiler warnings
2015-09-30 14:04:28 +10:00
Mark Andrews
1a0e5b0504
address linking issues
2015-09-30 12:38:07 +10:00
Tinderbox User
55cfbf322d
update copyright notice / whitespace
2015-09-29 23:45:32 +00:00
Mark Andrews
ab8b419a79
#include <isc/string.h> for memset
2015-09-30 00:46:33 +10:00
Mark Andrews
ac6bb3dd36
add missing libraries
2015-09-30 00:44:49 +10:00
Evan Hunt
a00f9e2f50
[master] merge dyndb
...
4224. [func] Added support for "dyndb", a new interface for loading
zone data from an external database, developed by
Red Hat for the FreeIPA project.
DynDB drivers fully implement the BIND database
API, and are capable of significantly better
performance and functionality than DLZ drivers,
while taking advantage of advanced database
features not available in BIND such as multi-master
replication.
Thanks to Adam Tkac and Petr Spacek of Red Hat.
[RT #35271 ]
2015-09-28 23:12:35 -07:00
Mark Andrews
4d085258cc
make macro name match category name
2015-09-29 15:02:49 +10:00
Tinderbox User
6648adb2e1
update copyright notice / whitespace
2015-09-28 23:45:23 +00:00
Mark Andrews
7867d18ce0
Introduce end-of-line normalization
2015-09-29 08:25:35 +10:00
Mark Andrews
540f03ae74
use %zu
2015-09-29 07:31:15 +10:00
Witold Krecicki
e6d0a391f5
4223. [func] Add support for setting max-cache-size to percentage
...
of available physical memory, set default to 90%.
[RT #38442 ]
2015-09-28 11:08:50 +02:00
Mark Andrews
98a7f8c7ae
4222. [func] Bias IPv6 servers when selecting the next server to
...
query. [RT #40836 ]
2015-09-28 18:57:19 +10:00
Tinderbox User
9a5087bf58
regen master
2015-09-23 01:05:36 +00:00
Tinderbox User
0e9b328d62
update copyright notice / whitespace
2015-09-22 23:45:22 +00:00
Evan Hunt
09ceaefb0a
[master] need id tag on refentry
2015-09-21 21:36:26 -07:00
Evan Hunt
cc52a16096
[master] fix wire_test so it can read files with comment lines
2015-09-18 11:39:31 -07:00
Mark Andrews
f6e45a5c54
4217. [protocol] Add support for CSYNC. [RT #40532 ]
2015-09-18 23:45:12 +10:00
Mark Andrews
ff55c577ba
4215. [bug] nsupdate: skip to next request on GSSTKEY create
...
failure. [RT #40685 ]
2015-09-18 09:52:27 +10:00
Tinderbox User
7dbeeeaa1e
update copyright notice / whitespace
2015-09-17 23:45:24 +00:00
Mark Andrews
e0a30050c8
4214. [protocol] Add support for TALINK. [RT #40544 ]
2015-09-18 07:43:43 +10:00
Mark Andrews
dd1bcab25c
4213. [bug] Don't reuse a cache across multiple classes.
...
[RT #40205 ]
2015-09-17 14:51:21 +10:00
Mark Andrews
1d5ebfc05f
address race condition in ecdsa system test leading to differing authority sections. [RT #40283 ]; no CHANGES entry.
2015-09-17 14:23:44 +10:00
Mark Andrews
09177840c7
4211. [bug] Ensure that lwresd gets at least one task to work
...
with if enabled. [RT #40652 ]
2015-09-17 14:11:49 +10:00
Mark Andrews
fe51e068f0
4208. [bug] Address null pointer dereferences on out of memory.
...
[RT #40764 ]
2015-09-17 08:51:25 +10:00
Mark Andrews
48bbe9c7f2
fix opcode usage
2015-09-16 21:17:49 +10:00
Mark Andrews
0f2ecf4b5c
4207. [bug] Handle class mismatches with raw zone files.
...
[RT #40746 ]
2015-09-16 10:43:22 +10:00
Evan Hunt
226339ed43
[master] spurious spaces in named-checkconf -p
...
4205. [bug] 'named-checkconf -p' could include unwanted spaces
when printing tuples with unset optional fields.
[RT #40731 ]
2015-09-14 08:50:17 -07:00
Tinderbox User
96f6f5dfc2
update copyright notice / whitespace
2015-09-11 23:45:36 +00:00
Mark Andrews
295a711b72
4204. [bug] 'dig +trace' failed to lookup the correct type if
...
the initial root ns query was retried. [RT #40296 ]
`
2015-09-12 09:04:37 +10:00
Mark Andrews
5a49f61ca9
4199. [protocol] Add support for NINFO, RKEY, SINK, TA.
...
[RT #40545 ] [RT #40547 ] [RT #40561 ] [RT #40563 ]
2015-09-11 17:35:01 +10:00
Evan Hunt
aec8a3b7cf
[master] improve rrchecker test
...
4203. [test] The rrchecker system test now tests conversion
to and from unkonwn-type format. [RT #40584 ]
2015-09-11 00:24:47 -07:00
Mark Andrews
a0ef8211d3
4201. [func] The default preferred-glue is now the address record
...
type of the transport the query was received
over. [RT #40468 ]
2015-09-11 13:27:58 +10:00
Mark Andrews
3fa134363f
4200. [cleanup] win32: update BINDinstall to be BIND release
...
independent. [RT #38915 ]
2015-09-11 12:25:39 +10:00
Tinderbox User
f28c6dc514
update copyright notice / whitespace
2015-09-10 23:46:28 +00:00
Mark Andrews
3dd63ba00f
4199. [protocol] Add support for NINFO, RKEY, TA.
...
[RT #40545 ] [RT #40547 ] [RT #40563 ]
2015-09-10 17:58:29 +10:00
Mark Andrews
63874956de
4199. [protocol] Add support for NINFO, RKEY. [RT #40547 ] [RT #40563 ]
2015-09-10 17:07:05 +10:00
Mark Andrews
8b29fc0b7a
4199. [protocol] Add support for RKEY. [RT #40563 ]
2015-09-10 14:50:20 +10:00
Mark Andrews
5be3128599
address race condition rt40242
2015-09-09 18:12:05 +10:00
Mark Andrews
075a3d60c2
4197. [bug] 'named-checkconf -z' didn't handle 'in-view' clauses.
...
[RT #40603 ]
2015-09-09 17:56:23 +10:00
Mark Andrews
4ca7391e64
4196. [doc] Improve how "enum + other" types are documented.
...
[RT #40608 ]
4195. [bug] 'max-zone-ttl unlimited;' was broken. [RT #40608 ]
2015-09-09 17:02:11 +10:00
Mark Andrews
fbd9aaa58c
4194. [bug] named-checkconf -p failed to properly print a port
...
range. [RT #40634 ]
2015-09-09 16:49:11 +10:00
Mark Andrews
3b83676e07
*.vcxproj.in should use CRLF as EOL
2015-08-27 21:57:18 +00:00
Evan Hunt
bcae9a15c1
[master] s/the the/the/
2015-08-27 14:11:27 -07:00
Tinderbox User
0d5b7ed79d
update copyright notice / whitespace
2015-08-25 23:45:27 +00:00
Mark Andrews
9b956d342e
4192. [bug] The default rrset-order of random was not always being
...
applied. [RT #40456 ]
2015-08-25 14:52:27 +10:00
Mark Andrews
5855fd79e3
4191. [protocol] Accept DNS-SD non LDH PTR records in reverse zones
...
as per RFC 6763. [RT #37889 ]
2015-08-25 14:46:06 +10:00
Mark Andrews
3979031a06
check isc_buffer_allocate result
2015-08-23 19:29:40 +10:00
Tinderbox User
5d68969ab3
update copyright notice / whitespace
2015-08-22 23:45:23 +00:00
Mark Andrews
dc3912f3ca
4190. [protocol] Accept Active Diretory gc._msdcs.<forest> name as
...
valid with check-names. <forest> still needs to be
LDH. [RT #40399 ]
2015-08-22 15:27:33 +10:00
Mark Andrews
416265e4d4
add /
...
(cherry picked from commit 820a9517ad )
2015-08-20 14:02:08 +10:00
Mark Andrews
b5caf98644
ignore xmlstats
2015-08-20 14:00:23 +10:00
Tinderbox User
161b5249b9
update copyright notice / whitespace
2015-08-19 23:45:23 +00:00
Mark Andrews
5c1c62cd8a
awk on solaris doesn't like // as a pattern
2015-08-19 08:35:12 +10:00
Mukund Sivaraman
bf350c9f1a
Fix RPZ bugs related to wildcard triggers ( #40357 )
2015-08-18 19:39:53 +05:30
Mark Andrews
1a38ba7b41
add statistics
2015-08-18 22:31:13 +10:00
Mark Andrews
d9aeaf35ea
check for libxml2
2015-08-18 22:29:35 +10:00
Evan Hunt
b750a49f3f
[master] fixed memory leak in dns_compress_add()
...
4184. [bug] Fixed a possible memory leak in name compression
when rendering long messages. (Also, improved
wire_test for testing such messages.) [RT #40375 ]
2015-08-17 22:41:44 -07:00
Evan Hunt
420a43c8d8
[master] timing safe memory comparisons
...
4183. [cleanup] Use timing-safe memory comparisons in cryptographic
code. Also, the timing-safe comparison functions have
been renamed to avoid possible confusion with
memcmp(). [RT #40148 ]
2015-08-17 18:26:44 -07:00
Mark Andrews
486c763015
use grep rather than xmllint
2015-08-18 10:03:58 +10:00
Mark Andrews
bce42685ab
add missing echo
2015-08-18 09:37:14 +10:00
Evan Hunt
b2f85a0c8e
[master] win32: vs2015 compliance; openssl dependency for check.c
2015-08-17 11:35:10 -07:00
Mark Andrews
55df11d4e1
use sed instead of count
2015-08-18 00:35:06 +10:00
Mark Andrews
5f7540f12f
improve failure diagnostics
2015-08-17 17:42:58 +10:00
Mark Andrews
741c65c4d8
ignore leading zeros of revoked keyid
2015-08-17 17:10:46 +10:00
Tinderbox User
b140aa009b
update copyright notice / whitespace
2015-08-16 23:45:23 +00:00
Mark Andrews
6458ad3ab2
address use after free error
2015-08-16 20:28:52 +10:00
Tinderbox User
288c18263f
update copyright notice / whitespace
2015-08-14 23:45:27 +00:00
Evan Hunt
bf4a7968e8
[master] errors in pipelined queries could assert
...
4180. [bug] Error responses in pipelined queries could
cause a crash in client.c. [RT #40289 ]
2015-08-14 08:34:54 -07:00
Mukund Sivaraman
984d2bb9e5
Fix assertion failure in parsing UNSPEC(103) RR from text ( #40274 )
2015-08-14 13:30:52 +05:30
Mukund Sivaraman
474921d733
Fix assertion failure in parsing NSAP records from text
2015-08-14 13:11:26 +05:30
Mark Andrews
563878539a
4176. [bug] Address race issues with lwresd. [RT #40284 ]
2015-08-14 15:47:53 +10:00
Evan Hunt
bcf76c1fb8
[master] better reporting of xml/json unavailability
...
- error if "configure --with-libxml2" but the library isn't available
- log a warning on startup if only JSON or only XML can be served
2015-08-12 21:58:04 -07:00
Tinderbox User
aa6c5a3e33
regen master
2015-08-13 01:26:22 +00:00
Tinderbox User
ed91aca9e6
update copyright notice / whitespace
2015-08-12 23:45:25 +00:00
Mark Andrews
c631ff56bf
Updated CHANGES note to include require-server-cookie:
...
4152. [func] Implement DNS COOKIE option. This replaces the
experimental SIT option of BIND 9.10. The following
named.conf directives are available: send-cookie,
cookie-secret, cookie-algorithm, nocookie-udp-size
and require-server-cookie. The following dig options
are available: +[no]cookie[=value] and +[no]badcookie.
[RT #39928 ]
2015-08-13 08:26:23 +10:00
Evan Hunt
7c0f238c50
[master] handle time units in dnssec-coverage -r
...
4174. [bug] "dnssec-coverage -r" didn't handle time unit
suffixes correctly. [RT #38444 ]
2015-08-12 12:20:43 -07:00
Mark Andrews
efb028b6c8
4173. [bug] dig +sigchase was not properly matching the trusted
...
key. [RT #40188 ]
2015-08-12 19:11:49 +10:00
Mark Andrews
151f1bcd5e
4172. [bug] Named / named-checkconf didn't handle a view of CLASS0.
...
[RT #40265 ]
2015-08-12 19:06:00 +10:00
Mark Andrews
b8a04d50a3
Change 3813 broke dig/host -4/-6. No CHANGES as this is has not been released
2015-08-12 12:50:15 +10:00
Mark Andrews
157bc46d2e
add '=' to +opcode description
2015-08-12 07:04:08 +10:00
Evan Hunt
2a49f6bbfe
[master] use dns_message_totext() in wire_data
2015-08-10 20:51:22 -07:00
Evan Hunt
f93884fcb7
[master] use libdns functions to convert rcode and opcode to text
2015-08-10 20:27:35 -07:00
Mark Andrews
f260e3a188
address len being shadowed
2015-08-11 12:59:34 +10:00
Tinderbox User
7e80eac638
update copyright notice / whitespace
2015-08-10 23:45:23 +00:00
Evan Hunt
3812202124
[master] add a "wire_test -d" option to read raw binary data
...
4169. [test] Added a 'wire_test -d' option to read input as
raw binary data, for use as a fuzzing harness.
[RT #40312 ]
2015-08-10 14:44:02 -07:00
Evan Hunt
05b1684791
[master] fix an awk portability issue
2015-08-03 14:21:16 -07:00
Tinderbox User
f3cbd0e029
update copyright notice / whitespace
2015-08-02 23:45:22 +00:00
Evan Hunt
68116c5a5f
[master] add +nocookie options where needed
2015-08-02 11:18:12 -07:00
Mark Andrews
b485d0a67f
if UDP and we have a bad cookie send a immediate badcookie response
2015-07-27 15:42:03 +10:00
Mark Andrews
58eb2006a4
return notimp for qcount=0 unimplemeneted opcodes
...
(cherry picked from commit 7c10dc502a34f88f11c6b6469bb234c72e61fec8)
2015-07-24 13:37:12 +10:00
Evan Hunt
a3b21effd7
[master] missing 'use' caused test failure
2015-07-21 13:49:54 -07:00
Mukund Sivaraman
fc39b6a961
Update rndc usage output ( #40010 )
...
Squashed commit of the following:
commit 73f0bba7d8d4763763ff88731c739ac646714ac8
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon Jul 13 05:40:35 2015 +0530
Update rndc usage output
This is based on a patch sent by Tony Finch.
2015-07-21 12:24:27 +05:30
Mukund Sivaraman
2cc21870b0
Make rndc showzone print a message when allow-new-zones is not configured ( #40009 )
...
Squashed commit of the following:
commit 77f12b02cf4e81f13e10db3cfac90e9de0b53928
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon Jul 13 05:28:13 2015 +0530
Some tweaks
commit 9c521020b03c2fe7293ec4c970225fff479efd40
Author: Tony Finch <dot@dotat.at>
Date: Thu Jul 9 15:36:15 2015 +0100
rndc addzone error reporting improvements
Clearer error messages from rndc addzone and modzone when the view is not
known or when allow-new-zones is off.
Also, remove a spurious newline from the delzone response.
2015-07-21 12:19:24 +05:30
Mark Andrews
80a51d24ea
set badcookie not besteffort
2015-07-21 15:15:40 +10:00
Evan Hunt
a32ca13d12
[master] statschannel test failed when only JSON was available
2015-07-20 19:09:22 -07:00
Evan Hunt
9501aa9d5a
[master] portability
2015-07-20 19:01:29 -07:00
Mark Andrews
3a49d0ff10
4164. [bug] Don't rename slave files and journals on out of memory.
...
[RT #40033 ]
4163. [bug] Address compiler warnings. [RT #40024 ]
2015-07-13 09:46:59 +10:00
Tinderbox User
b3338fc248
regen master
2015-07-11 01:05:48 +00:00
Tinderbox User
35af5049f8
update copyright notice / whitespace
2015-07-10 23:45:23 +00:00
Evan Hunt
629a015940
[master] correct the maximum NTA lifetime in rndc's help output
2015-07-10 09:07:23 -07:00
Mark Andrews
539c3f73b7
zone is not optional for zonestatus [RT #40012 ]
2015-07-10 15:28:11 +10:00
Evan Hunt
b716b9cddc
[master] add JSON and more XML tests
...
4161. [test] Add JSON test for traffic size stats; also test
for consistency between "rndc stats" and the XML
and JSON statistics channel contents. [RT #38700 ]
2015-07-09 21:18:42 -07:00
Tinderbox User
c0cbdeedb5
regen master
2015-07-10 01:05:03 +00:00
Tinderbox User
f16a6bfb6c
update copyright notice / whitespace
2015-07-09 23:45:22 +00:00
Evan Hunt
e38a7d749b
[master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9
2015-07-08 22:56:32 -07:00
Evan Hunt
1479200aa0
[master] DDoS mitigation features
...
3938. [func] Added quotas to be used in recursive resolvers
that are under high query load for names in zones
whose authoritative servers are nonresponsive or
are experiencing a denial of service attack.
- "fetches-per-server" limits the number of
simultaneous queries that can be sent to any
single authoritative server. The configured
value is a starting point; it is automatically
adjusted downward if the server is partially or
completely non-responsive. The algorithm used to
adjust the quota can be configured via the
"fetch-quota-params" option.
- "fetches-per-zone" limits the number of
simultaneous queries that can be sent for names
within a single domain. (Note: Unlike
"fetches-per-server", this value is not
self-tuning.)
- New stats counters have been added to count
queries spilled due to these quotas.
See the ARM for details of these options. [RT #37125 ]
2015-07-08 22:53:39 -07:00
Mark Andrews
2561b2dd84
add comment about +trace and @server
2015-07-09 12:11:46 +10:00
Tinderbox User
f66d0e646f
regen
2015-07-08 23:30:01 +00:00
Mark Andrews
e8f98ec8d4
future cookie code
2015-07-08 12:57:29 +10:00
Mark Andrews
4968e1de7e
allow named to build w/o openssl
2015-07-08 11:54:25 +10:00
Tinderbox User
9ab5a7d83c
update copyright notice / whitespace
2015-07-07 23:45:22 +00:00
Mark Andrews
6e7f5e8ad5
4159. [cleanup] Alphabetize dig's help output. [RT #39966 ]
2015-07-08 09:20:49 +10:00
Mark Andrews
b399f4e568
4159. [cleanup] Alphabetize dig's help output. [RT #39966 ]
2015-07-08 08:49:24 +10:00
Evan Hunt
70d987def5
[master] traffic size stats
...
4156. [func] Added statistics counters to track the sizes
of incoming queries and outgoing responses in
histogram buckets, as specified in RSSAC002.
[RT #39049 ]
2015-07-06 22:29:06 -07:00
Mukund Sivaraman
33ca26968b
Allow RPZ rewrite logging to be configured on a per-zone basis ( #39754 )
2015-07-06 08:57:51 +05:30
Mark Andrews
3e33f4198d
4154. [bug] A OPT record should be included with the FORMERR
...
response when there is a malformed EDNS option.
[RT #39647 ]
4153. [bug] Dig should zero non significant +subnet bits. Check
that non significant ECS bits are zero on receipt.
[RT #39647 ]
2015-07-06 12:52:37 +10:00
Tinderbox User
1879ff4932
regen master
2015-07-06 01:04:49 +00:00
Tinderbox User
8f0b326d9a
update copyright notice / whitespace
2015-07-05 23:45:22 +00:00
Mark Andrews
ce67023ae3
4152. [func] Implement DNS COOKIE option. This replaces the
...
experimental SIT option of BIND 9.10. The following
named.conf directives are avaliable: send-cookie,
cookie-secret, cookie-algorithm and nocookie-udp-size.
The following dig options are available:
+[no]cookie[=value] and +[no]badcookie. [RT #39928 ]
2015-07-06 09:44:24 +10:00
Tinderbox User
d6b82bc2ae
update copyright notice / whitespace
2015-06-30 23:45:23 +00:00
Tinderbox User
6cd01c0a96
regen master
2015-06-30 01:04:57 +00:00
Tinderbox User
337d408adb
update copyright notice / whitespace
2015-06-29 23:45:23 +00:00
Jeremy C. Reed
001b06f0ab
remove some duplicate "the" words.
2015-06-29 13:40:06 -04:00
Mukund Sivaraman
08f0129732
Fix a bug printing zone names with '/' character in XML and JSON stats ( #39873 )
2015-06-29 18:33:18 +05:30
Mark Andrews
4a61eae651
4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
...
was returning referrals rather than nodata responses
when the AAAA records were filtered. [RT #39843 ]
2015-06-29 15:48:41 +10:00
Tinderbox User
8e50c69783
update copyright notice / whitespace
2015-06-25 23:45:22 +00:00
Witold Krecicki
f10a67dad2
Add statistics counters for nxdomain redirections. [RT #39790 ]
2015-06-25 09:21:50 +02:00
Tinderbox User
e0ba64bdd2
update copyright notice / whitespace
2015-06-23 23:45:21 +00:00
Mukund Sivaraman
0439bfedd9
Fix parsing of NZFs saved by rndc addzone with view specified ( #39845 )
2015-06-23 14:19:48 +05:30
Mukund Sivaraman
b4e114e3cd
Print unsigned values for serial, etc. in rndc zonestatus output ( #39854 )
2015-06-23 13:57:33 +05:30
Mukund Sivaraman
d14c268362
Remove redundant nzf_remove() call during delzone ( #39844 )
2015-06-23 13:41:08 +05:30
Witold Krecicki
af3770ed93
rndc reconfig reports configuration errors the same way rndc reload does [RT #39635 ]
2015-06-12 10:19:29 +02:00
Evan Hunt
27970e78c6
[master] log outdated rpz settings regardless of enable-querytrace
2015-06-10 10:22:59 -07:00
Evan Hunt
215049febb
[master] rpz_ver check was ineffective
2015-06-09 15:05:43 -07:00
Witold Krecicki
f85deb5154
log expired NTA at startup
2015-06-08 13:57:24 +02:00
Tinderbox User
335c82aebd
regen master
2015-06-05 01:05:03 +00:00
Mark Andrews
8a9bac8dec
4133. [port] Update how various json libraries are handled.
...
[RT #39646 ]
2015-06-05 10:16:24 +10:00
Evan Hunt
eb447eca88
[master] dig option cleanups
...
4132. [cleanup] dig: added +rd as a synonym for +recurse,
added +class as an unabbreviated alternative
to +cl. [RT #39686 ]
2015-06-04 08:55:32 -07:00
Evan Hunt
8c9fba44a4
[master] further RPZ fixes
...
4131. [bug] Addressed further problems with reloading RPZ
zones. [RT #39649 ]
2015-06-03 18:18:55 -07:00
Mark Andrews
b704d25ff3
unlock T4_mx
2015-05-30 17:54:33 +10:00
Mark Andrews
8c74b6a9a1
use sed as tail -n +# is not portable
2015-05-30 11:05:57 +10:00
Tinderbox User
22be030b50
regen master
2015-05-29 01:04:57 +00:00
Tinderbox User
431e5c81db
update copyright notice / whitespace
2015-05-28 23:45:24 +00:00
Mark Andrews
e53e202ef3
4128. [bug] Address issues raised by Coverity 7.6. [RT #39537 ]
2015-05-28 13:17:07 +10:00
Mark Andrews
52a487f71a
link against ISC_OPENSSL_LIBS
2015-05-28 11:06:39 +10:00
Tinderbox User
481870b95f
regen master
2015-05-28 01:04:54 +00:00
Tinderbox User
3813d22587
update copyright notice / whitespace
2015-05-27 23:45:25 +00:00
Mark Andrews
598b502695
4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
...
key as per RFC 7344, Section 4.1. [RT #37215 ]
2015-05-27 15:25:45 +10:00
Evan Hunt
a32b6291aa
[master] address regression
...
4126. [bug] Addressed a regression introduced in change #4121 .
[RT #39611 ]
2015-05-26 19:11:08 -07:00
Mark Andrews
91d3c63ca7
add -P and -T to help
2015-05-27 10:56:49 +10:00
Tinderbox User
b7b835bfb0
update copyright notice / whitespace
2015-05-24 23:45:24 +00:00
Mark Andrews
83622f9a4c
link against libisc
2015-05-24 12:50:56 +10:00
Mark Andrews
cb9b145f39
don't include <isc/print.h>
2015-05-24 12:50:20 +10:00
Mark Andrews
936adc1282
link against libisc
2015-05-24 11:58:15 +10:00
Tinderbox User
d70dac20d2
update copyright notice / whitespace
2015-05-23 23:45:25 +00:00
Mark Andrews
2ac85d943b
specfiy where libisc is
...
(cherry picked from commit c907e7b512e88b641595d514790e2b41575f149e)
2015-05-24 06:03:08 +10:00
Mark Andrews
e6e7de5cda
link against ISCLIBS
2015-05-24 05:42:44 +10:00
Francis Dupont
850cfa4e86
Added isc in includes (print.h requires it)
2015-05-23 15:51:34 +02:00
Francis Dupont
3759f10fc5
added print.h includes, updated copyrights
2015-05-23 14:21:51 +02:00
Tinderbox User
46ee7c3260
update copyright notice / whitespace
2015-05-22 23:45:24 +00:00
Curtis Blackburn
717c2b9655
4125. [test] Added tests for dig, renamed delv test to digdelv.
...
[RT #39490 ]
2015-05-22 11:47:17 -07:00
Evan Hunt
c55a1da4fc
[master] log parsing errors from default config or addzone/modzone
...
4124. [func] Log errors or warnings encountered when parsing the
internal default configuration. Clarify the logging
of errors and warnings encountered in rndc
addzone or modzone parameters. [RT #39440 ]
2015-05-21 23:04:29 -07:00
Tinderbox User
0dfc0745c4
update copyright notice / whitespace
2015-05-21 23:45:26 +00:00
Mukund Sivaraman
705cea35a8
Fix RPZ radix tree search() for CLIENT-IP triggers ( #39481 )
2015-05-21 11:10:49 +05:30
Evan Hunt
b403f3b57e
[master] revert erroneous cleanup
2015-05-20 13:44:28 -07:00
Evan Hunt
54231cf082
[master] minor cleanup
2015-05-20 00:10:38 -07:00
Tinderbox User
e9ed929fd1
regen master
2015-05-20 01:04:55 +00:00
Evan Hunt
7e6cf6fc6e
[master] address a possible policy update race
...
4120. [bug] A bug in RPZ could cause the server to crash if
policy zones were updated while recursion was
pending for RPZ processing of an active query.
[RT #39415 ]
2015-05-19 15:47:42 -07:00
Jeremy C. Reed
20914534e6
add a space after shell here-document name
...
<<END> foo.out
to
<<END > foo.out
to be consistent with shell style
discussed via jabber in bind9 room
2015-05-19 13:22:36 -04:00
Mark Andrews
c7463967db
4119. [func] Allow dig to set the message opcode. [RT #39550 ]
2015-05-19 12:46:06 +10:00
Evan Hunt
d9aefcf5cb
[master] there are now 98 automatic zones
2015-05-16 10:07:17 -07:00
Mark Andrews
8f20f6c9d7
4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534.
2015-05-15 08:22:25 +10:00
Tinderbox User
9ae1588020
update copyright notice / whitespace
2015-05-08 23:45:24 +00:00
Mukund Sivaraman
b947e1a521
Fix a bug in RPZ that could cause unwanted recursion ( #39229 )
...
Conflicts:
doc/arm/notes.xml
2015-05-07 08:29:36 +05:30
Tinderbox User
012142bbe0
update copyright notice / whitespace
2015-05-06 23:45:24 +00:00