Commit graph

38327 commits

Author SHA1 Message Date
Suzanne Goldlust
dd99c8bc3e Fix broken link to OMB memo
(cherry picked from commit 1482f5b1ed)
2023-12-04 11:01:37 +01:00
Michał Kępień
6817bf1284 Merge branch 'michal/minor-gitlab-ci-cleanup-9.18' into 'bind-9.18'
[9.18] Minor GitLab CI cleanup

See merge request isc-projects/bind9!8512
2023-11-21 09:31:33 +00:00
Michał Kępień
2d1f51d627
Move job definitions to the proper place
The definitions of the "ci-variables" and "cross-version-config-tests"
GitLab CI jobs were accidentally added in the .gitlab-ci.yml section
that claims to only contain job templates.  Move the definitions of
these two jobs to a more appropriate location in .gitlab-ci.yml, without
changing the job definitions themselves.

(cherry picked from commit 192cceba5a)
2023-11-21 10:29:21 +01:00
Michał Kępień
c81c4f3f96
Drop the TARBALL_EXTENSION variable
All currently supported BIND 9 branches use xz-packed tarballs for
source code distribution.  Having a variable with a lengthy name that
only holds two characters does not improve readability - it was only
useful for maintaining .gitlab-ci.yml consistency between BIND 9.11 and
all the newer branches, but that era has come to an end a while ago.

Replace all occurrences of the TARBALL_EXTENSION variable in
.gitlab-ci.yml with a fixed string ("xz") to simplify the contents of
that file.

(cherry picked from commit 832c7d4396)
2023-11-21 10:29:21 +01:00
Matthijs Mekking
144c7d0d9d Merge branch 'matthijs-lexopt-escape-public-key-9.18' into 'bind-9.18'
[9.18] Recognize escapes when reading the public key

See merge request isc-projects/bind9!8504
2023-11-20 12:40:43 +00:00
Matthijs Mekking
004236e5f2 Add CHANGES
(cherry picked from commit 53657591fa)
2023-11-20 12:10:30 +01:00
Matthijs Mekking
cf23303dd9 Add a DNSSEC policy test case for a special zone
Try to create a key for a zone, and then sign it, that has some special
characters in the name.

(cherry picked from commit 6a4f3ec242)
2023-11-20 12:10:30 +01:00
Matthijs Mekking
3c244da9d4 Recognize escapes when reading the public key
Escapes are valid in DNS names, and should be recognized when reading
the public key from disk.

(cherry picked from commit 71f023a1c3)
2023-11-20 08:35:30 +01:00
Mark Andrews
79e2a91cb4 Merge branch '4396-dig-does-not-display-yaml-output-for-errors-when-using-protocols-other-than-udp-bind-9.18' into 'bind-9.18'
[9.18] Resolve "dig does not display YAML output for errors when using protocols other than UDP"

See merge request isc-projects/bind9!8503
2023-11-20 03:14:58 +00:00
Mark Andrews
ad9c39ebad Add CHANGES for [GL #4396]
(cherry picked from commit f813795c6f)
2023-11-20 13:41:11 +11:00
Mark Andrews
734061ac1b Emit "no servers could be reached" for TCP as well as UDP
When all the servers are exhausted for TCP emit "no servers could
be reached" in tcp_connected.  This message is already emitted for
UDP.

(cherry picked from commit 831efa40d6)
2023-11-20 13:40:19 +11:00
Evan Hunt
4e31215c20 Merge branch '3983-secondary-loadtime-bind-9.18' into 'bind-9.18'
[9.18] set loadtime during initial transfer of a secondary zone

See merge request isc-projects/bind9!8498
2023-11-16 05:53:00 +00:00
Evan Hunt
6b47d98a95 set loadtime during initial transfer of a secondary zone
when transferring in a non-inline-signing secondary for the first time,
we previously never set the value of zone->loadtime, so it remained
zero. this caused a test failure in the statschannel system test,
and that test case was temporarily disabled.  the value is now set
correctly and the test case has been reinstated.

(cherry picked from commit 9643281453)
2023-11-15 18:06:58 -08:00
Mark Andrews
95d75b653c Merge branch '4433-supplied-buffer-too-large-in-wire_test-c-bind-9.18' into 'bind-9.18'
[9.18] Resolve "Supplied Buffer Too Large in wire_test.c"

See merge request isc-projects/bind9!8497
2023-11-16 02:01:21 +00:00
Mark Andrews
617f73426d Adjust comment to have correct message limit value
(cherry picked from commit 560c245971)
2023-11-16 12:22:08 +11:00
Mark Andrews
dc0671e724 Adjust message buffer sizes in test code
(cherry picked from commit cbfcdbc199)
2023-11-16 12:22:08 +11:00
Mark Andrews
ab2a450887 Check that buffer length in dns_message_renderbegin
The maximum DNS message size is 65535 octets. Check that the buffer
being passed to dns_message_renderbegin does not exceed this as the
compression code assumes that all offsets are no bigger than this.

(cherry picked from commit a069513234)
2023-11-16 12:22:08 +11:00
Michał Kępień
d30902f9cf Merge tag 'v9.18.20' into bind-9.18 2023-11-15 14:57:53 +01:00
Michal Nowak
ed78bc4a01 Merge branch 'mnowak/fedora-39-9.18' into 'bind-9.18'
[9.18] Add Fedora 39

See merge request isc-projects/bind9!8491
2023-11-14 19:21:02 +00:00
Michal Nowak
59b2452c7a
Add Fedora 39
(cherry picked from commit cdb4b97b28)
2023-11-14 19:34:52 +01:00
Ondřej Surý
50a7594475 Merge branch 'ondrej-clang-format-17-bind-9.18' into 'bind-9.18'
Reformat sources with up-to-date clang-format-17

See merge request isc-projects/bind9!8489
2023-11-13 16:22:04 +00:00
Ondřej Surý
eaadc30b4d
Ignore clang-format reformat 2023-11-13 17:13:58 +01:00
Ondřej Surý
6a85e79c0b
Reformat sources with up-to-date clang-format-17 2023-11-13 17:13:07 +01:00
Petr Špaček
957eb31680 Merge branch 'pspacek/set-up-version-and-release-notes-for-bind-9.18.21' into 'bind-9.18'
Set up version and release notes for BIND 9.18.21

See merge request isc-projects/bind9!8483
2023-11-10 13:20:57 +00:00
Petr Špaček
c1fbdc6c5a Set up release notes for BIND 9.18.21 2023-11-10 14:04:03 +01:00
Petr Špaček
9a2665efde Update BIND version to 9.18.21-dev 2023-11-10 14:04:03 +01:00
Michał Kępień
396c2b43f4
Update BIND version for release 2023-11-09 13:41:09 +01:00
Michał Kępień
16c123df5e
Add a CHANGES marker 2023-11-09 13:41:09 +01:00
Michał Kępień
69c60db1d4 Merge branch 'michal/prepare-documentation-for-bind-9.18.20' into 'v9.18.20-release'
Prepare documentation for BIND 9.18.20

See merge request isc-private/bind9!592
2023-11-09 12:40:14 +00:00
Michał Kępień
965405211a
Reorder release notes 2023-11-09 13:10:33 +01:00
Michał Kępień
d12076f9f4
Tweak and reword release notes 2023-11-09 13:10:33 +01:00
Michał Kępień
87c0ac8cf9
Prepare release notes for BIND 9.18.20 2023-11-09 13:10:33 +01:00
Michał Kępień
d4cd418c94
Tweak CHANGES entry for [GL #4260] 2023-11-09 13:10:33 +01:00
Michał Kępień
d50b55ef6d
Tweak CVE-2021-25219 reference 2023-11-09 13:10:33 +01:00
Michał Kępień
450019ba83 Merge branch 'ondrej/remove-i386-as-fully-supported-platform-9.18' into 'bind-9.18'
[9.18] Move i386 and armhf to the Best-Effort category

See merge request isc-projects/bind9!8475
2023-11-08 12:14:02 +00:00
Ondřej Surý
ac63acdb3b
Split the CPU architectures into more categories
Move i386 and other less common or ancient CPU architectures to
Community-Maintened category.  Move armhf and arm64 to the Best-Effort
category as we do test them as part of development work (new MacBooks
are all arm64), we don't really do full set of tests in the CI.

(cherry picked from commit db94c7526c)
2023-11-08 13:01:40 +01:00
Evan Hunt
acbe660771 Merge branch 'each-fix-ntadump' into 'bind-9.18'
[9.18] Fix missing newlines in output of `rndc nta -dump`

See merge request isc-projects/bind9!8466
2023-11-03 13:08:07 +00:00
Evan Hunt
9a4ccdf4fc CHANGES for [GL !8454]
(cherry picked from commit 37b101b6e2)
2023-11-03 08:28:18 +01:00
Tony Finch
1b138a5883 Fix missing newlines in output of rndc nta -dump
There were no newlines between each view in the list of negative trust
anchors.

(cherry picked from commit 61b245e318)
2023-11-03 08:28:18 +01:00
Mark Andrews
27cf95ac98 Merge branch '4101-update-b-root-server-net-addresses-bind-9.18' into 'bind-9.18'
[9.18] Resolve "Update b.root-server.net addresses"

See merge request isc-projects/bind9!8462
2023-11-02 17:19:05 +00:00
Mark Andrews
3b55342a4b Add release note for [GL #4101]
(cherry picked from commit c7a06b1fa1)
2023-11-03 03:44:30 +11:00
Mark Andrews
a4c447f9e3 Add CHANGES note for [GL #4101]
(cherry picked from commit b9bba29c5e)
2023-11-03 03:44:27 +11:00
Mark Andrews
ba7cfd2f92 Suppress reporting upcoming changes in root hints
To reduce the amount of log spam when root servers change their
addresses keep a table of upcoming changes by expected date and time
and suppress reporting differences for them until then.

Add initial entry for B.ROOT-SERVERS.NET, Nov 27, 2023.

(cherry picked from commit b69100b747)
2023-11-03 03:43:49 +11:00
Mark Andrews
15e13bd523 Update b.root-servers.net IP addresses
This covers both root hints and the default primaries for the root
zone mirror.  The official change date is Nov 27, 2023.

(cherry picked from commit 2ca2f7e985)
2023-11-03 03:43:49 +11:00
Mark Andrews
1664f95c66 Merge branch '4406-cleanup-b-in-dnstap-main-bind-9.18' into 'bind-9.18'
[9.18] Resolve "cleanup 'b' in dnstap-read main"

See merge request isc-projects/bind9!8460
2023-11-02 10:53:15 +00:00
Mark Andrews
b4352bbc6f Cleanup dead code in dnstap-read
Remove 'b' from main as it is unused.

(cherry picked from commit 0482451f84)
2023-11-02 10:09:44 +00:00
Tom Krizek
09c2dab315 Merge branch '4401-make-check-fix-junitxml-output-processing-9.18' into 'bind-9.18'
[9.18] Fix pytest junitxml output processing for make check

See merge request isc-projects/bind9!8459
2023-11-02 09:30:31 +00:00
Tom Krizek
8c8ff7faea
Fix pytest junitxml output processing for make check
Not every element tagged `skipped` in the JUnitXML tree has to contain
the `type` attribute. An example of that is a test that results in
xpass.

This has been verified with pytest version 7.4.2 and prior.

(cherry picked from commit ba25ecd2d2)
2023-11-02 10:02:51 +01:00
Michał Kępień
9199555db9 Merge branch 'michal/add-a-release-signing-job-to-gitlab-ci-9.18' into 'bind-9.18'
[9.18] Add a release signing job to GitLab CI

See merge request isc-projects/bind9!8457
2023-11-02 06:36:22 +00:00
Michał Kępień
dd217e1acf
Add a release signing job to GitLab CI
Add a GitLab CI job that is only run for tags and makes signing BIND 9
releases more convenient by utilizing a signing VM that is registered as
a GitLab CI runner.  This pulls the signing process into the release
pipelines in GitLab CI, resulting in job artifacts containing the
signatures for BIND 9 releases, which in turns simplifies the subsequent
release publication steps.

(cherry picked from commit a3a91a1557)
2023-11-02 07:23:38 +01:00