Commit graph

9207 commits

Author SHA1 Message Date
Tinderbox User
b269de36be update copyright notice 2014-01-15 23:46:24 +00:00
Mark Andrews
636c2f488c initalize ret 2014-01-16 09:23:12 +11:00
Evan Hunt
90b513b2a0 [master] another build fix for pkcs11+atf+libtool 2014-01-15 12:07:04 -08:00
Evan Hunt
0a3fafde84 [master] try again, ensuring atf tests build... 2014-01-15 11:46:17 -08:00
Evan Hunt
e4f484b7b7 [master] address compiler warnings 2014-01-15 09:35:44 -08:00
Evan Hunt
d868cce6eb [master] correct library build order 2014-01-15 09:20:09 -08:00
Mark Andrews
1b5dcef875 include <isc/tm.h>, <isc/lang.h> and <isc/types.h> 2014-01-15 20:42:22 +11:00
Evan Hunt
a147de10fe [master] portable strptime/timegm
3709.	[port]		Use built-in versions of strptime() and timegm()
			on all platforms to avoid portability issues.
			[RT #35183]
2014-01-14 23:17:47 -08:00
Mark Andrews
702958d202 3708. [bug] Address a portentry locking issue in dispatch.c.
[RT #35128]
2014-01-15 15:55:35 +11:00
Mark Andrews
cd7f8d18f8 3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
on a missing resolv.conf file and initializes the
                        structure as if it had been configured with:

                                nameserver ::1
                                nameserver 127.0.0.1

                        Note: Callers will need to be updated to treat
                        ISC_R_FILENOTFOUND as a qualified success or else
                        they will leak memory. The following code fragment
                        will work with both only and new versions without
                        changing the behaviour of the existing code.

                        resconf = NULL;
                        result = irs_resconf_load(mctx, "/etc/resolv.conf",
                                                  &resconf);
                        if (result != ISC_SUCCESS) {
                                if (resconf != NULL)
                                        irs_resconf_destroy(&resconf);
                                ....
                        }

                        [RT #35194]
2014-01-15 15:22:55 +11:00
Mark Andrews
d8b83f0e2b silence compiler warning 2014-01-15 12:40:09 +11:00
Tinderbox User
bf0266f286 update copyright notice 2014-01-14 23:46:22 +00:00
Evan Hunt
ba751492fc [master] native PKCS#11 support
3705.	[func]		"configure --enable-native-pkcs11" enables BIND
			to use the PKCS#11 API for all cryptographic
			functions, so that it can drive a hardware service
			module directly without the need to use a modified
			OpenSSL as intermediary (so long as the HSM's vendor
			provides a complete-enough implementation of the
			PKCS#11 interface). This has been tested successfully
			with the Thales nShield HSM and with SoftHSMv2 from
			the OpenDNSSEC project. [RT #29031]
2014-01-14 15:40:56 -08:00
Mark Andrews
07fb9b8330 3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185] 2014-01-14 16:12:30 +11:00
Tinderbox User
2cf1d5b098 update copyright notice 2014-01-12 23:46:23 +00:00
Mark Andrews
c24b6b4a40 fix for pre C99 compiler 2014-01-13 09:29:25 +11:00
Mark Andrews
fb756ba304 3703. [func] Prefetch about to expire records if they are queried
for, see prefetch option for details. [RT #35041]
2014-01-12 21:29:15 +11:00
Evan Hunt
dc1cfff92a [master] fix win32 isc_time_set() 2014-01-11 22:01:40 -08:00
Evan Hunt
6736c84f11 [master] missing prototype in time.h 2014-01-10 20:19:17 -08:00
Evan Hunt
903247531a [master] portable replacement for timegm() 2014-01-10 19:22:02 -08:00
Mark Andrews
a7c412f37c update copyrights 2014-01-11 07:07:56 +11:00
Evan Hunt
f459b70c8e [master] one more win32 build error 2014-01-10 11:20:46 -08:00
Evan Hunt
480172bf6a [master] missing prototypes 2014-01-10 11:17:12 -08:00
Evan Hunt
1bb2f53b9f [master] fix win32 build problems 2014-01-10 10:58:06 -08:00
Mark Andrews
fd0f3e7cd8 add unit test for isc_time_parsehttptimestamp 2014-01-11 00:30:41 +11:00
Mark Andrews
52e6d8a36d add ISC_PLATFORM_NEEDSTRCASESTR 2014-01-10 23:53:41 +11:00
Mark Andrews
429ab67296 strptime returns time in the local time zone so use mktime 2014-01-10 23:44:59 +11:00
Evan Hunt
0cd166e0a9 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2014-01-09 22:04:29 -08:00
Evan Hunt
60fb67079e [master] add isc_string_strcasestr for portability 2014-01-09 22:04:03 -08:00
Mark Andrews
ff6de396a9 3701. [func] named-checkconf can now suppress the printing of
shared secrets by specifying '-x'. [RT #34465]
2014-01-10 16:56:36 +11:00
Evan Hunt
57a46f4b19 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2014-01-09 19:05:46 -08:00
Evan Hunt
789252d55f [master] stats improvements
3700.	[func]		Allow access to subgroups of XML statistics via
			special URLs http://<server>:<port>/xml/v3/server,
			/zones, /net, /tasks, /mem, and /status.  [RT #35115]

3699.	[bug]		Improvements to statistics channel XSL stylesheet:
			the stylesheet can now be cached by the browser;
			section headers are omitted from the stats display
			when there is no data in those sections to be
			displayed; counters are now right-justified for
			easier readability. [RT #35117]
2014-01-09 18:46:25 -08:00
Tinderbox User
431a83fb29 update copyright notice 2014-01-09 23:46:35 +00:00
Mark Andrews
109f477ed7 silence compiler warning 2014-01-09 15:57:59 +11:00
Evan Hunt
e851ea8260 [master] replace memcpy() with memmove().
3698.	[cleanup]	Replaced all uses of memcpy() with memmove().
			[RT #35120]
2014-01-08 16:39:05 -08:00
Tinderbox User
ca8ad4871e update copyright notice 2014-01-06 23:46:06 +00:00
Jeremy C. Reed
c55b7dce48 See ticket 35140 for details.
Install some include files:

dns/client.h
dns/tsec.h
irs/resconf.h
irs/types.h
(I noticed these when building DHCP using installed BIND9.)

This was okayed during the 2014-01-02 BIND9 phone meeting.
2014-01-06 14:20:31 -06:00
Evan Hunt
2b258a1f5b [master] dispatch.c race
3695.	[bug]		Address a possible race in dispatch.c. [RT #35107]
2013-12-23 09:50:18 -08:00
Evan Hunt
c14ba71070 [master] warn if key-directory doesn't exist
3694.	[bug]		Warn when a key-directory is configured for a zone,
			but does not exist or is not a directory. [RT #35109]
2013-12-20 14:57:03 -08:00
Tinderbox User
1baa4729ce update copyright notice 2013-12-16 23:46:18 +00:00
Mark Andrews
a2ca594252 sort and one file per line 2013-12-17 10:35:45 +11:00
Mark Andrews
161e803a56 3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
was no data at the node. [RT #35080]
2013-12-17 09:08:59 +11:00
Evan Hunt
0606c47750 [master] correct dispatch address/port check
3690.	[bug]		Iterative responses could be missed when the source
			port for an upstream query was the same as the
			listener port (53). [RT #34925]
2013-12-12 22:39:12 -08:00
Evan Hunt
9b895f30f1 [master] fix insecure delegation across static-stub zones
3689.	[bug]		Fixed a bug causing an insecure delegation from one
			static-stub zone to another to fail with a broken
			trust chain. [RT #35081]
2013-12-12 22:19:33 -08:00
Mark Andrews
1bdc17e54e remove from load_rpzs 2013-12-12 13:53:10 +11:00
Mark Andrews
e4d0018d4c 3688. [bug] loadnode could return a freed node on out of memory.
[RT #35106]
2013-12-12 12:49:44 +11:00
Tinderbox User
de77dcc2c1 update copyright notice 2013-12-11 23:47:38 +00:00
Mark Andrews
00112618bc 3687. [bug] Address null pointer dereference in zone_xfrdone.
[RT #35042]
2013-12-12 10:38:35 +11:00
Evan Hunt
0bbe3273a2 [master] dnssec-signzone -Q
3686.	[func]		"dnssec-signzone -Q" drops signatures from keys
			that are still published but no longer active.
			[RT #34990]
2013-12-11 13:25:21 -08:00
Mark Andrews
8539d19c04 handle underflow now that n is unsigned
(cherry picked from commit 536ac53126)
2013-12-10 07:24:44 +11:00