Tinderbox User
b269de36be
update copyright notice
2014-01-15 23:46:24 +00:00
Mark Andrews
636c2f488c
initalize ret
2014-01-16 09:23:12 +11:00
Evan Hunt
90b513b2a0
[master] another build fix for pkcs11+atf+libtool
2014-01-15 12:07:04 -08:00
Evan Hunt
0a3fafde84
[master] try again, ensuring atf tests build...
2014-01-15 11:46:17 -08:00
Evan Hunt
e4f484b7b7
[master] address compiler warnings
2014-01-15 09:35:44 -08:00
Evan Hunt
d868cce6eb
[master] correct library build order
2014-01-15 09:20:09 -08:00
Mark Andrews
1b5dcef875
include <isc/tm.h>, <isc/lang.h> and <isc/types.h>
2014-01-15 20:42:22 +11:00
Evan Hunt
a147de10fe
[master] portable strptime/timegm
...
3709. [port] Use built-in versions of strptime() and timegm()
on all platforms to avoid portability issues.
[RT #35183 ]
2014-01-14 23:17:47 -08:00
Mark Andrews
702958d202
3708. [bug] Address a portentry locking issue in dispatch.c.
...
[RT #35128 ]
2014-01-15 15:55:35 +11:00
Mark Andrews
cd7f8d18f8
3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
...
on a missing resolv.conf file and initializes the
structure as if it had been configured with:
nameserver ::1
nameserver 127.0.0.1
Note: Callers will need to be updated to treat
ISC_R_FILENOTFOUND as a qualified success or else
they will leak memory. The following code fragment
will work with both only and new versions without
changing the behaviour of the existing code.
resconf = NULL;
result = irs_resconf_load(mctx, "/etc/resolv.conf",
&resconf);
if (result != ISC_SUCCESS) {
if (resconf != NULL)
irs_resconf_destroy(&resconf);
....
}
[RT #35194 ]
2014-01-15 15:22:55 +11:00
Mark Andrews
d8b83f0e2b
silence compiler warning
2014-01-15 12:40:09 +11:00
Tinderbox User
bf0266f286
update copyright notice
2014-01-14 23:46:22 +00:00
Evan Hunt
ba751492fc
[master] native PKCS#11 support
...
3705. [func] "configure --enable-native-pkcs11" enables BIND
to use the PKCS#11 API for all cryptographic
functions, so that it can drive a hardware service
module directly without the need to use a modified
OpenSSL as intermediary (so long as the HSM's vendor
provides a complete-enough implementation of the
PKCS#11 interface). This has been tested successfully
with the Thales nShield HSM and with SoftHSMv2 from
the OpenDNSSEC project. [RT #29031 ]
2014-01-14 15:40:56 -08:00
Mark Andrews
07fb9b8330
3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185 ]
2014-01-14 16:12:30 +11:00
Tinderbox User
2cf1d5b098
update copyright notice
2014-01-12 23:46:23 +00:00
Mark Andrews
c24b6b4a40
fix for pre C99 compiler
2014-01-13 09:29:25 +11:00
Mark Andrews
fb756ba304
3703. [func] Prefetch about to expire records if they are queried
...
for, see prefetch option for details. [RT #35041 ]
2014-01-12 21:29:15 +11:00
Evan Hunt
dc1cfff92a
[master] fix win32 isc_time_set()
2014-01-11 22:01:40 -08:00
Evan Hunt
6736c84f11
[master] missing prototype in time.h
2014-01-10 20:19:17 -08:00
Evan Hunt
903247531a
[master] portable replacement for timegm()
2014-01-10 19:22:02 -08:00
Mark Andrews
a7c412f37c
update copyrights
2014-01-11 07:07:56 +11:00
Evan Hunt
f459b70c8e
[master] one more win32 build error
2014-01-10 11:20:46 -08:00
Evan Hunt
480172bf6a
[master] missing prototypes
2014-01-10 11:17:12 -08:00
Evan Hunt
1bb2f53b9f
[master] fix win32 build problems
2014-01-10 10:58:06 -08:00
Mark Andrews
fd0f3e7cd8
add unit test for isc_time_parsehttptimestamp
2014-01-11 00:30:41 +11:00
Mark Andrews
52e6d8a36d
add ISC_PLATFORM_NEEDSTRCASESTR
2014-01-10 23:53:41 +11:00
Mark Andrews
429ab67296
strptime returns time in the local time zone so use mktime
2014-01-10 23:44:59 +11:00
Evan Hunt
0cd166e0a9
[master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9
2014-01-09 22:04:29 -08:00
Evan Hunt
60fb67079e
[master] add isc_string_strcasestr for portability
2014-01-09 22:04:03 -08:00
Mark Andrews
ff6de396a9
3701. [func] named-checkconf can now suppress the printing of
...
shared secrets by specifying '-x'. [RT #34465 ]
2014-01-10 16:56:36 +11:00
Evan Hunt
57a46f4b19
[master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9
2014-01-09 19:05:46 -08:00
Evan Hunt
789252d55f
[master] stats improvements
...
3700. [func] Allow access to subgroups of XML statistics via
special URLs http://<server>:<port>/xml/v3/server,
/zones, /net, /tasks, /mem, and /status. [RT #35115 ]
3699. [bug] Improvements to statistics channel XSL stylesheet:
the stylesheet can now be cached by the browser;
section headers are omitted from the stats display
when there is no data in those sections to be
displayed; counters are now right-justified for
easier readability. [RT #35117 ]
2014-01-09 18:46:25 -08:00
Tinderbox User
431a83fb29
update copyright notice
2014-01-09 23:46:35 +00:00
Mark Andrews
109f477ed7
silence compiler warning
2014-01-09 15:57:59 +11:00
Evan Hunt
e851ea8260
[master] replace memcpy() with memmove().
...
3698. [cleanup] Replaced all uses of memcpy() with memmove().
[RT #35120 ]
2014-01-08 16:39:05 -08:00
Tinderbox User
ca8ad4871e
update copyright notice
2014-01-06 23:46:06 +00:00
Jeremy C. Reed
c55b7dce48
See ticket 35140 for details.
...
Install some include files:
dns/client.h
dns/tsec.h
irs/resconf.h
irs/types.h
(I noticed these when building DHCP using installed BIND9.)
This was okayed during the 2014-01-02 BIND9 phone meeting.
2014-01-06 14:20:31 -06:00
Evan Hunt
2b258a1f5b
[master] dispatch.c race
...
3695. [bug] Address a possible race in dispatch.c. [RT #35107 ]
2013-12-23 09:50:18 -08:00
Evan Hunt
c14ba71070
[master] warn if key-directory doesn't exist
...
3694. [bug] Warn when a key-directory is configured for a zone,
but does not exist or is not a directory. [RT #35109 ]
2013-12-20 14:57:03 -08:00
Tinderbox User
1baa4729ce
update copyright notice
2013-12-16 23:46:18 +00:00
Mark Andrews
a2ca594252
sort and one file per line
2013-12-17 10:35:45 +11:00
Mark Andrews
161e803a56
3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
...
was no data at the node. [RT #35080 ]
2013-12-17 09:08:59 +11:00
Evan Hunt
0606c47750
[master] correct dispatch address/port check
...
3690. [bug] Iterative responses could be missed when the source
port for an upstream query was the same as the
listener port (53). [RT #34925 ]
2013-12-12 22:39:12 -08:00
Evan Hunt
9b895f30f1
[master] fix insecure delegation across static-stub zones
...
3689. [bug] Fixed a bug causing an insecure delegation from one
static-stub zone to another to fail with a broken
trust chain. [RT #35081 ]
2013-12-12 22:19:33 -08:00
Mark Andrews
1bdc17e54e
remove from load_rpzs
2013-12-12 13:53:10 +11:00
Mark Andrews
e4d0018d4c
3688. [bug] loadnode could return a freed node on out of memory.
...
[RT #35106 ]
2013-12-12 12:49:44 +11:00
Tinderbox User
de77dcc2c1
update copyright notice
2013-12-11 23:47:38 +00:00
Mark Andrews
00112618bc
3687. [bug] Address null pointer dereference in zone_xfrdone.
...
[RT #35042 ]
2013-12-12 10:38:35 +11:00
Evan Hunt
0bbe3273a2
[master] dnssec-signzone -Q
...
3686. [func] "dnssec-signzone -Q" drops signatures from keys
that are still published but no longer active.
[RT #34990 ]
2013-12-11 13:25:21 -08:00
Mark Andrews
8539d19c04
handle underflow now that n is unsigned
...
(cherry picked from commit 536ac53126 )
2013-12-10 07:24:44 +11:00