Commit graph

1674 commits

Author SHA1 Message Date
Tinderbox User
a1b3872a71 update copyright notice 2013-01-10 23:45:46 +00:00
Mark Andrews
4d112a210e 3461. [bug] Negative responses could incorrectly have AD=1
set. [RT #32237]
2013-01-10 22:38:10 +11:00
Tinderbox User
04b852c0b4 update copyright notice 2013-01-04 23:45:39 +00:00
Mark Andrews
615f53a513 3445. [bug] Warn about zone files with blank owner names
immediately after $ORIGIN directives. [RT #31848]
2013-01-04 11:23:18 +11:00
Tinderbox User
9ed297d517 update copyright notice 2012-12-20 23:45:35 +00:00
Evan Hunt
ce35e5cf0b [v9_9] reject $ORIGIN before inherited name
3445.	[bug]		Reject zone files with blank owner names immediately
			after $ORIGIN directives. [RT #31848]
(cherry picked from commit 3ad3e9c948)
2012-12-18 16:18:48 -08:00
Tinderbox User
efbd480608 update copyright notice 2012-12-18 23:45:35 +00:00
Mark Andrews
48f72b811d 3443. [bug] The NOQNAME proof was not being returned from cached
insecure responses. [RT #21409]

Conflicts:
	bin/tests/system/conf.sh.in
	lib/dns/include/dns/types.h
2012-12-19 10:06:24 +11:00
Mark Andrews
913043e5b0 3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
Squashed commit of the following:

commit 7ad3daade513c94a1c92ee7c91c112f161d13ef4
Author: Mark Andrews <marka@isc.org>
Date:   Mon Dec 3 15:03:44 2012 +1100

    look at the second token to determine if a TXT record in of unknown format or not

commit 7df32138462646f6aee84ffa56d02ac24ec8d672
Author: Mark Andrews <marka@isc.org>
Date:   Mon Dec 3 12:42:18 2012 +1100

    '"\#"' was incorrectly being treated as a unknown data escape sequence.
2012-12-08 14:06:41 +11:00
ckb
9536448786 3417. [func] Optional new XML schema (version 3.0) for the
statistics channel adds query type statistics at the
			zone level, and flattens the XML tree and uses
			compressed format to optimize parsing. Includes new XSL
			that permits charting via the Google Charts API on
			browsers that support javascript in XSL.  To enable,
			build with "configure --enable-newstats". [RT #30023]
2012-11-14 14:48:01 -06:00
Tinderbox User
90f33d8979 update copyright notice 2012-10-27 23:46:27 +00:00
Evan Hunt
7cec7ec1d2 [v9_9] backport performance changes from 9.10
3316.   [tuning]        Improved locking performance when recursing.
                        [RT #28836]

3315.   [tuning]        Use multiple dispatch objects for sending upstream
                        queries; this can improve performance on busy
                        multiprocessor systems by reducing lock contention.
                        [RT #28605]
2012-10-26 10:14:29 -07:00
Evan Hunt
152c393671 [v9_9] silence noisy OpenSSL logging
3402.	[bug]		Correct interface numbers for IPv4 and IPv6 interfaces.
(cherry picked from commit 0e37e9e3d7)
2012-10-24 13:00:06 -07:00
Tinderbox User
eb1ff61734 update copyright notice 2012-10-06 23:45:56 +00:00
Mark Andrews
bf6acccf9d 3390. [bug] Silence clang compiler warnings. [RT #30417] 2012-10-06 13:21:18 +10:00
Tinderbox User
c8f3263eb8 update copyright notice 2012-08-24 07:03:20 +00:00
Mark Andrews
0feb062f6e 3364. [security] Named could die on specially crafted record.
[RT #30416]
2012-08-24 13:28:22 +10:00
Tinderbox User
c4e1abdd94 update copyright notice 2012-08-21 23:45:50 +00:00
Mark Andrews
b4a152b6a8 3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
where not C++ safe.
2012-08-21 16:43:21 +10:00
Tinderbox User
bc0ad9c673 update copyright notice 2012-07-25 23:45:49 +00:00
ckb
66e472cd74 3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
approaching their expiry, so they don't remain
			in caches after expiry. [RT #26429]
2012-07-25 17:12:57 -05:00
Tinderbox User
1439e7b8ff update copyright notice 2012-07-23 23:45:53 +00:00
Mark Andrews
62eeb6c836 3354. [func] Improve OpenSSL error logging. [RT #29932] 2012-07-23 15:09:42 +10:00
Tinderbox User
03565e899d update copyright notice 2012-06-29 23:45:45 +00:00
Mark Andrews
cb421b69c3 reverse bad copyright update 2012-06-29 11:41:43 +10:00
Tinderbox User
cd24b114bf update copyright notice 2012-06-29 01:22:07 +00:00
Tinderbox User
9418237f65 update copyright notice 2012-06-26 23:45:42 +00:00
Mark Andrews
7c25aaf620 3341. [func] New "dnssec-verify" command checks a signed zone
to ensure correctness of signatures and of NSEC/NSEC3
                        chains. [RT #23673]
2012-06-25 14:57:32 +10:00
Mark Andrews
acebc2457c 3339. [func] Allow the maximum supported rsa exponent size to be
specified: "max-rsa-exponent-size <value>;" [RT #29228]
2012-06-20 21:34:24 +10:00
Tinderbox User
de16ff6d04 update copyright notice 2012-06-01 23:45:51 +00:00
Vernon Schryver
f05089ea5c For rt26172:
Add
      - optional "recursive-only yes|no" to the response-policy statement
      - optional max-policy-ttl to limit the lies that "recursive-only no"
          can introduce into resolvers' caches
      - test that queries with RD=0 are not rewritten by default
      - performance smoke test

    Change encoding of PASSTHRU action to "rpz-passthru".
          (The old encoding is still accepted.)
    Fix rt26180  assert botch in zone_findrdataset() in this branch
         as well.

    Fix missing signatures on NOERROR results despite RPZ hits
        when there are signatures and the client asks for DNSSEC,
2012-06-01 01:03:43 +00:00
Tinderbox User
a2093c07a5 update copyright notice 2012-05-17 23:45:48 +00:00
Evan Hunt
8b1b819ae4 add ECDSA support
3317.	[protocol]	Add ECDSA support (RFC 6605). [RT #21918]
2012-05-17 15:52:07 -07:00
Evan Hunt
e39b4d8054 Handle RRSIG signer case consistently
3329.	[bug]	Handle RRSIG signer-name case consistently: We
		generate RRSIG records with the signer-name in
		lower case.  We accept them with any case, but if
		they fail to validate, we try again in lower case.
		[RT #27451]
2012-05-17 10:59:07 -07:00
Tinderbox User
92fcedb783 update copyright notice 2012-04-12 23:45:42 +00:00
Mark Andrews
7a5ab270d3 3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
[RT #28956]
2012-04-13 08:37:30 +10:00
Mark Andrews
b5d097b103 3307. [bug] Add missing ISC_LANG_ENDDECLS to <dns/tsec.h>. [RT #28956] 2012-04-12 19:15:39 +10:00
Tinderbox User
814d92a93b update copyright notice 2012-04-11 23:45:41 +00:00
Mark Andrews
74ce4de82e 3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
3305.   [func]          Add wire format lookup method to sdb. [RT #28563]
2012-04-11 12:20:44 +10:00
Tinderbox User
5abefae88a update copyright notice 2012-03-10 23:45:42 +00:00
Evan Hunt
c9481a4625 set $Id$ 2012-03-07 08:18:58 -08:00
Tinderbox User
c201888c2a regen v9_9 2012-03-07 01:59:30 +00:00
Evan Hunt
8047e7c06f re-remove cvsignore files 2012-03-05 08:29:31 -08:00
Evan Hunt
f94af76649 Revert "added gitignore, removed cvsignore"
This reverts commit e8ae173655.
2012-03-05 08:24:17 -08:00
Evan Hunt
e8ae173655 added gitignore, removed cvsignore 2012-03-03 23:24:11 -08:00
Evan Hunt
95d2619007 3286. [bug] Managed key maintenance timer could fail to start
after 'rndc reconfig'. [RT #26786]
2012-02-22 00:35:53 +00:00
Automatic Updater
80c7083796 update copyright notice 2012-01-27 23:46:59 +00:00
Mark Andrews
bc298cd0f7 3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
out the earliest expiry time. [RT #23311]
2012-01-27 01:43:53 +00:00
Automatic Updater
ee2129ee66 update copyright notice 2012-01-25 23:46:49 +00:00
Mark Andrews
18d208a4a2 3265. [bug] Address lock order reversal with inline-signing
support. [27557]
2012-01-25 02:46:53 +00:00