Evan Hunt
ea845a6b72
Rebase all of the API files to interface=60, as this is the first
...
beta of a new major release.
2009-10-05 22:01:26 +00:00
Evan Hunt
3ff75c89eb
2704. [bug] Serial of dynamic and stub zones could be inconsistent
...
with their SOA serial. [RT #19387 ]
2009-10-05 19:39:20 +00:00
Francis Dupont
3c52c4e44c
20230 update
2009-10-05 17:39:36 +00:00
Francis Dupont
8b78c993cb
explicit engine rt20230a
2009-10-05 17:30:49 +00:00
Automatic Updater
4fa2649d57
update copyright notice
2009-10-03 23:48:10 +00:00
Evan Hunt
c36ba263d6
2699. [bug] Missing lock in rbtdb.c. [RT #20037 ]
2009-10-03 22:39:27 +00:00
Evan Hunt
1210799345
Add /* NOTREACHED */ comments
2009-10-03 18:03:54 +00:00
Francis Dupont
debd489a44
noreturn RT #20257
2009-09-29 15:06:07 +00:00
Mark Andrews
11144f86dc
silence signed/unsigned comparision warning
2009-09-25 01:42:09 +00:00
Mark Andrews
0f869e8d52
2689. [bug] Correctly handle snprintf result. [RT #20306 ]
2009-09-24 22:19:08 +00:00
Francis Dupont
c59a7b0629
missing updates in recent changes
2009-09-24 14:39:17 +00:00
Evan Hunt
53c22b8e0d
2685. [bug] Fixed dnssec-signzone -S handling of revoked keys.
...
Also, added warnings when revoking a ZSK, as this is
not defined by protocol (but is legal). [RT #19943 ]
2009-09-23 16:01:57 +00:00
Francis Dupont
6839f8b6df
cleanup USE_EVP_RSA (RT #20044 )
2009-09-23 11:16:50 +00:00
Francis Dupont
adb6972f01
minor fix, cf 20295
2009-09-22 08:38:14 +00:00
Tatuya JINMEI 神明達哉
790e471f6e
2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
...
decoded [RT #20269 ].
BIND 9.7.0, 9.6.2, 9.5.2, 9.4.4
2009-09-18 21:55:21 +00:00
Evan Hunt
b843f577bb
2677. [func] Changes to key metadata behavior:
...
- Keys without "publish" or "active" dates set will
no longer be used for smart signing. However,
those dates will be set to "now" by default when
a key is created; to generate a key but not use
it yet, use dnssec-keygen -G.
- New "inactive" date (dnssec-keygen/settime -I)
sets the time when a key is no longer used for
signing but is still published.
- The "unpublished" date (-U) is deprecated in
favor of "deleted" (-D).
[rt20247]
2009-09-14 18:45:45 +00:00
Automatic Updater
6d7e30b030
update copyright notice
2009-09-10 23:48:00 +00:00
Evan Hunt
f267b27f0e
2675. [bug] dnssec-signzone could crash if the key directory
...
did not exist. [RT #20232 ]
2009-09-10 05:09:31 +00:00
Evan Hunt
0e7cb68ea0
fix implicit memset() declaration
2009-09-10 02:18:40 +00:00
Evan Hunt
dbabab1f37
rt20045:
...
- sync_keyzone() could leak ISC_R_NOMORE, causing zone_postload() to think
it had failed
- journal roll-forward on key zones complained about having the wrong
number of SOA records
- dns_soa_buildrdata() could return a pointer to memory allocated on the
stack
2009-09-10 01:47:09 +00:00
Francis Dupont
1f821c1058
merge rt19294
2009-09-07 12:58:33 +00:00
Automatic Updater
7b1894bec1
update copyright notice
2009-09-03 23:48:13 +00:00
Tatuya JINMEI 神明達哉
0984eeca5b
added workaround for a recent change thatview->secroots is not created
...
with view. [RT #20209 ]
2009-09-03 21:45:46 +00:00
Mark Andrews
bbc204a237
2669. [func] Update PKCS#11 support to support Keyper HSM.
...
Update PKCS#11 patch to be against openssl-0.9.8i.
2009-09-03 04:09:58 +00:00
Evan Hunt
9f8d002a66
silence win32 compiler warnings
2009-09-03 00:12:23 +00:00
Automatic Updater
d7201de09b
update copyright notice
2009-09-02 23:48:03 +00:00
Evan Hunt
e7c38ca963
- define isc_mem_reallocate() in the abstract API for export lib [rt20208]
...
- define BIND9 in config.h.win32
- fix problems in mem.h caused by the win32 preprocessor failing to
expand macros used within macros
- silence a win32 compiler warning in hip_55.c
2009-09-02 23:43:54 +00:00
Evan Hunt
fff4ec3629
add /D BIND9 for win32 build
2009-09-02 19:36:36 +00:00
Evan Hunt
eab9975bcf
2668. [func] Several improvements to dnssec-* tools, including:
...
- dnssec-keygen and dnssec-settime can now set key
metadata fields 0 (to unset a value, use "none")
- dnssec-revoke sets the revocation date in
addition to the revoke bit
- dnssec-settime can now print individual metadata
fields instead of always printing all of them,
and can print them in unix epoch time format for
use by scripts
[RT #19942 ]
2009-09-02 06:29:01 +00:00
Tatuya JINMEI 神明達哉
44de0b1f7d
2666. [func] Added an 'options' argument to dns_name_fromstring()
...
(API change from 9.7.0a2). [RT #20196 ]
2009-09-01 17:36:51 +00:00
Evan Hunt
b1f3364f52
2664. [bug] create_keydata() and minimal_update() in zone.c
...
didn't properly check return values for some
functions. [RT #19956 ]
2009-09-01 07:04:12 +00:00
Tatuya JINMEI 神明達哉
9eae5f2a7a
added include <config.h>
2009-09-01 03:43:27 +00:00
Tatuya JINMEI 神明達哉
307d208450
2660. [func] Add a new set of DNS libraries for non-BIND9
...
applications. See README.libdns. [RT #19369 ]
2009-09-01 00:22:28 +00:00
Mark Andrews
11b4f17027
2657. [cleanup] Lower "journal file <path> does not exist, creating it"
...
log level to debug 1. [RT #20058 ]
2009-08-25 07:41:28 +00:00
Mark Andrews
97a2451eea
2653. [bug] Treat ENGINE_load_private_key() failures as key
...
not found rather than out of memory. [RT #18033 ]
2009-08-18 07:45:14 +00:00
Evan Hunt
ddc225b15d
2651. [bug] Dates could print incorrectly in K*.key files on
...
64-bit systems. [RT #20076 ]
2009-08-14 06:28:40 +00:00
Automatic Updater
1f5dc0fc22
update copyright notice
2009-08-13 07:14:05 +00:00
Mark Andrews
bcd0cbfdae
2649. [bug] Set the domain for forward only zones. [RT #19944 ]
2009-08-13 04:33:51 +00:00
Mark Andrews
8cff1a894f
2647. [bug] Remove unnecessary SOA updates when a new KSK is
...
added. [RT #19913 ]
2009-08-13 02:53:01 +00:00
Evan Hunt
a3288b425a
2642. [bug] nsupdate could dump core on solaris when reading
...
improperly formatted key files. [RT #20015 ]
2009-07-29 23:45:24 +00:00
Mark Andrews
6a1a8186af
2638. [bug] Silence compiler warnings in gssapi code. [RT #19954 ]
2009-07-21 06:53:09 +00:00
Mark Andrews
f1de96a386
char mechbuf[17] -> unsigned char mechbuf[17]
2009-07-20 01:55:37 +00:00
Automatic Updater
26d8ffe715
update copyright notice
2009-07-19 23:47:55 +00:00
Evan Hunt
b1fa84a099
win32 build fixes
2009-07-19 04:50:15 +00:00
Evan Hunt
553ead32ff
2636. [func] Simplify zone signing and key maintenance with the
...
dnssec-* tools. Major changes:
- all dnssec-* tools now take a -K option to
specify a directory in which key files will be
stored
- DNSSEC can now store metadata indicating when
they are scheduled to be published, acttivated,
revoked or removed; these values can be set by
dnssec-keygen or overwritten by the new
dnssec-settime command
- dnssec-signzone -S (for "smart") option reads key
metadata and uses it to determine automatically
which keys to publish to the zone, use for
signing, revoke, or remove from the zone
[RT #19816 ]
2009-07-19 04:18:05 +00:00
Automatic Updater
4a979d3577
update copyright notice
2009-07-17 23:47:41 +00:00
Evan Hunt
aeff7de836
2634. [port] win32: Add support for libxml2, enable
...
statschannel. [RT #19773 ]
2009-07-17 06:25:45 +00:00
Automatic Updater
fd4dcaddae
update copyright notice
2009-07-13 23:47:42 +00:00
Evan Hunt
943cbe8ae5
2627. [bug] Named aborted if the same key was included in
...
trusted-keys more than once. [RT #19918 ]
2009-07-13 21:53:03 +00:00
Evan Hunt
ef370118d5
2626. [bug] Multiple trusted-keys could trigger an assertion
...
failure. [RT #19914 ]
2009-07-13 21:49:57 +00:00