upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-07-16 20:02:49 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
26830 commits 18 branches 886 tags 467 MiB
Commit graph

26830 commits

This branch
This branch
All branches
Author SHA1 Message Date
Michał Kępień
2980cbd55f Rename dns_test_rdata_fromstring() to dns_test_rdatafromstring() 
Remove the underscore from "rdata_fromstring" so that all helper
functions for libdns tests use a common naming covention.
 2018-05-09 13:14:24 +02:00
Michał Kępień
bfbeef3609 Rework dns_test_makezone() 
The dns_test_makezone() helper function always assigns the created zone
to some view, which is not always necessary and complicates cleanup of
non-managed zones as they are required not to be assigned to any view.

Rework dns_test_makezone() in order to make it easier to use in unit
tests operating on non-managed zones.  Use dns_name_fromstring() instead
of dns_name_fromtext() to simplify code.  Do not use the CHECK() macro
and add comments to make code flow simpler to follow.  Use
dns_test_makeview() instead of dns_view_create().

Adjust existing unit tests using this function so that they still pass.
 2018-05-08 12:26:53 +02:00
Michał Kępień
dc1ac23b9f Merge branch 'use-clang-6.0' into 'master' 
Use clang 6.0 in clang CI jobs

See merge request isc-projects/bind9!250
 2018-05-08 04:46:59 -04:00
Michał Kępień
7e650ebee4 Use clang 6.0 in clang CI jobs 2018-05-08 10:36:52 +02:00
Evan Hunt
f0d3fe5d95 Merge branch 'placeholder' into 'master' 
placeholder

See merge request isc-projects/bind9!248
 2018-05-04 20:51:14 -04:00
Evan Hunt
a27b1d4d32 placeholder 2018-05-04 17:50:17 -07:00
Ondřej Surý
63c3a6444b Merge branch '219-new-coverity-warnings' into 'master' 
Resolve "New Coverity Warnings"

Closes #219

See merge request isc-projects/bind9!225
 2018-05-03 11:18:28 -04:00
Mark Andrews
5613c3441f if _headers is NULL don't process If-Modified-Since 2018-05-03 11:08:59 -04:00
Mark Andrews
8801c65a4b insist option != NULL and initalise last to NULL 2018-05-03 11:08:59 -04:00
Mark Andrews
7f2863196f check that order is non NULL before calling strtok_r 2018-05-03 11:08:59 -04:00
Ondřej Surý
cd8245077c Merge branch '236-silence-cppcheck-issues-in-lib-dns-dst_parse-c' into 'master' 
Resolve "silence cppcheck issues in lib/dns/dst_parse.c"

Closes #236

See merge request isc-projects/bind9!223
 2018-05-03 11:03:35 -04:00
Mark Andrews
22fab3199f simplify mask construction 2018-05-03 10:56:32 -04:00
Ondřej Surý
08050d6524 Merge branch '234-add-prerequisite-check-to-rootkeysentinel-for-dnssec-support' into 'master' 
Resolve "add prerequisite check to rootkeysentinel for dnssec support"

Closes #234

See merge request isc-projects/bind9!222
 2018-05-03 10:36:20 -04:00
Mark Andrews
0fedfcafb5 add bin/tests/system/rootkeysentinel/prereq.sh 2018-05-03 10:27:50 -04:00
Mark Andrews
e713f83064 add dnssec prerequisite test to rootkeysentinel 2018-05-03 10:27:50 -04:00
Ondřej Surý
65320aa38d Merge branch '191-remove-openssl-0.9.x-support' into 'master' 
Remove OpenSSL 0.9.x support

Closes #191

See merge request isc-projects/bind9!175
 2018-05-03 10:20:56 -04:00
Ondřej Surý
f10e43ac94 Add CHANGES entries 
4937.   [func]          Remove support for OpenSSL < 1.0.0 [GL #191]
 2018-05-03 16:00:37 +02:00
Ondřej Surý
ea95e83f5c Add release notes about removed support for OpenSSL 0.9.x 2018-05-03 15:55:45 +02:00
Ondřej Surý
61da2bf028 Remove support for OpenSSL < 1.0.0 2018-05-03 15:55:39 +02:00
Ondřej Surý
16e352248d Merge branch '191-misc-improvements' into 'master' 
Miscelaneous improvements found when working on #191

See merge request isc-projects/bind9!236
 2018-05-03 09:52:33 -04:00
Ondřej Surý
8d648e7a8a Use standard OPENSSL_NO_ENGINE instead of custom USE_ENGINE define 2018-05-03 15:32:43 +02:00
Ondřej Surý
8bf192b4d1 Use BN_hex2bn instead of custom BN_fromhex function 2018-05-03 15:22:15 +02:00
Ondřej Surý
35d2dbb9f5 Fix extra ] in configure.in 2018-05-03 15:22:15 +02:00
Ondřej Surý
f1722ff512 Merge branch '165-always-use-crypto-provider-for-random-data' into 'master' 
Always use OpenSSL or PKCS#11 random data providers

Closes #165

See merge request isc-projects/bind9!208
 2018-05-03 09:13:00 -04:00
Ondřej Surý
115fbc3540 Add CHANGES entries 
4936.   [func]          Always use OpenSSL or PKCS#11 random data providers and
                        remove the configure option --{enable,disable}-crypto-rand.
                        [GL #165]
 2018-05-03 15:03:46 +02:00
Evan Hunt
0795dceda7 remove dangling references to --enable-crypto-rand in doc and comments 2018-05-03 15:03:46 +02:00
Ondřej Surý
9a3a257374 Always use random data from the crypto provider 2018-05-03 15:03:46 +02:00
Ondřej Surý
6a49d41c5b Merge branch 'random-test-improvement' into 'master' 
Improve random_test to also test the high bound of the confidence interval

See merge request isc-projects/bind9!210
 2018-05-03 09:02:09 -04:00
Ondřej Surý
8d3220643c Also test the higher part of the confidence interval 2018-05-03 08:30:31 -04:00
Ondřej Surý
9d1e9ce4bd Merge branch '191-add-LibreSSL-2.7-support' into 'master' 
Add LibreSSL 2.7.0 support

Closes #210

See merge request isc-projects/bind9!233
 2018-05-03 08:25:40 -04:00
Ondřej Surý
30488dddf0 Add CHANGES entry 
4935.   [func]          Add support for LibreSSL >= 2.7.0 (some OpenSSL 1.1.0
                        call were added). [GL #191]
 2018-05-03 14:17:17 +02:00
Ondřej Surý
6b9e3b7b06 Workaround LibreSSL 2.7.0-2.7.2 quirk in DH_set0_key 2018-05-03 14:13:32 +02:00
Ondřej Surý
29ff62a149 Add support for LibreSSL 2.7 2018-05-03 14:13:20 +02:00
Evan Hunt
f9f09069a8 Merge branch 'placeholder' into 'master' 
placeholder

See merge request isc-projects/bind9!229
 2018-05-01 21:04:13 -04:00
Evan Hunt
f78bfda4b8 placeholder 2018-05-01 16:14:23 -07:00
Evan Hunt
16dea1c577 Merge branch '208-dig-doc' into 'master' 
Resolve "Added -t TYPEnn description to dig"

Closes #208

See merge request isc-projects/bind9!221
 2018-04-27 02:24:07 -04:00
Paul Hoffman
2d957c6b9f add -t type### description to the dig man page 2018-04-27 02:16:51 -04:00
Evan Hunt
9212a1b401 Merge branch 'date-test-error' into 'master' 
Fix a testing error when using python3 on certain dates

See merge request isc-projects/bind9!220
 2018-04-27 02:12:46 -04:00
Evan Hunt
30b988f09a Fix a testing error when using python3 on certain dates 
Date conversion was broken in python3 for dates with
leading zeroes in both month and day.
 2018-04-26 23:02:40 -07:00
Evan Hunt
6070c734f2 Merge branch '159-improve-handling-of-inline-signed-zones-with-missing-signing-keys' into 'master' 
Improve handling of inline signed zones with missing signing keys

Closes #159

See merge request isc-projects/bind9!133
 2018-04-25 15:07:47 -04:00
Michał Kępień
7d2c09c905 Add CHANGES entries 
4916.	[bug]		Not creating signing keys for an inline signed zone
			prevented changes applied to the raw zone from being
			reflected in the secure zone until signing keys were
			made available. [GL #159]

4915.	[bug]		Bumped signed serial of an inline signed zone was
			logged even when an error occurred while updating
			signatures. [GL #159]
 2018-04-25 12:00:31 -07:00
Michał Kępień
6acf326969 Apply raw zone deltas to yet unsigned secure zones 
When inline signing is enabled for a zone without creating signing keys
for it, changes subsequently applied to the raw zone will not be
reflected in the secure zone due to the dns_update_signaturesinc() call
inside receive_secure_serial() failing.  Given that an inline zone will
be served (without any signatures) even with no associated signing keys
being present, keep applying raw zone deltas to the secure zone until
keys become available in an attempt to follow the principle of least
astonishment.
 2018-04-25 12:00:31 -07:00
Michał Kępień
cfbc8e264d Only log bumped signed serial after a successful secure zone update 
If a raw zone is modified, but the dns_update_signaturesinc() call in
receive_secure_serial() fails, the corresponding secure zone's database
will not be modified, even though by that time a message containing the
bumped signed serial will already have been logged.  This creates
confusion, because a different secure zone version will be served than
the one announced in the logs.  Move the relevant dns_zone_log() call so
that it is only performed if the secure zone's database is modified.
 2018-04-24 09:18:47 -07:00
Evan Hunt
498491555e Merge branch '171-lgtm-issues' into 'master' 
Resolve "problems detected by LGTM static analyzer"

Closes #171

See merge request isc-projects/bind9!213
 2018-04-20 20:18:28 -04:00
Evan Hunt
8b1baa10ee remove unnecessary comparison 2018-04-20 19:51:00 -04:00
Evan Hunt
e00eb55cd2 silence warnings about unnecessary comparisons 
- these are cases where result has been explicitly set, so
  if (result != ISC_R_SUCCESS) is unnecessary
 2018-04-20 19:51:00 -04:00
Evan Hunt
4247477b61 add header guards in files that were missing them 2018-04-20 19:51:00 -04:00
Evan Hunt
bfbe6925df add header guard when generating bind.keys.h 2018-04-20 19:51:00 -04:00
Evan Hunt
0cc7aa250e change "key" to "tsigkey" to silence "short global name" warning 2018-04-20 19:51:00 -04:00
Evan Hunt
9ca3ab1168 fix shadowed global variables 2018-04-20 19:51:00 -04:00