Commit graph

9120 commits

Author SHA1 Message Date
Evan Hunt
213c41c9f7 [master] fix to change #3647 2013-09-13 09:52:15 -07:00
Mark Andrews
76df835d59 3647. [bug] Address a race condition when shutting down a zone.
[RT #34750]
2013-09-12 13:37:43 +10:00
Evan Hunt
18df9e628e [master] strdup journal filename
3646.	[bug]		Journal filename string could be set incorrectly,
                        causing garbage in log messages.  [RT #34738]
2013-09-09 22:12:47 -07:00
Evan Hunt
78f20eda3c [master] clean up tests, update .gitignore 2013-09-09 19:37:17 -07:00
Evan Hunt
41dabe089f [master] remove namespace.h from installed files 2013-09-09 09:22:37 -07:00
Tinderbox User
63737247d1 update copyright notice 2013-09-05 23:46:16 +00:00
Mark Andrews
0327c6de3e remove accidentally added line 2013-09-05 16:23:12 +10:00
Evan Hunt
012648ce19 [master] missed an external 2013-09-04 19:45:30 -07:00
Evan Hunt
eb8fae696c [master] remove rollforward2 from libdns.def 2013-09-04 19:36:12 -07:00
Tinderbox User
473d3168f0 update copyright notice 2013-09-04 23:46:16 +00:00
Evan Hunt
8e3b246dc8 [master] remove "resign" member from dns_diff struct
no longer needed since change #3641
2013-09-04 16:35:11 -07:00
Evan Hunt
79e6f6e519 [master] deprecate dns_journal_rollforward2
no longer needed since change #3641
2013-09-04 16:19:52 -07:00
Mark Andrews
3ad8f24ddd 3644. [protocol] Check that EDNS subnet client options are well formed.
[RT #34718]
2013-09-05 09:18:59 +10:00
Evan Hunt
8e1655931b [master] add missing externals 2013-09-04 15:52:10 -07:00
Evan Hunt
09755f7270 [master] prep 9.10.0a1 release 2013-09-04 15:41:50 -07:00
Mark Andrews
e9921500e1 remove unused variable 2013-09-04 22:34:44 +10:00
Mark Andrews
0c91911b4d 3642. [func] Allow externally generated DNSKEY to be imported
into the DNSKEY management framework.  A new tool
                        dnssec-importkey is used to this. [RT #34698]
2013-09-04 13:53:02 +10:00
Mark Andrews
b5f4cc132e 3641. [bug] Handle changes to sig-validity-interval settings
better. [RT #34625]
2013-09-04 13:45:00 +10:00
Mark Andrews
d6f99498d6 3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
in a key zone. [RT #34238]
2013-09-04 13:14:06 +10:00
Curtis Blackburn
c4348cb50f 3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
encountered. [RT #34668]
2013-08-28 15:56:49 -05:00
Tinderbox User
377b774598 update copyright notice 2013-08-15 23:46:17 +00:00
Mark Andrews
d1e22676de 3635. [bug] Signatures were not being removed from a zone with
only KSK keys for a algorithm. [RT #24439]
2013-08-15 13:37:07 +10:00
Mark Andrews
7ace327795 3632. [bug] Signature from newly inactive keys were not being
removed.  [RT #32178]
2013-08-15 10:48:05 +10:00
Evan Hunt
5f630b9417 [master] change 3630 incomplete--needed to check fromtext too 2013-08-14 17:23:41 -07:00
Tinderbox User
3c04ca47c6 update copyright notice 2013-08-13 23:46:14 +00:00
Evan Hunt
5d4343a998 [master] fix md5 key id computation
3630.	[bug]		Ensure correct ID computation for MD5 keys. [RT #33033]
2013-08-13 16:03:42 -07:00
Tinderbox User
21c8938824 update copyright notice 2013-08-12 23:46:05 +00:00
Mark Andrews
75ae74f8fd 3629. [func] Allow the printing of cryptographic fields in DNSSEC
records by dig to be suppressed (dig +nocrypto).
                        [RT #34534]
2013-08-12 15:37:51 +10:00
Mark Andrews
16bd30ae69 3628. [func] Report DNSKEY key id's when dumping the cache.
[RT #34533]
2013-08-12 14:38:26 +10:00
Mark Andrews
df0892aea6 3627. [bug] RPZ changes were not effective on slaves. [RT #34450] 2013-08-09 13:23:01 +10:00
Evan Hunt
7ade93c328 [master] fix build error when IP_TOS is undefined 2013-08-08 19:15:11 -07:00
Evan Hunt
a499dddb4b [master] easier to read NSID output
3626.	[func]		dig: NSID output now easier to read. [RT #21160]
2013-08-08 16:50:34 -07:00
Mark Andrews
e543b4e5db remove redundent 'request-ixfr' 2013-08-01 14:38:27 +10:00
Mark Andrews
f45818b82a add comment 2013-07-26 10:25:45 +10:00
Evan Hunt
d640b4a0ab [master] perf: eliminate cache stats attach/detach
3622.	[tuning]	Eliminate an unnecessary lock when incrementing
			cache statistics. [RT #34339]
2013-07-25 10:51:31 -07:00
Tinderbox User
345a210f51 update copyright notice 2013-07-16 23:46:10 +00:00
Mark Andrews
fdb4ae8f6c 3621. [security] Incorrect bounds checking on private type 'keydata'
can lead to a remotely triggerable REQUIRE failure
                        (CVE-2013-4854). [RT #34238]
2013-07-17 08:03:50 +10:00
Mark Andrews
975172e3dc remove unused variable 2013-07-16 10:18:54 +10:00
Mark Andrews
6142269dcc remove unused assignment 2013-07-15 13:09:27 +10:00
Mark Andrews
7236e1bd00 remove dead code 2013-07-15 09:30:53 +10:00
Tinderbox User
44c016134f update copyright notice 2013-07-13 23:46:06 +00:00
Mark Andrews
09fec18669 fix unchecked null; value not read 2013-07-14 00:26:23 +10:00
Francis Dupont
41a6b3031e spelling 2013-07-13 01:39:41 +02:00
Evan Hunt
421d4a0647 [master] rpz work
3620.	[func]		Added "rpz-client-ip" policy triggers, enabling
			RPZ responses to be configured on the basis of
			the client IP address; this can be used, for
			example, to blacklist misbehaving recursive
			or stub resolvers. [RT #33605]

3619.	[bug]		Fixed a bug in RPZ with "recursive-only no;"
			[RT #33776]
2013-07-12 14:46:47 -07:00
Tinderbox User
dbd8673fa0 update copyright notice 2013-07-11 23:46:13 +00:00
Evan Hunt
0949306cb9 [master] check include file mtimes
3618.	[func]		"rndc reload" now checks modification times of
			include files as well as master files to determine
			whether to skip reloading a zone. [RT #33936]
2013-07-11 16:32:36 -07:00
Evan Hunt
cf0a69e999 [master] address zone->db races
3616.	[bug]		Change #3613 was incomplete. [RT #34177]
2013-07-11 09:51:47 -07:00
Evan Hunt
f4e309b177 [master] silence warning 2013-07-10 09:15:51 -07:00
Francis Dupont
a96e5ffbe0 spelling 2013-07-10 10:56:18 +02:00
Evan Hunt
927e4c9fec [master] address race conditions with removing inline zones
3513.	[bug]		named could crash when deleting inline-signing
			zones with "rndc delzone". [RT #34066]
2013-07-09 17:39:21 -07:00