Evan Hunt
89069e6b3a
3286. [bug] Managed key maintenance timer could fail to start
...
after 'rndc reconfig'. [RT #26786 ]
2012-02-22 00:37:54 +00:00
Mark Andrews
1769b07530
fix memory overun in dns_zone_getincludes, allocated array too small (zero).
...
fix possible memory overrun in dns_zone_getincludes
fix inconsistent mxtc use in ns_server_zonestatus
fix missing out of memory errors checks in zone_registerinclude
fix possible use after free issues zone_registerinclude/ns_server_zonestatus
2012-02-01 21:28:39 +00:00
Automatic Updater
41f1164438
update copyright notice
2012-01-31 23:47:33 +00:00
Evan Hunt
2855e27723
3271. [func] New "rndc zonestatus" command prints information
...
about the specified zone. [RT #21671 ]
2012-01-31 03:35:41 +00:00
Automatic Updater
80c7083796
update copyright notice
2012-01-27 23:46:59 +00:00
Mark Andrews
bc298cd0f7
3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
...
out the earliest expiry time. [RT #23311 ]
2012-01-27 01:43:53 +00:00
Automatic Updater
ee2129ee66
update copyright notice
2012-01-25 23:46:49 +00:00
Mark Andrews
18d208a4a2
3265. [bug] Address lock order reversal with inline-signing
...
support. [27557]
2012-01-25 02:46:53 +00:00
Evan Hunt
f30785f506
3252. [bug] When master zones using inline-signing were
...
updated while the server was offline, the source
zone could fall out of sync with the signed
copy. They can now resynchronize. [RT #26676 ]
2011-12-22 07:32:41 +00:00
Automatic Updater
339d2a4d4b
update copyright notice
2011-12-09 23:47:05 +00:00
Automatic Updater
b54ac42f19
update copyright notice
2011-12-08 23:46:49 +00:00
Evan Hunt
b4d8192d21
3241. [func] Extended the header of raw-format master files to
...
include the serial number of the zone from which
they were generated, if different (as in the case
of inline-signing zones). This is to be used in
inline-signing zones, to track changes between the
unsigned and signed versions of the zone, which may
have different serial numbers.
(Note: raw zonefiles generated by this version of
BIND are no longer compatble with prior versions.
To generate a backward-compatible raw zonefile
using dnssec-signzone or named-compilezone, specify
output format "raw=0" instead of simply "raw".)
[RT #26587 ]
2011-12-08 16:07:22 +00:00
Automatic Updater
806956b43b
update copyright notice
2011-12-05 23:46:35 +00:00
Evan Hunt
4122abdc3c
Back out changes #3182 and #3202
2011-12-05 17:10:51 +00:00
Mark Andrews
de52784e45
3235. [func] dns_db_diffx, a extended dns_db_diff which returns
...
the generated diff and optionally writes it to a
journal. [RT #26386 ]
2011-12-04 23:48:12 +00:00
Mark Andrews
91ed1cc821
3222. [cleanup] Replace dns_journal_{get,set}_bitws with
...
dns_journal_{get,set}_sourceserial. [RT #26634 ]
2011-11-28 03:14:59 +00:00
Mark Andrews
2256c13194
--- 9.9.0b2 released ---
...
3219. [bug] Disable NOEDNS caching following a timeout.
2011-11-16 22:18:53 +00:00
Evan Hunt
c79bcf09bf
Add clientinfo.h to HEADERS. [RT #26558 ]
...
No CHANGES note.
2011-11-14 18:32:34 +00:00
Evan Hunt
90a354ab36
3204. [bug] When a master server that has been marked as
...
unreachable but sends a NOTIFY, mark it reachable
again. [RT #25960 ]
2011-11-04 05:51:02 +00:00
Mark Andrews
a5166d5fce
3202. [bug] NOEDNS caching on timeout was too agressive.
...
[RT #26416 ]
2011-11-04 03:38:44 +00:00
Evan Hunt
8281fd83da
3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
...
dnssec.h. [RT #26415 ]
2011-11-03 02:54:47 +00:00
Automatic Updater
89d1324270
update copyright notice
2011-11-01 23:47:00 +00:00
Evan Hunt
5caf26b168
3188. [bug] zone.c:zone_refreshkeys() could fail to detach
...
references correctly when errors occurred, causing
a hang on shutdown. [RT #26372 ]
2011-11-01 04:00:45 +00:00
Automatic Updater
98a7e53914
update copyright notice
2011-10-28 12:20:31 +00:00
Mark Andrews
7b4b6f361b
3186. [bug] Version/db mis-match in rpz code. [RT #26180 ]
2011-10-28 11:46:50 +00:00
Evan Hunt
9c03f13e18
3185. [func] New 'rndc signing' option for auto-dnssec zones:
...
- 'rndc signing -list' displays the current
state of signing operations
- 'rndc signing -clear' clears the signing state
records for keys that have fully signed the zone
- 'rndc signing -nsec3param' sets the NSEC3
parameters for the zone
The 'rndc keydone' syntax is removed. [RT #23729 ]
2011-10-28 06:20:07 +00:00
Automatic Updater
96f5a19c12
update copyright notice
2011-10-27 23:46:31 +00:00
Scott Mann
b91b288f92
fix edns0 retry issues (rt #23393/24964).
2011-10-27 20:18:42 +00:00
Mark Andrews
b1c6de5456
3177. [func] 'rndc keydone', remove the indicator record that
...
named has finished signing the zone with the
corresponding key. [RT #26206 ]
2011-10-25 01:54:22 +00:00
Mark Andrews
1946c596b4
3174. [bug] Always compute to revoked key tag from scratch.
...
[RT #24711 ]
2011-10-20 21:20:02 +00:00
Automatic Updater
304a539c59
update copyright notice
2011-10-13 22:48:24 +00:00
Vernon Schryver
9fee08f655
Commit rt25172 changes to HEAD including
...
- fix precedence among competing rules
- improve ARM text including documenting rule precedence
- try to rewrite CNAME chains until first hit
- new "rpz" logging channel
- same fix for "NS ." as in RT 24985
2011-10-13 01:32:34 +00:00
Automatic Updater
0e11ca0f0b
update copyright notice
2011-10-11 23:46:45 +00:00
Evan Hunt
793814f807
3164. [func] Enable DLZ modules to retrieve client information,
...
so that responses can be changed depending on the
source address of the query. [RT #25768 ]
2011-10-11 00:09:03 +00:00
Scott Mann
fad5116b3d
Remove the ixfr-from-differences side-effect which causes an AXFR and extend
...
request-ixfr to the zone level.
2011-09-06 22:29:33 +00:00
Automatic Updater
ca894e53b5
update copyright notice
2011-09-02 23:46:33 +00:00
Evan Hunt
8a2ab2b920
3150. [func] Improved startup and reconfiguration time by
...
enabling zones to load in multiple threads. [RT #25333 ]
2011-09-02 21:15:39 +00:00
Automatic Updater
4e68c7c87c
update copyright notice
2011-08-30 23:46:53 +00:00
Mark Andrews
49f385a7ad
include dns/diff.h
2011-08-30 13:02:39 +00:00
Mark Andrews
9198ab377b
3147. [func] Initial inline signing support. [RT #23657 ]
2011-08-30 05:16:15 +00:00
Automatic Updater
adbc177194
update copyright notice
2011-08-02 23:47:52 +00:00
Evan Hunt
0127993480
3140. [func] New command "rndc flushtree <name>" clears the
...
specified name from the server cache along with
all names under it. [RT #19970 ]
2011-08-02 20:36:13 +00:00
Automatic Updater
2f17ad4545
update copyright notice
2011-07-28 23:47:59 +00:00
Evan Hunt
f07b2fccaf
3137. [func] Improve hardware scalability by allowing multiple
...
worker threads to process incoming UDP packets.
This can significantly increase query throughput
on some systems. [RT #22992 ]
2011-07-28 04:04:37 +00:00
Evan Hunt
42cf2ff7ba
3131. [func] Improve scalability by allocating one zone task
...
per 100 zones at startup time, rather than using a
fixed-size task table. [RT #24406 ]
2011-07-06 01:36:32 +00:00
Automatic Updater
122230159d
update copyright notice
2011-07-01 23:47:44 +00:00
Mark Andrews
a69070d8fa
3130. [func] Support alternate methods for managing a dynamic
...
zone's serial number. Two methods are currently
defined using serial-update-method, "increment"
(default) and "unixtime". [RT #23849 ]
2011-07-01 02:25:48 +00:00
Automatic Updater
313b4dc3b2
update copyright notice
2011-06-17 23:47:49 +00:00
Evan Hunt
e7220c9b84
3129. [bug] Named could crash on 'rndc reconfig' when
...
allow-new-zones was set to yes and named ACLs
were used, [RT #22739 ]
2011-06-17 07:05:02 +00:00
Automatic Updater
0f467ed4d4
update copyright notice
2011-06-10 23:47:32 +00:00