Brian Wellington
e7a8dfd296
If we mark an rdataset as secure, also mark the sigrdataset as secure.
2000-04-11 17:12:31 +00:00
Andreas Gustafsson
0f7045b0c4
moved a few more typedefs to <isc/types.h>: isc_region_t,
...
isc_textregion_t, isc_lex_t
2000-04-10 21:57:24 +00:00
Andreas Gustafsson
e9da40a783
no need to include <isc/buffer.h>, <isc/result.h> from <isc/base64.h>
2000-04-10 21:35:48 +00:00
Andreas Gustafsson
e3b279bfa9
no need to include <isc/buffer.h>, <isc/result.h>, <isc/mem.h> from <isc/base64.h>
2000-04-10 21:33:36 +00:00
Brian Wellington
2a05fa7535
dst_key_iszonekey() was incorrectly checking the 'name type' field of a key.
...
The constants added to dst.h for dst_key_iszonekey() duplicated constants
in dns/keyvalues.h, and are now gone.
2000-04-10 19:48:05 +00:00
Brian Wellington
17e81b39cd
TSIG signed incoming zone transfer works now.
2000-04-08 04:42:42 +00:00
Brian Wellington
dc3fc5830a
A couple minor bugs relating to TCP TSIG verification
2000-04-08 04:40:21 +00:00
Michael Graff
b7974ee772
Use sigaction() on NetBSD now, too. Note this requires unproven-pthreads-0.13 or higher.
2000-04-07 23:39:24 +00:00
Michael Graff
c2bb1a45d2
Install default handler for SIGCHLD -- more after I fix NetBSD's pthread code
2000-04-07 23:09:04 +00:00
Andreas Gustafsson
edcb93b49c
wired up view options: request-ixfr, provide-ixfr
2000-04-07 22:30:43 +00:00
Brian Wellington
3676eeb6ca
snapshot. Includes creating a new validator to validate pending KEYs.
2000-04-07 21:44:47 +00:00
Brian Wellington
f383cdfeb8
Moved the (lame) random number seeding code to the dst initialize routine,
...
since the openssl dsa code calls the openssl random functions directly,
not through dst_random_get.
2000-04-07 20:50:30 +00:00
James Brister
09c9fc94cf
Fixed a function name for style.
...
Fixed validation of keys used in server statement. Now they must truly be
defined before used. Ditto for in address match list element. Keys
referenced can be inside the enclosing view or at file scope.
2000-04-07 20:41:29 +00:00
Andreas Gustafsson
a25310fd1d
if the first RR in an incoming zone transfer was not an SOA,
...
we got an assertion failure
2000-04-07 19:41:07 +00:00
Michael Graff
c7dc3f60bc
Temporary hack to disable use of alarm() etc. on NetBSD. This is only
...
to help debug a specific pthreads-related problem by letting
the testing system do the real work.
2000-04-07 18:39:19 +00:00
Andreas Gustafsson
913d4c761c
cosmetics
2000-04-07 18:30:11 +00:00
Andreas Gustafsson
e82d19b0c7
wired up view options: max-transfer-time-out, max-transfer-idle-out
2000-04-07 18:16:02 +00:00
James Brister
6abdc5c090
Changes necessary to support server statements inside a view statement.
2000-04-07 17:40:43 +00:00
Brian Wellington
b5debbe212
snapshot. Sends a fetch when a KEY isn't present and would partially handle
...
a successful response if it got one. Starts the validator with an
event to avoid deadlock in the resolver.
2000-04-07 17:36:40 +00:00
Brian Wellington
48ba496518
Uncomment the dnssec validator related code that compiles. Without a
...
way to fill in the security roots tree, this code will not be called
yet in practice.
2000-04-07 17:34:28 +00:00
Andreas Gustafsson
cb284e7bd4
wired up view options: transfer-source, transfer-source-v6
2000-04-07 17:27:22 +00:00
Brian Wellington
b80a8db9f9
Added DNS_EVENT_VALIDATORSTART
2000-04-07 17:15:35 +00:00
James Brister
616ee4a3f7
Changes to support keys inside views.
2000-04-07 13:35:06 +00:00
Michael Graff
6324997211
add attributes (line singleton, exlcusive, meta, etc) to rdata C files, and
...
build a table of them using gen.c. This means the names are stored twice,
but that will change in the near future. This will speed up number to text
conversions for rdatatypes, and I plan on speeding up text->number as
well, soon.
2000-04-07 03:54:52 +00:00
Michael Graff
2fce9cfbf8
add more ISC_R_* mappings
2000-04-07 03:49:10 +00:00
Michael Graff
674b41a94d
translate ISC_R_* values just like do with DNS_R_.
2000-04-07 03:35:36 +00:00
Andreas Gustafsson
2e91b1f3d4
configuring zone acl from default view caused assertion failure
2000-04-07 00:51:32 +00:00
Andreas Gustafsson
a672bfbee4
wired up view options: allow-query, allow-recursion, allow-transfer
2000-04-06 23:59:19 +00:00
Andreas Gustafsson
93c786e092
cleared up some DNS_R_CONTINUE/DNS_R_WAIT confusion;
...
commented get_dst_key()
2000-04-06 23:09:01 +00:00
Michael Graff
4195904998
s/DNS_R_/ISC_R_/ change for some codes.
2000-04-06 22:03:35 +00:00
Michael Graff
c1a2cfef7f
s/DNS_R_/ISC_R_/ change for some codes. Mostly documentation in these files.
2000-04-06 20:59:29 +00:00
David Lawrence
e6a6c0a5d6
35. [performance] Log messages which are of a level too high to be
...
logged by any channel in the logging configuration
will not cause the log mutex to be locked.
2000-04-06 20:32:31 +00:00
Andreas Gustafsson
66e2dd5001
wired up view options: recursion, auth-nxdomain, transfer-format
2000-04-06 20:25:48 +00:00
James Brister
a38ea1c635
Change some accessor names.
2000-04-06 20:13:07 +00:00
James Brister
f46678fb6c
Name change to some accessors.
...
Parse lame-ttl in options block
Parse allow-update-forwarding in options block
parse transfer-format in view statment
2000-04-06 20:12:26 +00:00
James Brister
d6dc9759d2
More logging of unimplemented functions.
...
Change to ipmatchlist accessors (use attach/detach)
macro-ize ipmatchlist field accessors
2000-04-06 20:10:56 +00:00
James Brister
c47baa985c
Name change to two config file functions.
2000-04-06 20:08:34 +00:00
David Lawrence
5d4f11b265
The RBT now maintains a parent pointer at each node.
2000-04-06 18:47:07 +00:00
James Brister
3a49917729
Support new optional class on a view declaration.
2000-04-06 10:35:27 +00:00
James Brister
5e3d37f84a
Many new view-specific fields.
2000-04-06 09:50:13 +00:00
James Brister
03f18a3c14
Three new options fields: lame-ttl min-roots serial-queries.
2000-04-06 09:49:19 +00:00
James Brister
2b3d9824cb
Support many new values in a view statement.
2000-04-06 09:46:53 +00:00
James Brister
3e3cdbc52b
Some DNS_R_ to ISC_R_ replacements.
2000-04-06 09:45:39 +00:00
James Brister
2aac82553d
Support lame-ttl, min-roots and treat-cr-as-space in options.
...
Support auth-nxdomain
recursion query-source query-source-v6 transfer-source
transfer-source-v6 max-transfer-time-out max-transfer-idle-out
transfer-format request-ixfr privide-ixfr cleaning-interval
fetch-glue notify rfc2308-type1 lame-ttl max-ncache-ttl
min-roots
in views
2000-04-06 09:43:12 +00:00
James Brister
d85dd9de75
Changed log message format to be clearer.
...
Add call to new function dns_c_viewtable_checkviews() in config post load
checker.
Added missing treat-cr-as-space, min-roots and serial-queries options.
2000-04-06 09:38:32 +00:00
James Brister
14f8df274b
Changed DNS_R_* to ISC_R_*
2000-04-06 09:35:36 +00:00
Andreas Gustafsson
5135844210
added 'matchclients' field
2000-04-06 00:19:44 +00:00
Brian Wellington
1c776a2909
missing an #include <dns/dnssec.h>
2000-04-05 22:30:57 +00:00
Brian Wellington
0a3e2e1d59
- added a call to dns_dnssec_verify
...
- swapped ISC_R_SUCCESS/DNS_R_CONTINUE in two places
- hitting the end of the list of SIGs without a verification is not success.
2000-04-05 22:29:47 +00:00
Brian Wellington
587922e6d1
converting from KEY records to dsa keys was broken.
2000-04-05 22:22:51 +00:00