From 6e27aa67beb758addd62d20b6965c9cb4ea79db5 Mon Sep 17 00:00:00 2001
From: Automatic Updater
Date: Fri, 30 Oct 2009 23:18:51 +0000
Subject: [PATCH 01/87] auto update
---
doc/private/branches | 1 +
1 file changed, 1 insertion(+)
diff --git a/doc/private/branches b/doc/private/branches
index b1cfca3eeb..8fcf215183 100644
--- a/doc/private/branches
+++ b/doc/private/branches
@@ -275,6 +275,7 @@ rt20421 new each // 2009-10-20 19:04 +0000
rt20438 new marka // 2009-10-28 03:27 +0000
rt20453 new marka // 2009-10-23 12:52 +0000
rt20474 new each // 2009-10-27 05:30 +0000
+rt20541 new marka // 2009-10-30 02:28 +0000
shane_dbbackend open
skan open explorer
skan-metazones1 private explorer
From 660818f4c7b6665b6e7b1dfef11d582d0f97d71d Mon Sep 17 00:00:00 2001
From: Automatic Updater
Date: Sat, 31 Oct 2009 23:18:12 +0000
Subject: [PATCH 02/87] auto update
---
doc/private/branches | 1 +
1 file changed, 1 insertion(+)
diff --git a/doc/private/branches b/doc/private/branches
index 8fcf215183..3f7df467b7 100644
--- a/doc/private/branches
+++ b/doc/private/branches
@@ -273,6 +273,7 @@ rt20405 new each // 2009-10-14 05:15 +0000
rt20406 new each // 2009-10-20 00:14 +0000
rt20421 new each // 2009-10-20 19:04 +0000
rt20438 new marka // 2009-10-28 03:27 +0000
+rt20452 new marka // 2009-10-30 23:27 +0000
rt20453 new marka // 2009-10-23 12:52 +0000
rt20474 new each // 2009-10-27 05:30 +0000
rt20541 new marka // 2009-10-30 02:28 +0000
From cc11677a72613010a7b08804914d74aa63487730 Mon Sep 17 00:00:00 2001
From: Jeremy Reed
Date: Mon, 2 Nov 2009 18:49:59 +0000
Subject: [PATCH 03/87] Fix misspelling.
---
README.pkcs11 | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/README.pkcs11 b/README.pkcs11
index b203a45a81..89d9be21d8 100644
--- a/README.pkcs11
+++ b/README.pkcs11
@@ -8,7 +8,7 @@ independent API for the control of hardware security modules (HSMs)
and other cryptographic support devices.
BIND 9 is known to work with two HSMs: The Sun SCA 6000 cryptographic
-acceration board, tested under Solaris x86, and the AEP Keyper
+acceleration board, tested under Solaris x86, and the AEP Keyper
network-attached key storage device, tested with Debian Linux,
Solaris x86 and Windows Server 2003.
From af104911b781444e0b2d3da9df553897e511303a Mon Sep 17 00:00:00 2001
From: Evan Hunt
Date: Mon, 2 Nov 2009 20:04:39 +0000
Subject: [PATCH 04/87] missing period in a sentence
---
README | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/README b/README
index 526f1df317..79851561fe 100644
--- a/README
+++ b/README
@@ -49,7 +49,7 @@ BIND 9.7.0
New features include:
- - Fully automatic signing of zones by "named"
+ - Fully automatic signing of zones by "named".
- Simplified configuration of DNSSEC Lookaside Validation (DLV).
- Simplified configuration of Dynamic DNS, using the "ddns-confgen"
command line tool or the "local" update-policy option. (As a side
From 717a6020e62c369a0a220c4b59fbe24744b08260 Mon Sep 17 00:00:00 2001
From: Automatic Updater
Date: Mon, 2 Nov 2009 23:18:25 +0000
Subject: [PATCH 05/87] auto update
---
doc/private/branches | 1 +
1 file changed, 1 insertion(+)
diff --git a/doc/private/branches b/doc/private/branches
index 3f7df467b7..f5f05b4587 100644
--- a/doc/private/branches
+++ b/doc/private/branches
@@ -195,6 +195,7 @@ rt18815 new fdupont // 2008-10-28 12:34 +0000
rt18828 new marka // 2008-11-04 06:17 +0000
rt18872 new marka // 2009-01-23 02:57 +0000
rt18884 new marka // 2008-11-11 02:16 +0000
+rt18884a new marka // 2009-11-02 05:55 +0000
rt18905 new jinmei // 2008-12-30 01:46 +0000
rt19027 new
rt19063 new marka // 2008-12-13 01:45 +0000
From 554d22d2deb8889bb16434176b5716ab79d15c50 Mon Sep 17 00:00:00 2001
From: Mark Andrews
Date: Tue, 3 Nov 2009 01:07:48 +0000
Subject: [PATCH 06/87] 2743. [bug] RRSIG could be incorrectly sent
in the NSEC3 record for a insecure delegation.
---
CHANGES | 3 +++
lib/dns/nsec3.c | 25 ++++++++++++++++++++-----
2 files changed, 23 insertions(+), 5 deletions(-)
diff --git a/CHANGES b/CHANGES
index 24836c273a..8da571c7a3 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+2743. [bug] RRSIG could be incorrectly sent in the NSEC3 record
+ for a insecure delegation.
+
--- 9.7.0b2 released ---
2742. [cleanup] Clarify some DNSSEC-related log messages in
diff --git a/lib/dns/nsec3.c b/lib/dns/nsec3.c
index 81de97f4f4..4c44194bc4 100644
--- a/lib/dns/nsec3.c
+++ b/lib/dns/nsec3.c
@@ -14,7 +14,7 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: nsec3.c,v 1.10 2009/10/08 23:48:10 tbox Exp $ */
+/* $Id: nsec3.c,v 1.11 2009/11/03 01:07:48 marka Exp $ */
#include
@@ -88,6 +88,8 @@ dns_nsec3_buildrdata(dns_db_t *db, dns_dbversion_t *version,
unsigned int i, window;
int octet;
isc_boolean_t found;
+ isc_boolean_t found_ns;
+ isc_boolean_t need_rrsig;
unsigned char *nsec_bits, *bm;
unsigned int max_type;
@@ -141,7 +143,7 @@ dns_nsec3_buildrdata(dns_db_t *db, dns_dbversion_t *version,
result = dns_db_allrdatasets(db, node, version, 0, &rdsiter);
if (result != ISC_R_SUCCESS)
return (result);
- found = ISC_FALSE;
+ found = found_ns = need_rrsig = ISC_FALSE;
for (result = dns_rdatasetiter_first(rdsiter);
result == ISC_R_SUCCESS;
result = dns_rdatasetiter_next(rdsiter))
@@ -153,13 +155,26 @@ dns_nsec3_buildrdata(dns_db_t *db, dns_dbversion_t *version,
if (rdataset.type > max_type)
max_type = rdataset.type;
set_bit(bm, rdataset.type, 1);
- /* Don't set RRSIG for insecure delegation. */
- if (rdataset.type != dns_rdatatype_ns)
+ /*
+ * Work out if we need to set the RRSIG bit for
+ * this node. We set the RRSIG bit if either of
+ * the following conditions are met:
+ * 1) We have a SOA or DS then we need to set
+ * the RRSIG bit as both always will be signed.
+ * 2) We set the RRSIG bit if we don't have
+ * a NS record but do have other data.
+ */
+ if (rdataset.type == dns_rdatatype_soa ||
+ rdataset.type == dns_rdatatype_ds)
+ need_rrsig = ISC_TRUE;
+ else if (rdataset.type == dns_rdatatype_ns)
+ found_ns = ISC_TRUE;
+ else
found = ISC_TRUE;
}
dns_rdataset_disassociate(&rdataset);
}
- if (found) {
+ if ((found && !found_ns) || need_rrsig) {
if (dns_rdatatype_rrsig > max_type)
max_type = dns_rdatatype_rrsig;
set_bit(bm, dns_rdatatype_rrsig, 1);
From 2162c1ed3dbf02459e753f7f407bc6dfc24b0bee Mon Sep 17 00:00:00 2001
From: Mark Andrews
Date: Tue, 3 Nov 2009 01:31:17 +0000
Subject: [PATCH 07/87] add missing period
---
bin/dnssec/dnssec-signzone.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/bin/dnssec/dnssec-signzone.c b/bin/dnssec/dnssec-signzone.c
index da80bd2205..0303b4ebff 100644
--- a/bin/dnssec/dnssec-signzone.c
+++ b/bin/dnssec/dnssec-signzone.c
@@ -29,7 +29,7 @@
* IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: dnssec-signzone.c,v 1.251 2009/10/27 18:56:49 each Exp $ */
+/* $Id: dnssec-signzone.c,v 1.252 2009/11/03 01:31:17 marka Exp $ */
/*! \file */
@@ -1991,7 +1991,7 @@ add_ds(dns_name_t *name, dns_dbnode_t *node, isc_uint32_t nsttl) {
}
/*%
- * Generate NSEC records for the zone and remove NSEC3/NSEC3PARAM records
+ * Generate NSEC records for the zone and remove NSEC3/NSEC3PARAM records.
*/
static void
nsecify(void) {
From 90065a6881d58420120ae33aac55e5ff10f65fd5 Mon Sep 17 00:00:00 2001
From: Mark Andrews
Date: Tue, 3 Nov 2009 02:00:14 +0000
Subject: [PATCH 08/87] s/sent/set/
---
CHANGES | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/CHANGES b/CHANGES
index 8da571c7a3..07cb1231e0 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,4 +1,4 @@
-2743. [bug] RRSIG could be incorrectly sent in the NSEC3 record
+2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
for a insecure delegation.
--- 9.7.0b2 released ---
From 9d856845d63784690e347c8e8dc013f1c830c86d Mon Sep 17 00:00:00 2001
From: Mark Andrews
Date: Tue, 3 Nov 2009 04:39:41 +0000
Subject: [PATCH 09/87] 2744. [func] Log if a query was over TCP. [RT
#19961]
---
CHANGES | 2 ++
bin/named/query.c | 6 ++++--
doc/arm/Bv9ARM-book.xml | 11 ++++++-----
3 files changed, 12 insertions(+), 7 deletions(-)
diff --git a/CHANGES b/CHANGES
index 07cb1231e0..9b218c20dd 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,5 @@
+2744. [func] Log if a query was over TCP. [RT #19961]
+
2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
for a insecure delegation.
diff --git a/bin/named/query.c b/bin/named/query.c
index d24b2f85ed..4d08c90da3 100644
--- a/bin/named/query.c
+++ b/bin/named/query.c
@@ -15,7 +15,7 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: query.c,v 1.330 2009/10/26 23:47:35 tbox Exp $ */
+/* $Id: query.c,v 1.331 2009/11/03 04:39:41 marka Exp $ */
/*! \file */
@@ -5073,10 +5073,12 @@ log_query(ns_client_t *client, unsigned int flags, unsigned int extflags) {
isc_netaddr_format(&client->destaddr, onbuf, sizeof(onbuf));
ns_client_log(client, NS_LOGCATEGORY_QUERIES, NS_LOGMODULE_QUERY,
- level, "query: %s %s %s %s%s%s%s%s (%s)", namebuf,
+ level, "query: %s %s %s %s%s%s%s%s%s (%s)", namebuf,
classname, typename, WANTRECURSION(client) ? "+" : "-",
(client->signer != NULL) ? "S": "",
(client->opt != NULL) ? "E" : "",
+ ((client->attributes & NS_CLIENTATTR_TCP) != 0) ?
+ "T" : "",
((extflags & DNS_MESSAGEEXTFLAG_DO) != 0) ? "D" : "",
((flags & DNS_MESSAGEFLAG_CD) != 0) ? "C" : "",
onbuf);
diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml
index 9ea53bccd9..81665e8e7b 100644
--- a/doc/arm/Bv9ARM-book.xml
+++ b/doc/arm/Bv9ARM-book.xml
@@ -18,7 +18,7 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
BIND 9 Administrator Reference Manual
@@ -4411,10 +4411,11 @@ category notify { null; };
class and type. Next it reports whether the
Recursion Desired flag was set (+ if set, -
if not set), if the query was signed (S),
- EDNS was in use (E), if DO (DNSSEC Ok) was
- set (D), or if CD (Checking Disabled) was set
- (C). After this the destination address the
- query was sent to is reported.
+ EDNS was in use (E), if TCP was used (T), if
+ DO (DNSSEC Ok) was set (D), or if CD (Checking
+ Disabled) was set (C). After this the
+ destination address the query was sent to is
+ reported.
From d937817697dba1f9fdd83ff7c507d9bd9dce1a7a Mon Sep 17 00:00:00 2001
From: Mark Andrews
Date: Tue, 3 Nov 2009 14:02:20 +0000
Subject: [PATCH 10/87] remove synatx errors from example
---
FAQ.xml | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/FAQ.xml b/FAQ.xml
index ea51916599..258bc8a903 100644
--- a/FAQ.xml
+++ b/FAQ.xml
@@ -17,7 +17,7 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
Frequently Asked Questions about BIND 9
@@ -448,7 +448,7 @@ Master 10.0.1.1:
type master;
file "internal/example.db";
allow-update { key mykey; };
- notify-also { 10.0.1.1; };
+ also-notify { 10.0.1.1; };
};
};
@@ -458,7 +458,7 @@ Master 10.0.1.1:
type slave;
file "external/example.db";
masters { 10.0.1.1; };
- transfer-source { 10.0.1.1; };
+ transfer-source 10.0.1.1;
// allow-update-forwarding { any; };
// allow-notify { ... };
};
From 5ccd971c729ae2d1116e0243e689c010e45decaf Mon Sep 17 00:00:00 2001
From: Mark Andrews
Date: Tue, 3 Nov 2009 19:43:54 +0000
Subject: [PATCH 11/87] UNUSED(engine) if !defined(OPENSSL)
---
lib/dns/dst_api.c | 6 +++++-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/lib/dns/dst_api.c b/lib/dns/dst_api.c
index 420aaf2a06..5b12e98b5a 100644
--- a/lib/dns/dst_api.c
+++ b/lib/dns/dst_api.c
@@ -31,7 +31,7 @@
/*
* Principal Author: Brian Wellington
- * $Id: dst_api.c,v 1.45 2009/10/27 22:25:37 marka Exp $
+ * $Id: dst_api.c,v 1.46 2009/11/03 19:43:54 marka Exp $
*/
/*! \file */
@@ -162,6 +162,10 @@ dst_lib_init2(isc_mem_t *mctx, isc_entropy_t *ectx,
#endif
REQUIRE(dst_initialized == ISC_FALSE);
+#ifndef OPENSSL
+ UNUSED(engine);
+#endif
+
dst__memory_pool = NULL;
#if defined(OPENSSL) && defined(BIND9)
From f80b665135127a12ca503c8830aa465aa1ddd17d Mon Sep 17 00:00:00 2001
From: Evan Hunt
Date: Tue, 3 Nov 2009 21:44:46 +0000
Subject: [PATCH 12/87] fix typo: s/pcks11/pkcs11/
---
bin/dnssec/dnssec-keyfromlabel.docbook | 4 ++--
bin/dnssec/dnssec-keygen.docbook | 4 ++--
bin/dnssec/dnssec-revoke.docbook | 4 ++--
bin/dnssec/dnssec-settime.docbook | 4 ++--
bin/dnssec/dnssec-signzone.docbook | 4 ++--
5 files changed, 10 insertions(+), 10 deletions(-)
diff --git a/bin/dnssec/dnssec-keyfromlabel.docbook b/bin/dnssec/dnssec-keyfromlabel.docbook
index e966362868..6516d8e37b 100644
--- a/bin/dnssec/dnssec-keyfromlabel.docbook
+++ b/bin/dnssec/dnssec-keyfromlabel.docbook
@@ -17,7 +17,7 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
February 8, 2008
@@ -128,7 +128,7 @@
Specifies the name of the crypto hardware (OpenSSL engine).
- When compiled with PKCS#11 support it defaults to "pcks11".
+ When compiled with PKCS#11 support it defaults to "pkcs11".
diff --git a/bin/dnssec/dnssec-keygen.docbook b/bin/dnssec/dnssec-keygen.docbook
index 713e3ca847..a246de2c2c 100644
--- a/bin/dnssec/dnssec-keygen.docbook
+++ b/bin/dnssec/dnssec-keygen.docbook
@@ -18,7 +18,7 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
June 30, 2000
@@ -218,7 +218,7 @@
Uses a crypto hardware (OpenSSL engine) for random number
and, when supported, key generation. When compiled with PKCS#11
- support it defaults to pcks11, the empty name resets it to
+ support it defaults to pkcs11; the empty name resets it to
no engine.
diff --git a/bin/dnssec/dnssec-revoke.docbook b/bin/dnssec/dnssec-revoke.docbook
index e010fcbb9d..0c74968694 100644
--- a/bin/dnssec/dnssec-revoke.docbook
+++ b/bin/dnssec/dnssec-revoke.docbook
@@ -17,7 +17,7 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
June 1, 2009
@@ -108,7 +108,7 @@
Use the given OpenSSL engine. When compiled with PKCS#11 support
- it defaults to pcks11, the empty name resets it to no engine.
+ it defaults to pkcs11; the empty name resets it to no engine.
diff --git a/bin/dnssec/dnssec-settime.docbook b/bin/dnssec/dnssec-settime.docbook
index 175183c1a8..8c08137937 100644
--- a/bin/dnssec/dnssec-settime.docbook
+++ b/bin/dnssec/dnssec-settime.docbook
@@ -17,7 +17,7 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
July 15, 2009
@@ -134,7 +134,7 @@
Use the given OpenSSL engine. When compiled with PKCS#11 support
- it defaults to pcks11, the empty name resets it to no engine.
+ it defaults to pkcs11; the empty name resets it to no engine.
diff --git a/bin/dnssec/dnssec-signzone.docbook b/bin/dnssec/dnssec-signzone.docbook
index e36559a2a9..7148c7d831 100644
--- a/bin/dnssec/dnssec-signzone.docbook
+++ b/bin/dnssec/dnssec-signzone.docbook
@@ -18,7 +18,7 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
June 05, 2009
@@ -158,7 +158,7 @@
Uses a crypto hardware (OpenSSL engine) for the crypto operations
it supports, for instance signing with private keys from
a secure key store. When compiled with PKCS#11 support
- it defaults to pcks11, the empty name resets it to no engine.
+ it defaults to pkcs11; the empty name resets it to no engine.
From 64affc54f96a2c71cbd10ed71e246ce0746259aa Mon Sep 17 00:00:00 2001
From: Automatic Updater
Date: Tue, 3 Nov 2009 21:59:04 +0000
Subject: [PATCH 13/87] regen
---
FAQ | 4 +-
bin/dnssec/dnssec-keyfromlabel.8 | 4 +-
bin/dnssec/dnssec-keyfromlabel.html | 4 +-
bin/dnssec/dnssec-keygen.8 | 4 +-
bin/dnssec/dnssec-keygen.html | 4 +-
bin/dnssec/dnssec-revoke.8 | 4 +-
bin/dnssec/dnssec-revoke.html | 4 +-
bin/dnssec/dnssec-settime.8 | 4 +-
bin/dnssec/dnssec-settime.html | 4 +-
bin/dnssec/dnssec-signzone.8 | 4 +-
bin/dnssec/dnssec-signzone.html | 4 +-
doc/arm/Bv9ARM.ch06.html | 11 +-
doc/arm/Bv9ARM.pdf | 6670 +++++++++++++-------------
doc/arm/man.dnssec-keyfromlabel.html | 4 +-
doc/arm/man.dnssec-keygen.html | 4 +-
doc/arm/man.dnssec-revoke.html | 4 +-
doc/arm/man.dnssec-settime.html | 4 +-
doc/arm/man.dnssec-signzone.html | 4 +-
18 files changed, 3357 insertions(+), 3388 deletions(-)
diff --git a/FAQ b/FAQ
index a2d1686c4e..b256ed8b10 100644
--- a/FAQ
+++ b/FAQ
@@ -244,7 +244,7 @@ A: You choose one view to be master and the second a slave and transfer
type master;
file "internal/example.db";
allow-update { key mykey; };
- notify-also { 10.0.1.1; };
+ also-notify { 10.0.1.1; };
};
};
@@ -254,7 +254,7 @@ A: You choose one view to be master and the second a slave and transfer
type slave;
file "external/example.db";
masters { 10.0.1.1; };
- transfer-source { 10.0.1.1; };
+ transfer-source 10.0.1.1;
// allow-update-forwarding { any; };
// allow-notify { ... };
};
diff --git a/bin/dnssec/dnssec-keyfromlabel.8 b/bin/dnssec/dnssec-keyfromlabel.8
index f8452ed16b..1ea7f5cd21 100644
--- a/bin/dnssec/dnssec-keyfromlabel.8
+++ b/bin/dnssec/dnssec-keyfromlabel.8
@@ -12,7 +12,7 @@
.\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
.\" PERFORMANCE OF THIS SOFTWARE.
.\"
-.\" $Id: dnssec-keyfromlabel.8,v 1.15 2009/10/23 01:14:47 tbox Exp $
+.\" $Id: dnssec-keyfromlabel.8,v 1.16 2009/11/03 21:58:30 tbox Exp $
.\"
.hy 0
.ad l
@@ -67,7 +67,7 @@ Use an NSEC3\-capable algorithm to generate a DNSSEC key. If this option is used
.PP
\-E \fIengine\fR
.RS 4
-Specifies the name of the crypto hardware (OpenSSL engine). When compiled with PKCS#11 support it defaults to "pcks11".
+Specifies the name of the crypto hardware (OpenSSL engine). When compiled with PKCS#11 support it defaults to "pkcs11".
.RE
.PP
\-l \fIlabel\fR
diff --git a/bin/dnssec/dnssec-keyfromlabel.html b/bin/dnssec/dnssec-keyfromlabel.html
index 7bb428785b..735aed445b 100644
--- a/bin/dnssec/dnssec-keyfromlabel.html
+++ b/bin/dnssec/dnssec-keyfromlabel.html
@@ -13,7 +13,7 @@
- OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
@@ -79,7 +79,7 @@
-E engine
Specifies the name of the crypto hardware (OpenSSL engine).
- When compiled with PKCS#11 support it defaults to "pcks11".
+ When compiled with PKCS#11 support it defaults to "pkcs11".
-l label
diff --git a/bin/dnssec/dnssec-keygen.8 b/bin/dnssec/dnssec-keygen.8
index 165d59fa17..8f5b24fbcf 100644
--- a/bin/dnssec/dnssec-keygen.8
+++ b/bin/dnssec/dnssec-keygen.8
@@ -13,7 +13,7 @@
.\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
.\" PERFORMANCE OF THIS SOFTWARE.
.\"
-.\" $Id: dnssec-keygen.8,v 1.52 2009/10/28 01:14:38 tbox Exp $
+.\" $Id: dnssec-keygen.8,v 1.53 2009/11/03 21:58:30 tbox Exp $
.\"
.hy 0
.ad l
@@ -100,7 +100,7 @@ Indicates that the DNS record containing the key should have the specified class
.PP
\-E \fIengine\fR
.RS 4
-Uses a crypto hardware (OpenSSL engine) for random number and, when supported, key generation. When compiled with PKCS#11 support it defaults to pcks11, the empty name resets it to no engine.
+Uses a crypto hardware (OpenSSL engine) for random number and, when supported, key generation. When compiled with PKCS#11 support it defaults to pkcs11; the empty name resets it to no engine.
.RE
.PP
\-e
diff --git a/bin/dnssec/dnssec-keygen.html b/bin/dnssec/dnssec-keygen.html
index 452b7ecbfa..1d7242b872 100644
--- a/bin/dnssec/dnssec-keygen.html
+++ b/bin/dnssec/dnssec-keygen.html
@@ -14,7 +14,7 @@
- OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
@@ -133,7 +133,7 @@
Uses a crypto hardware (OpenSSL engine) for random number
and, when supported, key generation. When compiled with PKCS#11
- support it defaults to pcks11, the empty name resets it to
+ support it defaults to pkcs11; the empty name resets it to
no engine.
-e
diff --git a/bin/dnssec/dnssec-revoke.8 b/bin/dnssec/dnssec-revoke.8
index 34e14592f3..028edf99f9 100644
--- a/bin/dnssec/dnssec-revoke.8
+++ b/bin/dnssec/dnssec-revoke.8
@@ -12,7 +12,7 @@
.\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
.\" PERFORMANCE OF THIS SOFTWARE.
.\"
-.\" $Id: dnssec-revoke.8,v 1.7 2009/10/06 01:14:41 tbox Exp $
+.\" $Id: dnssec-revoke.8,v 1.8 2009/11/03 21:58:30 tbox Exp $
.\"
.hy 0
.ad l
@@ -61,7 +61,7 @@ Sets the debugging level.
.PP
\-E \fIengine\fR
.RS 4
-Use the given OpenSSL engine. When compiled with PKCS#11 support it defaults to pcks11, the empty name resets it to no engine.
+Use the given OpenSSL engine. When compiled with PKCS#11 support it defaults to pkcs11; the empty name resets it to no engine.
.RE
.PP
\-f
diff --git a/bin/dnssec/dnssec-revoke.html b/bin/dnssec/dnssec-revoke.html
index 22edeadee5..76842ba2ae 100644
--- a/bin/dnssec/dnssec-revoke.html
+++ b/bin/dnssec/dnssec-revoke.html
@@ -14,7 +14,7 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
@@ -62,7 +62,7 @@
-E engine
Use the given OpenSSL engine. When compiled with PKCS#11 support
- it defaults to pcks11, the empty name resets it to no engine.
+ it defaults to pkcs11; the empty name resets it to no engine.
-f
diff --git a/bin/dnssec/dnssec-settime.8 b/bin/dnssec/dnssec-settime.8
index 9effbde82f..b2b33b51bc 100644
--- a/bin/dnssec/dnssec-settime.8
+++ b/bin/dnssec/dnssec-settime.8
@@ -12,7 +12,7 @@
.\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
.\" PERFORMANCE OF THIS SOFTWARE.
.\"
-.\" $Id: dnssec-settime.8,v 1.8 2009/10/17 01:14:35 tbox Exp $
+.\" $Id: dnssec-settime.8,v 1.9 2009/11/03 21:58:30 tbox Exp $
.\"
.hy 0
.ad l
@@ -79,7 +79,7 @@ Sets the debugging level.
.PP
\-E \fIengine\fR
.RS 4
-Use the given OpenSSL engine. When compiled with PKCS#11 support it defaults to pcks11, the empty name resets it to no engine.
+Use the given OpenSSL engine. When compiled with PKCS#11 support it defaults to pkcs11; the empty name resets it to no engine.
.RE
.SH "TIMING OPTIONS"
.PP
diff --git a/bin/dnssec/dnssec-settime.html b/bin/dnssec/dnssec-settime.html
index 69134cca88..935ec031e7 100644
--- a/bin/dnssec/dnssec-settime.html
+++ b/bin/dnssec/dnssec-settime.html
@@ -14,7 +14,7 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
@@ -83,7 +83,7 @@
-E engine
Use the given OpenSSL engine. When compiled with PKCS#11 support
- it defaults to pcks11, the empty name resets it to no engine.
+ it defaults to pkcs11; the empty name resets it to no engine.
diff --git a/bin/dnssec/dnssec-signzone.8 b/bin/dnssec/dnssec-signzone.8
index e6e38e51b7..7fcb92bbbe 100644
--- a/bin/dnssec/dnssec-signzone.8
+++ b/bin/dnssec/dnssec-signzone.8
@@ -13,7 +13,7 @@
.\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
.\" PERFORMANCE OF THIS SOFTWARE.
.\"
-.\" $Id: dnssec-signzone.8,v 1.57 2009/10/12 23:15:22 tbox Exp $
+.\" $Id: dnssec-signzone.8,v 1.58 2009/11/03 21:58:30 tbox Exp $
.\"
.hy 0
.ad l
@@ -74,7 +74,7 @@ files in
.PP
\-E \fIengine\fR
.RS 4
-Uses a crypto hardware (OpenSSL engine) for the crypto operations it supports, for instance signing with private keys from a secure key store. When compiled with PKCS#11 support it defaults to pcks11, the empty name resets it to no engine.
+Uses a crypto hardware (OpenSSL engine) for the crypto operations it supports, for instance signing with private keys from a secure key store. When compiled with PKCS#11 support it defaults to pkcs11; the empty name resets it to no engine.
.RE
.PP
\-g
diff --git a/bin/dnssec/dnssec-signzone.html b/bin/dnssec/dnssec-signzone.html
index 1279515842..1df0ae1d27 100644
--- a/bin/dnssec/dnssec-signzone.html
+++ b/bin/dnssec/dnssec-signzone.html
@@ -14,7 +14,7 @@
- OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
@@ -72,7 +72,7 @@
Uses a crypto hardware (OpenSSL engine) for the crypto operations
it supports, for instance signing with private keys from
a secure key store. When compiled with PKCS#11 support
- it defaults to pcks11, the empty name resets it to no engine.
+ it defaults to pkcs11; the empty name resets it to no engine.
-g
diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html
index eb14f33eaa..79369cc943 100644
--- a/doc/arm/Bv9ARM.ch06.html
+++ b/doc/arm/Bv9ARM.ch06.html
@@ -14,7 +14,7 @@
- OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- PERFORMANCE OF THIS SOFTWARE.
-->
-
+
@@ -1641,10 +1641,11 @@ category notify { null; };
class and type. Next it reports whether the
Recursion Desired flag was set (+ if set, -
if not set), if the query was signed (S),
- EDNS was in use (E), if DO (DNSSEC Ok) was
- set (D), or if CD (Checking Disabled) was set
- (C). After this the destination address the
- query was sent to is reported.
+ EDNS was in use (E), if TCP was used (T), if
+ DO (DNSSEC Ok) was set (D), or if CD (Checking
+ Disabled) was set (C). After this the
+ destination address the query was sent to is
+ reported.