Tinderbox User
03565e899d
update copyright notice
2012-06-29 23:45:45 +00:00
Tinderbox User
8d0a65e45f
update copyright notice
2012-06-29 01:49:36 +00:00
Mark Andrews
cb421b69c3
reverse bad copyright update
2012-06-29 11:41:43 +10:00
Tinderbox User
cd24b114bf
update copyright notice
2012-06-29 01:22:07 +00:00
Mark Andrews
c6d42090f9
make the checkds system test dependent on the result of python discovery
2012-06-28 23:10:20 +10:00
Mark Andrews
17e5cbee49
3344. [func] New "dnssec-checkds" command checks a zone to
...
determine which DS records should be published
in the parent zone, or which DLV records should be
published in a DLV zone, and queries the DNS to
ensure that it exists. (Note: This tool depends
on python; it will not be built or installed on
systems that do not have a python interpreter.)
[RT #28099 ]
2012-06-28 18:26:04 +10:00
Tinderbox User
9418237f65
update copyright notice
2012-06-26 23:45:42 +00:00
Mark Andrews
68565715ec
3342. [bug] Change #3314 broke saving of stub zones to disk
...
resulting in excessive cpu usage in some cases.
[RT #29952 ]
2012-06-27 09:23:01 +10:00
Mark Andrews
7c25aaf620
3341. [func] New "dnssec-verify" command checks a signed zone
...
to ensure correctness of signatures and of NSEC/NSEC3
chains. [RT #23673 ]
2012-06-25 14:57:32 +10:00
Tinderbox User
0cf0e2b17f
update copyright notice
2012-06-21 23:45:41 +00:00
Evan Hunt
55479af81f
fix secondkey test, properly
2012-06-20 22:44:49 -07:00
Tinderbox User
bf8c2431d5
update copyright notice
2012-06-20 23:46:27 +00:00
Evan Hunt
44b9433d75
fixed second-key test to use correct rndc.conf
2012-06-20 15:08:42 -07:00
Mark Andrews
acebc2457c
3339. [func] Allow the maximum supported rsa exponent size to be
...
specified: "max-rsa-exponent-size <value>;" [RT #29228 ]
2012-06-20 21:34:24 +10:00
Tinderbox User
ba10d28268
update copyright notice
2012-06-14 23:45:44 +00:00
Mark Andrews
c7818fb0be
3337. [bug] Change #3294 broke support for the multiple keys
...
in controls. [RT #29694 ]
2012-06-13 16:30:46 +10:00
Tinderbox User
bec35dad94
update copyright notice
2012-06-08 23:45:44 +00:00
Mark Andrews
4db66665f5
3333. [bug] Setting resolver-query-timeout too low can cause
...
named to not recover if it looses connectivity.
[RT #29623 ]
2012-06-08 12:38:48 +10:00
Mark Andrews
640db2ed50
Don't restart ns5 after killing it
2012-06-07 14:42:18 +10:00
Mark Andrews
8bd9a9b2ad
kill and restart the nameserver after running: perf 'without rpz' norpz
2012-06-04 16:36:30 +10:00
Tinderbox User
de16ff6d04
update copyright notice
2012-06-01 23:45:51 +00:00
Evan Hunt
63e1f1ecc6
fix solaris portability problem
2012-06-01 11:41:24 -07:00
Evan Hunt
73319305bf
security fix
...
3331. [security] dns_rdataslab_fromrdataset could produce bad
rdataslabs. [RT #29644 ]
2012-06-01 09:47:28 -07:00
Vernon Schryver
f05089ea5c
For rt26172:
...
Add
- optional "recursive-only yes|no" to the response-policy statement
- optional max-policy-ttl to limit the lies that "recursive-only no"
can introduce into resolvers' caches
- test that queries with RD=0 are not rewritten by default
- performance smoke test
Change encoding of PASSTHRU action to "rpz-passthru".
(The old encoding is still accepted.)
Fix rt26180 assert botch in zone_findrdataset() in this branch
as well.
Fix missing signatures on NOERROR results despite RPZ hits
when there are signatures and the client asks for DNSSEC,
2012-06-01 01:03:43 +00:00
Tinderbox User
ca51110567
update copyright notice
2012-05-21 23:45:36 +00:00
Mark Andrews
c400da38cf
redirect stderr to /dev/null
2012-05-21 16:05:18 +10:00
Mark Andrews
e77611f94c
awk and toupper is not portable, use sed instead
2012-05-21 10:16:22 +10:00
Tinderbox User
a2093c07a5
update copyright notice
2012-05-17 23:45:48 +00:00
Evan Hunt
dff9ea972b
add ecdsa to system tests
2012-05-17 16:10:26 -07:00
Evan Hunt
8b1b819ae4
add ECDSA support
...
3317. [protocol] Add ECDSA support (RFC 6605). [RT #21918 ]
2012-05-17 15:52:07 -07:00
Evan Hunt
e39b4d8054
Handle RRSIG signer case consistently
...
3329. [bug] Handle RRSIG signer-name case consistently: We
generate RRSIG records with the signer-name in
lower case. We accept them with any case, but if
they fail to validate, we try again in lower case.
[RT #27451 ]
2012-05-17 10:59:07 -07:00
Mark Andrews
9a9f67d54b
3273. [bug] AAAA responses could be returned in the additional
...
section even when filter-aaaa-on-v4 was in use.
[RT #27292 ]
2012-04-27 13:02:03 +10:00
Tinderbox User
36b371b81f
update copyright notice
2012-04-26 23:45:39 +00:00
Mark Andrews
07ef11a326
3313. [protocol] Add TLSA record type. [RT #28989 ]
2012-04-26 12:36:53 +10:00
Mark Andrews
b58a55c2d9
3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
...
[RT #27631 ]
2012-04-26 11:45:14 +10:00
Evan Hunt
d171ec4fe4
missed a file in previous commit
2012-04-23 08:57:02 -07:00
Evan Hunt
c02c10261c
fix .gitignore files
2012-04-23 08:56:12 -07:00
Tinderbox User
814d92a93b
update copyright notice
2012-04-11 23:45:41 +00:00
Mark Andrews
74ce4de82e
3306. [bug] Improve DNS64 reverse zone performance. [RT #28563 ]
...
3305. [func] Add wire format lookup method to sdb. [RT #28563 ]
2012-04-11 12:20:44 +10:00
Tinderbox User
5cca73efaa
update copyright notice
2012-03-14 23:45:32 +00:00
Mark Andrews
ac5871037f
properly redirect stderr to stdout
2012-03-14 16:09:41 +11:00
Tinderbox User
5abefae88a
update copyright notice
2012-03-10 23:45:42 +00:00
Mark Andrews
27d5d5890f
empty directory
2012-03-10 08:46:19 +11:00
Evan Hunt
c9481a4625
set $Id$
2012-03-07 08:18:58 -08:00
Tinderbox User
c201888c2a
regen v9_9
2012-03-07 01:59:30 +00:00
Evan Hunt
8047e7c06f
re-remove cvsignore files
2012-03-05 08:29:31 -08:00
Evan Hunt
f94af76649
Revert "added gitignore, removed cvsignore"
...
This reverts commit e8ae173655 .
2012-03-05 08:24:17 -08:00
Evan Hunt
6aa2d721fc
created
2012-03-03 23:25:21 -08:00
Evan Hunt
e8ae173655
added gitignore, removed cvsignore
2012-03-03 23:24:11 -08:00
Automatic Updater
2ded752b75
update copyright notice
2012-02-23 07:09:02 +00:00