Commit Graph
8108 Commits
Author SHA1 Message Date
Francis Dupont bcb444aed0 remove connection aborted error message 2010-08-13 10:45:32 +00:00
Mark Andrews c73d8c1b72 2938. [bug] When skipping NSEC3 records that don't match the
current NSEC3PARAM record in use for zone named
                        could dereference a uninitialised pointer attempting
                        to obtain a lock. [RT# 21868]
2010-08-13 06:46:25 +00:00
Tatuya JINMEI 神明達哉 d0b75b9ff6 define the wrapper function for mem_isovermem().
(a regression in rt21818)
2010-08-12 21:30:26 +00:00
Evan Hunt 9b7efe7aca Removed a leftover UNUSED statement referencing a parameter that doesn't
exist anymore.
2010-08-12 04:04:14 +00:00
Automatic Updater cc4dd0d08d update copyright notice 2010-08-11 23:46:42 +00:00
Tatuya JINMEI 神明達哉 253ae50e09 required ctx is valid in mem_isovermem(). 2010-08-11 23:11:45 +00:00
Tatuya JINMEI 神明達哉 27fe1966c9 2937. [bug] Worked around an apparent race condition in over
memory conditions.  Without this fix a DNS cache DB or
			ADB could incorrectly stay in an over memory state,
			effectively refusing further caching, which
			subsequently made a BIND 9 caching server unworkable.
			This fix prevents this problem from happening by
			polling the state of the memory context, rather than
			making a copy of the state, which appeared to cause
			a race.  This is a "workaround" in that it doesn't
			solve the possible race per se, but several experiments
			proved this change solves the symptom.  Also, the
			polling overhead hasn't been reported to be an issue.
			This bug should only affect a caching server that
			specifies a finite max-cache-size.  It's also quite
			likely that the bug happens only when enabling threads,
			but it's not confirmed yet. [RT #21818]
2010-08-11 22:54:58 +00:00
Evan Hunt cfd262045c 2936. [func] Improved configuration syntax and multiple-view
support for addzone/delzone feature (see change
			#2930).  Removed "new-zone-file" option, replaced
			with "allow-new-zones (yes|no)".  The new-zone-file
			for each view is now created automatically, with
			a filename generated from a hash of the view name.
			It is no longer necessary to "include" the
			new-zone-file in named.conf; this happens
			automatically.  Zones that were not added via
			"rndc addzone" can no longer be removed with
			"rndc delzone". [RT #19447]
2010-08-11 18:14:20 +00:00
Automatic Updater 548317f929 update copyright notice 2010-08-10 23:48:19 +00:00
Mark Andrews 712b976a06 2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c. [RT #21871] 2010-08-10 09:32:06 +00:00
Automatic Updater a90aca78aa update copyright notice 2010-07-11 23:46:54 +00:00
Evan Hunt a207cfc5d1 Removed a duplicate entry in namedconf.c. 2010-07-11 05:44:15 +00:00
Evan Hunt 86dcc40058 2930. [experimental] New "rndc addzone" and "rndc delzone" commads
allow dynamic addition and deletion of zones.
			To enable this feature, specify a "new-zone-file"
			option at the view or options level in named.conf.
			Zone configuration information for the new zones
			will be written into that file.  To make the new
			zones persist after a restart, "include" the file
			into named.conf in the appropriate view.  (Note:
			This feature is not yet documented, and its syntax
			is expected to change.) [RT #19447]
2010-07-11 00:12:57 +00:00
Automatic Updater 1b892cf691 update copyright notice 2010-07-09 23:46:51 +00:00
Evan Hunt bf9b852c3e 2929. [bug] Improved handling of GSS security contexts:
- added LRU expiration for generated TSIGs
			 - added the ability to use a non-default realm
                         - added new "realm" keyword in nsupdate
			 - limited lifetime of generated keys to 1 hour
			   or the lifetime of the context (whichever is
			   smaller)
			[RT #19737]
2010-07-09 05:13:15 +00:00
Mark Andrews ff5864ef42 2928. [bug] Be more selective about the non-authoritative
answer we apply change 2748 to. [RT #21594]
2010-07-04 00:48:57 +00:00
Mark Andrews 2cf74a72fd isc_boolean_t -> dns_v4_aaaa_t 2010-06-26 05:30:30 +00:00
Mark Andrews 810656a187 2925. [bug] Named failed to accept uncachable negative responses
from insecure zones. [RT# 21555]
2010-06-25 23:50:13 +00:00
Automatic Updater cf309ffeee update copyright notice 2010-06-25 23:46:51 +00:00
Mark Andrews bf13e709db 2924. [func] 'rndc secroots' dump a combined summary of the
current managed keys combined with trusted keys.
                        [RT #20904]
2010-06-25 03:24:05 +00:00
Automatic Updater b8d4e96e95 update copyright notice 2010-06-23 23:46:58 +00:00
Mark Andrews 4a8dc5f8ef 2921. [bug] The resolver could attempt to destroy a fetch context
to soon.  [RT #19878]
2010-06-23 01:31:43 +00:00
Automatic Updater b61690dbad update copyright notice 2010-06-22 23:46:52 +00:00
Mark Andrews 48dfee7150 2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
to IPv4 clients.  New acl 'filter-aaaa' (default any).
2010-06-22 04:03:38 +00:00
Mark Andrews ae538374fe AAAA not A 2010-06-18 05:36:24 +00:00
Mark Andrews 081b36ff95 2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET. 2010-06-18 02:11:44 +00:00
Automatic Updater e40d5d6b71 update copyright notice 2010-06-09 23:50:58 +00:00
Automatic Updater 36961e2937 missing @ 2010-06-09 13:23:47 +00:00
Mark Andrews cf56ac2b41 missing @ 2010-06-09 09:04:39 +00:00
Mark Andrews 76117ff568 CHANGES 2010-06-09 01:43:09 +00:00
Automatic Updater ad0471f93b update copyright notice 2010-06-08 23:50:24 +00:00
Mark Andrews 63af1a646a 2913. [func] Add pkcs#11 system tests. [RT #20784] 2010-06-07 03:42:37 +00:00
Automatic Updater 3f2280d2fc update copyright notice 2010-06-04 23:51:14 +00:00
Mark Andrews ec58c4ca54 remove trailing comma 2010-06-04 00:12:54 +00:00
Automatic Updater 6e13ffa218 update copyright notice 2010-06-03 23:51:05 +00:00
Mark Andrews b7bc86a4d3 2912. [func] Windows clients don't like UPDATE responses that clear
the zone section. [RT #20986]
2010-06-03 05:23:27 +00:00
Mark Andrews a20996ab6f 2910. [func] Sanity check Kerberos credentials. [RT #20986] 2010-06-03 02:29:58 +00:00
Mark Andrews 29f0da7fb8 2908. [bug] It was possible for re-signing to stop after removing
a DNSKEY. [RT #21384]
2010-06-02 00:58:54 +00:00
Mark Andrews b00de53de2 2907. [bug] The export version of libdns had undefined references.
[RT #21444]
2010-06-02 00:38:29 +00:00
Mark Andrews 57b47bca26 checkpoint 2010-05-29 10:36:22 +00:00
Mark Andrews ead77b9ad4 2906. [bug] Add RFC 5011 implementation issues. [RT #20903] 2010-05-28 03:15:48 +00:00
Mark Andrews e27d55e3ee 2904. [bug] When using DLV, sub-zones of the zones in the DLV,
could be incorrectly marked as insecure instead of
                        secure leading to negative proofs failing.  This was
                        a unintended outcome from change 2890. [RT# 21392]
2010-05-26 06:28:00 +00:00
Mark Andrews 7d9be933d7 2903. [bug] managed-keys-directory missing from namedconf.c.
[RT #21370]
2010-05-21 14:10:32 +00:00
Mark Andrews abb239e7fc silence compiler, explict coversion 2010-05-19 09:52:42 +00:00
Mark Andrews 5b02fc32d6 2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316] 2010-05-19 07:13:15 +00:00
Mark Andrews b667946fa5 2900. [bug] The placeholder negative caching element was not
properly constructed triggering a INSIST in
                        dns_ncache_towire(). [RT #21346]
2010-05-19 06:39:50 +00:00
Mark Andrews 32f985bcf4 silence compile warnings, explict conversio 2010-05-18 06:28:29 +00:00
Mark Andrews ed30e0358b 9.7.1b1 2010-05-18 06:14:32 +00:00
Automatic Updater 4dd3ec797d update copyright notice 2010-05-18 02:38:10 +00:00
Mark Andrews 8d31dd9ab6 2897. [bug] NSEC3 chains could be left behind when transitioning
to insecure. [RT #21040]
2010-05-18 01:39:41 +00:00