Commit Graph

9106 Commits

Author SHA1 Message Date
Evan Hunt
09755f7270 [master] prep 9.10.0a1 release 2013-09-04 15:41:50 -07:00
Mark Andrews
e9921500e1 remove unused variable 2013-09-04 22:34:44 +10:00
Mark Andrews
0c91911b4d 3642. [func] Allow externally generated DNSKEY to be imported
into the DNSKEY management framework.  A new tool
                        dnssec-importkey is used to this. [RT #34698]
2013-09-04 13:53:02 +10:00
Mark Andrews
b5f4cc132e 3641. [bug] Handle changes to sig-validity-interval settings
better. [RT #34625]
2013-09-04 13:45:00 +10:00
Mark Andrews
d6f99498d6 3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
in a key zone. [RT #34238]
2013-09-04 13:14:06 +10:00
Curtis Blackburn
c4348cb50f 3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
encountered. [RT #34668]
2013-08-28 15:56:49 -05:00
Tinderbox User
377b774598 update copyright notice 2013-08-15 23:46:17 +00:00
Mark Andrews
d1e22676de 3635. [bug] Signatures were not being removed from a zone with
only KSK keys for a algorithm. [RT #24439]
2013-08-15 13:37:07 +10:00
Mark Andrews
7ace327795 3632. [bug] Signature from newly inactive keys were not being
removed.  [RT #32178]
2013-08-15 10:48:05 +10:00
Evan Hunt
5f630b9417 [master] change 3630 incomplete--needed to check fromtext too 2013-08-14 17:23:41 -07:00
Tinderbox User
3c04ca47c6 update copyright notice 2013-08-13 23:46:14 +00:00
Evan Hunt
5d4343a998 [master] fix md5 key id computation
3630.	[bug]		Ensure correct ID computation for MD5 keys. [RT #33033]
2013-08-13 16:03:42 -07:00
Tinderbox User
21c8938824 update copyright notice 2013-08-12 23:46:05 +00:00
Mark Andrews
75ae74f8fd 3629. [func] Allow the printing of cryptographic fields in DNSSEC
records by dig to be suppressed (dig +nocrypto).
                        [RT #34534]
2013-08-12 15:37:51 +10:00
Mark Andrews
16bd30ae69 3628. [func] Report DNSKEY key id's when dumping the cache.
[RT #34533]
2013-08-12 14:38:26 +10:00
Mark Andrews
df0892aea6 3627. [bug] RPZ changes were not effective on slaves. [RT #34450] 2013-08-09 13:23:01 +10:00
Evan Hunt
7ade93c328 [master] fix build error when IP_TOS is undefined 2013-08-08 19:15:11 -07:00
Evan Hunt
a499dddb4b [master] easier to read NSID output
3626.	[func]		dig: NSID output now easier to read. [RT #21160]
2013-08-08 16:50:34 -07:00
Mark Andrews
e543b4e5db remove redundent 'request-ixfr' 2013-08-01 14:38:27 +10:00
Mark Andrews
f45818b82a add comment 2013-07-26 10:25:45 +10:00
Evan Hunt
d640b4a0ab [master] perf: eliminate cache stats attach/detach
3622.	[tuning]	Eliminate an unnecessary lock when incrementing
			cache statistics. [RT #34339]
2013-07-25 10:51:31 -07:00
Tinderbox User
345a210f51 update copyright notice 2013-07-16 23:46:10 +00:00
Mark Andrews
fdb4ae8f6c 3621. [security] Incorrect bounds checking on private type 'keydata'
can lead to a remotely triggerable REQUIRE failure
                        (CVE-2013-4854). [RT #34238]
2013-07-17 08:03:50 +10:00
Mark Andrews
975172e3dc remove unused variable 2013-07-16 10:18:54 +10:00
Mark Andrews
6142269dcc remove unused assignment 2013-07-15 13:09:27 +10:00
Mark Andrews
7236e1bd00 remove dead code 2013-07-15 09:30:53 +10:00
Tinderbox User
44c016134f update copyright notice 2013-07-13 23:46:06 +00:00
Mark Andrews
09fec18669 fix unchecked null; value not read 2013-07-14 00:26:23 +10:00
Francis Dupont
41a6b3031e spelling 2013-07-13 01:39:41 +02:00
Evan Hunt
421d4a0647 [master] rpz work
3620.	[func]		Added "rpz-client-ip" policy triggers, enabling
			RPZ responses to be configured on the basis of
			the client IP address; this can be used, for
			example, to blacklist misbehaving recursive
			or stub resolvers. [RT #33605]

3619.	[bug]		Fixed a bug in RPZ with "recursive-only no;"
			[RT #33776]
2013-07-12 14:46:47 -07:00
Tinderbox User
dbd8673fa0 update copyright notice 2013-07-11 23:46:13 +00:00
Evan Hunt
0949306cb9 [master] check include file mtimes
3618.	[func]		"rndc reload" now checks modification times of
			include files as well as master files to determine
			whether to skip reloading a zone. [RT #33936]
2013-07-11 16:32:36 -07:00
Evan Hunt
cf0a69e999 [master] address zone->db races
3616.	[bug]		Change #3613 was incomplete. [RT #34177]
2013-07-11 09:51:47 -07:00
Evan Hunt
f4e309b177 [master] silence warning 2013-07-10 09:15:51 -07:00
Francis Dupont
a96e5ffbe0 spelling 2013-07-10 10:56:18 +02:00
Evan Hunt
927e4c9fec [master] address race conditions with removing inline zones
3513.	[bug]		named could crash when deleting inline-signing
			zones with "rndc delzone". [RT #34066]
2013-07-09 17:39:21 -07:00
Tinderbox User
ca48f47d88 update copyright notice 2013-07-09 23:46:11 +00:00
Evan Hunt
4b13ea47db [master] check for -ljson-c as well as -ljson
3512.	[port]		Check whether to use -ljson or -ljson-c. [RT #34115]
2013-07-09 16:43:59 -07:00
Evan Hunt
5b7abbef51 [master] added isc_safe_memcmp()
3611.	[bug]		Improved resistance to a theoretical authentication
			attack based on differential timing.  [RT #33939]
2013-07-09 11:47:16 -07:00
Evan Hunt
eb4458b478 [master] prevent exportlib deadlock
3609.	[bug]		Corrected a possible deadlock in applications using
			the export version of the isc_app API. [RT #33967]
2013-07-06 18:23:41 -07:00
Francis Dupont
c46fb8092d remove dns_adb_flushmatch from libdns.def 2013-07-04 10:56:18 +02:00
Evan Hunt
5bcbfa2da0 [master] add missing symbols 2013-07-01 10:44:16 -07:00
Evan Hunt
9d4ec6d2c5 [master] "flushtree -all" no longer optional
Updated CHANGES note:
3606.	[func]		"rndc flushtree" now flushes matching
			records in the address database and bad cache
                        as well as the DNS cache. (Previously only the
                        DNS cache was flushed.) [RT #33970]
2013-06-30 18:53:48 -07:00
Tinderbox User
9c5faa2ba8 update copyright notice 2013-06-26 23:46:14 +00:00
Evan Hunt
9fa5a723e1 [master] "rndc flushtree -all <name>"
3606.	[func]		"rndc flushtree -all" flushes matching
			records in the ADB and bad cache as well as
			the DNS cache.  (Without the "-all" option,
			flushtree will still only flush records from
			the DNS cache.) [RT #33970]
2013-06-26 14:59:32 -07:00
Evan Hunt
c5a53e9ab5 [master] fix WIN32 nmake crc64
- trivial typo in CRC-64 windows build
2013-06-26 14:49:01 -07:00
Evan Hunt
f42c0dcca8 [master] win32 fixes
3605.	[port]		win32: Addressed several compatibility issues
			with newer versions of Visual Studio. [RT #33916]

Squashed commit of the following:

commit 4127af15f85da90cf2bd3a0c5a558daae89e833a
Author: Francis Dupont <fdupont@isc.org>
Date:   Tue Jun 25 22:41:53 2013 +0200

    make the last change to be text

commit 21ef4891b9ee3e3aefb45d4c80d5cb7ec78f264f
Author: Curtis Blackburn <ckb@isc.org>
Date:   Tue Jun 25 12:35:08 2013 -0500

    [rt33916] re-worded for easier reading

commit 83828e47e62fea4070441e645ba8fed338255ceb
Author: Francis Dupont <fdupont@isc.org>
Date:   Mon Jun 24 16:08:11 2013 +0200

    introduce a VCRedistPath env var

commit 0337f2554f168993a65945e78c2879e9bfca5293
Author: Francis Dupont <fdupont@isc.org>
Date:   Sun Jun 23 01:23:26 2013 +0200

    _adjust_fdiv for VS < 2010

commit 375fdd5c06be276b0ff0ad589c0e22b809339fe9
Author: Francis Dupont <fdupont@isc.org>
Date:   Thu Jun 20 16:27:04 2013 +0200

    move to MSVC v1600 as it still breaks on VS 2010

commit bfcaf72071e9d8df1d0ce0c5f05b69acd51bf698
Author: Francis Dupont <fdupont@isc.org>
Date:   Thu Jun 20 15:57:35 2013 +0200

    WIN32: avoid addrinfo redef

commit 18504c3e50b11e66a0b573c7cb3d61094bfa5b52
Author: Francis Dupont <fdupont@isc.org>
Date:   Thu Jun 20 15:54:38 2013 +0200

    WIN32: fseek/ftell

commit f9a4fdccc5ab1c74c64412fb76da7dfd161787b2
Author: Francis Dupont <fdupont@isc.org>
Date:   Thu Jun 20 15:13:01 2013 +0200

    fix WIN32 error redefs in net.h (isc ad lwres libs)
2013-06-26 14:38:35 -07:00
Evan Hunt
7aba1a9660 [master] fix compile bug with json but no xml
3604.	[bug]		Fixed a compile-time error when building with
			JSON but not XML. [RT #33959]
2013-06-26 14:12:27 -07:00
Tinderbox User
ca283f2ecb update copyright notice 2013-06-25 23:48:02 +00:00
Mark Andrews
682a574e67 3603. [bug] Install <isc/stat.h>. [RT #33956] 2013-06-25 23:56:45 +10:00