Evan Hunt
0ada3802ea
[master] awk portability fix
2014-11-17 12:22:18 -08:00
Evan Hunt
a0b4f6d952
[master] geoip security fixes
...
4003. [security] When geoip-directory was reconfigured during
named run-time, the previously loaded GeoIP
data could remain, potentially causing wrong
ACLs to be used or wrong results to be served
based on geolocation. [RT #37720 ]
4002. [security] Lookups in GeoIP databases that were not
loaded could cause an assertion failure.
[RT #37679 ]
4001. [security] The caching of GeoIP lookups did not always
handle address families correctly, potentially
resulting in an assertion failure. [RT #37672 ]
2014-11-16 08:43:22 -08:00
Mark Andrews
ed51a21730
fix ns_smf_add_message
2014-11-15 17:18:10 +11:00
Mark Andrews
eca6a76eda
make inline
2014-11-15 17:03:21 +11:00
Evan Hunt
e32d354f75
[master] allow arbitrary-size rndc output
...
4005. [func] The buffer used for returning text from rndc
commands is now dynamically resizable, allowing
arbitrarily large amounts of text to be sent back
to the client. (Prior to this change, it was
possible for the output of "rndc tsig-list" to be
truncated.) [RT #37731 ]
2014-11-14 15:58:54 -08:00
Evan Hunt
c4abb19716
[master] reference leak with AAAA glue but not A
...
4004. [bug] When delegations had AAAA glue but not A, a
reference could be leaked causing an assertion
failure on shutdown. [RT #37796 ]
2014-11-14 09:02:28 -08:00
Mukund Sivaraman
16c86a4980
Update .gitgnore files (ISC-Bugs #37773 )
2014-11-11 11:47:02 +05:30
Tinderbox User
6d0a639bd0
update copyright notice
2014-11-06 23:45:21 +00:00
Evan Hunt
067c0c38e7
[master] s/mempcy/memmove/
2014-11-06 13:01:59 -08:00
Tinderbox User
369963ad26
regen master
2014-11-06 01:05:06 +00:00
Evan Hunt
3cc8c7d630
[master] fix nxrrset in nxdomain redirection
...
4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
from the redirect zone. [RT #37722 ]
2014-11-04 23:49:56 -08:00
Evan Hunt
ce96d4326c
[master] new mkeys and nzf naming format
...
3999. [func] "mkeys" and "nzf" files are now named after
their corresponding views, unless the view name
contains characters that would be incompatible
with use in a filename (i.e., slash, backslash,
or capital letters). If a view name does contain
these characters, the files will still be named
using a cryptographic hash of the view name.
Regardless of this, if a file using the old name
format is found to exist, it will continue to be
used. [RT #37704 ]
2014-11-04 19:43:27 -08:00
Mark Andrews
1feee79e1f
3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
2014-11-04 12:24:39 +11:00
Tinderbox User
def82e8de9
regen master
2014-10-31 01:04:53 +00:00
Tinderbox User
12b386e1a6
update copyright notice
2014-10-30 23:45:21 +00:00
Mark Andrews
f0a54842b1
3994. [func] Dig now supports setting the last unassigned DNS
...
header flag bit (dig +zflag). [RT #37421 ]
2014-10-31 10:16:00 +11:00
Mark Andrews
0f5144163c
3993. [func] Dig now supports EDNS negotiation by default.
...
(dig +[no]ednsnegotiation). [RT #37604 ]
2014-10-30 23:13:12 +11:00
Tinderbox User
a3ff24aaa5
regen master
2014-10-30 01:05:12 +00:00
Mark Andrews
f274cbeaed
3992. [func] DiG can now send queries without questions
...
(dig +header-only). [RT #37599 ]
2014-10-30 11:42:02 +11:00
Mark Andrews
00fb0253c9
3991. [func] Add the ability to buffer logging output by specifying
...
"buffered yes;" when defining a channel. [RT #26561 ]
2014-10-30 11:37:05 +11:00
Mark Andrews
a5c7cfbac4
3990. [testing] Add tests for unknown DNSSEC algorithm handling.
...
[RT #37541 ]
2014-10-30 11:05:26 +11:00
Tinderbox User
eaaf00efc0
regen master
2014-10-23 01:04:55 +00:00
Mark Andrews
cb6ec834f1
fix tag mis-match
2014-10-22 12:09:57 +11:00
Tinderbox User
6932de75ef
update copyright notice
2014-10-21 23:45:24 +00:00
Mark Andrews
4140a96f22
3987. [func] Allow the zone serial of a dynamically updatable
...
zone to be updated via rndc. [RT #37404 ]
2014-10-21 18:15:42 +11:00
Tinderbox User
78ec962d98
regen master
2014-10-21 01:04:47 +00:00
Mark Andrews
40b28f5402
3985. [doc] Describe how +ndots and +search interact in dig.
...
[RT #37529 ]
2014-10-21 08:05:21 +11:00
Evan Hunt
498b061031
[master] allow 1-week nta-lifetime/nta-recheck
...
3983. [bug] Change #3940 was incomplete: negative trust anchors
could be set to last up to a week, but the
"nta-lifetime" and "nta-recheck" options were
still limted to one day. [RT #37522 ]
2014-10-20 13:40:17 -07:00
Evan Hunt
7cf2122e0d
[master] change 3977 altered expected linecount from secroots
2014-10-18 16:50:32 -07:00
Mark Andrews
72775a79fe
3981. [bug] Cache DS/NXDOMAIN independently of other query types.
...
[RT #37467 ]
2014-10-18 13:09:09 +11:00
Evan Hunt
27174d90cc
[master] fix spurious error in rndc secroots
...
3977. [cleanup] "rndc secroots" reported a "not found" error when
there were no negative trust anchors set. [RT #37506 ]
2014-10-17 15:41:13 -07:00
Tinderbox User
6478b87fd2
regen master
2014-10-17 01:04:36 +00:00
Jeremy C. Reed
edad003e63
Remove the apostrophe 's from plural acronyms
...
This is to be consistent with our common usage of just using a
plural "s" without apostrophe.
This was brought up via discussion in ticket 37505.
I didn't have this reviewed.
2014-10-16 11:55:51 -05:00
Jeremy C. Reed
697bda73eb
Merge branch 'master' of repo.isc.org:/proj/git/prod/bind9
2014-10-16 11:01:26 -05:00
Jeremy C. Reed
22c1597937
fixes to manual from chucka
...
See ticket #37505
2014-10-16 11:00:13 -05:00
Mark Andrews
44ef2206d7
allow for the set of ttls to be empty
2014-10-16 14:46:44 +11:00
Mark Andrews
d9aaf7acce
make test more robust in the face of server failures
2014-10-16 12:34:12 +11:00
Mark Andrews
79921aeec2
3975. [bug] Don't populate or use the bad cache for queries that
...
don't request or use recursion. [RT #37466 ]
2014-10-15 11:25:23 +11:00
Jeremy C. Reed
05d4b5a9fc
[master] add -x to the usage output
...
(By the way, -d is also not in the usage nor in the manpage.)
2014-10-13 13:48:15 -07:00
Evan Hunt
1cbc394e7c
[master] add redirect zone to checkconf -z test
2014-10-09 18:30:34 -07:00
Evan Hunt
ca0ee90361
[master] turn off servfail cache in masterformat test
2014-10-09 09:30:46 -07:00
Francis Dupont
1831311ac6
added hooks for gperftools CPU profiler [ #37339 ]
2014-10-08 15:14:02 +02:00
Mark Andrews
c12c746e3a
3972. [bug] Fix host's usage statement. [RT #37397 ]
2014-10-07 01:09:49 +11:00
Mark Andrews
c81d56c03e
3971. [bug] Reduce the cascasding failures due to a bad $TTL line
...
in named-checkconf / named-checkzone. [RT #37138 ]
2014-10-05 08:29:34 +11:00
Mark Andrews
39fb5f2a5d
verifying inline zones work with views requires crypto to be configured
2014-10-04 18:06:04 +10:00
Evan Hunt
12002ea49e
[master] add delv system test
...
3969. [test] Added 'delv' system test. [RT #36901 ]
2014-10-02 22:37:20 -07:00
Tinderbox User
7a3f584cfc
update copyright notice
2014-10-02 23:45:25 +00:00
Mark Andrews
6979ebf549
3968. [bug] Silence spurious log messages when using 'named -[46]'.
...
[RT #37308 ]
2014-10-03 08:05:56 +10:00
Mark Andrews
b24061719c
3967. [test] Add test for inlined signed zone in multiple views
...
with different DNSKEY sets. [RT #35759 ]
2014-10-03 07:59:44 +10:00
Mark Andrews
9c0589bc8b
3966. [bug] Missing dns_db_closeversion call in receive_secure_db.
...
[RT #35746 ]
2014-10-03 07:50:09 +10:00