Commit Graph
2345 Commits
Author SHA1 Message Date
Mark Andrews 118bdfd8c4 3497. [func] When deleting a slave/stub zone using 'rndc delzone'
report the files that were being used so they can
                        be cleaned up if desired. [RT #27899]

Squashed commit of the following:

commit 0e4e69d0c3153fe94aaa375b908cf7e3e45b5059
Author: Mark Andrews <marka@isc.org>
Date:   Thu Feb 21 17:01:44 2013 +1100

    report the zones to be removed rather than removing them

commit 5d247ac592eef64c4c467d99af4983b8c1ff998f
Author: Mark Andrews <marka@isc.org>
Date:   Wed Feb 20 15:05:47 2013 +1100

    remove slave/stub files when deleting a zone using delzone
2013-02-26 14:48:21 +11:00
Tinderbox User f97d56e757 update copyright notice 2013-02-25 23:46:03 +00:00
Evan Hunt 94315060c2 [master] RPZ speedup (phase 2, multiple RPZ's)
3495.	[func]		Support multiple response-policy zones, while
			improving RPZ performance. [RT #32476]
2013-02-25 12:46:51 -08:00
Evan Hunt 55e5c51e66 [master] DNS RRL
3494.	[func]		DNS RRL: Blunt the impact of DNS reflection and
			amplification attacks by rate-limiting substantially-
			identical responses. [RT #28130]
2013-02-25 12:45:56 -08:00
Tinderbox User 573d78f3d5 update copyright notice 2013-02-21 23:45:56 +00:00
Evan Hunt a81ae06ed3 [master] forbid inline-signing slave with no file
3491.	[bug]		Slave zones using inline-signing must specify a
			file name. [RT #31946]
2013-02-20 14:01:31 -08:00
Evan Hunt 2425d8bb7c [master] truncate logged rdata if too long
3490.	[bug]		When logging RDATA during update, truncate if it's
                        too long. [RT #32365]

cherry picked from:
        commit 16ddb566e5a5b57bf925adef2b5543dddc1de49b
        commit cd97e0c23b09f38aac49aabab66ee13c68b7a3f3
        commit d087fa982649c081d58c5bb16e63da3428e2b89d
        commit d0795bdffef57612dd7654ffd09c9f4216eee2c8
2013-02-20 13:54:52 -08:00
Mark Andrews 3c7df84b20 3488. [bug] Use after free error with DH generated keys. [RT #32649] 2013-02-18 20:26:26 +11:00
Tinderbox User 32dc577940 update copyright notice 2013-02-16 23:46:02 +00:00
Mark Andrews c9297d3759 3487. [bug] Change 3444 was not complete. There was a additional
place where the NOQNAME proof needed to be saved.
                        [RT #32629]

Squashed commit of the following:

commit cdef844f57bd3eb30b1f77135b89b6f9360e8bee
Author: Mark Andrews <marka@isc.org>
Date:   Sat Feb 16 00:27:14 2013 +1100

    whitespace

commit 60eb7e3f6cdd102d6aaf0fb4ada8c552576e4502
Author: Mark Andrews <marka@isc.org>
Date:   Sat Feb 16 00:19:51 2013 +1100

    return noqname proof with +cd and dlv
2013-02-16 07:45:43 +11:00
Evan Hunt 0b8bd3a4ae [master] address TKEY bugs
3486.	[bug]		named could crash when using TKEY-negotiated keys
			that had been deleted and then recreated. [RT #32506]

commit 6a48b9999766d26cddc7cef275cd984b7d53c014
Author: Evan Hunt <each@isc.org>
Date:   Tue Jan 29 14:59:46 2013 -0800

    [rt32506] don't dump key if dump is unimplemented

commit d0ae0f44b460bab2e8bb24bba683d3ef69ec1765
Author: Evan Hunt <each@isc.org>
Date:   Tue Jan 29 14:42:25 2013 -0800

    [rt32506] make sure LRU needs adjusting before adjusting it

commit 0437f8f06b1cb72a6d5e3c30f27febca23846d95
Author: Evan Hunt <each@isc.org>
Date:   Tue Jan 29 12:28:28 2013 -0800

    [rt32506] demonstrate bugs in tkey test
2013-02-15 10:19:50 -08:00
Tinderbox User 17131a9459 update copyright notice 2013-01-25 23:45:56 +00:00
Evan Hunt c9611b4573 [master] change "fast" to "map"
3475.	[cleanup]	Changed name of 'map' zone file format (previously
			'fast'). [RT #32458]
2013-01-24 14:20:48 -08:00
Evan Hunt 8f7d23a25c Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-01-23 15:48:47 -08:00
Tinderbox User 3aaa526a94 update copyright notice 2013-01-23 23:45:55 +00:00
Evan Hunt ffff5d6792 [master] fix dns_request_createvia assert
3474.	[bug]		nsupdate could assert when the local and remote
			address families didn't match. [RT #22897]
2013-01-23 15:39:05 -08:00
Evan Hunt 9a0dd99a75 [master] fix incorrect nsec3 check
- check for NSEC3 in empty nodes when not due to optout delegations
    - fixed typo in output ("Bad record NSEC record")
    - incidentally fixed an error in signzone that caused an
      incorrect warning about missing DNSKEYs when using -S
      and -3 together

3473.	[bug]		dnssec-signzone/verify could incorrectly report
			an error condition due to an empty node above an
			opt-out delegation lacking an NSEC3. [RT #32072]
2013-01-23 14:56:00 -08:00
Evan Hunt 214836c184 [master] dump masterfile after successful xfrin
3470.	[bug]		Slave zones could fail to dump when successfully
			refreshing after an initial failure. [RT #31276]
2013-01-22 15:49:50 -08:00
Evan Hunt cbd1fa092e [master] DLZ fixes
- handle malformed answers from DLZ better:
 - handle dlz_lookup errors better:
   when the first lookup of a name returns an unexpected failure code,
   we return it to the caller rather than continuing on to look up
   the wildcard. we now only continue processing if the return from
   the first lookup was either ISC_R_SUCCESS or ISC_R_NOTFOUND.

 - improved backward-compatibility for dlz_version:
   added a DLZ_DLOPEN_AGE value indicating how many versions
   back from the current DLZ_DLOPEN_VERSION named will support
2013-01-22 15:13:08 -08:00
Tinderbox User 0a8a14d513 update copyright notice 2013-01-21 23:45:48 +00:00
Evan Hunt a631c8d9b8 [master] prevent ixfr/ns1 being removed 2013-01-21 14:16:15 -08:00
Evan Hunt 30a7cf3957 [master] add 10.53.0.8 address 2013-01-21 12:36:41 -08:00
Tinderbox User 5ac5300fdf update copyright notice 2013-01-17 23:46:25 +00:00
Evan Hunt 71f8edccba [master] fix DNS64 with RPZ-remapped A records
3468.	[security]	RPZ rules to generate A records (but not AAAA records)
			could trigger an assertion failure when used in
			conjunction with DNS64. [RT #32141]
2013-01-17 11:23:30 -08:00
Curtis Blackburn c8803902d6 [bug] Added checks in dnssec-keygen and dnssec-settime to check for
delete date < inactive date. [RT #31719]
2013-01-17 10:59:16 -06:00
Tinderbox User dc3d68d6fe update copyright notice 2013-01-11 23:46:02 +00:00
Evan Hunt b3d116c299 [master] fixed clientinfo version check
3466.	[contrib]	Corrected the DNS_CLIENTINFOMETHODS_VERSION check
			in DLZ example driver. [RT #32275]
2013-01-10 19:57:21 -08:00
Tinderbox User 5c6b95ba1b update copyright notice 2013-01-10 23:46:00 +00:00
Mark Andrews 4801931443 3461. [bug] Negative responses could incorrectly have AD=1
set. [RT #32237]
2013-01-10 23:09:08 +11:00
Evan Hunt 578e319607 [master] add -J option to checkzone/compilezone
3459.	[func]		Added -J option to named-checkzone/named-compilezone
			to specify the path to the journal file. [RT #30958]
2013-01-09 16:56:46 -08:00
Tinderbox User b941edbeb5 update copyright notice 2013-01-09 23:45:53 +00:00
Mark Andrews c07c2a862e 3458. [bug] Return FORMERR when presented with a overly long
domain named in a request. [RT #29682]
2013-01-10 10:30:15 +11:00
Mark Andrews f1c1aab2c9 3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836] 2013-01-10 08:26:31 +11:00
Mark Andrews 1a592aae29 test eighth interface 2013-01-09 19:08:59 +11:00
Tinderbox User afe7d4b934 update copyright notice 2013-01-08 23:45:50 +00:00
Mark Andrews fc0bfa07c7 3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
failed. [RT #31960]
2013-01-09 07:40:27 +11:00
Tinderbox User 49503f1d9f update copyright notice 2013-01-05 23:45:47 +00:00
Mark Andrews 25b95d31ce 3450. [bug] Stop logfileconfig system test spam system logs.
[RT #32315]

Squashed commit of the following:

commit ad40744e2c7dc253b70857bb229def5dd194b418
Author: Mark Andrews <marka@isc.org>
Date:   Fri Jan 4 17:24:45 2013 +1100

    logfileconfig spams the system log files
2013-01-06 07:56:10 +11:00
Tinderbox User 6fe42ff85c update copyright notice 2013-01-04 23:45:53 +00:00
Evan Hunt cb0a74fd8d [master] show signzone errors in pkcs11 test 2013-01-03 19:55:34 -08:00
Evan Hunt 222d38735f [master] allow-query-on works now
3448.	[bug]		The allow-query-on ACL was not processed correctly.
			[RT #29486]
2013-01-03 15:13:45 -08:00
Tinderbox User d91e5a75df update copyright notice 2013-01-02 23:45:51 +00:00
Tinderbox User 024cf50d12 update copyright notice 2013-01-01 23:45:47 +00:00
Mark Andrews ae395e5f97 remove extranous rdata in nxrrset call as it is not ingnored in Net::DNS 0.70 2012-12-21 14:16:41 +11:00
Mark Andrews ab91ece513 sign_tcp_continuation doesn't work with the newer versions of
Net:DNS.  Code has been submitted so we don't need to use
the sign_tcp_continuation hack in future.
2012-12-21 12:58:58 +11:00
Tinderbox User 9191b6c9e8 update copyright notice 2012-12-20 23:45:48 +00:00
Mark Andrews b372587363 TSIG no longer has a mac_size method; arcount no longer need to be adjusted 2012-12-21 00:30:14 +11:00
Mark Andrews f127a35b6c adjust test to account for blank owner after origin now being rejected 2012-12-19 14:37:56 +11:00
Mark Andrews 4040ff974c -H not -i sets iterations 2012-12-19 14:18:05 +11:00
Mark Andrews 58c543d840 remove redundant $ORIGINs 2012-12-19 13:34:31 +11:00