ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
16,356 Commits 589 Branches 805 Tags
1a0eecfe694275dfadccc6074aaa4340845cc85d
Commit Graph

4973 Commits

Author SHA1 Message Date
Evan Hunt
1210799345 Add /* NOTREACHED */ comments 2009-10-03 18:03:54 +00:00
Automatic Updater
66fec05962 regen 2009-09-30 01:14:47 +00:00
Automatic Updater
61dd99bfae update copyright notice 2009-09-29 23:48:04 +00:00
Evan Hunt
a93a66f618 2794. [bug] Reduce default NSEC3 iterations from 100 to 10. 
[RT #19970]
 2009-09-29 22:17:34 +00:00
Francis Dupont
debd489a44 noreturn RT #20257 2009-09-29 15:06:07 +00:00
Mark Andrews
1e733ffc11 2792. [port] win32: 32/64 bit cleanups. [RT #128244] 2009-09-29 04:38:23 +00:00
Automatic Updater
f3d1a0ba52 regen 2009-09-26 01:14:51 +00:00
Automatic Updater
627f3e0805 update copyright notice 2009-09-25 23:48:13 +00:00
Evan Hunt
1e3c9961bb Move dns_rdataset_init() call earlier so "goto cleanup" won't trigger 
an assert in dns_rdataset_isassociated().  (This is trivial, I'm going
to commit without review.)
 2009-09-25 14:30:10 +00:00
Evan Hunt
fb596cc9af 2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3 
chain when re-signing a previously-signed zone.
			Use -u to modify NSEC3 parameters or switch
			between NSEC and NSEC3. [RT #20304]
 2009-09-25 06:47:50 +00:00
Francis Dupont
c59a7b0629 missing updates in recent changes 2009-09-24 14:39:17 +00:00
Evan Hunt
63a1800105 Fix several problems introduced by rt19943 2009-09-24 04:36:28 +00:00
Automatic Updater
d48690af7a update copyright notice 2009-09-23 23:47:56 +00:00
Evan Hunt
53c22b8e0d 2685. [bug] Fixed dnssec-signzone -S handling of revoked keys. 
Also, added warnings when revoking a ZSK, as this is
			not defined by protocol (but is legal).  [RT #19943]
 2009-09-23 16:01:57 +00:00
Mark Andrews
4d0e2cf9b9 2684. [bug] dnssec-signzone should clean the old NSEC chain when 
signing with NSEC3 and vica versa. [RT #20301]
 2009-09-23 14:05:11 +00:00
Francis Dupont
e25451b66c pkcs11 tools were moved (20067) 2009-09-23 10:54:46 +00:00
Evan Hunt
8436cc14ba 2684. [cleanup] dig: formalize +ad and +cd as synonyms for 
+adflag and +cdflag.  [RT #19305]
 2009-09-23 06:21:36 +00:00
Mark Andrews
011d0b7dc8 2683. [bug] dnssec-signzone should clean out old NSEC3 chains when 
the NSEC3 parameters used to sign the zone change.
                        [RT #20246]
 2009-09-23 04:30:16 +00:00
Francis Dupont
2f4d747a26 "configure --enable-symtable=all" failed to build. [RT #20282] 2009-09-22 08:47:55 +00:00
Automatic Updater
d2ebd5d5fb regen 2009-09-19 01:14:52 +00:00
Francis Dupont
b67b58ebe7 small improvement (rt20291) 2009-09-18 22:08:55 +00:00
Francis Dupont
b0dafbb309 spelling 2009-09-18 13:14:47 +00:00
Francis Dupont
1def913211 config.h issue is fixed: cleanup 2009-09-18 11:07:04 +00:00
Evan Hunt
0e32dda176 add include <config.h>, and update comments to use the new names 2009-09-17 23:46:34 +00:00
Francis Dupont
be728633c1 init .cvsignore 2009-09-17 22:55:59 +00:00
Francis Dupont
8b5a11217c from contrib/pkcs11-keygen 2009-09-17 22:51:59 +00:00
Automatic Updater
4765fc7c3f update copyright notice 2009-09-15 23:48:09 +00:00
Evan Hunt
d514c0dc9b 2679. [func] dig -k can now accept TSIG keys in named.conf 
format.  [RT #20031]
 2009-09-15 03:13:44 +00:00
Automatic Updater
f8e3e03cac regen 2009-09-15 01:14:42 +00:00
Mark Andrews
a12c8549d6 2678. [func] Treat DS queries as if "minimal-response yes;" 
was set. [RT #20258]
 2009-09-14 23:13:37 +00:00
Evan Hunt
b843f577bb 2677. [func] Changes to key metadata behavior: 
- Keys without "publish" or "active" dates set will
			  no longer be used for smart signing.  However,
			  those dates will be set to "now" by default when
			  a key is created; to generate a key but not use
			  it yet, use dnssec-keygen -G.
			- New "inactive" date (dnssec-keygen/settime -I)
			  sets the time when a key is no longer used for
			  signing but is still published.
			- The "unpublished" date (-U) is deprecated in
			  favor of "deleted" (-D).
			[rt20247]
 2009-09-14 18:45:45 +00:00
Evan Hunt
a457576b58 "dnssec-lookaside auto" crashed if named was built without openssl [rt20231] 2009-09-10 01:49:29 +00:00
Automatic Updater
31f1c9a241 regen 2009-09-09 23:30:30 +00:00
Mark Andrews
14cd8ac04c 2672. [bug] Don't enable searching in 'host' when doing reverse 
lookups. [RT #20218]
 2009-09-08 23:23:22 +00:00
Automatic Updater
c7d32c0b0f regen 2009-09-08 01:14:42 +00:00
Francis Dupont
210970a248 two votes for keys -> key pair 2009-09-07 23:11:48 +00:00
Francis Dupont
1f821c1058 merge rt19294 2009-09-07 12:58:33 +00:00
Evan Hunt
30a60d2aff On some slower systems the startup is delayed and this causes an 
apparent transfer failure on the initial calls to dig.  Adding a test
here to make sure the zones are fully loaded before attempting to query
them.
 2009-09-04 17:14:58 +00:00
Evan Hunt
8d0a1ede2f RT #20213: 
- correctly use -K option in dnssec-keygen
- fix an improper free() in dnssec-revoke
- fix grammar in dnssec-settime
 2009-09-04 16:57:22 +00:00
Mark Andrews
06eb464ae2 ALG_FORMATSIZE -> 20 2009-09-04 02:31:29 +00:00
Mark Andrews
2d13af354a isc_resourcevalue_t is unsigned. use %ISC_PRINT_QUADFORMATu 2009-09-04 00:49:50 +00:00
Francis Dupont
9916d13704 oldkey must be initialized to NULL 2009-09-03 13:43:52 +00:00
Automatic Updater
2895f101b5 regen 2009-09-03 01:14:42 +00:00
Evan Hunt
9f8d002a66 silence win32 compiler warnings 2009-09-03 00:12:23 +00:00
Automatic Updater
d7201de09b update copyright notice 2009-09-02 23:48:03 +00:00
Evan Hunt
eab9975bcf 2668. [func] Several improvements to dnssec-* tools, including: 
- dnssec-keygen and dnssec-settime can now set key
			  metadata fields 0 (to unset a value, use "none")
			- dnssec-revoke sets the revocation date in
			  addition to the revoke bit
			- dnssec-settime can now print individual metadata
			  fields instead of always printing all of them,
			  and can print them in unix epoch time format for
			  use by scripts
			[RT #19942]
 2009-09-02 06:29:01 +00:00
Automatic Updater
823ca3c14f update copyright notice 2009-09-01 23:47:45 +00:00
Tatuya JINMEI 神明達哉
ee537376ad avoid using @< (which some make don't seem to understand) for portability 2009-09-01 22:30:28 +00:00
Evan Hunt
93ebf0fc08 - add .cvsignore files 
- silence tinderbox warnings about missing config.h in a few files.
 2009-09-01 20:13:44 +00:00
Tatuya JINMEI 神明達哉
a27fe4c990 2667. [func] Add support for logging stack backtrace on assertion 
failure (not available for all platforms). [RT #19780]
9.7.0
 2009-09-01 18:40:25 +00:00