Commit Graph

1903 Commits

Author SHA1 Message Date
Tinderbox User
2f09ac92f1 update copyright notice / whitespace 2017-10-06 23:47:26 +00:00
Evan Hunt
dddf97d534 [v9_10] further restrict update-policy local
4762.	[func]		"update-policy local" is now restricted to updates
                from local addresses. (Previously, other addresses
                were allowed so long as updates were signed by the
                local session key.) [RT #45492]
2017-10-06 15:43:05 -07:00
Mark Andrews
3a1fa8eeea 4759. [func] Add logging channel "trust-anchor-telementry" to
record trust-anchor-telementry in incoming requests.
                            Both _ta-XXXX.<anchor>/NULL and EDNS KEY-TAG options
                            are logged.  [RT #46124]

    (cherry picked from commit b41c1aacbc)

(cherry picked from commit 1c8aa38b53)
2017-10-06 14:06:40 +11:00
Tinderbox User
1476addacf update copyright notice / whitespace 2017-10-05 23:47:09 +00:00
Mark Andrews
8360489f0f 4754. [bug] dns_zone_setview needs a two stage commit to properly
handle errors. [RT #45841]

(cherry picked from commit 2732d4922c)
2017-10-05 16:06:07 +11:00
Evan Hunt
e43e479d5b [v9_10] de-DLV
4749.	[func]		The ISC DLV service has been shut down, and all
			DLV records have been removed from dlv.isc.org.
			- Removed references to ISC DLV in documentation
			- Removed DLV key from bind.keys
			- No longer use ISC DLV by default in delv
			[RT #46155]
2017-10-03 00:52:58 -07:00
Tinderbox User
3ea46cae3e update copyright notice / whitespace 2017-09-18 23:55:11 +00:00
Michał Kępień
4ceebc8874 [v9_10] Prevent possible infinite signing loop after retransferring an inline-signed slave using NSEC3
4727.	[bug]		Retransferring an inline-signed slave using NSEC3
			around the time its NSEC3 salt was changed could result
			in an infinite signing loop. [RT #45080]

(cherry picked from commit 62f2fefaec)
2017-09-18 09:28:34 +02:00
Tinderbox User
9b39cb394a update copyright notice / whitespace 2017-09-13 23:54:53 +00:00
Evan Hunt
047f41241c [v9_10] fix incorrect comment 2017-09-13 13:54:47 -07:00
Tinderbox User
d07f95402d update copyright notice / whitespace 2017-09-08 23:48:21 +00:00
Evan Hunt
8cc85bb736 [v9_10] change hash function for RRL
4709.	[cleanup]	Use dns_name_fullhash() to hash names for RRL.
			[RT #45435]

(cherry picked from commit f13385770e)
(cherry picked from commit b9fd54f8d4)
2017-09-08 15:47:04 -07:00
Tinderbox User
90ee437fa3 update copyright notice / whitespace 2017-08-24 23:50:17 +00:00
Mark Andrews
99f5031371 4688. [protocol] Check and display EDNS KEY TAG options (RFC 8145) in
messages. [RT #44804]

(cherry picked from commit 07741d43c8)
2017-08-25 08:48:35 +10:00
Tinderbox User
17a549b541 update copyright notice / whitespace 2017-07-31 23:47:22 +00:00
Francis Dupont
b03f0672e1 Added Ed25519 support (#44696) 2017-07-31 16:05:05 +02:00
Tinderbox User
56a32b9f54 update copyright notice / whitespace 2017-07-21 23:47:10 +00:00
Mark Andrews
9156962f46 4654. [cleanup] Don't use C++ keywords delete, new and namespace.
[RT #45538]

(cherry picked from commit 4bf32aa587)
2017-07-21 12:43:55 +10:00
Tinderbox User
8c2c69a9df update copyright notice / whitespace 2017-05-30 23:46:35 +00:00
Mark Andrews
b9892c25c9 4629. [bug] dns_client_startupdate could not be called with a
running client. [RT #45277]

(cherry picked from commit e51d62ecae)
2017-05-30 09:51:34 +10:00
Tinderbox User
3911051cf3 update copyright notice / whitespace 2017-05-11 23:46:25 +00:00
Mark Andrews
5049d09bca 4624. [bug] Check isc_mem_strdup results in dns_view_setnewzones.
[RT #45210]
2017-05-11 20:31:03 +10:00
Tinderbox User
4ea8c7b6f4 update copyright notice / whitespace 2017-04-23 23:46:24 +00:00
Evan Hunt
70590c691b [v9_10] fix dispatch.c shutdown race
4952.	[bug]		A race condition on shutdown could trigger an
			assertion failure in dispatch.c. [RT #43822]

(cherry picked from commit 019132b70c)
2017-04-20 17:42:03 -07:00
Mark Andrews
6d93a4e91a remove outdated cvs $Id strings 2017-02-03 18:41:40 +11:00
Tinderbox User
91b32fb6d9 update copyright notice / whitespace 2017-02-02 23:47:12 +00:00
Evan Hunt
fc5e144446 [v9_10] Squashed commit of the following:
4561.	[port]		Silence a warning in strict C99 compilers. [RT #44414]

(cherry picked from commit 6cb5e36ca3)
2017-02-01 17:31:29 -08:00
Tinderbox User
0cc74d59ab update copyright notice / whitespace 2017-01-11 23:46:23 +00:00
Evan Hunt
7a326082ad [v9_10] expand the flags field in dns_master_style
4550.	[cleanup]	Increased the number of available master file
			output style flags from 32 to 64. [RT #44043]
2017-01-11 12:06:29 -08:00
Mark Andrews
3c3cba0a63 4543. [bug] dns_client_startupdate now delays sending the update
request until isc_app_ctxrun has been called.
                        [RT #43976]

(cherry picked from commit 6f94747270)
2016-12-28 15:55:47 +11:00
Tinderbox User
a263f19bff update copyright notice / whitespace 2016-12-26 23:48:48 +00:00
Mark Andrews
74685182f7 4538. [bug] Call dns_client_startresolve from client->task.
[RT #43896]

(cherry picked from commit aceabacdb8)
2016-12-27 07:14:56 +11:00
Mark Andrews
a873ad10bd copyrights/whitespace 2016-11-03 12:47:03 +11:00
Mark Andrews
1bbcfe2fc8 4504. [security] Allow the maximum number of records in a zone to
be specified.  This provides a control for issues
                        raised in CVE-2016-6170. [RT #42143]

(cherry picked from commit 5f8412a4cb)
2016-11-03 10:01:52 +11:00
Evan Hunt
398f8c32f3 [v9_10] make uninstall
4503.	[cleanup]	"make uninstall" now removes file installed by
			BIND. (This currently excludes Python files
			due to lack of support in setup.py.) [RT #42912]

(cherry picked from commit 6087f87afb)
2016-11-01 19:35:44 -07:00
Tinderbox User
9831d2c6e5 update copyright notice / whitespace 2016-08-19 01:23:59 +00:00
Mark Andrews
e0449a0a4a 4450. [port] Provide more nuanced HSM support which better matches
the specific PKCS11 providers capabilities. [RT #42458]

(cherry picked from commit 8ee6f289d8)
2016-08-19 08:25:54 +10:00
Tinderbox User
4858334554 update copyright notice / whitespace 2016-08-11 23:46:19 +00:00
Francis Dupont
7a4d54f6c6 Merged rt42840_10 (tcp-only backport) 2016-08-11 14:28:22 +02:00
Tinderbox User
7a90fc75f5 update copyright notice / whitespace 2016-07-22 23:48:53 +00:00
Mark Andrews
aa1a7e1e58 4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
to provide feedback to the trust-anchor administrators
                        about how key rollovers are progressing as per
                        draft-ietf-dnsop-edns-key-tag-02.  This can be
                        disabled using 'trust-anchor-telemetry no;'.
                        [RT #40583]

(cherry picked from commit f20179857a)
2016-07-22 20:16:59 +10:00
Tinderbox User
d122358d76 update copyright notice / whitespace 2016-07-14 23:52:39 +00:00
Mark Andrews
594b2c2597 4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
was returned. [RT #42733]

(cherry picked from commit 63e58ad048)
2016-07-14 15:08:28 +10:00
Mukund Sivaraman
e7a3b8948f Some general cleanup (#42827)
(cherry picked from commit e65cd99461)
(cherry picked from commit 47ed813864)
2016-07-13 14:33:16 +05:30
Tinderbox User
351f101697 update copyright notice / whitespace 2016-07-05 23:47:38 +00:00
Evan Hunt
fb07d9858b [v9_10] clarify some comments 2016-07-05 10:53:22 -07:00
Tinderbox User
5c174bc119 update copyright notice / whitespace 2016-06-16 23:45:43 +00:00
Mark Andrews
17c01907d6 backport dns_name_t *name -> const dns_name_t *name
(cherry picked from commit ded95d497df16579852356fc5434671d24c7f00d)
2016-06-16 21:42:10 +10:00
Mark Andrews
04a6d1de64 4366. [bug] Address race condition when updating rbtnode bit
fields. [RT #42379]

(cherry picked from commit e2047969de)
2016-05-17 13:15:05 +10:00
Evan Hunt
8f6dc230d0 [v9_10] prep 9.10.4b3 2016-03-24 12:41:57 -07:00