Evan Hunt
1fe2d7b97a
silence a spurious dnssec-keygen warning in the dnssec system test
...
the occluded-key test creates both a KEY and a DNSKEY. the second
call to dnssec-keygen calls dns_dnssec_findmatchingkeys(), which causes
a spurious warning to be printed when it sees the type KEY record.
this should be fixed in dnssec.c, but the meantime this change silences
the warning by reversing the order in which the keys are created.
(cherry picked from commit 6661db9564 )
2019-01-31 14:02:22 -08:00
Evan Hunt
6c7096aa34
Merge branch '850-catch-shutdown-aborts-v9_11' into 'v9_11'
...
detect crash on shutdown in stop.pl
See merge request isc-projects/bind9!1441
2019-01-31 12:55:04 -05:00
Evan Hunt
607e42b560
detect crash on shutdown in stop.pl
...
(cherry picked from commit 9bf37f4e48 )
2019-01-31 09:43:27 -08:00
Evan Hunt
33001ca556
Merge branch '849-fix-tkey-leak-v9_11' into 'v9_11'
...
fix TKEY problems
See merge request isc-projects/bind9!1439
2019-01-31 12:41:05 -05:00
Evan Hunt
a6afd50cb9
Change #4148 wasn't complete
...
- there was a memory leak when using negotiated TSIG keys.
- TKEY responses could only be signed when using a newly negotiated
key; if an existent matching TSIG was found in in the keyring it
would not be used.
(cherry picked from commit 73ba24fb36 )
2019-01-31 09:29:22 -08:00
Evan Hunt
011626d048
Merge branch '821-matthijs-unsigned-gss-tsig-tkey-query-response-v9_12-v9_11' into 'v9_11'
...
Resolve "Unsigned GSS-TSIG TKEY Query Response"
See merge request isc-projects/bind9!1431
2019-01-30 15:51:17 -05:00
Matthijs Mekking
43baca1fce
Update CHANGES
...
(cherry picked from commit f1c6e01a0f )
(cherry picked from commit c82eb3b3ca )
2019-01-30 12:34:02 -08:00
Matthijs Mekking
326d40ab08
allow TSIG key to be added to message structure after parsing
...
up until now, message->tsigkey could only be set during parsing
of the request, but gss-tsig allows one to be created afterward.
(cherry picked from commit 879fc0285e )
2019-01-30 12:34:02 -08:00
Matthijs Mekking
13636ac3b0
Harden GSS-TSIG tests, verify signed TKEY response
...
(cherry picked from commit b0b846a4bb )
2019-01-30 12:34:01 -08:00
Mark Andrews
a4890ac802
Merge branch '848-keymgr-19-old-keys-failing-on-penguin-v9_11' into 'v9_11'
...
Resolve "keymgr 19-old-keys failing on penguin"
See merge request isc-projects/bind9!1426
2019-01-30 00:28:29 -05:00
Mark Andrews
cee2dcef9f
add CHANGES
...
(cherry picked from commit b9d5a62bdc )
2019-01-30 16:03:02 +11:00
Mark Andrews
135b0797fb
add 300 seconds of fudge
...
(cherry picked from commit acf0292da4 )
2019-01-30 16:02:39 +11:00
Mark Andrews
7b12906ac0
only use a single policy file when testing.
...
(cherry picked from commit 36ea9b8181 )
2019-01-30 16:02:38 +11:00
Evan Hunt
205c6ed5cc
Merge branch '841-openssl-null-free-v9_11' into 'v9_11'
...
Do not fail on NULL passed to OpenSSL_free
See merge request isc-projects/bind9!1423
2019-01-29 19:02:30 -05:00
Petr Menšík
af021f136e
Do not fail on NULL passed to OpenSSL_free
...
Some plugins might call it after deconstruction. Do not crash if there
is no reason for it.
(cherry picked from commit a26673a088 )
2019-01-29 15:42:51 -08:00
Evan Hunt
dda175e108
Merge branch '766-querytrace-doc-v9_12-v9_11' into 'v9_11'
...
Resolve "--enable-querytrace has negative performance impact - update the documentation to say this"
See merge request isc-projects/bind9!1420
2019-01-29 17:26:51 -05:00
Evan Hunt
cd79df85a2
added querytrace documentation in README
...
also rearranged things a little, adding a "dependencies" section
(cherry picked from commit 51048ca06e )
(cherry picked from commit 87b0098b4e )
2019-01-29 14:25:32 -08:00
Michał Kępień
342a0dd0e5
Merge branch 'michal/add-fedora-29-to-ci-v9_11' into 'v9_11'
...
[v9_11] Add Fedora 29 to CI
See merge request isc-projects/bind9!1416
2019-01-29 07:53:19 -05:00
Michał Kępień
03b79f9799
Add Fedora 29 to CI
...
Modify .gitlab-ci.yml so that every CI pipeline also builds and tests
BIND on Fedora 29.
(cherry picked from commit 38b6c5c444 )
2019-01-29 13:32:34 +01:00
Evan Hunt
19d30c0b49
Merge branch '259-named-args-v9_11' into 'v9_11'
...
add properly-formatted -D options to named.args files
See merge request isc-projects/bind9!1412
2019-01-29 00:35:32 -05:00
Evan Hunt
dd54a08163
also add -D options for transient named processes started in tests.sh
...
(cherry picked from commit dd45831acc )
2019-01-28 21:22:13 -08:00
Evan Hunt
e5acb97c8a
add properly-formatted -D options to named.args files
...
this prevents servers that use arguments specified in named.args
from appearing different in 'ps' output from servers run with arguments
from start.pl
(cherry picked from commit 175d6e9bfb )
2019-01-28 21:21:33 -08:00
Evan Hunt
26cf678ea3
Merge branch 'each-fix-logfileconfig-v9_11' into 'v9_11'
...
reset SYSTEMTESTTOP when changing directories
See merge request isc-projects/bind9!1410
2019-01-29 00:08:44 -05:00
Evan Hunt
0cc8758724
reset SYSTEMTESTTOP when changing directories
...
(cherry picked from commit 70f36a25e4 )
2019-01-28 20:42:13 -08:00
Evan Hunt
0afe7749f0
Merge branch 'each-win32-tests-v9_11' into 'v9_11'
...
fix win32 tests (v9_11)
See merge request isc-projects/bind9!1402
2019-01-26 13:35:02 -05:00
Evan Hunt
7dad677ef8
fix runtime test
...
named doesn't understand cygwin paths, so we need to use
`cygpath -aw .` instead of `pwd` to get the absolute path to the
working directory.
2019-01-26 00:54:22 -08:00
Evan Hunt
f0ebe6cbe4
fix rrl test
...
strip CR characters before using awk/sed
2019-01-25 16:15:35 -08:00
Evan Hunt
77bc4e27f1
fix rpz test
...
- work around a CR newline problem
- use rndc to stop servers
2019-01-25 16:15:35 -08:00
Evan Hunt
aa1cf3c606
fix rpzrecurse test
...
- backport from v9_12 changes to enable rpzrecurse test to
suspend and resume servers on win32
- use rndc to stop servers
2019-01-25 16:15:08 -08:00
Evan Hunt
be8dfc7421
fix dnssec test
...
- work around CR issues
- use UTC for time comparisons
- use $DIFF instead of cmp
2019-01-25 15:38:50 -08:00
Evan Hunt
4e597364a6
fix legacy test
...
use rndc rather than signals to stop the server
2019-01-25 15:38:49 -08:00
Evan Hunt
f1906e8ea3
fix fetchlimit test
...
use TCP for the test queries in between UDP bursts; this avoids
congestion issues that interfered with the test on windows
2019-01-25 15:38:49 -08:00
Evan Hunt
f7a77ff295
fix sfcache test
...
use a lame server configuration to force SERVFAILs instead of killing ns2.
this prevents test failures that occurred due to a different behavior of
the netowrking stack in windows.
2019-01-25 15:38:49 -08:00
Evan Hunt
d48fa83230
fix nsupdate test
...
rndc_reload was failing on windows
2019-01-25 15:38:49 -08:00
Evan Hunt
dc5c53b23a
fix rndc test
...
use regex instead of exact string matching to deal with CR at end of line
2019-01-25 15:38:49 -08:00
Evan Hunt
4c5c91f36d
fix statistics test
...
the active sockets test is supposed to be commented out on win32, but
only part of it was
2019-01-25 15:38:49 -08:00
Evan Hunt
73f9d372f6
fix redirect test
...
strip CR characters before using sed
2019-01-25 15:38:49 -08:00
Evan Hunt
0828d9c6db
fix notify test
...
test the average delay between notifies instead of the minimum delay;
this helps avoid unnecessary test failures on systems with bursty
network performance.
2019-01-25 15:38:49 -08:00
Evan Hunt
57272bfb60
fix masterformat test
...
use stop.pl instead of rndc to stop server
2019-01-25 15:38:49 -08:00
Evan Hunt
09b61926d8
fix inline test
...
use regex instead of exact string matching, to deal with CR at end of ine
2019-01-25 15:38:48 -08:00
Evan Hunt
7a8058b988
fix forward test
...
strip CR characters before using sed
2019-01-25 15:38:48 -08:00
Evan Hunt
409a62c54c
fix cookie test
...
strip CR characters before comparing files
2019-01-25 15:38:48 -08:00
Evan Hunt
e947cdfd27
use $DIFF instead of diff
2019-01-25 15:38:48 -08:00
Evan Hunt
cad88c5906
set and use SYSTEMTESTTOP consistently
2019-01-25 15:38:48 -08:00
Evan Hunt
79fa438d45
more reliable method for killing "ans" servers on windows
...
as perl and python are both native to cygwin, we don't want to use
the "kill -f" option to terminate them.
2019-01-25 15:38:48 -08:00
Evan Hunt
27e4da57f8
update ifconfig.bat with current test interfaces
...
the addresses set up in ifconfig.bat were out of sync with the
ones in ifconfig.sh
2019-01-25 15:38:48 -08:00
Evan Hunt
f0d8bf4d44
update conf.sh.win32 test list
...
- the test lists in conf.sh.in and conf.sh.win32 were out of sync
2019-01-25 15:38:48 -08:00
Evan Hunt
a8c13ba73f
Merge branch '560-dnssec-keymgr-root-v9_11' into 'v9_11'
...
improve handling of trailing dots in dnssec-keymgr and dnssec-coverage
See merge request isc-projects/bind9!1395
2019-01-24 17:09:28 -05:00
Evan Hunt
36221e6447
improve handling of trailing dots in dnssec-keymgr and dnssec-coverage
...
- mishandling of trailing dots caused bad behavior with the
root zone or names like "example.com."
- fixing this exposed an error in dnssec-coverage caused the
wrong return value if there were KSK errors but no ZSK errors
- incidentally silenced the dnssec-keygen output in the coverage
system test
(cherry picked from commit 1ccf4e6c16 )
2019-01-24 13:58:05 -08:00
Evan Hunt
f9040e06f4
Merge branch 'v9_11-dig-sigchase-topdown' into 'v9_11'
...
Try to fix crash at +sigchase +topdown
See merge request isc-projects/bind9!1391
2019-01-24 14:01:12 -05:00