Automatic Updater
3da57cdb40
update copyright notice
2010-11-17 23:46:16 +00:00
Mark Andrews
7aa6ebb714
convert to 9.6 syntax
2010-11-17 10:45:39 +00:00
Mark Andrews
cd833194c6
covert to 9.6 syntax
2010-11-17 10:33:23 +00:00
Mark Andrews
f815515b20
2969. [security] Fix acl type processing so that allow-query works
...
in options and view statements. Also add a new
set of tests to verify proper functioning.
[RT #22418 ]
2010-11-16 22:42:09 +00:00
Mark Andrews
5e0523fc23
2970. [security] Adding a NO DATA negative cache entry failed to clear
...
any matching RRSIG records. A subsequent lookup of
of NO DATA cache entry could trigger a INSIST when the
unexpected RRSIG was also returned with the NO DATA
cache entry. [RT #22288 ]
2010-11-16 07:46:23 +00:00
Mark Andrews
795f1f2db0
2968. [security] Named could fail to prove a data set was insecure
...
before marking it as insecure. One set of conditions
that can trigger this occurs naturally when rolling
DNSKEY algorithms. [RT #22309 ]
2010-11-16 01:48:32 +00:00
Automatic Updater
a7a4ad78e3
update copyright notice
2010-10-19 23:46:25 +00:00
Mark Andrews
c5081272d8
2967. [bug] 'host -D' now turns on debugging messages earlier.
...
[RT #22361 ]
2010-10-19 02:57:46 +00:00
Automatic Updater
6b4f4f8be4
update copyright notice
2010-09-29 23:46:31 +00:00
Mark Andrews
fa4d117db2
2964. [bug] view->queryacl was being overloaded. Seperate the
...
usage into view->queryacl, view->cacheacl and
view->queryonacl. [RT #22114 ]
2010-09-29 00:03:32 +00:00
Automatic Updater
27fbb459d7
update copyright notice
2010-09-07 23:46:26 +00:00
Mark Andrews
687f3d28c2
dnssec-keygen doesn't support -q in 9.6.x
2010-09-07 02:06:00 +00:00
Mark Andrews
193f48d120
2952. [port] win32: named-checkzone and named-checkconf failed
...
to initialise winsock. [RT #21932 ]
2010-09-07 01:56:05 +00:00
Mark Andrews
279fa6e621
2951. [bug] named failed to generate a correct signed response
...
in a optout, delegation only zone with no secure
delegations. [RT #22007 ]
2010-09-07 01:15:55 +00:00
Automatic Updater
3c55d1319d
update copyright notice
2010-09-06 23:46:30 +00:00
Mark Andrews
46054b10cc
actually set ns_g_nosoa on -T nosoa
2010-09-06 03:58:32 +00:00
Mark Andrews
2fc748be4d
test that all 7 interfaces are up
2010-09-06 02:05:02 +00:00
Automatic Updater
5cab9cc0ce
update copyright notice
2010-08-13 23:46:11 +00:00
Mark Andrews
c44bb94bc8
2940. [func] Check that named successfully skips NSEC3 records
...
that fail to match the NSEC3PARAM record currently
in use. [RT# 21868]
2010-08-13 07:25:22 +00:00
Mark Andrews
cdb5f33baf
check that we have non-cachable answers to test against
...
match the dig.out.ns#.$n to the nameserver
2010-06-28 01:43:01 +00:00
Automatic Updater
e0d80dbc1d
update copyright notice
2010-06-26 23:46:15 +00:00
Mark Andrews
7a2f2d9ba0
cvs rdiff -r1.2931.2.271 -r1.2931.2.272 bind9/CHANGES
...
cvs rdiff -r1.166.34.3 -r1.166.34.4 bind9/bin/named/main.c
cvs rdiff -r1.313.20.18 -r1.313.20.19 bind9/bin/named/query.c
cvs rdiff -r1.80 -r1.80.12.1 bind9/bin/named/include/named/globals.h
cvs rdiff -r1.13 -r1.13.176.1 bind9/bin/tests/system/start.pl
cvs rdiff -r1.53.48.7 -r1.53.48.8 bind9/bin/tests/system/dnssec/tests.sh
cvs rdiff -r1.13 -r1.13.48.1 \
bind9/bin/tests/system/dnssec/ns3/secure.example.db.in
cvs rdiff -r1.3 -r1.3.48.1 bind9/bin/tests/system/dnssec/ns7/named.conf
cvs rdiff -r0 -r1.2.4.2 bind9/bin/tests/system/dnssec/ns7/named.nosoa \
bind9/bin/tests/system/dnssec/ns7/nosoa.secure.example.db
cvs rdiff -r1.164.12.21 -r1.164.12.22 bind9/lib/dns/validator.c
2010-06-26 00:02:45 +00:00
Automatic Updater
90de0c8201
update copyright notice
2010-05-19 09:32:03 +00:00
Mark Andrews
b24553b060
2900. [bug] The placeholder negative caching element was not
...
properly constructed triggering a INSIST in
dns_ncache_towire(). [RT #21346 ]
2010-05-19 06:56:01 +00:00
Automatic Updater
09609ba50d
update copyright notice
2010-03-03 23:32:17 +00:00
Automatic Updater
80f5acb51e
regen v9_6_esv_branch
2010-03-03 22:19:19 +00:00
Mark Andrews
a3398dba83
9.6-ESV
2010-03-03 22:06:40 +00:00
Automatic Updater
5eb1c53ca2
update copyright notice
2010-02-04 23:47:46 +00:00
Mark Andrews
01347cce29
2849. [bug] Don't treat errors from the xml2 library as fatal.
...
[RT #20945 ]
2010-02-04 01:10:32 +00:00
Automatic Updater
7aca55cd83
regen
2010-01-16 01:55:32 +00:00
Automatic Updater
9feb8eda57
update copyright notice
2010-01-15 23:47:34 +00:00
Evan Hunt
cab45cd588
missed adding these files in earlier commit
2010-01-15 21:17:41 +00:00
Automatic Updater
763250ea4e
regen
2010-01-15 20:35:07 +00:00
Evan Hunt
3f39cbcc76
2838. [func] Backport support for SHA-2 DNSSEC algorithms,
...
RSASHA256 and RSASHA512, from BIND 9.7. (This
incorporates changes 2726 and 2738 from that
release branch.) [RT #20871 ]
2010-01-15 19:38:54 +00:00
Automatic Updater
d889e9701a
update copyright notice
2010-01-11 23:47:22 +00:00
Francis Dupont
6720b9fe94
Prevent Linux spurious warnings about fwrite(). [RT #20812 ]
2010-01-11 11:02:32 +00:00
Automatic Updater
c91b60a119
update copyright notice
2010-01-07 23:47:36 +00:00
Evan Hunt
0f83518a99
2831. [security] Do not attempt to validate or cache
...
out-of-bailiwick data returned with a secure
answer; it must be re-fetched from its original
source and validated in that context. [RT #20819 ]
2010-01-07 17:49:01 +00:00
cvs2git
8fd7205f18
This commit was manufactured by cvs2git to create branch 'v9_6'.
2010-01-07 16:48:28 +00:00
Evan Hunt
597642c0ba
2831. [security] Do not attempt to validate or cache
...
out-of-bailiwick data returned with a secure
answer; it must be re-fetched from its original
source and validated in that context. [RT #20819 ]
2010-01-07 16:48:23 +00:00
Automatic Updater
247f299fb0
update copyright notice
2010-01-06 23:48:47 +00:00
Evan Hunt
b1fbf2a4db
fix spacing
2010-01-06 00:53:45 +00:00
Automatic Updater
3ee1371212
update copyright notice
2010-01-05 23:48:37 +00:00
Evan Hunt
564d687132
missing newline in dnssec-signzone usage
2010-01-05 15:31:58 +00:00
Automatic Updater
ef413fafe5
update copyright notice
2009-12-30 23:47:31 +00:00
Tatuya JINMEI 神明達哉
450c3bb498
2828. [security] Cached CNAME or DNAME RR could be returned to clients
...
without DNSSEC validation. [RT #20737 ]
9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:34:30 +00:00
cvs2git
9b4b69eac1
This commit was manufactured by cvs2git to create branch 'v9_6'.
2009-12-30 08:02:37 +00:00
Tatuya JINMEI 神明達哉
d8680445d6
2828. [security] Cached CNAME or DNAME RR could be returned to clients
...
without DNSSEC validation. [RT #20737 ]
9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:02:23 +00:00
Mark Andrews
e02ccd485e
2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
...
was in the process of being created was not properly
recorded in the zone. [RT #20786 ]
2009-12-30 04:02:56 +00:00
Mark Andrews
57fb4f7bbe
2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
...
was in the process of being created was not properly
recorded in the zone. [RT #20786 ]
2009-12-30 02:43:09 +00:00