Commit Graph

5293 Commits

Author SHA1 Message Date
Automatic Updater
3da57cdb40 update copyright notice 2010-11-17 23:46:16 +00:00
Mark Andrews
7aa6ebb714 convert to 9.6 syntax 2010-11-17 10:45:39 +00:00
Mark Andrews
cd833194c6 covert to 9.6 syntax 2010-11-17 10:33:23 +00:00
Mark Andrews
f815515b20 2969. [security] Fix acl type processing so that allow-query works
in options and view statements.  Also add a new
                        set of tests to verify proper functioning.
                        [RT #22418]
2010-11-16 22:42:09 +00:00
Mark Andrews
5e0523fc23 2970. [security] Adding a NO DATA negative cache entry failed to clear
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
2010-11-16 07:46:23 +00:00
Mark Andrews
795f1f2db0 2968. [security] Named could fail to prove a data set was insecure
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]
2010-11-16 01:48:32 +00:00
Automatic Updater
a7a4ad78e3 update copyright notice 2010-10-19 23:46:25 +00:00
Mark Andrews
c5081272d8 2967. [bug] 'host -D' now turns on debugging messages earlier.
[RT #22361]
2010-10-19 02:57:46 +00:00
Automatic Updater
6b4f4f8be4 update copyright notice 2010-09-29 23:46:31 +00:00
Mark Andrews
fa4d117db2 2964. [bug] view->queryacl was being overloaded. Seperate the
usage into view->queryacl, view->cacheacl and
                        view->queryonacl. [RT #22114]
2010-09-29 00:03:32 +00:00
Automatic Updater
27fbb459d7 update copyright notice 2010-09-07 23:46:26 +00:00
Mark Andrews
687f3d28c2 dnssec-keygen doesn't support -q in 9.6.x 2010-09-07 02:06:00 +00:00
Mark Andrews
193f48d120 2952. [port] win32: named-checkzone and named-checkconf failed
to initialise winsock. [RT #21932]
2010-09-07 01:56:05 +00:00
Mark Andrews
279fa6e621 2951. [bug] named failed to generate a correct signed response
in a optout, delegation only zone with no secure
                        delegations. [RT #22007]
2010-09-07 01:15:55 +00:00
Automatic Updater
3c55d1319d update copyright notice 2010-09-06 23:46:30 +00:00
Mark Andrews
46054b10cc actually set ns_g_nosoa on -T nosoa 2010-09-06 03:58:32 +00:00
Mark Andrews
2fc748be4d test that all 7 interfaces are up 2010-09-06 02:05:02 +00:00
Automatic Updater
5cab9cc0ce update copyright notice 2010-08-13 23:46:11 +00:00
Mark Andrews
c44bb94bc8 2940. [func] Check that named successfully skips NSEC3 records
that fail to match the NSEC3PARAM record currently
                        in use. [RT# 21868]
2010-08-13 07:25:22 +00:00
Mark Andrews
cdb5f33baf check that we have non-cachable answers to test against
match the dig.out.ns#.$n to the nameserver
2010-06-28 01:43:01 +00:00
Automatic Updater
e0d80dbc1d update copyright notice 2010-06-26 23:46:15 +00:00
Mark Andrews
7a2f2d9ba0 cvs rdiff -r1.2931.2.271 -r1.2931.2.272 bind9/CHANGES
cvs rdiff -r1.166.34.3 -r1.166.34.4 bind9/bin/named/main.c
cvs rdiff -r1.313.20.18 -r1.313.20.19 bind9/bin/named/query.c
cvs rdiff -r1.80 -r1.80.12.1 bind9/bin/named/include/named/globals.h
cvs rdiff -r1.13 -r1.13.176.1 bind9/bin/tests/system/start.pl
cvs rdiff -r1.53.48.7 -r1.53.48.8 bind9/bin/tests/system/dnssec/tests.sh
cvs rdiff -r1.13 -r1.13.48.1 \
    bind9/bin/tests/system/dnssec/ns3/secure.example.db.in
cvs rdiff -r1.3 -r1.3.48.1 bind9/bin/tests/system/dnssec/ns7/named.conf
cvs rdiff -r0 -r1.2.4.2 bind9/bin/tests/system/dnssec/ns7/named.nosoa \
    bind9/bin/tests/system/dnssec/ns7/nosoa.secure.example.db
cvs rdiff -r1.164.12.21 -r1.164.12.22 bind9/lib/dns/validator.c
2010-06-26 00:02:45 +00:00
Automatic Updater
90de0c8201 update copyright notice 2010-05-19 09:32:03 +00:00
Mark Andrews
b24553b060 2900. [bug] The placeholder negative caching element was not
properly constructed triggering a INSIST in
                        dns_ncache_towire(). [RT #21346]
2010-05-19 06:56:01 +00:00
Automatic Updater
09609ba50d update copyright notice 2010-03-03 23:32:17 +00:00
Automatic Updater
80f5acb51e regen v9_6_esv_branch 2010-03-03 22:19:19 +00:00
Mark Andrews
a3398dba83 9.6-ESV 2010-03-03 22:06:40 +00:00
Automatic Updater
5eb1c53ca2 update copyright notice 2010-02-04 23:47:46 +00:00
Mark Andrews
01347cce29 2849. [bug] Don't treat errors from the xml2 library as fatal.
[RT #20945]
2010-02-04 01:10:32 +00:00
Automatic Updater
7aca55cd83 regen 2010-01-16 01:55:32 +00:00
Automatic Updater
9feb8eda57 update copyright notice 2010-01-15 23:47:34 +00:00
Evan Hunt
cab45cd588 missed adding these files in earlier commit 2010-01-15 21:17:41 +00:00
Automatic Updater
763250ea4e regen 2010-01-15 20:35:07 +00:00
Evan Hunt
3f39cbcc76 2838. [func] Backport support for SHA-2 DNSSEC algorithms,
RSASHA256 and RSASHA512, from BIND 9.7.  (This
			incorporates changes 2726 and 2738 from that
			release branch.) [RT #20871]
2010-01-15 19:38:54 +00:00
Automatic Updater
d889e9701a update copyright notice 2010-01-11 23:47:22 +00:00
Francis Dupont
6720b9fe94 Prevent Linux spurious warnings about fwrite(). [RT #20812] 2010-01-11 11:02:32 +00:00
Automatic Updater
c91b60a119 update copyright notice 2010-01-07 23:47:36 +00:00
Evan Hunt
0f83518a99 2831. [security] Do not attempt to validate or cache
out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
2010-01-07 17:49:01 +00:00
cvs2git
8fd7205f18 This commit was manufactured by cvs2git to create branch 'v9_6'. 2010-01-07 16:48:28 +00:00
Evan Hunt
597642c0ba 2831. [security] Do not attempt to validate or cache
out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
2010-01-07 16:48:23 +00:00
Automatic Updater
247f299fb0 update copyright notice 2010-01-06 23:48:47 +00:00
Evan Hunt
b1fbf2a4db fix spacing 2010-01-06 00:53:45 +00:00
Automatic Updater
3ee1371212 update copyright notice 2010-01-05 23:48:37 +00:00
Evan Hunt
564d687132 missing newline in dnssec-signzone usage 2010-01-05 15:31:58 +00:00
Automatic Updater
ef413fafe5 update copyright notice 2009-12-30 23:47:31 +00:00
Tatuya JINMEI 神明達哉
450c3bb498 2828. [security] Cached CNAME or DNAME RR could be returned to clients
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:34:30 +00:00
cvs2git
9b4b69eac1 This commit was manufactured by cvs2git to create branch 'v9_6'. 2009-12-30 08:02:37 +00:00
Tatuya JINMEI 神明達哉
d8680445d6 2828. [security] Cached CNAME or DNAME RR could be returned to clients
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:02:23 +00:00
Mark Andrews
e02ccd485e 2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
was in the process of being created was not properly
                        recorded in the zone. [RT #20786]
2009-12-30 04:02:56 +00:00
Mark Andrews
57fb4f7bbe 2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
was in the process of being created was not properly
                        recorded in the zone. [RT #20786]
2009-12-30 02:43:09 +00:00