Andreas Gustafsson
2cfc66fe05
pullup:
...
The server would crash if a response contained both a CNAME and records of
the query type
2000-07-28 22:45:52 +00:00
Andreas Gustafsson
e465eb9e2b
pullup:
...
Allow zones with no NS records to be loaded and/or transferred in. Log
an error if the zone is loaded, but continue anyway.
(RT #205 )
2000-07-28 22:24:47 +00:00
Andreas Gustafsson
99b58e7cbf
pullup:
...
Having a non-noerror value inn the tsig error field should always return
DNS_R_TSIGERRORSET in dns_tsig_verify. Change the result text to reflect
this.
2000-07-28 19:41:16 +00:00
Andreas Gustafsson
9320acde61
pullup:
...
tsig keys were not properly ref counted
2000-07-28 05:37:34 +00:00
Andreas Gustafsson
99b3a7a8e7
pullup:
...
Removed some cruft and a crash.
2000-07-28 00:13:40 +00:00
Andreas Gustafsson
61d131c2ed
pullup:
...
don't copy a name structure, copy a pointer.
2000-07-28 00:05:42 +00:00
Andreas Gustafsson
459eb2fc8a
pullup:
...
here's no real difference between the sring and dring parameters, so
call them ring1 and ring2 instead. Also remove a bogus assertion.
2000-07-28 00:00:23 +00:00
Andreas Gustafsson
65877a9cd2
pullup:
...
Store tsig keys in an rbt, not a list.
2000-07-27 23:57:35 +00:00
Andreas Gustafsson
ab77763643
pullup:
...
Don't require that tsig keys must be on a keyring. Also some other cleanup.
2000-07-27 23:45:53 +00:00
Andreas Gustafsson
b2573bd026
pullup:
...
tsig keys were not properly ref counted
2000-07-27 22:56:38 +00:00
Andreas Gustafsson
939e6e8fa7
pullup: multiple validator bug fixes
2000-07-27 22:50:02 +00:00
Andreas Gustafsson
d1d8cb0058
pullup:
...
dns_dnssec_verifymessage should make sure that it's verifying with the right
key (which should be the case anyway, but it never hurts to check). Also
fix a memory leak and change a few _tostruct() calls to not allocate memory.
2000-07-27 22:15:22 +00:00
Andreas Gustafsson
42ed03996d
typo in error message
2000-07-27 21:47:19 +00:00
Andreas Gustafsson
941a52f8ef
pullup:
...
cd queries would cause the server to hang on exit.
2000-07-27 21:42:14 +00:00
Andreas Gustafsson
f1453f1f1e
pullup:
...
negative responses to cd queries should work now.
2000-07-27 21:39:44 +00:00
Andreas Gustafsson
6dde69e9d7
pullup:
...
349. [bug] Processing a query with the CD bit set now works
as expected.
2000-07-27 21:27:03 +00:00
Brian Wellington
d2c41814a4
pullup:
...
Removed the code added in revision 1.57:
"Store CNAMEs and their SIGs (if any) in their own name structure on
the name list. I.e. do not mix CNAMEs with non-CNAME data. Do the
same thing for DNAMEs."
because it caused DNSSEC validation of responses to ANY queries at
nodes with CNAME records to fail, and no one was able to figure out
why it was added in the first place. As a beneficial side effect,
findname() now finds names even if they have attribute bits set
differently from the one being searched for. This supersedes
the fix of revision 1.133.
2000-07-27 17:18:46 +00:00
Andreas Gustafsson
59c54edd78
pullup:
...
If the name is a dynamic name, free its memory
2000-07-27 01:23:40 +00:00
Andreas Gustafsson
005175d224
pullup:
...
If a message is built for one host, which isn't powered on, the tsig object
wasn't removed until the xfer object was deleted, so when the xfer tried the
second master, it asserted.
2000-07-27 00:54:16 +00:00
Brian Wellington
82a2479d02
pullup:
...
339. [bug] DNSSEC validation of the response to an ANY
query at a name with a CNAME RR in a secure
zone triggered an assertion failure.
2000-07-26 23:36:04 +00:00
cvs2git
5fd4b1c60c
This commit was manufactured by cvs2git to create branch 'v9_0'.
2000-07-26 22:41:29 +00:00
Andreas Gustafsson
371827c1e0
added missing DNSSAFE license file
2000-07-26 22:41:28 +00:00
Andreas Gustafsson
a44b1b277b
pullup:
...
Removed some debugging cruft.
Fixed handling of octal/hexadecimal numbers on input.
2000-07-26 22:32:25 +00:00
David Lawrence
951c247f29
style lint
2000-07-26 21:44:34 +00:00
David Lawrence
894a2f61c9
minor style issue -- missing periods at ends of sentences/phrasesin comments.
2000-07-26 21:32:57 +00:00
David Lawrence
ef4010aae7
cross-reference error strings with their result.h macros
2000-07-26 21:31:52 +00:00
Michael Sawyer
761a1c3761
Add sanitizer and hide per-master key code behind sanitizing #ifdefs
2000-07-26 18:47:43 +00:00
Andreas Gustafsson
a32738e3e4
352. [bug] Race condition in dns_client_t startup could cause
...
an assertion failure.
2000-07-26 17:39:12 +00:00
Andreas Gustafsson
3617357a44
pullup:
...
When unsetting option strings pointer wasn't being NULLed.
2000-07-26 16:32:50 +00:00
James Brister
6e1de1f55b
When unsetting option strings pointer wasn't being NULLed.
2000-07-26 15:21:04 +00:00
Brian Wellington
5b0413f993
Call isc_log_wouldlog to potentially avoid extra work in validator_log.
2000-07-26 00:50:02 +00:00
Brian Wellington
53dc771403
The CD bit changes broke insecurity proofs. They work again.
2000-07-26 00:03:18 +00:00
Andreas Gustafsson
7497e313ef
pullup:
...
351. [bug] Constructing a response with rcode SERVFAIL to a TSIG
signed query could crash the server.
2000-07-25 23:51:16 +00:00
Brian Wellington
6dc130c7c9
351. [bug] Constructing a response with rcode SERVFAIL to a TSIG
...
signed query could crash the server.
2000-07-25 22:51:46 +00:00
Andreas Gustafsson
e3c6d6f461
pullup:
...
350. [bug] Also-notify lists specified in the global options
block were not correctly reference counted, causing
a memory leak.
2000-07-25 22:47:39 +00:00
Andreas Gustafsson
ec34015017
dns_c_view_getalsonotify() should attach the list
...
like both the global and per-zone counterparts now do
2000-07-25 22:38:29 +00:00
Brian Wellington
94ec6e9a1a
whitespace fixes
2000-07-25 22:04:33 +00:00
Brian Wellington
69a761838b
Support for the cd (checking disabled) bit. Also remove data from the
...
cache if validation fails.
2000-07-25 22:03:25 +00:00
Brian Wellington
7e0d7323d7
Detach from the iplist obtained from *_getalsonotify.
2000-07-25 20:26:11 +00:00
James Brister
b28affc652
Added missing prototypes.
2000-07-25 20:17:52 +00:00
James Brister
07919f7bb8
Do a dns_c_iplist_attach first when returning the iplist from also-notify.
2000-07-25 20:16:00 +00:00
Michael Sawyer
8cfe1a4846
Typo correction in DNS_MAX/MIN_RETRY usage
...
Don't #define mins/maxes if they are already defined. (per MG)
2000-07-25 19:29:00 +00:00
James Brister
d4ab9cd94f
348. [func] New named.conf boolean values 'glue-from-auth' and
...
'glue-from-cache' now supported in view and global
options statement.
2000-07-25 17:55:43 +00:00
Brian Wellington
969f24b04c
dns_dnssec_verifymessage should make sure that it's verifying with the right
...
key (which should be the case anyway, but it never hurts to check). Also
fix a memory leak and change a few _tostruct() calls to not allocate memory.
2000-07-25 17:12:00 +00:00
Andreas Gustafsson
81b94e091c
added new fetch option DNS_FETCHOPT_NOVALIDATE
2000-07-25 17:03:21 +00:00
Brian Wellington
60783293cc
If a failed positive validation led us to try an insecurity proof, and the
...
insecurity proof also failed, the validator event should normally contain
the error from the positive validation.
2000-07-25 01:24:18 +00:00
Andreas Gustafsson
398bdb2710
in deleterdataset(), set the DNS_DBADD_FORCE flag
...
when adding the deletion rdataset so that rdatasets can be deleted
regardless of their trust level
2000-07-25 01:19:51 +00:00
Andreas Gustafsson
9037893f90
add() assumed dns_trust_authsecure is the highest trust level,
...
but this is no longer the case. Thus, the DNS_DBADD_FORCE option did not take effect
if the existing data was at level dns_trust_ultimate. Since the DNS_DBADD_FORCE
option is currently used only with cached data, no actual harm has been done.
2000-07-25 01:06:01 +00:00
Andreas Gustafsson
56f8b1c404
the "done" variable reintroduced in the previous revision
...
was not initialized
2000-07-24 23:55:19 +00:00
Andreas Gustafsson
516b9de0d9
eliminated needless code duplication between
...
the yea_and_nay and notify_setting grammar rules
2000-07-24 23:32:31 +00:00