Commit Graph

112 Commits

Author SHA1 Message Date
Mark Andrews
c95fa7d1d8 1606. [bug] DVL insecurity proof was failing.
1605.   [func]          New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
2004-05-14 05:06:42 +00:00
Mark Andrews
69b34284dc 1600. [bug] Duplicate zone pre-load checks were not case
insensitive.

1599.   [bug]           Fix memory leak on error path when checking named.conf.

1598.   [func]          Specify that certain parts of the namespace must
                        be secure (dnssec-must-be-secure).
2004-04-15 23:56:34 +00:00
Mark Andrews
8f20d06637 1593. [bug] rndc should return "unknown command" to unknown
commands. [RT# 10642]
2004-03-22 01:52:23 +00:00
Mark Andrews
a821d5fa3d DNSSEC bis merge from HEAD:
1581.  [func]          Disable DNSSEC support by default.  To enable
                       DNSSEC specify "enable-dnssec yes;" in named.conf.

1565.  [bug]           CD flag should be copied to outgoing queries unless
                       the query is under a secure entry point in which case
                       CD should be set.

1558.  [func]          New DNSSEC 'disable-algorithms'.  Support entry into
                       child zones for which we don't have a supported
                       algorithm.  Such child zones are treated as unsigned.

1557.  [func]          Implement missing DNSSEC tests for
                       * NOQNAME proof with wildcard answers.
                       * NOWILDARD proof with NXDOMAIN.
                       Cache and return NOQNAME with wildcard answers.

1541.  [func]          NSEC now uses new bitmap format.

1519.  [bug]           dnssec-signzone:nsec_setbit() computed the wrong
                       length of the new bitmap.

1516.  [func]          Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
2004-03-08 02:08:05 +00:00
Mark Andrews
cbdd3a318b update lib copyrights 2004-03-06 08:15:48 +00:00
Mark Andrews
a8cd8a9da9 1540. [bug] "rndc reload <dynamiczone>" was silently accepted.
[RT #8934]
2004-03-02 02:36:54 +00:00
Mark Andrews
694b001677 1586. [func] "check-names" is now implemented. 2004-02-27 21:45:34 +00:00
Mark Andrews
69acffbb19 sync with HEAD 2003-10-14 03:48:11 +00:00
Mark Andrews
984d0d58e9 1368. [func] remove support for bitstring labels. 2003-08-20 05:33:18 +00:00
Mark Andrews
646f21b5bd 1358. [func] log the reason for rejecting a server when resolving
queries.
2003-08-19 07:26:09 +00:00
Mark Andrews
e6bb021434 1354. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME. 2003-08-19 04:11:24 +00:00
Mark Andrews
d930eaf77b 1331. [func] Generate DNSSEC wildcard proofs. 2003-08-18 07:35:54 +00:00
Mark Andrews
eb35881767 1329. [func] named-checkzone will now check if nameservers that
appear to be IP addresses.  Available modes "fail",
                        "warn" (default) and "ignore" the results of the
                        check.
2003-08-18 05:56:58 +00:00
Mark Andrews
f4d86cfcea update_copyrights 2003-07-22 04:03:54 +00:00
Mark Andrews
ed41e594b0 1463. [bug] dns_rdata_from{wire,struct}() failed to catch bad
NXT bit maps. [RT #5577]
2003-05-15 05:41:13 +00:00
Mark Andrews
b0fa111079 1448. [bug] Handle empty wildcards labels. 2003-05-14 06:51:38 +00:00
Mark Andrews
6fd5b7a222 1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
[RT #4715]
2003-05-14 05:47:24 +00:00
Mark Andrews
b2f3e5c308 update_copyrights 2002-03-26 00:55:15 +00:00
Mark Andrews
4da8460d04 pullup:
1218.   [bug]           Named incorrectly returned SERVFAIL rather than
                        NOTAUTH when there was a TSIG BADTIME error. [RT #2519]
2002-03-20 20:27:21 +00:00
Mark Andrews
fdae17c884 pullup:
1229.   [bug]           named would crash if it received a TSIG signed
                        query as part of an AXFR response. [RT #2570]
2002-03-20 19:24:37 +00:00
Andreas Gustafsson
4632c084a6 missing comma in last pullup [RT #1780] 2001-09-21 23:18:45 +00:00
Brian Wellington
a25169ea43 pullup:
1006.   [bug]           If a KEY RR was found missing during DNSSEC validation,
			an assertion failure could subsequently be triggered
			in the resolver. [RT #1763]
2001-09-19 21:51:42 +00:00
Brian Wellington
3b6bcedffe 891. [bug] Return an error when a SIG(0) signed response to
an unsigned query is seen.  This should actually
			do the verification, but it's not currently
			possible. [RT #1391]
2001-06-08 19:37:29 +00:00
Andreas Gustafsson
a9ef485446 If IXFR fails, fall back to AXFR 2001-05-10 17:51:49 +00:00
Brian Wellington
5ea0d11ca4 771. [cleanup] TSIG errors related to unsynchronized clocks
are logged better.
2001-03-07 20:53:32 +00:00
Mark Andrews
9ac7076eba 769. [func] Improved error reporting when parsing rdata. [RT #740]
Two new error codes.  Also push back the last token, if it makes
sense to do so, so that it gets printed in the error message using
RETTOK macro, rather than straight return or RETERR.
2001-03-06 22:11:18 +00:00
Mark Andrews
a93cf7e83b 756. [bug] dns_zone_load() could "return" success when no master
file was configured.

 755.   [bug]           Fix format bugs in zone.c (non-exploitable).
2001-02-26 01:45:57 +00:00
Brian Wellington
499b34cea0 copyright update 2001-01-09 22:01:04 +00:00
Brian Wellington
58cbc05eb0 Fix memory leak in dns_view_find; return DNS_R_HINTNXRRSET instead of
DNS_R_NOTFOUND when correct to do so.
2000-12-20 23:31:11 +00:00
David Lawrence
10e6498d6d * Removed max-names (as well as DNS_R_ZONETOOLARGE, which was
never returned by any function and was presumably cruft
        related to max-names).
  * Made allow-notify part of the public source and documented it.
  * Made master server TSIG keys part of the public source and documented it.
  * Removed a define of DNS_OPT_NEWCODES supposedly used by GNS, with
        the approval of Mike.
  * Made DNS_ZONE_FORCELOAD flag, used by rndc reload, work in the
        public source.  After the NOMINUM_PUBLIC cleanup, I'll
        fix the rndc reload issues we've been discussing here at IETF.

I left in NOMIMUM_PUBLIC around the forward-notify stuff, with the
expectation that Michael will give the go-ahead next week to remove it.
2000-12-13 00:15:39 +00:00
Brian Wellington
78838d3e0c 8 space -> tab conversion 2000-12-11 19:24:30 +00:00
David Lawrence
01a37f376f changed "in" to "of" in DNS_R_SINGLETON, "multiple RRs of singleton type" 2000-11-29 05:59:33 +00:00
Bob Halley
15af30dfc1 add DNS_R_CNAMEANDOTHER and DNS_R_SINGLETON 2000-11-22 00:16:41 +00:00
Brian Wellington
1275a72e8d Don't allow metatypes to be loaded using the \# format. 2000-11-19 22:12:42 +00:00
Andreas Gustafsson
6a56be50dd new result code DNS_R_BADALG 2000-11-15 00:51:17 +00:00
Brian Wellington
e21d199dca 539. [func] Support the blackhole option. 2000-11-03 02:45:55 +00:00
Mark Andrews
b55c30f2de 525. [func] New arguement 'exact' for dns_db_subtractrdataset(),
and dns_rdataslab_subtract() requesting that the RR's
                        must exist prior to deletion.  DNS_R_NOTEXACT is
                        returned if the condition is not met.
2000-10-18 23:53:31 +00:00
Mark Andrews
b20ee662a7 521. [bug] Detect master files which contain $INCLUDE and always
reload. [RT #196]

new result code DNS_R_SEENINCLUDE
dns_master_load* can now return DNS_R_SEENINCLUDE
2000-10-17 07:22:39 +00:00
Mark Andrews
20a313a458 Add DNS_R_UNEXPECTEDID. 2000-10-16 04:08:13 +00:00
Michael Sawyer
dc570b92f6 Add support for proposed ZONE and VIEW opt attributes. These are currently
hidden behind #ifdef's, since no OPT code number has yet to be assigned
by the IANA.  They are also not quite complete in all regards; VIEW
options are understood and ignored.  ZONE options are understood and
acted upon, though some of the error cases aren't quite right.

Remove doubled isc_mem_stats in dighost.c

Update todo list.

Change literal 255's to DNS_NAME_MAXWIRE in name.c
2000-10-11 17:44:18 +00:00
Brian Wellington
6850cdd449 508. [func] dns_message_parse() can now do a best-effort
attempt, which should allow dig to print more invalid
                        messages.
2000-10-06 18:58:30 +00:00
Brian Wellington
3d136ddc82 missed a comma when adding the zone too large result text 2000-08-08 23:33:05 +00:00
Brian Wellington
0a4577a158 Added DNS_R_ZONETOOLARGE 2000-08-08 22:50:34 +00:00
David Lawrence
40f53fa8d9 Trailing whitespace trimmed. Perhaps running "perl util/spacewhack.pl in your
own CVS tree will help minimize CVS conflicts.  Maybe not.
Blame Graff for getting me to trim all trailing whitespace.
2000-08-01 01:33:37 +00:00
David Lawrence
15a4474541 word wrap copyright notice at column 70 2000-07-27 09:55:03 +00:00
David Lawrence
ef4010aae7 cross-reference error strings with their result.h macros 2000-07-26 21:31:52 +00:00
Brian Wellington
a5e73f3e9d Having a non-noerror value inn the tsig error field should always return
DNS_R_TSIGERRORSET in dns_tsig_verify.  Change the result text to reflect
this.
2000-07-20 19:32:57 +00:00
Brian Wellington
618e871c2e Add DNS_R_NAMETOOLONG 2000-07-13 02:41:20 +00:00
Mark Andrews
84cb41f729 new error code DNS_R_NOTZONETOP 2000-07-04 03:59:54 +00:00
David Lawrence
9c3531d72a add RCS id string 2000-06-22 22:00:42 +00:00