Evan Hunt
319b8a1488
3092. [bug] Signatures for records at the zone apex could go
...
stale due to an incorrect timer setting. [RT #23769 ]
3091. [bug] Fixed a bug in which zone keys that were published
and then subsequently activated could fail to trigger
automatic signing. [RT #22991 ]
2011-03-25 23:53:02 +00:00
Scott Mann
4fc55db699
Make --with-gssapi default (RT #23738 )
2011-03-24 18:08:21 +00:00
Mark Andrews
0a82492610
3089. [func] dnssec-dsfromkey now supports reading keys from
...
standard input "dnssec-dsfromkey -f -". [RT# 20662]
2011-03-24 02:10:23 +00:00
Scott Mann
95759de490
Remove bin/tests/system/logfileconfig/ns1/named.conf and add setup.sh
...
in order to resolve changing named.conf issue. [RT #23687 ]
2011-03-22 16:51:50 +00:00
Evan Hunt
0994d3a21b
3087. [bug] DDNS updates using SIG(0) with update-policy match
...
type "external" could cause a crash. [RT #23735 ]
2011-03-21 19:54:03 +00:00
Evan Hunt
10a759cee6
3086. [bug] Running dnssec-settime -f on an old-style key will
...
now force an update to the new key format even if no
other change has been specified, using "-P now -A now"
as default values. [RT #22474 ]
2011-03-21 15:56:35 +00:00
Evan Hunt
35f1a4fc93
3085. [func] New '-R' option in dnssec-signzone forces removal
...
of signatures which have not yet expired but
were generated by a key that no longer exists.
[RT #22471 ]
2011-03-21 07:26:47 +00:00
Evan Hunt
7cb226ec34
3084. [func] A new command "rndc sync" dumps pending changes in
...
a dynamic zone to disk; "rndc sync -clean" also
removes the journal file after syncing. Also,
"rndc freeze" no longer removes journal files.
[RT #22473 ]
2011-03-21 07:22:14 +00:00
Mark Andrews
5095e72ac3
3083. [bug] NOTIFY messages were not being sent when generating
...
a NSEC3 chain incrementally. [RT #23702 ]
2011-03-21 01:02:39 +00:00
Mark Andrews
653cad790b
3082. [port] strtok_r is threads only. [RT #23747 ]
2011-03-21 00:30:18 +00:00
Francis Dupont
cb240b0676
3081. [bug] Failure of DNAME substitution did not return
...
YXDOMAIN. [RT #23591 ]
2011-03-18 21:17:08 +00:00
Francis Dupont
e41de66a12
3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
...
[RT #23587 ]
2011-03-18 09:04:02 +00:00
Mark Andrews
cbf59e5887
3079. [bug] Handle isc_event_allocate failures in t_tasks.
...
[RT #23572 ]
2011-03-18 07:40:25 +00:00
Francis Dupont
9e102ef969
3078. [func] Added a new include file with function typedefs
...
for the DLZ "dlopen" driver. [RT #23629 ]
2011-03-17 09:30:45 +00:00
Mark Andrews
ed53ec0b06
3077. [bug] zone.c:zone_refreshkeys() incorrectly called
...
dns_zone_attach(), use zone->irefs instead. [RT #23303 ]
2011-03-17 05:21:50 +00:00
Evan Hunt
61bcc23203
3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
...
dnssec-keyfromlabel sets the default TTL of the
key. When possible, automatic signing will use that
TTL when the key is published. [RT #23304 ]
2011-03-17 01:40:40 +00:00
Mark Andrews
0e095727ff
3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistant
...
timestamp when determining which keys are active.
[RT #23642 ]
2011-03-17 01:17:21 +00:00
Mark Andrews
26b49e8459
3074. [bug] Make the adb cache read through for zone data and
...
glue learn for zone named is authoritative for.
[RT #22842 ]
2011-03-13 02:49:28 +00:00
Mark Andrews
d57f1ade2d
s/(/[/
2011-03-12 04:31:01 +00:00
Mark Andrews
2415f36f79
3073. [bug] managed-keys changes were not properly being recorded.
...
[RT #20256 ]
2011-03-11 13:20:43 +00:00
Mark Andrews
cf4ceeee5f
3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
...
[RT #20256 ]
2011-03-11 13:02:33 +00:00
Mark Andrews
4f587beb8e
3071. [bug] has_nsec could be used unintialised in
...
update.c:next_active. [RT #20256 ]
2011-03-11 12:51:40 +00:00
Mark Andrews
6494526350
3070. [bug] dnssec-signzone potential NULL pointer dereference.
...
[RT #20256 ]
2011-03-11 12:37:01 +00:00
Mark Andrews
0874abad14
3069. [cleanup] Silence warnings messages from clang static analysis.
...
[RT #20256 ]
2011-03-11 06:11:27 +00:00
Mark Andrews
19f4b069dc
3068. [bug] Named failed to build with a OpenSSL without engine
...
support. [RT #23473 ]
2011-03-11 01:11:54 +00:00
Mark Andrews
2d96b63d31
3067. [bug] ixfr-from-differences {master|slave}; failed to
...
select the master/slave zones. [RT #23580 ]
2011-03-11 00:43:54 +00:00
Evan Hunt
422009fe5b
3066. [func] The DLZ "dlopen" driver is now built by default,
...
no longer requiring a configure option. To
disable it, use "configure --without-dlopen".
Driver also supported on win32. [RT #23467 ]
2011-03-10 04:36:16 +00:00
Mark Andrews
215ef83bbe
3065. [bug] RRSIG could have time stamps too far in the future.
...
[RT #23356 ]
2011-03-09 07:22:32 +00:00
Mark Andrews
35efe74edb
DNAME not DS
2011-03-08 00:36:56 +00:00
Mark Andrews
fea04b0ffe
3064. [bug] powerpc: add sync instructions to the end of atomic
...
operations. [RT #23469 ]
2011-03-07 00:17:08 +00:00
Evan Hunt
f02b5d87a5
3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402 ]
2011-03-05 23:11:21 +00:00
Evan Hunt
9a859983d7
3062. [func] Made several changes to enhance human readability
...
of DNSSEC data in dig output and in generated
zone files:
- DNSKEY record comments are more verbose, no
longer used in multiline mode only
- multiline RRSIG records reformatted
- multiline output mode for NSEC3PARAM records
- "dig +norrcomments" suppresses DNSKEY comments
- "dig +split=X" breaks hex/base64 records into
fields of width X; "dig +nosplit" disables this.
[RT #22820 ]
2011-03-05 19:39:07 +00:00
Mark Andrews
eff7f78bc6
3061. [func] New option "dnssec-signzone -D", only write out
...
generated DNSSEC records. [RT #22896 ]
2011-03-05 06:35:41 +00:00
Evan Hunt
61271cdee6
3060. [func] New option "dnssec-signzone -X <date>" allows
...
specification of a separate expiration date
for DNSKEY RRSIGs and other RRSIGs. [RT #22141 ]
2011-03-04 22:20:21 +00:00
Evan Hunt
c2f051aaaa
3059. [test] Added a regression test for change #3023 .
2011-03-04 22:01:01 +00:00
Scott Mann
32babe43eb
Ensure that log files are plain files. (RT #22771 )
2011-03-04 14:07:03 +00:00
Evan Hunt
020a733707
needed [placeholder] for change #3055 .
2011-03-03 16:18:51 +00:00
Evan Hunt
f385bac3b9
3057. [bug] "rndc secroots" would abort after the first error
...
and so could miss some views. [RT #23488 ]
2011-03-03 16:16:47 +00:00
Francis Dupont
11c282d8a4
3056. [func] Added support for URI resource record. [RT #23386 ]
2011-03-03 14:13:49 +00:00
Francis Dupont
d54394cbef
3054. [bug] Added elliptic curve support check in
...
GOST OpenSSL engine detection. [RT #23485 ]
2011-03-03 13:49:16 +00:00
Evan Hunt
70c7f4fb4f
3053. [bug] Under a sustained high query load with a finite
...
max-cache-size, it was possible for cache memory
to be exhausted and not recovered. [RT #23371 ]
2011-03-03 04:42:25 +00:00
Francis Dupont
624664e504
Fixed last autosign test report [RT #23256 ]
2011-03-02 09:03:45 +00:00
Mark Andrews
be789bc7eb
3045. [removed] Replaced by change #3050 .
2011-03-02 04:52:25 +00:00
Mark Andrews
c1ced49662
3051. [bug] NS records obsure DS records at the bottom of the
...
zone if both are present. [RT #23035 ]
2011-03-02 04:20:34 +00:00
Mark Andrews
ba88bcf08b
3050. [bug] The autosign system test was timing dependent.
...
Wait for the initial autosigning to complete
before running the rest of the test. [RT #23035 ]
2011-03-02 04:08:58 +00:00
Mark Andrews
21d349b612
s/3039/3049/
2011-03-02 02:52:07 +00:00
Mark Andrews
88c63fe9c7
3039. [bug] Save and restore the gid when creating creating
...
named.pid at startup. [RT #23290 ]
2011-03-02 00:02:54 +00:00
Mark Andrews
4c05f9a6a3
3048. [bug] Fully seperate view key mangement. [RT #23419 ]
2011-03-01 22:44:04 +00:00
Scott Mann
d31740ce28
Fixed DNSKEY NODATA responses not cached (RT #22908 ).
2011-03-01 14:40:39 +00:00
Francis Dupont
664917beda
Use RRSIG original TTL in validated RRset TTL [RT #23332 ]
2011-02-28 14:21:35 +00:00