Commit Graph
27213 Commits
Author SHA1 Message Date
Tony FinchandMark Andrews 33cdef544d Improve dnssec-keymgr manual
Illustrate the syntax for the policy options, with semicolons.

Explicitly mention the "default" policy.

Fix a few typos and remove some redundant wording.

(cherry picked from commit 7ee56e2abd)
2019-02-18 15:46:24 +11:00
Evan Hunt 8a2a43b742 Merge branch '879-dnssec-checkds-help-v9_11' into 'v9_11'
Correct path in dnssec-checkds help

See merge request isc-projects/bind9!1517
2019-02-14 16:11:32 -05:00
Petr MenšíkandEvan Hunt e7e85d37b6 Correct path in dnssec-checkds help
(cherry picked from commit 7bd544e795)
2019-02-14 12:53:50 -08:00
Mark Andrews abd00c4d4e Merge branch '871-add-a-ci-check-for-missing-prereq.sh-scripts-v9_11' into 'v9_11'
Add a CI check for missing prereq.sh scripts

See merge request isc-projects/bind9!1509
2019-02-11 17:20:04 -05:00
Mark Andrews 8d2790af06 add util/check-ans-prereq to precheck
(cherry picked from commit 74c1c37563)
2019-02-12 09:04:20 +11:00
Mark Andrews 2274fd37e9 add check-ans-prereq
(cherry picked from commit ec2ecffef1)
2019-02-12 09:04:20 +11:00
Evan Hunt 29e647276e Merge branch '872-dlz-ldap-dname-v9_11' into 'v9_11'
added DNAME support to DLZ LDAP schema, and fixed a DLZ compile error

See merge request isc-projects/bind9!1504
2019-02-10 17:22:22 -05:00
Evan Hunt 9bc1bbe5d8 added DNAME support to DLZ LDAP schema, and fixed a DLZ compile error
Thanks to Roland Gruber for the schema contribution.

(cherry picked from commit 2e3b5db195)
2019-02-10 14:09:55 -08:00
Evan Hunt 72d68be601 Merge branch 'u/fanf2/zonemd-v9_11' into 'v9_11'
Correct ZONEMD expansion in ARM

See merge request isc-projects/bind9!1500
2019-02-08 16:19:00 -05:00
Tony FinchandEvan Hunt 53f24cb0d9 Correct ZONEMD expansion in ARM
(cherry picked from commit af74f18536)
2019-02-08 13:17:15 -08:00
Michał Kępień 55c47c7cdf Merge branch '869-prereq-sh-needed-in-forward-test-v9_11' into 'v9_11'
[v9_11] Resolve "prereq.sh needed in forward test"

See merge request isc-projects/bind9!1496
2019-02-08 09:05:05 -05:00
Curtis BlackburnandMichał Kępień 4fd2677873 added prereq.sh to forward test to detect perl Net::DNS
(cherry picked from commit 8c929bd7c5)
2019-02-08 14:37:09 +01:00
Mark Andrews 722b485b96 Merge branch '867-rrtypes-missing-from-named-v9_11' into 'v9_11'
Resolve "rrtypes missing from named"

See merge request isc-projects/bind9!1492
2019-02-07 22:36:14 -05:00
Mark Andrews 3854e59770 add AMTRELAY and ZONEMD to ARM
(cherry picked from commit b06c5f8cfd)
2019-02-08 14:10:38 +11:00
Mark Andrews 495d4153ad fix AMTRELAY name
(cherry picked from commit a9fadafecd)
2019-02-08 14:10:37 +11:00
Evan Hunt 2321e203ec Merge branch 'each-dnssec-coverage-dots-v9_11' into 'v9_11'
dnssec-coverage was improperly ignoring some zones

See merge request isc-projects/bind9!1489
2019-02-07 21:46:45 -05:00
Evan Hunt 6244ca6c01 CHANGES
(cherry picked from commit a242c704f5)
2019-02-07 18:29:14 -08:00
Evan Hunt d3a962db1e adjust style, match test to other tests
(cherry picked from commit 9949163936)
2019-02-07 18:29:14 -08:00
Tony FinchandEvan Hunt 5a090dd203 dnssec-coverage: fix handling of zones without trailing dots
After change 5143, zones listed on the command line without trailing
dots were ignored.

(cherry picked from commit a159675f44)
2019-02-07 17:33:30 -08:00
Mark Andrews bd3ffce696 Merge branch '867-rrtypes-missing-from-named-v9_11' into 'v9_11'
Resolve "rrtypes missing from named"

See merge request isc-projects/bind9!1486
2019-02-07 18:44:01 -05:00
Mark Andrews 4b955e8257 add top of range checks
(cherry picked from commit 8d69e15988)
2019-02-08 10:28:28 +11:00
Mark Andrews 7f13206216 Merge branch '867-rrtypes-missing-from-named-v9_11' into 'v9_11'
Resolve "rrtypes missing from named"

See merge request isc-projects/bind9!1482
2019-02-07 16:56:03 -05:00
Evan HuntandMark Andrews 95797f740b CHANGES
(cherry picked from commit 72f6fb0697)
2019-02-08 08:33:09 +11:00
Evan HuntandMark Andrews 37ad2d4de3 Add support for ZONEMD
(cherry picked from commit 3183663dd4)
2019-02-08 08:33:09 +11:00
Mark Andrews 060dd0a372 Add support for ATMRELAY
(cherry picked from commit 66922ee7af)
2019-02-08 08:33:08 +11:00
Mark Andrews a43c7af389 Merge branch '207-nslookup-takes-2-argvs-w-o-errors-uses-only-1st-and-last-v9_11' into 'v9_11'
Resolve "nslookup takes >2 argvs w/o errors, uses only 1st and last"

See merge request isc-projects/bind9!1477
2019-02-07 08:00:43 -05:00
Mark Andrews 9e89c1f898 error out if there are extra command line options
(cherry picked from commit f73816ff0f)
2019-02-07 23:46:13 +11:00
Mark Andrews 4b3de5696f Merge branch '857-inline-system-test-wasn-t-cleaning-k-files-on-restart-if-interrupted-v9_11' into 'v9_11'
Resolve "inline system test wasn't cleaning K* files on restart if interrupted."

See merge request isc-projects/bind9!1472
2019-02-06 02:05:11 -05:00
Ondřej SurýandMark Andrews 0ca3e23b38 Simplify the inline clean script
(cherry picked from commit 519152b191)
2019-02-06 17:53:02 +11:00
Mark Andrews 5ebf7adae6 clean K* files in inline system test directory
(cherry picked from commit 1878efe661)
2019-02-06 17:38:00 +11:00
Evan Hunt 336352654d Merge branch 'u/fanf2/cleanup-dnssec-revoke-help-v9_11' into 'v9_11'
cleanup: fix dnssec-revoke help text

See merge request isc-projects/bind9!1468
2019-02-06 00:21:13 -05:00
Tony FinchandEvan Hunt 6add72bafd cleanup: fix dnssec-revoke help text
Correct alignment and alphabetize

(cherry picked from commit f7b2bd304e)
2019-02-05 21:16:46 -08:00
Evan Hunt 01d9eb4070 Merge branch 'u/fanf2/dsfromkey-man-v9_12-v9_11' into 'v9_11'
cleanup: revamp the dnssec-dsfromkey man page and help output

See merge request isc-projects/bind9!1465
2019-02-05 23:26:42 -05:00
Tony FinchandEvan Hunt 0a20176ca6 cleanup: revamp the dnssec-dsfromkey man page and help output
* Alphabetize the option lists in the man page and help text

* Make the synopses more consistent between the man page and help
  text, in particular the number of different modes

* Group mutually exclusive options in the man page synopses, and order
  options so that it is more clear which are available in every mode

* Expand the DESCRIPTION to provide an overview of the output modes
  and input modes

* Improve cross-references between options

* Leave RFC citations to the SEE ALSO section, and clarify which RFC
  specifies what

* Clarify list of digest algorithms in dnssec-dsfromkey man page

(cherry picked from commit 6ca8e130ac)
(cherry picked from commit fb9bc8f871)
2019-02-05 20:19:55 -08:00
Mark Andrews a2fb64caf1 Merge branch '860-process_opt-could-be-called-multiple-times-on-the-same-message-in-dig-v9_11' into 'v9_11'
Resolve "process_opt() could be called multiple times on the same message in dig."

See merge request isc-projects/bind9!1461
2019-02-05 21:33:11 -05:00
Mark Andrews f59dbd2976 add CHANGES
(cherry picked from commit 946d5c2c1e)
2019-02-06 13:14:26 +11:00
Mark Andrews 8376f819a5 send over and undersized cookie
(cherry picked from commit 0207199bb8)
2019-02-06 13:14:09 +11:00
Mark Andrews 10184612be the condition test for checking the client cookie value was wrong; don't call process_opt multiple times
(cherry picked from commit d9c368eee0)
2019-02-06 13:14:09 +11:00
Michał Kępień 943d47bc21 Merge branch '822-test-make-install-in-one-of-the-build-jobs-v9_11' into 'v9_11'
[v9_11] Test "make install" in one of the build jobs

See merge request isc-projects/bind9!1457
2019-02-05 15:37:33 -05:00
Michał Kępień 1da4546b2c Test "make install" in one of the build jobs
Running "make install" in a separate job in the "test" phase of a CI
pipeline causes a lot of object files to be rebuilt due to the way
artifacts are passed between GitLab CI jobs (object files extracted from
the artifacts archive have older modification times than their
respective source files checked out using Git by the worker running the
"install" job).  Test "make install" in one of the build jobs instead,
in order to prevent object rebuilding.

Using 'after_script' for this purpose was not an option because its
failures are ignored.

Duplicating the build script in two places would be error-prone in the
long run and thus was rejected as a solution.  YAML anchors would also
not help in this case.

A "positive" test (`test -n "${RUN_MAKE_INSTALL}" && make install`)
would not work because:

  - it would cause the build script to fail for any job not supposed to
    run "make install",

  - appending `|| :` to the shell pipeline would prevent "make install"
    errors from causing a job failure.

Due to the above, a "negative" test is performed, so that:

  - jobs not supposed to run "make install" succeed immediately,

  - jobs supposed to run "make install" only succeed when "make install"
    succeeds.

(cherry picked from commit 2a231b6239)
2019-02-05 21:11:10 +01:00
Evan Hunt f79c9b1e3d Merge branch 'each-win-tests-v9_11' into 'v9_11'
tests failing on windows due to false crash-on-shutdown reports

See merge request isc-projects/bind9!1448
2019-02-01 01:56:59 -05:00
Evan Hunt f929f5023c disable the check for crash on shutdown when running under cygwin
(cherry picked from commit 449842e1ce)
2019-01-31 22:56:33 -08:00
Evan Hunt 108aff1c82 Merge branch 'each-silence-warning-v9_11' into 'v9_11'
silence a spurious dnssec-keygen warning in the dnssec system test

See merge request isc-projects/bind9!1443
2019-01-31 17:14:13 -05:00
Evan Hunt 1fe2d7b97a silence a spurious dnssec-keygen warning in the dnssec system test
the occluded-key test creates both a KEY and a DNSKEY. the second
call to dnssec-keygen calls dns_dnssec_findmatchingkeys(), which causes
a spurious warning to be printed when it sees the type KEY record.
this should be fixed in dnssec.c, but the meantime this change silences
the warning by reversing the order in which the keys are created.

(cherry picked from commit 6661db9564)
2019-01-31 14:02:22 -08:00
Evan Hunt 6c7096aa34 Merge branch '850-catch-shutdown-aborts-v9_11' into 'v9_11'
detect crash on shutdown in stop.pl

See merge request isc-projects/bind9!1441
2019-01-31 12:55:04 -05:00
Evan Hunt 607e42b560 detect crash on shutdown in stop.pl
(cherry picked from commit 9bf37f4e48)
2019-01-31 09:43:27 -08:00
Evan Hunt 33001ca556 Merge branch '849-fix-tkey-leak-v9_11' into 'v9_11'
fix TKEY problems

See merge request isc-projects/bind9!1439
2019-01-31 12:41:05 -05:00
Evan Hunt a6afd50cb9 Change #4148 wasn't complete
- there was a memory leak when using negotiated TSIG keys.
- TKEY responses could only be signed when using a newly negotiated
  key; if an existent matching TSIG was found in in the keyring it
  would not be used.

(cherry picked from commit 73ba24fb36)
2019-01-31 09:29:22 -08:00
Evan Hunt 011626d048 Merge branch '821-matthijs-unsigned-gss-tsig-tkey-query-response-v9_12-v9_11' into 'v9_11'
Resolve "Unsigned GSS-TSIG TKEY Query Response"

See merge request isc-projects/bind9!1431
2019-01-30 15:51:17 -05:00
Matthijs MekkingandEvan Hunt 43baca1fce Update CHANGES
(cherry picked from commit f1c6e01a0f)
(cherry picked from commit c82eb3b3ca)
2019-01-30 12:34:02 -08:00