Tinderbox User
3fd910dec5
update copyright notice
2014-02-17 23:46:29 +00:00
Evan Hunt
5efcb3a3e2
[master] fix test errors
...
- require 5.006_001
- cut off the least significant figures of rrsig dates before
comparison to avoid integer overflow
2014-02-17 08:40:02 -08:00
Evan Hunt
7ba88e2a95
[master] fix dnssec test errors
2014-02-16 14:14:56 -08:00
Evan Hunt
72fd845d5a
[master] remove accidentally committed changes
2014-02-16 13:59:19 -08:00
Evan Hunt
792915beb0
[master] fix accidental dig breakage
2014-02-16 13:42:42 -08:00
Mark Andrews
2729aea3c1
3738. [bug] --enable-openssl-hash failed to build. [RT #35343 ]
2014-02-13 15:09:08 +11:00
Evan Hunt
dbb012765c
[master] merge libiscpk11 to libisc
...
3735. [cleanup] Merged the libiscpk11 library into libisc
to simplify dependencies. [RT #35205 ]
2014-02-11 21:20:28 -08:00
Mark Andrews
6b66ee9147
define and use BACKTRACECFLAGS
2014-02-12 09:07:54 +11:00
Tinderbox User
6874b16e4a
update copyright notice
2014-02-10 23:46:26 +00:00
Mark Andrews
d7729155df
3734. [bug] Improve building with libtool. [RT #35314 ]
2014-02-10 15:01:06 +11:00
Tinderbox User
81f58902eb
update copyright notice
2014-02-07 23:46:39 +00:00
Mark Andrews
2870ee1fe5
use exit 255
2014-02-08 09:43:16 +11:00
Mark Andrews
0584ab7e9c
#include <isc/util.h>
2014-02-07 16:46:11 +11:00
Evan Hunt
7983f6f77a
[master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9
2014-02-06 19:41:48 -08:00
Evan Hunt
166341d554
[master] add no-case-compress
...
3731. [func] Added a "no-case-compress" ACL, which causes
named to use case-insensitive compression
(disabling change #3645 ) for specified
clients. (This is useful when dealing
with broken client implementations that
use case-sensitive name comparisons,
rejecting responses that fail to match the
capitalization of the query that was sent.)
[RT #35300 ]
2014-02-06 19:37:26 -08:00
Mark Andrews
a928b54fa9
silence unused parameter
2014-02-07 11:47:32 +11:00
Evan Hunt
dd19c1a352
[master] report T_SKIPPED from t_dst
2014-02-06 16:21:38 -08:00
Evan Hunt
a165a17a81
[master] dnssec-keygen fixes
...
3730. [cleanup] Added "never" as a synonym for "none" when
configuring key event dates in the dnssec tools.
[RT #35277 ]
3729. [bug] dnssec-kegeyn could set the publication date
incorrectly when only the activation date was
specified on the command line. [RT #35278 ]
2014-02-06 15:59:14 -08:00
Tinderbox User
7fa75f8e0e
update copyright notice
2014-02-06 23:46:25 +00:00
Tinderbox User
0666e6db54
update copyright notice
2014-01-31 23:46:22 +00:00
Evan Hunt
48def18179
[master] silence coverity warnings
...
- remove dead code in server.c
- initialize a struct tm.c
2014-01-31 09:34:37 -08:00
Evan Hunt
d0803df331
[master] fixed geoip in blackhole ACLs
...
3722. [bug] Using geoip ACLs in a blackhole statement
could cause a segfault. [RT #35272 ]
2014-01-30 17:03:32 -08:00
Tinderbox User
4734976943
update copyright notice
2014-01-30 23:46:20 +00:00
Tinderbox User
04b5785fde
update copyright notice
2014-01-29 23:46:19 +00:00
Mark Andrews
63add83a26
3720. [bug] Address compiler warnings. [RT #35261 ]
2014-01-30 10:33:28 +11:00
Mark Andrews
75d747e1c5
3719. [bug] Address memory leak in in peer.c. [RT #35255 ]
2014-01-30 07:54:52 +11:00
Mark Andrews
61932ed917
copyright cleanups
2014-01-29 14:05:46 +11:00
Tinderbox User
aa7b16ec2a
update copyright notice
2014-01-21 23:46:16 +00:00
Evan Hunt
d58e33bfab
[master] testcrypto.sh in system tests
...
3714. [test] System tests that need to test for cryptography
support before running can now use a common
"testcrypto.sh" script to do so. [RT #35213 ]
2014-01-20 16:08:09 -08:00
Evan Hunt
e45d0508c3
[master] skip unnecesary also-notify data
...
3713. [bug] Save memory by not storing "also-notify" addresses
in zone objects that are configured not to send
notify requests. [RT #35195 ]
2014-01-20 15:53:51 -08:00
Tinderbox User
dfd5f3b388
update copyright notice
2014-01-18 23:46:13 +00:00
Evan Hunt
12bf5d4796
[master] address several issues with native pkcs11
2014-01-18 11:51:07 -08:00
Tinderbox User
c0682c2367
update copyright notice
2014-01-17 23:46:32 +00:00
Francis Dupont
e02659b241
applied emacs filled-paragraph (ESC-q) to reindent SUBDIRS
2014-01-17 14:14:30 +01:00
Tinderbox User
1633aead67
update copyright notice
2014-01-16 23:46:28 +00:00
Mark Andrews
db8938c993
3710. [bug] Address double dns_zone_detach when switching to
...
using automatic empty zones from regular zones.
[RT #35177 ]
2014-01-17 10:04:16 +11:00
Evan Hunt
5760095601
[master] skip xfer test with Net::DNS 0.73
2014-01-16 09:50:23 -08:00
Evan Hunt
eb94c78be4
[master] atomic test doesn't need libdns
2014-01-16 09:24:44 -08:00
Francis Dupont
6080262ffe
add iscpk11 dep in lwresd system test
2014-01-16 16:06:04 +01:00
Francis Dupont
e2258edfef
libtoolized pkcs11 Makefile.in files
2014-01-16 10:35:24 +01:00
Mark Andrews
e20788e121
update copyrights
2014-01-16 15:19:24 +11:00
Mark Andrews
75e5062bc5
#include <isc/print.h>
2014-01-15 12:30:50 +11:00
Tinderbox User
bf0266f286
update copyright notice
2014-01-14 23:46:22 +00:00
Evan Hunt
ba751492fc
[master] native PKCS#11 support
...
3705. [func] "configure --enable-native-pkcs11" enables BIND
to use the PKCS#11 API for all cryptographic
functions, so that it can drive a hardware service
module directly without the need to use a modified
OpenSSL as intermediary (so long as the HSM's vendor
provides a complete-enough implementation of the
PKCS#11 interface). This has been tested successfully
with the Thales nShield HSM and with SoftHSMv2 from
the OpenDNSSEC project. [RT #29031 ]
2014-01-14 15:40:56 -08:00
Mark Andrews
07fb9b8330
3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185 ]
2014-01-14 16:12:30 +11:00
Tinderbox User
2cf1d5b098
update copyright notice
2014-01-12 23:46:23 +00:00
Mark Andrews
fb756ba304
3703. [func] Prefetch about to expire records if they are queried
...
for, see prefetch option for details. [RT #35041 ]
2014-01-12 21:29:15 +11:00
Tinderbox User
f70a10508f
update copyright notice
2014-01-11 23:46:17 +00:00
Evan Hunt
7d2b185f16
[master] new dnssec-coverage options
...
3702. [func] 'dnssec-coverage -l' option specifies a length
of time to check for coverage; events further into
the future are ignored. 'dnssec-coverage -z'
checks only ZSK events, and 'dnssec-coverage -k'
checks only KSK events. (Thanks to Peter Palfrader.)
[RT #35168 ]
2014-01-10 17:53:21 -08:00
Mark Andrews
a7c412f37c
update copyrights
2014-01-11 07:07:56 +11:00