Commit Graph
1630 Commits
Author SHA1 Message Date
Automatic Updater 41f1164438 update copyright notice 2012-01-31 23:47:33 +00:00
Evan Hunt 2855e27723 3271. [func] New "rndc zonestatus" command prints information
about the specified zone. [RT #21671]
2012-01-31 03:35:41 +00:00
Automatic Updater 80c7083796 update copyright notice 2012-01-27 23:46:59 +00:00
Mark Andrews bc298cd0f7 3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
out the earliest expiry time. [RT #23311]
2012-01-27 01:43:53 +00:00
Automatic Updater ee2129ee66 update copyright notice 2012-01-25 23:46:49 +00:00
Mark Andrews 18d208a4a2 3265. [bug] Address lock order reversal with inline-signing
support. [27557]
2012-01-25 02:46:53 +00:00
Evan Hunt f30785f506 3252. [bug] When master zones using inline-signing were
updated while the server was offline, the source
			zone could fall out of sync with the signed
			copy. They can now resynchronize. [RT #26676]
2011-12-22 07:32:41 +00:00
Automatic Updater 339d2a4d4b update copyright notice 2011-12-09 23:47:05 +00:00
Automatic Updater b54ac42f19 update copyright notice 2011-12-08 23:46:49 +00:00
Evan Hunt b4d8192d21 3241. [func] Extended the header of raw-format master files to
include the serial number of the zone from which
			they were generated, if different (as in the case
			of inline-signing zones).  This is to be used in
			inline-signing zones, to track changes between the
			unsigned and signed versions of the zone, which may
			have different serial numbers.

			(Note: raw zonefiles generated by this version of
			BIND are no longer compatble with prior versions.
			To generate a backward-compatible raw zonefile
			using dnssec-signzone or named-compilezone, specify
			output format "raw=0" instead of simply "raw".)
			[RT #26587]
2011-12-08 16:07:22 +00:00
Automatic Updater 806956b43b update copyright notice 2011-12-05 23:46:35 +00:00
Evan Hunt 4122abdc3c Back out changes #3182 and #3202 2011-12-05 17:10:51 +00:00
Mark Andrews de52784e45 3235. [func] dns_db_diffx, a extended dns_db_diff which returns
the generated diff and optionally writes it to a
                        journal. [RT #26386]
2011-12-04 23:48:12 +00:00
Mark Andrews 91ed1cc821 3222. [cleanup] Replace dns_journal_{get,set}_bitws with
dns_journal_{get,set}_sourceserial. [RT #26634]
2011-11-28 03:14:59 +00:00
Mark Andrews 2256c13194 --- 9.9.0b2 released ---
3219.   [bug]           Disable NOEDNS caching following a timeout.
2011-11-16 22:18:53 +00:00
Evan Hunt c79bcf09bf Add clientinfo.h to HEADERS. [RT #26558]
No CHANGES note.
2011-11-14 18:32:34 +00:00
Evan Hunt 90a354ab36 3204. [bug] When a master server that has been marked as
unreachable but sends a NOTIFY, mark it reachable
			again. [RT #25960]
2011-11-04 05:51:02 +00:00
Mark Andrews a5166d5fce 3202. [bug] NOEDNS caching on timeout was too agressive.
[RT #26416]
2011-11-04 03:38:44 +00:00
Evan Hunt 8281fd83da 3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
dnssec.h. [RT #26415]
2011-11-03 02:54:47 +00:00
Automatic Updater 89d1324270 update copyright notice 2011-11-01 23:47:00 +00:00
Evan Hunt 5caf26b168 3188. [bug] zone.c:zone_refreshkeys() could fail to detach
references correctly when errors occurred, causing
			a hang on shutdown. [RT #26372]
2011-11-01 04:00:45 +00:00
Automatic Updater 98a7e53914 update copyright notice 2011-10-28 12:20:31 +00:00
Mark Andrews 7b4b6f361b 3186. [bug] Version/db mis-match in rpz code. [RT #26180] 2011-10-28 11:46:50 +00:00
Evan Hunt 9c03f13e18 3185. [func] New 'rndc signing' option for auto-dnssec zones:
- 'rndc signing -list' displays the current
			   state of signing operations
			 - 'rndc signing -clear' clears the signing state
		  	   records for keys that have fully signed the zone
			 - 'rndc signing -nsec3param' sets the NSEC3
			   parameters for the zone
			The 'rndc keydone' syntax is removed. [RT #23729]
2011-10-28 06:20:07 +00:00
Automatic Updater 96f5a19c12 update copyright notice 2011-10-27 23:46:31 +00:00
Scott Mann b91b288f92 fix edns0 retry issues (rt #23393/24964). 2011-10-27 20:18:42 +00:00
Mark Andrews b1c6de5456 3177. [func] 'rndc keydone', remove the indicator record that
named has finished signing the zone with the
                        corresponding key.  [RT #26206]
2011-10-25 01:54:22 +00:00
Mark Andrews 1946c596b4 3174. [bug] Always compute to revoked key tag from scratch.
[RT #24711]
2011-10-20 21:20:02 +00:00
Automatic Updater 304a539c59 update copyright notice 2011-10-13 22:48:24 +00:00
Vernon Schryver 9fee08f655 Commit rt25172 changes to HEAD including
- fix precedence among competing rules
  - improve ARM text including documenting rule precedence
  - try to rewrite CNAME chains until first hit
  - new "rpz" logging channel
  - same fix for "NS ." as in RT 24985
2011-10-13 01:32:34 +00:00
Automatic Updater 0e11ca0f0b update copyright notice 2011-10-11 23:46:45 +00:00
Evan Hunt 793814f807 3164. [func] Enable DLZ modules to retrieve client information,
so that responses can be changed depending on the
			source address of the query. [RT #25768]
2011-10-11 00:09:03 +00:00
Scott Mann fad5116b3d Remove the ixfr-from-differences side-effect which causes an AXFR and extend
request-ixfr to the zone level.
2011-09-06 22:29:33 +00:00
Automatic Updater ca894e53b5 update copyright notice 2011-09-02 23:46:33 +00:00
Evan Hunt 8a2ab2b920 3150. [func] Improved startup and reconfiguration time by
enabling zones to load in multiple threads. [RT #25333]
2011-09-02 21:15:39 +00:00
Automatic Updater 4e68c7c87c update copyright notice 2011-08-30 23:46:53 +00:00
Mark Andrews 49f385a7ad include dns/diff.h 2011-08-30 13:02:39 +00:00
Mark Andrews 9198ab377b 3147. [func] Initial inline signing support. [RT #23657] 2011-08-30 05:16:15 +00:00
Automatic Updater adbc177194 update copyright notice 2011-08-02 23:47:52 +00:00
Evan Hunt 0127993480 3140. [func] New command "rndc flushtree <name>" clears the
specified name from the server cache along with
			all names under it. [RT #19970]
2011-08-02 20:36:13 +00:00
Automatic Updater 2f17ad4545 update copyright notice 2011-07-28 23:47:59 +00:00
Evan Hunt f07b2fccaf 3137. [func] Improve hardware scalability by allowing multiple
worker threads to process incoming UDP packets.
			This can significantly increase query throughput
			on some systems.  [RT #22992]
2011-07-28 04:04:37 +00:00
Evan Hunt 42cf2ff7ba 3131. [func] Improve scalability by allocating one zone task
per 100 zones at startup time, rather than using a
			fixed-size task table. [RT #24406]
2011-07-06 01:36:32 +00:00
Automatic Updater 122230159d update copyright notice 2011-07-01 23:47:44 +00:00
Mark Andrews a69070d8fa 3130. [func] Support alternate methods for managing a dynamic
zone's serial number.  Two methods are currently
                        defined using serial-update-method, "increment"
                        (default) and "unixtime".  [RT #23849]
2011-07-01 02:25:48 +00:00
Automatic Updater 313b4dc3b2 update copyright notice 2011-06-17 23:47:49 +00:00
Evan Hunt e7220c9b84 3129. [bug] Named could crash on 'rndc reconfig' when
allow-new-zones was set to yes and named ACLs
			were used, [RT #22739]
2011-06-17 07:05:02 +00:00
Automatic Updater 0f467ed4d4 update copyright notice 2011-06-10 23:47:32 +00:00
Evan Hunt 79ce3a9e82 3128. [func] Inserting an NSEC3PARAM via dynamic update in an
auto-dnssec zone that has not been signed yet
			will cause it to be signed with the specified NSEC3
			parameters when keys are activated.  The
			NSEC3PARAM record will not appear in the zone until
			it is signed, but the parameters will be stored.
			[RT #23684]
2011-06-10 01:51:09 +00:00
Evan Hunt 6de9744cf9 3124. [bug] Use an rdataset attribute flag to indicate
negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets. [RT #24777]

3123.	[security]	Change #2912 exposed a latent flaw in
			dns_rdataset_totext() that could cause named to
			crash with an assertion failure. [RT #24777]
2011-06-08 22:13:51 +00:00