ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
27,523 Commits 589 Branches 805 Tags
4203bdef8dcd4309dde7eb0face5599cfd4d411a
Commit Graph

27523 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ondřej Surý
4203bdef8d Use getconf LFS_{CFLAGS,LDFLAGS,LIBS} to get flags to compile lib/dns/gen 
On some systems (namely Debian buster armhf) the readdir() call fails
with `Value too large for defined data type` unless the
_FILE_OFFSET_BITS=64 is defined.  The correct way to fix this is to
get the appropriate compilation parameters from getconf system
interface.

(cherry picked from commit 4c7345bcb6)
 2019-05-29 10:31:03 +02:00
Ondřej Surý
bcf4391ec6 Exit the ./gen program on failed readdir() call 
(cherry picked from commit 05b7c08a16)
 2019-05-29 10:31:03 +02:00
Mark Andrews
885b276fb9 Merge branch '1056-misleading-error-message-when-trying-to-build-without-python-support-v9_11' into 'v9_11' 
Resolve "Misleading error message when trying to build without Python support"

See merge request isc-projects/bind9!1966
 2019-05-27 00:19:52 -04:00
Mark Andrews
8d0b0a106e fix configire error message to say --without-python 
(cherry picked from commit d70bf76d80)
 2019-05-27 14:03:46 +10:00
Mark Andrews
9ec933ae02 Merge branch '1028-dig-trace-should-not-set-rd-0-norecurse-for-the-initial-root-hints-query-v9_11' into 'v9_11' 
Resolve "dig +trace should not set RD=0 (+norecurse) for the initial root hints query"

See merge request isc-projects/bind9!1956
 2019-05-22 02:32:25 -04:00
Mark Andrews
7575b663ad Recurse to find the root server list with 'dig +trace'. 
(cherry picked from commit e65d4989a1)
 2019-05-22 16:06:46 +10:00
Evan Hunt
61ffd9b71d Merge branch '1031-multiple-rate-limit-clauses-are-unsupported' into 'v9_11' 
Resolve "Multiple rate-limit clauses are unsupported"

See merge request isc-projects/bind9!1943
 2019-05-20 12:34:51 -04:00
Mark Andrews
2275630bc9 remove reference to rate-limit { domain ...; } 2019-05-20 09:34:08 -07:00
Evan Hunt
1bebdea211 Merge branch 'each-fix-counter' into 'v9_11' 
fix missing test counter

See merge request isc-projects/bind9!1951
 2019-05-19 00:28:22 -04:00
Evan Hunt
3b122f8d33 fix missing test counter 2019-05-18 21:14:33 -07:00
Evan Hunt
769f621358 Merge branch 'each-document-bug-ids-v9_11' into 'v9_11' 
update README to explain gitlab numbers

See merge request isc-projects/bind9!1949
 2019-05-17 02:45:29 -04:00
Evan Hunt
1140f825ec update README to explain gitlab numbers 
(cherry picked from commit 45d76498d9)
 2019-05-16 23:44:53 -07:00
Ondřej Surý
edfde35f40 Merge branch '899-remove-unspec-v9_11' into 'v9_11' 
Remove UNSPEC rrtype

See merge request isc-projects/bind9!1934
 2019-05-13 00:18:50 -04:00
Witold Kręcicki
71d3823dab Remove UNSPEC rrtype 
(cherry picked from commit a8e2ca6f7d)
 2019-05-13 10:54:10 +07:00
Tinderbox User
b8170affae Merge branch 'prep-release' into v9_11 v9.11.7 2019-05-10 05:03:58 +00:00
Tinderbox User
d58e36b410 prep 9.11.7 2019-05-10 05:03:46 +00:00
Evan Hunt
afc0f7f344 Merge branch '997-make-ntas-work-with-validating-forwarders-v9_11' into 'v9_11' 
Make NTAs work with validating forwarders

See merge request isc-projects/bind9!1925
 2019-05-10 00:18:30 -04:00
Michał Kępień
07c698469e Add CHANGES entry 
5219.	[bug]		Negative trust anchors did not work with "forward only;"
			to validating resolvers. [GL #997]
 2019-05-09 21:05:50 -07:00
Michał Kępień
f04f107b7e Make NTAs work with validating forwarders 
If named is configured to perform DNSSEC validation and also forwards
all queries ("forward only;") to validating resolvers, negative trust
anchors do not work properly because the CD bit is not set in queries
sent to the forwarders.  As a result, instead of retrieving bogus DNSSEC
material and making validation decisions based on its configuration,
named is only receiving SERVFAIL responses to queries for bogus data.
Fix by ensuring the CD bit is always set in queries sent to forwarders
if the query name is covered by an NTA.

(cherry picked from commit 5e80488270)
 2019-05-09 21:05:50 -07:00
Evan Hunt
651aaf5542 Merge branch '958-improve-message-about-python-ply-v9_11' into 'v9_11' 
Improve the error message about missing PLY Python package

See merge request isc-projects/bind9!1920
 2019-05-09 23:25:05 -04:00
Ondřej Surý
ab706cc6f2 Improve the error message about missing PLY Python package 
Previously, only a message about missing Python was printed, which was
misleading to many users.  The new message clearly states that Python
AND PLY is required and prints basic instructions how to install PLY
package.

(cherry picked from commit 55b48700da)
 2019-05-09 19:57:02 -07:00
Evan Hunt
45227c0a2e Merge branch 'each-sync-v9_11' into 'v9_11' 
sync CHANGES from 9.11.6-P1

See merge request isc-projects/bind9!1917
 2019-05-09 21:55:35 -04:00
Evan Hunt
b4c8599961 sync CHANGES from 9.11.6-P1 2019-05-09 18:53:51 -07:00
Witold Krecicki
ab1e4b5784 Merge branch '834-fix-races-in-socket-code-v2' into 'v9_11' 
Fix race in unix socket code when closing a socket that has already sent a recv/send event.

See merge request isc-projects/bind9!1915
 2019-05-09 13:57:11 -04:00
Witold Kręcicki
1286d74c7d Fix race in unix socket code when closing a socket that has 
already sent a recv/send event.

When doing isc_socket_cancel we need to purge the event that might
already be in flight. If it has been launched already we need
to inform it that it has to bail.
 2019-05-09 18:48:06 +02:00
Ondřej Surý
5f26556546 Merge branch 'ondrej/reproducible-build-v9_11' into 'v9_11' 
Make lib/dns/gen.c compatible with reproducible builds.

See merge request isc-projects/bind9!1913
 2019-05-09 05:24:35 -04:00
Ondřej Surý
0dced2fa6a Make lib/dns/gen.c compatible with reproducible builds. 
The gen.c will now use SOURCE_DATE_EPOCH[1] if found in environment
to make the build more reproducible build friendly.

1. https://reproducible-builds.org/specs/source-date-epoch/

(cherry picked from commit c8cb612d39)
 2019-05-09 16:05:38 +07:00
Mark Andrews
aca6ebadc4 Merge branch '960-add-edns-client-tag-and-edns-server-tag-v9_11' into 'v9_11' 
Resolve "Add EDNS Client Tag and EDNS Server Tag"

See merge request isc-projects/bind9!1911
 2019-05-09 04:39:06 -04:00
Mark Andrews
10c53d2873 Recognise EDNS Client Tag and EDNS Server Tag 
(cherry picked from commit ee7cf180b3)
 2019-05-09 18:24:57 +10:00
Evan Hunt
ac9286b732 Merge branch '868-fix-trusted-keys-handling-with-dnssec-validation-auto-v9_14-v9_11' into 'v9_11' 
fix incorrect behavior mixing trusted-keys with validation auto

See merge request isc-projects/bind9!1909
 2019-05-09 02:13:16 -04:00
Evan Hunt
febbd90850 CHANGES, release notes 2019-05-08 23:02:42 -07:00
Evan Hunt
722d0f57ed warn about the use of trusted-keys and managed-keys for the same name 2019-05-08 23:02:42 -07:00
Mark Andrews
3c45f0dd0b Merge branch '852-bind-returning-malformed-packet-error-when-sshfp-record-has-fingerprint-value-less-than-4-characters-v9_11' into 'v9_11' 
Resolve "Bind returning malformed packet error when sshfp record has fingerprint value less than 4 characters"

See merge request isc-projects/bind9!1906
 2019-05-08 19:18:22 -04:00
Mark Andrews
702cc2dde3 enforce known SSHFP finger print lengths 
(cherry picked from commit 1722728c80)
 2019-05-09 08:49:19 +10:00
Mark Andrews
8cb78ee508 Merge branch '991-provide-ixfr-should-only-be-tests-on-tcp-clients-v9_11' into 'v9_11' 
Resolve "provide-ixfr should only be tested on TCP clients."

See merge request isc-projects/bind9!1901
 2019-05-07 00:46:17 -04:00
Mark Andrews
1cc0bf2cee add CHANGES 
(cherry picked from commit ba1d7f3a07)
 2019-05-07 14:34:00 +10:00
Mark Andrews
d72f659a35 add test for 'provide-ixfr no;' ; add forensics support 
(cherry picked from commit d547465af5)
 2019-05-07 14:34:00 +10:00
Mark Andrews
8b8f0dc160 only test provideixfr if the transport is TCP 
(cherry picked from commit 18c49853e3)
 2019-05-07 14:06:25 +10:00
Evan Hunt
510f8d9ff7 Merge branch 'each-win32-parallel-tests-v9_11' into 'v9_11' 
enable parallel system tests on windows

See merge request isc-projects/bind9!1895
 2019-05-06 22:04:51 -04:00
Evan Hunt
52347fa883 CHANGES 
(cherry picked from commit d3cd0729c9)
 2019-05-06 18:38:34 -07:00
Evan Hunt
50dfe1aa2b enable parallel system tests on windows 
this moves the creation of "parallel.mk" into a separate shell script
instead of bin/tests/system/Makefile. that shell script can now be
executed by runall.sh, allowing us to make use of the cygwin "make"
command, which supports parallel execution.

(cherry picked from commit bbae24c140)
 2019-05-06 18:38:34 -07:00
Evan Hunt
274da3c24b Merge branch 'each-fix-rpz-test-v9_11' into 'v9_11' 
RPZ test had spurious references to DNSRPS, which isn't in 9.11

See merge request isc-projects/bind9!1898
 2019-05-06 21:17:38 -04:00
Evan Hunt
111c692efd RPZ test had spurious references to DNSRPS, which isn't in 9.11 2019-05-06 18:05:49 -07:00
Mark Andrews
90a6482985 Merge branch '983-delv-www-isc-org-any-rtrace-multiline-leaks-memory-v9_11' into 'v9_11' 
Resolve "'delv www.isc.org ANY +rtrace +multiline' leaks memory"

See merge request isc-projects/bind9!1897
 2019-05-06 20:52:47 -04:00
Mark Andrews
eef0430b75 add CHANGES note 
(cherry picked from commit ce5520b695)
 2019-05-07 10:35:03 +10:00
Mark Andrews
c26a421aab check that delv -t any works 
(cherry picked from commit 6999bee7ef)
 2019-05-07 10:34:30 +10:00
Mark Andrews
595544329a fix whitespace 
(cherry picked from commit 32ba5a0494)
 2019-05-07 10:28:48 +10:00
Mark Andrews
333116ac5c return rdatasets when processing ANY queries in client_resfind 
(cherry picked from commit 127333c71f)
 2019-05-07 10:28:47 +10:00
Mark Andrews
405738b62f Merge branch '1000-arm-doc-rpz-nodata-policy-says-ancount-1-v9_11' into 'v9_11' 
Resolve "ARM doc RPZ NODATA policy says ANCOUNT=1"

See merge request isc-projects/bind9!1891
 2019-05-06 04:06:56 -04:00
Mark Andrews
401f9c4a3d A NODATA response has ANCOUNT of 0 assuming no CNAME/DNAMES 
(cherry picked from commit 4889e06c3a)
 2019-05-06 17:54:18 +10:00