Brian Wellington
42b98b222c
The call to dns_tsigkey_setdeleted is no longer needed.
2000-07-21 20:38:30 +00:00
Andreas Gustafsson
e30c4dbe6f
typos
2000-07-21 20:37:01 +00:00
Brian Wellington
84a47e20ae
If the request was signed with a tsig key, verify the signature on the
...
response.
2000-07-21 20:33:13 +00:00
Brian Wellington
4be64854b4
The wrong name was being duped when a tsig key was generated using tkey.
2000-07-21 20:32:12 +00:00
Michael Sawyer
5813d091e9
Spacing changes
...
replace memset with slightly more portable NULL initialization
properly NULL masterkeynames when zone is created
2000-07-21 20:10:03 +00:00
Michael Sawyer
9b72c4648f
Internal code for masters with key entries. Not wired into config yet.
2000-07-21 18:47:23 +00:00
Michael Sawyer
8bf0f722f8
Count and possibly limit how many names and rr's in a xfr.
...
(Needed by GDIB folks)
2000-07-20 19:41:44 +00:00
Michael Sawyer
390132bd98
Run resolver test in make tests
2000-07-20 19:38:05 +00:00
Brian Wellington
d6e6858bb9
If dns_request_getresponse() fails, log it.
2000-07-20 19:34:16 +00:00
Brian Wellington
a5e73f3e9d
Having a non-noerror value inn the tsig error field should always return
...
DNS_R_TSIGERRORSET in dns_tsig_verify. Change the result text to reflect
this.
2000-07-20 19:32:57 +00:00
Brian Wellington
e860332b07
A call to isc_mem_put could pass a different size than was gotten. Use
...
isc_mem_allocate instead.
2000-07-20 17:58:59 +00:00
Michael Sawyer
26cebf3482
Slight bug in batch processing
2000-07-20 17:56:20 +00:00
Andreas Gustafsson
b7ebc6a127
minor tweak to hash function of previous change
2000-07-20 01:15:25 +00:00
Andreas Gustafsson
f969863d54
replaced the hash function in dns_name_hash() by one
...
that is simpler, faster, and produces a much more even distribution,
particularly when the data to hash ends with a null byte like domain
names often do
2000-07-20 01:14:48 +00:00
Andreas Gustafsson
dae5ce6ddb
340. [bug] The top-level COPYRIGHT file was missing from
...
the distribution.
2000-07-20 00:41:50 +00:00
Andreas Gustafsson
9a8fea7bc8
When handling the response to an ANY query in a secure zone, deal with
...
the multiple answer RRsets by validating each one separately. Also,
eliminated the "done" variable in answer_response() because in the
rare situations where it got set to ISC_TRUE, it caused the function
to return prematurely by exiting a loop with a result of ISC_R_SUCCESS
and hitting a "if (result != ISC_R_NOMORE) return (result);" test
immediately following following the loop.
This should fix [RT #109 ], "ANY query in secure zone crashes server".
2000-07-20 00:06:28 +00:00
Andreas Gustafsson
99eba32b06
Removed the code added in revision 1.57:
...
"Store CNAMEs and their SIGs (if any) in their own name structure on
the name list. I.e. do not mix CNAMEs with non-CNAME data. Do the
same thing for DNAMEs."
because it caused DNSSEC validation of responses to ANY queries at
nodes with CNAME records to fail, and no one was able to figure out
why it was added in the first place. As a beneficial side effect,
findname() now finds names even if they have attribute bits set
differently from the one being searched for. This supersedes
the fix of revision 1.133.
2000-07-20 00:05:32 +00:00
Andreas Gustafsson
aa5940281a
When handling the response to an ANY query in a secure zone, deal with
...
the multiple answer RRsets by validating each one separately. Also,
eliminated the "done" variable in answer_response() because in the
rare situations where it got set to ISC_TRUE, it caused the function
to return prematurely by exiting a loop with a result of ISC_R_SUCCESS
and hitting a "if (result != ISC_R_NOMORE) return (result);" test
immediately following following the loop.
This should fix [RT #109 ], "ANY query in secure zone crashes server".
2000-07-19 23:19:05 +00:00
Andreas Gustafsson
c7d445ce7f
edited
2000-07-19 20:34:40 +00:00
Andreas Gustafsson
b0e67b3020
removed unnecessary call to isc_socket_cancel()
2000-07-19 20:34:14 +00:00
Andreas Gustafsson
8b2d2acbff
in the multi-stage positive validation test, allow the
...
recursive server to omit the authority section
2000-07-19 19:54:50 +00:00
Michael Sawyer
3caa2d8362
Probably no need to call srandom() if we never call random().
2000-07-19 18:24:40 +00:00
Michael Sawyer
68f0d29d61
Fix a minor race condition in SIGINT handling
...
Allow dig to used name key files
Allow SIGINT in nslookup
2000-07-19 17:52:27 +00:00
Brian Wellington
70c2802fd7
In query_addbestns, check that both the rdataset and sigrdataset are not
...
pending before adding them.
2000-07-18 22:24:45 +00:00
Michael Sawyer
5e804988e9
Add comments to source code
2000-07-18 18:51:40 +00:00
Andreas Gustafsson
0ade7651fc
hint zones do go in views; match_clients -> match-clients
2000-07-18 18:16:19 +00:00
Brian Wellington
209ec709f3
Use the isc hmac library instead of a separate implementation (not that
...
the separate implementation was especially complicated). dst hmac-md5 should
really go away at some point.
2000-07-18 18:15:27 +00:00
Brian Wellington
663841abe0
338. [bug] lwresd logged to syslog as named, not lwresd.
2000-07-18 17:50:02 +00:00
Andreas Gustafsson
e54e6744d6
do two queries; added comments
2000-07-18 17:13:40 +00:00
James Brister
4ca8537286
Removed some debugging cruft.
...
Fixed handling of octal/hexadecimal numbers on input.
2000-07-18 13:19:27 +00:00
Michael Sawyer
aa6054ec74
Clean up type and class code. (No more ugly istype() and isclass() functions)
...
Minor changes to timeout handling code.
Don't preload batch file.
2000-07-18 01:28:20 +00:00
Brian Wellington
9df7d74e42
Use isc_base64_decodestring() instead of an explicit lexer.
2000-07-18 01:14:17 +00:00
Brian Wellington
2b8f0e9fac
Don't allocate and use a tsig keyring, since it's no longer needed.
2000-07-18 00:47:00 +00:00
Brian Wellington
49c8a96fba
Don't require that tsig keys must be on a keyring. Also some other cleanup.
2000-07-18 00:46:03 +00:00
Brian Wellington
7a184cd4e5
don't copy a name structure, copy a pointer.
2000-07-18 00:44:52 +00:00
Brian Wellington
f6579931b3
Added calls to isc_log_wouldlog() in additional logging functions.
2000-07-17 23:25:35 +00:00
Andreas Gustafsson
3668b37b8b
cleaner, but more invasive, fix to 335.
2000-07-17 23:19:14 +00:00
Andreas Gustafsson
c49e3222b0
337. [bug] dig did not recognize nsap-ptr as an RR type
...
on the command line.
2000-07-17 19:44:50 +00:00
Andreas Gustafsson
bf68c5151b
336. [bug] "dig -f" used 64 k of memory for each line in
...
the file. It now uses much less, though still
proportionally to the file size.
2000-07-17 19:31:23 +00:00
Brian Wellington
178f73169a
335. [bug] named would occasionally attempt recursion when
...
it was disallowed or undesired.
2000-07-17 18:43:32 +00:00
Andreas Gustafsson
d987e0d8e8
reviewed and edited; removed lwres intro material
...
that is better covered in lwres(3)
2000-07-17 17:49:25 +00:00
Brian Wellington
bd2a38d6af
Use isc_base64_decodestring() instead of explicitly creating a lexer.
2000-07-17 17:42:54 +00:00
Brian Wellington
9c4cba349f
334. [func] Added hmac-md5 to libisc.
2000-07-17 17:33:39 +00:00
Andreas Gustafsson
0e65062acb
strengthened the check added in the previous change:
...
the new query domain must not only be a non-child of the query name,
it must be a parent of the query name (or equal to the query name)
2000-07-16 18:26:18 +00:00
Andreas Gustafsson
92103a4e2c
typo
2000-07-15 01:11:37 +00:00
Andreas Gustafsson
64024eaa4d
333. [bug] The resolver incorrectly accepted referrals to
...
subdomains of the query domain, causing an
assertion failure.
2000-07-15 01:02:25 +00:00
Andreas Gustafsson
5fff4f8a54
typo
2000-07-15 00:37:23 +00:00
Andreas Gustafsson
f427699c6a
fixed prerequisite test
2000-07-15 00:22:08 +00:00
Andreas Gustafsson
f2c814353b
added resolver/ test directory, with a single regression
...
test for the INSIST(!external) bug
2000-07-14 23:38:14 +00:00
Andreas Gustafsson
1a92f5c182
removed dead code
2000-07-14 23:16:45 +00:00