Tinderbox User
63737247d1
update copyright notice
2013-09-05 23:46:16 +00:00
Evan Hunt
690bd6bf5d
[master] fix inline test, add importkey to win32 build
2013-09-04 18:56:50 -07:00
Tinderbox User
d2bdd5b314
regen master
2013-09-05 01:04:31 +00:00
Mark Andrews
0c91911b4d
3642. [func] Allow externally generated DNSKEY to be imported
...
into the DNSKEY management framework. A new tool
dnssec-importkey is used to this. [RT #34698 ]
2013-09-04 13:53:02 +10:00
Mark Andrews
b5f4cc132e
3641. [bug] Handle changes to sig-validity-interval settings
...
better. [RT #34625 ]
2013-09-04 13:45:00 +10:00
Mark Andrews
7cd9d53c8c
don't print out result as it is not meaningful here
2013-08-16 09:44:30 +10:00
Mark Andrews
7ace327795
3632. [bug] Signature from newly inactive keys were not being
...
removed. [RT #32178 ]
2013-08-15 10:48:05 +10:00
Mark Andrews
9d69017bc6
3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
...
message. [RT #34045 ]
2013-07-03 15:41:48 +10:00
Evan Hunt
b7e40659ef
[master] rebuild resigning heaps when loading map files
...
3597. [bug] Ensure automatic-resigning heaps are reconstructed
when loading zones in map format. [RT #33381 ]
2013-06-14 10:16:10 -07:00
Evan Hunt
8f1e278931
[master] updated win32 build
...
3596. [port] Updated win32 build documentation, added
dnssec-verify. [RT #22067 ]
2013-06-13 17:31:41 -07:00
Evan Hunt
e47208b6fb
[master] silence ccc-analyzer
...
3567. [bug] Silence clang static analyzer warnings. [RT #33365 ]
2013-05-03 14:31:27 -07:00
Evan Hunt
96139421d6
[master] win32 portability fixes
2013-03-26 23:01:13 -07:00
Tinderbox User
8bbfb495a2
regen master
2013-01-26 01:04:30 +00:00
Tinderbox User
43b9448395
regen master
2013-01-25 01:04:51 +00:00
Evan Hunt
c9611b4573
[master] change "fast" to "map"
...
3475. [cleanup] Changed name of 'map' zone file format (previously
'fast'). [RT #32458 ]
2013-01-24 14:20:48 -08:00
Tinderbox User
3aaa526a94
update copyright notice
2013-01-23 23:45:55 +00:00
Evan Hunt
9a0dd99a75
[master] fix incorrect nsec3 check
...
- check for NSEC3 in empty nodes when not due to optout delegations
- fixed typo in output ("Bad record NSEC record")
- incidentally fixed an error in signzone that caused an
incorrect warning about missing DNSKEYs when using -S
and -3 together
3473. [bug] dnssec-signzone/verify could incorrectly report
an error condition due to an empty node above an
opt-out delegation lacking an NSEC3. [RT #32072 ]
2013-01-23 14:56:00 -08:00
Tinderbox User
5ac5300fdf
update copyright notice
2013-01-17 23:46:25 +00:00
Curtis Blackburn
c8803902d6
[bug] Added checks in dnssec-keygen and dnssec-settime to check for
...
delete date < inactive date. [RT #31719 ]
2013-01-17 10:59:16 -06:00
Mark Andrews
040dc29236
throw fatal error on realloc failure
2012-12-10 10:16:28 +11:00
Tinderbox User
d9eb3dcfa1
update copyright notice
2012-11-28 23:45:44 +00:00
Evan Hunt
a1dbf90381
[master] remove libgen.h from dnssec tools
...
we no longer use basename() or dirname()
2012-11-27 19:45:51 -08:00
Mark Andrews
b13b452020
3424. [func] dnssec-dsfromkey now emits the hash without spaces.
...
[RT #31951 ]
Squashed commit of the following:
commit 7369da0369e1de1fe6c5b5f84df8848b9a0984eb
Author: Mark Andrews <marka@isc.org >
Date: Fri Nov 23 17:24:04 2012 +1100
dupped/created reversed in log message
commit 0cef5faaf3ac22b00ed0f95b6bb7a146cf4cac15
Author: Mark Andrews <marka@isc.org >
Date: Fri Nov 23 13:40:14 2012 +1100
remove space from DS hash
2012-11-27 14:22:28 +11:00
Evan Hunt
4b3d727d96
[master] remove spurious signatures from glue
...
3404. [bug] dnssec-signzone: When re-signing a zone, remove
RRSIG and NSEC records from nodes that used to be
in-zone but are now below a zone cut. [RT #31556 ]
2012-10-24 15:46:59 -07:00
Mark Andrews
611dc88768
3390. [bug] Silence clang compiler warnings. [RT #30417 ]
2012-10-06 14:20:45 +10:00
Evan Hunt
41bbb34bc2
fix coverity issues
...
3388. [bug] Fixed several Coverity warnings. [RT #30996 ]
2012-10-02 23:44:03 -07:00
Mark Andrews
82f37b2665
use binary mode for raw/fast
2012-09-12 17:24:45 +10:00
Tinderbox User
9b20c5d7ff
regen master
2012-08-24 01:06:01 +00:00
Tinderbox User
291a670d12
update copyright notice
2012-07-05 23:45:48 +00:00
ckb
c514f38c80
Conflicts:
...
lib/dns/dst_parse.c
lib/isc/win32/file.c
2012-07-05 16:07:31 -05:00
Mark Andrews
bf8267aa45
reverse bad copyright update
2012-06-29 11:39:47 +10:00
Tinderbox User
247bf37860
update copyright notice
2012-06-29 01:22:18 +00:00
Tinderbox User
da5d53fb14
update copyright notice
2012-06-26 23:45:56 +00:00
Mark Andrews
ad127d839d
3341. [func] New "dnssec-verify" command checks a signed zone
...
to ensure correctness of signatures and of NSEC/NSEC3
chains. [RT #23673 ]
2012-06-25 13:57:32 +10:00
Tinderbox User
dba3c818ae
regen master
2012-06-23 01:04:31 +00:00
Tinderbox User
3b398443f0
update copyright notice
2012-06-21 23:46:36 +00:00
Evan Hunt
6844e3f010
Add documentation for 'fast' format
2012-06-21 15:39:56 -07:00
ckb
7829fad409
merging fast format zone files
...
Conflicts:
.gitignore
bin/named/zoneconf.c
bin/tests/.gitignore
bin/tests/system/autosign/tests.sh
bin/tests/system/masterformat/clean.sh
bin/tests/system/masterformat/ns1/compile.sh
bin/tests/system/masterformat/tests.sh
configure
lib/dns/db.c
lib/dns/include/dns/db.h
lib/dns/include/dns/types.h
lib/dns/master.c
lib/dns/masterdump.c
lib/dns/rbt.c
lib/dns/rbtdb.c
lib/dns/sdb.c
lib/dns/sdlz.c
lib/dns/tests/.cvsignore
lib/dns/tests/Makefile.in
lib/dns/win32/libdns.def
lib/dns/xfrin.c
lib/dns/zone.c
lib/export/dns/Makefile.in
lib/isc/include/isc/file.h
lib/isc/unix/file.c
lib/isc/win32/file.c
lib/isccfg/namedconf.c
2012-06-20 14:13:12 -05:00
Mark Andrews
7865ea9545
3339. [func] Allow the maximum supported rsa exponent size to be specified: "max-rsa-exponent-size <value>;" [RT #29228 ]
2012-06-14 15:44:20 +10:00
Tinderbox User
cd791043c8
regen master
2012-05-03 01:04:16 +00:00
Tinderbox User
99d8f5a704
update copyright notice
2012-05-02 23:45:44 +00:00
Mark Andrews
aaaf8d4f48
3317. [func] Add ECDSA support (RFC 6605). [RT #21918 ]
2012-05-02 23:20:17 +10:00
Tinderbox User
ea94d37012
regen master
2012-03-07 01:41:11 +00:00
Evan Hunt
e41d5a00bc
added gitignore, removed cvsignore
2012-03-03 23:10:05 -08:00
Automatic Updater
97e74139b1
regen HEAD
2011-12-22 18:10:11 +00:00
Evan Hunt
f30785f506
3252. [bug] When master zones using inline-signing were
...
updated while the server was offline, the source
zone could fall out of sync with the signed
copy. They can now resynchronize. [RT #26676 ]
2011-12-22 07:32:41 +00:00
Automatic Updater
72938578c9
regen HEAD
2011-12-10 01:14:53 +00:00
Mark Andrews
b11fd36119
move declaration to start of block
2011-12-08 23:45:02 +00:00
Evan Hunt
b4d8192d21
3241. [func] Extended the header of raw-format master files to
...
include the serial number of the zone from which
they were generated, if different (as in the case
of inline-signing zones). This is to be used in
inline-signing zones, to track changes between the
unsigned and signed versions of the zone, which may
have different serial numbers.
(Note: raw zonefiles generated by this version of
BIND are no longer compatble with prior versions.
To generate a backward-compatible raw zonefile
using dnssec-signzone or named-compilezone, specify
output format "raw=0" instead of simply "raw".)
[RT #26587 ]
2011-12-08 16:07:22 +00:00
Mark Andrews
411d2914ad
3226. [bug] Address minor resource leakages. [RT #26624 ]
2011-11-30 00:48:51 +00:00