Commit Graph

3643 Commits

Author SHA1 Message Date
Scott Mann
7d48e29523 Fixes compilation errors in ATF due to gcc4.6.0 (RT #25598). 2011-08-24 19:57:13 +00:00
Mark Andrews
02b74f7664 9.8.1 2011-08-24 03:17:30 +00:00
Mark Andrews
3ec77708b2 9.8.1rc1 2011-08-09 04:09:10 +00:00
Mark Andrews
da0a5b6c99 3141. [bug] Silence spurious "zone serial (0) unchanged" messages
associated with empty zones. [RT #25079]
2011-08-09 02:34:24 +00:00
Evan Hunt
2f87b8f081 3136. [func] Add RFC 1918 reverse zones to the list of built-in
empty zones switched on by the 'empty-zones-enable'
			option. [RT #24990]
2011-08-02 04:58:46 +00:00
Mark Andrews
db19bf041c 3138. [bug] Address memory leaks and out-of-order operations when
shutting named down. [RT #25210]
2011-07-28 04:30:55 +00:00
Mark Andrews
92ab09d3c1 add missing changes note:
3114.   [bug]           Retain expired RRSIGs in dynamic zones if key is
                        inactive and there is no replacement key. [RT #23136]
2011-07-21 03:09:26 +00:00
Mark Andrews
792a79f9a0 3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
                        [RT #24950]
2011-07-21 01:44:28 +00:00
Mark Andrews
141ed3c035 3134. [bug] Improve the accuracy of dnssec-signzone's signing
statistics. [RT #16030]
2011-07-19 04:45:49 +00:00
Scott Mann
5ed57781a8 9.8.1b3 2011-07-08 22:57:26 +00:00
Evan Hunt
2d79f736cc 3133. [bug] Change #3114 was incomplete. [RT #24577] 2011-07-08 01:45:58 +00:00
Evan Hunt
20f2b0b61d 3132. [tuning] Expanded zone task table from 8 to 17 buckets,
added ZONE_TASKS define in zone.c to make it easier
			to hand-tune this value. [RT #24406]
2011-07-06 19:02:40 +00:00
Paul Ebersman
3125a1ec10 corrected RT ticket typo in 3126, should be 24766 2011-06-20 15:42:07 +00:00
Mark Andrews
e64b2209d0 typo 2011-06-17 07:29:18 +00:00
Evan Hunt
8c22e52db1 3129. [bug] Named could crash on 'rndc reconfig' when
allow-new-zones was set to yes and named ACLs
			were used, [RT #22739]
2011-06-17 07:04:32 +00:00
Mark Andrews
1e3d767d68 move 9.8.1b2 release marker 2011-06-15 03:56:48 +00:00
Mark Andrews
f9370df7dc move 9.8.1b2 release marker 2011-06-15 03:54:37 +00:00
Mark Andrews
31dcd78366 3126. [security] Using DNAME record to generate replacements caused
RPZ to exit with a assertion failure. [RT #23766]
2011-06-09 03:14:04 +00:00
Mark Andrews
eff7004cdd 3125. [security] Using wildcard CNAME records as a replacement with
RPZ caused named to exit with a assertion failure.
                        [RT #24715]
2011-06-09 00:53:55 +00:00
Evan Hunt
8b2bec1cc0 forgot to add changes note 2011-06-08 23:13:01 +00:00
Evan Hunt
52f6ab64a9 3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664] 2011-06-02 20:24:11 +00:00
Mark Andrews
6b81040520 9.8.1b2 2011-05-31 23:28:39 +00:00
Evan Hunt
9b1f733801 3121. [security] An authoritative name server sending a negative
response containing a very large RRset could
                        trigger an off-by-one error in the ncache code
                        and crash named. [RT #24650]
2011-05-26 23:10:44 +00:00
Mark Andrews
893f3378d5 list -> listed 2011-05-26 04:55:26 +00:00
Mark Andrews
22fdcb03cc 3120. [bug] Named could fail to validate zones list in a DLV
that validated insecure without using DLV and had
                        DS records in the parent zone. [RT #24631]
2011-05-26 04:47:16 +00:00
Evan Hunt
17968c1451 3118. [bug] When rolling to a new DNSSEC key, a private-type
record could be created and never marked complete.
			[RT #23253]
2011-05-26 04:25:09 +00:00
Evan Hunt
77b55b7446 3118. [bug] nsupdate could dump core on shutdown when using
SIG(0) keys. [RT #24604]
2011-05-23 22:12:15 +00:00
Evan Hunt
2127785ad7 3117. [cleanup] Remove doc and parser references to the
never-implemented 'auto-dnssec create' option.
			[RT #24533]
2011-05-23 20:56:11 +00:00
Paul Ebersman
d7022d427d Corrected bug number from 2445 to 24455. 2011-05-20 14:23:59 +00:00
Mark Andrews
7e773a23d9 3115. [bug] Named could fail to return requested data when
following a CNAME that points into the same zone.
                        [RT #2445]
2011-05-20 05:12:18 +00:00
Mark Andrews
8701073b92 3113. [doc] Document the relationship between serial-query-rate
and NOTIFY messages.
2011-05-17 05:21:22 +00:00
Evan Hunt
1fded9ad8f Prep for release of 9.8.1b1. (Note: the experiment with spinning 9.8.1b2
after not releasing the previously-spun 9.8.1b1 is hereby abandoned; the
v9_8_1b2 tag has been removed.)
2011-05-16 23:01:19 +00:00
Mark Andrews
54b90c79aa 3112. [doc] Add missing descriptions of the update policy name
types "ms-self", "ms-subdomain", "krb5-self" and
                        "krb5-subdomain", which allow machines to update
                        their own records, to the BIND 9 ARM.
2011-05-16 04:19:47 +00:00
Evan Hunt
13ab5f75cb 3111. [bug] Improved consistency checks for dnssec-enable and
dnssec-validation, added test cases to the
                        checkconf system test. [RT #24398]
2011-05-07 05:53:24 +00:00
Evan Hunt
79951b66bd 3110. [bug] dnssec-signzone: Wrong error message could appear
when attempting to sign with no KSK. [RT #24369]
2011-05-07 00:24:41 +00:00
Evan Hunt
46994fc008 3107. [bug] dnssec-signzone: Report the correct number of ZSKs
when using -x. [RT #20852]
2011-05-06 21:07:50 +00:00
Evan Hunt
a35d3f0740 3105. [bug] GOST support can be suppressed by "configure
--without-gost" [RT #24367]

3104.   [bug]           Better support for cross-compiling. [RT #24367]
2011-05-05 18:10:50 +00:00
Evan Hunt
f4b07b09d0 3103. [bug] Configuring 'dnssec-validation auto' in a view
instead of in the options statement could trigger
			an assertion failure in named-checkconf. [RT #24382]
2011-05-05 16:11:43 +00:00
Evan Hunt
9cde8e0c6c 3101. [bug] Zones using automatic key maintenance could fail
to check the key repository for updates. [RT #23744]
2011-04-29 21:42:00 +00:00
Evan Hunt
e3579205fe 3100. [security] Certain response policy zone configurations could
trigger an INSIST when receiving a query of type
			RRSIG. [RT #24280]
2011-04-27 17:43:07 +00:00
Scott Mann
5d284d6f54 creating 9.8.1b2 2011-04-20 21:47:37 +00:00
Evan Hunt
6ecc5850ef 3099. [test] "dlz" system test now runs but gives R:SKIPPED if
not compiled with --with-dlz-filesystem.  [RT #24146]

3098.	[bug]		DLZ zones were answering without setting the AA bit.
			[RT #24146]
2011-04-19 22:31:43 +00:00
Scott Mann
4bbb19b67f backport --with-gssapi and fixes (RT 23836/23738) 2011-04-19 21:23:35 +00:00
Evan Hunt
711f69c266 3097. [test] Add a tool to test handling of malformed packets.
[RT #24096]
2011-04-15 01:00:08 +00:00
Mark Andrews
db01c31d2c 9.8.1b1 2011-04-08 02:43:47 +00:00
Mark Andrews
22cb217141 3096. [bug] Set KRB5_KTNAME before calling log_cred() in
dst_gssapi_acceptctx(). [RT #24004]
2011-04-07 23:05:01 +00:00
Mark Andrews
7cb1434cf3 3095. [bug] Handle isolated reserved ports in the port range.
[RT #23957]
2011-04-06 10:30:08 +00:00
Mark Andrews
038c944e14 3094. [doc] Expand dns64 documentation. 2011-04-06 05:20:59 +00:00
Mark Andrews
7d3c2d4dee 3opyright -> copyright 2011-04-02 08:04:15 +00:00
Paul Ebersman
40bbb61b4d corrected RT bug number for changes 3091 to 22911 2011-03-29 20:25:00 +00:00