Michał Kępień
eeb919b6f5
[v9_11] Minor improvements to code handling managed keys
...
4812. [bug] Minor improvements to stability and consistency of code
handling managed keys. [RT #46468 ]
(cherry picked from commit 312c84c73a )
2017-11-09 15:19:32 +01:00
Mark Andrews
a55438eda3
4810. [test] The chain system test failed if the IPv6 interfaces
...
were not configured. [RT #46508 ]
(cherry picked from commit c652213857 )
2017-11-08 10:18:23 +11:00
Evan Hunt
8de17f83ca
[v9_11] Check if -latomic is needed to handle 64-bit stdatomic.h types
...
4809. [port] Check at configure time whether -latomic is needed
for stdatomic.h. [RT #46324 ]
(cherry picked from commit e3d9aafff0 )
2017-11-07 13:27:48 -08:00
Mark Andrews
9789e54e55
4808. [bug] Properly test for zlib.h. [RT #46504 ]
...
(cherry picked from commit b819a478b7 )
2017-11-07 10:12:54 +11:00
Mark Andrews
f8362536c6
4805. [bug] TCP4Active and TCP6Active weren't being updated
...
correctly. [RT #46454 ]
(cherry picked from commit 92bbc9914c )
2017-11-02 10:43:18 +11:00
Mark Andrews
24231e53a5
4804. [port] win32: access() does not work on directories as
...
required by POSIX. Supply a alternative in
isc_file_isdirwritable. [RT #46394 ]
2017-11-01 09:39:08 +11:00
Michał Kępień
4b669b69ba
[v9_11] Backport fix for RT #46055 and mkeys system test improvements
...
4803. [bug] Backport parts of RT #45293 and RT #46267 , specifically
the fix for RT #46055 and mkeys system test
improvements. [RT #46430 ]
2017-10-31 06:06:07 +01:00
Mukund Sivaraman
eb11b39981
When processing delzone, write one zone config per line to the NZF ( #46323 )
...
(cherry picked from commit 625f656aa8 )
2017-10-29 07:43:47 +05:30
Michał Kępień
8daeae9b01
[v9_11] Improve clarity of keytable unit tests
...
4799. [cleanup] Improve clarity of keytable unit tests. [RT #46407 ]
(cherry picked from commit c6c1193e39 )
2017-10-28 20:03:07 +02:00
Evan Hunt
e7c0f97842
[v9_11] check file and tree headers when loading map files
...
4792. [bug] Fix map file header correctness check. [RT #38418 ]
(cherry picked from commit 5b69d3da83 )
2017-10-25 21:37:21 -07:00
Evan Hunt
01967d1839
[v9_11] fixed libdns doc
...
4791. [doc] Fixed outdated documentation about export libraries.
[RT #46341 ]
(cherry picked from commit 6a59e53a69 )
2017-10-25 10:56:04 -07:00
Mark Andrews
575e9d9e4b
4790. [bug] nsupdate could trigger a require when sending a
...
update to the second address of the server.
[RT #45731 ]
(cherry picked from commit 2bbca9594f )
2017-10-26 00:30:55 +11:00
Evan Hunt
7c442d7fe0
[v9_11] log when update-policy local gets a key match from a remote host
...
4788. [cleanup] When using "update-policy local", log a warning
when an update matching the session key is received
from a remote host. [RT #46213 ]
- this completes change #4762 .
2017-10-25 00:59:17 -07:00
Michał Kępień
5e1ca7a326
[v9_11] Rename nsec3param_salt_totext() to dns_nsec3param_salttotext(), make it public, add unit tests
...
4786. [cleanup] Turn nsec3param_salt_totext() into a public function,
dns_nsec3param_salttotext(), and add unit tests for it.
[RT #46289 ]
(cherry picked from commit 910a01550a )
2017-10-25 09:50:33 +02:00
Tinderbox User
8ed107eab4
update copyright notice / whitespace
2017-10-24 23:48:58 +00:00
Mark Andrews
ba93bc80a7
4783. [test] dnssec: 'check that NOTIFY is sent at the end of
...
NSEC3 chain generation failed' required more time
on some machines for the IXFR to complete. [RT #46388 ]
(cherry picked from commit 969d923536 )
2017-10-25 09:21:52 +11:00
Mark Andrews
5f10315828
4782. [test] dnssec: 'checking positive and negative validation
...
with negative trust anchors' required more time to
complete on some machines. [RT #46386 ]
(cherry picked from commit 6b8e4d6e69 )
2017-10-25 09:13:42 +11:00
Evan Hunt
e5715e1fe1
[v9_11] update B.ROOT-SERVERS.NET
2017-10-24 09:17:21 -07:00
Evan Hunt
b7b76d6b85
[v9_11] omit NS from authority section if it was in answer
...
4780. [bug] When answering ANY queries, don't include the NS
RRset in the authority section if it was already
in the answer section. [RT #44543 ]
2017-10-23 19:33:14 -07:00
Mark Andrews
764e2f3413
4779. [bug] Expire NTA at the start of the second. Don't update
...
the expiry value if the record has already expired
after a successful check. [RT #46368 ]
(cherry picked from commit c9438ee2e0 )
2017-10-24 09:55:33 +11:00
Evan Hunt
a06198688f
[v9_11] clean up a redundancy
...
4777. [cleanup] Removed a redundant call to configure_view_acl().
[RT #46369 ]
(cherry picked from commit 89636d8f30 )
2017-10-23 11:12:47 -07:00
Mark Andrews
50433a667c
4776. [bug] Improve portability of ht_test. [RT #46333 ]
...
(cherry picked from commit 66258ca349 )
2017-10-20 16:06:07 +11:00
Mark Andrews
3c12bec945
4775. [bug] Address Coverity warnings in ht_test.c and mem_test.c
...
[RT #46281 ]
(cherry picked from commit 583e355951 )
2017-10-19 13:11:13 +11:00
Mark Andrews
f44202ab64
4774. [bug] <isc/util.h> was incorrectly included in several
...
header files. [RT #46311 ]
(cherry picked from commit fe79e2efbf )
2017-10-19 12:32:53 +11:00
Evan Hunt
56e30ebae6
[v9_11] require writable managed keys directory
...
4769. [bug] Enforce the requirement that the managed keys
directory (specified by "managed-keys-directory",
and defaulting to the working directory if not
specified) must be writable. [RT #46077 ]
2017-10-17 21:26:41 -07:00
Michał Kępień
ad9772c559
[v9_11] Doxygen fixes and cleanups
...
4773. [doc] Fixed generating Doxygen documentation for functions
annotated using certain macros. Miscellaneous
Doxygen-related cleanups. [RT #46276 ]
(cherry picked from commit 2361003a88 )
2017-10-17 06:58:05 +02:00
Evan Hunt
5d7d67f82a
[v9_11] ignore cache when sending 5011 refresh queries
...
4771. [bug] When sending RFC 5011 refresh queries, disregard
cached DNSKEY rrsets. [RT #46251 ]
(cherry picked from commit b2597ce86b )
2017-10-11 14:24:52 -07:00
Evan Hunt
6216df5ccd
[v9_11] reduce unnecessary priming queries
...
4770. [bug] Cache additional data from priming queries as glue.
Previously they were ignored as unsigned
non-answer data from a secure zone, and never
actually got added to the cache, causing hints
to be used frequently for root-server
addresses, which triggered re-priming. [RT #45241 ]
(cherry picked from commit 5de02a075b )
2017-10-11 09:07:37 -07:00
Mark Andrews
c85920c0b4
4766. [cleanup] Addresss Coverity warnings. [RT #46150 ]
...
(cherry picked from commit 5df3f839b2 )
2017-10-09 18:37:46 +11:00
Evan Hunt
0612274565
[v9_11] use mysql_config if available
...
4763. [contrib] Improve compatibility when building MySQL DLZ
module by using mysql_config if available.
[RT #45558 ]
2017-10-06 19:14:32 -07:00
Evan Hunt
f592d2f76c
[v9_11] further restrict update-policy local
...
4762. [func] "update-policy local" is now restricted to updates
from local addresses. (Previously, other addresses
were allowed so long as updates were signed by the
local session key.) [RT #45492 ]
2017-10-06 15:43:18 -07:00
Michał Kępień
4ee1fbe056
[v9_11] Add support for DOA
...
4761. [protocol] Add support for DOA. [RT #45612 ]
(cherry picked from commit 417218837e )
2017-10-06 12:56:41 +02:00
Mark Andrews
1c8aa38b53
4759. [func] Add logging channel "trust-anchor-telementry" to
...
record trust-anchor-telementry in incoming requests.
Both _ta-XXXX.<anchor>/NULL and EDNS KEY-TAG options
are logged. [RT #46124 ]
(cherry picked from commit b41c1aacbc )
2017-10-06 13:53:50 +11:00
Evan Hunt
43d53a4e4b
[v9_11] fix topology doc
...
4758. [doc] Remove documentation of unimplemented "topology".
[RT #46161 ]
2017-10-05 18:52:11 -07:00
Michał Kępień
b1ce9b3d54
[v9_11] Prevent dig INSIST failures and hangs in some failure modes
...
4756. [bug] Interrupting dig could lead to an INSIST failure after
certain errors were encountered while querying a host
whose name resolved to more than one address. Change
4537 increased the odds of triggering this issue by
causing dig to hang indefinitely when certain error
paths were evaluated. dig now also retries TCP queries
(once) if the server gracefully closes the connection
before sending a response. [RT #42832 , #45159 ]
(cherry picked from commit 14afc8425b )
2017-10-05 09:45:34 +02:00
Evan Hunt
5fa4be41a3
[v9_11] don't log when NZF file doesn't exist
...
4755. [cleanup] Silence unnecessary log message when NZF file doesn't
exist. [RT #46186 ]
(cherry picked from commit d7ee3ed488 )
2017-10-05 00:13:36 -07:00
Mark Andrews
2732d4922c
4754. [bug] dns_zone_setview needs a two stage commit to properly
...
handle errors. [RT #45841 ]
2017-10-05 13:41:49 +11:00
Evan Hunt
24ffba17f0
[v9_11] remove nslint, query-loc and zkt from contrib
...
4753. [contrib] Software obtainable from known upstream locations
(i.e., zkt, nslint, query-loc) has been removed.
Links to these and other packages can be found at
https://www.isc.org/community/tools [RT #46182 ]
(cherry picked from commit 319aad330d )
2017-10-04 16:39:56 -07:00
Mark Andrews
21d58795b1
4752. [test] Add unit test for isc_net_pton. [RT #46171 ]
...
(cherry picked from commit 5fcdb09126 )
2017-10-04 14:11:42 +11:00
Evan Hunt
d5bd8bb71a
[v9_11] de-DLV
...
4749. [func] The ISC DLV service has been shut down, and all
DLV records have been removed from dlv.isc.org.
- Removed references to ISC DLV in documentation
- Removed DLV key from bind.keys
- No longer use ISC DLV by default in delv
[RT #46155 ]
2017-10-03 00:43:19 -07:00
Mark Andrews
ad1317338a
4748. [cleanup] Sprintf to snprintf coversions. [RT #46132 ]
...
(cherry picked from commit a009d03a1a )
2017-10-03 14:55:33 +11:00
Evan Hunt
9519bb92d7
[v9_11] add configured prefixes to summary
...
4746. [cleanup] Add configured prefixes to configure summary
output. [RT #46153 ]
(cherry picked from commit c0f8a8f30a )
2017-09-30 10:03:32 -07:00
Evan Hunt
1c81aef28d
[v9_11] color-coded test output
...
4745. [test] Add color-coded pass/fail messages to system
tests when running on terminals that support them.
[RT #45977 ]
(cherry picked from commit 3bb6150cae )
2017-09-30 10:02:52 -07:00
Mark Andrews
da1f585afa
4744. [bug] Suppress trust-anchor-telementry queries if
...
validation is disabled. [RT #46131 ]
(cherry picked from commit dc0a792d94 )
2017-09-29 09:33:55 +10:00
Mukund Sivaraman
a8fa3e2d44
Make isc_refcount_current() atomically read the counter value ( #46074 )
...
(cherry picked from commit abb8813a33 )
2017-09-27 15:09:42 +05:30
Mark Andrews
d71d41341d
4740. [cleanup] Avoid triggering format-truncated warnings. [RT #46107 ]
2017-09-27 16:20:00 +10:00
Mark Andrews
d72952cf25
4739. [cleanup] Address clang static analysis warnings. [RT #45952 ]
...
(cherry picked from commit f9f3f20d2d )
2017-09-27 10:58:44 +10:00
Evan Hunt
68d7ff133c
[v9_11] backport rpz tweaks
...
4713. [cleanup] Minor revisions to RPZ code to reduce
differences with the development branch. [RT #46037 ]
2017-09-26 11:02:59 -07:00
Mark Andrews
aae171c542
4738. [port] win32: strftime mishandles %Z. [RT #46039 ]
...
(cherry picked from commit 744061a03b )
2017-09-26 23:33:26 +10:00
Mark Andrews
6b183c64a3
4737. [cleanup] Address Coverity warnings. [RT #46012 ]
...
(cherry picked from commit 08151d7fce )
2017-09-26 23:24:37 +10:00