Michał Kępień
eeb919b6f5
[v9_11] Minor improvements to code handling managed keys
...
4812. [bug] Minor improvements to stability and consistency of code
handling managed keys. [RT #46468 ]
(cherry picked from commit 312c84c73a )
2017-11-09 15:19:32 +01:00
Mark Andrews
f1b3c45513
fix the IPv6 address length in compute_cookie. [RT #46538 ]
...
(cherry picked from commit b231ddc65d )
2017-11-10 00:03:59 +11:00
Mark Andrews
48865bf022
fix merge error
2017-11-01 11:55:37 +11:00
Mark Andrews
24231e53a5
4804. [port] win32: access() does not work on directories as
...
required by POSIX. Supply a alternative in
isc_file_isdirwritable. [RT #46394 ]
2017-11-01 09:39:08 +11:00
Mark Andrews
7382f51602
Add system tests and remove redundent logging from:
...
4801. [func] 'dnssec-lookaside auto;' and 'dnssec-lookaside .
trust-anchor dlv.isc.org;' now elicit warnings rather
than being fatal configuration errors. [RT #46410 ]
(cherry picked from commit f5e1b555c5 )
2017-10-30 08:12:59 +11:00
Mukund Sivaraman
eb11b39981
When processing delzone, write one zone config per line to the NZF ( #46323 )
...
(cherry picked from commit 625f656aa8 )
2017-10-29 07:43:47 +05:30
Evan Hunt
4d39bffd95
[v9_11] fix merge error; missing hunk from change 4780
2017-10-24 10:09:22 -07:00
Evan Hunt
b7b76d6b85
[v9_11] omit NS from authority section if it was in answer
...
4780. [bug] When answering ANY queries, don't include the NS
RRset in the authority section if it was already
in the answer section. [RT #44543 ]
2017-10-23 19:33:14 -07:00
Evan Hunt
a06198688f
[v9_11] clean up a redundancy
...
4777. [cleanup] Removed a redundant call to configure_view_acl().
[RT #46369 ]
(cherry picked from commit 89636d8f30 )
2017-10-23 11:12:47 -07:00
Tinderbox User
ff2d95be3d
update copyright notice / whitespace
2017-10-19 23:46:54 +00:00
Mark Andrews
f44202ab64
4774. [bug] <isc/util.h> was incorrectly included in several
...
header files. [RT #46311 ]
(cherry picked from commit fe79e2efbf )
2017-10-19 12:32:53 +11:00
Evan Hunt
56e30ebae6
[v9_11] require writable managed keys directory
...
4769. [bug] Enforce the requirement that the managed keys
directory (specified by "managed-keys-directory",
and defaulting to the working directory if not
specified) must be writable. [RT #46077 ]
2017-10-17 21:26:41 -07:00
Mark Andrews
77db93e68c
silence VC compiler warning
...
(cherry picked from commit e09b9e7a91 )
2017-10-07 14:04:57 +11:00
Tinderbox User
8a99b24dbe
update copyright notice / whitespace
2017-10-06 23:46:41 +00:00
Evan Hunt
f592d2f76c
[v9_11] further restrict update-policy local
...
4762. [func] "update-policy local" is now restricted to updates
from local addresses. (Previously, other addresses
were allowed so long as updates were signed by the
local session key.) [RT #45492 ]
2017-10-06 15:43:18 -07:00
Mark Andrews
94deea78f4
fix merge error
2017-10-06 14:12:14 +11:00
Mark Andrews
1c8aa38b53
4759. [func] Add logging channel "trust-anchor-telementry" to
...
record trust-anchor-telementry in incoming requests.
Both _ta-XXXX.<anchor>/NULL and EDNS KEY-TAG options
are logged. [RT #46124 ]
(cherry picked from commit b41c1aacbc )
2017-10-06 13:53:50 +11:00
Tinderbox User
649482995b
update copyright notice / whitespace
2017-10-05 23:46:27 +00:00
Evan Hunt
197903220d
[v9_11] remove no-longer-needed check for nonexistence
2017-10-05 11:35:40 -07:00
Evan Hunt
5fa4be41a3
[v9_11] don't log when NZF file doesn't exist
...
4755. [cleanup] Silence unnecessary log message when NZF file doesn't
exist. [RT #46186 ]
(cherry picked from commit d7ee3ed488 )
2017-10-05 00:13:36 -07:00
Mark Andrews
2732d4922c
4754. [bug] dns_zone_setview needs a two stage commit to properly
...
handle errors. [RT #45841 ]
2017-10-05 13:41:49 +11:00
Evan Hunt
d5bd8bb71a
[v9_11] de-DLV
...
4749. [func] The ISC DLV service has been shut down, and all
DLV records have been removed from dlv.isc.org.
- Removed references to ISC DLV in documentation
- Removed DLV key from bind.keys
- No longer use ISC DLV by default in delv
[RT #46155 ]
2017-10-03 00:43:19 -07:00
Mark Andrews
ad1317338a
4748. [cleanup] Sprintf to snprintf coversions. [RT #46132 ]
...
(cherry picked from commit a009d03a1a )
2017-10-03 14:55:33 +11:00
Mark Andrews
da1f585afa
4744. [bug] Suppress trust-anchor-telementry queries if
...
validation is disabled. [RT #46131 ]
(cherry picked from commit dc0a792d94 )
2017-09-29 09:33:55 +10:00
Mark Andrews
d72952cf25
4739. [cleanup] Address clang static analysis warnings. [RT #45952 ]
...
(cherry picked from commit f9f3f20d2d )
2017-09-27 10:58:44 +10:00
Evan Hunt
68d7ff133c
[v9_11] backport rpz tweaks
...
4713. [cleanup] Minor revisions to RPZ code to reduce
differences with the development branch. [RT #46037 ]
2017-09-26 11:02:59 -07:00
Mukund Sivaraman
f896f7c8be
Fix use after free when closing an LMDB ( #46000 )
...
(cherry picked from commit e2ed24aa4d )
2017-09-19 19:43:22 +05:30
Michał Kępień
62f2fefaec
[v9_11] Prevent possible infinite signing loop after retransferring an inline-signed slave using NSEC3
...
4727. [bug] Retransferring an inline-signed slave using NSEC3
around the time its NSEC3 salt was changed could result
in an infinite signing loop. [RT #45080 ]
(cherry picked from commit f665c724e4 )
2017-09-18 09:23:18 +02:00
Mark Andrews
7b4bfc0201
4723. [bug] Statistics counter DNSTAPdropped was misidentified
...
as DNSSECdropped. [RT #46002 ]
(cherry picked from commit 3128cd21e3 )
2017-09-14 23:53:07 +00:00
Tinderbox User
7c38d4781f
update copyright notice / whitespace
2017-09-14 23:48:31 +00:00
Mark Andrews
4f851656c4
#include <isc/string.h>
...
(cherry picked from commit 5fb0c09a5e )
2017-09-14 18:55:15 +10:00
Mark Andrews
5a93d3be4e
more str{n}{cat,cpy} corrections rt45981_stage2
...
(cherry picked from commit cb629cdeda )
2017-09-14 18:33:02 +10:00
Tinderbox User
bd911976d5
update copyright notice / whitespace
2017-09-13 23:52:25 +00:00
Evan Hunt
7cd594b842
[master] cleanup strcat/strcpy
...
4722. [cleanup] Clean up uses of strcpy() and strcat() in favor of
strlcpy() and strlcat() for safety. [RT #45981 ]
(cherry picked from commit 114f95089c )
2017-09-13 00:17:16 -07:00
Mark Andrews
c76e8412f4
4719. [bug] Address PVS static analyzer warnings. [RT #45946 ]
...
(cherry picked from commit 34130ee25a )
2017-09-13 09:51:39 +10:00
Mark Andrews
7dfd012873
sync option order with master
2017-09-06 15:26:38 +10:00
Tinderbox User
9700e6d72c
regen v9_11
2017-08-30 01:21:44 +00:00
Tinderbox User
36d3f6b40f
update copyright notice / whitespace
2017-08-29 23:47:49 +00:00
Michał Kępień
b7a823a402
[v9_11] Ensure consistent handling of -4/-6 command line options in all tools
...
4690. [bug] Command line options -4/-6 were handled inconsistently
between tools. [RT #45632 ]
(cherry picked from commit d6814700de )
2017-08-29 10:22:10 +02:00
Evan Hunt
031bc55634
[v9_11] turn on minimal responses for CDS/CDNSKEY
...
4678. [cleanup] Turn on minimal responses for CDNSKEY and CDS in
addition to DNSKEY and DS. Thanks to Tony Finch.
[RT #45690 ]
(cherry picked from commit 391a3a2f20 )
2017-08-25 13:32:18 -07:00
Tinderbox User
3523e19da2
update copyright notice / whitespace
2017-08-09 23:49:39 +00:00
Mark Andrews
bf216589c1
4675. [cleanup] Don't use C++ keyword class. [RT #45726 ]
2017-08-10 08:44:23 +10:00
Evan Hunt
7dbeb5e7f0
[v9_11] silence gcc 7 warnings
...
4673. [port] Silence GCC 7 warnings. [RT #45592 ]
(cherry picked from commit cdacec1dcb )
2017-08-09 00:24:16 -07:00
Tinderbox User
36babd3e63
update copyright notice / whitespace
2017-08-09 01:01:24 +00:00
Evan Hunt
37f6466aa3
[v9_11] ensure verified_sig
...
4670. [cleanup] Ensure that a request MAC is never sent back
in an XFR response unless the signature was
verified. [RT #45494 ]
(cherry picked from commit 0ad72b96d2 )
2017-08-07 18:54:54 -07:00
Mark Andrews
cb4e0ef4e2
4659. [bug] Remove spurious log message about lmdb-mapsize
...
not being supported when parsing builtin
configuration file. [RT #45618 ]
(cherry picked from commit 71cd6910ba )
2017-07-28 16:03:24 +10:00
Mark Andrews
bfde61d519
4654. [cleanup] Don't use C++ keywords delete, new and namespace.
...
[RT #45538 ]
(cherry picked from commit 4bf32aa587 )
2017-07-21 12:28:58 +10:00
Mark Andrews
3a84275b10
4648. [bug] "rndc reconfig" on a slave no longer causes all member
...
zones of configured catalog zones to be removed from
configuration. [RT #45310 ]
(cherry picked from commit 1e9b39fe26 )
2017-07-10 09:07:29 +10:00
Mark Andrews
b2e7185306
4640. [bug] If query_findversion failed in query_getdb due to
...
memory failure the error status was incorrectly
discarded. [RT #45331 ]
(cherry picked from commit b551ee14bd )
2017-06-23 17:18:23 +10:00
Tinderbox User
6431922cb2
update copyright notice / whitespace
2017-06-13 23:46:02 +00:00