ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
20,402 Commits 589 Branches 805 Tags
4cc08cff96ce8bcccfe2f44363b08e6aaa4fc39e
Commit Graph
5407 Commits
Author SHA1 Message Date
Evan Hunt 423cd0f181 handle nonexistent managed-keys-directory 
3378.	[bug]		Handle missing 'managed-keys-directory' better.
			[RT #30625]
 2012-09-25 18:28:04 -07:00
Evan Hunt db18bf8bd6 remove spurious newline 
3377.	[bug]		Removed spurious newline from NSEC3 multiline
			output. [RT #31044]
 2012-09-18 14:23:13 -07:00
Mark Andrews 0588a6f624 3376. [bug] Lack of EDNS support was being recorded without a 
successful response. [RT #30811]
 2012-09-14 11:02:03 +10:00
Mark Andrews 963a424ac0 3373. [bug] win32: open raw files in binary mode. [RT #30944] 2012-09-12 12:01:19 +10:00
Mark Andrews bdbdd28db0 3372. [bug] Silence spurious "deleted from unreachable cache" 
messages.  [RT #30501]
 2012-09-08 17:59:53 +10:00
Tinderbox User c8f3263eb8 update copyright notice 2012-08-24 07:03:20 +00:00
Mark Andrews 0bff1bfd9c 9.9.2 2012-08-24 14:20:25 +10:00
Mark Andrews 0feb062f6e 3364. [security] Named could die on specially crafted record. 
[RT #30416]
 2012-08-24 13:28:22 +10:00
Mark Andrews 9d8499b6e7 unsigned constants 2012-08-24 08:46:17 +10:00
Mark Andrews 799c467a90 v9_8_4rc2 2012-08-23 23:39:14 +10:00
Mark Andrews 2892d470a4 9.9.2rc1 2012-08-23 17:32:06 +10:00
Tinderbox User c4e1abdd94 update copyright notice 2012-08-21 23:45:50 +00:00
Mark Andrews b4a152b6a8 3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h> 
where not C++ safe.
 2012-08-21 16:43:21 +10:00
Mark Andrews 046bfacea1 3367. [bug] dns_dnsseckey_create() result was not being checked. 
[RT #30685]
 2012-08-21 12:04:35 +10:00
Evan Hunt 7f30aa6ef2 remove spurious newlines in zone.c logging 
3365.	[bug]		Removed spurious newlines from log messages in
			zone.c [RT #30675]
 2012-08-16 10:42:07 -07:00
Mark Andrews ec9d42ec19 test against unsigned zero 2012-08-14 14:31:09 +10:00
Mark Andrews 3a0a7c26b9 remove references to dispatch_test, rdatasetstats_test and rbt_test 2012-07-26 13:02:21 +10:00
Tinderbox User bc0ad9c673 update copyright notice 2012-07-25 23:45:49 +00:00
ckb 66e472cd74 3356. [bug] Cap the TTL of signed RRsets when RRSIGs are 
approaching their expiry, so they don't remain
			in caches after expiry. [RT #26429]
 2012-07-25 17:12:57 -05:00
Mark Andrews 328bbfbe9a cast mode to unsigned int for fprintf 2012-07-24 13:01:47 +10:00
Mark Andrews 1cb0b6f8df cleanup unused variables 2012-07-24 12:20:59 +10:00
Tinderbox User 1439e7b8ff update copyright notice 2012-07-23 23:45:53 +00:00
Mark Andrews 62eeb6c836 3354. [func] Improve OpenSSL error logging. [RT #29932] 2012-07-23 15:09:42 +10:00
Mark Andrews 53cf25c993 add missing defs 2012-07-20 17:41:15 +10:00
Mark Andrews b67af36d3b 9.9.2b1 2012-07-20 00:15:13 +10:00
Mark Andrews 73dbdbaee7 3353. [bug] Use a single task for task exclusive operations. 
[RT #29872]
 2012-07-19 23:03:07 +10:00
Tinderbox User fe975902c0 update copyright notice 2012-07-18 23:45:43 +00:00
Mark Andrews c9f946b5a8 3352. [bug] Ensure that learned server attributes timeout of the 
adb cache. [RT #29856]
 2012-07-18 14:17:47 +10:00
ckb 6235fc5a0e 3348. [security] prevent RRSIG data from being cached if a negative 
record matching the covering type exists at a higher
			trust level. Such data already can't be retrieved from
			the cache since change 3218 -- this prevents it
			being inserted into the cache as well. [RT #26809]
 2012-07-09 13:23:35 -05:00
Evan Hunt b5bfcabdc0 warn when changing mode on .private files 
3347.	[bug]		dnssec-settime: Issue a warning when writing a new
			private key file would cause a change in the
			permissions of the existing file. [RT #27724]
 2012-07-05 18:03:57 -07:00
Evan Hunt 576df86934 fix bad-cache assert 
3346.	[security]	Bad-cache data could be used before it was
			initialized, causing an assert. [RT #30025]
 2012-07-02 10:02:23 -07:00
Tinderbox User 03565e899d update copyright notice 2012-06-29 23:45:45 +00:00
Mark Andrews cb421b69c3 reverse bad copyright update 2012-06-29 11:41:43 +10:00
Tinderbox User cd24b114bf update copyright notice 2012-06-29 01:22:07 +00:00
Tinderbox User 9418237f65 update copyright notice 2012-06-26 23:45:42 +00:00
Mark Andrews 68565715ec 3342. [bug] Change #3314 broke saving of stub zones to disk 
resulting in excessive cpu usage in some cases.
                        [RT #29952]
 2012-06-27 09:23:01 +10:00
Tinderbox User d3bb7b6b7b update copyright notice 2012-06-25 23:45:45 +00:00
Mark Andrews 7c25aaf620 3341. [func] New "dnssec-verify" command checks a signed zone 
to ensure correctness of signatures and of NSEC/NSEC3
                        chains. [RT #23673]
 2012-06-25 14:57:32 +10:00
Tinderbox User bf8c2431d5 update copyright notice 2012-06-20 23:46:27 +00:00
Mark Andrews acebc2457c 3339. [func] Allow the maximum supported rsa exponent size to be 
specified: "max-rsa-exponent-size <value>;" [RT #29228]
 2012-06-20 21:34:24 +10:00
Mark Andrews ca48cdf0ac 3338. [bug] Address race condition in units tests: asyncload_zone 
and asyncload_zt. [RT #26100]
 2012-06-14 15:15:57 +10:00
Mark Andrews ed622b2381 3334. [bug] Hold a zone table reference while performing a 
asyncronous load of a zone. [RT #28326]
 2012-06-08 13:55:11 +10:00
Mark Andrews 4db66665f5 3333. [bug] Setting resolver-query-timeout too low can cause 
named to not recover if it looses connectivity.
                        [RT #29623]
 2012-06-08 12:38:48 +10:00
Mark Andrews 5f348a21be 3332. [bug] Re-use cached DS rrsets if possible. [RT 29446] 2012-06-07 12:57:33 +10:00
Tinderbox User de16ff6d04 update copyright notice 2012-06-01 23:45:51 +00:00
Evan Hunt 73319305bf security fix 
3331.	[security]	dns_rdataslab_fromrdataset could produce bad
			rdataslabs. [RT #29644]
 2012-06-01 09:47:28 -07:00
Vernon Schryver f05089ea5c For rt26172: 
Add
      - optional "recursive-only yes|no" to the response-policy statement
      - optional max-policy-ttl to limit the lies that "recursive-only no"
          can introduce into resolvers' caches
      - test that queries with RD=0 are not rewritten by default
      - performance smoke test

    Change encoding of PASSTHRU action to "rpz-passthru".
          (The old encoding is still accepted.)
    Fix rt26180  assert botch in zone_findrdataset() in this branch
         as well.

    Fix missing signatures on NOERROR results despite RPZ hits
        when there are signatures and the client asks for DNSSEC,
 2012-06-01 01:03:43 +00:00
Mark Andrews 8a08f06cb2 silence warnings from clang 2012-05-30 11:54:27 +10:00
Mark Andrews e6e3680d46 = -> == 2012-05-18 17:12:47 +10:00
Tinderbox User a2093c07a5 update copyright notice 2012-05-17 23:45:48 +00:00