Mark Andrews
4e93d4a830
3354. [func] Improve OpenSSL error logging. [RT #29932 ]
2012-07-23 15:10:41 +10:00
Mark Andrews
24d93f177d
windows fixes
2012-07-20 18:11:33 +10:00
Tinderbox User
52385b05cd
update copyright notice
2012-07-19 23:45:30 +00:00
Mark Andrews
ac6f11a584
3353. [bug] Use a single task for task exclusive operations.
...
[RT #29872 ]
2012-07-19 23:59:28 +10:00
Mark Andrews
b3f7cbd9f1
3352. [bug] Ensure that learned server attributes timeout of the
...
adb cache. [RT #29856 ]
2012-07-18 14:18:32 +10:00
Mark Andrews
533adce96c
3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
...
caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
memory debugging flags are set. [RT #30243 ]
2012-07-18 10:03:54 +10:00
Mark Andrews
4f95da36b0
3350. [bug] Memory read overrun in isc___mem_reallocate if
...
ISC_MEM_DEBUGCTX memory debugging flag is set.
[RT #30240 ]
Conflicts:
CHANGES
2012-07-18 09:53:01 +10:00
ckb
e832bdf70a
3348. [security] prevent RRSIG data from being cached if a negative
...
record matching the covering type exists at a higher
trust level. Such data already can't be retrieved from
the cache since change 3218 -- this prevents it
being inserted into the cache as well. [RT #26809 ]
2012-07-09 13:25:39 -05:00
Evan Hunt
c0d7ef3afd
warn when changing mode on .private files
...
3347. [bug] dnssec-settime: Issue a warning when writing a new
private key file would cause a change in the
permissions of the existing file. [RT #27724 ]
2012-07-05 18:04:53 -07:00
Evan Hunt
42b8ca8347
fix bad-cache assert
...
3346. [security] Bad-cache data could be used before it was
initialized, causing an assert. [RT #30025 ]
2012-07-02 10:03:46 -07:00
Tinderbox User
599cf7175e
update copyright notice
2012-06-29 23:45:32 +00:00
Mark Andrews
c0b8f1a675
reverse bad copyright update
2012-06-29 11:43:12 +10:00
Tinderbox User
4106b0caeb
update copyright notice
2012-06-29 01:21:53 +00:00
Tinderbox User
e9e0aac754
update copyright notice
2012-06-26 23:45:31 +00:00
Mark Andrews
eea0a8248a
3342. [bug] Change #3314 broke saving of stub zones to disk
...
resulting in excessive cpu usage in some cases.
[RT #29952 ]
2012-06-27 09:27:06 +10:00
Tinderbox User
bfcdd962b0
update copyright notice
2012-06-25 23:45:34 +00:00
Mark Andrews
4f86c7e924
silence compiler warning by using offsetof to get structure element offsets
2012-06-25 12:03:58 +10:00
Mark Andrews
faea8a525d
remove rundundent call 'result = isc_parse_uint8(&ui, r.base, 10);'
2012-06-21 14:30:06 +10:00
Mark Andrews
61731ad937
3337. [bug] Change #3294 broke support for the multiple keys
...
in controls. [RT #29694 ]
2012-06-13 16:51:43 +10:00
Mark Andrews
bdedbcd9d0
3333. [bug] Setting resolver-query-timeout too low can cause
...
named to not recover if it looses connectivity.
[RT #29623 ]
2012-06-08 12:45:19 +10:00
Mark Andrews
896fb8c26a
3332. [bug] Re-use cached DS rrsets if possible. [RT 29446]
2012-06-07 12:58:25 +10:00
Evan Hunt
5810423788
security fix
...
3331. [security] dns_rdataslab_fromrdataset could produce bad
rdataslabs. [RT #29644 ]
2012-06-01 09:53:04 -07:00
Tinderbox User
f3c44ec867
update copyright notice
2012-05-31 23:45:36 +00:00
Vernon Schryver
07d51fa5ba
Squashed commit of the following:
...
commit 4d29cea2ea05491a7afebc343e41d9b6ad58f068
commit 3211da9716e5ecc0bb758666db70a667ca5a944e
commit 884b6f5d5e9b1f50757c606adafabe382b90c80b
commit 53f82565f72f091a46caed754db160e4a7a2d161
Merge: 8f73664 9698f42
commit 8f73664e7bdc04f766ddcccfb5fc5f857a22326a
for rt26172
Add
- optional "recursive-only yes|no" to the response-policy statement
- optional max-policy-ttl to limit the lies that "recursive-only no"
can introduce into resolvers' caches
- test that queries with RD=0 are not rewritten by default
- performance smoke test
Change encoding of PASSTHRU action to "rpz-passthru".
(The old encoding is still accepted.)
Fix rt26180 assert botch in zone_findrdataset() in this branch
as well.
Fix missing signatures on NOERROR results despite RPZ hits
when there are signatures and the client asks for DNSSEC,
2012-05-31 01:47:47 +00:00
Mark Andrews
a06ae70419
silence warnings from clang
2012-05-30 11:55:08 +10:00
Mark Andrews
d824d6739f
= -> ==
2012-05-18 17:11:09 +10:00
Tinderbox User
b008cf0a4d
update copyright notice
2012-05-17 23:45:35 +00:00
Evan Hunt
5502d62636
fix check_data() usage
...
3328. [bug] Fixed inconsistent data checking in dst_parse.c.
[RT #29401 ]
2012-05-17 16:17:44 -07:00
Evan Hunt
9d1aaaaf3a
add ECDSA support
...
3317. [protocol] Add ECDSA support (RFC 6605). [RT #21918 ]
2012-05-17 16:09:53 -07:00
Evan Hunt
58e0170e5e
Handle RRSIG signer case consistently
...
3329. [bug] Handle RRSIG signer-name case consistently: We
generate RRSIG records with the signer-name in
lower case. We accept them with any case, but if
they fail to validate, we try again in lower case.
[RT #27451 ]
2012-05-17 11:08:49 -07:00
Mark Andrews
72c1a6b333
3318. [tuning] Reduce the amount of work performed while holding a
...
bucket lock when finshed with a fetch context.
[RT #29239 ]
2012-05-10 08:43:18 +10:00
Mark Andrews
1960a145eb
9.8.3
2012-04-27 16:44:00 +10:00
Mark Andrews
552162bb83
3197. [bug] Don't try to log the filename and line number when
...
the config parser can't open a file. [RT #22263 ]
2012-04-27 15:08:01 +10:00
Mark Andrews
55ea7920aa
3232. [bug] Zero zone->curmaster before return in
...
dns_zone_setmasterswithkeys(). [RT #26732 ]
2012-04-27 14:42:42 +10:00
Mark Andrews
337cd4ace2
3314. [bug] The masters list could be updated while refesh_callback
...
and stub_callback were using it. [RT #26732 ]
2012-04-26 13:57:20 +10:00
Mark Andrews
f32065b014
3313. [protocol] Add TLSA record type. [RT #28989 ]
2012-04-26 12:37:58 +10:00
Mark Andrews
db829f3834
3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
...
[RT #27631 ]
2012-04-26 11:46:04 +10:00
Mark Andrews
32ea95bde3
3311. [bug] Abort the zone dump if zone->db is NULL in
...
zone.c:zone_gotwritehandle. [RT #29028 ]
2012-04-26 11:29:28 +10:00
Tinderbox User
9a5b04934b
update copyright notice
2012-04-25 23:45:26 +00:00
Evan Hunt
d23cdfd68d
increase table size for mutex profiling
2012-04-24 16:52:53 -07:00
Evan Hunt
b276df716d
fctx_finddone: call fctx_destroy within the bucket lock
2012-04-24 14:59:50 -07:00
Tinderbox User
d6b6ca9086
update copyright notice
2012-04-12 23:45:32 +00:00
Mark Andrews
c7ae37d1aa
3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
...
[RT #28956 ]
2012-04-13 08:39:23 +10:00
Mark Andrews
efd194bdb6
3307. [bug] Add missing ISC_LANG_ENDDECLS to <dns/tsec.h>. [RT #28956 ]
2012-04-12 19:17:29 +10:00
Tinderbox User
5771a59496
update copyright notice
2012-04-11 23:45:30 +00:00
Mark Andrews
f0c93bef30
3306. [bug] Improve DNS64 reverse zone performance. [RT #28563 ]
...
3305. [func] Add wire format lookup method to sdb. [RT #28563 ]
2012-04-11 12:33:08 +10:00
Mark Andrews
a9d6f26285
3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps. [RT #28571 ]
2012-04-11 10:47:37 +10:00
Mark Andrews
bf07be5e5a
3302. [bug] dns_dnssec_findmatchingkeys could fail to find
...
keys if the zone name contained character that
required special mappings. [RT #28600 ]
2012-03-30 12:08:02 +11:00
Mark Andrews
f80c9db2b5
3300. [bug] Named could die if gssapi was enabled in named.conf
...
but was not compiled in. [RT #28338 ]
2012-03-29 09:54:40 +11:00
Mark Andrews
183a1f9e79
3299. [bug] Make SDB handle errors from database drivers better.
...
[RT #28534 ]
2012-03-28 10:33:20 +11:00