Commit Graph

8537 Commits

Author SHA1 Message Date
Mark Andrews
4e93d4a830 3354. [func] Improve OpenSSL error logging. [RT #29932] 2012-07-23 15:10:41 +10:00
Mark Andrews
24d93f177d windows fixes 2012-07-20 18:11:33 +10:00
Tinderbox User
52385b05cd update copyright notice 2012-07-19 23:45:30 +00:00
Mark Andrews
ac6f11a584 3353. [bug] Use a single task for task exclusive operations.
[RT #29872]
2012-07-19 23:59:28 +10:00
Mark Andrews
b3f7cbd9f1 3352. [bug] Ensure that learned server attributes timeout of the
adb cache. [RT #29856]
2012-07-18 14:18:32 +10:00
Mark Andrews
533adce96c 3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
                        memory debugging flags are set. [RT #30243]
2012-07-18 10:03:54 +10:00
Mark Andrews
4f95da36b0 3350. [bug] Memory read overrun in isc___mem_reallocate if
ISC_MEM_DEBUGCTX memory debugging flag is set.
                        [RT #30240]

Conflicts:
	CHANGES
2012-07-18 09:53:01 +10:00
ckb
e832bdf70a 3348. [security] prevent RRSIG data from being cached if a negative
record matching the covering type exists at a higher
			trust level. Such data already can't be retrieved from
			the cache since change 3218 -- this prevents it
			being inserted into the cache as well. [RT #26809]
2012-07-09 13:25:39 -05:00
Evan Hunt
c0d7ef3afd warn when changing mode on .private files
3347.	[bug]		dnssec-settime: Issue a warning when writing a new
			private key file would cause a change in the
			permissions of the existing file. [RT #27724]
2012-07-05 18:04:53 -07:00
Evan Hunt
42b8ca8347 fix bad-cache assert
3346.	[security]	Bad-cache data could be used before it was
			initialized, causing an assert. [RT #30025]
2012-07-02 10:03:46 -07:00
Tinderbox User
599cf7175e update copyright notice 2012-06-29 23:45:32 +00:00
Mark Andrews
c0b8f1a675 reverse bad copyright update 2012-06-29 11:43:12 +10:00
Tinderbox User
4106b0caeb update copyright notice 2012-06-29 01:21:53 +00:00
Tinderbox User
e9e0aac754 update copyright notice 2012-06-26 23:45:31 +00:00
Mark Andrews
eea0a8248a 3342. [bug] Change #3314 broke saving of stub zones to disk
resulting in excessive cpu usage in some cases.
                        [RT #29952]
2012-06-27 09:27:06 +10:00
Tinderbox User
bfcdd962b0 update copyright notice 2012-06-25 23:45:34 +00:00
Mark Andrews
4f86c7e924 silence compiler warning by using offsetof to get structure element offsets 2012-06-25 12:03:58 +10:00
Mark Andrews
faea8a525d remove rundundent call 'result = isc_parse_uint8(&ui, r.base, 10);' 2012-06-21 14:30:06 +10:00
Mark Andrews
61731ad937 3337. [bug] Change #3294 broke support for the multiple keys
in controls. [RT #29694]
2012-06-13 16:51:43 +10:00
Mark Andrews
bdedbcd9d0 3333. [bug] Setting resolver-query-timeout too low can cause
named to not recover if it looses connectivity.
                        [RT #29623]
2012-06-08 12:45:19 +10:00
Mark Andrews
896fb8c26a 3332. [bug] Re-use cached DS rrsets if possible. [RT 29446] 2012-06-07 12:58:25 +10:00
Evan Hunt
5810423788 security fix
3331.	[security]	dns_rdataslab_fromrdataset could produce bad
			rdataslabs. [RT #29644]
2012-06-01 09:53:04 -07:00
Tinderbox User
f3c44ec867 update copyright notice 2012-05-31 23:45:36 +00:00
Vernon Schryver
07d51fa5ba Squashed commit of the following:
commit 4d29cea2ea05491a7afebc343e41d9b6ad58f068
commit 3211da9716e5ecc0bb758666db70a667ca5a944e
commit 884b6f5d5e9b1f50757c606adafabe382b90c80b
commit 53f82565f72f091a46caed754db160e4a7a2d161
Merge: 8f73664 9698f42
commit 8f73664e7bdc04f766ddcccfb5fc5f857a22326a

for rt26172

Add
  - optional "recursive-only yes|no" to the response-policy statement
  - optional max-policy-ttl to limit the lies that "recursive-only no"
      can introduce into resolvers' caches
  - test that queries with RD=0 are not rewritten by default
  - performance smoke test

Change encoding of PASSTHRU action to "rpz-passthru".
      (The old encoding is still accepted.)
Fix rt26180  assert botch in zone_findrdataset() in this branch
     as well.

Fix missing signatures on NOERROR results despite RPZ hits
    when there are signatures and the client asks for DNSSEC,
2012-05-31 01:47:47 +00:00
Mark Andrews
a06ae70419 silence warnings from clang 2012-05-30 11:55:08 +10:00
Mark Andrews
d824d6739f = -> == 2012-05-18 17:11:09 +10:00
Tinderbox User
b008cf0a4d update copyright notice 2012-05-17 23:45:35 +00:00
Evan Hunt
5502d62636 fix check_data() usage
3328.   [bug]           Fixed inconsistent data checking in dst_parse.c.
                        [RT #29401]
2012-05-17 16:17:44 -07:00
Evan Hunt
9d1aaaaf3a add ECDSA support
3317.	[protocol]	Add ECDSA support (RFC 6605). [RT #21918]
2012-05-17 16:09:53 -07:00
Evan Hunt
58e0170e5e Handle RRSIG signer case consistently
3329.	[bug]	Handle RRSIG signer-name case consistently: We
		generate RRSIG records with the signer-name in
		lower case.  We accept them with any case, but if
		they fail to validate, we try again in lower case.
		[RT #27451]
2012-05-17 11:08:49 -07:00
Mark Andrews
72c1a6b333 3318. [tuning] Reduce the amount of work performed while holding a
bucket lock when finshed with a fetch context.
                        [RT #29239]
2012-05-10 08:43:18 +10:00
Mark Andrews
1960a145eb 9.8.3 2012-04-27 16:44:00 +10:00
Mark Andrews
552162bb83 3197. [bug] Don't try to log the filename and line number when
the config parser can't open a file. [RT #22263]
2012-04-27 15:08:01 +10:00
Mark Andrews
55ea7920aa 3232. [bug] Zero zone->curmaster before return in
dns_zone_setmasterswithkeys(). [RT #26732]
2012-04-27 14:42:42 +10:00
Mark Andrews
337cd4ace2 3314. [bug] The masters list could be updated while refesh_callback
and stub_callback were using it. [RT #26732]
2012-04-26 13:57:20 +10:00
Mark Andrews
f32065b014 3313. [protocol] Add TLSA record type. [RT #28989] 2012-04-26 12:37:58 +10:00
Mark Andrews
db829f3834 3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
[RT #27631]
2012-04-26 11:46:04 +10:00
Mark Andrews
32ea95bde3 3311. [bug] Abort the zone dump if zone->db is NULL in
zone.c:zone_gotwritehandle. [RT #29028]
2012-04-26 11:29:28 +10:00
Tinderbox User
9a5b04934b update copyright notice 2012-04-25 23:45:26 +00:00
Evan Hunt
d23cdfd68d increase table size for mutex profiling 2012-04-24 16:52:53 -07:00
Evan Hunt
b276df716d fctx_finddone: call fctx_destroy within the bucket lock 2012-04-24 14:59:50 -07:00
Tinderbox User
d6b6ca9086 update copyright notice 2012-04-12 23:45:32 +00:00
Mark Andrews
c7ae37d1aa 3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
[RT #28956]
2012-04-13 08:39:23 +10:00
Mark Andrews
efd194bdb6 3307. [bug] Add missing ISC_LANG_ENDDECLS to <dns/tsec.h>. [RT #28956] 2012-04-12 19:17:29 +10:00
Tinderbox User
5771a59496 update copyright notice 2012-04-11 23:45:30 +00:00
Mark Andrews
f0c93bef30 3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
3305.   [func]          Add wire format lookup method to sdb. [RT #28563]
2012-04-11 12:33:08 +10:00
Mark Andrews
a9d6f26285 3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps. [RT #28571] 2012-04-11 10:47:37 +10:00
Mark Andrews
bf07be5e5a 3302. [bug] dns_dnssec_findmatchingkeys could fail to find
keys if the zone name contained character that
                        required special mappings. [RT #28600]
2012-03-30 12:08:02 +11:00
Mark Andrews
f80c9db2b5 3300. [bug] Named could die if gssapi was enabled in named.conf
but was not compiled in. [RT #28338]
2012-03-29 09:54:40 +11:00
Mark Andrews
183a1f9e79 3299. [bug] Make SDB handle errors from database drivers better.
[RT #28534]
2012-03-28 10:33:20 +11:00