Commit Graph

5666 Commits

Author SHA1 Message Date
Tinderbox User
9b3b8486ad update copyright notice 2012-06-21 23:45:31 +00:00
Evan Hunt
8899945e57 fix secondkey test, properly 2012-06-20 22:45:59 -07:00
Evan Hunt
6112c02a7f fixed second-key test to use correct rndc.conf 2012-06-20 15:09:21 -07:00
Tinderbox User
47614fd67b update copyright notice 2012-06-14 23:45:29 +00:00
Mark Andrews
61731ad937 3337. [bug] Change #3294 broke support for the multiple keys
in controls. [RT #29694]
2012-06-13 16:51:43 +10:00
Tinderbox User
ea3156ce2e update copyright notice 2012-06-08 23:45:33 +00:00
Evan Hunt
8255198fed nslookup exit with error if unsuccessful
3335.	[func]		nslookup: return a nonzero exit code when unable
			to get an answer. [RT #29492]
2012-06-07 22:08:40 -07:00
Mark Andrews
bdedbcd9d0 3333. [bug] Setting resolver-query-timeout too low can cause
named to not recover if it looses connectivity.
                        [RT #29623]
2012-06-08 12:45:19 +10:00
Mark Andrews
900aa62340 Don't restart ns5 after killing it 2012-06-07 14:43:14 +10:00
Mark Andrews
34e4560d35 kill and restart the nameserver after running: perf 'without rpz' norpz 2012-06-04 16:37:40 +10:00
Tinderbox User
d6ae6d6510 update copyright notice 2012-06-01 23:45:38 +00:00
Evan Hunt
168d5d8a42 fix solaris portability problem 2012-06-01 11:41:36 -07:00
Evan Hunt
5810423788 security fix
3331.	[security]	dns_rdataslab_fromrdataset could produce bad
			rdataslabs. [RT #29644]
2012-06-01 09:53:04 -07:00
Tinderbox User
f3c44ec867 update copyright notice 2012-05-31 23:45:36 +00:00
Vernon Schryver
07d51fa5ba Squashed commit of the following:
commit 4d29cea2ea05491a7afebc343e41d9b6ad58f068
commit 3211da9716e5ecc0bb758666db70a667ca5a944e
commit 884b6f5d5e9b1f50757c606adafabe382b90c80b
commit 53f82565f72f091a46caed754db160e4a7a2d161
Merge: 8f73664 9698f42
commit 8f73664e7bdc04f766ddcccfb5fc5f857a22326a

for rt26172

Add
  - optional "recursive-only yes|no" to the response-policy statement
  - optional max-policy-ttl to limit the lies that "recursive-only no"
      can introduce into resolvers' caches
  - test that queries with RD=0 are not rewritten by default
  - performance smoke test

Change encoding of PASSTHRU action to "rpz-passthru".
      (The old encoding is still accepted.)
Fix rt26180  assert botch in zone_findrdataset() in this branch
     as well.

Fix missing signatures on NOERROR results despite RPZ hits
    when there are signatures and the client asks for DNSSEC,
2012-05-31 01:47:47 +00:00
Tinderbox User
2851880ad0 regen v9_8 2012-05-31 01:14:01 +00:00
Tinderbox User
92be0dc757 update copyright notice 2012-05-21 23:45:27 +00:00
Mark Andrews
707fee270c redirect stderr to /dev/null 2012-05-21 16:05:46 +10:00
Mark Andrews
6ea1ba16ba awk and toupper is not portable, use sed instead 2012-05-21 10:17:35 +10:00
Tinderbox User
b008cf0a4d update copyright notice 2012-05-17 23:45:35 +00:00
Evan Hunt
9d1aaaaf3a add ECDSA support
3317.	[protocol]	Add ECDSA support (RFC 6605). [RT #21918]
2012-05-17 16:09:53 -07:00
Evan Hunt
b7d8228ce2 a few files weren't cleaned up 2012-05-17 14:51:14 -07:00
Evan Hunt
58e0170e5e Handle RRSIG signer case consistently
3329.	[bug]	Handle RRSIG signer-name case consistently: We
		generate RRSIG records with the signer-name in
		lower case.  We accept them with any case, but if
		they fail to validate, we try again in lower case.
		[RT #27451]
2012-05-17 11:08:49 -07:00
Mark Andrews
4dbd99bcae 3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301] 2012-04-27 15:00:02 +10:00
Mark Andrews
f32065b014 3313. [protocol] Add TLSA record type. [RT #28989] 2012-04-26 12:37:58 +10:00
Mark Andrews
db829f3834 3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
[RT #27631]
2012-04-26 11:46:04 +10:00
Evan Hunt
a9ac8826ce removed files merged by mistake 2012-04-23 09:13:14 -07:00
Evan Hunt
9a76e95622 fix .gitignore files 2012-04-23 09:01:30 -07:00
Tinderbox User
5771a59496 update copyright notice 2012-04-11 23:45:30 +00:00
Mark Andrews
f0c93bef30 3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
3305.   [func]          Add wire format lookup method to sdb. [RT #28563]
2012-04-11 12:33:08 +10:00
Mark Andrews
183a1f9e79 3299. [bug] Make SDB handle errors from database drivers better.
[RT #28534]
2012-03-28 10:33:20 +11:00
Tinderbox User
db4c35f7ae regen v9_8 2012-03-12 01:13:15 +00:00
Tinderbox User
1ceec0a211 update copyright notice 2012-03-10 23:45:31 +00:00
Tinderbox User
806001cc51 regen 2012-03-09 23:30:19 +00:00
Mark Andrews
5a605b83bf empty directory 2012-03-10 08:46:53 +11:00
Mark Andrews
c95802e3b8 3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
error. [RT #28265]
2012-03-08 14:43:16 +11:00
Tinderbox User
91f0609aae regen v9_8 2012-03-07 01:54:34 +00:00
Evan Hunt
3997b6bcbf add gitignore, remove cvsignore 2012-03-03 23:33:18 -08:00
Automatic Updater
755858999f update copyright notice 2012-02-22 23:46:36 +00:00
Evan Hunt
b0c906596a 3288. [bug] dlz_destroy() function wasn't correctly registered
by the DLZ dlopen driver. [RT #28056]
2012-02-22 21:44:24 +00:00
Mark Andrews
6d4935ecf5 3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028] 2012-02-22 14:30:38 +00:00
Evan Hunt
15601edb93 3286. [bug] Managed key maintenance timer could fail to start
after 'rndc reconfig'. [RT #26786]
2012-02-22 00:33:33 +00:00
Mark Andrews
bc337a2f44 Loop 'I:checking that large rdatasets loaded' in case the zone transfer has not yet completed 2012-02-15 01:23:33 +00:00
Automatic Updater
18ddc00419 update copyright notice 2012-02-14 23:46:30 +00:00
Mark Andrews
2924a2aef5 3283. [bug] Raw zones with with more than 512 records in a RRset
failed to load. [RT #27863]
2012-02-14 00:10:17 +00:00
Automatic Updater
38841ea996 update copyright notice 2012-02-09 23:46:25 +00:00
Mark Andrews
0de7627fff move keygeneration out of the timing critical section 2012-02-09 21:51:34 +00:00
Mark Andrews
256948c153 3282. [bug] Restrict the TTL of NS RRset to no more than that
of the old NS RRset when replacing it. [RT #27792]
2012-02-09 21:01:48 +00:00
Mark Andrews
930151fcab 3280. [bug] Potential double free of a rdataset on out of memory
with DNS64. [RT #27762]
2012-02-07 01:14:39 +00:00
Evan Hunt
55f6591579 fixed a test error that caused autosign to fail on freebsd 2012-02-07 00:34:20 +00:00