Commit Graph

5267 Commits

Author SHA1 Message Date
Mark Andrews
bdedbcd9d0 3333. [bug] Setting resolver-query-timeout too low can cause
named to not recover if it looses connectivity.
                        [RT #29623]
2012-06-08 12:45:19 +10:00
Mark Andrews
896fb8c26a 3332. [bug] Re-use cached DS rrsets if possible. [RT 29446] 2012-06-07 12:58:25 +10:00
Evan Hunt
5810423788 security fix
3331.	[security]	dns_rdataslab_fromrdataset could produce bad
			rdataslabs. [RT #29644]
2012-06-01 09:53:04 -07:00
Tinderbox User
f3c44ec867 update copyright notice 2012-05-31 23:45:36 +00:00
Vernon Schryver
07d51fa5ba Squashed commit of the following:
commit 4d29cea2ea05491a7afebc343e41d9b6ad58f068
commit 3211da9716e5ecc0bb758666db70a667ca5a944e
commit 884b6f5d5e9b1f50757c606adafabe382b90c80b
commit 53f82565f72f091a46caed754db160e4a7a2d161
Merge: 8f73664 9698f42
commit 8f73664e7bdc04f766ddcccfb5fc5f857a22326a

for rt26172

Add
  - optional "recursive-only yes|no" to the response-policy statement
  - optional max-policy-ttl to limit the lies that "recursive-only no"
      can introduce into resolvers' caches
  - test that queries with RD=0 are not rewritten by default
  - performance smoke test

Change encoding of PASSTHRU action to "rpz-passthru".
      (The old encoding is still accepted.)
Fix rt26180  assert botch in zone_findrdataset() in this branch
     as well.

Fix missing signatures on NOERROR results despite RPZ hits
    when there are signatures and the client asks for DNSSEC,
2012-05-31 01:47:47 +00:00
Mark Andrews
a06ae70419 silence warnings from clang 2012-05-30 11:55:08 +10:00
Mark Andrews
d824d6739f = -> == 2012-05-18 17:11:09 +10:00
Tinderbox User
b008cf0a4d update copyright notice 2012-05-17 23:45:35 +00:00
Evan Hunt
5502d62636 fix check_data() usage
3328.   [bug]           Fixed inconsistent data checking in dst_parse.c.
                        [RT #29401]
2012-05-17 16:17:44 -07:00
Evan Hunt
9d1aaaaf3a add ECDSA support
3317.	[protocol]	Add ECDSA support (RFC 6605). [RT #21918]
2012-05-17 16:09:53 -07:00
Evan Hunt
58e0170e5e Handle RRSIG signer case consistently
3329.	[bug]	Handle RRSIG signer-name case consistently: We
		generate RRSIG records with the signer-name in
		lower case.  We accept them with any case, but if
		they fail to validate, we try again in lower case.
		[RT #27451]
2012-05-17 11:08:49 -07:00
Mark Andrews
72c1a6b333 3318. [tuning] Reduce the amount of work performed while holding a
bucket lock when finshed with a fetch context.
                        [RT #29239]
2012-05-10 08:43:18 +10:00
Mark Andrews
1960a145eb 9.8.3 2012-04-27 16:44:00 +10:00
Mark Andrews
55ea7920aa 3232. [bug] Zero zone->curmaster before return in
dns_zone_setmasterswithkeys(). [RT #26732]
2012-04-27 14:42:42 +10:00
Mark Andrews
337cd4ace2 3314. [bug] The masters list could be updated while refesh_callback
and stub_callback were using it. [RT #26732]
2012-04-26 13:57:20 +10:00
Mark Andrews
f32065b014 3313. [protocol] Add TLSA record type. [RT #28989] 2012-04-26 12:37:58 +10:00
Mark Andrews
32ea95bde3 3311. [bug] Abort the zone dump if zone->db is NULL in
zone.c:zone_gotwritehandle. [RT #29028]
2012-04-26 11:29:28 +10:00
Evan Hunt
b276df716d fctx_finddone: call fctx_destroy within the bucket lock 2012-04-24 14:59:50 -07:00
Tinderbox User
d6b6ca9086 update copyright notice 2012-04-12 23:45:32 +00:00
Mark Andrews
c7ae37d1aa 3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
[RT #28956]
2012-04-13 08:39:23 +10:00
Mark Andrews
efd194bdb6 3307. [bug] Add missing ISC_LANG_ENDDECLS to <dns/tsec.h>. [RT #28956] 2012-04-12 19:17:29 +10:00
Tinderbox User
5771a59496 update copyright notice 2012-04-11 23:45:30 +00:00
Mark Andrews
f0c93bef30 3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
3305.   [func]          Add wire format lookup method to sdb. [RT #28563]
2012-04-11 12:33:08 +10:00
Mark Andrews
a9d6f26285 3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps. [RT #28571] 2012-04-11 10:47:37 +10:00
Mark Andrews
bf07be5e5a 3302. [bug] dns_dnssec_findmatchingkeys could fail to find
keys if the zone name contained character that
                        required special mappings. [RT #28600]
2012-03-30 12:08:02 +11:00
Mark Andrews
f80c9db2b5 3300. [bug] Named could die if gssapi was enabled in named.conf
but was not compiled in. [RT #28338]
2012-03-29 09:54:40 +11:00
Mark Andrews
183a1f9e79 3299. [bug] Make SDB handle errors from database drivers better.
[RT #28534]
2012-03-28 10:33:20 +11:00
Evan Hunt
29ae661890 prep for 9.8.2 release 2012-03-22 12:20:00 -07:00
Mark Andrews
b7d952e44f 3298. [bug] Named could dereference a NULL pointer in
zmgr_start_xfrin_ifquota if the zone was being removed.
                        [RT #28419]
2012-03-22 12:41:55 +11:00
Mark Andrews
ff0277bbcf 3297. [bug] Named could die on a malformed master file. [RT #28467] 2012-03-15 12:11:05 +11:00
Tinderbox User
1ceec0a211 update copyright notice 2012-03-10 23:45:31 +00:00
Evan Hunt
c95beeb07f set $Id$ 2012-03-07 08:19:24 -08:00
Tinderbox User
91f0609aae regen v9_8 2012-03-07 01:54:34 +00:00
Evan Hunt
3997b6bcbf add gitignore, remove cvsignore 2012-03-03 23:33:18 -08:00
Mark Andrews
c446b02d68 dns_zone_synckeyzone 2012-02-24 03:58:24 +00:00
Automatic Updater
755858999f update copyright notice 2012-02-22 23:46:36 +00:00
Evan Hunt
15601edb93 3286. [bug] Managed key maintenance timer could fail to start
after 'rndc reconfig'. [RT #26786]
2012-02-22 00:33:33 +00:00
Automatic Updater
b0b4f4c219 update copyright notice 2012-02-15 21:16:03 +00:00
Mark Andrews
dd0b839a76 3285. [bug] val-frdataset was incorrectly disassociated in
proveunsecure after calling startfinddlvsep.
                        [RT #27928]
2012-02-15 21:03:20 +00:00
Mark Andrews
6a6891d5ed 2x POST(locktype); 2012-02-15 12:32:50 +00:00
Mark Andrews
e1c47cd778 3284. [bug] Address race conditions with the handling of
rbtnode.deadlink. [RT #27738]
2012-02-15 02:02:55 +00:00
Automatic Updater
18ddc00419 update copyright notice 2012-02-14 23:46:30 +00:00
Mark Andrews
29d3240787 extend:
3282.   [bug]           Restrict the TTL of NS RRset to no more than that
                        of the old NS RRset when replacing it.
                        [RT #27792] [RT #27884]
2012-02-14 00:25:41 +00:00
Mark Andrews
2924a2aef5 3283. [bug] Raw zones with with more than 512 records in a RRset
failed to load. [RT #27863]
2012-02-14 00:10:17 +00:00
Automatic Updater
38841ea996 update copyright notice 2012-02-09 23:46:25 +00:00
Mark Andrews
256948c153 3282. [bug] Restrict the TTL of NS RRset to no more than that
of the old NS RRset when replacing it. [RT #27792]
2012-02-09 21:01:48 +00:00
Automatic Updater
7779587d64 update copyright notice 2012-02-07 23:46:41 +00:00
Mark Andrews
6f56ce1a4f 3281. [bug] SOA refresh queries could be treated as cancelled
despite succeeding over the loopback interface.
                        [RT #27782]
2012-02-07 19:52:23 +00:00
Mark Andrews
cc52242055 3274. [bug] Log when a zone is not reusable. Only set loadtime
on successful loads.  [RT #27650]
2012-01-31 22:31:46 +00:00
Mark Andrews
e4facd74b6 Add comment describing LIBINTERFACE values per branch 2012-01-30 00:23:54 +00:00