Ondřej Surý
51286ec006
Add unreachable.spatch coccinelle recipe and run it in precheck CI phase
2018-12-21 09:29:47 +01:00
Matthijs Mekking and Ondřej Surý
0e9a8da68c
Replace DSA with Reserved algorithm
...
(cherry picked from commit 17cdde1e56 )
2018-12-20 04:50:08 -05:00
Matthijs Mekking and Ondřej Surý
9f81119c02
Add dnssec-signzone tests with unsupported alg
...
dnssec-signzone should sign a zonefile that contains a DNSKEY record
with an unsupported algorithm.
(cherry picked from commit 6d976b37c1 )
(cherry picked from commit 8619318a1e6207e487438a93bd7a620967091347)
2018-12-20 04:50:08 -05:00
Mark Andrews
7aecb8b1fd
pass the correct object to cfg_obj_log
...
(cherry picked from commit 53a33f7365 )
2018-12-15 09:38:42 +11:00
Mark Andrews
637e3c4c4b
check that DNSKEY and other occluded data are excluded from the delegating bitmap
...
(cherry picked from commit 7e4b82103b )
2018-12-14 14:44:18 +11:00
Mark Andrews
ccac107ded
verify that auto-dnssec maintain generates and signs NSEC3 records with DNAME at the apex
...
(cherry picked from commit 6b470bbf42 )
2018-12-10 17:48:17 +11:00
Mark Andrews
4731ee6ae1
verify that dnssec-signzone generates NSEC3 records with DNAME at the apex
...
(cherry picked from commit 06e218c421 )
2018-12-10 17:29:29 +11:00
Evan Hunt
960a3906fe
checklibs needs to grep for the cfg_* prefix in lib/isccfg
...
(cherry picked from commit ab7356a7de )
2018-12-06 18:09:04 -08:00
Mark Andrews
f8dc30d18b
Properly detect bottom of zone when sign_a_node() is not called
...
(cherry picked from commit 9eec02a81f )
2018-12-07 12:20:09 +11:00
Mark Andrews
a74acbfd82
add reproducer for [GL #585 ]
...
(cherry picked from commit 0ac2a868bb )
2018-11-30 11:15:29 +11:00
Ondřej Surý and Evan Hunt
d196b5e493
Remove embedded atf-src and enforce atf >= 0.20 + kyua as execution engine
...
(cherry picked from commit de219b8555 )
2018-11-16 09:17:32 -08:00
Evan Hunt
2ed9b06ab8
remove ATF source code and Atffiles
...
(cherry picked from commit 8c4d50c6bc )
(cherry picked from commit 33f428efda )
2018-11-15 17:52:00 -08:00
Mark Andrews
1ebdcd4c34
update the list of functions that are triggers for requiring #include <isc/print.h> or "print_p.h"
...
(cherry picked from commit 07317db2ca )
2018-11-16 11:31:01 +11:00
Mark Andrews
173827f78d
fixup
...
(cherry picked from commit ba0e5ffc09 )
2018-11-13 07:50:49 +11:00
Evan Hunt and Mark Andrews
181c5442b9
convert result tests to use CMocka instead of ATF
...
(cherry picked from commit 471110933a )
2018-11-12 15:38:50 +11:00
Mark Andrews
af5a051e4d
check result tables are complete
...
(cherry picked from commit 4f04a79250 )
2018-11-12 15:32:58 +11:00
Mark Andrews
636e435e11
test require-server-cookie with rate-limit
...
(cherry picked from commit 164370102a )
2018-11-06 10:33:35 +11:00
Mark Andrews and Evan Hunt
9674fdcbfb
Add support for EID and NIMLOC
...
(cherry picked from commit fbab100426 )
2018-10-25 15:31:32 -07:00
Mark Andrews
1828ba389d
Add support for ATMA
...
(cherry picked from commit f9ceddd8ca )
2018-10-25 14:17:29 +11:00
Ondřej Surý
a586ae7793
Rename configure.in to configure.ac
2018-10-23 10:00:42 +02:00
Mark Andrews
052e68f3b2
add bin/tests/system/reclimit/ans4/ans.pl
...
(cherry picked from commit ae77468e63 )
2018-10-04 13:22:25 +10:00
Mark Andrews
837f1a4bc4
update util/copyrights
...
(cherry picked from commit 4aa6a118de )
2018-09-10 17:45:48 +10:00
Evan Hunt
0e98ea357a
update isc-logo.pdf to current logo version, remove isc-logo.eps
...
(cherry picked from commit ad9bf4c662 )
2018-09-07 16:01:40 -07:00
Ondřej Surý
b92a1791b3
Use isc/stdatomic.h to switch to __atomic builtins when compiling in C++ mode
2018-09-07 16:55:22 +02:00
Ondřej Surý and Ondřej Surý
a03e5b8791
Cleanup cruft in util/copyrights
...
(cherry picked from commit 65de91f512 )
2018-08-24 08:33:36 -04:00
Ondřej Surý and Ondřej Surý
367ed601c7
Make update_copyrights return error code when error is encountered during processing the files
...
(cherry picked from commit db3d69263d )
2018-08-24 08:33:36 -04:00
Mark Andrews
56f8303377
when filter-aaaa and dns64 are both configured a assertion failure could occur
...
(cherry picked from commit 1056376d10 )
2018-08-24 10:33:33 +10:00
Michał Kępień
cf7557dce0
Fix reloading inline-signed zones
...
While "rndc reload" causes dns_zone_asyncload() to be called for the
signed version of an inline-signed zone, the subsequent zone_load() call
causes the raw version to be reloaded from storage. This means that
DNS_ZONEFLG_LOADPENDING gets set for the signed version of the zone by
dns_zone_asyncload() before the reload is attempted, but zone_postload()
is only called for the raw version and thus DNS_ZONEFLG_LOADPENDING is
cleared for the raw version, but not for the signed version. This in
turn prevents zone maintenance from happening for the signed version of
the zone.
Until commit 749b3cacfc , this problem
remained dormant because DNS_ZONEFLG_LOADPENDING was previously
immediately, unconditionally cleared after zone loading was started
(whereas it should only be cleared when zone loading is finished or an
error occurs). This behavior caused other issues [1] and thus had to be
changed.
Fix reloading inline-signed zones by clearing DNS_ZONEFLG_LOADPENDING
for the signed version of the zone once the raw version reload
completes. Take care not to clear it prematurely during initial zone
load. Also make sure that DNS_ZONEFLG_LOADPENDING gets cleared when
zone_postload() encounters an error or returns early, to prevent other
scenarios from resulting in the same problem. Add comments aiming to
help explain code flow.
[1] see RT #47076
(cherry picked from commit 5431583971 )
2018-08-22 11:46:08 +02:00
Ondřej Surý
0a10dfa524
Add compatibility isc/boolean.h and isc/int.h headers
...
(cherry picked from commit 0dad73aafa )
2018-08-10 15:20:58 +02:00
Ondřej Surý
1084b40b44
Replace custom isc_boolean_t with C standard bool type
...
(cherry picked from commit 994e656977 )
(cherry picked from commit 884929400c )
2018-08-10 15:20:57 +02:00
Ondřej Surý
aaa76dc654
Replace custom isc_u?intNN_t types with C99 u?intNN_t types
...
(cherry picked from commit cb6a185c69 )
(cherry picked from commit d61e6a3111 )
2018-08-10 15:20:57 +02:00
Ondřej Surý and Ondřej Surý
9c253f6cc8
Don't check copyrights on .gitignore files
...
(cherry picked from commit 718c527e1d )
2018-07-12 12:18:33 -04:00
Mukund Sivaraman and Evan Hunt
a829bb3f1b
Add system tests for "tcp-self" update-policy
...
(cherry picked from commit a7e6a584ea )
2018-07-11 11:13:24 -07:00
Evan Hunt
3b97ce9f67
fixed an argument counting bug
...
(cherry picked from commit 458f273444 )
2018-07-10 21:04:25 -07:00
Ondřej Surý and Evan Hunt
4255be661a
Add --no-push and --push options and DONT_PUSH environment as default to control what happens after merge
...
(cherry picked from commit 23f69e5626 )
(cherry picked from commit e50988255c )
2018-07-10 21:04:25 -07:00
Ondřej Surý
02a698bea7
Add git-replay-merge.sh script to v9_11
2018-06-26 20:24:03 +02:00
Mark Andrews and Evan Hunt
c45fb6d92a
CHANGES, copyright
...
(cherry picked from commit f7d346357e )
2018-06-26 10:55:44 -07:00
Evan Hunt and Ondřej Surý
b330bcb8a1
add a regression test for default allow-recursion settings
2018-06-14 14:47:11 +02:00
Mukund Sivaraman and Mark Andrews
db12b1a9f9
Add system test
...
(cherry picked from commit a5933fa2bb )
2018-06-08 17:29:45 +10:00
Mark Andrews
1710e5cfca
add duplicate signature test
...
(cherry picked from commit 0db5b087ed )
(cherry picked from commit 1783fa5aba )
2018-06-06 17:21:29 +10:00
Mark Andrews and Evan Hunt
c0e69cc406
call util/check-changes in setup
2018-06-04 22:14:11 -04:00
Evan Hunt
e229ae6999
add prerequisite check
2018-06-04 17:41:22 -04:00
Mark Andrews and Evan Hunt
9448c4fd21
add system test for root-key-sentinel
...
(cherry picked from commit a23b305e6b )
(cherry picked from commit b9e6b124aa )
2018-06-04 17:41:22 -04:00
Mark Andrews and Evan Hunt
f9d19cab7f
4699. [func] Multiple cookie-secret clauses can now be specified.
...
The first one specified is used to generate new
server cookies. [RT #45672 ]
2018-06-04 13:16:28 -07:00
Evan Hunt
a05cd20767
restore accidentally deleted copyright line
2018-05-23 18:09:31 -07:00
Mark Andrews and Evan Hunt
33f8dd5f35
ensure there is a blank line before a changes entry and a release marker
...
(cherry picked from commit c91770549f )
(cherry picked from commit d87eb5804d )
2018-05-23 17:58:29 -07:00
Evan Hunt
884e8df7ca
copyrights
2018-05-23 09:55:41 -07:00
Evan Hunt
83a4273bd9
use the correct repository, and get archive by tag not hash
...
(cherry picked from commit 999e3233f3 )
2018-05-21 13:57:16 -07:00
Ondřej Surý
188526f41c
Remove $Id markers, Principal Author and Reviewed tags from the full source tree
...
(cherry picked from commit 55a10b7acd )
2018-05-11 14:25:15 +02:00
Michał Kępień and Evan Hunt
e787e54ea1
Add a framework for dns__zone_updatesigs() unit tests
...
Add a new ATF test, sigs_test, containing everything required to start
defining test cases for dns__zone_updatesigs(). The framework is
written in a way which ensures that changes to zone database applied by
any dns__zone_updatesigs() invocation are preserved between subsequent
checks.
(cherry picked from commit 1f10186476 )
(cherry picked from commit 3dde7c42db )
2018-05-10 00:04:55 -07:00