Witold Kręcicki
55a12a4136
Changes
2018-10-29 19:22:31 +00:00
Witold Kręcicki
37df3ca8b6
Style nits
2018-10-29 19:22:10 +00:00
Witold Kręcicki
08460c8cb2
Don't do qname minimization when forwarding; Avoid some intermittent errors in qmin tests caused by timing
2018-10-29 19:22:10 +00:00
Witold Kręcicki
b4ca282589
Test for #361 - forwarding breaks with qname minimization
2018-10-29 19:22:10 +00:00
Evan Hunt
68f1e8e940
Merge branch '642-missing-include' into 'master'
...
added stdatomic.h and md.h
Closes #642
See merge request isc-projects/bind9!936
2018-10-29 14:35:23 -04:00
Evan Hunt
dfe5d3330c
added stdatomic.h and md.h
2018-10-29 11:26:38 -07:00
Evan Hunt
ea9a5e3da4
Merge branch '641-unquoted-rpz' into 'master'
...
allow unquoted response-policy zone names
Closes #641
See merge request isc-projects/bind9!926
2018-10-29 12:41:35 -04:00
Evan Hunt
507230aa88
allow unquoted response-policy zone names
2018-10-29 12:25:35 -04:00
Mark Andrews
c6efbe5d26
Merge branch '635-unchecked-return-in-query-c' into 'master'
...
Resolve "unchecked return in query.c"
Closes #635
See merge request isc-projects/bind9!925
2018-10-29 03:21:26 -04:00
Mark Andrews
e11cfafff2
always call RUNTIME_CHECK(result == ISC_R_SUCCESS); for dns_rdata_tostruct
2018-10-29 03:13:12 -04:00
Mark Andrews
276858d88f
Merge branch '553-socket-c-2171-unexpected-error' into 'master'
...
Resolve "socket.c:2171: unexpected error"
Closes #553
See merge request isc-projects/bind9!924
2018-10-29 02:25:37 -04:00
Mark Andrews
561b780ba0
Only set IPV6_USE_MIN_MTU on IPv6.
2018-10-29 16:49:33 +11:00
Mark Andrews
1454665d70
Merge branch '624-lib-dns-dnstap_test-totext-does-not-work-well-with-softhsm-pkcs11' into 'master'
...
Resolve "lib/dns/dnstap_test:totext does not work well with SoftHSM PKCS11"
Closes #624
See merge request isc-projects/bind9!921
2018-10-29 01:25:05 -04:00
Mark Andrews
1cf1254051
Initalize TZ environment variable before calling dns_test_begin in dnstap_test.
2018-10-29 16:15:52 +11:00
Ondřej Surý
87b042a48d
Merge branch '639-fix-freebsd-build' into 'master'
...
avoid makefile conditional
Closes #639
See merge request isc-projects/bind9!920
2018-10-28 10:18:47 -04:00
Evan Hunt
ff747365db
avoid makefile conditional
2018-10-26 23:34:34 -07:00
Ondřej Surý
241594299b
Merge branch '22-remove-last-traces-of-already-removed-algorithms' into 'master'
...
Remove various leftovers for algorithms that have been already removed from BIND
See merge request isc-projects/bind9!901
2018-10-26 06:01:54 -04:00
Ondřej Surý
58cfb2a18a
Convert the bin/tests/optional/sig0_test.c to use RSASHA1 instead of DSA
2018-10-26 11:50:11 +02:00
Ondřej Surý
8a6c37faa2
Remove last traces of ECCGOST algorithm
2018-10-26 11:50:11 +02:00
Ondřej Surý
d6c50674bb
Remove last traces of DSA and NSEC3DSA algorithm, but restore the algnumber -> name mapping
2018-10-26 11:50:11 +02:00
Ondřej Surý
83dbe04bf3
Update dst_test.c to use ECDSA256 and RSASHA256 as test algorithms
2018-10-26 11:50:11 +02:00
Ondřej Surý
fbb08b30b8
Remove traces of DST_ALG_ECC which is now just Reserved in IANA registry
2018-10-26 11:50:11 +02:00
Ondřej Surý
8efd394c80
Remove last bits of PKCS#11 DH support that has been already removed
2018-10-26 11:50:11 +02:00
Witold Krecicki
cc8c79bb69
Merge branch 'wpk-statschannel-test-timing' into 'master'
...
statschannel test fix
See merge request isc-projects/bind9!909
2018-10-26 05:12:34 -04:00
Witold Kręcicki
b338e6dd21
CHANGES
2018-10-26 08:38:00 +00:00
Witold Kręcicki
5979471dc7
statschannel test: try 5 times to check if compressed and regular output of statschannel is the same - some counters can change, minimize risk of bad timing
2018-10-26 08:36:48 +00:00
Witold Krecicki
7ef2467e6a
Merge branch 'wpk-non-crypto-secure-cookies' into 'master'
...
Cookies with non-crypto-secure random
See merge request isc-projects/bind9!887
2018-10-26 04:03:55 -04:00
Witold Kręcicki
6cd89d5e9f
Use non-cryptographically-secure PRNG to generate a nonce for cookies.
...
Rationale: the nonce here is only used to make sure there is a low
probability of duplication, according to section B.2 of RFC7873.
It is only 32-bit, and even if an attacker knows the algorithm used
to generate nonces it won't, in any way, give him any platform to
attack the server as long as server secret used to sign the
(nonce, time) pair with HMAC-SHA1 is secure.
On the other hand, currently, each packet sent requires (unnecessarily)
a CS pseudo-random number which is ineffective.
2018-10-26 07:54:58 +00:00
Mark Andrews
9ecb0a9168
Merge branch '633-resource-leak-in-hmac_fromdns' into 'master'
...
Resolve "resource leak in hmac_fromdns"
Closes #633
See merge request isc-projects/bind9!918
2018-10-26 03:04:15 -04:00
Mark Andrews
3219a873a9
free hkey on error
2018-10-26 17:46:15 +11:00
Ondřej Surý
bd3163578b
Merge branch '632-check-for-individual-openssl-functions' into 'master'
...
Check for individual OpenSSL functions instead of relying on version number
Closes #632
See merge request isc-projects/bind9!916
2018-10-26 01:05:34 -04:00
Ondřej Surý
eb603cb021
Check for individual OpenSSL functions instead of relying on version number
2018-10-26 06:15:51 +02:00
Mark Andrews
7e2026a50b
Merge branch '632-evp_cipher_ctx_free-and-evp_cipher_ctx_new-exist-in-openssl-1-0-1' into 'master'
...
Resolve "EVP_CIPHER_CTX_free and EVP_CIPHER_CTX_new exist in OpenSSL 1.0.1"
Closes #632
See merge request isc-projects/bind9!915
2018-10-25 20:30:52 -04:00
Mark Andrews
632a0ae10b
EVP_CIPHER_CTX_new and EVP_CIPHER_CTX_free exist in OpenSSL 1.0.1
2018-10-26 10:01:14 +11:00
Evan Hunt
826c3ddc5b
Merge branch '626-implement-eid-and-nimloc' into 'master'
...
Resolve "Implement EID and NIMLOC"
Closes #626
See merge request isc-projects/bind9!895
2018-10-25 18:29:29 -04:00
Mark Andrews
fbab100426
Add support for EID and NIMLOC
2018-10-25 15:20:33 -07:00
Evan Hunt
343333f5c4
Merge branch '627-check-that-gid-uid-and-uinfo-can-be-loaded-using-unknown-record-format' into 'master'
...
Resolve "Check that GID, UID and UINFO can be loaded using unknown record format."
Closes #627
See merge request isc-projects/bind9!896
2018-10-25 16:34:09 -04:00
Mark Andrews
eb7ca65b78
GID, UID and UINFO could not be loaded using unknown record format.
2018-10-25 13:00:32 -07:00
Ondřej Surý
89b186b604
Merge branch '629-fix-isc_md-on-windows' into 'master'
...
Resolve "Windows Build Errors After !355 (Refactor Message Digest and HMAC API)"
Closes #629
See merge request isc-projects/bind9!908
2018-10-25 15:20:48 -04:00
Ondřej Surý
c3846425f3
Don't include inet/arpa.h on Windows
2018-10-25 20:59:48 +02:00
Ondřej Surý
68b49d87b2
Add md.h and md.c to Windows build files
2018-10-25 20:59:48 +02:00
Ondřej Surý
99d919c90f
Merge branch '630-dont-enable-fips-mode-on-windows' into 'master'
...
Disable FIPS mode on Windows
Closes #630
See merge request isc-projects/bind9!905
2018-10-25 14:58:26 -04:00
Ondřej Surý
6aae193ded
Disable FIPS mode on Windows
2018-10-25 14:47:44 -04:00
Ondřej Surý
25805beb29
Merge branch 'fix-openssl-mctx' into 'master'
...
correctly attach and detach memory context
See merge request isc-projects/bind9!906
2018-10-25 14:47:20 -04:00
Evan Hunt
c852810fbc
correctly attach and detach memory context
2018-10-25 11:27:28 -07:00
Ondřej Surý
cbdb69f4cc
Merge branch 'update-release-checklist-merge-prep-commit' into 'master'
...
Update release checklist: merge prep commit
See merge request isc-projects/bind9!902
2018-10-25 08:36:44 -04:00
Michał Kępień
88f346a952
Update release checklist: merge prep commit
2018-10-25 14:00:21 +02:00
Michał Kępień
313d2b836f
Merge branch '427-list-zones-in-the-web-interface' into 'master'
...
Display a per-view list of zones in the web interface
Closes #427
See merge request isc-projects/bind9!547
2018-10-25 04:39:26 -04:00
Michał Kępień
d9c4068cc3
Add CHANGES entry
...
5059. [bug] Display a per-view list of zones in the web interface.
[GL #427 ]
2018-10-25 10:03:03 +02:00
Michał Kępień
aeda3f389e
Display a per-view list of zones in the web interface
...
The XSL stylesheet used by the web interface does not currently include
any element which would cause a list of zones configured in each view to
be displayed, making the "Zones" section of the web interface empty
unless some zone has been configured with "zone-statistics full;" and
queried. Since this can be confusing, modify the XSL stylesheet so that
a list of zones configured in each view is displayed in the web
interface.
2018-10-25 10:03:03 +02:00