Commit Graph

8087 Commits

Author SHA1 Message Date
Evan Hunt
59c9c71f36 2929. [bug] Improved handling of GSS security contexts:
- added LRU expiration for generated TSIGs
			 - added the ability to use a non-default realm
                         - added new "realm" keyword in nsupdate
			 - limited lifetime of generated keys to 1 hour
			   or the lifetime of the context (whichever is
			   smaller)
			[RT #19737]
2010-07-09 05:14:08 +00:00
Mark Andrews
f0eda70e86 isc_boolean_t -> dns_v4_aaaa_t 2010-06-26 05:31:17 +00:00
Mark Andrews
5a7f05ee3c 2925. [bug] Named failed to accept uncachable negative responses
from insecure zones. [RT# 21555]
2010-06-25 23:52:09 +00:00
Automatic Updater
c65ab74d31 update copyright notice 2010-06-25 23:46:33 +00:00
Mark Andrews
9777316c64 2924. [func] 'rndc secroots' dump a combined summary of the
current managed keys combined with trusted keys.
                        [RT #20904]
2010-06-25 03:51:07 +00:00
Automatic Updater
5b17e46285 update copyright notice 2010-06-23 23:46:36 +00:00
Mark Andrews
773efb00d2 2921. [bug] The resolver could attempt to destroy a fetch context
to soon.  [RT #19878]
2010-06-23 01:50:55 +00:00
Automatic Updater
275c562ce7 update copyright notice 2010-06-22 23:46:34 +00:00
Mark Andrews
13ce1be5d3 2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
to IPv4 clients.  New acl 'filter-aaaa' (default any).
2010-06-22 04:04:22 +00:00
Mark Andrews
21879ffd57 AAAA not A 2010-06-18 05:37:15 +00:00
Mark Andrews
e2edd40cb4 2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET. 2010-06-18 02:13:01 +00:00
Automatic Updater
5c24ec251e update copyright notice 2010-06-09 23:49:43 +00:00
Automatic Updater
02bd4cd4b4 missing @ 2010-06-09 13:24:41 +00:00
Mark Andrews
8b99611ece missing @ 2010-06-09 09:02:31 +00:00
Mark Andrews
a5840f0a32 2915. [cleanup] Be smarter about which objects we attempt to compile
based on configure options. [RT #21444]
2010-06-09 01:51:39 +00:00
Automatic Updater
4cff55249c update copyright notice 2010-06-08 23:49:12 +00:00
Mark Andrews
1cc4291e10 2913. [func] Add pkcs#11 system tests. [RT #20784] 2010-06-07 03:45:36 +00:00
Automatic Updater
db8dce00b0 update copyright notice 2010-06-04 23:50:01 +00:00
Mark Andrews
2b631b5d6f remove trailing comma 2010-06-04 00:14:53 +00:00
Automatic Updater
4a885f26a0 update copyright notice 2010-06-03 23:49:23 +00:00
Mark Andrews
3b239c7b3b 2912. [func] Windows clients don't like UPDATE responses that clear
the zone section. [RT #20986]
2010-06-03 05:27:59 +00:00
Mark Andrews
838ae5b351 2910. [func] Sanity check Kerberos credentials. [RT #20986] 2010-06-03 02:33:48 +00:00
Mark Andrews
a2c8607929 2909. [bug] named-checkzone -p could die if "update-policy local;"
was specified in named.conf. [RT #21416]
2010-06-02 01:10:06 +00:00
Mark Andrews
8e187acb28 2908. [bug] It was possible for re-signing to stop after removing
a DNSKEY. [RT #21384]
2010-06-02 01:00:28 +00:00
Mark Andrews
db3ae6b658 2907. [bug] The export version of libdns had undefined references.
[RT #21444]
2010-06-02 00:41:34 +00:00
Mark Andrews
5b02faec3c 9.7.1rc1 2010-06-01 01:02:33 +00:00
Mark Andrews
e68aa47d4c 2906. [bug] Address RFC 5011 implementation issues. [RT #20903] 2010-05-28 03:18:52 +00:00
Mark Andrews
d544482827 2904. [bug] When using DLV, sub-zones of the zones in the DLV,
could be incorrectly marked as insecure instead of
                        secure leading to negative proofs failing.  This was
                        a unintended outcome from change 2890. [RT# 21392]
2010-05-26 06:30:43 +00:00
Mark Andrews
43641877ac 2903. [bug] managed-keys-directory missing from namedconf.c.
[RT #21370]
2010-05-21 14:13:48 +00:00
Mark Andrews
c4700949e7 silence compiler, explict coversion 2010-05-19 09:51:31 +00:00
Mark Andrews
40be22dada 2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316] 2010-05-19 07:13:53 +00:00
Mark Andrews
756f9eb63a 2900. [bug] The placeholder negative caching element was not
properly constructed triggering a INSIST in
                        dns_ncache_towire(). [RT #21346]
2010-05-19 06:41:05 +00:00
Mark Andrews
bf80fd4841 silence compile warnings, explict conversion 2010-05-18 06:29:32 +00:00
Mark Andrews
8438d8e0b4 9.7.1b1 2010-05-18 06:16:05 +00:00
Automatic Updater
e08a20aa98 update copyright notice 2010-05-18 02:35:12 +00:00
Mark Andrews
0f51e50b08 9.7.1b1 2010-05-18 02:29:00 +00:00
Mark Andrews
0517d21ebd 2897. [bug] NSEC3 chains could be left behind when transitioning
to insecure. [RT #21040]
2010-05-18 01:40:35 +00:00
Mark Andrews
78f9a0a2b8 2896. [bug] "rndc sign" failed to properly update the zone
when adding a DNSKEY for publication only. [RT #21045]
2010-05-18 01:04:26 +00:00
Automatic Updater
71324ae046 update copyright notice 2010-05-14 23:49:21 +00:00
Mark Andrews
812b6d8d11 2893. [bug] Improve managed keys support. New named.conf option
managed-keys-directory. [RT #20924]
2010-05-14 04:49:40 +00:00
Mark Andrews
d133eb632a 2892. [bug] Handle REVOKED keys better. [RT #20961] 2010-05-14 04:41:12 +00:00
Mark Andrews
0463ffd804 2890. [bug] Handle the introduction of new trusted-keys and
DS, DLV RRsets better. [RT #21097]
2010-05-14 00:16:32 +00:00
Automatic Updater
5a77c5e18e update copyright notice 2010-05-13 23:49:11 +00:00
Mark Andrews
bd72d2c9fc 2889. [bug] Elements of the grammar where not properly reported.
[RT #21046]
2010-05-13 03:18:55 +00:00
Mark Andrews
8d5279c34e typo in threaded build, silence compiler warning 2010-05-13 03:09:56 +00:00
Mark Andrews
f93222ee85 2888. [bug] Only the first EDNS option was displayed. [RT #21273] 2010-05-13 00:42:26 +00:00
Mark Andrews
92a7fc7c7c 2887. [bug] Report the keytag times in UTC in the .key file,
local time is presented as a comment within the
                        comment.  [RT #21223]

2886.   [bug]           ctime() is not thread safe. [RT #21223]
2010-05-12 23:53:33 +00:00
Automatic Updater
7625198d01 update copyright notice 2010-05-12 23:50:01 +00:00
Mark Andrews
fe3db97ee9 2884. [bug] Insufficient valadation in dns_name_getlabelsequence().
[RT #21283]
2010-05-12 05:44:01 +00:00
Mark Andrews
bb828e2c51 2882. [bug] Remove memory context from list of active contexts
before clearing 'magic'. [RT #21274]
2010-05-12 00:49:31 +00:00