Evan Hunt
5c8de9e2ae
[master] fix uninitialized memory in mem_test.c
2017-08-30 19:02:52 -07:00
Evan Hunt
45afdb2672
[master] remove default algorithm in dnssec-keygen
...
4594. [func] dnssec-keygen no longer uses RSASHA1 by default;
the signing algorithm must be specified on
the command line with the "-a" option. Signing
scripts that rely on the existing default behavior
will break; use "dnssec-keygen -a RSASHA1" to
repair them. (The goal of this change is to make
it easier to find scripts using RSASHA1 so they
can be changed in the event of that algorithm
being deprecated in the future.) [RT #44755 ]
2017-08-30 18:51:11 -07:00
Tinderbox User
2bfc294f0a
regen master
2017-08-31 01:11:54 +00:00
Tinderbox User
587f005032
update copyright notice / whitespace
2017-08-30 23:46:18 +00:00
Mark Andrews
e8ff51eb3e
update
2017-08-31 09:33:45 +10:00
Mark Andrews
89d841c16f
sort view_clauses
2017-08-31 08:40:33 +10:00
Mark Andrews
0aed466565
4693. [func] Synthesis of responses from DNSSEC-verified records.
...
Stage 1 covers NXDOMAIN synthesis from NSEC records.
This is controlled by synth-from-dnssec and is enabled
by default. [RT #40138 ]
2017-08-31 07:57:50 +10:00
Mark Andrews
c26370fc69
4692. [bug] Fix build failures with libressl introduced in 4676.
...
[RT #45879 ]
2017-08-30 17:11:20 +10:00
Tinderbox User
a5d6b4c4c8
regen master
2017-08-30 01:12:14 +00:00
Tinderbox User
731ec8ce9b
update copyright notice / whitespace
2017-08-29 23:46:16 +00:00
Tinderbox User
67a9cf9fa7
newcopyrights
2017-08-29 23:30:19 +00:00
Michał Kępień
efe7977c4d
[master] Add -4/-6 command line options to nsupdate and rndc
...
4691. [func] Add -4/-6 command line options to nsupdate and rndc.
[RT #45632 ]
2017-08-29 10:21:54 +02:00
Michał Kępień
d6814700de
[master] Ensure consistent handling of -4/-6 command line options in all tools
...
4690. [bug] Command line options -4/-6 were handled inconsistently
between tools. [RT #45632 ]
2017-08-29 10:19:38 +02:00
Mark Andrews
503223b800
fix changes number
2017-08-26 13:25:56 +10:00
Evan Hunt
391a3a2f20
[master] turn on minimal responses for CDS/CDNSKEY
...
4678. [cleanup] Turn on minimal responses for CDNSKEY and CDS in
addition to DNSKEY and DS. Thanks to Tony Finch.
[RT #45690 ]
2017-08-25 13:31:53 -07:00
Tinderbox User
07675caf4f
regen master
2017-08-25 01:10:48 +00:00
Tinderbox User
f562de3f71
update copyright notice / whitespace
2017-08-24 23:47:03 +00:00
Tinderbox User
72ab5d8a69
newcopyrights
2017-08-24 23:30:17 +00:00
Mark Andrews
07741d43c8
4688. [protocol] Check and display EDNS KEY TAG options (RFC 8145) in
...
messages. [RT #44804 ]
2017-08-25 08:38:19 +10:00
Mukund Sivaraman
af4b4bef7a
Refactor tracklines code ( #45126 )
2017-08-24 10:58:55 +05:30
Tinderbox User
2a08a599ee
regen master
2017-08-22 01:11:12 +00:00
Tinderbox User
a08f49ae17
update copyright notice / whitespace
2017-08-21 23:48:07 +00:00
Tinderbox User
7c29eaf91a
newcopyrights
2017-08-21 23:30:15 +00:00
Michał Kępień
330365566d
[master] Prevent dnssec-settime from printing a bogus warning
...
4686. [bug] dnssec-settime -p could print a bogus warning about
key deletion scheduled before its inactivation when a
key had an inactivation date set but no deletion date
set. [RT #45807 ]
2017-08-21 10:20:10 +02:00
Michał Kępień
5201b96d03
[master] Fix calculation of dates for a successor key
...
4685. [bug] dnssec-settime incorrectly calculated publication and
activation dates for a successor key. [RT #45806 ]
2017-08-21 09:55:36 +02:00
Michał Kępień
367fcd7454
[master] Prevent delv from sending bogus queries for provided server address
...
4684. [bug] delv could send bogus DNS queries when an explicit
server address was specified on the command line along
with -4/-6. [RT #45804 ]
2017-08-21 09:18:13 +02:00
Tinderbox User
5fbe52fbce
regen master
2017-08-18 01:11:45 +00:00
Tinderbox User
22eb446339
update copyright notice / whitespace
2017-08-17 23:46:21 +00:00
Tinderbox User
0a8e5c9db7
newcopyrights
2017-08-17 23:30:30 +00:00
Michał Kępień
1aa583b5a5
[master] Prevent nsupdate from immediately exiting on invalid user input in interactive mode
...
4683. [bug] Prevent nsupdate from immediately exiting on invalid
user input in interactive mode. [RT #28194 ]
2017-08-17 08:29:12 +02:00
Mark Andrews
615b961e02
4682. [bug] Don't report errors on records below a DNAME.
...
[RT #44880 ]
2017-08-17 15:49:59 +10:00
Tinderbox User
7655cd1fe5
regen master
2017-08-17 01:10:36 +00:00
Mark Andrews
1fe9f65dbb
add more details
2017-08-16 13:22:35 +10:00
Tinderbox User
7df675188c
regen master
2017-08-16 01:10:34 +00:00
Tinderbox User
6a14924454
update copyright notice / whitespace
2017-08-15 23:47:19 +00:00
Tinderbox User
f034916801
newcopyrights
2017-08-15 23:30:14 +00:00
Mark Andrews
52fd57c989
4681. [bug] Log messages from the validator now include the
...
associated view unless the view is "_default/IN"
or "_dnsclient/IN". [RT #45770 ]
2017-08-16 09:29:20 +10:00
Mark Andrews
e85a2c5624
'uname -o' is not portable, suppress error message; remove spurious cat tmp.out; provide forensics for failure analysis
2017-08-15 18:02:24 +10:00
Tinderbox User
9ce1a8e93b
regen master
2017-08-15 01:12:22 +00:00
Tinderbox User
1c3b9b7666
update copyright notice / whitespace
2017-08-14 23:48:00 +00:00
Tinderbox User
786b6c5517
newcopyrights
2017-08-14 23:30:11 +00:00
Mark Andrews
bf1ab06a48
request-nsid/request-sit out of order
2017-08-14 23:47:30 +10:00
Michał Kępień
b55ec74eaa
[master] Fix master address failover when GSS-API is used
...
4680. [bug] Fix failing over to another master server address when
nsupdate is used with GSS-API. [RT #45380 ]
2017-08-14 15:00:25 +02:00
Michał Kępień
877c264edc
[master] Make dnssec-verify suggest using -o when appropriate
...
4679. [cleanup] Suggest using -o when dnssec-verify finds a SOA record
not at top of zone and -o is not used. [RT #45519 ]
2017-08-14 14:01:27 +02:00
Mark Andrews
00f067539a
sort options
2017-08-14 21:40:59 +10:00
Mark Andrews
60fd71ec66
alphabetize options_clauses
2017-08-14 07:22:20 +00:00
Mark Andrews
9697129ae2
tcp-only and tcp-keepalive where out of alphabetical order
2017-08-14 07:00:02 +00:00
Mark Andrews
fa7bacca7d
sit-secret was out of alphabetical order
2017-08-14 06:50:24 +00:00
Mark Andrews
cc88df4f01
4678. [bug] geoip-use-ecs has the wrong type when geoip support
...
is disabled at configure time. [RT #45763 ]
2017-08-14 06:18:26 +00:00
Mark Andrews
5e9d9aa9d0
use isc_thread_self instead of pthread_self
2017-08-14 13:51:20 +10:00