ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
29,205 Commits 589 Branches 805 Tags
5d8d65bfdceaeee7f5cf02e97d12981285b9575c
Commit Graph

29205 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ondřej Surý
5d8d65bfdc Add safeguard against the other usage of SO_REUSEPORT 
(cherry picked from commit 1c672367a0)
 2019-05-17 07:45:21 +02:00
Ondřej Surý
110beba49c Merge branch '984-remove-dead-code-in-pkcs11-keygen-c-v9_14' into 'v9_14' 
Resolve "Remove dead code in pkcs11-keygen.c"

See merge request isc-projects/bind9!1929
 2019-05-13 00:35:44 -04:00
Mark Andrews
b61d6cde83 remove dead code and unnecessary call to pkcs_C_GetAttributeValue 
(cherry picked from commit 2e4986e2c4)
 2019-05-13 11:22:33 +07:00
Ondřej Surý
f433202a5e Merge branch '899-remove-unspec-v9_14' into 'v9_14' 
Remove UNSPEC rrtype

See merge request isc-projects/bind9!1932
 2019-05-13 00:20:11 -04:00
Witold Kręcicki
0617148792 Remove UNSPEC rrtype 
(cherry picked from commit a8e2ca6f7d)
 2019-05-13 10:52:48 +07:00
Mark Andrews
7ad719f45a Merge branch '981-armv5-build-is-broken-v9_14' into 'v9_14' 
Resolve "armv5 build is broken"

See merge request isc-projects/bind9!1930
 2019-05-12 23:05:45 -04:00
Mark Andrews
4de58ee1c8 arm: just use the compiler's default yield support 
(cherry picked from commit f546769b8b)
 2019-05-13 12:19:26 +10:00
Tinderbox User
354cf1f66f Merge branch 'prep-release' into v9_14 v9.14.2 2019-05-10 04:51:34 +00:00
Tinderbox User
d7862ea81c prep 9.14.2 2019-05-10 04:51:22 +00:00
Evan Hunt
092b9d3cba Merge branch 'fix-changes' into 'v9_14' 
fix change number

See merge request isc-projects/bind9!1924
 2019-05-10 00:02:25 -04:00
Evan Hunt
3b7bf9ecac fix change number 2019-05-09 21:00:54 -07:00
Evan Hunt
ddb09b8046 Merge branch '997-make-ntas-work-with-validating-forwarders-v9_14' into 'v9_14' 
Make NTAs work with validating forwarders

See merge request isc-projects/bind9!1922
 2019-05-09 23:51:13 -04:00
Michał Kępień
9ca0c63f1f Add CHANGES entry 
5219.	[bug]		Negative trust anchors did not work with "forward only;"
			to validating resolvers. [GL #997]

(cherry picked from commit 5be7c6f4b3)
 2019-05-09 20:37:37 -07:00
Michał Kępień
c6bf43a821 Make NTAs work with validating forwarders 
If named is configured to perform DNSSEC validation and also forwards
all queries ("forward only;") to validating resolvers, negative trust
anchors do not work properly because the CD bit is not set in queries
sent to the forwarders.  As a result, instead of retrieving bogus DNSSEC
material and making validation decisions based on its configuration,
named is only receiving SERVFAIL responses to queries for bogus data.
Fix by ensuring the CD bit is always set in queries sent to forwarders
if the query name is covered by an NTA.

(cherry picked from commit 5e80488270)
 2019-05-09 20:37:37 -07:00
Evan Hunt
90c4e778d5 Merge branch '958-improve-message-about-python-ply-v9_14' into 'v9_14' 
Improve the error message about missing PLY Python package

See merge request isc-projects/bind9!1919
 2019-05-09 23:16:34 -04:00
Ondřej Surý
31fbfe56fd Improve the error message about missing PLY Python package 
Previously, only a message about missing Python was printed, which was
misleading to many users.  The new message clearly states that Python
AND PLY is required and prints basic instructions how to install PLY
package.

(cherry picked from commit 55b48700da)
 2019-05-09 19:55:53 -07:00
Ondřej Surý
c3162ac196 Merge branch 'ondrej/reproducible-build-v9_14' into 'v9_14' 
Make lib/dns/gen.c compatible with reproducible builds.

See merge request isc-projects/bind9!1912
 2019-05-09 05:26:34 -04:00
Ondřej Surý
c10f361f44 Make lib/dns/gen.c compatible with reproducible builds. 
The gen.c will now use SOURCE_DATE_EPOCH[1] if found in environment
to make the build more reproducible build friendly.

1. https://reproducible-builds.org/specs/source-date-epoch/

(cherry picked from commit c8cb612d39)
 2019-05-09 16:05:12 +07:00
Mark Andrews
ace60a3daa Merge branch '960-add-edns-client-tag-and-edns-server-tag-v9_14' into 'v9_14' 
Resolve "Add EDNS Client Tag and EDNS Server Tag"

See merge request isc-projects/bind9!1910
 2019-05-09 04:39:06 -04:00
Mark Andrews
07f8daf536 Recognise EDNS Client Tag and EDNS Server Tag 
(cherry picked from commit ee7cf180b3)
 2019-05-09 18:19:29 +10:00
Evan Hunt
b31a9ce95d Merge branch '868-fix-trusted-keys-handling-with-dnssec-validation-auto-v9_14' into 'v9_14' 
fix incorrect behavior mixing trusted-keys with validation auto

See merge request isc-projects/bind9!1904
 2019-05-09 01:19:23 -04:00
Evan Hunt
bfd646795d CHANGES, release notes 2019-05-08 21:59:35 -07:00
Evan Hunt
9b59425d06 warn about the use of trusted-keys and managed-keys for the same name 2019-05-08 21:59:35 -07:00
Mark Andrews
80d946e90e Merge branch '899-totext-fromtext-fuzz-v9_14' into 'v9_14' 
fuzz dns_rdata_fromwire

See merge request isc-projects/bind9!1907
 2019-05-08 21:00:08 -04:00
Mark Andrews
228a50a3f3 dns_rdata_fromwire_text fuzzer 
Fuzz input to dns_rdata_fromwire(). Then convert the result
to text, back to wire format, to multiline text, and back to wire
format again, checking for consistency throughout the sequence.

(cherry picked from commit 8ffdf6759e)
 2019-05-09 10:46:21 +10:00
Mark Andrews
0ae562e2af Merge branch '852-bind-returning-malformed-packet-error-when-sshfp-record-has-fingerprint-value-less-than-4-characters-v9_14' into 'v9_14' 
Resolve "Bind returning malformed packet error when sshfp record has fingerprint value less than 4 characters"

See merge request isc-projects/bind9!1905
 2019-05-08 18:59:55 -04:00
Mark Andrews
7dd4fa9da3 enforce known SSHFP finger print lengths 
(cherry picked from commit 1722728c80)
 2019-05-09 08:48:28 +10:00
Mark Andrews
b99c0f93b1 Merge branch '991-provide-ixfr-should-only-be-tests-on-tcp-clients-v9_14' into 'v9_14' 
Resolve "provide-ixfr should only be tested on TCP clients."

See merge request isc-projects/bind9!1900
 2019-05-07 00:28:40 -04:00
Mark Andrews
7098238039 add CHANGES 
(cherry picked from commit ba1d7f3a07)
 2019-05-07 13:43:15 +10:00
Mark Andrews
227b49a830 add test for 'provide-ixfr no;' ; add forensics support 
(cherry picked from commit d547465af5)
 2019-05-07 13:43:14 +10:00
Mark Andrews
8c7052e1cf only test provideixfr if the transport is TCP 
(cherry picked from commit 18c49853e3)
 2019-05-07 13:43:14 +10:00
Mark Andrews
ea9083647e Merge branch '1005-filter-aaaa-crash-in-9-14-1-v9_14' into 'v9_14' 
Resolve "filter-aaaa crash in 9.14.1"

See merge request isc-projects/bind9!1899
 2019-05-06 21:19:35 -04:00
Mark Andrews
0b6a698320 add CHANGES 
(cherry picked from commit bdc66eb5d9)
 2019-05-07 11:07:32 +10:00
Mark Andrews
a0feec3dbc lock accesses to hash table 
(cherry picked from commit 2483a8c76d)
 2019-05-07 11:07:32 +10:00
Mark Andrews
dbbbed29e9 clear pointer before hash table 
(cherry picked from commit 4886701c03)
 2019-05-07 11:07:32 +10:00
Mark Andrews
b01ebf8168 Merge branch '983-delv-www-isc-org-any-rtrace-multiline-leaks-memory-v9_14' into 'v9_14' 
Resolve "'delv www.isc.org ANY +rtrace +multiline' leaks memory"

See merge request isc-projects/bind9!1896
 2019-05-06 20:39:34 -04:00
Mark Andrews
83310317c7 add CHANGES note 
(cherry picked from commit ce5520b695)
 2019-05-07 10:27:18 +10:00
Mark Andrews
3ebf1ddeb2 check that delv -t any works 
(cherry picked from commit 6999bee7ef)
 2019-05-07 10:27:18 +10:00
Mark Andrews
0e6a620432 fix whitespace 
(cherry picked from commit 32ba5a0494)
 2019-05-07 10:27:18 +10:00
Mark Andrews
2ffdbe9eff return rdatasets when processing ANY queries in client_resfind 
(cherry picked from commit 127333c71f)
 2019-05-07 10:27:18 +10:00
Evan Hunt
9c9b9ab651 Merge branch 'each-win32-parallel-tests-v9_14' into 'v9_14' 
enable parallel system tests on windows

See merge request isc-projects/bind9!1894
 2019-05-06 19:13:26 -04:00
Evan Hunt
df9cfeaf1b CHANGES 
(cherry picked from commit d3cd0729c9)
 2019-05-06 15:54:31 -07:00
Evan Hunt
96e0e38fcd move the test lists into conf.sh.common 
there is now a common list of tests in conf.sh.common, with the
tests that are either unique to windows or to unix, or which are
enabled or disabled by configure or Configure, being listed in
separate variables in conf.sh.in and conf.sh.win32.

(cherry picked from commit a33237f070)
 2019-05-06 15:54:31 -07:00
Evan Hunt
5755465c2f enable parallel system tests on windows 
this moves the creation of "parallel.mk" into a separate shell script
instead of bin/tests/system/Makefile. that shell script can now be
executed by runall.sh, allowing us to make use of the cygwin "make"
command, which supports parallel execution.

(cherry picked from commit bbae24c140)
 2019-05-06 15:54:30 -07:00
Evan Hunt
9fe5acc36b Merge branch 'each-simplify-stats-v9_14' into 'v9_14' 
simplify the isc_stat structure to take avantage of atomics

See merge request isc-projects/bind9!1893
 2019-05-06 17:13:17 -04:00
Evan Hunt
6925c8136d CHANGES 
(cherry picked from commit f1aaf45085)
 2019-05-06 14:02:41 -07:00
Evan Hunt
fb58d23a94 simplify the isc_stat structure to take avantage of atomics 
(cherry picked from commit 4e5edb35e4)
 2019-05-06 14:02:41 -07:00
Mark Andrews
3e052caca8 Merge branch '1000-arm-doc-rpz-nodata-policy-says-ancount-1-v9_14' into 'v9_14' 
Resolve "ARM doc RPZ NODATA policy says ANCOUNT=1"

See merge request isc-projects/bind9!1890
 2019-05-06 04:05:38 -04:00
Mark Andrews
756bb201bd A NODATA response has ANCOUNT of 0 assuming no CNAME/DNAMES 
(cherry picked from commit 4889e06c3a)
 2019-05-06 17:53:42 +10:00
Mark Andrews
63fe63c8c5 Merge branch 'marka-fix-changes' into 'v9_14' 
move change 5190 above 9.14.1 release point.

See merge request isc-projects/bind9!1885
 2019-04-29 18:54:05 -04:00