Commit Graph

7189 Commits

Author SHA1 Message Date
Mark Andrews
5ed673c0d2 4837. [bug] dns_update_signatures{inc} (add_sigs) was not
properly determining if there were active KSK and
                        ZSK keys for a algorithm when update-check-ksk is
                        true (default) leaving records unsigned. [RT #46743]

(cherry picked from commit 196e01da5f)
(cherry picked from commit bf459d24a1)
(cherry picked from commit 5623f65cc4)
2017-12-04 10:09:45 +11:00
Tinderbox User
03674299c7 update copyright notice / whitespace 2017-11-30 23:50:30 +00:00
Evan Hunt
17122341fe [v9_9] fix "allow-transfer" inheritance and clean up ACL configuration
4836.	[bug]		Zones created using "rndc addzone" could
			temporarily fail to inherit an "allow-transfer"
			ACL that had been configured in the options
			statement. [RT #46603]

(cherry picked from commit e197a2bd15)
(cherry picked from commit f53e0bda46)
(cherry picked from commit 9dfff4e378)
2017-11-30 13:34:53 -08:00
Tinderbox User
230916c184 update copyright notice / whitespace 2017-11-27 23:50:30 +00:00
Michał Kępień
a59eb10b23 [v9_9] Stabilize nsupdate system test [RT #46673]
(cherry picked from commit 00ff44c7c2)
2017-11-27 10:16:09 +01:00
Mark Andrews
abbc4b2c4f 4817. [cleanup] Use DNS_NAME_INITABSOLUTE and DNS_NAME_INITNONABSOLUTE.
[RT #45433]
2017-11-27 13:30:58 +11:00
Tinderbox User
d9d5eb26d9 update copyright notice / whitespace 2017-11-23 23:48:18 +00:00
Michał Kępień
2a44ffeed8 [v9_9] Disable parallel make inside bin/confgen/ and bin/named/
4826.	[cleanup]	Prevent potential build failures in bin/confgen/ and
			bin/named/ when using parallel make. [RT #46648]

(cherry picked from commit 600e425eb2)
2017-11-23 11:47:15 +01:00
Tinderbox User
f2f3b68ac7 update copyright notice / whitespace 2017-11-21 23:47:58 +00:00
Michał Kępień
bbfa83da40 [v9_9] Refactor reclimit system test
4823.	[test]		Refactor reclimit system test to improve its
			reliability and speed. [RT #46632]

(cherry picked from commit 1fd4803e84)
2017-11-21 10:34:03 +01:00
Tinderbox User
7fed20ed8f update copyright notice / whitespace 2017-11-16 23:48:10 +00:00
Michał Kępień
a3b4977931 [v9_9] Stabilize logfileconfig system test
4818.	[test]		The logfileconfig system test could intermittently
			report false negatives on some platforms. [RT #46615]

(cherry picked from commit 169ce30bf7)
2017-11-16 08:17:18 +01:00
Tinderbox User
ec547a9877 update copyright notice / whitespace 2017-11-08 23:48:10 +00:00
Michał Kępień
14e1eac55c [v9_9] Do not NOTIFY back the master view from slave views in notify system test
This prevents a Linux kernel bug discussed in RT #32355 from being
triggered and thus makes "checking notify to multiple views using tsig"
stable.

(cherry picked from commit 27bf48327c)
2017-11-08 09:22:31 +01:00
Mark Andrews
38400d2bec 4810. [test] The chain system test failed if the IPv6 interfaces
were not configured. [RT #46508]

(cherry picked from commit c652213857)
2017-11-08 10:18:47 +11:00
Tinderbox User
08aafe4640 regen v9_9 2017-11-03 01:32:51 +00:00
Tinderbox User
f8a2d1a7c9 update copyright notice / whitespace 2017-11-02 23:48:31 +00:00
Evan Hunt
2534b26732 [v9_9] removed references to obsolete versions in documentation 2017-11-01 22:21:00 -07:00
Mark Andrews
6909f46b2d fix merge error
(cherry picked from commit 48865bf022)
2017-11-01 11:58:28 +11:00
Mark Andrews
3b9332a20d 4804. [port] win32: access() does not work on directories as
required by POSIX.  Supply a alternative in
                        isc_file_isdirwritable. [RT #46394]
2017-11-01 09:47:52 +11:00
Evan Hunt
5f0cc4be38 [v9_9] copyrights 2017-10-29 16:44:31 -07:00
Mark Andrews
e1dd822fc3 number tests 2017-10-30 08:32:18 +11:00
Mark Andrews
24592f9f78 Add system tests and remove redundent logging from:
4801.   [func]          'dnssec-lookaside auto;' and 'dnssec-lookaside .
                        trust-anchor dlv.isc.org;' now elicit warnings rather
                        than being fatal configuration errors. [RT #46410]

(cherry picked from commit f5e1b555c5)
2017-10-30 08:20:51 +11:00
Mark Andrews
d6802cfd42 4790. [bug] nsupdate could trigger a require when sending a
update to the second address of the server.
                        [RT #45731]

(cherry picked from commit 2bbca9594f)
2017-10-26 00:31:36 +11:00
Evan Hunt
dcaf355f00 [v9_9] log when update-policy local gets a key match from a remote host
4788.	[cleanup]	When using "update-policy local", log a warning
			when an update matching the session key is received
			from a remote host. [RT #46213]

- this completes change #4762.
2017-10-25 01:09:41 -07:00
Mark Andrews
42f1b7e3e8 read dig.out.ns3.test$n rather than dig.out.ns2.test$n
(cherry picked from commit 80739779fc)
2017-10-25 15:03:28 +11:00
Tinderbox User
c53d3336d6 update copyright notice / whitespace 2017-10-24 23:53:22 +00:00
Mark Andrews
8221d208a7 4783. [test] dnssec: 'check that NOTIFY is sent at the end of
NSEC3 chain generation failed' required more time
                        on some machines for the IXFR to complete. [RT #46388]

(cherry picked from commit 969d923536)
2017-10-25 09:22:28 +11:00
Evan Hunt
3dbc4979c6 [v9_9] fix merge error; missing hunk from change 4780
(cherry picked from commit 4d39bffd95)
2017-10-24 10:10:04 -07:00
Mark Andrews
6455eec8e2 remove redundent reconfig; number tests 2017-10-24 14:46:27 +11:00
Evan Hunt
0a5b0a447e [v9_9] omit NS from authority section if it was in answer
4780.	[bug]		When answering ANY queries, don't include the NS
			RRset in the authority section if it was already
			in the answer section. [RT #44543]

(cherry picked from commit b7b76d6b85)
(cherry picked from commit 13435af49a)
2017-10-23 19:38:29 -07:00
Mark Andrews
ab342443aa report if named.run or named.memstats not removed after successful test
(cherry picked from commit 5bead588b7)
2017-10-24 12:48:51 +11:00
Evan Hunt
18c1e4dc98 [v9_9] clean up a redundancy
4777.	[cleanup]	Removed a redundant call to configure_view_acl().
			[RT #46369]

(cherry picked from commit 89636d8f30)
(cherry picked from commit a06198688f)
(cherry picked from commit 33ab321a97)
2017-10-23 11:13:18 -07:00
Evan Hunt
9c84f65183 [v9_9] test for Net::DNS::Nameserver in prereq.sh
(cherry picked from commit 475c51cce0)
2017-10-21 00:29:27 -07:00
Mark Andrews
1a26741d87 include "../mkd"; as we have already changed working directory
(cherry picked from commit b71747f765)
2017-10-20 11:50:06 +11:00
Tinderbox User
2f5154f3b1 update copyright notice / whitespace 2017-10-19 23:49:30 +00:00
Evan Hunt
9ad9f7694d [v9_9] skip managed-keys reconfig tests in runtime if no crypto [RT #46327]
(cherry picked from commit b093b684a6)
(cherry picked from commit b5c1d2bc01)
2017-10-18 22:29:21 -07:00
Mark Andrews
40e08f66a8 4774. [bug] <isc/util.h> was incorrectly included in several
header files. [RT #46311]
2017-10-19 12:54:44 +11:00
Evan Hunt
eb66afdde0 [v9_9] copyrights 2017-10-18 17:34:15 -07:00
Evan Hunt
8b35d08f70 [v9_9] require writable managed keys directory
4769.	[bug]		Enforce the requirement that the managed keys
			directory (specified by "managed-keys-directory",
			and defaulting to the working directory if not
			specified) must be writable. [RT #46077]

(cherry picked from commit 56e30ebae6)
(cherry picked from commit b6b2b0b9b5)
2017-10-17 21:39:05 -07:00
Michał Kępień
eb2c3bdfae [v9_9] Doxygen fixes and cleanups
4773.	[doc]		Fixed generating Doxygen documentation for functions
			annotated using certain macros.  Miscellaneous
			Doxygen-related cleanups. [RT #46276]

(cherry picked from commit 5e6d28e1b7)
2017-10-17 08:13:40 +02:00
Michał Kępień
3a38ada70d [v9_9] Regenerate presigned zone for the filter-aaaa system test [RT #46283]
Fix the filter-aaaa system test for builds without DNSSEC support.
2017-10-16 09:48:05 +02:00
Tinderbox User
148bd18c76 update copyright notice / whitespace 2017-10-13 23:48:17 +00:00
Evan Hunt
a510be00ad [v9_9] fix filter-aaaa test [RT #46268]
(cherry picked from commit 666af25a92)
2017-10-13 11:12:29 -07:00
Evan Hunt
58b81a5e63 [v9_9] Move KRB5_CONFIG=/dev/null to conf.sh.* so the named run in the tests gets the setting
(cherry picked from commit 74f46c45b0)
(cherry picked from commit d1aa5125a9)
2017-10-11 08:52:27 -07:00
Mark Andrews
2920d65a7d don't force souce port
(cherry picked from commit 02a669a9a6)
2017-10-08 06:46:57 +11:00
Tinderbox User
ab0f4f3a40 update copyright notice / whitespace 2017-10-06 23:48:57 +00:00
Evan Hunt
5cdb31e8df [v9_9] further restrict update-policy local
4762.	[func]		"update-policy local" is now restricted to updates
                from local addresses. (Previously, other addresses
                were allowed so long as updates were signed by the
                local session key.) [RT #45492]
2017-10-06 15:42:54 -07:00
Michał Kępień
c32a80e1d6 [v9_9] Add support for DOA
4761.	[protocol]	Add support for DOA. [RT #45612]

(cherry picked from commit 4ee1fbe056)
2017-10-06 13:00:00 +02:00
Tinderbox User
ad549211bf regen v9_9 2017-10-06 01:34:09 +00:00