Commit Graph
2959 Commits
Author SHA1 Message Date
Mark Andrews 5ed673c0d2 4837. [bug] dns_update_signatures{inc} (add_sigs) was not
properly determining if there were active KSK and
                        ZSK keys for a algorithm when update-check-ksk is
                        true (default) leaving records unsigned. [RT #46743]

(cherry picked from commit 196e01da5f)
(cherry picked from commit bf459d24a1)
(cherry picked from commit 5623f65cc4)
2017-12-04 10:09:45 +11:00
Tinderbox User 03674299c7 update copyright notice / whitespace 2017-11-30 23:50:30 +00:00
Evan Hunt 17122341fe [v9_9] fix "allow-transfer" inheritance and clean up ACL configuration
4836.	[bug]		Zones created using "rndc addzone" could
			temporarily fail to inherit an "allow-transfer"
			ACL that had been configured in the options
			statement. [RT #46603]

(cherry picked from commit e197a2bd15)
(cherry picked from commit f53e0bda46)
(cherry picked from commit 9dfff4e378)
2017-11-30 13:34:53 -08:00
Tinderbox User 230916c184 update copyright notice / whitespace 2017-11-27 23:50:30 +00:00
Michał Kępień a59eb10b23 [v9_9] Stabilize nsupdate system test [RT #46673]
(cherry picked from commit 00ff44c7c2)
2017-11-27 10:16:09 +01:00
Tinderbox User f2f3b68ac7 update copyright notice / whitespace 2017-11-21 23:47:58 +00:00
Michał Kępień bbfa83da40 [v9_9] Refactor reclimit system test
4823.	[test]		Refactor reclimit system test to improve its
			reliability and speed. [RT #46632]

(cherry picked from commit 1fd4803e84)
2017-11-21 10:34:03 +01:00
Tinderbox User 7fed20ed8f update copyright notice / whitespace 2017-11-16 23:48:10 +00:00
Michał Kępień a3b4977931 [v9_9] Stabilize logfileconfig system test
4818.	[test]		The logfileconfig system test could intermittently
			report false negatives on some platforms. [RT #46615]

(cherry picked from commit 169ce30bf7)
2017-11-16 08:17:18 +01:00
Tinderbox User ec547a9877 update copyright notice / whitespace 2017-11-08 23:48:10 +00:00
Michał Kępień 14e1eac55c [v9_9] Do not NOTIFY back the master view from slave views in notify system test
This prevents a Linux kernel bug discussed in RT #32355 from being
triggered and thus makes "checking notify to multiple views using tsig"
stable.

(cherry picked from commit 27bf48327c)
2017-11-08 09:22:31 +01:00
Mark Andrews 38400d2bec 4810. [test] The chain system test failed if the IPv6 interfaces
were not configured. [RT #46508]

(cherry picked from commit c652213857)
2017-11-08 10:18:47 +11:00
Mark Andrews 3b9332a20d 4804. [port] win32: access() does not work on directories as
required by POSIX.  Supply a alternative in
                        isc_file_isdirwritable. [RT #46394]
2017-11-01 09:47:52 +11:00
Evan Hunt 5f0cc4be38 [v9_9] copyrights 2017-10-29 16:44:31 -07:00
Mark Andrews e1dd822fc3 number tests 2017-10-30 08:32:18 +11:00
Mark Andrews 24592f9f78 Add system tests and remove redundent logging from:
4801.   [func]          'dnssec-lookaside auto;' and 'dnssec-lookaside .
                        trust-anchor dlv.isc.org;' now elicit warnings rather
                        than being fatal configuration errors. [RT #46410]

(cherry picked from commit f5e1b555c5)
2017-10-30 08:20:51 +11:00
Evan Hunt dcaf355f00 [v9_9] log when update-policy local gets a key match from a remote host
4788.	[cleanup]	When using "update-policy local", log a warning
			when an update matching the session key is received
			from a remote host. [RT #46213]

- this completes change #4762.
2017-10-25 01:09:41 -07:00
Mark Andrews 42f1b7e3e8 read dig.out.ns3.test$n rather than dig.out.ns2.test$n
(cherry picked from commit 80739779fc)
2017-10-25 15:03:28 +11:00
Tinderbox User c53d3336d6 update copyright notice / whitespace 2017-10-24 23:53:22 +00:00
Mark Andrews 8221d208a7 4783. [test] dnssec: 'check that NOTIFY is sent at the end of
NSEC3 chain generation failed' required more time
                        on some machines for the IXFR to complete. [RT #46388]

(cherry picked from commit 969d923536)
2017-10-25 09:22:28 +11:00
Mark Andrews 6455eec8e2 remove redundent reconfig; number tests 2017-10-24 14:46:27 +11:00
Evan Hunt 0a5b0a447e [v9_9] omit NS from authority section if it was in answer
4780.	[bug]		When answering ANY queries, don't include the NS
			RRset in the authority section if it was already
			in the answer section. [RT #44543]

(cherry picked from commit b7b76d6b85)
(cherry picked from commit 13435af49a)
2017-10-23 19:38:29 -07:00
Mark Andrews ab342443aa report if named.run or named.memstats not removed after successful test
(cherry picked from commit 5bead588b7)
2017-10-24 12:48:51 +11:00
Evan Hunt 9c84f65183 [v9_9] test for Net::DNS::Nameserver in prereq.sh
(cherry picked from commit 475c51cce0)
2017-10-21 00:29:27 -07:00
Mark Andrews 1a26741d87 include "../mkd"; as we have already changed working directory
(cherry picked from commit b71747f765)
2017-10-20 11:50:06 +11:00
Evan Hunt 9ad9f7694d [v9_9] skip managed-keys reconfig tests in runtime if no crypto [RT #46327]
(cherry picked from commit b093b684a6)
(cherry picked from commit b5c1d2bc01)
2017-10-18 22:29:21 -07:00
Evan Hunt eb66afdde0 [v9_9] copyrights 2017-10-18 17:34:15 -07:00
Evan Hunt 8b35d08f70 [v9_9] require writable managed keys directory
4769.	[bug]		Enforce the requirement that the managed keys
			directory (specified by "managed-keys-directory",
			and defaulting to the working directory if not
			specified) must be writable. [RT #46077]

(cherry picked from commit 56e30ebae6)
(cherry picked from commit b6b2b0b9b5)
2017-10-17 21:39:05 -07:00
Michał Kępień 3a38ada70d [v9_9] Regenerate presigned zone for the filter-aaaa system test [RT #46283]
Fix the filter-aaaa system test for builds without DNSSEC support.
2017-10-16 09:48:05 +02:00
Tinderbox User 148bd18c76 update copyright notice / whitespace 2017-10-13 23:48:17 +00:00
Evan Hunt a510be00ad [v9_9] fix filter-aaaa test [RT #46268]
(cherry picked from commit 666af25a92)
2017-10-13 11:12:29 -07:00
Evan Hunt 58b81a5e63 [v9_9] Move KRB5_CONFIG=/dev/null to conf.sh.* so the named run in the tests gets the setting
(cherry picked from commit 74f46c45b0)
(cherry picked from commit d1aa5125a9)
2017-10-11 08:52:27 -07:00
Mark Andrews 2920d65a7d don't force souce port
(cherry picked from commit 02a669a9a6)
2017-10-08 06:46:57 +11:00
Tinderbox User ab0f4f3a40 update copyright notice / whitespace 2017-10-06 23:48:57 +00:00
Evan Hunt 5cdb31e8df [v9_9] further restrict update-policy local
4762.	[func]		"update-policy local" is now restricted to updates
                from local addresses. (Previously, other addresses
                were allowed so long as updates were signed by the
                local session key.) [RT #45492]
2017-10-06 15:42:54 -07:00
Michał Kępień c32a80e1d6 [v9_9] Add support for DOA
4761.	[protocol]	Add support for DOA. [RT #45612]

(cherry picked from commit 4ee1fbe056)
2017-10-06 13:00:00 +02:00
Tinderbox User e862384f39 update copyright notice / whitespace 2017-10-05 23:48:31 +00:00
Mark Andrews 6085a44615 4754. [bug] dns_zone_setview needs a two stage commit to properly
handle errors. [RT #45841]

(cherry picked from commit 2732d4922c)
2017-10-05 16:55:11 +11:00
Mark Andrews 5248a8cc32 stderr to /dev/null also
(cherry picked from commit 4615bc5408)
2017-10-04 19:27:11 +11:00
Mark Andrews 3afd1e5a58 test for 'printf'
(cherry picked from commit d1e823af15)
2017-10-04 19:20:15 +11:00
Tinderbox User 16a6c249b5 update copyright notice / whitespace 2017-10-03 23:48:38 +00:00
Evan Hunt 28158e5698 [v9_9] de-DLV
4749.	[func]		The ISC DLV service has been shut down, and all
			DLV records have been removed from dlv.isc.org.
			- Removed references to ISC DLV in documentation
			- Removed DLV key from bind.keys
			[RT #46155]
2017-10-03 00:57:54 -07:00
Mark Andrews 068bd10a3a 4748. [cleanup] Sprintf to snprintf coversions. [RT #46132]
(cherry picked from commit a009d03a1a)
2017-10-03 15:00:57 +11:00
Tinderbox User cd56d1eef3 update copyright notice / whitespace 2017-09-30 23:53:55 +00:00
Evan Hunt 788beb3a45 [v9_9] color-coded test output
4745.	[test]		Add color-coded pass/fail messages to system
			tests when running on terminals that support them.
			[RT #45977]

(cherry picked from commit 3bb6150cae)
2017-09-30 10:03:26 -07:00
Tinderbox User de1ba63361 update copyright notice / whitespace 2017-09-18 23:58:51 +00:00
Michał Kępień c0ef11fb2e [v9_9] Prevent possible infinite signing loop after retransferring an inline-signed slave using NSEC3
4727.	[bug]		Retransferring an inline-signed slave using NSEC3
			around the time its NSEC3 salt was changed could result
			in an infinite signing loop. [RT #45080]

(cherry picked from commit 4ceebc8874)
2017-09-18 09:30:56 +02:00
Tinderbox User 928c3c53c6 update copyright notice / whitespace 2017-09-14 23:59:05 +00:00
Evan Hunt 57807b8e0d [v9_9] revert dlzexternal changes for portability 2017-09-14 11:34:40 -07:00
Mark Andrews b3faa2b293 (cherry picked from commit 5fb0c09a5e) 2017-09-14 18:55:51 +10:00