Commit Graph
659 Commits
Author SHA1 Message Date
cvs2git 44cab72e7e This commit was manufactured by cvs2git to create branch 'v9_7'. 2010-06-03 06:29:06 +00:00
Mark Andrews 10acc63770 2911. [bug] dnssec-signzone didn't handle out of zone records well.
[RT #21367]
2010-06-03 06:29:03 +00:00
Mark Andrews b42093b971 2911. [bug] dnssec-signzone didn't handle out of zone records well.
[RT #21367]
2010-06-03 03:32:25 +00:00
Mark Andrews 675cc80975 2911. [bug] dnssec-signzone didn't handle out of zone records well.
[RT #21367]
2010-06-03 03:13:32 +00:00
Automatic Updater a2d2fc17b0 update copyright notice 2010-06-02 01:28:40 +00:00
Automatic Updater 82404f5aef update copyright notice 2010-06-02 01:27:20 +00:00
Mark Andrews a2c8607929 2909. [bug] named-checkzone -p could die if "update-policy local;"
was specified in named.conf. [RT #21416]
2010-06-02 01:10:06 +00:00
Mark Andrews a27bbd21cf 2909. [bug] named-checkzone -p could die if "update-policy local;"
was specified in named.conf. [RT #21416]
2010-06-02 01:07:47 +00:00
Automatic Updater 248b9ab0b0 update copyright notice 2010-05-27 23:51:08 +00:00
Automatic Updater 0329504246 update copyright notice 2010-05-27 23:49:55 +00:00
Automatic Updater 051dec6fb7 update copyright notice 2010-05-26 23:50:47 +00:00
Automatic Updater b8612502e2 update copyright notice 2010-05-26 23:49:35 +00:00
Mark Andrews b4c6ce22d0 call sign.sh robustly 2010-05-26 07:00:37 +00:00
Mark Andrews 491d1d3463 call sign.sh robustly 2010-05-26 07:00:01 +00:00
Mark Andrews d544482827 2904. [bug] When using DLV, sub-zones of the zones in the DLV,
could be incorrectly marked as insecure instead of
                        secure leading to negative proofs failing.  This was
                        a unintended outcome from change 2890. [RT# 21392]
2010-05-26 06:30:43 +00:00
cvs2git 00f7383ab0 This commit was manufactured by cvs2git to create branch 'v9_7'. 2010-05-26 06:28:02 +00:00
Mark Andrews e27d55e3ee 2904. [bug] When using DLV, sub-zones of the zones in the DLV,
could be incorrectly marked as insecure instead of
                        secure leading to negative proofs failing.  This was
                        a unintended outcome from change 2890. [RT# 21392]
2010-05-26 06:28:00 +00:00
Automatic Updater 15c961a1dd update copyright notice 2010-05-19 09:33:50 +00:00
Automatic Updater 8b96e18c96 update copyright notice 2010-05-19 09:32:36 +00:00
Mark Andrews 2e023d9a29 2902. [func] Add regression test for change 2897. [RT #21040] 2010-05-19 07:47:11 +00:00
cvs2git 63fe01ab22 This commit was manufactured by cvs2git to create branch 'v9_7'. 2010-05-19 07:45:39 +00:00
Mark Andrews 5ae2eac4c1 2902. [func] Add regression test for change 2897. [RT #21040] 2010-05-19 07:45:38 +00:00
Mark Andrews 756f9eb63a 2900. [bug] The placeholder negative caching element was not
properly constructed triggering a INSIST in
                        dns_ncache_towire(). [RT #21346]
2010-05-19 06:41:05 +00:00
Mark Andrews b667946fa5 2900. [bug] The placeholder negative caching element was not
properly constructed triggering a INSIST in
                        dns_ncache_towire(). [RT #21346]
2010-05-19 06:39:50 +00:00
Mark Andrews d133eb632a 2892. [bug] Handle REVOKED keys better. [RT #20961] 2010-05-14 04:41:12 +00:00
Mark Andrews 44f175a90a 2892. [bug] Handle REVOKED keys better. [RT #20961] 2010-05-14 04:38:52 +00:00
Mark Andrews f2ae969065 handle revoke changes 2010-05-06 11:28:20 +00:00
Mark Andrews a3eae83762 handle revoke changes 2010-05-06 11:27:38 +00:00
Automatic Updater 4d42b714be update copyright notice 2010-03-04 23:50:34 +00:00
Automatic Updater f51de9fb15 update copyright notice 2010-03-04 23:49:20 +00:00
Mark Andrews 56c2c3835f 10.53.0.1 through 10.53.0.5 -> 10.53.0.1 through 10.53.0.7 2010-03-04 20:34:16 +00:00
Mark Andrews bc12bc0a1f 10.53.0.1 through 10.53.0.5 -> 10.53.0.1 through 10.53.0.7 2010-03-04 20:32:54 +00:00
Evan Hunt 76c48ffb86 smartsign fails on slow machines. delay the timing-sensitive
dnssec-settime call as long as possible.
2010-01-19 15:55:44 +00:00
Evan Hunt ecde9a1cd5 smartsign fails on slow machines. delay the timing-sensitive
dnssec-settime call as long as possible.
2010-01-19 15:54:45 +00:00
Automatic Updater 6bb1560124 update copyright notice 2010-01-18 23:48:40 +00:00
Automatic Updater d1a69b8e99 update copyright notice 2010-01-18 23:48:01 +00:00
Evan Hunt e11a0c114c 2841. [func] Added "smartsign" and improved "autosign" and
"dnssec" regression tests. [RT #20865]
2010-01-18 19:19:31 +00:00
Evan Hunt 7c6fa1d589 2841. [func] Added "smartsign" and improved "autosign" and
"dnssec" regression tests. [RT #20865]
2010-01-18 19:18:35 +00:00
Automatic Updater a30c7003af update copyright notice 2010-01-07 23:48:54 +00:00
Automatic Updater ed0fd28aff update copyright notice 2010-01-07 23:48:16 +00:00
Evan Hunt cf00dcb23a 2831. [security] Do not attempt to validate or cache
out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
2010-01-07 16:49:12 +00:00
cvs2git 51833b980c This commit was manufactured by cvs2git to create branch 'v9_7'. 2010-01-07 16:48:30 +00:00
Evan Hunt 597642c0ba 2831. [security] Do not attempt to validate or cache
out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
2010-01-07 16:48:23 +00:00
Tatuya JINMEI 神明達哉 6ca6cc975f 2828. [security] Cached CNAME or DNAME RR could be returned to clients
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:33:41 +00:00
cvs2git dc978e394a This commit was manufactured by cvs2git to create branch 'v9_7'. 2009-12-30 08:02:40 +00:00
Tatuya JINMEI 神明達哉 d8680445d6 2828. [security] Cached CNAME or DNAME RR could be returned to clients
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:02:23 +00:00
Evan Hunt f766024a27 change all keys from rsasha1 to nsec3rsasha1 so that the nsec->nsec3
transitions work correctly.  (they worked before, but weren't supposed
to; when that bug was fixed, the test broke.)
2009-12-19 17:30:31 +00:00
Evan Hunt 929667cf18 change all keys from rsasha1 to nsec3rsasha1 so that the nsec->nsec3
transitions work correctly.  (they worked before, but weren't supposed
to; when that bug was fixed, the test broke.)
2009-12-19 17:30:07 +00:00
Automatic Updater 8b82c01d74 update copyright notice 2009-12-06 23:48:29 +00:00
Evan Hunt 0d796b1aaa improve cleanup and add named.run to .cvsignore files 2009-12-06 03:04:39 +00:00