ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
25,593 Commits 589 Branches 805 Tags
68f7e8c4e83bb48b44221caeb4b04862dcd90aca
Commit Graph

25593 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Witold Krecicki
68f7e8c4e8 Merge branch '180-fix-cmsgbuf-usage-v9_12-v9_10' into 'v9_10' 
Resolve "Intermittent recursive resolver issues [socket.c:2135]"

See merge request isc-projects/bind9!431
 2018-06-26 14:35:05 -04:00
Witold Kręcicki
3f47c82eab Use completely static-sized buffers 
(cherry picked from commit 49f90025a0)
(cherry picked from commit 4007a9d020)
 2018-06-26 20:28:24 +02:00
Witold Kręcicki
1745706199 Fix socket cmsg buffer usage 
(cherry picked from commit d79be7dd5e)
(cherry picked from commit da63e95612)
 2018-06-26 20:28:24 +02:00
Evan Hunt
e1838ca3a5 Merge branch '288-named-checkconf-does-not-recognize-errors-related-to-in-view-zones-v9_10' into 'v9_10' 
Resolve "named-checkconf does not recognize errors related to in-view zones"

See merge request isc-projects/bind9!426
 2018-06-26 14:09:10 -04:00
Mark Andrews
e3c80aa59f CHANGES, copyright 
(cherry picked from commit f7d346357e)
 2018-06-26 11:03:42 -07:00
Mark Andrews
a4e86236b1 construct a symtab of valid in-view targets then check that the target exists 
(cherry picked from commit e01a4bcb20)
 2018-06-26 11:01:43 -07:00
Michał Kępień
f3947dacfa Merge branch '321-only-request-permitted-capabilities-in-non-libcap-builds-v9_10' into 'v9_10' 
[v9_10] Only request permitted capabilities in non-libcap builds

See merge request isc-projects/bind9!419
 2018-06-26 08:03:30 -04:00
Michał Kępień
bf4bf0f9b6 Add CHANGES entry 
4979.	[bug]		Non-libcap builds were not checking whether all
			requested capabilities are present in the permitted
			capability set. [GL #321]

(cherry picked from commit 731b003854)
 2018-06-26 13:20:45 +02:00
Michał Kępień
12123951cb Only request permitted capabilities in non-libcap builds 
While libcap-enabled builds check whether any capability named requests
is within the permitted capability set, non-libcap builds just try
requesting them, which potentially causes a misleading error message to
be output ("Operation not permitted: please ensure that the capset
kernel module is loaded").  Ensure non-libcap builds also check whether
any requested capability is within the permitted capability set.

(cherry picked from commit 8c66f32e53)
 2018-06-26 13:20:39 +02:00
Evan Hunt
949bc7ad0d Merge branch '247-log-the-remaining-v-info-at-startup' into 'v9_10' 
Resolve "Log the remaining -V info at startup"

Closes #247

See merge request isc-projects/bind9!249
 2018-06-25 15:20:37 -07:00
Mark Andrews
43ba12277e log the remaining -V info at startup 2018-06-25 15:20:33 -07:00
Mark Andrews
a8cf0a8ecf Merge branch '343-casecompare-of-ninfo-tkey-txt-have-wrong-return-type-v9_10' into 'v9_10' 
Resolve "casecompare of NINFO, TKEY, TXT have wrong return type"

See merge request isc-projects/bind9!406
 2018-06-24 23:20:23 -04:00
Mark Andrews
7ff2c2e25c fix casecompare return type for ninfo, tkey, txt 
(cherry picked from commit 3ba1d1e43b)
 2018-06-25 13:10:22 +10:00
Mark Andrews
2720191f9c Merge branch '356-client-cookie-is-being-hashed-twice-when-computing-the-dns-server-cookie-v9_10' into 'v9_10' 
Resolve "Client cookie is being hashed twice when computing the DNS server cookie."

See merge request isc-projects/bind9!403
 2018-06-22 03:56:05 -04:00
Mark Andrews
1ac973f162 4975. [bug] The server cookie computation for sha1 and sha256 did 
not match the method described in RFC 7873. [GL #356]

(cherry picked from commit 8755a249bc)
 2018-06-22 17:49:54 +10:00
Mark Andrews
2cf488e71b the client cookie was being hashed twice when computing the server cookie for sha1 and sha256 
(cherry picked from commit 4795f0ca89)
 2018-06-22 17:49:34 +10:00
Ondřej Surý
185814c44d Merge branch 'release-v9_10_8rc1' into 'v9_10' 
Merge 9.10.8rc1 release into v9_10 branch

See merge request isc-projects/bind9!397
 2018-06-21 13:13:16 -04:00
Evan Hunt
ce4abb600b prepare 9.10.8rc1 2018-06-21 18:56:22 +02:00
Michał Kępień
057b4382db Merge branch '341-constify-dns_rdata_tostruct-v9_10' into 'v9_10' 
[v9_10] constify dns_rdata_tostruct

See merge request isc-projects/bind9!382
 2018-06-15 03:34:52 -04:00
Mark Andrews
dc2200c1da Declare the 'rdata' argument for dns_rdata_tostruct() to be const 
(cherry picked from commit abb2fd1027)
 2018-06-15 08:52:47 +02:00
Ondřej Surý
839db4a693 Merge branch '309-fix-default-recursion-v9_10' into 'v9_10' 
Resolve "Recursion improperly allowed by default"

See merge request isc-projects/bind9!375
 2018-06-14 08:54:00 -04:00
Evan Hunt
6894028f27 add a regression test for default allow-recursion settings 2018-06-14 14:47:56 +02:00
Evan Hunt
97600626c7 allow-recursion could incorrectly inherit from the default allow-query 2018-06-14 14:47:56 +02:00
Michał Kępień
f7f43843d2 Merge branch '298-fix-dname-handling-in-dnssec-tools-v9_10' into 'v9_10' 
[v9_10] Fix DNAME handling in DNSSEC tools

See merge request isc-projects/bind9!365
 2018-06-13 07:29:26 -04:00
Michał Kępień
de5916a7bf Add CHANGES entry 
4971.	[bug]		dnssec-signzone and dnssec-verify did not treat records
			below a DNAME as out-of-zone data. [GL #298]

(cherry picked from commit 28b8ab8891)
 2018-06-13 13:02:27 +02:00
Mark Andrews
ec75a07023 Pull out the saving of the zone cut into a separate function 
(cherry picked from commit 0c3ddaafb5)
 2018-06-13 13:02:25 +02:00
Michał Kępień
9a4145168c Treat records below a DNAME as out-of-zone data 
DNAME records indicate bottom of zone and thus no records below a DNAME
should be DNSSEC-signed or included in NSEC(3) chains.  Add a helper
function, has_dname(), for detecting DNAME records at a given node.
Prevent signing DNAME-obscured records.  Check that DNAME-obscured
records are not signed.

(cherry picked from commit 6d8a514ecb)
 2018-06-13 13:01:54 +02:00
Evan Hunt
b56c3d3102 Merge branch 'fix-strtok' into 'v9_10' 2018-06-09 23:04:36 -07:00
Evan Hunt
0bca85e18d complete strtok fix 
(cherry picked from commit 74c3b9d3b2)
 2018-06-09 23:04:35 -07:00
Evan Hunt
6b881704e9 Merge branch 'fix-strtok' into 'v9_10' 2018-06-09 22:37:08 -07:00
Evan Hunt
48ff5b29be use strtok() instead of strtok_r() in command line processing 
(cherry picked from commit 1734f1b3b9)
 2018-06-09 22:37:05 -07:00
Evan Hunt
74de81ee42 Merge branch 'validate-glue' into v9_10 2018-06-08 11:51:48 -07:00
Evan Hunt
b9bc020d5f ensure we try to validate glue records so RRSIG TTLs will be capped 2018-06-08 11:42:40 -07:00
Mukund Sivaraman
eac5619b6a Add CHANGES entry 
(cherry picked from commit dfd73d7e16)
 2018-06-08 11:05:01 -07:00
Mukund Sivaraman
da620da38b Add system test 
(cherry picked from commit 303391ea41)
 2018-06-08 11:05:00 -07:00
Mukund Sivaraman
54e3529d55 Don't validate non-pending glue when adding to the additional section 
(cherry picked from commit 31bd3147d1)
 2018-06-08 11:05:00 -07:00
Mark Andrews
2e2616d876 Merge branch '325-add-cfg_parse_buffer4-v9_10' into 'v9_10' 
Resolve "add cfg_parse_buffer4"

Closes #325

See merge request isc-projects/bind9!353
 2018-06-08 17:42:10 +10:00
Mark Andrews
51c78898fb add cfg_parse_buffer4 
(cherry picked from commit b313084af2)
 2018-06-08 17:41:58 +10:00
Mark Andrews
431f7c8636 Merge branch '322-add-support-for-marking-options-as-deprecated-v9_10' into 'v9_10' 
Resolve "add support for marking options as deprecated."

Closes #322

See merge request isc-projects/bind9!351
 2018-06-08 16:06:35 +10:00
Mark Andrews
99ac87cac4 Add support for marking a option as deprecated. 
(cherry picked from commit befff9452c)
 2018-06-08 16:06:17 +10:00
Mark Andrews
f5df032a58 Merge branch '240-multiple-rrsigs-on-some-records-in-signed-zone-even-though-only-one-key-is-ever-active-at-a-time-v9_12-v9_11-v9_10' into 'v9_10' 
Resolve "Multiple RRSIGs on some records in signed zone even though only one key is ever active at a time"

Closes #240

See merge request isc-projects/bind9!231
 2018-06-06 17:46:01 +10:00
Mark Andrews
b331bb8038 add CHANGES note 
(cherry picked from commit ba7a343156)
(cherry picked from commit 00f1956c9e)
(cherry picked from commit 1c8aa28455)
 2018-06-06 17:45:23 +10:00
Mark Andrews
abbfbeffa6 add duplicate signature test 
(cherry picked from commit 0db5b087ed)
(cherry picked from commit 1783fa5aba)
(cherry picked from commit 1710e5cfca)
 2018-06-06 17:45:23 +10:00
Mark Andrews
ba76a92338 add support -T sigvalinsecs 
(cherry picked from commit 87a3dc8ab9)
(cherry picked from commit 69340b5ac5)
(cherry picked from commit dd05287a31)
 2018-06-06 17:29:24 +10:00
Mark Andrews
5686e3bb6a only sign with other keys when deleting a key if there are not already existing signature for the deleted algorithm 
(cherry picked from commit 0667bf7ae7)
(cherry picked from commit c1e342cedb)
(cherry picked from commit 298372d8d2)
 2018-06-06 17:23:08 +10:00
Mark Andrews
4c632d69c8 Merge branch '316-move-named-t-processing-to-its-own-function-v9_10' into 'v9_10' 
Resolve "move named -T processing to its own function"

Closes #316

See merge request isc-projects/bind9!343
 2018-06-06 15:15:40 +10:00
Mark Andrews
63bbd658f0 add CHANGES 
(cherry picked from commit ef7401e4a7)
 2018-06-06 15:15:26 +10:00
Mark Andrews
4330d43d1c move -T parsing to its own function 
(cherry picked from commit b491ceeb50)
 2018-06-06 15:14:57 +10:00
Evan Hunt
ff5fb60c8a Merge branch '302-use-ip-for-ifconfig' into 'v9_10' 
Resolve "ifconfig.sh doesn't work on centos7"

Closes #302

See merge request isc-projects/bind9!330
 2018-06-05 21:48:09 -07:00
Evan Hunt
7b1a637fde CHANGES 
(cherry picked from commit 71f2335f5a)
(cherry picked from commit 7f16672ab8)
 2018-06-05 21:48:06 -07:00