Commit Graph

1588 Commits

Author SHA1 Message Date
Evan Hunt
15601edb93 3286. [bug] Managed key maintenance timer could fail to start
after 'rndc reconfig'. [RT #26786]
2012-02-22 00:33:33 +00:00
Automatic Updater
858d47a80c update copyright notice 2012-01-27 23:46:31 +00:00
Mark Andrews
05cf79065f 3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
out the earliest expiry time. [RT #23311]
2012-01-27 01:47:30 +00:00
Evan Hunt
731e98287f Back out change #3182 and respin 2011-12-05 16:58:08 +00:00
Evan Hunt
b2d904b4bc 3204. [bug] When a master server that has been marked as
unreachable but sends a NOTIFY, mark it reachable
			again. [RT #25960]
2011-11-04 05:51:39 +00:00
Evan Hunt
318246dc18 3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
dnssec.h. [RT #26415]
2011-11-03 02:55:35 +00:00
Automatic Updater
377fb6580d update copyright notice 2011-11-01 23:46:34 +00:00
Evan Hunt
01e40583e4 3188. [bug] zone.c:zone_refreshkeys() could fail to detach
references correctly when errors occurred, causing
			a hang on shutdown. [RT #26372]
2011-11-01 04:00:06 +00:00
Mark Andrews
2136c92599 3186. [bug] Version/db mis-match in rpz code. [RT #26180] 2011-10-31 02:55:07 +00:00
Automatic Updater
3f5b58b3fa update copyright notice 2011-10-27 23:45:57 +00:00
Scott Mann
a48afa63d7 fix edns0 retry issues (rt #23393/24964). 2011-10-27 20:26:12 +00:00
Mark Andrews
cb05b7128f 3174. [bug] Always compute to revoked key tag from scratch.
[RT #24711]
2011-10-20 21:23:51 +00:00
Automatic Updater
c43b3107b6 update copyright notice 2011-10-15 23:46:14 +00:00
Mark Andrews
89769cb5a5 3170. [func] RPZ update:
- fix precedence among competing rules
                        - improve ARM text including documenting rule precedence
                        - try to rewrite CNAME chains until first hit
                        - new "rpz" logging channel
2011-10-14 03:51:07 +00:00
Automatic Updater
677d6d88ec update copyright notice 2011-07-08 23:47:16 +00:00
Scott Mann
5ed57781a8 9.8.1b3 2011-07-08 22:57:26 +00:00
Automatic Updater
caf476f0e2 update copyright notice 2011-06-17 23:47:12 +00:00
Evan Hunt
8c22e52db1 3129. [bug] Named could crash on 'rndc reconfig' when
allow-new-zones was set to yes and named ACLs
			were used, [RT #22739]
2011-06-17 07:04:32 +00:00
Evan Hunt
5d0d5c6641 3124. [bug] Use an rdataset attribute flag to indicate
negative-cache records rather than using rrtype 0;
			this will prevent problems when that rrtype is
			used in actual DNS packets. [RT #24777]

3123.	[security]	Change #2912 exposed a latent flaw in
			dns_rdataset_totext() that could cause named to
			crash with an assertion failure. [RT #24777]
2011-06-08 23:02:43 +00:00
Automatic Updater
d089451dca update copyright notice 2011-05-28 00:27:48 +00:00
Mark Andrews
57f287577f move dns_trust_totext from masterdump.c to rdataset.c so that exportlib will build 2011-05-27 04:40:09 +00:00
Evan Hunt
b62b7fbe9e 3114. [bug] Retain expired RRSIGs in dynamic zones if key is
inactive and there is no replacement key. [RT #23136]
2011-05-19 04:42:51 +00:00
Automatic Updater
75569ec3ab update copyright notice 2011-05-06 23:47:05 +00:00
Evan Hunt
46994fc008 3107. [bug] dnssec-signzone: Report the correct number of ZSKs
when using -x. [RT #20852]
2011-05-06 21:07:50 +00:00
Evan Hunt
2cac211c0a 3087. [bug] DDNS updates using SIG(0) with update-policy match
type "external" could cause a crash. [RT #23735]
2011-03-21 19:53:35 +00:00
Automatic Updater
b18bf607c8 update copyright notice 2011-03-17 23:47:06 +00:00
Francis Dupont
c38842e702 silent compiler warnings for DLZ exernal driver support and example 2011-03-17 09:41:07 +00:00
Automatic Updater
23384a3227 update copyright notice 2011-03-03 23:47:09 +00:00
Evan Hunt
8590157237 3053. [bug] Under a sustained high query load with a finite
max-cache-size, it was possible for cache memory
			to be exhausted and not recovered. [RT #23371]
2011-03-03 04:43:02 +00:00
Automatic Updater
09bde3103b update copyright notice 2011-02-28 01:20:05 +00:00
Mark Andrews
78a3019376 2038. [bug] Install <dns/rpz.h>. [RT #23342] 2011-02-22 11:50:42 +00:00
Mark Andrews
ea09a134fd 3011. [func] Change the default query timeout from 30 seconds
to 10.  Allow setting this in named.conf using the new
                        'resolver-query-timeout' option, which specifies a max
                        time in seconds.  0 means 'default' and anything longer
                        than 30 will be silently set to 30. [RT #22852]
2011-02-03 05:50:08 +00:00
Automatic Updater
2352050890 update copyright notice 2011-01-13 08:50:29 +00:00
Mark Andrews
68f6e45d28 uint8_t -> unsigned char 2011-01-13 06:41:05 +00:00
Mark Andrews
119f627c82 uint32_t -> isc_uint32_t 2011-01-13 06:29:16 +00:00
Automatic Updater
9cee5bb028 update copyright notice 2011-01-13 04:59:26 +00:00
Mark Andrews
87708bde16 3008. [func] Response policy zones (RPZ) support. [RT #21726] 2011-01-13 01:59:28 +00:00
Automatic Updater
135bcc2e42 update copyright notice 2011-01-11 23:47:14 +00:00
Mark Andrews
433e06a25c 3006. [func] Allow dynamically generated TSIG keys to be preserved
across restarts of named.  Initially this is for
                        TSIG keys generated using GSSAPI. [RT #22639]
2011-01-10 05:32:04 +00:00
Automatic Updater
0e0be796a7 update copyright notice 2011-01-08 23:47:01 +00:00
Evan Hunt
8a743600dd 3005. [port] Solaris: Work around the lack of
gsskrb5_register_acceptor_identity() by setting
			the KRB5_KTNAME environment variable to the
			contents of tkey-gssapi-keytab.  Also fixed
			test errors on MacOSX.  [RT #22853]
2011-01-08 00:33:12 +00:00
Automatic Updater
db69d5d53c update copyright notice 2011-01-06 23:47:00 +00:00
Evan Hunt
3916872f37 3003. [experimental] Added update-policy match type "external",
enabliing named to defer the decision of whether to
			allow a dynamic update to an external daemon.
			(Contributed by Andrew Tridgell.) [RT #22758]
2011-01-06 23:24:39 +00:00
Automatic Updater
a094c46640 update copyright notice 2010-12-23 23:47:08 +00:00
Mark Andrews
37dee1ff94 2999. [func] Add GOST support (RFC 5933). [RT #20639] 2010-12-23 04:08:00 +00:00
Mark Andrews
82f77687ab 2993. [func] Dynamically grow adb hash tables. [RT #21186] 2010-12-21 03:11:42 +00:00
Automatic Updater
ca103999e6 update copyright notice 2010-12-20 23:47:21 +00:00
Evan Hunt
c445b2f648 Add #ifdef BIND9 to some of the new DLZ code to fix link errors
when building with --enable-exportlibs
2010-12-19 02:51:41 +00:00
Mark Andrews
c880d51849 gsskrb5_register_acceptor_identity is not available on all platforms 2010-12-18 14:46:21 +00:00
Evan Hunt
71bd858d8e 2989. [func] Added support for writable DLZ zones. (Contributed
by Andrew Tridgell of the Samba project.) [RT #22629]

2988.	[experimental]	Added a "dlopen" DLZ driver, allowing the creation
			of external DLZ drivers that can be loaded as
			shared objects at runtime rather than linked with
			named.  Currently this is switched on via a
			compile-time option, "configure --with-dlz-dlopen".
			Note: the syntax for configuring DLZ zones
			is likely to be refined in future releases.
			(Contributed by Andrew Tridgell of the Samba
			project.) [RT #22629]

2987.	[func]		Improve ease of configuring TKEY/GSS updates by
			adding a "tkey-gssapi-keytab" option.  If set,
			updates will be allowed with any key matching
			a principal in the specified keytab file.
			"tkey-gssapi-credential" is no longer required
			and is expected to be deprecated.  (Contributed
			by Andrew Tridgell of the Samba project.)
			[RT #22629]
2010-12-18 01:56:23 +00:00