Evan Hunt
15601edb93
3286. [bug] Managed key maintenance timer could fail to start
...
after 'rndc reconfig'. [RT #26786 ]
2012-02-22 00:33:33 +00:00
Automatic Updater
858d47a80c
update copyright notice
2012-01-27 23:46:31 +00:00
Mark Andrews
05cf79065f
3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
...
out the earliest expiry time. [RT #23311 ]
2012-01-27 01:47:30 +00:00
Evan Hunt
731e98287f
Back out change #3182 and respin
2011-12-05 16:58:08 +00:00
Evan Hunt
b2d904b4bc
3204. [bug] When a master server that has been marked as
...
unreachable but sends a NOTIFY, mark it reachable
again. [RT #25960 ]
2011-11-04 05:51:39 +00:00
Evan Hunt
318246dc18
3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
...
dnssec.h. [RT #26415 ]
2011-11-03 02:55:35 +00:00
Automatic Updater
377fb6580d
update copyright notice
2011-11-01 23:46:34 +00:00
Evan Hunt
01e40583e4
3188. [bug] zone.c:zone_refreshkeys() could fail to detach
...
references correctly when errors occurred, causing
a hang on shutdown. [RT #26372 ]
2011-11-01 04:00:06 +00:00
Mark Andrews
2136c92599
3186. [bug] Version/db mis-match in rpz code. [RT #26180 ]
2011-10-31 02:55:07 +00:00
Automatic Updater
3f5b58b3fa
update copyright notice
2011-10-27 23:45:57 +00:00
Scott Mann
a48afa63d7
fix edns0 retry issues (rt #23393/24964).
2011-10-27 20:26:12 +00:00
Mark Andrews
cb05b7128f
3174. [bug] Always compute to revoked key tag from scratch.
...
[RT #24711 ]
2011-10-20 21:23:51 +00:00
Automatic Updater
c43b3107b6
update copyright notice
2011-10-15 23:46:14 +00:00
Mark Andrews
89769cb5a5
3170. [func] RPZ update:
...
- fix precedence among competing rules
- improve ARM text including documenting rule precedence
- try to rewrite CNAME chains until first hit
- new "rpz" logging channel
2011-10-14 03:51:07 +00:00
Automatic Updater
677d6d88ec
update copyright notice
2011-07-08 23:47:16 +00:00
Scott Mann
5ed57781a8
9.8.1b3
2011-07-08 22:57:26 +00:00
Automatic Updater
caf476f0e2
update copyright notice
2011-06-17 23:47:12 +00:00
Evan Hunt
8c22e52db1
3129. [bug] Named could crash on 'rndc reconfig' when
...
allow-new-zones was set to yes and named ACLs
were used, [RT #22739 ]
2011-06-17 07:04:32 +00:00
Evan Hunt
5d0d5c6641
3124. [bug] Use an rdataset attribute flag to indicate
...
negative-cache records rather than using rrtype 0;
this will prevent problems when that rrtype is
used in actual DNS packets. [RT #24777 ]
3123. [security] Change #2912 exposed a latent flaw in
dns_rdataset_totext() that could cause named to
crash with an assertion failure. [RT #24777 ]
2011-06-08 23:02:43 +00:00
Automatic Updater
d089451dca
update copyright notice
2011-05-28 00:27:48 +00:00
Mark Andrews
57f287577f
move dns_trust_totext from masterdump.c to rdataset.c so that exportlib will build
2011-05-27 04:40:09 +00:00
Evan Hunt
b62b7fbe9e
3114. [bug] Retain expired RRSIGs in dynamic zones if key is
...
inactive and there is no replacement key. [RT #23136 ]
2011-05-19 04:42:51 +00:00
Automatic Updater
75569ec3ab
update copyright notice
2011-05-06 23:47:05 +00:00
Evan Hunt
46994fc008
3107. [bug] dnssec-signzone: Report the correct number of ZSKs
...
when using -x. [RT #20852 ]
2011-05-06 21:07:50 +00:00
Evan Hunt
2cac211c0a
3087. [bug] DDNS updates using SIG(0) with update-policy match
...
type "external" could cause a crash. [RT #23735 ]
2011-03-21 19:53:35 +00:00
Automatic Updater
b18bf607c8
update copyright notice
2011-03-17 23:47:06 +00:00
Francis Dupont
c38842e702
silent compiler warnings for DLZ exernal driver support and example
2011-03-17 09:41:07 +00:00
Automatic Updater
23384a3227
update copyright notice
2011-03-03 23:47:09 +00:00
Evan Hunt
8590157237
3053. [bug] Under a sustained high query load with a finite
...
max-cache-size, it was possible for cache memory
to be exhausted and not recovered. [RT #23371 ]
2011-03-03 04:43:02 +00:00
Automatic Updater
09bde3103b
update copyright notice
2011-02-28 01:20:05 +00:00
Mark Andrews
78a3019376
2038. [bug] Install <dns/rpz.h>. [RT #23342 ]
2011-02-22 11:50:42 +00:00
Mark Andrews
ea09a134fd
3011. [func] Change the default query timeout from 30 seconds
...
to 10. Allow setting this in named.conf using the new
'resolver-query-timeout' option, which specifies a max
time in seconds. 0 means 'default' and anything longer
than 30 will be silently set to 30. [RT #22852 ]
2011-02-03 05:50:08 +00:00
Automatic Updater
2352050890
update copyright notice
2011-01-13 08:50:29 +00:00
Mark Andrews
68f6e45d28
uint8_t -> unsigned char
2011-01-13 06:41:05 +00:00
Mark Andrews
119f627c82
uint32_t -> isc_uint32_t
2011-01-13 06:29:16 +00:00
Automatic Updater
9cee5bb028
update copyright notice
2011-01-13 04:59:26 +00:00
Mark Andrews
87708bde16
3008. [func] Response policy zones (RPZ) support. [RT #21726 ]
2011-01-13 01:59:28 +00:00
Automatic Updater
135bcc2e42
update copyright notice
2011-01-11 23:47:14 +00:00
Mark Andrews
433e06a25c
3006. [func] Allow dynamically generated TSIG keys to be preserved
...
across restarts of named. Initially this is for
TSIG keys generated using GSSAPI. [RT #22639 ]
2011-01-10 05:32:04 +00:00
Automatic Updater
0e0be796a7
update copyright notice
2011-01-08 23:47:01 +00:00
Evan Hunt
8a743600dd
3005. [port] Solaris: Work around the lack of
...
gsskrb5_register_acceptor_identity() by setting
the KRB5_KTNAME environment variable to the
contents of tkey-gssapi-keytab. Also fixed
test errors on MacOSX. [RT #22853 ]
2011-01-08 00:33:12 +00:00
Automatic Updater
db69d5d53c
update copyright notice
2011-01-06 23:47:00 +00:00
Evan Hunt
3916872f37
3003. [experimental] Added update-policy match type "external",
...
enabliing named to defer the decision of whether to
allow a dynamic update to an external daemon.
(Contributed by Andrew Tridgell.) [RT #22758 ]
2011-01-06 23:24:39 +00:00
Automatic Updater
a094c46640
update copyright notice
2010-12-23 23:47:08 +00:00
Mark Andrews
37dee1ff94
2999. [func] Add GOST support (RFC 5933). [RT #20639 ]
2010-12-23 04:08:00 +00:00
Mark Andrews
82f77687ab
2993. [func] Dynamically grow adb hash tables. [RT #21186 ]
2010-12-21 03:11:42 +00:00
Automatic Updater
ca103999e6
update copyright notice
2010-12-20 23:47:21 +00:00
Evan Hunt
c445b2f648
Add #ifdef BIND9 to some of the new DLZ code to fix link errors
...
when building with --enable-exportlibs
2010-12-19 02:51:41 +00:00
Mark Andrews
c880d51849
gsskrb5_register_acceptor_identity is not available on all platforms
2010-12-18 14:46:21 +00:00
Evan Hunt
71bd858d8e
2989. [func] Added support for writable DLZ zones. (Contributed
...
by Andrew Tridgell of the Samba project.) [RT #22629 ]
2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
of external DLZ drivers that can be loaded as
shared objects at runtime rather than linked with
named. Currently this is switched on via a
compile-time option, "configure --with-dlz-dlopen".
Note: the syntax for configuring DLZ zones
is likely to be refined in future releases.
(Contributed by Andrew Tridgell of the Samba
project.) [RT #22629 ]
2987. [func] Improve ease of configuring TKEY/GSS updates by
adding a "tkey-gssapi-keytab" option. If set,
updates will be allowed with any key matching
a principal in the specified keytab file.
"tkey-gssapi-credential" is no longer required
and is expected to be deprecated. (Contributed
by Andrew Tridgell of the Samba project.)
[RT #22629 ]
2010-12-18 01:56:23 +00:00