Commit Graph
88 Commits
Author SHA1 Message Date
Matthijs Mekking 6db879160f Detect NSEC3 salt collisions
When generating a new salt, compare it with the previous NSEC3
paremeters to ensure the new parameters are different from the
previous ones.

This moves the salt generation call from 'bin/named/*.s' to
'lib/dns/zone.c'. When setting new NSEC3 parameters, you can set a new
function parameter 'resalt' to enforce a new salt to be generated. A
new salt will also be generated if 'salt' is set to NULL.

Logging salt with zone context can now be done with 'dnssec_log',
removing the need for 'dns_nsec3_log_salt'.

(cherry picked from commit 6b5d7357df)
2020-11-26 14:15:05 +00:00
Matthijs Mekking c993bc19a0 Add changes and notes for kasp NSEC3 support
This feature is news worthy.

(cherry picked from commit 9adad77ac3)
2020-11-26 14:15:03 +00:00
Michał Kępień ce18f66336 Set up release notes for BIND 9.16.10 2020-11-26 12:30:25 +01:00
Michał Kępień 259bcc5cc2 Prepare release notes for BIND 9.16.9 2020-11-26 12:25:53 +01:00
Michał Kępień d857435c02 Add release note for GL #2244 2020-11-26 12:25:53 +01:00
Michał Kępień 6a99a2f5e0 Add release note for GL #2236 2020-11-26 12:25:53 +01:00
Michał Kępień 9d847cb96b Add release note for GL #1736 2020-11-26 12:25:53 +01:00
Michał Kępień 10459b8151 Reorder release notes 2020-11-26 12:25:53 +01:00
Michał Kępień 51a5b64993 Tweak and reword release notes 2020-11-26 12:25:53 +01:00
Mark Andrews b3d259107f Fix DNAME when QTYPE is CNAME or ANY
The synthesised CNAME is not supposed to be followed when the
QTYPE is CNAME or ANY as the lookup is satisfied by the CNAME
record.

(cherry picked from commit e980affba0)
2020-11-19 10:52:29 +11:00
Diego Fronza af45a64f86 Add CHANGES and release notes entry 2020-11-11 16:09:15 -03:00
Witold KręcickiandOndřej Surý 0f1810efb2 Add CHANGES and release note for GL #2227
(cherry picked from commit cd3117b747)
2020-10-29 13:23:25 +01:00
Michał Kępień 09b9dffd46 Set up release notes for BIND 9.16.9 2020-10-22 09:14:31 +02:00
Michał Kępień a38a76d455 Prepare release notes for BIND 9.16.8 2020-10-22 09:09:07 +02:00
Michał Kępień 7adc616d7e Reorder release notes 2020-10-22 09:09:07 +02:00
Michał Kępień 92d513c235 Tweak and reword release notes 2020-10-22 09:09:07 +02:00
Matthijs Mekking 5c0b5b64e5 Don't increment network error stats on UV_EOF
When networking statistics was added to the netmgr (in commit
5234a8e00a), two lines were added that
increment the 'STATID_RECVFAIL' statistic: One if 'uv_read_start'
fails and one at the end of the 'read_cb'.  The latter happens
if 'nread < 0'.

According to the libuv documentation, I/O read callbacks (such as for
files and sockets) are passed a parameter 'nread'. If 'nread' is less
than 0, there was an error and 'UV_EOF' is the end of file error, which
you may want to handle differently.

In other words, we should not treat EOF as a RECVFAIL error.

(cherry picked from commit 6c5ff94218)
2020-10-20 14:05:09 +00:00
Ondřej Surý 45b081f406 Add text describing the changes done in the MR in more detail
(cherry picked from commit 096d41b4e2)
2020-10-06 09:35:21 +02:00
Matthijs Mekking 4d0dc466b5 Add rndc dnssec -rollover command
This command is similar in arguments as -checkds so refactor the
'named_server_dnssec' function accordingly.  The only difference
are that:

- It does not take a "publish" or "withdrawn" argument.
- It requires the key id to be set (add a check to make sure).

Add tests that will trigger rollover immediately and one that
schedules a test in the future.

(cherry picked from commit e826facadb)
2020-10-05 11:20:35 +02:00
Matthijs Mekking 795139a60c Add change and note for #2171
This is a bug that needs to be noted.

(cherry picked from commit d6d41e96a3)
2020-10-02 10:18:35 +02:00
Ondřej SurýandOndřej Surý f779b8d1b4 Add CHANGES and release note for GL #2124
(cherry picked from commit 6179a38810)
2020-09-30 14:26:44 +02:00
Matthijs Mekking 48c7c7f2a6 Add notes and CHANGES for #1870
This is a new features so it requires a CHANGE and release notes entry.

(cherry picked from commit 1728599684)
2020-09-25 08:21:14 +02:00
Ondřej Surý dfb2b6b833 Add CHANGES and release note for GL #2166
(cherry picked from commit 2869ca1401)
2020-09-21 10:58:37 +02:00
Michał Kępień 62f6653a12 Add release note
(cherry picked from commit 853a51d4a9)
2020-09-21 09:32:22 +02:00
Michał Kępień b027f992a0 Set up release notes for BIND 9.16.8 2020-09-16 22:55:35 +02:00
Michał Kępień 4cebadfc3f Prepare release notes for BIND 9.16.7 2020-09-16 22:50:38 +02:00
Michał Kępień a7f94c9502 Add release note for OSS-Fuzz fixes 2020-09-16 22:50:38 +02:00
Michał Kępień b3aa411651 Add release note for GL #2074 2020-09-16 22:50:38 +02:00
Michał Kępień fafc412ec6 Tweak and reword release notes 2020-09-16 22:50:38 +02:00
Evan Hunt df698d73f4 update all copyright headers to eliminate the typo 2020-09-14 16:50:58 -07:00
Diego FronzaandOndřej Surý d791f04960 Add CHANGES and release note for GL #1847
(cherry picked from commit 044a72cca9)
2020-09-02 16:52:39 +02:00
Matthijs Mekking 729668841e Add change entry and release note for #1748
(cherry picked from commit ff006a1730)
2020-09-02 14:59:20 +02:00
Ondřej Surý cc07b3f78a Add CHANGES and release note for GL #1928
(cherry picked from commit 4722196b13)
2020-08-28 20:49:02 +02:00
Ondřej SurýandOndřej Surý be46c49300 Add CHANGES and release notes for GL #2104
(cherry picked from commit d47d2b3fe0)
2020-08-28 20:43:39 +02:00
Evan Hunt 1c7e3c8515 Merge tag 'v9_16_6' into v9_16
BIND 9.16.6
2020-08-20 12:08:57 -07:00
Matthijs Mekking 06bc3f2210 Add notes for #1613 (rndc dnssec -checkds)
This is a new feature that should be mentioned in the notes.

(cherry picked from commit e4c82fc7ae)
2020-08-07 13:33:59 +02:00
Michał Kępień 1824496092 Reorder release notes 2020-08-06 09:19:25 +02:00
Michał Kępień dc8ecaad5d Prepare release notes for BIND 9.16.6 2020-08-06 09:19:25 +02:00
Michał Kępień 4b309940ba Add release note for #1976 2020-08-06 09:19:25 +02:00
Michał Kępień 123ce55a4a Add release note for #1619 2020-08-06 09:19:25 +02:00
Michał Kępień fdc6cf6369 Tweak and reword release notes 2020-08-06 09:19:25 +02:00
Mark AndrewsandMichał Kępień b3b46c5842 Add CHANGES and release note for GL #2055 2020-08-05 15:55:06 +02:00
Ondřej SurýandMichał Kępień e3bd627e84 Add CHANGES and release note for GL #2037 2020-08-05 15:51:40 +02:00
Mark AndrewsandMichał Kępień be43228b61 Add CHANGES and release notes for GL #2028 2020-08-05 15:47:25 +02:00
Evan HuntandMichał Kępień 3a69802086 Add CHANGES and release note for GL #1997 2020-08-05 15:44:18 +02:00
Ondřej SurýandMichał Kępień 9d69ee740f Add CHANGES and release note for GL #1996 2020-08-05 12:57:58 +02:00
Matthijs Mekking c92de6cb44 stale-cache-enable is enabled by default
Because this is a backport, the option should default to keep the
serve-stale caching enabled.
2020-08-05 09:09:16 +02:00
Ondřej SurýandMatthijs Mekking f3a7ee87ef Add CHANGES and release notes for GL #1712 and GL #1829
(cherry picked from commit dd62275152)
2020-08-05 09:09:16 +02:00
Diego Fronza e1561f0eb2 Add CHANGES and release note for #1719 2020-08-03 19:18:04 -03:00
Witold KręcickiandOndřej Surý 95fb38619b Add CHANGES and release note for GL #2038
(cherry picked from commit 94eda43ab2)
2020-07-31 13:33:24 +02:00