Commit Graph

8246 Commits

Author SHA1 Message Date
Evan Hunt
6dd373ebab 3121. [security] An authoritative name server sending a negative
response containing a very large RRset could
                        trigger an off-by-one error in the ncache code
                        and crash named. [RT #24650]

3120.	[bug]		Named could fail to validate zones listed in a DLV
			that validated insecure without using DLV and had
			DS records in the parent zone. [RT #24631]

3119.	[bug]		When rolling to a new DNSSEC key, a private-type
			record could be created and never marked complete.
			[RT #23253]
2011-05-26 23:10:13 +00:00
Mark Andrews
1bf261f075 9.7.4rc1 2011-05-24 00:41:44 +00:00
Evan Hunt
0b53de22db 3117. [cleanup] Remove doc and parser references to the
never-implemented 'auto-dnssec create' option.
			[RT #24533]
2011-05-23 20:55:24 +00:00
Automatic Updater
62bffa3ef0 update copyright notice 2011-05-19 23:46:30 +00:00
Evan Hunt
905b16ef04 another post-commit fix for change 3114: call dns_db_resigned()/
dns_db_setsigningtime() only when incrementally resigning, not other
times.
2011-05-19 21:28:01 +00:00
Evan Hunt
4b7c993dc2 3114. [bug] Retain expired RRSIGs in dynamic zones if key is
inactive and there is no replacement key. [RT #23136]
2011-05-19 04:42:18 +00:00
Evan Hunt
94a0e96ade add dns_dnssec_signs 2011-05-17 01:46:41 +00:00
Automatic Updater
d9e9d845a5 update copyright notice 2011-05-16 23:46:51 +00:00
Evan Hunt
1a035f7c01 "make install" was failing when building with both exportlibs and libtool.
(trivial makefile fix, no CHANGES note.) [RT #24425]
2011-05-16 22:53:56 +00:00
Automatic Updater
7fbd853c14 update copyright notice 2011-05-07 23:46:36 +00:00
Evan Hunt
52d14ab8a0 3111. [bug] Improved consistency checks for dnssec-enable and
dnssec-validation, added test cases to the
                        checkconf system test. [RT #24398]
2011-05-07 05:52:58 +00:00
Automatic Updater
d2d4121e41 update copyright notice 2011-05-06 23:46:35 +00:00
Evan Hunt
77e391dcf0 3107. [bug] dnssec-signzone: Report the correct number of ZSKs
when using -x. [RT #20852]
2011-05-06 21:07:23 +00:00
Evan Hunt
bbc2f43f5f 3101. [bug] Zones using automatic key maintenance could fail
to check the key repository for updates. [RT #23744]
2011-04-29 21:43:37 +00:00
Mark Andrews
c802ba3785 isc_file_isplainfile 2011-04-08 05:30:55 +00:00
Mark Andrews
0fa725f3bf dns_cache_create3 2011-04-08 04:46:13 +00:00
Mark Andrews
bb4175dc30 9.7.4b1 2011-04-08 00:22:19 +00:00
Mark Andrews
ebd1736e8f 3096. [bug] Set KRB5_KTNAME before calling log_cred() in
dst_gssapi_acceptctx(). [RT #24004]
2011-04-07 23:06:06 +00:00
Mark Andrews
05bec7caf8 3095. [bug] Handle isolated reserved ports in the port range.
[RT #23957]
2011-04-06 10:31:57 +00:00
Mark Andrews
2a55bd28af format portability: cast socklen_t -> long and use %ld 2011-04-05 06:35:37 +00:00
Mark Andrews
0f4fb51b1f 1 -> 1U 2011-04-04 11:11:41 +00:00
Automatic Updater
793c8a025a update copyright notice 2011-03-28 23:46:39 +00:00
Mark Andrews
da97d91bbf unsigned constants 2011-03-28 05:37:06 +00:00
Mark Andrews
2ac13a1d85 unsigned constants 2011-03-28 05:23:19 +00:00
Mark Andrews
c5f5e28dcd portability fixes backported from change 2987 2011-03-28 05:09:29 +00:00
Mark Andrews
08ac7f3da1 unsigned constants 2011-03-28 03:46:00 +00:00
Evan Hunt
de9953980e 3092. [bug] Signatures for records at the zone apex could go
stale due to an incorrect timer setting. [RT #23769]

3091.	[bug]		Fixed a bug in which zone keys that were published
			and then subsequently activated could fail to trigger
			automatic signing. [RT #22991]
2011-03-25 23:54:34 +00:00
Mark Andrews
53d275bcf7 3083. [bug] NOTIFY messages were not being sent when generating
a NSEC3 chain incrementally. [RT #23702]
2011-03-21 01:08:12 +00:00
Automatic Updater
abcb1ed6e5 update copyright notice 2011-03-18 23:46:46 +00:00
Francis Dupont
89a68a7d46 introduce STDTIME_ON_32BITS 2011-03-18 09:07:02 +00:00
Mark Andrews
f48478f001 3077. [bug] zone.c:zone_refreshkeys() incorrectly called
dns_zone_attach(), use zone->irefs instead. [RT #23303]
2011-03-17 05:30:21 +00:00
Mark Andrews
8a5052e802 3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistant
timestamp when determining which keys are active.
                        [RT #23642]
2011-03-17 01:22:27 +00:00
Mark Andrews
9a350f520a 3074. [bug] Make the adb cache read through for zone data and
glue learn for zone named is authoritative for.
                        [RT #22842]
2011-03-13 03:38:49 +00:00
Automatic Updater
88a65863a5 update copyright notice 2011-03-12 04:58:33 +00:00
Evan Hunt
3c3d03e138 Forgot to initialize a fixedname 2011-03-11 17:21:30 +00:00
Mark Andrews
ec9d326340 3073. [bug] managed-keys changes were not properly being recorded.
[RT #20256]
2011-03-11 13:24:36 +00:00
Mark Andrews
526b51ec93 3069. [cleanup] Silence warnings messages from clang static analysis.
[RT #20256]
2011-03-11 07:12:03 +00:00
Mark Andrews
b44a3cb109 pkey is only used if USE_ENGINE is defined or USE_EVP is 1 2011-03-11 02:54:07 +00:00
Evan Hunt
d7112a033e Reversing prior change, turns out not to be legal on all compilers. 2011-03-11 01:28:29 +00:00
Evan Hunt
aa691f6fb4 Silence a compiler warning by using #if comparison instead of if. No
CHANGES note because it's trivial. [RT #23587]
2011-03-11 01:21:57 +00:00
Mark Andrews
c4f131dce9 3068. [bug] Named failed to build with a OpenSSL without engine
support. [RT #23473]
2011-03-11 01:17:09 +00:00
Automatic Updater
7c8c5acdcf update copyright notice 2011-03-09 23:46:26 +00:00
Mark Andrews
7a3e203b2d 3065. [bug] RRSIG could have time stamps too far in the future.
[RT #23356]
2011-03-09 07:29:39 +00:00
Mark Andrews
0b80655d1b add 'sync' to ISC_PLATFORM_USEMACASM build as well 2011-03-08 00:52:04 +00:00
Automatic Updater
9a99e3c47e update copyright notice 2011-03-07 23:46:46 +00:00
Mark Andrews
29baaada1d 3064. [bug] powerpc: add sync instructions to the end of atomic
operations. [RT #23469]
2011-03-07 00:23:54 +00:00
Automatic Updater
871a3ebc69 update copyright notice 2011-03-05 23:51:39 +00:00
Scott Mann
71986a4364 Ensure that log files are plain files. (RT #22771) 2011-03-04 14:17:50 +00:00
Automatic Updater
2e19f9ff58 update copyright notice 2011-03-03 23:46:43 +00:00
Evan Hunt
031da3eb0c 3053. [bug] Under a sustained high query load with a finite
max-cache-size, it was possible for cache memory
			to be exhausted and not recovered. [RT #23371]
2011-03-03 04:43:36 +00:00