Commit Graph
40322 Commits
Author SHA1 Message Date
Matthijs Mekking df29698807 Merge branch '3335-confusing-parental-source-documentation' into 'main'
Remove confusing parental-source line

Closes #3335

See merge request isc-projects/bind9!6272
2022-05-11 11:17:54 +00:00
Matthijs Mekking 313f606692 Remove confusing parental-source line
Remove the line "This address must appear in the secondary server’s
parental-agents zone clause". This line is a copy paste error from
notify-source.

Rewrap.
2022-05-11 12:36:16 +02:00
Petr Špaček dd3d5af48c Merge branch 'pspacek/arm-remove-solaris251' into 'main'
Remove ARM notes about Solaris 2.5.1

See merge request isc-projects/bind9!6269
2022-05-11 09:02:29 +00:00
Petr Špaček 4388656f60 Remove ARM notes about Solaris 2.5.1
It was released in May 1996 and hopefully is not used to run BIND
anymore.
2022-05-11 11:01:59 +02:00
Petr Špaček 7037253e12 Merge branch '3169-arm-restructuring' into 'main'
Restructure ARM

Closes #1223

See merge request isc-projects/bind9!6156
2022-05-11 09:01:01 +00:00
Suzanne GoldlustandPetr Špaček 8a3c4cbcdd Add RPZ section to the ARM
Closes: #1223
2022-05-11 10:51:26 +02:00
Ron AitchisonandPetr Špaček 5d432d40a1 Rewrite Configurations and Zone Files section in the ARM 2022-05-11 10:51:26 +02:00
Ron AitchisonandPetr Špaček 178fc50b42 Tweak zones.inc.rst now separated from Reference section 2022-05-11 10:51:26 +02:00
Ron AitchisonandPetr Špaček d505090965 Move zone file material from Reference to new subsection of chapter 3 2022-05-11 10:51:26 +02:00
Ron AitchisonandPetr Špaček 4ac383e9ae Minor DNSSEC guide tweaks 2022-05-11 10:51:26 +02:00
Ron AitchisonandPetr Špaček 7842a0ca8f Restructure includes for chapter 9 Troubleshooting 2022-05-11 10:51:26 +02:00
Ron AitchisonandPetr Špaček 25eb91d23c Split chapter Advanced DNS Features in the ARM into chapters 5, 6, 7 2022-05-11 10:51:26 +02:00
Ron AitchisonandPetr Špaček cd1c230ff6 Split Configuration chapter in the ARM into chapters 3 and 4 2022-05-11 10:51:26 +02:00
Ron AitchisonandPetr Špaček 63e12b511f Add new ARM section Installing BIND 9 2022-05-11 10:51:26 +02:00
Ron AitchisonandPetr Špaček 0951922028 Rewrite Introduction chapters of the ARM 2022-05-11 10:51:26 +02:00
Petr Špaček 647318c9b7 License PNG and DIA images in the ARM under MPL-2.0 as usual 2022-05-11 10:51:26 +02:00
Petr Špaček 9d15decc41 Remove build from chapter 2 and move it to the end of ARM 2022-05-11 10:51:26 +02:00
Ron AitchisonandPetr Špaček 0c3b75f80b Change title and add extra link to Resource Requirements in the ARM 2022-05-11 10:51:26 +02:00
Ron AitchisonandPetr Špaček dc7efb8e60 Add link anchors into Configuration Reference section of the ARM 2022-05-11 10:51:26 +02:00
Petr Špaček 1322372a0c Restructure includes for ARM chapters 1 (Intro) and 2 (Requirements)
We have had perpetual problem with Sphinx implicitly double-including
files. To avoid that problem all files with name suffix .inc.rst are now
ignored by Sphinx, and writter can conveniently include them without
modifying conf.py for each and every file.
2022-05-11 10:51:21 +02:00
Michal Nowak 2abfadd05a Merge branch 'mnowak/set-up-version-and-release-notes-for-bind-9.19.2' into 'main'
Set up version and release notes for BIND 9.19.2

See merge request isc-projects/bind9!6281
2022-05-11 08:49:33 +00:00
Michal Nowak f7edd3c103 Set up release notes for BIND 9.19.2 2022-05-11 10:39:17 +02:00
Michal Nowak a5cd64df81 Update BIND version to 9.19.2-dev 2022-05-11 10:39:17 +02:00
Michal Nowak 8e12227580 Update BIND 9 version for release v9.19.1 2022-05-09 11:01:20 +02:00
Michal Nowak b17f6ce5af Add a CHANGES marker 2022-05-09 10:50:09 +02:00
Michal Nowak d94addbb3b Merge branch 'mnowak/prepare-documentation-for-bind-9.19.1' into 'security-main'
Prepare documentation for BIND 9.19.1

See merge request isc-private/bind9!402
2022-05-09 08:41:49 +00:00
Michal Nowak d25977e500 Reorder release notes 2022-05-09 10:10:22 +02:00
Michal Nowak 0cb80f7343 Tweak and reword release notes 2022-05-09 10:10:22 +02:00
Michal Nowak 7f1fbcb4e7 Prepare release notes for BIND 9.19.1 2022-05-06 17:00:40 +02:00
Michal Nowak 76b24ac081 Merge branch '3216-sslyze-crash-fix' into 'security-main'
[CVE-2022-1183] Fix a crash by avoiding destroying TLS stream socket too early

See merge request isc-private/bind9!400
2022-05-05 08:45:59 +00:00
Artem BoldarievandMichal Nowak 6791500e96 Add release note entry for [GL #3216] 2022-05-04 19:39:18 +02:00
Artem BoldarievandMichal Nowak 65c0de8e6f Add CHANGES entry for [GL #3216] 2022-05-04 19:39:03 +02:00
Artem BoldarievandMichal Nowak a696be6a2d Fix a crash by avoiding destroying TLS stream socket too early
This commit fixes a crash in generic TLS stream code, which could be
reproduced during some runs of the 'sslyze' tool.

The intention of this commit is twofold.

Firstly, it ensures that the TLS socket object cannot be destroyed too
early. Now it is being deleted alongside the underlying TCP socket
object.

Secondly, it ensures that the TLS socket object cannot be destroyed as
a result of calling 'tls_do_bio()' (the primary function which
performs encryption/decryption during the IO) as the code did not
expect that. This code path is fixed now.
2022-05-04 19:38:16 +02:00
Michal Nowak 081f717c53 Merge branch 'mnowak/add-placeholder-for-issue-3216' into 'main'
Add placeholder entry for [GL #3216]

See merge request isc-projects/bind9!6264
2022-05-04 17:35:43 +00:00
Michal Nowak 6786ef6eba Add placeholder entry for [GL #3216] 2022-05-04 19:13:26 +02:00
Mark Andrews 268a8a470b Merge branch '3232-rpz-rpz-nsip-rules-seem-not-to-understand-stub-and-static-stub-zones-and-don-t-handle' into 'main'
Resolve "RPZ rpz-nsip rules seem not to understand stub and static-stub zones and don't handle DNS_R_GLUE result well ..."

Closes #3232

See merge request isc-projects/bind9!6037
2022-05-04 13:51:07 +00:00
Mark Andrews 63f420c89a Add CHANGES entry for [GL #3232] 2022-05-04 23:30:32 +10:00
Mark Andrews f498d2db0d Allow DNS_RPZ_POLICY_ERROR to be converted to a string 2022-05-04 23:30:32 +10:00
Mark Andrews 8fb72012e3 Check the cache as well when glue NS are returned processing RPZ 2022-05-04 23:30:32 +10:00
Mark Andrews 07c828531c Process learned records as well as glue 2022-05-04 23:30:32 +10:00
Mark Andrews cf97c61f48 Process the delegating NS RRset when checking rpz rules 2022-05-04 23:30:32 +10:00
Mark Andrews 30cb70c826 Add test cases using static and static-stub zones
RPZ NSIP and NSDNAME checks were failing with "unrecognized NS
rpz_rrset_find() failed: glue" when static or static-stub zones
where used to resolve the query name.

Add tests using stub and static-stub zones that are expected to
be filtered and not-filtered against NSIP and NSDNAME rules.

stub and static-stub queries are expected to be filtered

stub-nomatch and static-stub-nomatch queries are expected to be passed
2022-05-04 23:30:32 +10:00
Ondřej Surý c9f9312f3f Merge branch 'ondrej-add-missing-void-in-named_config_default' into 'main'
Add missing void in named_config_getdefault() definition

See merge request isc-projects/bind9!6259
2022-05-04 11:05:26 +00:00
Ondřej Surý 94209ce947 Add missing void in named_config_getdefault() definition
The named_config_getdefault() was missing void in the function
definition.  This broke clang-15 that didn't match the declaration that
had the void in the argument with the definition that hadn't.
2022-05-04 13:01:22 +02:00
Ondřej Surý 1d1395a916 Merge branch '3321-libisc-so-undefined-reference-to-uv_os_getenv-on-stretch' into 'main'
Restore the implementation of uv_os_getenv() shim

Closes #3321

See merge request isc-projects/bind9!6258
2022-05-04 11:01:07 +00:00
Ondřej Surý a0a102cc50 Restore the implementation of uv_os_getenv() shim
Somewhere in the move from netmgr/uv-compat.h to uv.c, the
uv_os_getenv() implementation was lost in the process.  Restore the
implementation, so we can support Debian stretch for couple more months.
2022-05-04 12:31:46 +02:00
Ondřej Surý 4e8d1207ff Merge branch 'ondrej-use--Wl,--export-dynamic' into 'main'
Add -Wl,--export-dynamic to AM_LDFLAGS

See merge request isc-projects/bind9!6196
2022-05-03 19:13:56 +00:00
Ondřej Surý b05e20c968 Add -Wl,--export-dynamic to standard LDFLAGS if supported
From the ld man page:

  When creating a dynamically linked executable, using the -E option or
  the --export-dynamic option causes the linker to add all symbols to
  the dynamic symbol table.  The dynamic symbol table is the set of
  symbols which are visible from dynamic objects at run time.

This should allow the backtrace(3) to fully resolve the symbols when
creating backtrace on an assertion failure.
2022-05-03 21:13:33 +02:00
Arаm Sаrgsyаn a229b81dda Merge branch 'aram/catz-schema-v2-release-note' into 'main'
Add release note for catalog zones schema version 2 support

See merge request isc-projects/bind9!6248
2022-05-03 17:05:55 +00:00
Aram Sargsyan bc3dc2eb41 Add release note for catalog zones schema version 2 support 2022-05-03 16:41:55 +00:00