Automatic Updater
75f83bc01d
update
2009-12-30 09:15:35 +00:00
Tatuya JINMEI 神明達哉
59721b321d
2828. [security] Cached CNAME or DNAME RR could be returned to clients
...
without DNSSEC validation. [RT #20737 ]
9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
Additional notes specific to 9.4-ESV:
- I needed to explicitly enable dnssec-validation in "pending" system tests
because it's disabled by default for 9.4. This is not a problem of this
patch - the test was broken for 9.4 when it was first introduced. Another
reason why we need more detailed tests.
- I modified the test case for 9.4 so that it allows pending-additional-to-answer
promotion as 9.4 doesn't include this bug fix.
2009-12-30 08:55:48 +00:00
cvs2git
5a435720cd
This commit was manufactured by cvs2git to create branch 'v9_4'.
2009-12-30 08:02:24 +00:00
Tatuya JINMEI 神明達哉
d8680445d6
2828. [security] Cached CNAME or DNAME RR could be returned to clients
...
without DNSSEC validation. [RT #20737 ]
9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:02:23 +00:00
Automatic Updater
0f348b269b
update
2009-12-30 07:17:54 +00:00
Automatic Updater
bc46df332b
update
2009-12-30 07:15:38 +00:00
Evan Hunt
9ead684875
2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712 ]
2009-12-30 06:46:58 +00:00
Evan Hunt
d7985983b0
2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712 ]
2009-12-30 06:44:05 +00:00
Automatic Updater
3156309a79
update
2009-12-30 04:21:03 +00:00
Evan Hunt
687b6322fb
2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
...
being released. [RT #20740 ]
2009-12-30 03:38:57 +00:00
Automatic Updater
5a1d90c7ed
update
2009-12-30 03:21:48 +00:00
Mark Andrews
57fb4f7bbe
2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
...
was in the process of being created was not properly
recorded in the zone. [RT #20786 ]
2009-12-30 02:43:09 +00:00
Mark Andrews
7ddd859470
more for:
...
2824. [bug] "rndc sign" was not being run by the correct task.
[RT #20759 ]
2009-12-30 02:32:13 +00:00
Mark Andrews
502dc92f58
more for:
...
2824. [bug] "rndc sign" was not being run by the correct task.
[RT #20759 ]
2009-12-30 02:26:30 +00:00
Automatic Updater
0216fd2ac6
auto update
2009-12-29 23:19:13 +00:00
Automatic Updater
7fc63ac0ed
update
2009-12-29 23:17:04 +00:00
Mark Andrews
5b77627c09
2824. [bug] "rndc sign" was not being run by the correct task.
...
[RT #20759 ]
2009-12-29 22:20:33 +00:00
Automatic Updater
5e4b540170
update
2009-12-29 22:17:09 +00:00
Mark Andrews
288486df9d
2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781 ]
2009-12-29 22:04:16 +00:00
Automatic Updater
d4c0bf0a08
update
2009-12-29 09:17:23 +00:00
Mark Andrews
5773d3c007
2822. [bug] rbtdb.c:loadnode() could return the wrong result.
...
[RT #20802 ]
2009-12-29 08:53:33 +00:00
Automatic Updater
845309d349
update
2009-12-29 01:16:31 +00:00
Automatic Updater
d856585f5f
regen
2009-12-29 01:14:03 +00:00
Automatic Updater
773199d3ad
update
2009-12-29 00:19:31 +00:00
Evan Hunt
85c5ed3577
2821. [doc] Add note that named-checkconf doesn't automatically
...
read rndc.key and bind.keys [RT #20758 ]
2009-12-28 23:21:16 +00:00
Automatic Updater
ead17d97ab
auto update
2009-12-27 23:18:41 +00:00
Automatic Updater
85087d31ab
auto update
2009-12-24 23:18:40 +00:00
Automatic Updater
c67053f35f
update
2009-12-24 18:17:17 +00:00
Francis Dupont
0faf1492c7
non-readable openssl.cnf [20668]
2009-12-24 17:49:39 +00:00
Automatic Updater
0eaa00ce70
update
2009-12-24 01:16:43 +00:00
Evan Hunt
bd31f734ee
2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define
...
[RT #20771 ]
2009-12-24 00:35:46 +00:00
Automatic Updater
c6323eed9d
update
2009-12-24 00:20:11 +00:00
Evan Hunt
1361014b02
2818. [cleanup] rndc could return an incorrect error code
...
when a zone was not found. [RT #20767 ]
2009-12-24 00:14:20 +00:00
Evan Hunt
40ad4ed01b
2817. [cleanup] Removed unnecessary isc_tasc_endexclusive() calls.
...
[RT #20768 ]
2009-12-23 23:59:42 +00:00
Evan Hunt
b09559fd36
2816. [bug] previous_closest_nsec() could fail to return
...
data for NSEC3 nodes [RT #29730 ]
2009-12-23 23:43:01 +00:00
Evan Hunt
aa3415ba49
2815. [bug] Exclusively lock the task when freezing a zone.
...
[RT #19838 ]
2009-12-23 23:33:09 +00:00
Automatic Updater
f09e6b6025
auto update
2009-12-22 23:18:46 +00:00
Automatic Updater
a9890810cf
update
2009-12-21 05:17:55 +00:00
Mark Andrews
c9630524c7
2814. [func] Provide a definitive error message when a master
...
zone is not loaded. [RT #20757 ]
2009-12-21 04:29:10 +00:00
Automatic Updater
1585604c53
auto update
2009-12-19 23:19:16 +00:00
Automatic Updater
4c2ac09e46
update
2009-12-19 18:17:05 +00:00
Evan Hunt
f766024a27
change all keys from rsasha1 to nsec3rsasha1 so that the nsec->nsec3
...
transitions work correctly. (they worked before, but weren't supposed
to; when that bug was fixed, the test broke.)
2009-12-19 17:30:31 +00:00
Automatic Updater
3c8a4c7a8b
update
2009-12-19 01:16:40 +00:00
Automatic Updater
7a0d680aa5
regen
2009-12-19 01:14:05 +00:00
Automatic Updater
0d41ea8c5c
update
2009-12-19 00:19:37 +00:00
Automatic Updater
928e12ccdc
update copyright notice
2009-12-18 23:49:03 +00:00
Automatic Updater
59edd79b87
newcopyrights
2009-12-18 23:30:39 +00:00
Automatic Updater
f219cfd749
update
2009-12-18 23:16:58 +00:00
Evan Hunt
4e55893d30
2813. [bug] Better handling of unreadable DNSSEC key files.
...
[RT #20710 ]
2812. [bug] Make sure updates can't result in a zone with
NSEC-only keys and NSEC3 records. [RT 20748]
2009-12-18 22:16:49 +00:00
Automatic Updater
84faa4f2ef
update
2009-12-18 08:20:18 +00:00
