Michał Kępień
7700fa6c65
Merge branch '341-constify-dns_rdata_tostruct-v9_9' into 'v9_9'
...
[v9_9] constify dns_rdata_tostruct
See merge request isc-projects/bind9!383
2018-06-15 03:34:54 -04:00
Mark Andrews
66c6414b97
Declare the 'rdata' argument for dns_rdata_tostruct() to be const
...
(cherry picked from commit abb2fd1027 )
2018-06-15 08:52:54 +02:00
Ondřej Surý
310fdc4a0f
Merge branch '309-fix-default-recursion-v9_9' into 'v9_9'
...
Resolve "Recursion improperly allowed by default"
See merge request isc-projects/bind9!376
2018-06-14 08:54:34 -04:00
Evan Hunt
010db17e15
add a regression test for default allow-recursion settings
2018-06-14 14:48:46 +02:00
Evan Hunt
fae03da5cb
allow-recursion could incorrectly inherit from the default allow-query
2018-06-14 14:48:46 +02:00
Michał Kępień
c3a08d84b7
Merge branch '298-fix-dname-handling-in-dnssec-tools-v9_9' into 'v9_9'
...
[v9_9] Fix DNAME handling in DNSSEC tools
See merge request isc-projects/bind9!366
2018-06-13 07:29:28 -04:00
Michał Kępień
a34e955b83
Add CHANGES entry
...
4971. [bug] dnssec-signzone and dnssec-verify did not treat records
below a DNAME as out-of-zone data. [GL #298 ]
(cherry picked from commit de5916a7bf )
2018-06-13 13:11:18 +02:00
Mark Andrews
7e4e19c2ad
Pull out the saving of the zone cut into a separate function
...
(cherry picked from commit ec75a07023 )
2018-06-13 13:11:16 +02:00
Michał Kępień
b3bee6cd37
Treat records below a DNAME as out-of-zone data
...
DNAME records indicate bottom of zone and thus no records below a DNAME
should be DNSSEC-signed or included in NSEC(3) chains. Add a helper
function, has_dname(), for detecting DNAME records at a given node.
Prevent signing DNAME-obscured records. Check that DNAME-obscured
records are not signed.
(cherry picked from commit 9a4145168c )
2018-06-13 13:11:13 +02:00
Ondřej Surý
0aca13a796
Merge branch '332-v9_9-move-lib-irs-to-lib-export-irs' into 'v9_9'
...
Resolve "v9_9 move lib/irs to lib/export/irs"
See merge request isc-projects/bind9!359
2018-06-13 04:59:38 -04:00
Mark Andrews
64b57ee788
add Atffile{.in} and Kyuafile{.in}
2018-06-13 14:35:58 +10:00
Mark Andrews
5260f416fd
make lib/Atffile and lib/Kyuafile dependent on exportlib being enabled or not
2018-06-13 14:32:13 +10:00
Mark Andrews
5a21b2b764
update
2018-06-12 15:08:12 +10:00
Mark Andrews
6b8ac24be3
move lib/irs to lib/export/irs
2018-06-12 15:03:40 +10:00
Evan Hunt
a62a9f2a2a
Merge branch 'fix-strtok' into 'v9_9'
2018-06-09 23:04:49 -07:00
Evan Hunt
535aa0e034
complete strtok fix
...
(cherry picked from commit 74c3b9d3b2 )
2018-06-09 23:04:47 -07:00
Evan Hunt
d72107d9d2
Merge branch 'fix-strtok' into 'v9_9'
2018-06-09 22:37:26 -07:00
Evan Hunt
212ed88323
use strtok() instead of strtok_r() in command line processing
...
(cherry picked from commit 1734f1b3b9 )
2018-06-09 22:37:18 -07:00
Evan Hunt
6927f92249
Merge branch 'validate-glue' into v9_9
2018-06-08 11:52:16 -07:00
Evan Hunt
c31d32434d
ensure we try to validate glue records so RRSIG TTLs will be capped
2018-06-08 11:43:20 -07:00
Mukund Sivaraman
d238f08c66
Add CHANGES entry
...
(cherry picked from commit dfd73d7e16 )
2018-06-08 11:05:20 -07:00
Mukund Sivaraman
ad7141d2ec
Add system test
...
(cherry picked from commit 303391ea41 )
2018-06-08 11:05:20 -07:00
Mukund Sivaraman
6cd4cb3d2a
Don't validate non-pending glue when adding to the additional section
...
(cherry picked from commit 31bd3147d1 )
2018-06-08 11:05:19 -07:00
Mark Andrews
a6b573f324
Merge branch '325-add-cfg_parse_buffer4-v9_10-v9_9' into 'v9_9'
...
Resolve "add cfg_parse_buffer4"
Closes #325
See merge request isc-projects/bind9!353
2018-06-08 17:44:04 +10:00
Mark Andrews
4812471d45
add cfg_parse_buffer4
...
(cherry picked from commit b313084af2 )
(cherry picked from commit 51c78898fb )
2018-06-08 17:43:51 +10:00
Mark Andrews
9101eeb423
Merge branch '322-add-support-for-marking-options-as-deprecated-v9_10-v9_9' into 'v9_9'
...
Resolve "add support for marking options as deprecated."
Closes #322
See merge request isc-projects/bind9!351
2018-06-08 16:08:52 +10:00
Mark Andrews
18700f66be
Add support for marking a option as deprecated.
...
(cherry picked from commit befff9452c )
(cherry picked from commit 99ac87cac4 )
2018-06-08 16:08:39 +10:00
Mark Andrews
1ffcbd8681
Merge branch '240-multiple-rrsigs-on-some-records-in-signed-zone-even-though-only-one-key-is-ever-active-at-a-time-v9_12-v9_11-v9_10-v9_9' into 'v9_9'
...
Resolve "Multiple RRSIGs on some records in signed zone even though only one key is ever active at a time"
Closes #240
See merge request isc-projects/bind9!231
2018-06-06 17:56:09 +10:00
Mark Andrews
a73702c9ec
add CHANGES note
...
(cherry picked from commit ba7a343156 )
(cherry picked from commit 00f1956c9e )
(cherry picked from commit 1c8aa28455 )
(cherry picked from commit b331bb8038 )
2018-06-06 17:55:52 +10:00
Mark Andrews
0c1fd3b8e1
add duplicate signature test
...
(cherry picked from commit 0db5b087ed )
(cherry picked from commit 1783fa5aba )
(cherry picked from commit 1710e5cfca )
(cherry picked from commit abbfbeffa6 )
2018-06-06 17:55:50 +10:00
Mark Andrews
eb69786ff6
add support -T sigvalinsecs
...
(cherry picked from commit 87a3dc8ab9 )
(cherry picked from commit 69340b5ac5 )
(cherry picked from commit dd05287a31 )
(cherry picked from commit ba76a92338 )
2018-06-06 17:51:35 +10:00
Mark Andrews
3408ab391a
only sign with other keys when deleting a key if there are not already existing signature for the deleted algorithm
...
(cherry picked from commit 0667bf7ae7 )
(cherry picked from commit c1e342cedb )
(cherry picked from commit 298372d8d2 )
(cherry picked from commit 5686e3bb6a )
2018-06-06 17:47:51 +10:00
Mark Andrews
680d07afda
Merge branch '316-move-named-t-processing-to-its-own-function-v9_9' into 'v9_9'
...
Resolve "move named -T processing to its own function"
Closes #316
See merge request isc-projects/bind9!343
2018-06-06 15:21:46 +10:00
Mark Andrews
3768d8dbe4
add CHANGES
...
(cherry picked from commit ef7401e4a7 )
2018-06-06 15:21:37 +10:00
Mark Andrews
af6deb25ab
move -T parsing to its own function
...
(cherry picked from commit b491ceeb50 )
2018-06-06 15:21:09 +10:00
Evan Hunt
fbffaba669
Merge branch '302-use-ip-for-ifconfig' into 'v9_9'
...
Resolve "ifconfig.sh doesn't work on centos7"
Closes #302
See merge request isc-projects/bind9!330
2018-06-05 21:51:08 -07:00
Evan Hunt
ef68af811c
CHANGES
...
(cherry picked from commit 71f2335f5a )
(cherry picked from commit 7f16672ab8 )
2018-06-05 21:51:05 -07:00
Evan Hunt
1e56d78c6e
use "ip" on linux, falling back to "ifconfig" when it isn't available
...
(cherry picked from commit d7c5400798 )
(cherry picked from commit 3e1a0c2b62 )
2018-06-05 21:51:05 -07:00
Evan Hunt
b5dc325065
expand address range in ifconfig.sh to include more than one subnet
...
(cherry picked from commit 41b29a436b )
(cherry picked from commit e4487b160c )
2018-06-05 21:51:03 -07:00
Evan Hunt
7236e6e931
Merge branch 'backport-sentinel' into 'v9_9'
2018-06-04 21:38:14 -07:00
Evan Hunt
a37706ebb7
add prerequisite check
...
(cherry picked from commit e229ae6999 )
(cherry picked from commit a5ac84370c )
2018-06-04 21:38:07 -07:00
Mark Andrews
69d3b87855
CHANGES entry for root-key-sentinel
...
(cherry picked from commit 2845d7160e )
(cherry picked from commit af267c4da9 )
(cherry picked from commit 106fc761de )
(cherry picked from commit bfbf3baff7 )
2018-06-04 21:38:06 -07:00
Mark Andrews
4b4d9b37fb
add release note for root-key-sentinel
...
(cherry picked from commit e20790c956 )
(cherry picked from commit edb761b08c )
(cherry picked from commit b3e93d1b0f )
(cherry picked from commit 56628dffc7 )
2018-06-04 21:38:06 -07:00
Mark Andrews
9aba5ca84b
add system test for root-key-sentinel
...
(cherry picked from commit a23b305e6b )
(cherry picked from commit b9e6b124aa )
(cherry picked from commit 9448c4fd21 )
(cherry picked from commit 8f139956ba )
2018-06-04 21:38:04 -07:00
Mark Andrews
3890b5d7ba
add named.conf option root-key-sentinel
...
(cherry picked from commit 68e9315c7d )
(cherry picked from commit ee763ef281 )
(cherry picked from commit 9a5f308287 )
(cherry picked from commit 468a3bcdac )
2018-06-04 21:30:33 -07:00
Mark Andrews
2f20e10942
detect and process root-key-sentinel labels.
...
(cherry picked from commit 8fc9f64df9 )
(cherry picked from commit 7111eff80c )
(cherry picked from commit afa97c6552 )
(cherry picked from commit a624e884d4 )
2018-06-04 20:06:20 -07:00
Evan Hunt
490e81bfbd
clean up CHANGES numbers
2018-06-04 19:44:00 -07:00
Evan Hunt
6323a1cce8
Merge branch '310-check-changes-needs-to-be-called-for-v9_9' into 'v9_9'
...
Resolve "check-changes needs to be called for v9_9"
See merge request isc-projects/bind9!337
2018-06-04 19:26:37 -07:00
Mark Andrews
9561c95669
call util/check-changes in setup
...
(cherry picked from commit c0e69cc406 )
(cherry picked from commit 022b2b481f )
2018-06-04 19:26:30 -07:00
Mark Andrews
353f7d1bf5
Merge branch '281-dont-insert-extra-space-between-nsec3-nexthash-and-typemap-v9_9' into 'v9_9'
...
Resolve "9.11.3-S1 totext_nsec3 inserts a redundant white space between next hash and type map [ISC-support #12887 ]"
See merge request isc-projects/bind9!313
2018-06-04 13:35:13 +10:00