Commit Graph

24541 Commits

Author SHA1 Message Date
Michał Kępień
7700fa6c65 Merge branch '341-constify-dns_rdata_tostruct-v9_9' into 'v9_9'
[v9_9] constify dns_rdata_tostruct

See merge request isc-projects/bind9!383
2018-06-15 03:34:54 -04:00
Mark Andrews
66c6414b97 Declare the 'rdata' argument for dns_rdata_tostruct() to be const
(cherry picked from commit abb2fd1027)
2018-06-15 08:52:54 +02:00
Ondřej Surý
310fdc4a0f Merge branch '309-fix-default-recursion-v9_9' into 'v9_9'
Resolve "Recursion improperly allowed by default"

See merge request isc-projects/bind9!376
2018-06-14 08:54:34 -04:00
Evan Hunt
010db17e15 add a regression test for default allow-recursion settings 2018-06-14 14:48:46 +02:00
Evan Hunt
fae03da5cb allow-recursion could incorrectly inherit from the default allow-query 2018-06-14 14:48:46 +02:00
Michał Kępień
c3a08d84b7 Merge branch '298-fix-dname-handling-in-dnssec-tools-v9_9' into 'v9_9'
[v9_9] Fix DNAME handling in DNSSEC tools

See merge request isc-projects/bind9!366
2018-06-13 07:29:28 -04:00
Michał Kępień
a34e955b83 Add CHANGES entry
4971.	[bug]		dnssec-signzone and dnssec-verify did not treat records
			below a DNAME as out-of-zone data. [GL #298]

(cherry picked from commit de5916a7bf)
2018-06-13 13:11:18 +02:00
Mark Andrews
7e4e19c2ad Pull out the saving of the zone cut into a separate function
(cherry picked from commit ec75a07023)
2018-06-13 13:11:16 +02:00
Michał Kępień
b3bee6cd37 Treat records below a DNAME as out-of-zone data
DNAME records indicate bottom of zone and thus no records below a DNAME
should be DNSSEC-signed or included in NSEC(3) chains.  Add a helper
function, has_dname(), for detecting DNAME records at a given node.
Prevent signing DNAME-obscured records.  Check that DNAME-obscured
records are not signed.

(cherry picked from commit 9a4145168c)
2018-06-13 13:11:13 +02:00
Ondřej Surý
0aca13a796 Merge branch '332-v9_9-move-lib-irs-to-lib-export-irs' into 'v9_9'
Resolve "v9_9 move lib/irs to lib/export/irs"

See merge request isc-projects/bind9!359
2018-06-13 04:59:38 -04:00
Mark Andrews
64b57ee788 add Atffile{.in} and Kyuafile{.in} 2018-06-13 14:35:58 +10:00
Mark Andrews
5260f416fd make lib/Atffile and lib/Kyuafile dependent on exportlib being enabled or not 2018-06-13 14:32:13 +10:00
Mark Andrews
5a21b2b764 update 2018-06-12 15:08:12 +10:00
Mark Andrews
6b8ac24be3 move lib/irs to lib/export/irs 2018-06-12 15:03:40 +10:00
Evan Hunt
a62a9f2a2a Merge branch 'fix-strtok' into 'v9_9' 2018-06-09 23:04:49 -07:00
Evan Hunt
535aa0e034 complete strtok fix
(cherry picked from commit 74c3b9d3b2)
2018-06-09 23:04:47 -07:00
Evan Hunt
d72107d9d2 Merge branch 'fix-strtok' into 'v9_9' 2018-06-09 22:37:26 -07:00
Evan Hunt
212ed88323 use strtok() instead of strtok_r() in command line processing
(cherry picked from commit 1734f1b3b9)
2018-06-09 22:37:18 -07:00
Evan Hunt
6927f92249 Merge branch 'validate-glue' into v9_9 2018-06-08 11:52:16 -07:00
Evan Hunt
c31d32434d ensure we try to validate glue records so RRSIG TTLs will be capped 2018-06-08 11:43:20 -07:00
Mukund Sivaraman
d238f08c66 Add CHANGES entry
(cherry picked from commit dfd73d7e16)
2018-06-08 11:05:20 -07:00
Mukund Sivaraman
ad7141d2ec Add system test
(cherry picked from commit 303391ea41)
2018-06-08 11:05:20 -07:00
Mukund Sivaraman
6cd4cb3d2a Don't validate non-pending glue when adding to the additional section
(cherry picked from commit 31bd3147d1)
2018-06-08 11:05:19 -07:00
Mark Andrews
a6b573f324 Merge branch '325-add-cfg_parse_buffer4-v9_10-v9_9' into 'v9_9'
Resolve "add cfg_parse_buffer4"

Closes #325

See merge request isc-projects/bind9!353
2018-06-08 17:44:04 +10:00
Mark Andrews
4812471d45 add cfg_parse_buffer4
(cherry picked from commit b313084af2)
(cherry picked from commit 51c78898fb)
2018-06-08 17:43:51 +10:00
Mark Andrews
9101eeb423 Merge branch '322-add-support-for-marking-options-as-deprecated-v9_10-v9_9' into 'v9_9'
Resolve "add support for marking options as deprecated."

Closes #322

See merge request isc-projects/bind9!351
2018-06-08 16:08:52 +10:00
Mark Andrews
18700f66be Add support for marking a option as deprecated.
(cherry picked from commit befff9452c)
(cherry picked from commit 99ac87cac4)
2018-06-08 16:08:39 +10:00
Mark Andrews
1ffcbd8681 Merge branch '240-multiple-rrsigs-on-some-records-in-signed-zone-even-though-only-one-key-is-ever-active-at-a-time-v9_12-v9_11-v9_10-v9_9' into 'v9_9'
Resolve "Multiple RRSIGs on some records in signed zone even though only one key is ever active at a time"

Closes #240

See merge request isc-projects/bind9!231
2018-06-06 17:56:09 +10:00
Mark Andrews
a73702c9ec add CHANGES note
(cherry picked from commit ba7a343156)
(cherry picked from commit 00f1956c9e)
(cherry picked from commit 1c8aa28455)
(cherry picked from commit b331bb8038)
2018-06-06 17:55:52 +10:00
Mark Andrews
0c1fd3b8e1 add duplicate signature test
(cherry picked from commit 0db5b087ed)
(cherry picked from commit 1783fa5aba)
(cherry picked from commit 1710e5cfca)
(cherry picked from commit abbfbeffa6)
2018-06-06 17:55:50 +10:00
Mark Andrews
eb69786ff6 add support -T sigvalinsecs
(cherry picked from commit 87a3dc8ab9)
(cherry picked from commit 69340b5ac5)
(cherry picked from commit dd05287a31)
(cherry picked from commit ba76a92338)
2018-06-06 17:51:35 +10:00
Mark Andrews
3408ab391a only sign with other keys when deleting a key if there are not already existing signature for the deleted algorithm
(cherry picked from commit 0667bf7ae7)
(cherry picked from commit c1e342cedb)
(cherry picked from commit 298372d8d2)
(cherry picked from commit 5686e3bb6a)
2018-06-06 17:47:51 +10:00
Mark Andrews
680d07afda Merge branch '316-move-named-t-processing-to-its-own-function-v9_9' into 'v9_9'
Resolve "move named -T processing to its own function"

Closes #316

See merge request isc-projects/bind9!343
2018-06-06 15:21:46 +10:00
Mark Andrews
3768d8dbe4 add CHANGES
(cherry picked from commit ef7401e4a7)
2018-06-06 15:21:37 +10:00
Mark Andrews
af6deb25ab move -T parsing to its own function
(cherry picked from commit b491ceeb50)
2018-06-06 15:21:09 +10:00
Evan Hunt
fbffaba669 Merge branch '302-use-ip-for-ifconfig' into 'v9_9'
Resolve "ifconfig.sh doesn't work on centos7"

Closes #302

See merge request isc-projects/bind9!330
2018-06-05 21:51:08 -07:00
Evan Hunt
ef68af811c CHANGES
(cherry picked from commit 71f2335f5a)
(cherry picked from commit 7f16672ab8)
2018-06-05 21:51:05 -07:00
Evan Hunt
1e56d78c6e use "ip" on linux, falling back to "ifconfig" when it isn't available
(cherry picked from commit d7c5400798)
(cherry picked from commit 3e1a0c2b62)
2018-06-05 21:51:05 -07:00
Evan Hunt
b5dc325065 expand address range in ifconfig.sh to include more than one subnet
(cherry picked from commit 41b29a436b)
(cherry picked from commit e4487b160c)
2018-06-05 21:51:03 -07:00
Evan Hunt
7236e6e931 Merge branch 'backport-sentinel' into 'v9_9' 2018-06-04 21:38:14 -07:00
Evan Hunt
a37706ebb7 add prerequisite check
(cherry picked from commit e229ae6999)
(cherry picked from commit a5ac84370c)
2018-06-04 21:38:07 -07:00
Mark Andrews
69d3b87855 CHANGES entry for root-key-sentinel
(cherry picked from commit 2845d7160e)
(cherry picked from commit af267c4da9)
(cherry picked from commit 106fc761de)
(cherry picked from commit bfbf3baff7)
2018-06-04 21:38:06 -07:00
Mark Andrews
4b4d9b37fb add release note for root-key-sentinel
(cherry picked from commit e20790c956)
(cherry picked from commit edb761b08c)
(cherry picked from commit b3e93d1b0f)
(cherry picked from commit 56628dffc7)
2018-06-04 21:38:06 -07:00
Mark Andrews
9aba5ca84b add system test for root-key-sentinel
(cherry picked from commit a23b305e6b)
(cherry picked from commit b9e6b124aa)
(cherry picked from commit 9448c4fd21)
(cherry picked from commit 8f139956ba)
2018-06-04 21:38:04 -07:00
Mark Andrews
3890b5d7ba add named.conf option root-key-sentinel
(cherry picked from commit 68e9315c7d)
(cherry picked from commit ee763ef281)
(cherry picked from commit 9a5f308287)
(cherry picked from commit 468a3bcdac)
2018-06-04 21:30:33 -07:00
Mark Andrews
2f20e10942 detect and process root-key-sentinel labels.
(cherry picked from commit 8fc9f64df9)
(cherry picked from commit 7111eff80c)
(cherry picked from commit afa97c6552)
(cherry picked from commit a624e884d4)
2018-06-04 20:06:20 -07:00
Evan Hunt
490e81bfbd clean up CHANGES numbers 2018-06-04 19:44:00 -07:00
Evan Hunt
6323a1cce8 Merge branch '310-check-changes-needs-to-be-called-for-v9_9' into 'v9_9'
Resolve "check-changes needs to be called for v9_9"

See merge request isc-projects/bind9!337
2018-06-04 19:26:37 -07:00
Mark Andrews
9561c95669 call util/check-changes in setup
(cherry picked from commit c0e69cc406)
(cherry picked from commit 022b2b481f)
2018-06-04 19:26:30 -07:00
Mark Andrews
353f7d1bf5 Merge branch '281-dont-insert-extra-space-between-nsec3-nexthash-and-typemap-v9_9' into 'v9_9'
Resolve "9.11.3-S1 totext_nsec3 inserts a redundant white space between next hash and type map [ISC-support #12887]"

See merge request isc-projects/bind9!313
2018-06-04 13:35:13 +10:00