ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
24,541 Commits 589 Branches 805 Tags
7700fa6c659ded3ca2019fac207a2dd64c6dba25
Commit Graph
30 Commits
Author SHA1 Message Date
Michał KępieńandEvan Hunt 8b0f7f1b8d Apply raw zone deltas to yet unsigned secure zones 
When inline signing is enabled for a zone without creating signing keys
for it, changes subsequently applied to the raw zone will not be
reflected in the secure zone due to the dns_update_signaturesinc() call
inside receive_secure_serial() failing.  Given that an inline zone will
be served (without any signatures) even with no associated signing keys
being present, keep applying raw zone deltas to the secure zone until
keys become available in an attempt to follow the principle of least
astonishment.

(cherry picked from commit 6acf326969)
(cherry picked from commit 8a58a60772)
(cherry picked from commit fcbdeed802)
 2018-04-25 12:24:36 -07:00
Ondřej Surý 9f830be501 update file headers to remove copyright years 2018-03-15 09:09:15 +01:00
Evan Hunt 7677cb277a final cleanup 
- add CHANGES note
- update copyrights and license headers
 2018-02-25 13:13:26 -08:00
Evan Hunt f8fe59f279 parallelize most system tests 
(cherry picked from commit c032c54dda)
(cherry picked from commit 2b81f322cb)
(cherry picked from commit 167fa161d1)
(cherry picked from commit 1f297d33a0)
 2018-02-25 11:17:55 -08:00
Mark Andrews 4a51a6fd40 4840. [test] Add tests to cover fallback to using ZSK on inactive 
KSK. [RT #46787]

(cherry picked from commit 32d09cd7e0)
(cherry picked from commit 0d6328ce5f)
(cherry picked from commit 51f13bcd2f)
 2017-12-06 20:50:56 +11:00
Mark Andrews 5ed673c0d2 4837. [bug] dns_update_signatures{inc} (add_sigs) was not 
properly determining if there were active KSK and
                        ZSK keys for a algorithm when update-check-ksk is
                        true (default) leaving records unsigned. [RT #46743]

(cherry picked from commit 196e01da5f)
(cherry picked from commit bf459d24a1)
(cherry picked from commit 5623f65cc4)
 2017-12-04 10:09:45 +11:00
Tinderbox User de1ba63361 update copyright notice / whitespace 2017-09-18 23:58:51 +00:00
Michał Kępień c0ef11fb2e [v9_9] Prevent possible infinite signing loop after retransferring an inline-signed slave using NSEC3 
4727.	[bug]		Retransferring an inline-signed slave using NSEC3
			around the time its NSEC3 salt was changed could result
			in an infinite signing loop. [RT #45080]

(cherry picked from commit 4ceebc8874)
 2017-09-18 09:30:56 +02:00
Mark Andrews 332652409f 3958. [bug] Detect when writeable files have multiple references 
in named.conf. [RT #37172]

(cherry picked from commit 386d6c08167bc048dfd20e3bba051a5f9d3cc545)
 2014-09-29 11:32:52 +10:00
Evan Hunt 5409faef5e [v9_9] use posix-compatible shell in system tests 
3839.	[test]		Use only posix-compatible shell in system tests.
			[RT #35625]

(cherry picked from commit 60988462e5)
(cherry picked from commit 812cf443bb)
 2014-05-06 22:18:08 -07:00
Evan Hunt 8b5a1caae7 [v9_9] use test -r in system tests 
3806.	[test]		Improved system test portability. [RT #35625]

(cherry picked from commit 922959581bbdd70d5c9cae1cb107974c3d38ed08)
 2014-04-09 20:30:17 -07:00
Evan Hunt a9eb392c55 [v9_9] testcrypto.sh in system tests 
3714.  [test]          System tests that need to test for cryptography
                       support before running can now use a common
                       "testcrypto.sh" script to do so. [RT #35213]
 2014-02-06 16:10:03 -08:00
Mark Andrews 5b609bd57e back port inline system test fixes from master 2013-11-13 16:00:48 +11:00
Mark Andrews 2e4548087a 3642. [func] Allow externally generated DNSKEY to be imported 
into the DNSKEY management framework.  A new tool
                        dnssec-importkey is used to this. [RT #34698]
 2013-11-13 12:54:37 +11:00
Tinderbox User d1fb83012b update copyright notice 2013-08-15 23:45:44 +00:00
Mark Andrews e95e204520 3635. [bug] Signatures were not being removed from a zone with 
only KSK keys for a algorithm. [RT #24439]

(cherry picked from commit d1e22676de)
 2013-08-15 13:37:47 +10:00
Tinderbox User c201888c2a regen v9_9 2012-03-07 01:59:30 +00:00
Evan Hunt f94af76649 Revert "added gitignore, removed cvsignore" 
This reverts commit e8ae173655.
 2012-03-05 08:24:17 -08:00
Evan Hunt e8ae173655 added gitignore, removed cvsignore 2012-03-03 23:24:11 -08:00
Mark Andrews 1032216f5c 3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036] 2012-02-23 07:02:20 +00:00
Automatic Updater edb4393ef5 update copyright notice 2012-01-10 23:46:58 +00:00
Evan Hunt 9a02019889 3264. [bug] Automatic regeneration of signatures in an 
inline-signing zone could stall when the server
			was restarted. [RT #27344]

3263.	[bug]		"rndc sync" did not affect the unsigned side of an
			inline-signing zone. [RT #27337]
 2012-01-10 18:13:37 +00:00
Evan Hunt f30785f506 3252. [bug] When master zones using inline-signing were 
updated while the server was offline, the source
			zone could fall out of sync with the signed
			copy. They can now resynchronize. [RT #26676]
 2011-12-22 07:32:41 +00:00
Mark Andrews e238ebd9b3 Backout accident commit to head 2011-12-09 22:09:26 +00:00
Mark Andrews 5ccf5eac0f ixfr-from-differences backup file 2011-12-09 13:32:42 +00:00
Mark Andrews 24ef32426d 3181. [func] Inline-signing is now supported for master zones. 
[RT #26224]
 2011-10-26 20:56:45 +00:00
Mark Andrews b1c6de5456 3177. [func] 'rndc keydone', remove the indicator record that 
named has finished signing the zone with the
                        corresponding key.  [RT #26206]
 2011-10-25 01:54:22 +00:00
Mark Andrews 02286522fb 3166. [bug] Upgrading a zone to support inline-signing failed. [RT #26014] 2011-10-12 00:10:20 +00:00
Automatic Updater 4e68c7c87c update copyright notice 2011-08-30 23:46:53 +00:00
Mark Andrews 9198ab377b 3147. [func] Initial inline signing support. [RT #23657] 2011-08-30 05:16:15 +00:00