Commit Graph
1687 Commits
Author SHA1 Message Date
Automatic Updater 587355bb62 update copyright notice 2009-10-06 23:47:22 +00:00
Evan Hunt a9775fe88d 2706. [bug] Loading a zone with a very large NSEC3 salt could
trigger an assert. [RT #20368]
2009-10-06 21:20:18 +00:00
Automatic Updater bf06c5e25a update copyright notice 2009-06-26 23:47:12 +00:00
Mark Andrews 99525899e8 2617. [bug] ifconfig.sh failed to emit an error message when
run from the wrong location. [RT #19375]
2009-06-26 06:16:31 +00:00
Mark Andrews f4dd23b4f4 remove 2009-06-23 00:12:50 +00:00
Automatic Updater 6e67205ba7 update copyright notice 2009-06-22 23:47:18 +00:00
Mark Andrews e6be77a26c 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-22 05:05:01 +00:00
Automatic Updater 4b24acd9f1 update copyright notice 2009-06-08 23:47:00 +00:00
Evan Hunt 4d6469ffd8 Back out dnssec-signzone fix for 9.6.1 2009-06-08 22:23:07 +00:00
Automatic Updater c441671e8f update copyright notice 2009-06-04 02:56:14 +00:00
Mark Andrews 5fa0c17a78 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-04 02:41:54 +00:00
cvs2git a75a29c672 This commit was manufactured by cvs2git to create branch 'v9_6'. 2009-06-04 02:13:38 +00:00
Mark Andrews 2534a73a59 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-04 02:13:37 +00:00
Automatic Updater e6ada020f5 update copyright notice 2009-05-29 23:47:49 +00:00
Tatuya JINMEI 神明達哉 40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
2009-05-29 22:22:37 +00:00
Automatic Updater 4f91bcae43 update copyright notice 2009-03-02 23:47:43 +00:00
Automatic Updater d76a60502e update copyright notice 2009-03-02 23:47:11 +00:00
Evan Hunt ca42dcc068 2569. [func] Move journalprint, nsec3hash, and genrandom
commands from bin/tests into bin/tools;
                        "make install" will put them in $sbindir. [RT #19301]
2009-03-02 03:54:10 +00:00
Mark Andrews 1cac6c196f report and abort on getcwd() failures 2009-03-02 02:48:02 +00:00
Mark Andrews fa49fa674f report and abort on getcwd() failures 2009-03-02 02:46:26 +00:00
Mark Andrews 56fe846d21 report write error. [RT #19360] 2009-03-02 02:42:50 +00:00
Mark Andrews f9bb7d0c54 report write error. [RT #19360] 2009-03-02 02:37:30 +00:00
Mark Andrews e4c6491bbf 2565. [func] Add support for HIP record. Includes new functions
dns_rdata_hip_first(), dns_rdata_hip_next()
                        and dns_rdata_hip_current().  [RT #19384]
2009-02-26 06:09:19 +00:00
Automatic Updater 53f0234c3e update copyright notice 2009-02-06 23:47:42 +00:00
Francis Dupont c1d7e0562f OpenSSL hashes 2009-02-06 12:26:23 +00:00
Automatic Updater 8b835581b4 update copyright notice 2009-01-30 23:47:50 +00:00
Automatic Updater c95fad6e63 update copyright notice 2009-01-30 23:47:18 +00:00
Mark Andrews 46d48a2f5c 2539. [security] Update the interaction between recursion, allow-query,
allow-query-cache and allow-recursion.  [RT #19198]
2009-01-30 08:21:03 +00:00
Mark Andrews 14810640b7 2539. [security] Update the interaction between recursion, allow-query,
allow-query-cache and allow-recursion.  [RT #19198]
2009-01-30 08:19:00 +00:00
Automatic Updater 3319413a67 update copyright notice 2009-01-22 23:47:54 +00:00
Automatic Updater 9bfde0aa2f update copyright notice 2009-01-22 23:47:05 +00:00
Mark Andrews 99772d76b0 2536. [cleanup] Silence some warnings when -Werror=format-security is
specified. [RT #19083]
2009-01-22 05:50:19 +00:00
Mark Andrews f148f53794 2536. [cleanup] Silence some warnings when -Werror=format-security is
specified. [RT #19083]
2009-01-22 05:39:29 +00:00
Automatic Updater 83b86f3936 update copyright notice 2009-01-21 23:47:27 +00:00
Mark Andrews 31b7a2fed6 2534. [func] Check NAPTR records regular expressions and
replacement strings to ensure they are syntaxically
                        valid and consistant. [RT #18168]
2009-01-21 05:37:55 +00:00
Evan Hunt 95de316a5d suppress an error message on solaris. [rt18253] 2008-10-09 21:27:52 +00:00
Mark Andrews 6edc665a3d return rather than exit from main 2008-09-26 01:31:19 +00:00
Automatic Updater 3398334b3a update copyright notice 2008-09-25 04:02:39 +00:00
Mark Andrews 5737b74d34 2453. [bug] Remove NULL pointer dereference in dns_journal_print().
[RT #18316]

2452.   [func]          Improve bin/test/journalprint. [RT #18316]
2008-09-25 02:01:45 +00:00
Mark Andrews 6098d364b6 2448. [func] Add NSEC3 support. [RT #15452] 2008-09-24 02:46:23 +00:00
Francis Dupont cbb8a1b7cb Support Solaris 2.11 and over. [RT #18362] 2008-07-25 20:40:07 +00:00
Mark Andrews 240e53b132 2396. [bug] Don't set SO_REUSEADDR for randomized ports.
[RT #18336]
part 2
2008-07-23 23:27:54 +00:00
Automatic Updater 1d16cf8bb8 update copyright notice 2008-07-22 23:47:04 +00:00
Mark Andrews 9de0f9b0ae 2396. [bug] Don't set SO_REUSEADDR for randomized ports.
[RT #18336]
2008-07-22 03:43:04 +00:00
Evan Hunt 7ed4399c65 remove 'grep -q' from acl test script, some platforms don't
support it. [rt18253]
2008-07-19 00:02:14 +00:00
Mark Andrews 862015b91f cleanup 2008-07-17 01:15:34 +00:00
Automatic Updater ebce5dc2fe update copyright notice 2008-05-19 23:47:03 +00:00
Mark Andrews b3ac666ce5 silence linker warning: add ${LDFLAGS} 2008-05-19 00:36:14 +00:00
Automatic Updater 1dd754dcdf update copyright notice 2008-04-24 23:46:59 +00:00
Evan Hunt 66e50468dd Change rrsetorder test two ways:
1) only test "fixed" ordering if it was compiled in
2) test whether "cyclic" ordering is cyclic, but don't
   rely on the initial state being predictable
[rt17977]
2008-04-24 21:50:27 +00:00