ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
16,515 Commits 589 Branches 805 Tags
77d2bb78af27818cb2c0e93bfb63bbb02ffaa2ec
Commit Graph
1445 Commits
Author SHA1 Message Date
Evan Hunt a9775fe88d 2706. [bug] Loading a zone with a very large NSEC3 salt could 
trigger an assert. [RT #20368]
 2009-10-06 21:20:18 +00:00
Evan Hunt c459aec591 2705. [bug] Reconcile the XML stats version number with a later 
BIND9 release, by adding a "name" attribute to
                        "cache" elements and increasing the version number
                        to 2.2.  (This is a minor version change, but may
                        affect XML parsers if they assume the cache element
                        doesn't take an attribute.)

2704.	[bug]		Serial of dynamic and stub zones could be inconsistent
			with their SOA serial.  [RT #19387]
 2009-10-05 21:57:00 +00:00
Mark Andrews a416993543 2920. [bug] Delay thawing the zone until the reload of it has 
completed successfully.  [RT #19750]
 2009-07-11 04:23:54 +00:00
Automatic Updater 6e67205ba7 update copyright notice 2009-06-22 23:47:18 +00:00
Mark Andrews e6be77a26c 2608. [func] Perform post signing verification checks in 
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
 2009-06-22 05:05:01 +00:00
Automatic Updater 4b24acd9f1 update copyright notice 2009-06-08 23:47:00 +00:00
Evan Hunt 4d6469ffd8 Back out dnssec-signzone fix for 9.6.1 2009-06-08 22:23:07 +00:00
Automatic Updater c441671e8f update copyright notice 2009-06-04 02:56:14 +00:00
Mark Andrews 5fa0c17a78 2608. [func] Perform post signing verification checks in 
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
 2009-06-04 02:41:54 +00:00
Automatic Updater 846e500945 update copyright notice 2009-05-07 23:47:12 +00:00
Tatuya JINMEI 神明達哉 0e8a52d67d 2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay 
long, leading to inefficient memory usage or rejecting
			newer cache entries in the worst case. [RT #19563]
 2009-05-06 23:34:30 +00:00
Mark Andrews 1f67b99159 2511. [cleanup] dns_rdata_tofmttext() add const to linebreak. 
[RT #18885]
 2009-02-16 00:29:27 +00:00
Automatic Updater eba7320df5 update copyright notice 2009-01-29 23:47:44 +00:00
Tatuya JINMEI 神明達哉 809350646f 2537. [experimental] Added more statistics counters including those on socket 
I/O events and query RTT histograms. [RT #18802]
 2009-01-29 22:40:36 +00:00
Automatic Updater 99b63ca8e5 update copyright notice 2009-01-18 23:47:41 +00:00
Mark Andrews d7900926bf spelling 2009-01-18 23:25:18 +00:00
Automatic Updater eb38c046c2 update copyright notice 2009-01-07 23:47:16 +00:00
Tatuya JINMEI 神明達哉 8bdbeeb578 2525. [experimental] New logging category "query-errors" to provide detailed 
internal information about query failures, especially
			about server failures. [RT #19027]
 2009-01-07 01:50:15 +00:00
Automatic Updater 1ff98661fd update copyright notice 2009-01-05 23:47:23 +00:00
Tatuya JINMEI 神明達哉 3dd871586f trivial comment cleanups (RT#19118) 2009-01-05 23:20:58 +00:00
Automatic Updater 49960a74b5 update copyright notice 2008-11-14 23:47:33 +00:00
Mark Andrews da2d57c8cf 2493. [bug] The linux capabilites code was not correctly cleaning 
up after itself. [RT #18767]
 2008-11-14 05:24:11 +00:00
Automatic Updater 3398334b3a update copyright notice 2008-09-25 04:02:39 +00:00
Automatic Updater 6e2871232f update copyright notice 2008-09-24 03:16:58 +00:00
Mark Andrews 6098d364b6 2448. [func] Add NSEC3 support. [RT #15452] 2008-09-24 02:46:23 +00:00
Mark Andrews 739240a9d1 remove dns_stats_copy dns_stats_create dns_stats_destroy dns_stats_incrementcounter dns_zone_getstats 2008-09-08 05:59:11 +00:00
Mark Andrews 7e52028a83 remove dns_resolver_createdispatchpool 2008-09-08 05:41:22 +00:00
Automatic Updater 2cf81a3d8a update copyright notice 2008-06-23 23:47:11 +00:00
Tatuya JINMEI 神明達哉 386d3a99c1 2375. [security] Fully randomize UDP query ports to improve 
forgery resilience. [RT #17949, #18098]
 2008-06-23 19:41:20 +00:00
Evan Hunt 5a17fe2916 Default values of zone ACLs were re-parsed each time a new zone was 
configured, causing an overconsumption of memory. [rt18092]
 2008-05-21 23:17:21 +00:00
Automatic Updater f052a01ff2 update copyright notice 2008-04-04 23:47:01 +00:00
Mark Andrews 77abeb5330 rebase NSEC3 code 2008-04-04 05:34:07 +00:00
Automatic Updater ddad355529 update copyright notice 2008-04-03 06:09:05 +00:00
Mark Andrews 8907d8fa04 2355. [func] Extend the number statistics counters available. 
[RT #17590]
 2008-04-03 05:55:52 +00:00
Mark Andrews db30f4bdcb 2353. [func] Add support for Name Server ID (RFC 5001). 
'dig +nsid' requests NSID from server.
                        'request-nsid yes;' causes recursive server to send
                        NSID requests to upstream servers.  Server responds
                        to NSID requests with the string configured by
                        'server-id' option.  [RT #17091]
 2008-04-03 02:01:08 +00:00
Mark Andrews 3f42cf2f3e 2349. [func] Provide incremental re-signing support for secure 
dynamic zones. [RT #1091]

back out incorrect branch rt1091 and apply correct branch rt1091a.
 2008-04-02 02:37:42 +00:00
Mark Andrews a0735eeac5 unit16_t -> isc_uint16_t 2008-04-02 01:48:32 +00:00
Automatic Updater e672951ed2 update copyright notice 2008-04-01 23:47:10 +00:00
Mark Andrews a76b380643 2349. [func] Provide incremental re-signing support for secure 
dynamic zones. [RT #1091]
 2008-04-01 01:37:25 +00:00
Francis Dupont 2a31bd5310 add EVP and PKCS11 2008-03-31 14:42:51 +00:00
Automatic Updater cbf0854acc update copyright notice 2008-01-24 23:47:00 +00:00
Tatuya JINMEI 神明達哉 1c3ed2a83d 2320. [func] Make statistics couters thread-safe for platforms 
that support certain atomic operations. [RT #17466]
 2008-01-24 02:00:44 +00:00
Automatic Updater 2f012d936b update copyright notice 2008-01-18 23:46:58 +00:00
Automatic Updater 1da14e066c update copyright notice 2008-01-02 23:47:02 +00:00
Mark Andrews 92f60809e8 2286. [func] Allow a TCP connection to be used as a weak 
authentication method for reverse zones.
                        New update-policy methods tcp-self and 6to4-self.
                        [RT #17378]
 2008-01-02 05:13:42 +00:00
Mark Andrews 114c14f8ad 2282. [bug] Acl code fixups. [RT #17346] [RT #17374] 2007-12-21 06:46:47 +00:00
Mark Andrews 301f6ffbbe 2276. [bug] Install <dst/gssapi.h>. [RT# 17359] 2007-12-11 20:28:55 +00:00
Michael Graff b239c8294a commit lruttl to the mainline. A tag was set called skan_lruttl-mainline-base, and I will tag this as skan_lruttl-mainline-merge after this commit 2007-10-19 17:15:53 +00:00
Mark Andrews 8bedd9647f 2245. [bug] Validating lack of DS records at trust anchors wasn't 
working. [RT #17151]
 2007-09-19 03:38:56 +00:00
Mark Andrews ca84283333 2244. [func] Allow the check of nameserver names against the 
SOA MNAME field to be disabled by specifying
                        'notify-to-soa yes;'.  [RT #17073]
 2007-09-18 00:22:31 +00:00