Commit Graph
6083 Commits
Author SHA1 Message Date
Tinderbox User b9a067ba40 update copyright notice 2013-02-26 23:45:57 +00:00
Mark Andrews 30314ce9c5 '!' is not portable. 2013-02-26 23:11:43 +11:00
Mark Andrews bdc7cf66ff 3498. [bug] zone statistics for zones which matched a potential
empty zone could have their zone-statistics setting
                        overridden.

reviewed via jabber.
2013-02-26 15:47:26 +11:00
Mark Andrews 118bdfd8c4 3497. [func] When deleting a slave/stub zone using 'rndc delzone'
report the files that were being used so they can
                        be cleaned up if desired. [RT #27899]

Squashed commit of the following:

commit 0e4e69d0c3153fe94aaa375b908cf7e3e45b5059
Author: Mark Andrews <marka@isc.org>
Date:   Thu Feb 21 17:01:44 2013 +1100

    report the zones to be removed rather than removing them

commit 5d247ac592eef64c4c467d99af4983b8c1ff998f
Author: Mark Andrews <marka@isc.org>
Date:   Wed Feb 20 15:05:47 2013 +1100

    remove slave/stub files when deleting a zone using delzone
2013-02-26 14:48:21 +11:00
Tinderbox User f97d56e757 update copyright notice 2013-02-25 23:46:03 +00:00
Evan Hunt 94315060c2 [master] RPZ speedup (phase 2, multiple RPZ's)
3495.	[func]		Support multiple response-policy zones, while
			improving RPZ performance. [RT #32476]
2013-02-25 12:46:51 -08:00
Evan Hunt 55e5c51e66 [master] DNS RRL
3494.	[func]		DNS RRL: Blunt the impact of DNS reflection and
			amplification attacks by rate-limiting substantially-
			identical responses. [RT #28130]
2013-02-25 12:45:56 -08:00
Tinderbox User 573d78f3d5 update copyright notice 2013-02-21 23:45:56 +00:00
Evan Hunt df925e6c66 [master] add zone memory context pools
3492.	[bug]		Fixed a regression in zone loading performance
			due to lock contention. [RT #30399]
2013-02-20 21:39:05 -08:00
Evan Hunt a81ae06ed3 [master] forbid inline-signing slave with no file
3491.	[bug]		Slave zones using inline-signing must specify a
			file name. [RT #31946]
2013-02-20 14:01:31 -08:00
Evan Hunt 2425d8bb7c [master] truncate logged rdata if too long
3490.	[bug]		When logging RDATA during update, truncate if it's
                        too long. [RT #32365]

cherry picked from:
        commit 16ddb566e5a5b57bf925adef2b5543dddc1de49b
        commit cd97e0c23b09f38aac49aabab66ee13c68b7a3f3
        commit d087fa982649c081d58c5bb16e63da3428e2b89d
        commit d0795bdffef57612dd7654ffd09c9f4216eee2c8
2013-02-20 13:54:52 -08:00
Mark Andrews 3c7df84b20 3488. [bug] Use after free error with DH generated keys. [RT #32649] 2013-02-18 20:26:26 +11:00
Tinderbox User 32dc577940 update copyright notice 2013-02-16 23:46:02 +00:00
Mark Andrews c9297d3759 3487. [bug] Change 3444 was not complete. There was a additional
place where the NOQNAME proof needed to be saved.
                        [RT #32629]

Squashed commit of the following:

commit cdef844f57bd3eb30b1f77135b89b6f9360e8bee
Author: Mark Andrews <marka@isc.org>
Date:   Sat Feb 16 00:27:14 2013 +1100

    whitespace

commit 60eb7e3f6cdd102d6aaf0fb4ada8c552576e4502
Author: Mark Andrews <marka@isc.org>
Date:   Sat Feb 16 00:19:51 2013 +1100

    return noqname proof with +cd and dlv
2013-02-16 07:45:43 +11:00
Evan Hunt 0b8bd3a4ae [master] address TKEY bugs
3486.	[bug]		named could crash when using TKEY-negotiated keys
			that had been deleted and then recreated. [RT #32506]

commit 6a48b9999766d26cddc7cef275cd984b7d53c014
Author: Evan Hunt <each@isc.org>
Date:   Tue Jan 29 14:59:46 2013 -0800

    [rt32506] don't dump key if dump is unimplemented

commit d0ae0f44b460bab2e8bb24bba683d3ef69ec1765
Author: Evan Hunt <each@isc.org>
Date:   Tue Jan 29 14:42:25 2013 -0800

    [rt32506] make sure LRU needs adjusting before adjusting it

commit 0437f8f06b1cb72a6d5e3c30f27febca23846d95
Author: Evan Hunt <each@isc.org>
Date:   Tue Jan 29 12:28:28 2013 -0800

    [rt32506] demonstrate bugs in tkey test
2013-02-15 10:19:50 -08:00
Evan Hunt 6330174f80 [master] fixed another readline link error 2013-02-15 10:15:09 -08:00
Evan Hunt ef37222aaf [master] fixed readline link error, ubuntu 13.04 2013-02-15 10:08:19 -08:00
Mark Andrews 1d3c89483c check for view->adbstats != NULL rather than view->resstats 2013-02-12 17:09:11 +11:00
Tinderbox User 4486374631 update copyright notice 2013-02-08 23:45:50 +00:00
Evan Hunt 855f5935ad [master] clarify "server counters" section in XSL 2013-02-08 15:16:10 -08:00
Evan Hunt b748b5e2c2 [master] fix cache/ADB stats in new stats schema
new stats that were added for 9.10 (changes 3319-3326) were not
    all updated when the new statistics schema was merged (change 3418).

3484.	[bug]		Some statistics were incorrectly rendered in XML.
			[RT #32587]
2013-02-08 14:53:14 -08:00
Evan Hunt cdd99263f2 [master] whitespace 2013-02-08 11:43:17 -08:00
Tinderbox User 543ab56b01 update copyright notice 2013-02-07 23:45:51 +00:00
JINMEI Tatuya ab7a67829f dig +nssearch now prints name servers that don't have address records. 2013-02-07 14:14:26 -08:00
Tinderbox User 8bbfb495a2 regen master 2013-01-26 01:04:30 +00:00
Tinderbox User 17131a9459 update copyright notice 2013-01-25 23:45:56 +00:00
Tinderbox User 43b9448395 regen master 2013-01-25 01:04:51 +00:00
Curtis Blackburn ca385a75a8 fixed CHANGES 2013-01-24 16:37:53 -06:00
Curtis Blackburn c91c439f80 3475. [func] expand logging when adding records via DDNS update
[RT #32365]
2013-01-24 16:35:23 -06:00
Evan Hunt 6225380ca6 [master] check signing time on signed db
- rndc zonestatus now checks the signing time on the
       signed, not raw, db when looking at inline-signing zones

3476.	[bug]		"rndc zonestatus" could report a spurious "not
			found" error on inline-signing zones. [RT #29226]
2013-01-24 14:24:59 -08:00
Evan Hunt c9611b4573 [master] change "fast" to "map"
3475.	[cleanup]	Changed name of 'map' zone file format (previously
			'fast'). [RT #32458]
2013-01-24 14:20:48 -08:00
Tinderbox User dd59fe01c9 regen master 2013-01-24 01:04:22 +00:00
Evan Hunt 8f7d23a25c Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-01-23 15:48:47 -08:00
Tinderbox User 3aaa526a94 update copyright notice 2013-01-23 23:45:55 +00:00
Evan Hunt ffff5d6792 [master] fix dns_request_createvia assert
3474.	[bug]		nsupdate could assert when the local and remote
			address families didn't match. [RT #22897]
2013-01-23 15:39:05 -08:00
Evan Hunt 9a0dd99a75 [master] fix incorrect nsec3 check
- check for NSEC3 in empty nodes when not due to optout delegations
    - fixed typo in output ("Bad record NSEC record")
    - incidentally fixed an error in signzone that caused an
      incorrect warning about missing DNSKEYs when using -S
      and -3 together

3473.	[bug]		dnssec-signzone/verify could incorrectly report
			an error condition due to an empty node above an
			opt-out delegation lacking an NSEC3. [RT #32072]
2013-01-23 14:56:00 -08:00
Evan Hunt 2154c01912 [master] default -U to ncpus, not to -n
3471.	[bug]		The number of UDP dispatches now defaults to
			the number of CPUs even if -n has been set to
			a higher value. [RT #30964]
2013-01-22 18:07:05 -08:00
Evan Hunt a0a1003895 Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-01-22 16:13:09 -08:00
Evan Hunt 214836c184 [master] dump masterfile after successful xfrin
3470.	[bug]		Slave zones could fail to dump when successfully
			refreshing after an initial failure. [RT #31276]
2013-01-22 15:49:50 -08:00
Tinderbox User b95504f9a7 update copyright notice 2013-01-22 23:45:48 +00:00
Evan Hunt cbd1fa092e [master] DLZ fixes
- handle malformed answers from DLZ better:
 - handle dlz_lookup errors better:
   when the first lookup of a name returns an unexpected failure code,
   we return it to the caller rather than continuing on to look up
   the wildcard. we now only continue processing if the return from
   the first lookup was either ISC_R_SUCCESS or ISC_R_NOTFOUND.

 - improved backward-compatibility for dlz_version:
   added a DLZ_DLOPEN_AGE value indicating how many versions
   back from the current DLZ_DLOPEN_VERSION named will support
2013-01-22 15:13:08 -08:00
Tinderbox User 0a8a14d513 update copyright notice 2013-01-21 23:45:48 +00:00
Evan Hunt a631c8d9b8 [master] prevent ixfr/ns1 being removed 2013-01-21 14:16:15 -08:00
Evan Hunt 30a7cf3957 [master] add 10.53.0.8 address 2013-01-21 12:36:41 -08:00
Tinderbox User 5ac5300fdf update copyright notice 2013-01-17 23:46:25 +00:00
Evan Hunt 71f8edccba [master] fix DNS64 with RPZ-remapped A records
3468.	[security]	RPZ rules to generate A records (but not AAAA records)
			could trigger an assertion failure when used in
			conjunction with DNS64. [RT #32141]
2013-01-17 11:23:30 -08:00
Curtis Blackburn c8803902d6 [bug] Added checks in dnssec-keygen and dnssec-settime to check for
delete date < inactive date. [RT #31719]
2013-01-17 10:59:16 -06:00
Tinderbox User dc3d68d6fe update copyright notice 2013-01-11 23:46:02 +00:00
Mark Andrews c8bfcec3c9 silence compiler warning 2013-01-11 17:38:58 +11:00
Mark Andrews b5d3508e8a silence compiler warning 2013-01-11 17:30:21 +11:00