ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
22,145 Commits 589 Branches 805 Tags
78f79084fcfc40f1237c99e2d4325b24b750d012
Commit Graph
717 Commits
Author SHA1 Message Date
Evan Hunt b454c03196 [master] use ANSI prototypes, clean up some casts 2014-03-04 10:42:25 -08:00
Evan Hunt 7d769b7ba7 [master] don't use keyname from command line if using -S 2014-03-04 09:07:26 -08:00
Tinderbox User e23798e2ab update copyright notice 2014-02-28 23:46:19 +00:00
Tinderbox User 794b79e6bb regen master 2014-02-28 01:07:06 +00:00
Evan Hunt a60bf97f9f [master] dnssec-keyfromlabel -S and -i 
3764.	[bug]		The dnssec-keygen/settime -S and -i options
			(to set up a successor key and set the prepublication
			interval) were missing from dnssec-keyfromlabel.
			[RT #35394]
 2014-02-27 16:25:32 -08:00
Tinderbox User 938440694b update copyright notice 2014-02-27 23:46:22 +00:00
Evan Hunt 1753d3c4d7 [master] correct dates in man pages 2014-02-27 11:43:10 -08:00
Evan Hunt 3a01ded15d [master] enable windows python tools 
3757.	[port]		Enable Python tools (dnssec-coverage,
			dnssec-checkds) to run on Windows. [RT #34355]
 2014-02-26 08:43:50 -08:00
Evan Hunt 6ce1aa1902 [master] tag mismatch 2014-02-20 20:59:24 -08:00
Tinderbox User 0e1dece22e regen master 2014-02-20 19:19:27 +00:00
Evan Hunt 35f6a21f5f [master] max-zone-ttl 
3746.	[func]		New "max-zone-ttl" option enforces maximum
			TTLs for zones. If loading a zone containing a
			higher TTL, the load fails. DDNS updates with
			higher TTLs are accepted but the TTL is truncated.
			(Note: Currently supported for master zones only;
			inline-signing slaves will be added.) [RT #38405]
 2014-02-18 23:26:50 -08:00
Mark Andrews 2729aea3c1 3738. [bug] --enable-openssl-hash failed to build. [RT #35343] 2014-02-13 15:09:08 +11:00
Mark Andrews 5deedd7057 use unsigned constants 2014-02-13 07:48:44 +11:00
Evan Hunt dbb012765c [master] merge libiscpk11 to libisc 
3735.	[cleanup]	Merged the libiscpk11 library into libisc
			to simplify dependencies. [RT #35205]
 2014-02-11 21:20:28 -08:00
Tinderbox User 81f58902eb update copyright notice 2014-02-07 23:46:39 +00:00
Tinderbox User bbbf2e27d3 regen master 2014-02-07 02:03:45 +00:00
Mark Andrews 11d8c966ea fix closing tag 2014-02-07 12:26:16 +11:00
Evan Hunt a165a17a81 [master] dnssec-keygen fixes 
3730.	[cleanup]	Added "never" as a synonym for "none" when
			configuring key event dates in the dnssec tools.
			[RT #35277]

3729.	[bug]		dnssec-kegeyn could set the publication date
			incorrectly when only the activation date was
			specified on the command line. [RT #35278]
 2014-02-06 15:59:14 -08:00
Evan Hunt 08c67b5b7a [master] improved native-pkcs11 doc 
3728.	[doc]		Expanded native-PKCS#11 documentation,
			specifically pkcs11: URI labels. [RT #35287]
 2014-02-06 15:40:00 -08:00
Evan Hunt 12bf5d4796 [master] address several issues with native pkcs11 2014-01-18 11:51:07 -08:00
Tinderbox User dd1ce8b524 regen master 2014-01-17 01:05:10 +00:00
Mark Andrews e20788e121 update copyrights 2014-01-16 15:19:24 +11:00
Tinderbox User 6ea2385360 regen master 2014-01-16 01:05:38 +00:00
Evan Hunt ba751492fc [master] native PKCS#11 support 
3705.	[func]		"configure --enable-native-pkcs11" enables BIND
			to use the PKCS#11 API for all cryptographic
			functions, so that it can drive a hardware service
			module directly without the need to use a modified
			OpenSSL as intermediary (so long as the HSM's vendor
			provides a complete-enough implementation of the
			PKCS#11 interface). This has been tested successfully
			with the Thales nShield HSM and with SoftHSMv2 from
			the OpenDNSSEC project. [RT #29031]
 2014-01-14 15:40:56 -08:00
Tinderbox User 431a83fb29 update copyright notice 2014-01-09 23:46:35 +00:00
Evan Hunt e851ea8260 [master] replace memcpy() with memmove(). 
3698.	[cleanup]	Replaced all uses of memcpy() with memmove().
			[RT #35120]
 2014-01-08 16:39:05 -08:00
Tinderbox User 3f9791eac4 regen master 2013-12-12 01:05:00 +00:00
Tinderbox User de77dcc2c1 update copyright notice 2013-12-11 23:47:38 +00:00
Evan Hunt 0bbe3273a2 [master] dnssec-signzone -Q 
3686.	[func]		"dnssec-signzone -Q" drops signatures from keys
			that are still published but no longer active.
			[RT #34990]
 2013-12-11 13:25:21 -08:00
Mark Andrews 53f70575bd silence compiler warnings 2013-12-06 17:38:25 +11:00
Mark Andrews c3c8823fed 3681. [port] Update the Windows build system to support feature 
selection and WIN64 builds.  This is a work in
                        progress. [RT #34160]
 2013-12-04 12:47:23 +11:00
Mark Andrews 6b0434299b 3671. [bug] Don't allow dnssec-importkey overwrite a existing 
non-imported private key.
 2013-11-13 12:01:09 +11:00
Tinderbox User 77b7c54f1a regen master 2013-10-13 01:04:48 +00:00
Mark Andrews cbadc440b9 typos 2013-10-13 11:12:43 +11:00
Tinderbox User 63737247d1 update copyright notice 2013-09-05 23:46:16 +00:00
Evan Hunt 690bd6bf5d [master] fix inline test, add importkey to win32 build 2013-09-04 18:56:50 -07:00
Tinderbox User d2bdd5b314 regen master 2013-09-05 01:04:31 +00:00
Mark Andrews 0c91911b4d 3642. [func] Allow externally generated DNSKEY to be imported 
into the DNSKEY management framework.  A new tool
                        dnssec-importkey is used to this. [RT #34698]
 2013-09-04 13:53:02 +10:00
Mark Andrews b5f4cc132e 3641. [bug] Handle changes to sig-validity-interval settings 
better. [RT #34625]
 2013-09-04 13:45:00 +10:00
Mark Andrews 7cd9d53c8c don't print out result as it is not meaningful here 2013-08-16 09:44:30 +10:00
Mark Andrews 7ace327795 3632. [bug] Signature from newly inactive keys were not being 
removed.  [RT #32178]
 2013-08-15 10:48:05 +10:00
Mark Andrews 9d69017bc6 3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error 
message. [RT #34045]
 2013-07-03 15:41:48 +10:00
Evan Hunt b7e40659ef [master] rebuild resigning heaps when loading map files 
3597.	[bug]		Ensure automatic-resigning heaps are reconstructed
			when loading zones in map format. [RT #33381]
 2013-06-14 10:16:10 -07:00
Evan Hunt 8f1e278931 [master] updated win32 build 
3596.	[port]		Updated win32 build documentation, added
                        dnssec-verify. [RT #22067]
 2013-06-13 17:31:41 -07:00
Evan Hunt e47208b6fb [master] silence ccc-analyzer 
3567.	[bug]		Silence clang static analyzer warnings. [RT #33365]
 2013-05-03 14:31:27 -07:00
Evan Hunt 96139421d6 [master] win32 portability fixes 2013-03-26 23:01:13 -07:00
Tinderbox User 8bbfb495a2 regen master 2013-01-26 01:04:30 +00:00
Tinderbox User 43b9448395 regen master 2013-01-25 01:04:51 +00:00
Evan Hunt c9611b4573 [master] change "fast" to "map" 
3475.	[cleanup]	Changed name of 'map' zone file format (previously
			'fast'). [RT #32458]
 2013-01-24 14:20:48 -08:00
Tinderbox User 3aaa526a94 update copyright notice 2013-01-23 23:45:55 +00:00