ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
22,145 Commits 589 Branches 805 Tags
78f79084fcfc40f1237c99e2d4325b24b750d012
Commit Graph
9306 Commits
Author SHA1 Message Date
Evan Hunt 78f79084fc [master] warn when wrong address family used in listen-on/-v6 
3778.	[bug]		Log a warning when the wrong address family is
			used in "listen-on" or "listen-on-v6". [RT #17848]
 2014-03-07 11:31:51 -08:00
Evan Hunt e29c2b3903 [master] fix misuses of isc__buffer functions, update comment 2014-03-06 17:26:21 -08:00
Tinderbox User cc2a515684 update copyright notice 2014-03-04 23:46:15 +00:00
Evan Hunt b454c03196 [master] use ANSI prototypes, clean up some casts 2014-03-04 10:42:25 -08:00
Evan Hunt f6d0284ec2 [master] fix memory leak 2014-03-04 08:56:09 -08:00
Evan Hunt e69790ac00 [master] printable NSID logging 
3774.	[func]		When using "request-nsid", log the NSID value in
			printable form as well as hex. [RT #20864]
 2014-03-03 20:51:14 -08:00
Tinderbox User 794b79e6bb regen master 2014-02-28 01:07:06 +00:00
Evan Hunt e71905610c [master] fixed out-of-tree build 
3766.	[cleanup]	Fixed problems with building outside the source
			tree when using native PKCS#11. [RT #35459]
 2014-02-27 16:49:35 -08:00
Evan Hunt 1aced7b870 [master] fix possible rndc secroots crash 
3765.	[bug]		Fixed a bug in "rndc secroots" that could crash
			named when dumping an empty keynode. [RT #35469]
 2014-02-27 16:42:35 -08:00
Tinderbox User 938440694b update copyright notice 2014-02-27 23:46:22 +00:00
Evan Hunt 1753d3c4d7 [master] correct dates in man pages 2014-02-27 11:43:10 -08:00
Mark Andrews 7fbbc9bfd3 3762. [bug] Address build problems with --pkcs11-native + 
--with-openssl with ECDSA support. [RT #35467]
 2014-02-27 18:29:52 +11:00
Mark Andrews 96c17c5ecb 3761. [bug] Address dangling reference bug in dns_keytable_add. 
[RT #35471]
 2014-02-27 16:55:46 +11:00
Evan Hunt 98922b2b2b [master] merge several interdependent fixes 
3760.   [bug]           Improve SIT with native PKCS#11 and on Windows.
			[RT #35433]

3759.   [port]          Enable delve on Windows. [RT #35441]

3758.   [port]          Enable export library APIs on windows. [RT #35382]
 2014-02-26 19:00:05 -08:00
Mark Andrews 86ec04712b #include <inttypes.h> 2014-02-27 11:57:51 +11:00
Evan Hunt 3a01ded15d [master] enable windows python tools 
3757.	[port]		Enable Python tools (dnssec-coverage,
			dnssec-checkds) to run on Windows. [RT #34355]
 2014-02-26 08:43:50 -08:00
Mark Andrews b0d8002354 use cfg_type_sstring rather than cfg_type_qstring for sit-secret 2014-02-27 01:11:13 +11:00
Mark Andrews 79bd3cf027 we only use 32 octets 2014-02-26 15:54:23 +11:00
Mark Andrews f4193c2021 update copyrights 2014-02-25 12:07:41 +11:00
Mark Andrews 53ebc0959b #ifdef notyet error handling for bad sit 2014-02-24 23:49:21 +11:00
Mark Andrews 0072ae822d 3756. [bug] GSSAPI Kerberos realm checking was broken in 
check_config leading to spurious messages being
                        logged.  [RT #35443]
 2014-02-24 12:15:37 +11:00
Mark Andrews 9e39bafd2e adjust SIT computation 2014-02-24 09:29:49 +11:00
Francis Dupont 2ab466bf79 more missing WIN32 docs 2014-02-22 03:01:56 +01:00
Mark Andrews 5e45c8aabf add CFG_CLAUSEFLAG_NOTCONFIGURED flag 2014-02-21 12:48:39 +11:00
Mark Andrews edd82b2ce2 3753. [bug] allow-notify was ignoring keys. [RT #35425] 2014-02-21 00:09:28 +11:00
Mark Andrews 86856f4f30 3752. [bug] Address potential REQUIRE failure if 
DNS_STYLEFLAG_COMMENTDATA is set when printing out
                        a rdataset.
 2014-02-20 23:04:54 +11:00
Evan Hunt 4a0beb64be [master] start prep for 9.10.0b1 2014-02-19 21:39:35 -08:00
Evan Hunt 9576baafc0 [master] assert if sitok/sitbad are insane 2014-02-19 21:26:31 -08:00
Mark Andrews d17d32a7bf set setok/sitbad 2014-02-20 16:16:53 +11:00
Mark Andrews f0c00f10a0 report if sit is good/bad 2014-02-20 15:55:09 +11:00
Mark Andrews 51d6d7eea4 continue rather than break 2014-02-20 15:20:12 +11:00
Mark Andrews 45b8dc626a add #ifdef notdef check of DNS_OPT_EXPIRE length 2014-02-20 15:06:49 +11:00
Evan HuntandMark Andrews 6cba0b8e61 [expireopt] format expire time 2014-02-20 14:57:47 +11:00
Mark Andrews 16134801ce 3750. [experimental] Partially implement EDNS EXPIRE option as described 
in draft-andrews-dnsext-expire-00.  Retrivial of
                        remaining time to expiry from slave zones is supported.

                        EXPIRE uses an experimental option code (65002) and
                        is subject to change. [RT #35416]
 2014-02-20 14:56:20 +11:00
Mark Andrews 801b958a5c s/DNS_EDNSOPTIONS/DNS_EDNSOPTIONS/ 2014-02-20 14:00:54 +11:00
Mark Andrews 72ba6ba736 define DNS_OPT_EDNSOPTIONS 2014-02-20 13:55:21 +11:00
Mark Andrews e676a59686 update copyrights 2014-02-20 10:53:11 +11:00
Evan Hunt d7b9756a21 [master] ENDS client-subnet in dig 
3749.	[func]		"dig +subnet" sends an EDNS client subnet option
			containing the specified address/prefix when
                        querying. (Thanks to Wilmer van der Gaast.)
                        [RT #35415]
 2014-02-19 15:51:02 -08:00
Tinderbox User 1361e03890 update copyright notice 2014-02-19 23:46:31 +00:00
Francis Dupont f1a6c8e78c WIN32 master fixes 2014-02-19 23:17:52 +01:00
Evan Hunt 7f5bdf7f40 [master] fix dns_resolver_destroyfetch race 
3747.	[bug]		A race condition could lead to a core dump when
			destroying a resolver fetch object. [RT #35385]
 2014-02-18 23:32:02 -08:00
Evan Hunt 35f6a21f5f [master] max-zone-ttl 
3746.	[func]		New "max-zone-ttl" option enforces maximum
			TTLs for zones. If loading a zone containing a
			higher TTL, the load fails. DDNS updates with
			higher TTLs are accepted but the TTL is truncated.
			(Note: Currently supported for master zones only;
			inline-signing slaves will be added.) [RT #38405]
 2014-02-18 23:26:50 -08:00
Evan Hunt 6a3fa181d1 [master] add "--with-tuning=large" option 
3745.	[func]		"configure --with-tuning=large" adjusts various
			compiled-in constants and default settings to
			values suited to large servers with abundant
			memory. [RT #29538]
 2014-02-18 22:36:14 -08:00
Mark Andrews b5f6271f4d 3744. [experimental] SIT: send and process Source Identity Tokens 
(which are similar to DNS Cookies by Donald Eastlake)
                        and are designed to help clients detect off path
                        spoofed responses and for servers to detect legitimate
                        clients.

                        SIT use a experimental EDNS option code (65001).

                        SIT can be enabled via --enable-developer or
                        --enable-sit.  It is on by default in Windows.

                        RRL processing as been updated to know about SIT with
                        legitimate clients not being rate limited. [RT #35389]
 2014-02-19 12:53:42 +11:00
Mark Andrews 38eabfcee7 3743. [bug] delegation-only flag wasn't working in forward zone 
declarations despite being documented.  This is
                        needed to support turning off forwarding and turning
                        on delegation only at the same name.  [RT #35392]
 2014-02-18 10:09:07 +11:00
Mark Andrews 823eadf26d #include <isc/string.h> 2014-02-17 12:22:42 +11:00
Tinderbox User 72141595cf update copyright notice 2014-02-16 23:46:32 +00:00
Evan Hunt 1d761cb453 [master] delve 
3741.	[func]		"delve" (domain entity lookup and validation engine):
			A new tool with dig-like semantics for performing DNS
			lookups, with internal DNSSEC validation, using the
			same resolver and validator logic as named. This
			allows easy validation of DNSSEC data in environments
			with untrustworthy resolvers, and assists with
			troubleshooting of DNSSEC problems. (Note: not yet
			available on win32.) [RT #32406]
 2014-02-16 13:03:17 -08:00
Evan Hunt 31f6244cc2 [master] tcp and udp stats counters 
3739.	[func]		Added per-zone stats counters to track TCP and
			UDP queries. [RT #35375]
 2014-02-15 20:57:00 -08:00
Tinderbox User 56af756b6c update copyright notice 2014-02-14 23:46:27 +00:00