Mark Andrews
810656a187
2925. [bug] Named failed to accept uncachable negative responses
...
from insecure zones. [RT# 21555]
2010-06-25 23:50:13 +00:00
Automatic Updater
cf309ffeee
update copyright notice
2010-06-25 23:46:51 +00:00
Mark Andrews
f35a87f58f
remove leading zeros on keyid
...
account for trusted keys not applying to _bind anymore
2010-06-25 07:28:46 +00:00
Mark Andrews
bf13e709db
2924. [func] 'rndc secroots' dump a combined summary of the
...
current managed keys combined with trusted keys.
[RT #20904 ]
2010-06-25 03:24:05 +00:00
Automatic Updater
b8d4e96e95
update copyright notice
2010-06-23 23:46:58 +00:00
Automatic Updater
b61690dbad
update copyright notice
2010-06-22 23:46:52 +00:00
Mark Andrews
48dfee7150
2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
...
to IPv4 clients. New acl 'filter-aaaa' (default any).
2010-06-22 04:03:38 +00:00
Automatic Updater
c7c7ba3977
update copyright notice
2010-06-21 23:46:48 +00:00
Mark Andrews
718c4becc5
2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
...
[RT #20840 ]
2010-06-21 02:31:46 +00:00
Automatic Updater
efa460418c
update copyright notice
2010-06-18 23:46:43 +00:00
Mark Andrews
43c770b998
2917. [func] Virtual time test framework. [RT #20801 ]
2010-06-17 05:39:19 +00:00
Automatic Updater
263874836b
update copyright notice
2010-06-11 23:46:49 +00:00
Mark Andrews
96fae19c97
restore export of PERL PK11GEN PK11LIST PK11DEL
2010-06-11 01:57:36 +00:00
Mark Andrews
9a56f03c4c
2916. [func] Add framework to use IPv6 in tests.
...
fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
2010-06-10 06:19:52 +00:00
Automatic Updater
ad0471f93b
update copyright notice
2010-06-08 23:50:24 +00:00
Mark Andrews
e24ccb512c
2914. [bug] Make the "autosign" system test more portable.
...
[RT #20997 ]
2010-06-07 04:45:43 +00:00
Mark Andrews
63af1a646a
2913. [func] Add pkcs#11 system tests. [RT #20784 ]
2010-06-07 03:42:37 +00:00
Mark Andrews
5ee4d3f2ee
iterations is -H
2010-06-04 00:04:39 +00:00
Automatic Updater
6e13ffa218
update copyright notice
2010-06-03 23:51:05 +00:00
Mark Andrews
e74c3a0f59
specify NSEC3 iterations
2010-06-03 21:44:49 +00:00
Mark Andrews
10acc63770
2911. [bug] dnssec-signzone didn't handle out of zone records well.
...
[RT #21367 ]
2010-06-03 06:29:03 +00:00
Mark Andrews
675cc80975
2911. [bug] dnssec-signzone didn't handle out of zone records well.
...
[RT #21367 ]
2010-06-03 03:13:32 +00:00
Automatic Updater
a2d2fc17b0
update copyright notice
2010-06-02 01:28:40 +00:00
Mark Andrews
a27bbd21cf
2909. [bug] named-checkzone -p could die if "update-policy local;"
...
was specified in named.conf. [RT #21416 ]
2010-06-02 01:07:47 +00:00
Automatic Updater
248b9ab0b0
update copyright notice
2010-05-27 23:51:08 +00:00
Automatic Updater
051dec6fb7
update copyright notice
2010-05-26 23:50:47 +00:00
Mark Andrews
b4c6ce22d0
call sign.sh robustly
2010-05-26 07:00:37 +00:00
Mark Andrews
e27d55e3ee
2904. [bug] When using DLV, sub-zones of the zones in the DLV,
...
could be incorrectly marked as insecure instead of
secure leading to negative proofs failing. This was
a unintended outcome from change 2890. [RT# 21392]
2010-05-26 06:28:00 +00:00
Automatic Updater
15c961a1dd
update copyright notice
2010-05-19 09:33:50 +00:00
Mark Andrews
5ae2eac4c1
2902. [func] Add regression test for change 2897. [RT #21040 ]
2010-05-19 07:45:38 +00:00
Mark Andrews
b667946fa5
2900. [bug] The placeholder negative caching element was not
...
properly constructed triggering a INSIST in
dns_ncache_towire(). [RT #21346 ]
2010-05-19 06:39:50 +00:00
Mark Andrews
44f175a90a
2892. [bug] Handle REVOKED keys better. [RT #20961 ]
2010-05-14 04:38:52 +00:00
Mark Andrews
f2ae969065
handle revoke changes
2010-05-06 11:28:20 +00:00
Automatic Updater
4d42b714be
update copyright notice
2010-03-04 23:50:34 +00:00
Mark Andrews
56c2c3835f
10.53.0.1 through 10.53.0.5 -> 10.53.0.1 through 10.53.0.7
2010-03-04 20:34:16 +00:00
Evan Hunt
ecde9a1cd5
smartsign fails on slow machines. delay the timing-sensitive
...
dnssec-settime call as long as possible.
2010-01-19 15:54:45 +00:00
Automatic Updater
6bb1560124
update copyright notice
2010-01-18 23:48:40 +00:00
Evan Hunt
e11a0c114c
2841. [func] Added "smartsign" and improved "autosign" and
...
"dnssec" regression tests. [RT #20865 ]
2010-01-18 19:19:31 +00:00
Automatic Updater
5bdf8cd3c2
update copyright notice
2010-01-13 23:48:59 +00:00
Evan Hunt
20624f43c3
removed lines inadvertently committed
2010-01-13 19:29:38 +00:00
Automatic Updater
65d1486535
update copyright notice
2010-01-11 23:48:37 +00:00
Francis Dupont
a91029a00e
Prevent Linux spurious warnings about fwrite(). [RT #20812 ]
2010-01-11 10:49:14 +00:00
Automatic Updater
a30c7003af
update copyright notice
2010-01-07 23:48:54 +00:00
Evan Hunt
597642c0ba
2831. [security] Do not attempt to validate or cache
...
out-of-bailiwick data returned with a secure
answer; it must be re-fetched from its original
source and validated in that context. [RT #20819 ]
2010-01-07 16:48:23 +00:00
Tatuya JINMEI 神明達哉
d8680445d6
2828. [security] Cached CNAME or DNAME RR could be returned to clients
...
without DNSSEC validation. [RT #20737 ]
9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:02:23 +00:00
Evan Hunt
f766024a27
change all keys from rsasha1 to nsec3rsasha1 so that the nsec->nsec3
...
transitions work correctly. (they worked before, but weren't supposed
to; when that bug was fixed, the test broke.)
2009-12-19 17:30:31 +00:00
Automatic Updater
8b82c01d74
update copyright notice
2009-12-06 23:48:29 +00:00
Evan Hunt
0d796b1aaa
improve cleanup and add named.run to .cvsignore files
2009-12-06 03:04:39 +00:00
Evan Hunt
12178c8652
2805. [bug] Fixed namespace problems encountered when building
...
external programs using non-exported BIND9 libraries
(i.e., built without --enable-exportlib). [RT #20679 ]
2009-12-05 23:31:41 +00:00
Automatic Updater
4b6dc226f7
update copyright notice
2009-12-04 22:06:37 +00:00
Mark Andrews
Automatic Updater
Evan Hunt
Francis Dupont
Tatuya JINMEI 神明達哉