Commit Graph

6229 Commits

Author SHA1 Message Date
Mark Andrews
81a8977eeb 3701. [func] named-checkconf can now suppress the printing of
shared secrets by specifying '-x'. [RT #34465]

(cherry picked from commit ff6de396a9)
2014-01-10 17:39:39 +11:00
Evan Hunt
43ace844b2 [v9_9] Merge branch 'v9_9' of ssh://repo/proj/git/prod/bind9 into v9_9 2014-01-09 19:06:08 -08:00
Evan Hunt
712839e4d2 [v9_9] stats improvements (newstats only)
3699.  [bug]           Improvements to statistics channel XSL stylesheet:
                       the stylesheet can now be cached by the browser;
                       section headers are omitted from the stats display
                       when there is no data in those sections to be
                       displayed; counters are now right-justified for
                       easier readability. [RT #35117]
2014-01-09 18:41:21 -08:00
Tinderbox User
864ca7ce33 update copyright notice 2014-01-09 23:45:53 +00:00
Mark Andrews
d1a389bdac stop spamming system logs
(cherry picked from commit d4eb30fa2d)
2014-01-09 16:23:57 +11:00
Evan Hunt
49c88a1ce0 [v9_9] Merge branch 'v9_9' of ssh://repo/proj/git/prod/bind9 into v9_9 2014-01-08 18:28:58 -08:00
Tinderbox User
5b8dcfac9a regen v9_9 2014-01-09 01:14:32 +00:00
Evan Hunt
8c7ce6d3e6 [v9_9] replace memcpy() with memmove().
3698.	[cleanup]	Replaced all uses of memcpy() with memmove().
			[RT #35120]

(cherry picked from commit ebe54c7d2221c6a0a4b3d96bcae3280c823a45e6)
2014-01-08 16:38:56 -08:00
Tinderbox User
fcf3461d97 update copyright notice 2014-01-08 23:45:37 +00:00
Evan Hunt
5fccdc10de [v9_9] removed reference to "auto-dnssec create" 2014-01-08 11:34:33 -08:00
Francis Dupont
ff46df8c3c update OpenSSL patches (1.0.0k -> 1.0.0l, 1.0.1e -> 1.0.1f) [#35158] 2014-01-07 12:18:57 +01:00
Mark Andrews
d1f2e3f0b4 3697. [bug] Handle "." as a search list element when IDN support
is enabled. [RT #35133]

(cherry picked from commit d0e3216c21)
2014-01-06 12:34:58 +11:00
Tinderbox User
1fc542b725 update copyright notice 2014-01-05 23:45:38 +00:00
Mark Andrews
f79db810c6 3696. [bug] dig failed to handle AXFR style IXFR responses which
span multiple messages. [RT #35137]

(cherry picked from commit e9649ece3b)
2014-01-06 06:24:02 +11:00
Tinderbox User
0b915a7770 update copyright notice 2013-12-21 23:45:39 +00:00
Evan Hunt
2354181226 [v9_9] warn if key-directory doesn't exist
3694.	[bug]		Warn when a key-directory is configured for a zone,
			but does not exist or is not a directory. [RT #35109]

(cherry picked from commit c14ba71070)
2013-12-20 14:57:58 -08:00
Mark Andrews
c781dea647 3693. [security] memcpy was incorrectly called with overlapping
ranges resulting in malformed names being generated
                        on some platforms.  This could cause INSIST failures
                        when serving NSEC3 signed zones.  [RT #35120]

(cherry picked from commit fa467e60c5)
2013-12-20 10:59:01 +11:00
Tinderbox User
de81c583e5 update copyright notice 2013-12-15 23:45:37 +00:00
Tinderbox User
02dc6a8b00 update copyright notice 2013-12-13 23:45:38 +00:00
Evan Hunt
06614edc44 [v9_9] correct dispatch address/port check
3690.	[bug]		Iterative responses could be missed when the source
			port for an upstream query was the same as the
			listener port (53). [RT #34925]
2013-12-12 22:46:21 -08:00
Evan Hunt
0c0ce5f9a4 [v9_9] fix insecure delegation across static-stub zones
3689.	[bug]		Fixed a bug causing an insecure delegation from one
			static-stub zone to another to fail with a broken
			trust chain. [RT #35081]

(cherry picked from commit 9b895f30f1)
2013-12-12 22:20:21 -08:00
Tinderbox User
4d99b1110b regen v9_9 2013-12-12 01:14:39 +00:00
Tinderbox User
c75c9ee78e update copyright notice 2013-12-11 23:46:56 +00:00
Evan Hunt
89f80b4043 typo 2013-12-11 14:00:25 -08:00
Evan Hunt
2c73b0a857 [v9_9] dnssec-signzone -Q
3686.	[func]		"dnssec-signzone -Q" drops signatures from keys
			that are still published but no longer active.
			[RT #34990]

(cherry picked from commit 0bbe3273a2)
2013-12-11 13:25:44 -08:00
Evan Hunt
dda2ffdbcf [v9_9] fix 'rndc refresh' in inline-signing zones
3685.	[bug]		"rndc refresh" didn't work correctly with slave
			zones using inline-signing. [RT #35105]

(cherry picked from commit 445a354e63)
2013-12-11 13:00:22 -08:00
Mark Andrews
4071bd2c0e cleanup
(cherry picked from commit 99c3e8e09c)
2013-12-10 09:55:32 +11:00
Mark Andrews
b26719dff0 use snprintf; check the result of putstr
(cherry picked from commit 06a0b00bb6)
2013-12-10 08:56:58 +11:00
Mark Andrews
a92a3ecf44 silence compiler warnings
(cherry picked from commit 53f70575bd)
2013-12-06 17:39:33 +11:00
Mark Andrews
a0095a7c1a update copyrights 2013-12-05 15:13:01 +11:00
Mark Andrews
e6d9434526 no needed 2013-12-05 14:52:32 +11:00
Tinderbox User
5ccbed5bdb regen v9_9 2013-12-05 01:14:44 +00:00
Tinderbox User
da9611344e update copyright notice 2013-12-04 23:46:00 +00:00
Evan Hunt
98a3bd57ca [master] clearer "not found" message for rndc commands
3683.	[cleanup]	Add a more detailed "not found" message to rndc
			commands which specify a zone name. [RT #35059]

(cherry picked from commit bee9a28af0)
2013-12-04 12:58:28 -08:00
Curtis Blackburn
1a890ff58a [v9_9]3682. [bug] Correct the behavior of rndc retransfer to allow
inline-signing slave zones to retain NSEC3 parameters instead of
			reverting to NSEC [RT #34745]
2013-12-04 12:32:21 -06:00
Mark Andrews
3b38a23089 3681. [port] Update the Windows build system to support feature
selection and WIN64 builds.  This is a work in
                        progress. [RT #34160]

(cherry picked from commit c3c8823fed)

Conflicts:
	CHANGES
	bin/check/win32/checktool.dsp.in
	bin/dnssec/win32/dnssectool.dsp.in
	bin/dnssec/win32/importkey.dsp.in
	bin/dnssec/win32/importkey.mak.in
	bin/named/geoip.c
	bin/named/include/named/geoip.h
	bin/tools/win32/rrchecker.dsp.in
	bin/tools/win32/rrchecker.mak.in
	config.h.win32
	lib/dns/geoip.c
	lib/dns/master.c
	lib/dns/win32/libdns.dsp.in
	lib/dns/win32/libdns.mak.in
	lib/isc/mem.c
	lib/isc/stats.c
	lib/isc/win32/file.c
	lib/isc/win32/libisc.def.in
	lib/isc/win32/libisc.mak.in
	lib/isc/win32/stdio.c
	lib/isccc/cc.c
	win32utils/BuildAll.bat
	win32utils/BuildSetup.bat
	win32utils/legacy/BINDBuild.dsw.in
	win32utils/makeversion.pl
	win32utils/setpk11provider.pl
	win32utils/updatelibxml2.pl
	win32utils/win32-build.txt
2013-12-04 13:48:45 +11:00
Evan Hunt
5a91e2b5d4 [v9_9] dig could miss tcp connections when cleaning up
3679.	[bug]		dig could fail to clean up TCP sockets still
			waiting on connect(). [RT #35074]

(cherry picked from commit fb507315d4)
2013-12-02 13:35:07 -08:00
Mark Andrews
0f12824e2d 3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
times.  [RT #35073]

(cherry picked from commit 49ae04f6ee)
2013-11-28 06:46:41 +11:00
Evan Hunt
2254826e4c [v9_9] check hint files in named-checkconf -z
3676.	[bug]		"named-checkconf -z" now checks zones of type
			hint and redirect as well as master. [RT #35046]

(cherry picked from commit d999ca28d4)
2013-11-25 12:30:59 -08:00
Evan Hunt
14122dd06b [v9_9] previous commit incomplete
(cherry picked from commit 5255b631b1)
2013-11-18 16:00:21 -08:00
Evan Hunt
6c696e0ede [v9_9] win32 portability fix
(cherry picked from commit 2b57986603)
2013-11-18 15:47:33 -08:00
Mark Andrews
1550e4aa95 3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
(cherry picked from commit 225146b2c8)
2013-11-18 11:24:24 +11:00
Mark Andrews
3efcb5250f adjust EDNS query returned status warning message
(cherry picked from commit 0b565f6060)
2013-11-14 22:52:24 +11:00
Mark Andrews
7fbfa2102d fix dereference before null check warning
(cherry picked from commit 9800974419)
2013-11-14 12:33:26 +11:00
Tinderbox User
a960d3a679 update copyright notice 2013-11-13 23:45:54 +00:00
Evan Hunt
2e8c4177b7 [v9_9] remove test code accidentally merged 2013-11-13 11:04:35 -08:00
Evan Hunt
eaa4ead2bd [v9_9] allow setting local addr in dns_client
3672.	[func]		Local address can now be specified when using
			dns_client API. [RT #34811]

(cherry picked from commit 0618287859)
2013-11-13 10:57:50 -08:00
Mark Andrews
5b609bd57e back port inline system test fixes from master 2013-11-13 16:00:48 +11:00
Mark Andrews
442a439852 back port fixes 2013-11-13 13:44:25 +11:00
Mark Andrews
6ddfac8f4e 3671. [bug] Don't allow dnssec-importkey overwrite a existing
non-imported private key.
2013-11-13 12:58:43 +11:00