ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
3,924 Commits 589 Branches 805 Tags
8469ee3726540781cf3b13db24bf5df9ee12fdc3
Commit Graph
3924 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Brian Wellington 8469ee3726 Don't include authority data if it would force us to unset the AD bit 2000-04-11 18:43:27 +00:00
Andreas Gustafsson 8426878e98 added DNS_LOGCATEGORY_DNSSEC and DNS_LOGMODULE_VALIDATOR 2000-04-11 18:24:32 +00:00
David Lawrence a9cb032d07 comparison of channel->type to NULL should have been to ISC_LOG_TONULL 2000-04-11 18:22:34 +00:00
Andreas Gustafsson 230bc05e7e added DNS_LOGCATEGORY_DNSSEC and DNS_LOGMODULE_VALIDATOR 2000-04-11 18:17:35 +00:00
Brian Wellington d0e69984a9 dnssec verification of cached sets was failing, since the ttl from the 
rdataset was used instead of the ttl from the sig record.  Also found
and fixed an unchecked memory allocation.
 2000-04-11 18:04:35 +00:00
Andreas Gustafsson 864a05fa26 configuration failed when trusted-keys statement was missing 2000-04-11 17:52:57 +00:00
Brian Wellington e7a8dfd296 If we mark an rdataset as secure, also mark the sigrdataset as secure. 2000-04-11 17:12:31 +00:00
Andreas Gustafsson d9b7ec02d9 use the 'trusted-keys' statement to configure security roots 2000-04-11 00:37:59 +00:00
Andreas Gustafsson 84ef83d296 80 columns 2000-04-10 22:00:13 +00:00
Andreas Gustafsson 0f7045b0c4 moved a few more typedefs to <isc/types.h>: isc_region_t, 
isc_textregion_t, isc_lex_t
 2000-04-10 21:57:24 +00:00
Andreas Gustafsson e9da40a783 no need to include <isc/buffer.h>, <isc/result.h> from <isc/base64.h> 2000-04-10 21:35:48 +00:00
Andreas Gustafsson e3b279bfa9 no need to include <isc/buffer.h>, <isc/result.h>, <isc/mem.h> from <isc/base64.h> 2000-04-10 21:33:36 +00:00
Andreas Gustafsson 65e117d576 wired up the 'trusted-keys' config option 2000-04-10 21:31:41 +00:00
Brian Wellington 2a05fa7535 dst_key_iszonekey() was incorrectly checking the 'name type' field of a key. 
The constants added to dst.h for dst_key_iszonekey() duplicated constants
in dns/keyvalues.h, and are now gone.
 2000-04-10 19:48:05 +00:00
Brian Wellington 7c0e50b562 update 2000-04-08 04:43:50 +00:00
Brian Wellington 17e81b39cd TSIG signed incoming zone transfer works now. 2000-04-08 04:42:42 +00:00
Brian Wellington dc3fc5830a A couple minor bugs relating to TCP TSIG verification 2000-04-08 04:40:21 +00:00
Andreas Gustafsson 8571e5ca37 failed to configure default view when there were zone statements 
but no explicit views; the unconfigured default view had no resolver and therefore
denied recursion to all clients
 2000-04-08 00:49:19 +00:00
Michael Graff b7974ee772 Use sigaction() on NetBSD now, too. Note this requires unproven-pthreads-0.13 or higher. 2000-04-07 23:39:24 +00:00
Michael Graff c2bb1a45d2 Install default handler for SIGCHLD -- more after I fix NetBSD's pthread code 2000-04-07 23:09:04 +00:00
Andreas Gustafsson 164f0b0cae configure_view() failed to set result to ISC_R_SUCCESS 
on successful completion
 2000-04-07 22:37:42 +00:00
Andreas Gustafsson 0c637e129e renamed variable configctx -> cctx for consistency and brevity 2000-04-07 22:36:15 +00:00
Andreas Gustafsson edcb93b49c wired up view options: request-ixfr, provide-ixfr 2000-04-07 22:30:43 +00:00
Brian Wellington 3676eeb6ca snapshot. Includes creating a new validator to validate pending KEYs. 2000-04-07 21:44:47 +00:00
Brian Wellington f383cdfeb8 Moved the (lame) random number seeding code to the dst initialize routine, 
since the openssl dsa code calls the openssl random functions directly,
not through dst_random_get.
 2000-04-07 20:50:30 +00:00
James Brister 09c9fc94cf Fixed a function name for style. 
Fixed validation of keys used in server statement. Now they must truly be
defined before used. Ditto for in address match list element. Keys
referenced can be inside the enclosing view or at file scope.
 2000-04-07 20:41:29 +00:00
Andreas Gustafsson a25310fd1d if the first RR in an incoming zone transfer was not an SOA, 
we got an assertion failure
 2000-04-07 19:41:07 +00:00
Michael Graff 7e2c8092db Include <isc/print.h> to get proper definition of vsnprintf() on machines which don't have it. 2000-04-07 19:17:33 +00:00
Michael Graff c7dc3f60bc Temporary hack to disable use of alarm() etc. on NetBSD. This is only 
to help debug a specific pthreads-related problem by letting
the testing system do the real work.
 2000-04-07 18:39:19 +00:00
Andreas Gustafsson 913d4c761c cosmetics 2000-04-07 18:30:11 +00:00
Andreas Gustafsson e82d19b0c7 wired up view options: max-transfer-time-out, max-transfer-idle-out 2000-04-07 18:16:02 +00:00
Andreas Gustafsson 807b4620fa wired up view option: cleaning-interval 2000-04-07 18:04:24 +00:00
James Brister 6abdc5c090 Changes necessary to support server statements inside a view statement. 2000-04-07 17:40:43 +00:00
Brian Wellington b5debbe212 snapshot. Sends a fetch when a KEY isn't present and would partially handle 
a successful response if it got one.  Starts the validator with an
event to avoid deadlock in the resolver.
 2000-04-07 17:36:40 +00:00
Brian Wellington 48ba496518 Uncomment the dnssec validator related code that compiles. Without a 
way to fill in the security roots tree, this code will not be called
yet in practice.
 2000-04-07 17:34:28 +00:00
Andreas Gustafsson cb284e7bd4 wired up view options: transfer-source, transfer-source-v6 2000-04-07 17:27:22 +00:00
Brian Wellington b80a8db9f9 Added DNS_EVENT_VALIDATORSTART 2000-04-07 17:15:35 +00:00
Andreas Gustafsson dded22b184 comment the fact that cview may be NULL in configure_view; 
avoid NULL reference when reporting the (probably impossible) error of
the default view missing root hints
 2000-04-07 17:08:12 +00:00
Andreas Gustafsson 8f9f5011b0 assertion failure setting forwarders of default view 2000-04-07 16:23:54 +00:00
James Brister 616ee4a3f7 Changes to support keys inside views. 2000-04-07 13:35:06 +00:00
Michael Graff 6324997211 add attributes (line singleton, exlcusive, meta, etc) to rdata C files, and 
build a table of them using gen.c.  This means the names are stored twice,
but that will change in the near future.  This will speed up number to text
conversions for rdatatypes, and I plan on speeding up text->number as
well, soon.
 2000-04-07 03:54:52 +00:00
Michael Graff a4e2a43f79 s/DNS_R_/ISC_R_/ as needed 2000-04-07 03:50:33 +00:00
Michael Graff 2fce9cfbf8 add more ISC_R_* mappings 2000-04-07 03:49:10 +00:00
Michael Graff 927d494e07 s/DNS_R_/ISC_R_/ as needed 2000-04-07 03:35:58 +00:00
Michael Graff 674b41a94d translate ISC_R_* values just like do with DNS_R_. 2000-04-07 03:35:36 +00:00
Andreas Gustafsson 57423b6cf9 wired up view options 'forward' and 'forwarders' 2000-04-07 01:07:07 +00:00
Andreas Gustafsson 2e91b1f3d4 configuring zone acl from default view caused assertion failure 2000-04-07 00:51:32 +00:00
Andreas Gustafsson a672bfbee4 wired up view options: allow-query, allow-recursion, allow-transfer 2000-04-06 23:59:19 +00:00
Andreas Gustafsson 2e097e67d8 wired up view options: allow-query, allow-recursion, allow-transfer; 
fixed recently broken creation of default view
 2000-04-06 23:58:01 +00:00
Andreas Gustafsson 93c786e092 cleared up some DNS_R_CONTINUE/DNS_R_WAIT confusion; 
commented get_dst_key()
 2000-04-06 23:09:01 +00:00