Mark Andrews
863a0dbd20
The old active key could be deleted before the "former standby key has now
...
signed fully" ran causing it to fail. Delay the deletion by 10 seconds.
2011-05-30 07:28:13 +00:00
Automatic Updater
4a2abf6faa
update copyright notice
2011-05-26 23:46:25 +00:00
Evan Hunt
6dd373ebab
3121. [security] An authoritative name server sending a negative
...
response containing a very large RRset could
trigger an off-by-one error in the ncache code
and crash named. [RT #24650 ]
3120. [bug] Named could fail to validate zones listed in a DLV
that validated insecure without using DLV and had
DS records in the parent zone. [RT #24631 ]
3119. [bug] When rolling to a new DNSSEC key, a private-type
record could be created and never marked complete.
[RT #23253 ]
2011-05-26 23:10:13 +00:00
Evan Hunt
8a2c86ea10
3118. [bug] nsupdate could dump core on shutdown when using
...
SIG(0) keys. [RT #24604 ]
2011-05-23 22:23:05 +00:00
Evan Hunt
0b53de22db
3117. [cleanup] Remove doc and parser references to the
...
never-implemented 'auto-dnssec create' option.
[RT #24533 ]
2011-05-23 20:55:24 +00:00
Evan Hunt
4b7c993dc2
3114. [bug] Retain expired RRSIGs in dynamic zones if key is
...
inactive and there is no replacement key. [RT #23136 ]
2011-05-19 04:42:18 +00:00
Mark Andrews
e080b58ad2
named.conf copyrights
2011-05-08 07:05:12 +00:00
Automatic Updater
7fbd853c14
update copyright notice
2011-05-07 23:46:36 +00:00
Evan Hunt
52d14ab8a0
3111. [bug] Improved consistency checks for dnssec-enable and
...
dnssec-validation, added test cases to the
checkconf system test. [RT #24398 ]
2011-05-07 05:52:58 +00:00
Evan Hunt
932d1ded69
3110. [bug] dnssec-signzone: Wrong error message could appear
...
when attempting to sign with no KSK. [RT #24369 ]
2011-05-07 00:24:13 +00:00
Automatic Updater
d2d4121e41
update copyright notice
2011-05-06 23:46:35 +00:00
Evan Hunt
77e391dcf0
3107. [bug] dnssec-signzone: Report the correct number of ZSKs
...
when using -x. [RT #20852 ]
2011-05-06 21:07:23 +00:00
Mark Andrews
a1b85f0dc5
set/reset client->signer.
2011-05-05 23:55:19 +00:00
Mark Andrews
4f0ae1f09f
explictly kill the process if the server fails to start, check for a non zero length pid file
2011-05-05 04:56:02 +00:00
Automatic Updater
c828da6fd2
update copyright notice
2011-05-03 23:46:59 +00:00
Mark Andrews
9f0648fcdb
grep was not precise enough leading to test failure
2011-05-03 16:09:48 +00:00
Mark Andrews
a6213e6566
treat abs(x) < 500ms as 0
2011-05-03 00:37:24 +00:00
Automatic Updater
50e99b5431
update copyright notice
2011-05-02 23:46:49 +00:00
Mark Andrews
a680251f6b
force numeric comparision
2011-05-02 05:00:50 +00:00
Mark Andrews
c4135d6b8e
handle end of day
2011-05-02 01:41:26 +00:00
Mark Andrews
881c1a4e65
treat exit code 255 as skipped
2011-05-01 23:32:43 +00:00
Mark Andrews
d1e2909418
fix expression
2011-05-01 21:37:03 +00:00
Mark Andrews
d8c4983127
awk -v is not portable, add floating point arithmetic effects
2011-05-01 11:33:08 +00:00
Evan Hunt
bbc2f43f5f
3101. [bug] Zones using automatic key maintenance could fail
...
to check the key repository for updates. [RT #23744 ]
2011-04-29 21:43:37 +00:00
Automatic Updater
2f19fa2364
update copyright notice
2011-04-19 23:47:01 +00:00
Evan Hunt
882ab80d57
3099. [test] "dlz" system test now runs but gives R:SKIPPED if
...
not compiled with --with-dlz-filesystem. [RT #24146 ]
2011-04-19 22:32:24 +00:00
Evan Hunt
19ad23141e
3097. [test] Add a tool to test handling of malformed packets.
...
[RT #24096 ]
2011-04-15 01:01:13 +00:00
Evan Hunt
07fc520149
add in "dlvauto" system test
2011-04-05 23:15:20 +00:00
Mark Andrews
a407a2a647
9.7 doesn't have autodlv
2011-04-05 13:35:10 +00:00
Evan Hunt
659792d80a
Corrected a bug in the dnssec test introduced in change #3046 .
2011-03-31 15:56:09 +00:00
Automatic Updater
793c8a025a
update copyright notice
2011-03-28 23:46:39 +00:00
Mark Andrews
c0f4d881ad
while (1) -> for (;;), style
2011-03-28 05:16:01 +00:00
Automatic Updater
874d107342
update copyright notice
2011-03-26 23:46:44 +00:00
Evan Hunt
33e22751d5
Forgot to add a data file for the autosign test.
2011-03-26 01:09:22 +00:00
Evan Hunt
de9953980e
3092. [bug] Signatures for records at the zone apex could go
...
stale due to an incorrect timer setting. [RT #23769 ]
3091. [bug] Fixed a bug in which zone keys that were published
and then subsequently activated could fail to trigger
automatic signing. [RT #22991 ]
2011-03-25 23:54:34 +00:00
Automatic Updater
a1daec7a10
regen
2011-03-25 23:30:52 +00:00
Automatic Updater
6b658869ba
update copyright notice
2011-03-22 23:46:38 +00:00
Scott Mann
fd4f29edf2
Remove bin/tests/system/logfileconfig/ns1/named.conf and add setup.sh
...
in order to resolve changing named.conf issue. [RT #23687 ]
2011-03-22 18:44:46 +00:00
Evan Hunt
2ca671d4d2
Corrected a mistake that was exposed by change #3085 in 9.9 (though it
...
has no deleterious effect in 9.8 and earlier).
2011-03-22 03:30:33 +00:00
Automatic Updater
1e98c82a59
regen v9_7
2011-03-22 02:10:56 +00:00
Automatic Updater
8850c3eb35
update copyright notice
2011-03-21 23:46:29 +00:00
Mark Andrews
160d5cb860
adjust rt23702 test to take less time
2011-03-21 20:32:39 +00:00
Evan Hunt
585530bce3
3086. [bug] Running dnssec-settime -f on an old-style key will
...
now force an update to the new key format even if no
other change has been specified, using "-P now -A now"
as default values. [RT #22474 ]
2011-03-21 15:55:48 +00:00
Mark Andrews
9f3efdacd0
wait longer for the nsec3chain generation to complete
2011-03-21 03:31:28 +00:00
Mark Andrews
53d275bcf7
3083. [bug] NOTIFY messages were not being sent when generating
...
a NSEC3 chain incrementally. [RT #23702 ]
2011-03-21 01:08:12 +00:00
Mark Andrews
8c6e8dd6c1
3081. [bug] Failure of DNAME substitution did not return
...
YXDOMAIN. [RT #23591 ]
2011-03-19 10:06:40 +00:00
Automatic Updater
abcb1ed6e5
update copyright notice
2011-03-18 23:46:46 +00:00
Francis Dupont
b61ea69aa3
add 23591 no-regression
2011-03-18 21:37:09 +00:00
Mark Andrews
19c5764f41
3079. [bug] Handle isc_event_allocate failures in t_tasks.
...
[RT #23572 ]
2011-03-18 07:48:01 +00:00
Evan Hunt
6605a0132b
ignore SIGPIPE in ans.pl; this is needed for debian.
2011-03-18 04:40:19 +00:00
