Commit Graph

6512 Commits

Author SHA1 Message Date
Evan Hunt
061f61dd3b [master] add files omitted from coverage test 2014-02-26 08:54:21 -08:00
Evan Hunt
3a01ded15d [master] enable windows python tools
3757.	[port]		Enable Python tools (dnssec-coverage,
			dnssec-checkds) to run on Windows. [RT #34355]
2014-02-26 08:43:50 -08:00
Mark Andrews
79bd3cf027 we only use 32 octets 2014-02-26 15:54:23 +11:00
Mark Andrews
ed70f92dd0 use ISC_PLATFORM_USESIT 2014-02-24 09:54:04 +11:00
Mark Andrews
6b8c78d6ab delve: -p was not affecting servers lernt from resolv.conf 2014-02-24 09:38:28 +11:00
Mark Andrews
9e39bafd2e adjust SIT computation 2014-02-24 09:29:49 +11:00
Mark Andrews
02a5e3ed85 3755. [func] Add stats counters for known EDNS options + others.
[RT #35447]
2014-02-24 09:24:25 +11:00
Mark Andrews
c48c691c4f check for zone being NULL 2014-02-24 08:52:15 +11:00
Mark Andrews
6d7aa71f2f encrypt nonce and time 2014-02-24 07:16:00 +11:00
Francis Dupont
35bcef6631 fixed ENABLE_LTR typos 2014-02-23 09:37:32 +01:00
Mark Andrews
cc00679829 wait for zone to transfer 2014-02-23 14:06:15 +11:00
Mark Andrews
89b23dc57e silence compiler warning 2014-02-23 11:44:12 +11:00
Tinderbox User
892503bd48 regen master 2014-02-21 17:38:07 +00:00
Evan Hunt
f0f3f595b1 [master] delve man page improvements 2014-02-21 08:33:17 -08:00
Evan Hunt
999926955b [master] fix test error 2014-02-21 08:05:40 -08:00
Evan Hunt
6ce1aa1902 [master] tag mismatch 2014-02-20 20:59:24 -08:00
Evan Hunt
2059d7950b [master] missing man pages, named-rrchecker had wrong name 2014-02-20 20:46:25 -08:00
Tinderbox User
20a96edbf9 update copyright notice 2014-02-20 23:46:35 +00:00
Tinderbox User
0e1dece22e regen master 2014-02-20 19:19:27 +00:00
Evan Hunt
bce9696c7a [master] fix win32 installer
3754.	[cleanup]	win32: Installer now places files in the
			Program Files area rather than system services.
			[RT #35361]
2014-02-20 10:11:06 -08:00
Mark Andrews
80b37f909a increment dns_nsstatscounter_recursclients when prefetching 2014-02-21 01:40:54 +11:00
Mark Andrews
caac342072 add @ISC_OPENSSL_LIBS@ 2014-02-21 00:35:22 +11:00
Mark Andrews
c62ead1ae7 check the result of dns_zone_getdb call 2014-02-20 20:33:46 +11:00
Evan Hunt
5b7dbbf172 [master] silence win64 warnings 2014-02-19 22:58:09 -08:00
Mark Andrews
47cb20eae1 add EDNS EXPIRE processing on ixfr and axfr out 2014-02-20 17:51:31 +11:00
Evan Hunt
83eecff731 [master] adjust default -U
3751.	[tuning]	The default setting for the -U option (setting
			the number of UDP listeners per interface) has
			been adjusted to improve performance. [RT #35417]
2014-02-19 21:54:43 -08:00
Evan Hunt
9576baafc0 [master] assert if sitok/sitbad are insane 2014-02-19 21:26:31 -08:00
Mark Andrews
f0c00f10a0 report if sit is good/bad 2014-02-20 15:55:09 +11:00
Mark Andrews
16134801ce 3750. [experimental] Partially implement EDNS EXPIRE option as described
in draft-andrews-dnsext-expire-00.  Retrivial of
                        remaining time to expiry from slave zones is supported.

                        EXPIRE uses an experimental option code (65002) and
                        is subject to change. [RT #35416]
2014-02-20 14:56:20 +11:00
Mark Andrews
801b958a5c s/DNS_EDNSOPTIONS/DNS_EDNSOPTIONS/ 2014-02-20 14:00:54 +11:00
Mark Andrews
72ba6ba736 define DNS_OPT_EDNSOPTIONS 2014-02-20 13:55:21 +11:00
Mark Andrews
86a85a3bbd don't error on rpz percentage checks as they fail inconsistently on virtual machines 2014-02-20 12:22:14 +11:00
Evan Hunt
2af7d81efd [master] unbalanced tag 2014-02-19 17:15:51 -08:00
Mark Andrews
e676a59686 update copyrights 2014-02-20 10:53:11 +11:00
Evan Hunt
d7b9756a21 [master] ENDS client-subnet in dig
3749.	[func]		"dig +subnet" sends an EDNS client subnet option
			containing the specified address/prefix when
                        querying. (Thanks to Wilmer van der Gaast.)
                        [RT #35415]
2014-02-19 15:51:02 -08:00
Tinderbox User
1361e03890 update copyright notice 2014-02-19 23:46:31 +00:00
Francis Dupont
f1a6c8e78c WIN32 master fixes 2014-02-19 23:17:52 +01:00
Mark Andrews
e0c6a3944d silence Function returns no value 2014-02-20 00:27:36 +11:00
Mark Andrews
ab830e68aa silence unreachable statement by adding #if/#endif 2014-02-20 00:24:56 +11:00
Mark Andrews
f45c36fb19 add client cookie in hmacsha* 2014-02-19 20:19:36 +11:00
Mark Andrews
7e2e41df67 3748. [func] Use delve to test dns_client interfaces. [RT #35383] 2014-02-19 19:33:21 +11:00
Evan Hunt
35f6a21f5f [master] max-zone-ttl
3746.	[func]		New "max-zone-ttl" option enforces maximum
			TTLs for zones. If loading a zone containing a
			higher TTL, the load fails. DDNS updates with
			higher TTLs are accepted but the TTL is truncated.
			(Note: Currently supported for master zones only;
			inline-signing slaves will be added.) [RT #38405]
2014-02-18 23:26:50 -08:00
Evan Hunt
6a3fa181d1 [master] add "--with-tuning=large" option
3745.	[func]		"configure --with-tuning=large" adjusts various
			compiled-in constants and default settings to
			values suited to large servers with abundant
			memory. [RT #29538]
2014-02-18 22:36:14 -08:00
Mark Andrews
b5f6271f4d 3744. [experimental] SIT: send and process Source Identity Tokens
(which are similar to DNS Cookies by Donald Eastlake)
                        and are designed to help clients detect off path
                        spoofed responses and for servers to detect legitimate
                        clients.

                        SIT use a experimental EDNS option code (65001).

                        SIT can be enabled via --enable-developer or
                        --enable-sit.  It is on by default in Windows.

                        RRL processing as been updated to know about SIT with
                        legitimate clients not being rate limited. [RT #35389]
2014-02-19 12:53:42 +11:00
Mark Andrews
43c1433ef2 add attributes to fatal, warn and delve_log 2014-02-19 07:25:29 +11:00
Mark Andrews
657f0f11ac use return rather than exit 2014-02-19 07:15:27 +11:00
Evan Hunt
9201e2b2f2 [master] remove extra isc_buffer_init 2014-02-17 18:21:37 -08:00
Tinderbox User
3fd910dec5 update copyright notice 2014-02-17 23:46:29 +00:00
Mark Andrews
38eabfcee7 3743. [bug] delegation-only flag wasn't working in forward zone
declarations despite being documented.  This is
                        needed to support turning off forwarding and turning
                        on delegation only at the same name.  [RT #35392]
2014-02-18 10:09:07 +11:00
Evan Hunt
5efcb3a3e2 [master] fix test errors
- require 5.006_001
- cut off the least significant figures of rrsig dates before
  comparison to avoid integer overflow
2014-02-17 08:40:02 -08:00