Evan Hunt
061f61dd3b
[master] add files omitted from coverage test
2014-02-26 08:54:21 -08:00
Evan Hunt
3a01ded15d
[master] enable windows python tools
...
3757. [port] Enable Python tools (dnssec-coverage,
dnssec-checkds) to run on Windows. [RT #34355 ]
2014-02-26 08:43:50 -08:00
Mark Andrews
79bd3cf027
we only use 32 octets
2014-02-26 15:54:23 +11:00
Mark Andrews
ed70f92dd0
use ISC_PLATFORM_USESIT
2014-02-24 09:54:04 +11:00
Mark Andrews
6b8c78d6ab
delve: -p was not affecting servers lernt from resolv.conf
2014-02-24 09:38:28 +11:00
Mark Andrews
9e39bafd2e
adjust SIT computation
2014-02-24 09:29:49 +11:00
Mark Andrews
02a5e3ed85
3755. [func] Add stats counters for known EDNS options + others.
...
[RT #35447 ]
2014-02-24 09:24:25 +11:00
Mark Andrews
c48c691c4f
check for zone being NULL
2014-02-24 08:52:15 +11:00
Mark Andrews
6d7aa71f2f
encrypt nonce and time
2014-02-24 07:16:00 +11:00
Francis Dupont
35bcef6631
fixed ENABLE_LTR typos
2014-02-23 09:37:32 +01:00
Mark Andrews
cc00679829
wait for zone to transfer
2014-02-23 14:06:15 +11:00
Mark Andrews
89b23dc57e
silence compiler warning
2014-02-23 11:44:12 +11:00
Tinderbox User
892503bd48
regen master
2014-02-21 17:38:07 +00:00
Evan Hunt
f0f3f595b1
[master] delve man page improvements
2014-02-21 08:33:17 -08:00
Evan Hunt
999926955b
[master] fix test error
2014-02-21 08:05:40 -08:00
Evan Hunt
6ce1aa1902
[master] tag mismatch
2014-02-20 20:59:24 -08:00
Evan Hunt
2059d7950b
[master] missing man pages, named-rrchecker had wrong name
2014-02-20 20:46:25 -08:00
Tinderbox User
20a96edbf9
update copyright notice
2014-02-20 23:46:35 +00:00
Tinderbox User
0e1dece22e
regen master
2014-02-20 19:19:27 +00:00
Evan Hunt
bce9696c7a
[master] fix win32 installer
...
3754. [cleanup] win32: Installer now places files in the
Program Files area rather than system services.
[RT #35361 ]
2014-02-20 10:11:06 -08:00
Mark Andrews
80b37f909a
increment dns_nsstatscounter_recursclients when prefetching
2014-02-21 01:40:54 +11:00
Mark Andrews
caac342072
add @ISC_OPENSSL_LIBS@
2014-02-21 00:35:22 +11:00
Mark Andrews
c62ead1ae7
check the result of dns_zone_getdb call
2014-02-20 20:33:46 +11:00
Evan Hunt
5b7dbbf172
[master] silence win64 warnings
2014-02-19 22:58:09 -08:00
Mark Andrews
47cb20eae1
add EDNS EXPIRE processing on ixfr and axfr out
2014-02-20 17:51:31 +11:00
Evan Hunt
83eecff731
[master] adjust default -U
...
3751. [tuning] The default setting for the -U option (setting
the number of UDP listeners per interface) has
been adjusted to improve performance. [RT #35417 ]
2014-02-19 21:54:43 -08:00
Evan Hunt
9576baafc0
[master] assert if sitok/sitbad are insane
2014-02-19 21:26:31 -08:00
Mark Andrews
f0c00f10a0
report if sit is good/bad
2014-02-20 15:55:09 +11:00
Mark Andrews
16134801ce
3750. [experimental] Partially implement EDNS EXPIRE option as described
...
in draft-andrews-dnsext-expire-00. Retrivial of
remaining time to expiry from slave zones is supported.
EXPIRE uses an experimental option code (65002) and
is subject to change. [RT #35416 ]
2014-02-20 14:56:20 +11:00
Mark Andrews
801b958a5c
s/DNS_EDNSOPTIONS/DNS_EDNSOPTIONS/
2014-02-20 14:00:54 +11:00
Mark Andrews
72ba6ba736
define DNS_OPT_EDNSOPTIONS
2014-02-20 13:55:21 +11:00
Mark Andrews
86a85a3bbd
don't error on rpz percentage checks as they fail inconsistently on virtual machines
2014-02-20 12:22:14 +11:00
Evan Hunt
2af7d81efd
[master] unbalanced tag
2014-02-19 17:15:51 -08:00
Mark Andrews
e676a59686
update copyrights
2014-02-20 10:53:11 +11:00
Evan Hunt
d7b9756a21
[master] ENDS client-subnet in dig
...
3749. [func] "dig +subnet" sends an EDNS client subnet option
containing the specified address/prefix when
querying. (Thanks to Wilmer van der Gaast.)
[RT #35415 ]
2014-02-19 15:51:02 -08:00
Tinderbox User
1361e03890
update copyright notice
2014-02-19 23:46:31 +00:00
Francis Dupont
f1a6c8e78c
WIN32 master fixes
2014-02-19 23:17:52 +01:00
Mark Andrews
e0c6a3944d
silence Function returns no value
2014-02-20 00:27:36 +11:00
Mark Andrews
ab830e68aa
silence unreachable statement by adding #if/#endif
2014-02-20 00:24:56 +11:00
Mark Andrews
f45c36fb19
add client cookie in hmacsha*
2014-02-19 20:19:36 +11:00
Mark Andrews
7e2e41df67
3748. [func] Use delve to test dns_client interfaces. [RT #35383 ]
2014-02-19 19:33:21 +11:00
Evan Hunt
35f6a21f5f
[master] max-zone-ttl
...
3746. [func] New "max-zone-ttl" option enforces maximum
TTLs for zones. If loading a zone containing a
higher TTL, the load fails. DDNS updates with
higher TTLs are accepted but the TTL is truncated.
(Note: Currently supported for master zones only;
inline-signing slaves will be added.) [RT #38405 ]
2014-02-18 23:26:50 -08:00
Evan Hunt
6a3fa181d1
[master] add "--with-tuning=large" option
...
3745. [func] "configure --with-tuning=large" adjusts various
compiled-in constants and default settings to
values suited to large servers with abundant
memory. [RT #29538 ]
2014-02-18 22:36:14 -08:00
Mark Andrews
b5f6271f4d
3744. [experimental] SIT: send and process Source Identity Tokens
...
(which are similar to DNS Cookies by Donald Eastlake)
and are designed to help clients detect off path
spoofed responses and for servers to detect legitimate
clients.
SIT use a experimental EDNS option code (65001).
SIT can be enabled via --enable-developer or
--enable-sit. It is on by default in Windows.
RRL processing as been updated to know about SIT with
legitimate clients not being rate limited. [RT #35389 ]
2014-02-19 12:53:42 +11:00
Mark Andrews
43c1433ef2
add attributes to fatal, warn and delve_log
2014-02-19 07:25:29 +11:00
Mark Andrews
657f0f11ac
use return rather than exit
2014-02-19 07:15:27 +11:00
Evan Hunt
9201e2b2f2
[master] remove extra isc_buffer_init
2014-02-17 18:21:37 -08:00
Tinderbox User
3fd910dec5
update copyright notice
2014-02-17 23:46:29 +00:00
Mark Andrews
38eabfcee7
3743. [bug] delegation-only flag wasn't working in forward zone
...
declarations despite being documented. This is
needed to support turning off forwarding and turning
on delegation only at the same name. [RT #35392 ]
2014-02-18 10:09:07 +11:00
Evan Hunt
5efcb3a3e2
[master] fix test errors
...
- require 5.006_001
- cut off the least significant figures of rrsig dates before
comparison to avoid integer overflow
2014-02-17 08:40:02 -08:00