Commit Graph

4999 Commits

Author SHA1 Message Date
Evan Hunt
87519dfd8f 3025. [bug] Fixed a possible deadlock due to zone resigning.
[RT #22964]
2011-02-19 00:46:45 +00:00
Automatic Updater
5936aeafed update copyright notice 2011-02-18 23:46:44 +00:00
Evan Hunt
7b4467366d 3023. [bug] Named could be left in an inconsistent state when
receiving multiple AXFR response messages that were
			not all TSIG-signed. [RT #23254]
2011-02-18 21:29:19 +00:00
Automatic Updater
2ec8ca31c0 update copyright notice 2011-02-17 23:46:21 +00:00
Mark Andrews
5468d7a070 simplify zone_signwithkey call 2011-02-17 04:58:20 +00:00
Mark Andrews
e754375df7 ensure that the DNSKEY rrset get re-signed even if it hasn't been
updated in sign_apex.
2011-02-17 03:01:19 +00:00
Mark Andrews
9e1b196510 3020. [bug] auto-dnssec failed to correctly update the zone when
changing the DNSKEY RRset. [RT #23232]
2011-02-15 22:09:36 +00:00
Mark Andrews
f02cc38da0 undo commits to wrong branch 2011-02-15 05:40:16 +00:00
Mark Andrews
dace425c59 add NSEC/NSEC3 chains 2011-02-15 04:32:53 +00:00
Mark Andrews
d5e086f492 sign all changed rrsets 2011-02-15 03:55:55 +00:00
Mark Andrews
bc7aed2a6b 3018. [bug] Named failed to check for the "none;" acl when deciding
if a zone may need to be re-signed. RT #23120]
2011-02-07 00:16:48 +00:00
Automatic Updater
2dec8208b9 update copyright notice 2011-02-03 05:38:10 +00:00
Evan Hunt
24a73837dd 3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
for refreshing managed-keys. [RT #22296]
2011-02-03 00:28:08 +00:00
Mark Andrews
7726fff532 9.7.3 2011-01-30 08:01:01 +00:00
Automatic Updater
1fd0d83a38 update copyright notice 2011-01-27 23:46:37 +00:00
Mark Andrews
a244965075 3009. [bug] clients-per-query code didn't work as expected with
particular query patterns. [RT #22972]
2011-01-27 02:28:54 +00:00
Mark Andrews
0fc328e58e 9.7.3rc1 2011-01-14 00:09:38 +00:00
Automatic Updater
3c2e0ad5b3 update copyright notice 2011-01-13 04:48:58 +00:00
Mark Andrews
76be4e69ee 3007. [bug] Named failed to preserve the case of domain names in
rdata which is no compressable when writing master
                        files.  [RT #22863]
2011-01-13 01:34:41 +00:00
Mark Andrews
7d2b1dfede 2995. [bug] The Kerberos realm was not being correctly extracted
from the signer's identity. [RT #22770]
2010-12-22 02:36:17 +00:00
Mark Andrews
48e7dcf0d2 2984. [bug] Don't run MX checks when the target of the MX record
is ".".  [RT #22645]
2010-12-14 00:46:41 +00:00
Mark Andrews
5addd0b6cd 9.7.3b1 2010-12-10 01:23:06 +00:00
Mark Andrews
7035aa0ee2 dst_key_attach 2010-12-09 07:56:12 +00:00
Automatic Updater
9164ae2297 update copyright notice 2010-12-09 04:31:30 +00:00
Mark Andrews
93b433d299 2982. [bug] Reference count dst keys. dst_key_attach() can be used
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
2010-12-09 01:05:29 +00:00
Mark Andrews
e69bed0b94 2980. [bug] named didn't properly handle UPDATES that changed the
TTL of the NSEC3PARAM RRset. [RT #22363]
2010-12-07 03:01:40 +00:00
Mark Andrews
d41b478b81 s/dns_key_free/dst_key_free/ 2010-12-03 12:04:24 +00:00
Automatic Updater
1517558cd3 update copyright notice 2010-12-02 23:46:30 +00:00
Mark Andrews
e7ca8c91ec 2976. [bug] named die on exit after negotiating a GSS-TSIG key.
[RT #3415]
2010-12-02 23:26:58 +00:00
Mark Andrews
7f2d8ae5da 2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() aquired the
wrong lock which could lead to server deadlock.
                        [RT #22614]
2010-12-02 05:07:03 +00:00
Automatic Updater
14f8d8220c update copyright notice 2010-11-30 23:46:15 +00:00
Evan Hunt
f72883c6ae 2974. [bug] Some vaild UPDATE requests could fail due to a
consistency check examining the existing version
			of the zone rather than the new version resulting
			from the UPDATE. [RT #22413]
2010-11-30 02:27:38 +00:00
Automatic Updater
97c708294d update copyright notice 2010-11-17 23:46:32 +00:00
Evan Hunt
a53c04f050 2971. [bug] Fixed a bug that caused journal files not to be
compacted on Windows systems as a result of
			non-POSIX-compliant rename() semantics. [RT #22434]
2010-11-17 00:29:31 +00:00
Mark Andrews
8f110ca521 2970. [security] Adding a NO DATA negative cache entry failed to clear
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
2010-11-16 07:28:37 +00:00
Mark Andrews
8bdc865433 2968. [security] Named could fail to prove a data set was insecure
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]
2010-11-16 01:21:49 +00:00
Mark Andrews
0a2897853b 2963. [security] The allow-query acl was being applied instead of the
allow-query-cache acl to cache lookups. [RT #22114]
2010-09-24 05:54:06 +00:00
Automatic Updater
6d7a4c30a2 update copyright notice 2010-09-15 12:38:04 +00:00
Mark Andrews
1872751420 2961. [bug] Be still more selective about the non-authoritative
answers we apply change 2748 to. [RT #22074]
2010-09-15 12:23:17 +00:00
Mark Andrews
fea199b0ce 2957. [bug] entropy_get() and entropy_getpseudo() failed to match
the API for RAND_bytes() and RAND_pseudo_bytes()
                        respectively. [RT #21962]
2010-09-15 03:20:37 +00:00
Mark Andrews
910ceb6004 2928. [bug] Be more selective about the non-authoritative
answer we apply change 2748 to. [RT #21594]
2010-09-13 23:25:22 +00:00
Mark Andrews
1cbe92ed8c 2951. [bug] named failed to generate a correct signed response
in a optout, delegation only zone with no secure
                        delegations. [RT #22007]
2010-09-07 01:05:59 +00:00
Mark Andrews
6ee56d59da 2950. [bug] named failed to perform a SOA up to date check when
falling back to TCP on UDP timeouts when
                        ixfr-from-differences was set. [RT #21595]
2010-09-06 04:43:08 +00:00
Mark Andrews
ed09ec058a 2949. [bug] dns_view_setnewzones() contained a memory leak if
it was called multiple times. [RT #21942]
2010-09-06 04:34:03 +00:00
Mark Andrews
704e4daff8 dns_view_setnewzones 2010-08-17 01:21:07 +00:00
Mark Andrews
b45ded3b33 9.7.2rc1 2010-08-17 00:51:33 +00:00
Automatic Updater
5d98af56f2 update copyright notice 2010-08-16 23:46:31 +00:00
Mark Andrews
30579c29be 2943. [func] Add support to load new keys into managed zones
without signing immediately with "rndc loadkeys".
                        Add support to link keys with "dnssec-keygen -S"
                        and "dnssec-settime -S".  [RT #21351]
2010-08-16 22:27:18 +00:00
Mark Andrews
ff2047b685 2941. [bug] sdb and sdlz (dlz's zone database) failed to support
DNAME at the zone apex.  [RT #21610]
2010-08-16 05:14:58 +00:00
Automatic Updater
770279e013 update copyright notice 2010-08-13 23:46:29 +00:00