Commit Graph
570 Commits
Author SHA1 Message Date
Automatic Updater 6f1b350c3a update copyright notice 2010-02-04 23:49:13 +00:00
Automatic Updater 44d0f0256f regen 2010-02-04 01:14:17 +00:00
Automatic Updater f1c89cb4f5 update copyright notice 2010-02-03 23:49:07 +00:00
Evan Hunt dcfca6f18d 2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921] 2010-02-03 01:02:37 +00:00
Automatic Updater a3416b0a1b regen 2010-01-20 01:14:19 +00:00
Automatic Updater ca4e44ebe8 update copyright notice 2010-01-19 23:48:56 +00:00
Evan Hunt 8a198fa776 2842. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
creating key files if there is a chance that the new
			key ID will collide with an existing one after
			either of the keys has been revoked.  (To override
			this in the case of dnssec-keyfromlabel, use the -y
			option.  dnssec-keygen will simply create a
			different, noncolliding key, so an override is
			not necessary.) [RT #20838]
2010-01-19 20:26:07 +00:00
Automatic Updater 65d1486535 update copyright notice 2010-01-11 23:48:37 +00:00
Francis Dupont a91029a00e Prevent Linux spurious warnings about fwrite(). [RT #20812] 2010-01-11 10:49:14 +00:00
Automatic Updater a30c7003af update copyright notice 2010-01-07 23:48:54 +00:00
Evan Hunt 8ebf67b7f0 2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
[RT #20851]
2010-01-07 19:13:59 +00:00
Automatic Updater 247f299fb0 update copyright notice 2010-01-06 23:48:47 +00:00
Evan Hunt b1fbf2a4db fix spacing 2010-01-06 00:53:45 +00:00
Automatic Updater 3ee1371212 update copyright notice 2010-01-05 23:48:37 +00:00
Evan Hunt 564d687132 missing newline in dnssec-signzone usage 2010-01-05 15:31:58 +00:00
Automatic Updater 928e12ccdc update copyright notice 2009-12-18 23:49:03 +00:00
Evan Hunt 9de98fbbbe 2809. [cleanup] Restored accidentally-deleted text in usage output
in dnssec-settime and dnssec-revoke [RT #20739]
2009-12-18 07:49:42 +00:00
Evan Hunt 12178c8652 2805. [bug] Fixed namespace problems encountered when building
external programs using non-exported BIND9 libraries
			(i.e., built without --enable-exportlib). [RT #20679]
2009-12-05 23:31:41 +00:00
Automatic Updater 4b6dc226f7 update copyright notice 2009-12-04 22:06:37 +00:00
Mark Andrews 3d17a3ba61 2801. [func] Detect and report records that are different according
to DNSSEC but are sematically equal according to plain
                        DNS.  Apply plain DNS comparisons rather than DNSSEC
                        comparisons when processing UPDATE requests.
                        dnssec-signzone now removes such semantically duplicate
                        records prior to signing the RRset.

                        named-checkzone -r {ignore|warn|fail} (default warn)
                        named-compilezone -r {ignore|warn|fail} (default warn)

                        named.conf: check-dup-records {ignore|warn|fail};
2009-12-04 21:09:34 +00:00
Automatic Updater 089c63b69c regen 2009-12-04 01:13:45 +00:00
Evan Hunt 8e4f3f1cbc 2799. [cleanup] Changed the "secure-to-insecure" option to
"dnssec-secure-to-insecure", and "dnskey-ksk-only"
			to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
2009-12-03 23:18:17 +00:00
Mark Andrews 4bf4beede2 silence compiler warnings 2009-11-25 23:00:32 +00:00
Evan Hunt ce3b2c5189 2788. [bug] dnssec-signzone could sign with keys that were
not requested [RT #20625]
2009-11-25 03:17:11 +00:00
Evan Hunt d312bc5d81 2785. [bug] Revoked keys could fail to self-sign [RT #20652] 2009-11-24 03:42:32 +00:00
Evan Hunt cef109efa7 2780. [bug] dnssec-keygen -A none didn't properly unset the
activation date in all cases. [RT #20648]

2779.	[bug]		Dynamic key revokation could fail. [RT #20644]

2778.	[bug]		dnssec-signzone could fail when a key was revoked
			without deleting the unrevoked version. [RT #20638]
2009-11-23 02:55:41 +00:00
Francis Dupont 1cd538c051 20643: RSASHA2 NSEC3 compatible in dnssec-keyfromlabel 2009-11-21 17:54:09 +00:00
Evan Hunt 00295e0650 2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568] 2009-11-16 04:27:44 +00:00
Evan Hunt 6f6f08b7a4 2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588] 2009-11-06 01:06:38 +00:00
Automatic Updater 64affc54f9 regen 2009-11-03 21:59:04 +00:00
Evan Hunt f80b665135 fix typo: s/pcks11/pkcs11/ 2009-11-03 21:44:46 +00:00
Mark Andrews 2162c1ed3d add missing period 2009-11-03 01:31:17 +00:00
Automatic Updater 575e15fed9 regen 2009-10-28 01:14:38 +00:00
Mark Andrews c6d2578fd6 2741. [func] Allow the dnssec-keygen progress messages to be
suppressed (dnssec-keygen -q).  Automatically
                        suppress the progress messages when stdin is not
                        a tty. [RT #20474]
2009-10-28 00:27:10 +00:00
Evan Hunt e3b59e4af7 Minor cleanup in dnssec-* tools 2009-10-27 18:56:49 +00:00
Mark Andrews 63d5a6f680 2736. [func] Improve the performance of NSEC signed zones with
more than a normal amount of glue below a delegation.
                        [RT #20191]
2009-10-27 04:46:58 +00:00
Evan Hunt e8831e51c1 2735. [bug] dnssec-signzone could fail to read keys
that were specified on the command line with
			full paths, but weren't in the current
			directory. [RT #20421]
2009-10-27 03:59:45 +00:00
Automatic Updater 5f744ebbdc update copyright notice 2009-10-26 23:47:35 +00:00
Evan Hunt c021499604 2731. [func] Additional work on change 2709. The key parser
will now ignore unrecognized fields when the
			minor version number of the private key format
			has been increased.  It will reject any key with
			the major version number increased. [RT #20310]
2009-10-26 21:18:24 +00:00
Francis Dupont 775a8d86d9 keygen progress indication [RT #20284] 2009-10-24 09:46:19 +00:00
Evan Hunt 8f0502e922 2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
dnssec-signzone now warn immediately if asked to
			write into a nonexistent directory. [RT #20278]
2009-10-24 00:00:06 +00:00
Automatic Updater 8e821eea5f regen 2009-10-23 01:14:48 +00:00
Evan Hunt cc6cddfd94 2726. [func] Added support for SHA-2 DNSSEC algorithms,
RSASHA256 and RSASHA512. [RT #20023]
2009-10-22 02:21:31 +00:00
Automatic Updater 5a24d24c8f regen 2009-10-17 01:14:35 +00:00
Jeremy Reed eec29cfd40 Fix typo as reported by SUN Guonian <sun@cnnic.cn>.
This was seen in 9.7.0a3.
No CHANGES entry as is too minor.
2009-10-16 15:37:01 +00:00
Mark Andrews 1ed01b3390 silence compiler warning 2009-10-14 22:07:13 +00:00
Automatic Updater ef9ee92543 update copyright notice 2009-10-13 23:48:12 +00:00
Evan Hunt 19ac4707ee changes needed for win32 build 2009-10-13 00:55:51 +00:00
Automatic Updater 97639003b0 update copyright notice 2009-10-12 23:48:02 +00:00
Automatic Updater 3b2c6af63e regen 2009-10-12 23:16:15 +00:00