Mark Andrews
94124ad484
4031. [bug] named-checkconf -z failed to report a missing file
...
with a hint zone. [RT #38294 ]
(cherry picked from commit d1f1f13c7f )
2015-01-08 19:20:31 +11:00
Mark Andrews
f199e8dd80
4028. [bug] $GENERATE with a zero step was not being caught as a
...
error. A $GENERATE with a / but no step was not being
caught as a error. [RT #38262 ]
(cherry picked from commit b0c18fffd3 )
2015-01-06 11:33:38 +11:00
Francis Dupont
84e3441610
update OpenSSL 1.0.1 patch
2015-01-02 16:08:24 +01:00
Francis Dupont
04625d6eb0
update OpenSSL 1.0.0 patch
2015-01-02 15:29:08 +01:00
Francis Dupont
57171e61d2
update OpenSSL 0.9.8 patch
2015-01-02 15:01:47 +01:00
Mark Andrews
a777df2ff6
4027. [port] Net::DNS 0.81 compatibility. [RT #38165
...
(cherry picked from commit 511ec77fca )
2014-12-23 08:38:21 +11:00
Mark Andrews
a9eee2f2c3
4026. [bug] Fix RFC 3658 reference in dig +sigchase. [RT #38173 ]
...
(cherry picked from commit 44032d3918 )
2014-12-22 09:40:47 +11:00
Mark Andrews
418da71422
adjust comment
...
(cherry picked from commit 8ee3233acd )
2014-12-09 07:41:44 +11:00
Evan Hunt
398036fa13
[v9_9] Clean up after reclimit system test
2014-12-08 08:52:57 -08:00
Tinderbox User
d978cdbc71
update copyright notice / whitespace
2014-12-05 23:46:08 +00:00
Mark Andrews
dba49da2f2
skip subtest if cryptography not compiled in
2014-12-06 00:49:16 +11:00
Mark Andrews
ba65e27124
4020. [bug] Change 3736 broke nsupdate's SOA MNAME discovery
...
resulting in updates being sent to the wrong server.
[RT #37925 ]
(cherry picked from commit 03fd9cb81c )
2014-12-05 18:27:14 +11:00
Mark Andrews
404f3152fa
4019. [func] If named is not configured to validate the answer
...
then allow fallback to plain DNS on timeout even
when we know the server supports EDNS. [RT #37978 ]
2014-12-05 18:12:56 +11:00
Mark Andrews
05f9fa90dd
clean up intermediates
2014-12-05 08:27:09 +11:00
Mark Andrews
4c2867ce16
pre-sign the zones
2014-12-05 07:29:39 +11:00
Tinderbox User
19c3ef455b
update copyright notice / whitespace
2014-12-03 23:46:11 +00:00
Mark Andrews
f6f0878e11
4018. [bug] Fall back to plain DNS when EDNS queries are being
...
dropped was failing. [RT #37965 ]
4017. [testing] Add system test to check lookups to legacy servers
with broken DNS behaviour. [RT #37965 ]
2014-12-04 07:07:09 +11:00
Mukund Sivaraman
dde0acf74a
Fix a dig segfault due to bad linked list usage [RT #37591 ]
...
The crash (#37591 ) seems to happen because the query is taken out of
lookup->q(query->link), and put on lookup->connecting(query->clink).
The code checks query->link where it is detached (-1 in next pointer).
However, there's no need to call send_tcp_connect() there as the queries
are already connecting at that point.
(cherry picked from commit c5e9423340 )
(cherry picked from commit 2d33a22970 )
2014-12-03 16:47:56 +05:30
Mark Andrews
bbc8cca27d
4015. [bug] Nameservers that are skipped due to them being
...
CNAMEs were not being logged. They are now logged
to category 'cname' as per BIND 8. [RT #37935 ]
(cherry picked from commit ea3aa401bc )
2014-12-03 11:47:10 +11:00
Tinderbox User
93d2a8ec28
update copyright notice / whitespace
2014-12-02 23:46:08 +00:00
Mark Andrews
301160944f
4014. [bug] When including a master file origin_changed was
...
not being properly set leading to a potentially
spurious 'inherited owner' warning. [RT #37919 ]
(cherry picked from commit 6444de08d1 )
2014-12-03 09:46:28 +11:00
Evan Hunt
f1c0eff9e6
[v9_9] remove obsolete 'relay' test
2014-12-02 13:58:07 -08:00
Mark Andrews
2d21161222
unchecked putnull
2014-11-25 15:24:45 +11:00
Tinderbox User
395b2849e9
update copyright notice / whitespace
2014-11-24 23:53:31 +00:00
Mark Andrews
b7397773f5
4011. [bug] master's list port inheritance was not properly
...
implemented. [RT #37792 ]
(cherry picked from commit d040fa2f1c )
2014-11-24 11:59:16 +11:00
Tinderbox User
b2bcacdf36
update copyright notice / whitespace
2014-11-20 23:46:15 +00:00
Evan Hunt
1d47cb124d
[v9_9] refactor max-recursion-queries
...
- the counters weren't set correctly when fetches timed out.
instead we now pass down a counter object.
(cherry picked from commit 05e448935c )
(cherry picked from commit 6c049c57d9 )
2014-11-19 18:38:52 -08:00
Tinderbox User
e211a7b798
update copyright notice / whitespace
2014-11-19 23:46:07 +00:00
Evan Hunt
b6ab355aef
[v9_9] fix reclimit test (remove servfail-ttl)
2014-11-19 00:15:22 -08:00
Evan Hunt
711e833921
[v9_9] add max-recursion-queries
...
also fixes and documentation for max-recursion-depth
(cherry picked from commit c4f54e5bd1 )
(cherry picked from commit b3aa528d7e )
2014-11-18 22:14:55 -08:00
Tinderbox User
dd461ee35b
update copyright notice / whitespace
2014-11-18 23:46:09 +00:00
Evan Hunt
603a0e2637
[v9_9] limit recursion depth and iterative queries
...
4006. [security] A flaw in delegation handling could be exploited
to put named into an infinite loop. This has
been addressed by placing limits on the number
of levels of recursion named will allow (default 7),
and the number of iterative queries that it will
send (default 50) before terminating a recursive
query (CVE-2014-8500).
The recursion depth limit is configured via the
"max-recursion-depth" option. [RT #35780 ]
2014-11-17 23:49:07 -08:00
Mark Andrews
16adeb3661
check returns from putstr and putnull
...
(cherry picked from commit 18fa89b01e )
2014-11-18 13:03:20 +11:00
Evan Hunt
f6e2e95a7d
[v9_9] reference leak with AAAA glue but not A
...
4004. [bug] When delegations had AAAA glue but not A, a
reference could be leaked causing an assertion
failure on shutdown. [RT #37796 ]
(cherry picked from commit c4abb19716 )
(cherry picked from commit 96b6923a25 )
2014-11-14 09:04:52 -08:00
Tinderbox User
8cf35615f6
update copyright notice
2014-11-05 23:46:03 +00:00
Evan Hunt
b2630b7363
[v9_9] fix nxrrset in nxdomain redirection
...
4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
from the redirect zone. [RT #37722 ]
(cherry picked from commit 3cc8c7d630 )
(cherry picked from commit 56293cd148 )
2014-11-04 23:54:25 -08:00
Mark Andrews
bb4ef32432
3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
2014-11-04 12:25:38 +11:00
Mark Andrews
bfef33cbe3
3990. [testing] Add tests for unknown DNSSEC algorithm handling.
...
[RT #37541 ]
(cherry picked from commit a5c7cfbac4 )
2014-10-30 11:22:17 +11:00
Tinderbox User
e00da9b8bc
regen v9_9
2014-10-21 06:49:41 +00:00
Tinderbox User
6ec35cff80
regen v9_9
2014-10-21 01:12:23 +00:00
Tinderbox User
bf2b88607b
update copyright notice
2014-10-20 23:46:18 +00:00
Mark Andrews
ca46ee6d2b
3985. [doc] Describe how +ndots and +search interact in dig.
...
[RT #37529 ]
(cherry picked from commit 40b28f5402 )
2014-10-21 08:07:24 +11:00
Mark Andrews
f2b44f6586
3981. [bug] Cache DS/NXDOMAIN independently of other query types.
...
[RT #37467 ]
(cherry picked from commit 72775a79fe )
2014-10-18 13:10:16 +11:00
Mark Andrews
8b5f53534c
allow for the set of ttls to be empty
...
(cherry picked from commit 44ef2206d7 )
2014-10-16 14:47:11 +11:00
Mark Andrews
7d00852591
make test more robust in the face of server failures
2014-10-16 12:34:36 +11:00
Mark Andrews
8f355bec12
3972. [bug] Fix host's usage statement. [RT #37397 ]
...
(cherry picked from commit c12c746e3a )
2014-10-07 01:10:10 +11:00
Mark Andrews
53373a6929
3971. [bug] Reduce the cascasding failures due to a bad $TTL line
...
in named-checkconf / named-checkzone. [RT #37138 ]
(cherry picked from commit c81d56c03e )
2014-10-05 08:30:37 +11:00
Mark Andrews
cbe35320bf
verifying inline zones work with views requires crypto to be configured
2014-10-04 18:08:53 +10:00
Evan Hunt
d1beb33058
[v9_9] remove clone tests from the views system test: inapplicable in 9.9
2014-10-03 07:22:55 -07:00
Tinderbox User
3c516868aa
update copyright notice
2014-10-02 23:46:10 +00:00