Mark Andrews
5eb05c48c4
link against @DNS_CRYPTO_LIBS@
2012-11-29 07:27:30 +11:00
Mark Andrews
7b8900fbad
9.8.4b1
2012-08-23 17:18:43 +10:00
Mark Andrews
13a90e9f23
we didn't catch a zero option at the global level when views are active
2012-08-17 13:41:15 +10:00
Evan Hunt
3a6af6ab9b
allow "forward" and "forwarders" in static-stub
...
3363. [bug] Need to allow "forward" and "fowarders" options
in static-stub zones; this had been overlooked.
[RT #30482 ]
2012-08-15 13:12:21 -07:00
Evan Hunt
475b563876
properly range-check fields that do not allow 0
...
3362. [bug] Setting some option values to 0 in named.conf
could trigger an assertion failure on startup.
[RT #27730 ]
2012-08-13 22:41:33 -07:00
Evan Hunt
5c13c20390
address memory leak with bad tsig secret
...
3359. [bug] An improperly-formed TSIG secret could cause a
memory leak. [RT #30607 ]
2012-08-10 20:17:22 -07:00
Evan Hunt
0bae1e2746
update api
2012-07-23 23:39:23 -07:00
Tinderbox User
599cf7175e
update copyright notice
2012-06-29 23:45:32 +00:00
Mark Andrews
c0b8f1a675
reverse bad copyright update
2012-06-29 11:43:12 +10:00
Tinderbox User
4106b0caeb
update copyright notice
2012-06-29 01:21:53 +00:00
Mark Andrews
faea8a525d
remove rundundent call 'result = isc_parse_uint8(&ui, r.base, 10);'
2012-06-21 14:30:06 +10:00
Mark Andrews
1960a145eb
9.8.3
2012-04-27 16:44:00 +10:00
Mark Andrews
db829f3834
3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
...
[RT #27631 ]
2012-04-26 11:46:04 +10:00
Tinderbox User
1ceec0a211
update copyright notice
2012-03-10 23:45:31 +00:00
Tinderbox User
91f0609aae
regen v9_8
2012-03-07 01:54:34 +00:00
Evan Hunt
3997b6bcbf
add gitignore, remove cvsignore
2012-03-03 23:33:18 -08:00
Mark Andrews
e4facd74b6
Add comment describing LIBINTERFACE values per branch
2012-01-30 00:23:54 +00:00
Evan Hunt
9f96d80a8d
3228. [tuning] Dynamically grow symbol table to improve zone
...
loading performance. [RT #26523 ]
2011-11-30 04:26:48 +00:00
Evan Hunt
a584852ed1
update api for 9.8.2b1
2011-11-10 02:19:24 +00:00
Mark Andrews
65f3e99e21
3209. [func] Add "dnssec-lookaside 'no'". [RT #24858 ]
2011-11-07 00:31:48 +00:00
Scott Mann
ed1518e8c5
up various values in api files based on changes
2011-07-09 15:01:40 +00:00
Evan Hunt
8c22e52db1
3129. [bug] Named could crash on 'rndc reconfig' when
...
allow-new-zones was set to yes and named ACLs
were used, [RT #22739 ]
2011-06-17 07:04:32 +00:00
Evan Hunt
13ab5f75cb
3111. [bug] Improved consistency checks for dnssec-enable and
...
dnssec-validation, added test cases to the
checkconf system test. [RT #24398 ]
2011-05-07 05:53:24 +00:00
Evan Hunt
4c08095355
fixed an error in prior commit
2011-05-05 18:02:09 +00:00
Evan Hunt
f4b07b09d0
3103. [bug] Configuring 'dnssec-validation auto' in a view
...
instead of in the options statement could trigger
an assertion failure in named-checkconf. [RT #24382 ]
2011-05-05 16:11:43 +00:00
Mark Andrews
db01c31d2c
9.8.1b1
2011-04-08 02:43:47 +00:00
Evan Hunt
af93cf1390
Forgot to initialize a fixedname
2011-03-11 17:20:39 +00:00
Mark Andrews
ac6edf67d5
3069. [cleanup] Silence warnings messages from clang static analysis.
...
[RT #20256 ]
2011-03-11 06:47:09 +00:00
Mark Andrews
17acd2a230
remove -I "../..../lib/dns/sec/openssl/include"
2011-01-13 08:56:45 +00:00
Mark Andrews
e02c1d738b
9.8.0b1
2011-01-13 04:45:17 +00:00
Automatic Updater
93235c1cba
update copyright notice
2011-01-07 23:47:07 +00:00
Mark Andrews
dc4fa197dd
3004. [func] DNS64 reverse support. [RT #22769 ]
2011-01-07 04:31:39 +00:00
Tatuya JINMEI 神明達哉
743bbdc18f
2947. [func] Add new zone type "static-stub". It's like a stub
...
zone, but the nameserver names and/or their IP
addresses are statically configured. [RT #21474 ]
(for 9.8.0)
2010-12-16 09:51:30 +00:00
Mark Andrews
a16d8521e4
re-base the api version for 9.8
2010-12-10 01:13:02 +00:00
Mark Andrews
73dbd4e933
9.8.0a1
2010-12-09 04:39:10 +00:00
Automatic Updater
b8a9a7bef2
update copyright notice
2010-12-08 23:51:56 +00:00
Mark Andrews
e334405421
2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991 ]
2010-12-08 02:46:17 +00:00
Evan Hunt
cfd262045c
2936. [func] Improved configuration syntax and multiple-view
...
support for addzone/delzone feature (see change
#2930 ). Removed "new-zone-file" option, replaced
with "allow-new-zones (yes|no)". The new-zone-file
for each view is now created automatically, with
a filename generated from a hash of the view name.
It is no longer necessary to "include" the
new-zone-file in named.conf; this happens
automatically. Zones that were not added via
"rndc addzone" can no longer be removed with
"rndc delzone". [RT #19447 ]
2010-08-11 18:14:20 +00:00
Mark Andrews
2cf74a72fd
isc_boolean_t -> dns_v4_aaaa_t
2010-06-26 05:30:30 +00:00
Automatic Updater
b61690dbad
update copyright notice
2010-06-22 23:46:52 +00:00
Mark Andrews
48dfee7150
2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
...
to IPv4 clients. New acl 'filter-aaaa' (default any).
2010-06-22 04:03:38 +00:00
Automatic Updater
4d42b714be
update copyright notice
2010-03-04 23:50:34 +00:00
Mark Andrews
92348098eb
2956. [bug] named-checkconf did not fail on a bad trusted key.
...
[RT #20705 ]
2010-03-04 06:17:01 +00:00
Evan Hunt
c7611c7dd2
prep for 9.7.0rc1 release
2009-12-06 02:31:42 +00:00
Evan Hunt
12178c8652
2805. [bug] Fixed namespace problems encountered when building
...
external programs using non-exported BIND9 libraries
(i.e., built without --enable-exportlib). [RT #20679 ]
2009-12-05 23:31:41 +00:00
Mark Andrews
3d17a3ba61
2801. [func] Detect and report records that are different according
...
to DNSSEC but are sematically equal according to plain
DNS. Apply plain DNS comparisons rather than DNSSEC
comparisons when processing UPDATE requests.
dnssec-signzone now removes such semantically duplicate
records prior to signing the RRset.
named-checkzone -r {ignore|warn|fail} (default warn)
named-compilezone -r {ignore|warn|fail} (default warn)
named.conf: check-dup-records {ignore|warn|fail};
2009-12-04 21:09:34 +00:00
Evan Hunt
8e4f3f1cbc
2799. [cleanup] Changed the "secure-to-insecure" option to
...
"dnssec-secure-to-insecure", and "dnskey-ksk-only"
to "dnssec-dnskey-kskonly", for clarity. [RT #20586 ]
2009-12-03 23:18:17 +00:00
Automatic Updater
97639003b0
update copyright notice
2009-10-12 23:48:02 +00:00
Evan Hunt
77b8f88f14
2712. [func] New 'auto-dnssec' zone option allows zone signing
...
to be fully automated in zones configured for
dynamic DNS. 'auto-dnssec allow;' permits a zone
to be signed by creating keys for it in the
key-directory and using 'rndc sign <zone>'.
'auto-dnssec maintain;' allows that too, plus it
also keeps the zone's DNSSEC keys up to date
according to their timing metadata. [RT #19943 ]
2009-10-12 20:48:12 +00:00
Evan Hunt
3727725bb7
2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
...
zone option cause a zone to be signed with only KSKs
signing the DNSKEY RRset, not ZSKs. This reduces
the size of a DNSKEY answer. [RT #20340 ]
2009-10-10 01:48:00 +00:00