Commit Graph

207 Commits

Author SHA1 Message Date
Mark Andrews
5eb05c48c4 link against @DNS_CRYPTO_LIBS@ 2012-11-29 07:27:30 +11:00
Mark Andrews
7b8900fbad 9.8.4b1 2012-08-23 17:18:43 +10:00
Mark Andrews
13a90e9f23 we didn't catch a zero option at the global level when views are active 2012-08-17 13:41:15 +10:00
Evan Hunt
3a6af6ab9b allow "forward" and "forwarders" in static-stub
3363.	[bug]		Need to allow "forward" and "fowarders" options
			in static-stub zones; this had been overlooked.
			[RT #30482]
2012-08-15 13:12:21 -07:00
Evan Hunt
475b563876 properly range-check fields that do not allow 0
3362.	[bug]		Setting some option values to 0 in named.conf
			could trigger an assertion failure on startup.
			[RT #27730]
2012-08-13 22:41:33 -07:00
Evan Hunt
5c13c20390 address memory leak with bad tsig secret
3359.	[bug]		An improperly-formed TSIG secret could cause a
                        memory leak. [RT #30607]
2012-08-10 20:17:22 -07:00
Evan Hunt
0bae1e2746 update api 2012-07-23 23:39:23 -07:00
Tinderbox User
599cf7175e update copyright notice 2012-06-29 23:45:32 +00:00
Mark Andrews
c0b8f1a675 reverse bad copyright update 2012-06-29 11:43:12 +10:00
Tinderbox User
4106b0caeb update copyright notice 2012-06-29 01:21:53 +00:00
Mark Andrews
faea8a525d remove rundundent call 'result = isc_parse_uint8(&ui, r.base, 10);' 2012-06-21 14:30:06 +10:00
Mark Andrews
1960a145eb 9.8.3 2012-04-27 16:44:00 +10:00
Mark Andrews
db829f3834 3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
[RT #27631]
2012-04-26 11:46:04 +10:00
Tinderbox User
1ceec0a211 update copyright notice 2012-03-10 23:45:31 +00:00
Tinderbox User
91f0609aae regen v9_8 2012-03-07 01:54:34 +00:00
Evan Hunt
3997b6bcbf add gitignore, remove cvsignore 2012-03-03 23:33:18 -08:00
Mark Andrews
e4facd74b6 Add comment describing LIBINTERFACE values per branch 2012-01-30 00:23:54 +00:00
Evan Hunt
9f96d80a8d 3228. [tuning] Dynamically grow symbol table to improve zone
loading performance. [RT #26523]
2011-11-30 04:26:48 +00:00
Evan Hunt
a584852ed1 update api for 9.8.2b1 2011-11-10 02:19:24 +00:00
Mark Andrews
65f3e99e21 3209. [func] Add "dnssec-lookaside 'no'". [RT #24858] 2011-11-07 00:31:48 +00:00
Scott Mann
ed1518e8c5 up various values in api files based on changes 2011-07-09 15:01:40 +00:00
Evan Hunt
8c22e52db1 3129. [bug] Named could crash on 'rndc reconfig' when
allow-new-zones was set to yes and named ACLs
			were used, [RT #22739]
2011-06-17 07:04:32 +00:00
Evan Hunt
13ab5f75cb 3111. [bug] Improved consistency checks for dnssec-enable and
dnssec-validation, added test cases to the
                        checkconf system test. [RT #24398]
2011-05-07 05:53:24 +00:00
Evan Hunt
4c08095355 fixed an error in prior commit 2011-05-05 18:02:09 +00:00
Evan Hunt
f4b07b09d0 3103. [bug] Configuring 'dnssec-validation auto' in a view
instead of in the options statement could trigger
			an assertion failure in named-checkconf. [RT #24382]
2011-05-05 16:11:43 +00:00
Mark Andrews
db01c31d2c 9.8.1b1 2011-04-08 02:43:47 +00:00
Evan Hunt
af93cf1390 Forgot to initialize a fixedname 2011-03-11 17:20:39 +00:00
Mark Andrews
ac6edf67d5 3069. [cleanup] Silence warnings messages from clang static analysis.
[RT #20256]
2011-03-11 06:47:09 +00:00
Mark Andrews
17acd2a230 remove -I "../..../lib/dns/sec/openssl/include" 2011-01-13 08:56:45 +00:00
Mark Andrews
e02c1d738b 9.8.0b1 2011-01-13 04:45:17 +00:00
Automatic Updater
93235c1cba update copyright notice 2011-01-07 23:47:07 +00:00
Mark Andrews
dc4fa197dd 3004. [func] DNS64 reverse support. [RT #22769] 2011-01-07 04:31:39 +00:00
Tatuya JINMEI 神明達哉
743bbdc18f 2947. [func] Add new zone type "static-stub". It's like a stub
zone, but the nameserver names and/or their IP
			addresses are statically configured. [RT #21474]

(for 9.8.0)
2010-12-16 09:51:30 +00:00
Mark Andrews
a16d8521e4 re-base the api version for 9.8 2010-12-10 01:13:02 +00:00
Mark Andrews
73dbd4e933 9.8.0a1 2010-12-09 04:39:10 +00:00
Automatic Updater
b8a9a7bef2 update copyright notice 2010-12-08 23:51:56 +00:00
Mark Andrews
e334405421 2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991] 2010-12-08 02:46:17 +00:00
Evan Hunt
cfd262045c 2936. [func] Improved configuration syntax and multiple-view
support for addzone/delzone feature (see change
			#2930).  Removed "new-zone-file" option, replaced
			with "allow-new-zones (yes|no)".  The new-zone-file
			for each view is now created automatically, with
			a filename generated from a hash of the view name.
			It is no longer necessary to "include" the
			new-zone-file in named.conf; this happens
			automatically.  Zones that were not added via
			"rndc addzone" can no longer be removed with
			"rndc delzone". [RT #19447]
2010-08-11 18:14:20 +00:00
Mark Andrews
2cf74a72fd isc_boolean_t -> dns_v4_aaaa_t 2010-06-26 05:30:30 +00:00
Automatic Updater
b61690dbad update copyright notice 2010-06-22 23:46:52 +00:00
Mark Andrews
48dfee7150 2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
to IPv4 clients.  New acl 'filter-aaaa' (default any).
2010-06-22 04:03:38 +00:00
Automatic Updater
4d42b714be update copyright notice 2010-03-04 23:50:34 +00:00
Mark Andrews
92348098eb 2956. [bug] named-checkconf did not fail on a bad trusted key.
[RT #20705]
2010-03-04 06:17:01 +00:00
Evan Hunt
c7611c7dd2 prep for 9.7.0rc1 release 2009-12-06 02:31:42 +00:00
Evan Hunt
12178c8652 2805. [bug] Fixed namespace problems encountered when building
external programs using non-exported BIND9 libraries
			(i.e., built without --enable-exportlib). [RT #20679]
2009-12-05 23:31:41 +00:00
Mark Andrews
3d17a3ba61 2801. [func] Detect and report records that are different according
to DNSSEC but are sematically equal according to plain
                        DNS.  Apply plain DNS comparisons rather than DNSSEC
                        comparisons when processing UPDATE requests.
                        dnssec-signzone now removes such semantically duplicate
                        records prior to signing the RRset.

                        named-checkzone -r {ignore|warn|fail} (default warn)
                        named-compilezone -r {ignore|warn|fail} (default warn)

                        named.conf: check-dup-records {ignore|warn|fail};
2009-12-04 21:09:34 +00:00
Evan Hunt
8e4f3f1cbc 2799. [cleanup] Changed the "secure-to-insecure" option to
"dnssec-secure-to-insecure", and "dnskey-ksk-only"
			to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
2009-12-03 23:18:17 +00:00
Automatic Updater
97639003b0 update copyright notice 2009-10-12 23:48:02 +00:00
Evan Hunt
77b8f88f14 2712. [func] New 'auto-dnssec' zone option allows zone signing
to be fully automated in zones configured for
			dynamic DNS.  'auto-dnssec allow;' permits a zone
			to be signed by creating keys for it in the
			key-directory and using 'rndc sign <zone>'.
			'auto-dnssec maintain;' allows that too, plus it
			also keeps the zone's DNSSEC keys up to date
			according to their timing metadata. [RT #19943]
2009-10-12 20:48:12 +00:00
Evan Hunt
3727725bb7 2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
zone option cause a zone to be signed with only KSKs
			signing the DNSKEY RRset, not ZSKs.  This reduces
			the size of a DNSKEY answer.  [RT #20340]
2009-10-10 01:48:00 +00:00