Evan Hunt
9de98fbbbe
2809. [cleanup] Restored accidentally-deleted text in usage output
...
in dnssec-settime and dnssec-revoke [RT #20739 ]
2009-12-18 07:49:42 +00:00
Automatic Updater
90c38ab4e6
regen
2009-12-17 01:13:46 +00:00
Evan Hunt
535bc8112a
s/ddns.key/session.key/
2009-12-16 07:13:02 +00:00
Automatic Updater
8b82c01d74
update copyright notice
2009-12-06 23:48:29 +00:00
Evan Hunt
3cd574df2f
s/journalprint/named-journalprint/
2009-12-06 03:06:16 +00:00
Evan Hunt
0d796b1aaa
improve cleanup and add named.run to .cvsignore files
2009-12-06 03:04:39 +00:00
Evan Hunt
12178c8652
2805. [bug] Fixed namespace problems encountered when building
...
external programs using non-exported BIND9 libraries
(i.e., built without --enable-exportlib). [RT #20679 ]
2009-12-05 23:31:41 +00:00
Evan Hunt
d4d836350f
add .cvsignore files
2009-12-05 05:36:03 +00:00
Automatic Updater
e2e4d32199
regen
2009-12-04 22:22:27 +00:00
Automatic Updater
4b6dc226f7
update copyright notice
2009-12-04 22:06:37 +00:00
Mark Andrews
71ba75c604
2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
...
and genrandom under windows. [RT #20670 ]
2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670 ]
2009-12-04 21:59:24 +00:00
Mark Andrews
3d17a3ba61
2801. [func] Detect and report records that are different according
...
to DNSSEC but are sematically equal according to plain
DNS. Apply plain DNS comparisons rather than DNSSEC
comparisons when processing UPDATE requests.
dnssec-signzone now removes such semantically duplicate
records prior to signing the RRset.
named-checkzone -r {ignore|warn|fail} (default warn)
named-compilezone -r {ignore|warn|fail} (default warn)
named.conf: check-dup-records {ignore|warn|fail};
2009-12-04 21:09:34 +00:00
Evan Hunt
e438e29354
claried log message when no active private keys are found to use for
...
signing. [rt20690]
2009-12-04 20:32:07 +00:00
Mark Andrews
5d850024cb
2800. [func] Reject zones which have NS records which refer to
...
CNAMEs, DNAMEs or don't have address record (class IN
only). Reject UPDATEs which would cause the zone
to fail the above checks if committed. [RT #20678 ]
2009-12-04 03:33:15 +00:00
Automatic Updater
089c63b69c
regen
2009-12-04 01:13:45 +00:00
Automatic Updater
63aeaafd97
update copyright notice
2009-12-03 23:48:22 +00:00
Evan Hunt
8e4f3f1cbc
2799. [cleanup] Changed the "secure-to-insecure" option to
...
"dnssec-secure-to-insecure", and "dnskey-ksk-only"
to "dnssec-dnskey-kskonly", for clarity. [RT #20586 ]
2009-12-03 23:18:17 +00:00
Mark Andrews
ecbbb29519
add copyright
2009-12-03 04:51:41 +00:00
Evan Hunt
6a4d6e3379
adapted to the special needs of solaris's really old awk
2009-12-02 17:54:45 +00:00
Evan Hunt
095810f8cb
fixed autosign/metadata brokenness on solaris [rt20685]
2009-12-02 05:42:15 +00:00
Automatic Updater
ffd297db79
update copyright notice
2009-11-30 23:48:02 +00:00
Evan Hunt
7511904837
add cvsignore files
2009-11-30 21:03:17 +00:00
Evan Hunt
75b8de8787
Create automatic tests "autosign" and "metadata". [rt19946]
2009-11-30 21:00:48 +00:00
Vernon Schryver
5d9922e86f
Allow the optional filter-aaaa-on-v4 option in view statements to close #20635
2009-11-28 15:57:37 +00:00
Mark Andrews
4bf4beede2
silence compiler warnings
2009-11-25 23:00:32 +00:00
Evan Hunt
ce3b2c5189
2788. [bug] dnssec-signzone could sign with keys that were
...
not requested [RT #20625 ]
2009-11-25 03:17:11 +00:00
Mark Andrews
d0ca4e90e2
2786. [bug] Additional could be promoted to answer. [RT #20663 ]
2009-11-25 02:22:05 +00:00
Evan Hunt
d312bc5d81
2785. [bug] Revoked keys could fail to self-sign [RT #20652 ]
2009-11-24 03:42:32 +00:00
Mark Andrews
dc92707066
2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
...
buffer size of 512 or less. [RT #20654 ]
2009-11-24 03:09:57 +00:00
Evan Hunt
cef109efa7
2780. [bug] dnssec-keygen -A none didn't properly unset the
...
activation date in all cases. [RT #20648 ]
2779. [bug] Dynamic key revokation could fail. [RT #20644 ]
2778. [bug] dnssec-signzone could fail when a key was revoked
without deleting the unrevoked version. [RT #20638 ]
2009-11-23 02:55:41 +00:00
Francis Dupont
1cd538c051
20643: RSASHA2 NSEC3 compatible in dnssec-keyfromlabel
2009-11-21 17:54:09 +00:00
Evan Hunt
0088b45de5
2774. [bug] Existing cache DB wasn't being reused after
...
reconfiguration. [RT #20629 ]
2009-11-19 18:52:40 +00:00
Automatic Updater
fe2b9bf570
update copyright notice
2009-11-18 23:48:07 +00:00
Evan Hunt
b08325a7f3
2773. [bug] In autosigned zones, the SOA could be signed
...
with the KSK. [RT #20628 ]
2009-11-18 21:22:31 +00:00
Mark Andrews
a39a5f4d81
2772. [security] When validating, track whether pending data was from
...
the additional section or not and only return it if
validates as secure. [RT #20438 ]
2009-11-17 23:55:18 +00:00
Evan Hunt
00295e0650
2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568 ]
2009-11-16 04:27:44 +00:00
Mark Andrews
adb4211586
2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610 ]
2009-11-12 14:02:38 +00:00
Automatic Updater
3a5fe5abf0
regen
2009-11-11 01:14:42 +00:00
Evan Hunt
2e2a294b05
remove unnecessary braces around {-o filename}
2009-11-10 21:30:42 +00:00
Evan Hunt
3839749200
2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533 ]
2009-11-10 20:02:01 +00:00
Evan Hunt
7fe4b0447f
2757. [bug] dig: assertion failure could occur in connect
...
timeout. [RT #20599 ]
2009-11-10 17:27:40 +00:00
Evan Hunt
e2facd7af2
2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
2009-11-09 01:28:32 +00:00
Evan Hunt
cc3ed192b0
2754. [bug] Secure-to-insecure transitions failed when zone
...
was signed with NSEC3. [RT #20587 ]
2009-11-06 08:38:56 +00:00
Evan Hunt
aa2f010f13
Switch from OpenSSL 0.9.8k to 0.9.8l
2009-11-06 03:14:10 +00:00
Evan Hunt
6f6f08b7a4
2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588 ]
2009-11-06 01:06:38 +00:00
Mark Andrews
052e7083ac
correct bind9.xsl.h dependancy
2009-11-05 02:59:04 +00:00
Evan Hunt
9a050780dc
2750. [bug] dig: assertion failure could occur when a server
...
didn't have an address. [RT #20579 ]
2009-11-05 01:57:49 +00:00
Mark Andrews
0a30185f80
2748. [func] Identify bad answers from GTLD servers and treat them
...
as referrals. [RT #18884 ]
2009-11-04 02:15:30 +00:00
Automatic Updater
64affc54f9
regen
2009-11-03 21:59:04 +00:00
Evan Hunt
f80b665135
fix typo: s/pcks11/pkcs11/
2009-11-03 21:44:46 +00:00