ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
26,400 Commits 589 Branches 805 Tags
a1690b24bc7eaaba16aa7e13fd49887b0ac640e9
Commit Graph
26400 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Evan HuntandOndřej Surý a1690b24bc prepare 9.11.4rc1 2018-06-21 18:54:43 +02:00
Michał Kępień ddafea197c Merge branch '341-constify-dns_rdata_tostruct-v9_11' into 'v9_11' 
[v9_11] constify dns_rdata_tostruct

See merge request isc-projects/bind9!381
 2018-06-15 03:34:50 -04:00
Mark AndrewsandMichał Kępień 09776e3e54 Declare the 'rdata' argument for dns_rdata_tostruct() to be const 
(cherry picked from commit abb2fd1027)
 2018-06-15 08:52:41 +02:00
Ondřej Surý c9203e48e2 Merge branch '309-fix-default-recursion-v9_11' into 'v9_11' 
Resolve "Recursion improperly allowed by default"

See merge request isc-projects/bind9!374
 2018-06-14 08:54:16 -04:00
Evan HuntandOndřej Surý b330bcb8a1 add a regression test for default allow-recursion settings 2018-06-14 14:47:11 +02:00
Evan HuntandOndřej Surý 3d71785ef1 allow-recursion could incorrectly inherit from the default allow-query 2018-06-14 14:47:11 +02:00
Michał Kępień cbed2a4602 Merge branch '298-fix-dname-handling-in-dnssec-tools-v9_11' into 'v9_11' 
[v9_11] Fix DNAME handling in DNSSEC tools

See merge request isc-projects/bind9!364
 2018-06-13 07:29:24 -04:00
Michał Kępień 28b8ab8891 Add CHANGES entry 
4971.	[bug]		dnssec-signzone and dnssec-verify did not treat records
			below a DNAME as out-of-zone data. [GL #298]

(cherry picked from commit f9637ae0e5)
 2018-06-13 12:59:03 +02:00
Mark AndrewsandMichał Kępień 0c3ddaafb5 Pull out the saving of the zone cut into a separate function 
(cherry picked from commit 899e56068e)
 2018-06-13 12:58:57 +02:00
Michał Kępień 6d8a514ecb Treat records below a DNAME as out-of-zone data 
DNAME records indicate bottom of zone and thus no records below a DNAME
should be DNSSEC-signed or included in NSEC(3) chains.  Add a helper
function, has_dname(), for detecting DNAME records at a given node.
Prevent signing DNAME-obscured records.  Check that DNAME-obscured
records are not signed.

(cherry picked from commit ff7015a0f8)
 2018-06-13 12:58:27 +02:00
Michał Kępień e104d97cd2 Merge branch '284-unify-keyfile-to-configuration-conversions-in-system-tests-v9_11' into 'v9_11' 
[v9_11] Unify keyfile-to-configuration conversions in system tests

See merge request isc-projects/bind9!361
 2018-06-13 02:28:38 -04:00
Michał Kępień da430b5f36 Add helper variables in mkeys system test 
The keyfile and key ID for the original managed key do not change
throughout the mkeys system test.  Keep them in helper variables to
prevent calling "cat" multiple times and improve code readability.

(cherry picked from commit 2cad382552)
 2018-06-13 08:08:25 +02:00
Michał Kępień a23e9821d6 Replace duplicated code snippet with calls to helper functions 
Reduce code duplication by replacing a code snippet repeated throughout
system tests using "trusted-keys" and/or "managed-keys" configuration
sections with calls to keyfile_to_{managed,trusted}_keys() helper
functions.

(cherry picked from commit dce66f7635)
 2018-06-13 08:08:25 +02:00
Michał Kępień 36d6a6cc76 Add helper functions for converting keyfile data into configuration sections 
Add a set of helper functions for system test scripts which enable
converting key data from a set of keyfiles to either a "trusted-keys"
section or a "managed-keys" section suitable for including in a
resolver's configuration file.

(cherry picked from commit 21d3658bcb)
 2018-06-13 08:08:25 +02:00
Michał Kępień 644009a0ed Merge branch '269-refactor-zone-logging-functions-v9_11' into 'v9_11' 
[v9_11] Refactor zone logging functions

See merge request isc-projects/bind9!358
 2018-06-11 06:58:34 -04:00
Michał Kępień 07b98521f6 Add CHANGES entry 
4969.	[cleanup]	Refactor zone logging functions. [GL #269]

(cherry picked from commit c8de677eae)
 2018-06-11 12:50:25 +02:00
Michał Kępień 2c09f7a06c Reimplement all zone logging functions using dns_zone_logv() 
In order to decrease code duplication, express the logic contained in
all zone logging functions using dns_zone_logv() calls.

(cherry picked from commit 5c03cd339e)
 2018-06-11 12:50:25 +02:00
Michał Kępień 4fab6fec76 Add dns_zone_logv() 
Add a new libdns function, dns_zone_logv(), which takes a single va_list
argument rather than a variable number of arguments and can be used as a
base for implementing more specific zone logging functions.

(cherry picked from commit bb2dfb3f49)
 2018-06-11 12:50:25 +02:00
Evan Hunt c8d7f94e94 Merge branch 'fix-strtok' into 'v9_11' 2018-06-09 23:04:19 -07:00
Evan Hunt 5bf319c107 complete strtok fix 
(cherry picked from commit 74c3b9d3b2)
 2018-06-09 23:04:18 -07:00
Evan Hunt aafdc4c39e Merge branch 'fix-strtok' into 'v9_11' 2018-06-09 22:36:54 -07:00
Evan Hunt 2960bf1a9f use strtok() instead of strtok_r() in command line processing 
(cherry picked from commit 1734f1b3b9)
 2018-06-09 22:36:46 -07:00
Evan Hunt 0edeb2cb2f Merge branch '293-cleanup-radix' into 'v9_11' 2018-06-08 12:11:24 -07:00
Evan Hunt b75a2b9730 improve readability of radix code 
- use RADIX_V4, RADIX_V6, RADIX_V4_ECS, and RADIX_V6_ECS as array
  indices instead of 0 through 3.
- remove some unused macros

(cherry picked from commit f7f20b1202)
 2018-06-08 12:11:19 -07:00
Evan Hunt 8da265c210 Merge branch 'validate-glue' into v9_11 2018-06-08 11:51:16 -07:00
Evan Hunt 7a00ce2e77 ensure we try to validate glue records so RRSIG TTLs will be capped 2018-06-08 11:41:48 -07:00
Mark Andrews ae0692ff8f Merge branch '325-add-cfg_parse_buffer4-v9_11' into 'v9_11' 
Resolve "add cfg_parse_buffer4"

Closes #325

See merge request isc-projects/bind9!353
 2018-06-08 17:40:33 +10:00
Mark Andrews d1f9dcca00 add cfg_parse_buffer4 
(cherry picked from commit b313084af2)
 2018-06-08 17:40:32 +10:00
Mark Andrews 2f10df804b Merge branch '173-option-to-disable-responding-with-cookies-isc-support-12614-v9_11' into 'v9_11' 
Resolve "option to disable responding with cookies [ISC-Support #12614]"

See merge request isc-projects/bind9!154
 2018-06-08 17:30:45 +10:00
Mark Andrews ae0f6f2073 add CHANGES and release notes 
(cherry picked from commit 5f7a6232d6)
 2018-06-08 17:29:45 +10:00
Mukund SivaramanandMark Andrews ca24707d38 Update ARM documentation 
(cherry picked from commit b5265a8cfa)
 2018-06-08 17:29:45 +10:00
Mukund SivaramanandMark Andrews db12b1a9f9 Add system test 
(cherry picked from commit a5933fa2bb)
 2018-06-08 17:29:45 +10:00
Mukund SivaramanandMark Andrews 441de7dbe3 Add a answer-cookie named config option 
(cherry picked from commit 2930507357)
 2018-06-08 17:29:28 +10:00
Mark Andrews f5ae506b11 Merge branch '322-add-support-for-marking-options-as-deprecated-v9_11' into 'v9_11' 
Resolve "add support for marking options as deprecated."

Closes #322

See merge request isc-projects/bind9!351
 2018-06-08 15:56:02 +10:00
Mark Andrews 34bfd20348 Add support for marking a option as deprecated. 
(cherry picked from commit befff9452c)
 2018-06-08 15:56:01 +10:00
Witold Kręcicki 4f3526f85c Merge branch 'XX-dont-fetch-keys-when-fuzzing-v9_11' into 'v9_11' 
Don't fetch DNSKEY when fuzzing resolver

See merge request isc-projects/bind9!347
 2018-06-06 15:28:09 +02:00
Witold Kręcicki 9b17be187f Don't fetch DNSKEY when fuzzing resolver 
(cherry picked from commit cb3208aa43)
 2018-06-06 15:27:27 +02:00
Mark Andrews 8ca60f7099 Merge branch '240-multiple-rrsigs-on-some-records-in-signed-zone-even-though-only-one-key-is-ever-active-at-a-time-v9_12-v9_11' into 'v9_11' 
Resolve "Multiple RRSIGs on some records in signed zone even though only one key is ever active at a time"

Closes #240

See merge request isc-projects/bind9!231
 2018-06-06 17:22:11 +10:00
Mark Andrews 1c8aa28455 add CHANGES note 
(cherry picked from commit ba7a343156)
(cherry picked from commit 00f1956c9e)
 2018-06-06 17:21:29 +10:00
Mark Andrews 1710e5cfca add duplicate signature test 
(cherry picked from commit 0db5b087ed)
(cherry picked from commit 1783fa5aba)
 2018-06-06 17:21:29 +10:00
Mark Andrews dd05287a31 add support -T sigvalinsecs 
(cherry picked from commit 87a3dc8ab9)
(cherry picked from commit 69340b5ac5)
 2018-06-06 17:17:48 +10:00
Mark Andrews 298372d8d2 only sign with other keys when deleting a key if there are not already existing signature for the deleted algorithm 
(cherry picked from commit 0667bf7ae7)
(cherry picked from commit c1e342cedb)
 2018-06-06 17:10:01 +10:00
Mark Andrews 5ab633d541 Merge branch '316-move-named-t-processing-to-its-own-function-v9_11' into 'v9_11' 
Resolve "move named -T processing to its own function"

Closes #316

See merge request isc-projects/bind9!343
 2018-06-06 15:31:30 +10:00
Mark Andrews f10ad9c37c add CHANGES 
(cherry picked from commit ef7401e4a7)
 2018-06-06 15:31:22 +10:00
Mark Andrews deee1574da move -T parsing to its own function 
(cherry picked from commit b491ceeb50)
 2018-06-06 15:30:55 +10:00
Evan Hunt c123936d2a Merge branch '302-use-ip-for-ifconfig' into 'v9_11' 
Resolve "ifconfig.sh doesn't work on centos7"

Closes #302

See merge request isc-projects/bind9!330
 2018-06-05 21:46:12 -07:00
Evan Hunt 07004c58f5 CHANGES 
(cherry picked from commit 71f2335f5a)
(cherry picked from commit 7f16672ab8)
 2018-06-05 21:46:08 -07:00
Evan Hunt 81c2298665 use "ip" on linux, falling back to "ifconfig" when it isn't available 
(cherry picked from commit d7c5400798)
(cherry picked from commit 3e1a0c2b62)
 2018-06-05 21:46:08 -07:00
Evan Hunt 35f4aafb20 expand address range in ifconfig.sh to include more than one subnet 
(cherry picked from commit 41b29a436b)
(cherry picked from commit e4487b160c)
 2018-06-05 21:46:08 -07:00
Evan Hunt 48a45fb3ff Merge branch '310-check-changes-needs-to-be-called-for-v9_11' into 'v9_11' 
Resolve "check-changes needs to be called for v9_11"

See merge request isc-projects/bind9!337
 2018-06-04 22:21:16 -04:00