ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
28,846 Commits 589 Branches 805 Tags
a9307de85e147f4756c75d15aa221d2262df7d67
Commit Graph
28846 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mark AndrewsandEvan Hunt a9307de85e denied axfr requests were not effective for writable DLZ zones 2019-02-20 19:44:38 -08:00
Evan Hunt 5e7f1a8d67 Merge 'keytag-memleak' into security-master 2019-02-20 19:44:37 -08:00
Evan Hunt 747035dcc5 fix test error 2019-02-20 19:44:37 -08:00
Mark AndrewsandEvan Hunt 9ae991751c add CHANGES and release note entries 2019-02-20 19:44:37 -08:00
Mark AndrewsandEvan Hunt fe4810f1f8 check that multiple KEY-TAG trust-anchor-telemetry options don't leak memory 2019-02-20 19:44:36 -08:00
Mark AndrewsandEvan Hunt 35025b6e88 silently ignore additional keytag options 2019-02-20 19:44:36 -08:00
Evan Hunt 6f1ac89c1a Merge 'managed-key-assert' into security-master 2019-02-20 19:44:35 -08:00
Evan Hunt 41a851861e Merge 'managed-key-assert' into security-master 2019-02-20 19:44:34 -08:00
Evan Hunt 3022633d79 use algorithm 255 for both unsupported keys 2019-02-20 19:44:34 -08:00
Matthijs MekkingandEvan Hunt e7c12bffbd CHANGES, notes 2019-02-20 19:44:33 -08:00
Matthijs MekkingandEvan Hunt f09352d20a Update keyfetch_done compute_tag check 
If in keyfetch_done the compute_tag fails (because for example the
algorithm is not supported), don't crash, but instead ignore the
key.
 2019-02-20 19:44:33 -08:00
Matthijs MekkingandEvan Hunt 38c2bdba0a Add tests for mkeys with unsupported algorithm 
These tests check if a key with an unsupported algorithm in
managed-keys is ignored and when seeing an algorithm rollover to
an unsupported algorithm, the new key will be ignored too.
 2019-02-20 19:44:33 -08:00
Matthijs MekkingandEvan Hunt 235a64a5a4 Don't free key in compute_tag in case of failure 
If `dns_dnssec_keyfromrdata` failed we don't need to call
`dst_key_free` because no `dstkey` was created.  Doing so
nevertheless will result in an assertion failure.

This can happen if the key uses an unsupported algorithm.
 2019-02-20 19:44:32 -08:00
Evan Hunt 91550e21cd Merge branch 'placeholder' into 'master' 
placeholder

See merge request isc-projects/bind9!1551
 2019-02-20 21:41:58 -05:00
Evan Hunt 5893689592 placeholder 2019-02-20 18:41:26 -08:00
Evan Hunt 3d1bb8038e Merge branch 'start-915' into 'master' 
9.15.0-dev

See merge request isc-projects/bind9!1550
 2019-02-20 21:23:51 -05:00
Evan Hunt 040c23e3d7 9.15.0-dev 2019-02-20 18:22:54 -08:00
Evan Hunt f4ade46f4a Merge branch '428-remove-contrib-sdb' into 'master' 
remove contrib/sdb

Closes #428

See merge request isc-projects/bind9!1501
 2019-02-19 20:47:55 -05:00
Evan Hunt bcc2fd679b CHANGES 2019-02-19 17:19:40 -08:00
Evan Hunt c79e2f12fe remove contrib/sdb 
removed the SDB databases in contrib/sdb as they hadn't been
maintained in some time, and were no longer able to link to named
without modification.  also:

- cleaned up contrib/README, which still referred to contrib
  subdirectores that were removed already, and linked to an obsolete URL.
- removed references to sdb in doc/misc/roadmap and doc/misc/sdb.
 2019-02-19 17:19:40 -08:00
Mark Andrews d27f41cb7f Merge branch '884-patches-to-review' into 'master' 
Correct errno to result translation

Closes #884

See merge request isc-projects/bind9!1519
 2019-02-19 18:11:42 -05:00
Mark Andrews a0c0d76029 add CHANGES 2019-02-20 09:44:56 +11:00
Mark Andrews 218ce34e7d correct errno to result translation 2019-02-20 09:43:16 +11:00
Mark Andrews fa79f4b899 Merge branch '836-building-fails-in-build-subdirectory-when-dnstap-is-enabled' into 'master' 
Resolve "Building fails in build subdirectory when dnstap is enabled"

Closes #836

See merge request isc-projects/bind9!1510
 2019-02-19 17:40:59 -05:00
Mark Andrews 3a21fdf884 add CHANGES 2019-02-20 09:29:07 +11:00
Mark Andrews c0d4ff5796 teach proto_c to look in the source directory for out of tree builds 2019-02-20 09:27:00 +11:00
Mark Andrews d76e172480 Merge branch '877-clang-scan-build-redundant-assignments-detected' into 'master' 
Remove redundant assignments

Closes #877

See merge request isc-projects/bind9!1513
 2019-02-18 18:01:56 -05:00
Mark Andrews f475dc75b1 remove redundant assignment 2019-02-18 17:40:56 -05:00
Mark Andrews 7b60f6832e silence clang 2019-02-18 17:40:56 -05:00
Mark Andrews 9a9dc4072f declarations before assertions 2019-02-18 17:40:56 -05:00
Mark Andrews 70fab477b1 don't overwrite result 2019-02-18 17:40:56 -05:00
Mark Andrews 63c03cdb2d remove seen_dname 2019-02-18 17:40:56 -05:00
Mark Andrews a92d281e10 Merge branch '877-clang-scan-build-redundant-assignments-detected-3' into 'master' 
Uninitialised reads in dns_tsig_sign after change 5148.

See merge request isc-projects/bind9!1528
 2019-02-18 17:39:38 -05:00
Mark Andrews 4938f97c97 record when querytsig is valid 2019-02-18 17:39:08 -05:00
Mark Andrews 0de6a3835f Merge branch '877-clang-scan-build-redundant-assignments-detected-2' into 'master' 
decode_NegTokenInit failed to cleanup allocated memory on error.

See merge request isc-projects/bind9!1527
 2019-02-18 17:34:50 -05:00
Mark Andrews 7114d16098 fix memory leak 2019-02-19 09:17:03 +11:00
Mark Andrews d2ca9e79e3 Merge branch '877-clang-scan-build-redundant-assignments-detected-2' into 'master' 
Cleanup no longer necessary assignments post refactoring in socket.c

See merge request isc-projects/bind9!1526
 2019-02-18 16:14:56 -05:00
Mark Andrews f87b88e520 remove dead assignments 2019-02-19 08:12:09 +11:00
Mark Andrews 26c0eaf6e0 Merge branch '877-clang-scan-build-redundant-assignments-detected-2' into 'master' 
Add missing asserts to socket_test.c and dnstest.c

See merge request isc-projects/bind9!1523
 2019-02-18 15:57:46 -05:00
Mark Andrews 76a1c1531a assert result is ISC_R_SUCCESS 2019-02-19 07:57:14 +11:00
Matthijs Mekking ee6a378fde Merge branch '513-matthijs-update-xfr-logs' into 'master' 
Update to !1427:  Make primary's transfer log more detailed

See merge request isc-projects/bind9!1511
 2019-02-18 06:33:15 -05:00
Matthijs Mekking 24507abee3 Update to !1427: Make primary's transfer log more detailed 2019-02-18 06:33:15 -05:00
Mark Andrews 7125d1484e Merge branch 'u/fanf2/dnssec-keymgr-man' into 'master' 
Improve dnssec-keymgr manual

See merge request isc-projects/bind9!1518
 2019-02-17 23:43:26 -05:00
Tony FinchandMark Andrews 7ee56e2abd Improve dnssec-keymgr manual 
Illustrate the syntax for the policy options, with semicolons.

Explicitly mention the "default" policy.

Fix a few typos and remove some redundant wording.
 2019-02-18 14:12:45 +11:00
Evan Hunt 4d4233f637 Merge branch '879-dnssec-checkds-help' into 'master' 
Correct path in dnssec-checkds help

Closes #879

See merge request isc-projects/bind9!1515
 2019-02-14 15:51:39 -05:00
Petr Menšík 7bd544e795 Correct path in dnssec-checkds help 2019-02-14 15:23:26 +01:00
Michał Kępień ef9b9035e3 Merge branch '873-do-not-check-sep-bit-for-mirror-zone-trust-anchors' into 'master' 
Do not check SEP bit for mirror zone trust anchors

Closes #873

See merge request isc-projects/bind9!1506
 2019-02-14 05:21:46 -05:00
Michał Kępień 2b19b8511a Add CHANGES entry 
5161.	[bug]		Do not require the SEP bit to be set for mirror zone
			trust anchors. [GL #873]
 2019-02-14 11:03:35 +01:00
Michał Kępień 72c201733c Do not check SEP bit for mirror zone trust anchors 
When a mirror zone is verified, the 'ignore_kskflag' argument passed to
dns_zoneverify_dnssec() is set to false.  This means that in order for
its verification to succeed, a mirror zone needs to have at least one
key with the SEP bit set configured as a trust anchor.  This brings no
security benefit and prevents zones signed only using keys without the
SEP bit set from being mirrored, so change the value of the
'ignore_kskflag' argument passed to dns_zoneverify_dnssec() to true.
 2019-02-14 11:03:35 +01:00
Michał Kępień 724663c165 Merge branch 'michal/improve-stability-of-mirror-zone-tests' into 'master' 
Improve stability of mirror zone system tests

See merge request isc-projects/bind9!1505
 2019-02-14 04:59:14 -05:00