Andreas Gustafsson
aa5940281a
When handling the response to an ANY query in a secure zone, deal with
...
the multiple answer RRsets by validating each one separately. Also,
eliminated the "done" variable in answer_response() because in the
rare situations where it got set to ISC_TRUE, it caused the function
to return prematurely by exiting a loop with a result of ISC_R_SUCCESS
and hitting a "if (result != ISC_R_NOMORE) return (result);" test
immediately following following the loop.
This should fix [RT #109 ], "ANY query in secure zone crashes server".
2000-07-19 23:19:05 +00:00
Andreas Gustafsson
c7d445ce7f
edited
2000-07-19 20:34:40 +00:00
Andreas Gustafsson
b0e67b3020
removed unnecessary call to isc_socket_cancel()
2000-07-19 20:34:14 +00:00
Andreas Gustafsson
8b2d2acbff
in the multi-stage positive validation test, allow the
...
recursive server to omit the authority section
2000-07-19 19:54:50 +00:00
Michael Sawyer
3caa2d8362
Probably no need to call srandom() if we never call random().
2000-07-19 18:24:40 +00:00
Michael Sawyer
68f0d29d61
Fix a minor race condition in SIGINT handling
...
Allow dig to used name key files
Allow SIGINT in nslookup
2000-07-19 17:52:27 +00:00
Brian Wellington
70c2802fd7
In query_addbestns, check that both the rdataset and sigrdataset are not
...
pending before adding them.
2000-07-18 22:24:45 +00:00
Michael Sawyer
5e804988e9
Add comments to source code
2000-07-18 18:51:40 +00:00
Andreas Gustafsson
0ade7651fc
hint zones do go in views; match_clients -> match-clients
2000-07-18 18:16:19 +00:00
Brian Wellington
209ec709f3
Use the isc hmac library instead of a separate implementation (not that
...
the separate implementation was especially complicated). dst hmac-md5 should
really go away at some point.
2000-07-18 18:15:27 +00:00
Brian Wellington
663841abe0
338. [bug] lwresd logged to syslog as named, not lwresd.
2000-07-18 17:50:02 +00:00
Andreas Gustafsson
e54e6744d6
do two queries; added comments
2000-07-18 17:13:40 +00:00
James Brister
4ca8537286
Removed some debugging cruft.
...
Fixed handling of octal/hexadecimal numbers on input.
2000-07-18 13:19:27 +00:00
Michael Sawyer
aa6054ec74
Clean up type and class code. (No more ugly istype() and isclass() functions)
...
Minor changes to timeout handling code.
Don't preload batch file.
2000-07-18 01:28:20 +00:00
Brian Wellington
9df7d74e42
Use isc_base64_decodestring() instead of an explicit lexer.
2000-07-18 01:14:17 +00:00
Brian Wellington
2b8f0e9fac
Don't allocate and use a tsig keyring, since it's no longer needed.
2000-07-18 00:47:00 +00:00
Brian Wellington
49c8a96fba
Don't require that tsig keys must be on a keyring. Also some other cleanup.
2000-07-18 00:46:03 +00:00
Brian Wellington
7a184cd4e5
don't copy a name structure, copy a pointer.
2000-07-18 00:44:52 +00:00
Brian Wellington
f6579931b3
Added calls to isc_log_wouldlog() in additional logging functions.
2000-07-17 23:25:35 +00:00
Andreas Gustafsson
3668b37b8b
cleaner, but more invasive, fix to 335.
2000-07-17 23:19:14 +00:00
Andreas Gustafsson
c49e3222b0
337. [bug] dig did not recognize nsap-ptr as an RR type
...
on the command line.
2000-07-17 19:44:50 +00:00
Andreas Gustafsson
bf68c5151b
336. [bug] "dig -f" used 64 k of memory for each line in
...
the file. It now uses much less, though still
proportionally to the file size.
2000-07-17 19:31:23 +00:00
Brian Wellington
178f73169a
335. [bug] named would occasionally attempt recursion when
...
it was disallowed or undesired.
2000-07-17 18:43:32 +00:00
Andreas Gustafsson
d987e0d8e8
reviewed and edited; removed lwres intro material
...
that is better covered in lwres(3)
2000-07-17 17:49:25 +00:00
Brian Wellington
bd2a38d6af
Use isc_base64_decodestring() instead of explicitly creating a lexer.
2000-07-17 17:42:54 +00:00
Brian Wellington
9c4cba349f
334. [func] Added hmac-md5 to libisc.
2000-07-17 17:33:39 +00:00
Andreas Gustafsson
0e65062acb
strengthened the check added in the previous change:
...
the new query domain must not only be a non-child of the query name,
it must be a parent of the query name (or equal to the query name)
2000-07-16 18:26:18 +00:00
Andreas Gustafsson
92103a4e2c
typo
2000-07-15 01:11:37 +00:00
Andreas Gustafsson
64024eaa4d
333. [bug] The resolver incorrectly accepted referrals to
...
subdomains of the query domain, causing an
assertion failure.
2000-07-15 01:02:25 +00:00
Andreas Gustafsson
5fff4f8a54
typo
2000-07-15 00:37:23 +00:00
Andreas Gustafsson
f427699c6a
fixed prerequisite test
2000-07-15 00:22:08 +00:00
Andreas Gustafsson
f2c814353b
added resolver/ test directory, with a single regression
...
test for the INSIST(!external) bug
2000-07-14 23:38:14 +00:00
Andreas Gustafsson
1a92f5c182
removed dead code
2000-07-14 23:16:45 +00:00
Brian Wellington
0e71d03672
Check for DNS_R_NAMETOOLONG when testing names that are too long.
2000-07-14 22:21:14 +00:00
Michael Sawyer
4b7d316065
A few bug fixes.
2000-07-14 21:33:03 +00:00
Andreas Gustafsson
db94555582
updated drafts
2000-07-14 20:21:26 +00:00
Michael Sawyer
925a734426
Handle SIGINT properly during batch mode.
2000-07-14 20:14:36 +00:00
David Lawrence
891a1bead8
Use new function dns_name_reset() to make a name have no data, instead
...
of dns_name_concatenate(NULL, NULL, name, NULL).
Define DNS_NAME_USELINE to get macroized name functions. Removed
older FAST_COUNTLABELS and FAST_ISABSOLUTE to use standard name
interface, which are covered by DNS_NAME_USEINLINE.
2000-07-14 19:17:39 +00:00
David Lawrence
da527e4ff6
332. [func] New function dns_name_reset().
2000-07-14 19:12:54 +00:00
Michael Sawyer
8cd54a7461
Lots of changes to the shutdown code. Get rid of the annoying "just exit"
...
method of shutting down.
Known bug: SIGINT while doing batch mode causes assertion.
2000-07-14 17:57:27 +00:00
Andreas Gustafsson
16836f6ab6
9.0.0b5 was built from the release branch, not the mainline
2000-07-14 17:13:49 +00:00
Andreas Gustafsson
074ae7bf09
RT #169 : note that logging categories have changed from BIND 8
2000-07-14 17:11:07 +00:00
Brian Wellington
da892e9733
Typo in comment - isc_time_microdiff returns microseconds, not milliseconds.
2000-07-14 16:59:32 +00:00
Michael Sawyer
e715e01178
More code duplication removal and general cleanup
...
Slight change in +nssearch output formatting
2000-07-14 16:35:30 +00:00
David Lawrence
1867b6276e
char secret[], for decoding the base64 string, should not have been const
2000-07-14 14:57:24 +00:00
Mark Andrews
8d51d9e67e
331. [bug] Only log "recursion denied" if RD is set. (RT #178 )
2000-07-14 02:26:22 +00:00
Andreas Gustafsson
10f4e9668a
the INSIST condition of 1.145 was too strong, weakened it;
...
dded another INSIST to help track down the INSIST(!external) crash
2000-07-14 00:37:27 +00:00
Andreas Gustafsson
55da37e18f
removed dead code
2000-07-14 00:33:09 +00:00
Brian Wellington
5b4397d387
Updated to reflect current status of insecurity proofs on insecure and
...
privately secured zones.
2000-07-14 00:03:54 +00:00
Brian Wellington
6bc1a64561
If a positive validation fails and it looks like the reason is that there
...
are no material DNSSEC signatures, try an insecurity proof.
2000-07-13 23:52:04 +00:00