Commit Graph
6606 Commits
Author SHA1 Message Date
Mark Andrews abe5cf42b3 4649. [bug] The wrong zone was logged when a catalog zone is added.
[RT #45520]
2017-07-10 10:36:56 +10:00
Tinderbox User 7c655c5b24 update copyright notice / whitespace 2017-07-09 23:45:34 +00:00
Mark Andrews 1e9b39fe26 4648. [bug] "rndc reconfig" on a slave no longer causes all member
zones of configured catalog zones to be removed from
                        configuration. [RT #45310]
2017-07-10 09:06:13 +10:00
Tinderbox User 63582913c9 update copyright notice / whitespace 2017-07-07 23:45:38 +00:00
Mark Andrews 00a235c8e6 add #include <isc/print.h> 2017-07-08 00:47:59 +10:00
Mark Andrews 58f0fb325b 4647. [bug] Change 4643 broke verification of TSIG signed TCP
message sequences where not all the messages contain
                        TSIG records.  These may be used in AXFR and IXFR
                        responses.  [RT #45509]
2017-07-07 23:19:05 +10:00
Tinderbox User 67fa096a59 update copyright notice / whitespace 2017-06-30 23:45:35 +00:00
Evan Hunt b05b3fab3c [master] fix RSA parsing when md5 disabled
4645.	[bug]		Fix PKCS#11 RSA parsing when MD5 is disabled.
			[RT #45300]
2017-06-29 15:53:35 -07:00
Evan Hunt b2018b7cff [master] complete change #4643 2017-06-28 09:11:49 -07:00
Tinderbox User b6a4f7937e update copyright notice / whitespace 2017-06-27 23:45:38 +00:00
Evan Hunt 2fe77b611a [master] fix API ranges (170-179 was used for two branches) 2017-06-27 12:18:33 -07:00
Evan Hunt 581c1526ab [master] address TSIG bypass/forgery vulnerabilities
4643.	[security]	An error in TSIG handling could permit unauthorized
			zone transfers or zone updates. (CVE-2017-3142)
			(CVE-2017-3143) [RT #45383]
2017-06-27 11:39:19 -07:00
Evan Hunt 0d90835d2a [master] enhanced rfc 5011 logging
4642.	[cleanup]	Add more logging of RFC 5011 events affecting the
			status of managed keys: newly observed keys,
			deletion of revoked keys, etc. [RT #45354]
2017-06-27 10:49:43 -07:00
Tinderbox User f62eb5f112 update copyright notice / whitespace 2017-06-20 23:45:25 +00:00
Mark Andrews da0df9367d fix attribute name in DNS_NAME_INITABSOLUTE [RT #45409] 2017-06-20 12:37:58 +10:00
Evan Hunt bf05e66bb3 [master] prevent reload failure due to LMDB database perms
4638.	[bug]		Reloading or reconfiguring named could fail on
			some platforms when LMDB was in use. [RT #45203]
2017-06-13 10:15:34 -07:00
Tinderbox User 8bd6a7a1a3 update copyright notice / whitespace 2017-06-02 23:45:20 +00:00
Mark Andrews 9c179a5607 4633. [maint] Updated AAAA (2001:500:200::b) for B.ROOT-SERVERS.NET. 2017-06-02 11:46:38 +10:00
Tinderbox User bb01fced12 update copyright notice / whitespace 2017-05-30 23:45:32 +00:00
Mark Andrews ae903759c2 4530. [bug] "dyndb" is dependent on dlopen existing / being
enabled. [RT #45291]
2017-05-30 11:31:34 +10:00
Mark Andrews e51d62ecae 4629. [bug] dns_client_startupdate could not be called with a
running client. [RT #45277]
2017-05-30 09:47:41 +10:00
Tinderbox User dde6dc06b0 update copyright notice / whitespace 2017-05-11 23:45:33 +00:00
Mark Andrews 1611ceb8b2 4622. [bug] Remove unnecessary escaping of semicolon in CAA and
URI records. [RT #45216]
2017-05-11 10:54:52 +10:00
Tinderbox User 6c5c871053 update copyright notice / whitespace 2017-05-10 23:45:32 +00:00
Mark Andrews 2fb1a0bdef 4621. [port] Force alignment of oid arrays to silence loader
warnings. [RT #45131]
2017-05-11 09:24:36 +10:00
Mark Andrews d242bf393c 4618. [bug] Check isc_mem_strdup results in dns_view_setnewzones.
Add logging for lmdb call failures. [RT #45204]
2017-05-10 10:50:42 +10:00
Evan Hunt 9612549071 [master] change index to idx to avoid shadowed-variable warning 2017-05-04 09:34:10 -07:00
Evan Hunt 8b8c2650b8 [master] change 'index' to avoid shadowed variable warning 2017-05-03 12:36:54 -07:00
Tinderbox User b168f3f805 update copyright notice / whitespace 2017-05-02 23:45:36 +00:00
Mark Andrews 33e94f501f 4615. [bug] AD could be set on truncated answer with no records
present in the answer and authority sections.
                        [RT #45140]
2017-05-03 07:51:41 +10:00
Evan Hunt d39ab7440e [master] automatically tune max-journal-size
4613.	[func]		By default, the maximum size of a zone journal file
			is now twice the size of the zone's contents (there
			is little benefit to a journal larger than this).
			This can be overridden by setting "max-journal-size"
			to "unlimited" or to an explicit value up to 2G.
			Thanks to Tony Finch. [RT #38324]
2017-05-02 13:23:08 -07:00
Evan Hunt 4c97cb13bd [master] fix win32 build errors 2017-05-02 10:58:41 -07:00
Mark Andrews d1554926d0 silence 'may be used uninitialized' warning. [RT #45139] 2017-04-28 11:01:23 +10:00
Mark Andrews 2e65a1905b add mark_stale_header and rbtdb_zero_header defines 2017-04-27 12:47:08 +10:00
Mark Andrews cc3ebbfd91 silence unused-parameter warning 2017-04-27 09:48:29 +10:00
Mukund Sivaraman 241b49e611 Set a LMDB mapsize and also provide a config option to control it (#44954) 2017-04-26 23:51:26 +05:30
Mark Andrews 8296b23426 add dns_view_getnewzonedir, dns_view_setnewzonedir 2017-04-24 17:26:47 +10:00
Evan Hunt 2dfb992349 [master] new-zones-directory option
4610.	[func]		The "new-zones-directory" option specifies the
			location of NZF or NZD files for storing
			configuration of zones added by "rndc addzone".
			Thanks to Petr Menšík. [RT #44853]
2017-04-23 23:16:53 -07:00
Evan Hunt 67e1f8fa4e [master] allow parralel make
4609.	[cleanup]	Rearrange makefiles to enable parallel execution
			(i.e. "make -j"). [RT #45078]
2017-04-23 23:04:25 -07:00
Evan Hunt 6ce8a05f6c [master] update copyrights that had been missed recently 2017-04-23 17:06:00 -07:00
Evan Hunt 5490188e22 [master] add allocate_version64 definition 2017-04-22 23:16:23 -07:00
Tinderbox User 1f6505a424 update copyright notice / whitespace 2017-04-22 23:45:41 +00:00
Mukund Sivaraman 03be5a6b4e Improve performance for delegation heavy answers and also general query performance (#44029) 2017-04-22 09:22:44 +05:30
Evan Hunt 4c31eda5e1 [master] openssl backward compatibility fix
4604.	[bug]		Don't use ERR_load_crypto_strings() when building
			with OpenSSL 1.1.0. [RT #45117]
2017-04-21 18:56:00 -07:00
Mukund Sivaraman 239e9dc81c Reject incorrect RSA key lengths during key generation and and sign/verify context creation (#45043) 2017-04-21 17:31:59 +05:30
Mukund Sivaraman f23c10f925 Adjust RPZ trigger counts only when the entry being deleted exists (#43386) 2017-04-21 17:06:22 +05:30
Mukund Sivaraman 4176d278e2 Fix inconsistencies in inline signing time comparisons (#42112) 2017-04-21 16:43:58 +05:30
Mukund Sivaraman 5d01eab088 Ignore SHA-1 DS digest type when SHA-384 DS digest type is present (#45017) 2017-04-21 16:19:38 +05:30
Evan Hunt 019132b70c [master] fix dispatch.c shutdown race
4952.	[bug]		A race condition on shutdown could trigger an
			assertion failure in dispatch.c. [RT #43822]
2017-04-20 17:41:37 -07:00
Tinderbox User 3b443e87a0 update copyright notice / whitespace 2017-04-20 23:45:39 +00:00