ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
19,187 Commits 589 Branches 805 Tags
abfdfd1def68279802c48bbf875b02fa2bc332eb
Commit Graph
688 Commits
Author SHA1 Message Date
Mark Andrews 2fbc6a0f23 add copyright 2009-12-03 04:53:09 +00:00
Automatic Updater 521de9e5dd update copyright notice 2009-11-25 23:46:52 +00:00
Mark Andrews 29b3b31c0a adjust dnssec-keygen command line to that supported before 9.7 2009-11-25 20:56:08 +00:00
Mark Andrews 6e849b28b0 fix genrandom location 2009-11-25 13:38:53 +00:00
Mark Andrews b4bd8d0662 772. [security] When validating, track whether pending data was from 
the additional section or not and only return it if
                        validates as secure. [RT #20438]
 2009-11-25 04:50:25 +00:00
cvs2git 0e3b4ffe86 This commit was manufactured by cvs2git to create branch 'v9_4'. 2009-11-18 23:48:08 +00:00
Automatic Updater fe2b9bf570 update copyright notice 2009-11-18 23:48:07 +00:00
Mark Andrews a39a5f4d81 2772. [security] When validating, track whether pending data was from 
the additional section or not and only return it if
                        validates as secure. [RT #20438]
 2009-11-17 23:55:18 +00:00
Mark Andrews 0a30185f80 2748. [func] Identify bad answers from GTLD servers and treat them 
as referrals. [RT #18884]
 2009-11-04 02:15:30 +00:00
Mark Andrews c6d2578fd6 2741. [func] Allow the dnssec-keygen progress messages to be 
suppressed (dnssec-keygen -q).  Automatically
                        suppress the progress messages when stdin is not
                        a tty. [RT #20474]
 2009-10-28 00:27:10 +00:00
Automatic Updater 990dca4605 update copyright notice 2009-10-27 23:47:45 +00:00
Mark Andrews e09cdbac08 2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system 
test. [RT #20453]
 2009-10-27 22:25:37 +00:00
Evan Hunt 72cfcb48a7 cleanup ddns.key after nsupdate test 2009-10-27 05:57:06 +00:00
Evan Hunt 0ce9fba8f0 cleanup DLV test 2009-10-27 05:49:50 +00:00
Evan Hunt fb596cc9af 2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3 
chain when re-signing a previously-signed zone.
			Use -u to modify NSEC3 parameters or switch
			between NSEC and NSEC3. [RT #20304]
 2009-09-25 06:47:50 +00:00
Evan Hunt 30a60d2aff On some slower systems the startup is delayed and this causes an 
apparent transfer failure on the initial calls to dig.  Adding a test
here to make sure the zones are fully loaded before attempting to query
them.
 2009-09-04 17:14:58 +00:00
Automatic Updater d7201de09b update copyright notice 2009-09-02 23:48:03 +00:00
Tatuya JINMEI 神明達哉 307d208450 2660. [func] Add a new set of DNS libraries for non-BIND9 
applications.  See README.libdns. [RT #19369]
 2009-09-01 00:22:28 +00:00
Evan Hunt 4103d428a9 use genrandom to produce random data for input to ddns-confgen 2009-07-30 15:11:41 +00:00
Automatic Updater 0282f038eb update copyright notice 2009-07-29 23:47:43 +00:00
Evan Hunt 9069215eac 2641. [bug] Fixed an error in parsing update-policy syntax, 
added a regression test to check it. [RT #20007]
 2009-07-29 17:52:00 +00:00
Automatic Updater 26d8ffe715 update copyright notice 2009-07-19 23:47:55 +00:00
Evan Hunt 553ead32ff 2636. [func] Simplify zone signing and key maintenance with the 
dnssec-* tools.  Major changes:
			- all dnssec-* tools now take a -K option to
			  specify a directory in which key files will be
			  stored
			- DNSSEC can now store metadata indicating when
			  they are scheduled to be published, acttivated,
			  revoked or removed; these values can be set by
			  dnssec-keygen or overwritten by the new
			  dnssec-settime command
			- dnssec-signzone -S (for "smart") option reads key
			  metadata and uses it to determine automatically
			  which keys to publish to the zone, use for
			  signing, revoke, or remove from the zone
			[RT #19816]
 2009-07-19 04:18:05 +00:00
Automatic Updater 6815ef40df update copyright notice 2009-06-26 23:47:58 +00:00
Automatic Updater df030025e9 update copyright notice 2009-06-26 23:45:57 +00:00
Mark Andrews f2c74650cb 2617. [bug] ifconfig.sh failed to emit an error message when 
run from the wrong location. [RT #19375]
 2009-06-26 06:17:32 +00:00
Mark Andrews 870332fb6d 2617. [bug] ifconfig.sh failed to emit an error message when 
run from the wrong location. [RT #19375]
 2009-06-26 06:08:40 +00:00
Automatic Updater 39844d4710 update copyright notice 2009-06-04 02:56:47 +00:00
Mark Andrews 2534a73a59 2608. [func] Perform post signing verification checks in 
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
 2009-06-04 02:13:37 +00:00
Automatic Updater e6ada020f5 update copyright notice 2009-05-29 23:47:49 +00:00
Tatuya JINMEI 神明達哉 40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through 
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
 2009-05-29 22:22:37 +00:00
Automatic Updater 4f91bcae43 update copyright notice 2009-03-02 23:47:43 +00:00
Evan Hunt ca42dcc068 2569. [func] Move journalprint, nsec3hash, and genrandom 
commands from bin/tests into bin/tools;
                        "make install" will put them in $sbindir. [RT #19301]
 2009-03-02 03:54:10 +00:00
Mark Andrews e4c6491bbf 2565. [func] Add support for HIP record. Includes new functions 
dns_rdata_hip_first(), dns_rdata_hip_next()
                        and dns_rdata_hip_current().  [RT #19384]
 2009-02-26 06:09:19 +00:00
Automatic Updater 8b835581b4 update copyright notice 2009-01-30 23:47:50 +00:00
Automatic Updater 767bb6de26 update copyright notice 2009-01-30 23:46:14 +00:00
Mark Andrews 87248e6a6a 2539. [security] Update the interaction between recursion, allow-query, 
allow-query-cache and allow-recursion.  [RT #19198]
 2009-01-30 08:20:24 +00:00
Mark Andrews 14810640b7 2539. [security] Update the interaction between recursion, allow-query, 
allow-query-cache and allow-recursion.  [RT #19198]
 2009-01-30 08:19:00 +00:00
Automatic Updater 83b86f3936 update copyright notice 2009-01-21 23:47:27 +00:00
Mark Andrews 31b7a2fed6 2534. [func] Check NAPTR records regular expressions and 
replacement strings to ensure they are syntaxically
                        valid and consistant. [RT #18168]
 2009-01-21 05:37:55 +00:00
Evan Hunt 95de316a5d suppress an error message on solaris. [rt18253] 2008-10-09 21:27:52 +00:00
Automatic Updater 3398334b3a update copyright notice 2008-09-25 04:02:39 +00:00
Mark Andrews 6098d364b6 2448. [func] Add NSEC3 support. [RT #15452] 2008-09-24 02:46:23 +00:00
Tatuya JINMEI 神明達哉 c6ce0491ea 2392. [bug] remove 'grep -q' from acl test script, some platforms 
don't support it. [RT #18253]
 2008-07-26 19:01:23 +00:00
Francis Dupont 567ed9e42e Support Solaris 2.11 and over. [RT #18362] 2008-07-25 20:46:58 +00:00
Francis Dupont cbb8a1b7cb Support Solaris 2.11 and over. [RT #18362] 2008-07-25 20:40:07 +00:00
Evan Hunt 7ed4399c65 remove 'grep -q' from acl test script, some platforms don't 
support it. [rt18253]
 2008-07-19 00:02:14 +00:00
Mark Andrews 862015b91f cleanup 2008-07-17 01:15:34 +00:00
Automatic Updater 1dd754dcdf update copyright notice 2008-04-24 23:46:59 +00:00
Evan Hunt 66e50468dd Change rrsetorder test two ways: 
1) only test "fixed" ordering if it was compiled in
2) test whether "cyclic" ordering is cyclic, but don't
   rely on the initial state being predictable
[rt17977]
 2008-04-24 21:50:27 +00:00