Commit Graph

350 Commits

Author SHA1 Message Date
Mark Andrews
d1ca4caece make DST_GSSAPI_INC a macro 2014-01-17 00:50:30 +11:00
Mark Andrews
e20788e121 update copyrights 2014-01-16 15:19:24 +11:00
Evan Hunt
ba751492fc [master] native PKCS#11 support
3705.	[func]		"configure --enable-native-pkcs11" enables BIND
			to use the PKCS#11 API for all cryptographic
			functions, so that it can drive a hardware service
			module directly without the need to use a modified
			OpenSSL as intermediary (so long as the HSM's vendor
			provides a complete-enough implementation of the
			PKCS#11 interface). This has been tested successfully
			with the Thales nShield HSM and with SoftHSMv2 from
			the OpenDNSSEC project. [RT #29031]
2014-01-14 15:40:56 -08:00
Tinderbox User
431a83fb29 update copyright notice 2014-01-09 23:46:35 +00:00
Evan Hunt
e851ea8260 [master] replace memcpy() with memmove().
3698.	[cleanup]	Replaced all uses of memcpy() with memmove().
			[RT #35120]
2014-01-08 16:39:05 -08:00
Mark Andrews
c3c8823fed 3681. [port] Update the Windows build system to support feature
selection and WIN64 builds.  This is a work in
                        progress. [RT #34160]
2013-12-04 12:47:23 +11:00
Mark Andrews
49ae04f6ee 3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
times.  [RT #35073]
2013-11-28 06:45:30 +11:00
Mark Andrews
1a4725bef2 3657. [port] Some readline clones don't accept NULL pointers when
calling add_history. [RT #34842]
2013-09-26 08:25:09 +10:00
Mark Andrews
d3c8ba219f 3552. [bug] Wrong getopt option string for 'nsupdate -r'.
[RT# 33280]
2013-04-19 23:46:41 +10:00
Tinderbox User
573d78f3d5 update copyright notice 2013-02-21 23:45:56 +00:00
Evan Hunt
2425d8bb7c [master] truncate logged rdata if too long
3490.	[bug]		When logging RDATA during update, truncate if it's
                        too long. [RT #32365]

cherry picked from:
        commit 16ddb566e5a5b57bf925adef2b5543dddc1de49b
        commit cd97e0c23b09f38aac49aabab66ee13c68b7a3f3
        commit d087fa982649c081d58c5bb16e63da3428e2b89d
        commit d0795bdffef57612dd7654ffd09c9f4216eee2c8
2013-02-20 13:54:52 -08:00
Evan Hunt
ef37222aaf [master] fixed readline link error, ubuntu 13.04 2013-02-15 10:08:19 -08:00
Tinderbox User
5c6b95ba1b update copyright notice 2013-01-10 23:46:00 +00:00
Mark Andrews
dab4aac006 3460. [bug] Only link against readline where needed. [RT #29810] 2013-01-10 17:34:28 +11:00
Mark Andrews
d1f43359e4 3379. [bug] nsupdate terminated unexpectedly in interactive mode
if built with readline support. [RT #29550]
2012-08-22 13:38:51 +10:00
Tinderbox User
a3128c1995 update copyright notice 2012-06-29 23:45:57 +00:00
Mark Andrews
bf8267aa45 reverse bad copyright update 2012-06-29 11:39:47 +10:00
Tinderbox User
247bf37860 update copyright notice 2012-06-29 01:22:18 +00:00
Tinderbox User
5082a49b9c regen master 2012-03-12 01:04:10 +00:00
Tinderbox User
5fa46bc916 update copyright notice 2012-03-10 23:45:53 +00:00
Mark Andrews
74777c4523 non specific $Id$ 2012-03-07 13:10:50 +11:00
Tinderbox User
ea94d37012 regen master 2012-03-07 01:41:11 +00:00
Tinderbox User
9a63fb8455 fix docbook error 2012-03-07 00:07:24 +00:00
Evan Hunt
2dc2a6b6e9 grammar fixes 2012-03-04 22:19:12 -08:00
Mark Andrews
f5b7359c57 Allow nsupdate to report which types it knows the internal structure to. 2012-03-05 11:38:07 +11:00
Evan Hunt
e41d5a00bc added gitignore, removed cvsignore 2012-03-03 23:10:05 -08:00
Automatic Updater
ce8ac1bc98 regen HEAD 2011-12-17 01:14:51 +00:00
Automatic Updater
a9f68291c8 update copyright notice 2011-12-16 23:46:20 +00:00
Evan Hunt
1d32b1df37 3244. [func] Added readline support to nslookup and nsupdate.
Also simplified nsupdate syntax to make "update"
			and "prereq" optional. [RT #24659]
2011-12-16 23:01:17 +00:00
Automatic Updater
b98da83857 regen HEAD 2011-12-16 01:15:05 +00:00
Mark Andrews
ea55a4e469 -l 2011-12-16 00:10:05 +00:00
Evan Hunt
7f2a245b96 3196. [bug] nsupdate: return nonzero exit code when target zone
doesn't exist. [RT #25783]
2011-11-03 04:29:28 +00:00
Evan Hunt
47e70d820e 3118. [bug] nsupdate could dump core on shutdown when using
SIG(0) keys. [RT #24604]
2011-05-23 22:25:32 +00:00
Evan Hunt
0994d3a21b 3087. [bug] DDNS updates using SIG(0) with update-policy match
type "external" could cause a crash. [RT #23735]
2011-03-21 19:54:03 +00:00
Mark Andrews
0874abad14 3069. [cleanup] Silence warnings messages from clang static analysis.
[RT #20256]
2011-03-11 06:11:27 +00:00
Mark Andrews
433e06a25c 3006. [func] Allow dynamically generated TSIG keys to be preserved
across restarts of named.  Initially this is for
                        TSIG keys generated using GSSAPI. [RT #22639]
2011-01-10 05:32:04 +00:00
Automatic Updater
0e0be796a7 update copyright notice 2011-01-08 23:47:01 +00:00
Evan Hunt
b156001ec1 Oops, omitted some commits from change #3005. 2011-01-08 01:26:01 +00:00
Mark Andrews
c2f37a77cc #include ISC_PLATFORM_KRB5HEADER [RT #22798] 2010-12-26 23:24:18 +00:00
Automatic Updater
6764a1403a update copyright notice 2010-12-24 23:47:05 +00:00
Evan Hunt
d9ad0a55bb 3000. [bug] More TKEY/GSS fixes:
- nsupdate can now get the default realm from
			   the user's Kerberos principal
			 - corrected gsstest compilation flags
			 - improved documentation
			 - fixed some NULL dereferences
			[RT #22795]
2010-12-24 02:20:47 +00:00
Evan Hunt
71bd858d8e 2989. [func] Added support for writable DLZ zones. (Contributed
by Andrew Tridgell of the Samba project.) [RT #22629]

2988.	[experimental]	Added a "dlopen" DLZ driver, allowing the creation
			of external DLZ drivers that can be loaded as
			shared objects at runtime rather than linked with
			named.  Currently this is switched on via a
			compile-time option, "configure --with-dlz-dlopen".
			Note: the syntax for configuring DLZ zones
			is likely to be refined in future releases.
			(Contributed by Andrew Tridgell of the Samba
			project.) [RT #22629]

2987.	[func]		Improve ease of configuring TKEY/GSS updates by
			adding a "tkey-gssapi-keytab" option.  If set,
			updates will be allowed with any key matching
			a principal in the specified keytab file.
			"tkey-gssapi-credential" is no longer required
			and is expected to be deprecated.  (Contributed
			by Andrew Tridgell of the Samba project.)
			[RT #22629]
2010-12-18 01:56:23 +00:00
Automatic Updater
fd6a9d688c update copyright notice 2010-12-09 04:31:57 +00:00
Mark Andrews
9f9b7f0e8d 2982. [bug] Reference count dst keys. dst_key_attach() can be used
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
2010-12-09 00:54:34 +00:00
Mark Andrews
82f0630bae 2977. [bug] 'nsupdate -l' report if the session key is missing.
[RT #21670]
2010-12-03 00:37:33 +00:00
Mark Andrews
c87f15dac8 2976. [bug] named die on exit after negotiating a GSS-TSIG key. [RT #3415] 2010-12-02 23:22:42 +00:00
Automatic Updater
548317f929 update copyright notice 2010-08-10 23:48:19 +00:00
Mark Andrews
4b6cb8d09e 2935. [bug] nsupdate: improve 'file not found' error message.
[RT #21871]
2010-08-10 09:51:47 +00:00
Automatic Updater
7c6b9b2638 regen HEAD 2010-07-10 01:14:20 +00:00
Automatic Updater
1b892cf691 update copyright notice 2010-07-09 23:46:51 +00:00