ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
35,631 Commits 589 Branches 805 Tags
ae9d795a133e61adc49fbc171f00a57e2c29ddf0
Commit Graph

35631 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michał Kępień
ae9d795a13 Set up release notes for BIND 9.16.49 2024-02-11 11:10:14 +01:00
Michał Kępień
8e4896ffa4 Update BIND version to 9.16.49-dev 2024-02-11 11:10:14 +01:00
Tom Krizek
5b7a0f02c1 Merge branch '4562-use-source-port-for-ditch-pl-9.16' into 'bind-9.16' 
[9.16] Use a single local port for ditch.pl

See merge request isc-projects/bind9!8708
 2024-02-08 13:41:18 +00:00
Tom Krizek
be735330bb Use a single local port for ditch.pl 
The ditch.pl script is used to generate burst traffic without waiting
for the responses. When running other tests in parallel, this can result
in a ephemeral port clash, since the ditch.pl process closes the socket
immediately. In rare occasions when the message ID also clashes with
other tests' queries, it might result in an UnexpectedSource error from
dnspython.

Use a dedicated port EXTRAPORT8 which is reserved for each test as a
source port for the burst traffic.

(cherry picked from commit 339fa5690a)
 2024-02-08 13:46:52 +01:00
Ondřej Surý
ac12ddb6e1 Merge branch 'ondrej/various-rbtdb-fixes-9.16' into 'bind-9.16' 
[9.16] Fix missing RRSIG for CNAME with different slabheader order

See merge request isc-projects/bind9!8705
 2024-02-08 09:11:09 +00:00
Ondřej Surý
9dea042fb8 Add CHANGES note for [GL !8675] 
(cherry picked from commit 6e81717cff)
 2024-02-08 09:43:15 +01:00
Ondřej Surý
f654ed7a05 Optimize cname_and_other_data to stop as earliest as possible 
Stop the cname_and_other_data processing if we already know that the
result is true.  Also, we know that CNAME will be placed in the priority
headers, so we can stop looking for CNAME if we haven't found CNAME and
we are past the priority headers.

(cherry picked from commit 3f774c2a8a)
 2024-02-08 09:42:52 +01:00
Ondřej Surý
8ef414a7f3 Optimize the slabheader placement for certain RRTypes 
Mark the infrastructure RRTypes as "priority" types and place them at
the beginning of the rdataslab header data graph.  The non-priority
types either go right after the priority types (if any).

(cherry picked from commit 3ac482be7f)
 2024-02-08 09:42:48 +01:00
Ondřej Surý
51d6488e82 Fix missing RRSIG for CNAME with different slabheader order 
The cachedb was missing piece of code (already found in zonedb) that
would make lookups in the slabheaders to miss the RRSIGs for CNAME if
the order of CNAME and RRSIG(CNAME) was reversed in the node->data.

(cherry picked from commit 5070c7f5c7)
 2024-02-08 09:42:42 +01:00
Mark Andrews
6b8400d2db Merge branch '4561-shutdown-test-doesn-t-log-everything-to-named-run-bind-9.16' into 'bind-9.16' 
[9.16] Resolve "Shutdown test doesn't log everything to named.run"

See merge request isc-projects/bind9!8702
 2024-02-07 04:00:23 +00:00
Mark Andrews
aa8f3363d4 Capture the resolver's startup and shutdown logging 
Also set the debugging to 99.

(cherry picked from commit 3651c58a6a)
 2024-02-07 12:20:25 +11:00
Michal Nowak
1bee444649 Merge branch 'mnowak/drop-freebsd-12-9.16' into 'bind-9.16' 
[9.16] Drop FreeBSD 12

See merge request isc-projects/bind9!8673
 2024-01-26 11:00:16 +00:00
Michal Nowak
68d3e48c70 Drop FreeBSD 12 
Support for FreeBSD 12.4, the last FreeBSD 12.x release, ended on
December 31, 2023.

Link: https://www.freebsd.org/security/unsupported/

Move the --with-gssapi=krb5-config ./configure option to Tumbleweed.

(cherry picked from commit 98bfa22381)
 2024-01-26 10:57:53 +01:00
Michał Kępień
92b0a99831 Merge branch 'michal/set-up-version-and-release-notes-for-bind-9.16.48' into 'bind-9.16' 
Set up version and release notes for BIND 9.16.48

See merge request isc-projects/bind9!8654
 2024-01-15 14:55:54 +00:00
Michał Kępień
846376b144 Set up release notes for BIND 9.16.48 2024-01-15 15:49:18 +01:00
Michał Kępień
a3b6516d55 Update BIND version to 9.16.48-dev 2024-01-15 15:49:18 +01:00
Tom Krizek
597174b6c0 Merge branch '4521-timeout-in-dig-not-handled-in-rndc-system-test-9.16' into 'bind-9.16' 
[9.16] Resolve "Timeout in dig not handled in system tests"

See merge request isc-projects/bind9!8634
 2024-01-09 13:33:52 +00:00
Tom Krizek
1878a91a30 Handle dig timing out gracefully in upforwd 
(cherry picked from commit 7b77574b6d)
 2024-01-09 13:43:27 +01:00
Tom Krizek
43f9261157 Handle dig timing out gracefully in staticstub 
(cherry picked from commit cc7c4760aa)
 2024-01-09 13:43:26 +01:00
Tom Krizek
758f03f4f8 Handle dig timing out gracefully in sortlist 
(cherry picked from commit 2341934f7d)
 2024-01-09 13:43:26 +01:00
Tom Krizek
80a2e890ad Handle dig timing out gracefully in rpz 
(cherry picked from commit 99799fba60)
 2024-01-09 13:43:26 +01:00
Tom Krizek
57f2aa4096 Handle dig timing out gracefully in rootkeysentinel 
(cherry picked from commit de569ad97a)
 2024-01-09 13:43:26 +01:00
Tom Krizek
eaac3af25d Handle dig timing out gracefully in qmin 
(cherry picked from commit 606985d775)
 2024-01-09 13:43:25 +01:00
Tom Krizek
97fb29e6da Handle dig timing out gracefully in padding 
(cherry picked from commit c983449e5e)
 2024-01-09 13:43:25 +01:00
Tom Krizek
02935c6e8d Handle dig timing out gracefully in nsupdate 
(cherry picked from commit 3c7291248c)
 2024-01-09 13:43:25 +01:00
Tom Krizek
49cabc8622 Handle dig timing out gracefully in names 
(cherry picked from commit 410aa5aeab)
 2024-01-09 13:43:25 +01:00
Tom Krizek
2c21a77139 Handle dig timing out gracefully in masterfile 
(cherry picked from commit 0bf25138b6)
 2024-01-09 13:43:25 +01:00
Tom Krizek
895bd490af Handle dig timing out gracefully in logfileconfig 
(cherry picked from commit 8ece026848)
 2024-01-09 13:43:24 +01:00
Tom Krizek
a095388207 Handle dig timing out gracefully in legacy 
(cherry picked from commit 2cc90a815e)
 2024-01-09 13:43:24 +01:00
Tom Krizek
b99fc82877 Handle dig timing out gracefully in keepalive 
(cherry picked from commit c6b267ce4d)
 2024-01-09 13:43:24 +01:00
Tom Krizek
f3840de0cb Handle dig timing out gracefully in dnstap 
(cherry picked from commit fcce010045)
 2024-01-09 13:43:24 +01:00
Tom Krizek
ad6b8fe97a Handle dig timing out gracefully in cookie 
(cherry picked from commit 343b3f0f84)
 2024-01-09 13:43:23 +01:00
Tom Krizek
cd908fe78c Handle dig timing out gracefully in autosign 
(cherry picked from commit 445ec7cc0f)
 2024-01-09 13:43:23 +01:00
Tom Krizek
2b20812ce7 Handle dig timing out gracefully in auth 
(cherry picked from commit ddb41798d5)
 2024-01-09 13:43:23 +01:00
Tom Krizek
b9dbf29f48 Handle dig timing out gracefully in allow-query 
(cherry picked from commit 0d5df1fc02)
 2024-01-09 13:43:23 +01:00
Mark Andrews
41993be52b Handle dig timing out gracefully in serve-stale 
(cherry picked from commit 4351076d48)
 2024-01-09 13:43:21 +01:00
Mark Andrews
d5cd8b0798 Handle dig timing out gracefully in rndc 
(cherry picked from commit 02d9f2eeb9)
 2024-01-09 10:50:08 +01:00
Michal Nowak
0851244335 Merge branch 'mnowak/set-up-version-and-release-notes-for-bind-9.16.47' into 'bind-9.16' 
Set up version and release notes for BIND 9.16.47

See merge request isc-projects/bind9!8629
 2024-01-08 12:12:08 +00:00
Michal Nowak
e5e2800908 Set up release notes for BIND 9.16.47 2024-01-08 13:01:04 +01:00
Michal Nowak
68385904ac Update BIND version to 9.16.47-dev 2024-01-08 13:01:04 +01:00
Mark Andrews
f6b7fa0338 Merge branch '4513-system-tests-fail-with-net-dns-1-42-bind-9.16' into 'bind-9.16' 
[9.16] Resolve "System tests fail with Net::DNS 1.42"

See merge request isc-projects/bind9!8619
 2024-01-03 01:30:58 +00:00
Mark Andrews
16f3d79052 Support Net::DNS::Nameserver 1.42 
In Net::DNS 1.42 $ns->main_loop no longer loops.  Use current methods
for starting the server, wait for SIGTERM then cleanup child processes
using $ns->stop_server(), then remove the pid file.

(cherry picked from commit c2c59dea60)
 2024-01-03 12:01:14 +11:00
Tom Krizek
719a8ee0e2 Merge branch 'tkrizek/update-sphinx_rtd_theme-9.16' into 'bind-9.16' 
[9.16] Update sphinx_rtd_theme and docutils

See merge request isc-projects/bind9!8605
 2023-12-20 17:55:08 +00:00
Tom Krizek
c309a04c88 Update sphinx_rtd_theme and docutils 
(cherry picked from commit 4156fa09d9)
 2023-12-20 18:05:24 +01:00
Mark Andrews
771b12a747 Merge branch '4498-gl-4495-followup-regression-test-was-too-strict-bind-9.16' into 'bind-9.16' 
[9.16] Resolve "[GL #4494] followup: regression test was too strict" !8590

See merge request isc-projects/bind9!8599
 2023-12-20 01:13:41 +00:00
Mark Andrews
ea7b92a348 The NSEC3 -> NSEC private record may be added later 
Check each delta for the NSEC3 -> NSEC private record addition
as it may be added in the second delta.

(cherry picked from commit 80a4dff986)
 2023-12-20 11:13:01 +11:00
Mark Andrews
00c5f362f2 Merge branch '4494-add_sigs-was-using-the-wrong-time-in-kasp-mode-bind-9.16' into 'bind-9.16' 
[9.16] Resolve "add_sigs was using the wrong time in kasp mode"

See merge request isc-projects/bind9!8589
 2023-12-19 02:36:23 +00:00
Mark Andrews
f9bf12d216 Add CHANGES note for [GL #4494] 
(cherry picked from commit 94b00f44ae)
 2023-12-19 12:57:33 +11:00
Mark Andrews
ba706a170d Regression check for missing RRSIGs 
When transitioning from NSEC3 to NSEC the added records where not
being signed because the wrong time was being used to determine if
a key should be used or not.  Check that these records are actually
signed.

(cherry picked from commit bdb42d3838)
 2023-12-19 12:56:57 +11:00
Mark Andrews
9c9adc137c Use 'now' rather than 'inception' in 'add_sigs' 
When kasp support was added 'inception' was used as a proxy for
'now' and resulted in signatures not being generated or the wrong
signatures being generated.  'inception' is the time to be set
in the signatures being generated and is usually in the past to
allow for clock skew.  'now' determines what keys are to be used
for signing.

(cherry picked from commit 6066e41948)
 2023-12-19 12:55:03 +11:00