ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
27,156 Commits 589 Branches 805 Tags
af021f136e277a4eec00a1a31d159a17f3e3cd85
Commit Graph
95 Commits
Author SHA1 Message Date
Ondřej Surý 62a1054fd0 Make calls to the stop.pl always use the test name instead of '.' 
(cherry picked from commit e227815af5)
(cherry picked from commit 73e26ec1d6)
 2018-12-03 20:39:14 +01:00
Ondřej Surý 0c384a76cd Make calls to the start.pl always use the test name instead of '.' 
(cherry picked from commit 16b95157e8)
(cherry picked from commit e8f38da2df)
 2018-12-03 20:39:13 +01:00
Mark Andrews 7cec76e222 add krb5-* tests to nsupdate system test. 
(cherry picked from commit 54c4db569b)
 2018-09-10 17:45:48 +10:00
Mark Andrews 84b5b6a659 use guard values for testing unixtime serial 
(cherry picked from commit abe41ba011)
 2018-08-02 11:29:15 +10:00
Mark Andrews 2e29c1f139 save SOA values 
(cherry picked from commit 6b30bc73c0)
 2018-08-02 11:29:15 +10:00
Mukund SivaramanandEvan Hunt a829bb3f1b Add system tests for "tcp-self" update-policy 
(cherry picked from commit a7e6a584ea)
 2018-07-11 11:13:24 -07:00
Evan Hunt 8b205089b7 update file headers to remove copyright years 2018-03-14 16:40:20 -07:00
Mark AndrewsandMichał Kępień 8cf5dd031d remove unsupported command line argument (-4) from nsupdate call 
(cherry picked from commit ac3d2a0ed9)
 2018-03-01 13:55:33 +01:00
Evan Hunt d57e8f6df3 clean up test output 
- removed a few remaing places where output wasn't being passed
  through echo_i or cat_i
- added a "digcomp" function to conf.sh.in to send digcomp.pl output
  through cat_i and return the correct exit value
- set SYSTESTDIR when calling echo_i from nsX directories, so that
  the test name will always be printed correctly
- fixed a test name typo in conf.sh.in

(cherry picked from commit 0e52fbd0b3)
 2018-02-27 09:52:07 -08:00
Michał KępieńandEvan Hunt 457738b3bb Fix MX checks for dynamic updates 
The check_mx() function in lib/ns/update.c incorrectly tests whether the
DNS_RDATA_CHECKMX/DNS_RDATA_CHECKMXFAIL flags are set for each applied
MX record update as these flags are never set in code paths related to
dynamic updates; they can only be set when loading a zone from a master
file (DNS_ZONEOPT_CHECKMX -> DNS_MASTER_CHECKMX -> DNS_RDATA_CHECKMX).
This flaw allows MX records containing IP addresses to be added to a
zone even when "check-mx fail;" is used.

Ensure correct behavior by modifying the relevant tests in check_mx() so
that they use DNS_ZONEOPT_CHECKMX/DNS_ZONEOPT_CHECKMXFAIL instead.

(cherry picked from commit 857a40c87b)
(cherry picked from commit 590f092e00)
 2018-02-26 15:17:09 -08:00
Evan Hunt 167fa161d1 parallelize most system tests 
(cherry picked from commit c032c54dda)
(cherry picked from commit 2b81f322cb)
 2018-02-23 13:23:31 -08:00
Tinderbox User 93ca8abdf8 update copyright notice / whitespace 2018-01-22 23:47:25 +00:00
Mukund Sivaraman 6fb3db01ac Don't permit loading meta RR types such as TKEY from master files (#47009) 
(cherry picked from commit 8a4ce20172)
(cherry picked from commit c8eb726046)
 2018-01-22 14:36:18 +05:30
Mark Andrews 49d11094de set SAMPLEUPDATE under windows; test if SAMPLEUPDATE exists and only run tests if it does 
(cherry picked from commit 9eb5aa40aa)
 2017-11-11 09:25:30 +11:00
Evan Hunt 7c442d7fe0 [v9_11] log when update-policy local gets a key match from a remote host 
4788.	[cleanup]	When using "update-policy local", log a warning
			when an update matching the session key is received
			from a remote host. [RT #46213]

- this completes change #4762.
 2017-10-25 00:59:17 -07:00
Mark Andrews 514a44a2bb don't force souce port 
(cherry picked from commit 02a669a9a6)
 2017-10-08 06:43:21 +11:00
Evan Hunt f592d2f76c [v9_11] further restrict update-policy local 
4762.	[func]		"update-policy local" is now restricted to updates
                from local addresses. (Previously, other addresses
                were allowed so long as updates were signed by the
                local session key.) [RT #45492]
 2017-10-06 15:43:18 -07:00
Michał Kępień e02fa56849 [v9_11] Prevent nsupdate from immediately exiting on invalid user input in interactive mode 
4683.	[bug]		Prevent nsupdate from immediately exiting on invalid
			user input in interactive mode. [RT #28194]

(cherry picked from commit 1aa583b5a5)
 2017-08-17 08:32:44 +02:00
Mark Andrews a60831febf 4651. [bug] Nsupdate could attempt to use a zeroed address on 
server timeout. [RT #45417]

(cherry picked from commit dac36869f3)
 2017-07-19 15:36:55 +10:00
Tinderbox User 8664a1bd40 update copyright notice / whitespace 2017-05-30 23:46:05 +00:00
Mark Andrews 032d2134a4 4629. [bug] dns_client_startupdate could not be called with a 
running client. [RT #45277]

(cherry picked from commit e51d62ecae)
 2017-05-30 09:52:45 +10:00
Mark Andrews 45f206e6c1 4533. [bug] dns_client_update should terminate on prerequiste 
failures (NXDOMAIN, YXDOMAIN, NXRRSET, YXRRSET)
                        and also on BADZONE.  [RT #43865]

(cherry picked from commit 8ca45ba01a)
 2016-12-13 15:48:20 +11:00
Evan Hunt 7802f7d3a9 [v9_11] corrected typo in nsupdate test (DIG-->$DIG) 2016-11-02 19:34:49 -07:00
Mark Andrews 744c1db635 4504. [security] Allow the maximum number of records in a zone to 
be specified.  This provides a control for issues
                        raised in CVE-2016-6170. [RT #42143]

(cherry picked from commit 5f8412a4cb)
 2016-11-03 09:48:26 +11:00
Witold Krecicki cc51cd2d20 4487. [test] Make system tests work on Windows. [RT #42931] 2016-10-19 17:21:13 +02:00
Mark Andrews 8d9a134fe7 4405. [bug] Change 4342 introduced a regression where you could 
not remove a delegation in a NSEC3 signed zone using
                        OPTOUT via nsupdate. [RT #42702]

(cherry picked from commit d811a7d9ef)
 2016-07-06 10:14:01 +10:00
Mark Andrews 0c27b3fe77 4401. [misc] Change LICENSE to MPL 2.0. 2016-06-27 14:56:38 +10:00
Tinderbox User dce54b9b5c update copyright notice / whitespace 2016-06-14 23:45:25 +00:00
Mark Andrews 3635d8f910 do not overflow exit status. [RT #42643] 2016-06-14 13:48:39 +10:00
Tinderbox User a269ca51cc update copyright notice / whitespace 2015-04-14 23:45:21 +00:00
Mukund Sivaraman ac31adc3b7 Add additional logging about xfrin transfer status (#39170) 2015-04-14 12:16:26 +05:30
Mark Andrews ed1c845c1d 3964. [func] nsupdate now performs check-names processing. 
[RT #36266]
 2014-10-02 09:35:43 +10:00
Mark Andrews 5c420ccc29 drop 'I:send many simultaneous updates via a update forwarder' test until re-written using perl 2014-09-07 22:08:45 +10:00
Mark Andrews 76a17033db also fix the expected count 2014-09-07 20:24:59 +10:00
Mark Andrews 48179343c2 reduce number of nsupdates being simultaeously forked 2014-09-07 20:24:14 +10:00
Mark Andrews 74717eef53 3939. [func] Improve UPDATE forwarding performance by allowing TCP 
connections to be shared. [RT #37039]
 2014-09-04 10:37:45 +10:00
Mark Andrews 5b56f2e3cc zero pad date and month fields 2014-05-01 11:41:32 +10:00
Evan Hunt 7318bbc262 [master] serial-update-method date; 
3811.	[func]		"serial-update-method date;" sets serial number
			on dynamic update to today's date in YYYYMMDDNN
			format. (Thanks to Bradley Forschinger.) [RT #24903]
 2014-04-17 16:05:50 -07:00
Evan Hunt 35f6a21f5f [master] max-zone-ttl 
3746.	[func]		New "max-zone-ttl" option enforces maximum
			TTLs for zones. If loading a zone containing a
			higher TTL, the load fails. DDNS updates with
			higher TTLs are accepted but the TTL is truncated.
			(Note: Currently supported for master zones only;
			inline-signing slaves will be added.) [RT #38405]
 2014-02-18 23:26:50 -08:00
Tinderbox User aa7b16ec2a update copyright notice 2014-01-21 23:46:16 +00:00
Evan Hunt d58e33bfab [master] testcrypto.sh in system tests 
3714.	[test]		System tests that need to test for cryptography
			support before running can now use a common
			"testcrypto.sh" script to do so. [RT #35213]
 2014-01-20 16:08:09 -08:00
Mark Andrews d6f99498d6 3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used 
in a key zone. [RT #34238]
 2013-09-04 13:14:06 +10:00
Evan Hunt 2425d8bb7c [master] truncate logged rdata if too long 
3490.	[bug]		When logging RDATA during update, truncate if it's
                        too long. [RT #32365]

cherry picked from:
        commit 16ddb566e5a5b57bf925adef2b5543dddc1de49b
        commit cd97e0c23b09f38aac49aabab66ee13c68b7a3f3
        commit d087fa982649c081d58c5bb16e63da3428e2b89d
        commit d0795bdffef57612dd7654ffd09c9f4216eee2c8
 2013-02-20 13:54:52 -08:00
Evan Hunt ffff5d6792 [master] fix dns_request_createvia assert 
3474.	[bug]		nsupdate could assert when the local and remote
			address families didn't match. [RT #22897]
 2013-01-23 15:39:05 -08:00
Tinderbox User 6fe42ff85c update copyright notice 2013-01-04 23:45:53 +00:00
Evan Hunt 222d38735f [master] allow-query-on works now 
3448.	[bug]		The allow-query-on ACL was not processed correctly.
			[RT #29486]
 2013-01-03 15:13:45 -08:00
Mark Andrews 6301757d64 don't wipe out named.run when restarting 2012-12-14 17:39:22 +11:00
Evan Hunt de5890da9b [master] support all algorithms in ddns-confgen 
3431.	[bug]		ddns-confgen: Some valid key algorithms were
			not accepted. [RT #31927]
 2012-12-05 16:36:58 -08:00
Mark Andrews d1f43359e4 3379. [bug] nsupdate terminated unexpectedly in interactive mode 
if built with readline support. [RT #29550]
 2012-08-22 13:38:51 +10:00
Mark Andrews bf8267aa45 reverse bad copyright update 2012-06-29 11:39:47 +10:00