Commit Graph
2458 Commits
Author SHA1 Message Date
Mark Andrews 514a44a2bb don't force souce port
(cherry picked from commit 02a669a9a6)
2017-10-08 06:43:21 +11:00
Tinderbox User 8a99b24dbe update copyright notice / whitespace 2017-10-06 23:46:41 +00:00
Evan Hunt f592d2f76c [v9_11] further restrict update-policy local
4762.	[func]		"update-policy local" is now restricted to updates
                from local addresses. (Previously, other addresses
                were allowed so long as updates were signed by the
                local session key.) [RT #45492]
2017-10-06 15:43:18 -07:00
Michał Kępień 4ee1fbe056 [v9_11] Add support for DOA
4761.	[protocol]	Add support for DOA. [RT #45612]

(cherry picked from commit 417218837e)
2017-10-06 12:56:41 +02:00
Mark Andrews 1c8aa38b53 4759. [func] Add logging channel "trust-anchor-telementry" to
record trust-anchor-telementry in incoming requests.
                            Both _ta-XXXX.<anchor>/NULL and EDNS KEY-TAG options
                            are logged.  [RT #46124]

    (cherry picked from commit b41c1aacbc)
2017-10-06 13:53:50 +11:00
Tinderbox User 649482995b update copyright notice / whitespace 2017-10-05 23:46:27 +00:00
Mark Andrews 2732d4922c 4754. [bug] dns_zone_setview needs a two stage commit to properly
handle errors. [RT #45841]
2017-10-05 13:41:49 +11:00
Evan Hunt e7d68fc4b6 [v9_11] copy the color-coded test functions to conf.sh.win32 2017-10-04 09:28:37 -07:00
Mark Andrews e77f7b404a stderr to /dev/null also
(cherry picked from commit 4615bc5408)
2017-10-04 19:26:59 +11:00
Mark Andrews af6a526dfd test for 'printf'
(cherry picked from commit d1e823af15)
2017-10-04 19:20:01 +11:00
Tinderbox User a134177ed9 update copyright notice / whitespace 2017-10-03 23:46:31 +00:00
Evan Hunt d5bd8bb71a [v9_11] de-DLV
4749.	[func]		The ISC DLV service has been shut down, and all
			DLV records have been removed from dlv.isc.org.
			- Removed references to ISC DLV in documentation
			- Removed DLV key from bind.keys
			- No longer use ISC DLV by default in delv
			[RT #46155]
2017-10-03 00:43:19 -07:00
Tinderbox User f8f19158fa update copyright notice / whitespace 2017-09-30 23:49:40 +00:00
Evan Hunt 1c81aef28d [v9_11] color-coded test output
4745.	[test]		Add color-coded pass/fail messages to system
			tests when running on terminals that support them.
			[RT #45977]

(cherry picked from commit 3bb6150cae)
2017-09-30 10:02:52 -07:00
Mark Andrews 1288734b53 improve forensics
(cherry picked from commit 86e5d14e82)
2017-09-28 22:15:41 +10:00
Tinderbox User acce4b333d update copyright notice / whitespace 2017-09-18 23:52:43 +00:00
Evan Hunt fd8d52fbdd [v9_11] add I: when echoing information about failed tests
(cherry picked from commit 49740fb0f2)
2017-09-18 14:15:55 -07:00
Michał Kępień 62f2fefaec [v9_11] Prevent possible infinite signing loop after retransferring an inline-signed slave using NSEC3
4727.	[bug]		Retransferring an inline-signed slave using NSEC3
			around the time its NSEC3 salt was changed could result
			in an infinite signing loop. [RT #45080]

(cherry picked from commit f665c724e4)
2017-09-18 09:23:18 +02:00
Tinderbox User 7c38d4781f update copyright notice / whitespace 2017-09-14 23:48:31 +00:00
Evan Hunt a3b6dcd418 [v9_11] revert dlzexternal changes for portability 2017-09-14 11:33:36 -07:00
Mukund Sivaraman e05b7dc69a Link dlzexternal system test's driver against libisc
(cherry picked from commit bbe9f1dd95)
2017-09-14 13:37:22 +05:30
Tinderbox User bd911976d5 update copyright notice / whitespace 2017-09-13 23:52:25 +00:00
Evan Hunt 7cd594b842 [master] cleanup strcat/strcpy
4722.	[cleanup]	Clean up uses of strcpy() and strcat() in favor of
			strlcpy() and strlcat() for safety. [RT #45981]

(cherry picked from commit 114f95089c)
2017-09-13 00:17:16 -07:00
Mark Andrews a27226b849 give more time for the initial signing of bits in the inline signing test to complete
(cherry picked from commit e930487ce7)
2017-09-13 12:19:42 +10:00
Tinderbox User c40e033d21 update copyright notice / whitespace 2017-09-12 23:47:30 +00:00
Evan Hunt a2a0100e0f [v9_11] improve handling of qcount=0 replies
4717.	[bug]		Treat replies with QCOUNT=0 as truncated if TC=1,
			FORMERR if TC=0, and log the error correctly.
			[RT #45836]

(cherry picked from commit 25b33bede4)
2017-09-12 15:27:06 -07:00
Evan Hunt e5f5675b1d [v9_11] dig: retain domain when retrying with tcp
4712.	[bug]		"dig +domain" and "dig +search" didn't retain the
			search domain when retrying with TCP. [RT #45547]

(cherry picked from commit 8e014c45ae)
2017-09-11 10:10:38 -07:00
Evan Hunt 29f0ced781 [v9_11] add missing rrtypes to genzones
4711.	[test]		Some RR types were missing from genzones.sh.
			[RT #45782]

(cherry picked from commit 3e66721b35)
2017-09-11 09:35:03 -07:00
Tinderbox User 772bc9542d update copyright notice / whitespace 2017-09-01 23:46:54 +00:00
Mark Andrews 6e1f755f19 4695. [bug] cookie-secrets were not being properly checked by
named-checkconf. [RT #45886]
(cherry picked from commit 2e743d9bdc)
2017-08-31 13:28:59 +10:00
Mark Andrews 95ed40ff9a sort view_clauses 2017-08-31 08:10:44 +10:00
Tinderbox User 36d3f6b40f update copyright notice / whitespace 2017-08-29 23:47:49 +00:00
Michał Kępień b7a823a402 [v9_11] Ensure consistent handling of -4/-6 command line options in all tools
4690.	[bug]		Command line options -4/-6 were handled inconsistently
			between tools. [RT #45632]

(cherry picked from commit d6814700de)
2017-08-29 10:22:10 +02:00
Mark Andrews a64daf673d 4688. [protocol] Check and display EDNS KEY TAG options (RFC 8145) in
messages. [RT #44804]

(cherry picked from commit 07741d43c8)
2017-08-25 08:47:19 +10:00
Michał Kępień 0aadc6dd7b [v9_11] Prevent dnssec-settime from printing a bogus warning
4686.	[bug]		dnssec-settime -p could print a bogus warning about
			key deletion scheduled before its inactivation when a
			key had an inactivation date set but no deletion date
			set. [RT #45807]

(cherry picked from commit 330365566d)
2017-08-21 10:21:58 +02:00
Michał Kępień f20ff8b74d [v9_11] Fix calculation of dates for a successor key
4685.	[bug]		dnssec-settime incorrectly calculated publication and
			activation dates for a successor key. [RT #45806]

(cherry picked from commit 5201b96d03)
2017-08-21 10:00:21 +02:00
Michał Kępień 7ff682f3c6 [v9_11] Prevent delv from sending bogus queries for provided server address
4684.	[bug]		delv could send bogus DNS queries when an explicit
			server address was specified on the command line along
			with -4/-6. [RT #45804]

(cherry picked from commit 367fcd7454)
2017-08-21 09:18:54 +02:00
Tinderbox User 2dc5db0eb0 update copyright notice / whitespace 2017-08-17 23:47:47 +00:00
Michał Kępień e02fa56849 [v9_11] Prevent nsupdate from immediately exiting on invalid user input in interactive mode
4683.	[bug]		Prevent nsupdate from immediately exiting on invalid
			user input in interactive mode. [RT #28194]

(cherry picked from commit 1aa583b5a5)
2017-08-17 08:32:44 +02:00
Mark Andrews abcea74291 4682. [bug] Don't report errors on records below a DNAME.
[RT #44880]

(cherry picked from commit 615b961e02)
2017-08-17 15:51:22 +10:00
Tinderbox User f3df966b81 update copyright notice / whitespace 2017-08-15 23:49:26 +00:00
Mark Andrews 079c9e6939 'uname -o' is not portable, suppress error message; remove spurious cat tmp.out; provide forensics for failure analysis
(cherry picked from commit e85a2c5624)
2017-08-15 18:02:55 +10:00
Tinderbox User 296f5969a8 update copyright notice / whitespace 2017-08-14 23:49:57 +00:00
Michał Kępień cbb33c87f4 [v9_11] Make dnssec-verify suggest using -o when appropriate
4679.	[cleanup]	Suggest using -o when dnssec-verify finds a SOA record
			not at top of zone and -o is not used. [RT #45519]

(cherry picked from commit 877c264edc)
2017-08-14 14:02:20 +02:00
Mark Andrews a6a3a81e36 sort options
(cherry picked from commit 00f067539a)
2017-08-14 21:42:25 +10:00
Evan Hunt 5832599943 [v9_11] add missing eddsa files 2017-08-07 14:23:01 -07:00
Tinderbox User bc6f4c1c4c update copyright notice / whitespace 2017-08-01 23:47:30 +00:00
Evan Hunt f72f587942 [v9_11] parse numeric domain names correctly
4666.	[bug]		dnssec-keymgr: Domain names beginning with digits (0-9)
			could cause a parser error when reading the policy
			file. This now works correctly so long as the domain
			name is quoted. [RT #45641]
2017-07-31 10:44:26 -07:00
Francis Dupont 78608b0a45 Added Ed25519 support (#44696) 2017-07-31 15:45:32 +02:00
Tinderbox User 66e599a004 update copyright notice / whitespace 2017-07-28 23:47:00 +00:00