Ondřej Surý
9ad51fd177
Use standard OPENSSL_NO_ENGINE instead of custom USE_ENGINE define
...
(cherry picked from commit 8d648e7a8a )
(cherry picked from commit 311fbf3f5b )
2018-05-03 21:48:44 +02:00
Ondřej Surý
17314bc5da
Use BN_hex2bn instead of custom BN_fromhex function
...
(cherry picked from commit 8bf192b4d1 )
(cherry picked from commit 5af60f69fd )
2018-05-03 21:44:36 +02:00
Mark Andrews
dc9b77a852
simplify mask construction
...
(cherry picked from commit 22fab3199f )
2018-05-03 17:15:32 +02:00
Ondřej Surý
358ef09a6e
Also test the higher part of the confidence interval
...
(cherry picked from commit 8d3220643c )
2018-05-03 15:05:20 +02:00
Ondřej Surý
c74decdf53
Workaround LibreSSL 2.7.0-2.7.2 quirk in DH_set0_key
...
(cherry picked from commit 6b9e3b7b06 )
2018-05-03 14:27:33 +02:00
Ondřej Surý
f3414c74ec
Add support for LibreSSL 2.7
...
(cherry picked from commit 29ff62a149 )
2018-05-03 14:27:33 +02:00
Michał Kępień
911836509e
Apply raw zone deltas to yet unsigned secure zones
...
When inline signing is enabled for a zone without creating signing keys
for it, changes subsequently applied to the raw zone will not be
reflected in the secure zone due to the dns_update_signaturesinc() call
inside receive_secure_serial() failing. Given that an inline zone will
be served (without any signatures) even with no associated signing keys
being present, keep applying raw zone deltas to the secure zone until
keys become available in an attempt to follow the principle of least
astonishment.
(cherry picked from commit 6acf326969 )
(cherry picked from commit 8a58a60772 )
2018-04-25 12:09:53 -07:00
Michał Kępień
4ba247818c
Only log bumped signed serial after a successful secure zone update
...
If a raw zone is modified, but the dns_update_signaturesinc() call in
receive_secure_serial() fails, the corresponding secure zone's database
will not be modified, even though by that time a message containing the
bumped signed serial will already have been logged. This creates
confusion, because a different secure zone version will be served than
the one announced in the logs. Move the relevant dns_zone_log() call so
that it is only performed if the secure zone's database is modified.
(cherry picked from commit cfbc8e264d )
(cherry picked from commit cdc7ab42b1 )
2018-04-25 12:09:53 -07:00
Evan Hunt
f9da5a735e
remove unnecessary comparison
...
(cherry picked from commit 8b1baa10ee )
2018-04-22 12:58:27 -07:00
Evan Hunt
0dcff8f93c
silence warnings about unnecessary comparisons
...
- these are cases where result has been explicitly set, so
if (result != ISC_R_SUCCESS) is unnecessary
(cherry picked from commit e00eb55cd2 )
2018-04-22 12:58:27 -07:00
Evan Hunt
7f61e9d50e
add header guards in files that were missing them
...
(cherry picked from commit 4247477b61 )
2018-04-22 12:58:27 -07:00
Evan Hunt
694a1486ca
fix shadowed global variables
...
(cherry picked from commit 9ca3ab1168 )
2018-04-22 12:57:58 -07:00
Evan Hunt
b9db91aa64
fix duplicate include guard in dnsconf.h
...
- IMHO we should consider removing dnsconf.c and deprecating the
/etc/dns.conf file, though, as I don't think it's likely anyone
is using it
(cherry picked from commit a08ba418ef )
2018-04-22 12:57:58 -07:00
Mark Andrews
cdce9f752c
remove exit calls after FATAL_ERROR
...
(cherry picked from commit f8d2a46daa )
2018-04-20 18:47:39 -04:00
Mark Andrews
578714e8f1
use %u instead of %d for unsigned int arguments
...
(cherry picked from commit 49f8e9571c )
2018-04-20 18:47:39 -04:00
Ondřej Surý
cf5598156d
Sync isc_file_template functions between unix and win32, so they are same
...
(cherry picked from commit 8c99d104e3 )
2018-04-12 09:00:13 +02:00
Ondřej Surý
6f550b33bf
Cherry-pick changes to isc_file_template and associated unit test from v9_12 to v9_11
...
(cherry picked parts of commit 2dfb992349 )
2018-04-12 08:59:35 +02:00
Mukund Sivaraman
63331f010e
Fix TSIG dump keyfile name buffer size issues
...
(cherry picked from commit 44b84cb5a6 )
2018-04-11 14:38:10 +02:00
Ondřej Surý
d69d5b96c1
Define PATH_MAX on Windows as _MAX_PATH, so we can use it everywhere
...
(cherry picked from commit 7467735258 )
2018-04-11 14:38:10 +02:00
Evan Hunt
920eb326a5
Merge branch '183-add-dns_fixedname_initname-v9_11' into 'v9_11'
...
Add and use dns_fixedname_initname()
Closes #183
See merge request isc-projects/bind9!161
2018-04-10 14:08:27 -07:00
Michał Kępień
ecea678dac
Use dns_fixedname_initname() where possible
...
Replace dns_fixedname_init() calls followed by dns_fixedname_name()
calls with calls to dns_fixedname_initname() where it is possible
without affecting current behavior and/or performance.
This patch was mostly prepared using Coccinelle and the following
semantic patch:
@@
expression fixedname, name;
@@
- dns_fixedname_init(&fixedname);
...
- name = dns_fixedname_name(&fixedname);
+ name = dns_fixedname_initname(&fixedname);
The resulting set of changes was then manually reviewed to exclude false
positives and apply minor tweaks.
It is likely that more occurrences of this pattern can be refactored in
an identical way. This commit only takes care of the low-hanging fruit.
(cherry picked from commit 4df4a8e731 )
(cherry picked from commit 0041aeb751 )
2018-04-10 13:26:23 -07:00
Mukund Sivaraman
1dea0795d1
Add a dns_fixedname_initname() helper function
...
This also turns the dns_fixedname macros into functions.
(cherry picked from commit 0d2a03c290 )
(cherry picked from commit cee4fef7c5 )
2018-04-10 13:14:25 -07:00
Ondřej Surý
c5d1fedca8
A couple of more cleanups after free in opensslrsa_generate()
...
(cherry picked from commit d2b3188c61 )
2018-04-06 14:23:58 +10:00
Petr Mensik
8baf990392
Do not assign NULL conditionally in OpenSSL < 1.1, make it always explicit.
...
(cherry picked from commit edaafacf36 )
2018-04-06 14:23:58 +10:00
Petr Mensik
f36e13b039
Fix double free on RSA_generate_key_ex failure
...
(cherry picked from commit 01cc622e7b )
2018-04-06 14:23:57 +10:00
Mukund Sivaraman
4445ee6491
Check return value of isc_mem_get()
...
(cherry picked from commit de3a4af1bf )
2018-03-20 09:54:55 +11:00
Evan Hunt
09cf48603a
update file headers
2018-03-15 18:38:48 -07:00
Evan Hunt
14e22ddf8c
add an 'untested' case when none of the atomic operations are available
...
- this fixes a build failure introduced in change 4913 when
compiling with ATF and --disable-atomic
(cherry picked from commit 1b3eac926e )
2018-03-15 12:09:38 -07:00
Evan Hunt
8b205089b7
update file headers to remove copyright years
2018-03-14 16:40:20 -07:00
Ondřej Surý
413b7d4b24
Update whitespace
2018-03-14 12:45:03 +01:00
Evan Hunt
e98ec51b96
Fix compiler warnings and test failures when building without threads
...
(cherry picked from commit 56353aaf42 )
2018-03-10 10:37:20 -08:00
Evan Hunt
8da54db729
Merge branch 'clean-bin-tests' into 'v9_11'
...
clean up bin/tests, convert unit tests to ATF
Closes #115
See merge request isc-projects/bind9!93
2018-03-09 16:47:51 -08:00
Evan Hunt
442c1530a3
final cleanup
...
- update Kyuafiles to match Atffiles
- copyrights
- CHANGES note
(cherry picked from commit 86e00cbb71 )
(cherry picked from commit 80834b5b90 )
2018-03-09 16:17:56 -08:00
Evan Hunt
941946cf14
remove lib/tests as nothing uses it anymore
...
(cherry picked from commit d132f73497 )
(cherry picked from commit d35f62434a )
2018-03-09 15:48:32 -08:00
Evan Hunt
64ea21a0e5
shorten ht_test and random_test
...
(cherry picked from commit 9b753aa154 )
(cherry picked from commit 289836a066 )
2018-03-09 15:47:21 -08:00
Evan Hunt
57a5820dcc
migrate t_dst signature test to lib/dns/tests/dst_test
...
(cherry picked from commit a4ebe83cdb )
(cherry picked from commit 4439c471d1 )
2018-03-09 15:46:53 -08:00
Evan Hunt
d3518e57b1
migrate t_db to lib/dns/tests/db_test
...
(cherry picked from commit f58ac8ada3 )
(cherry picked from commit 56da937399 )
2018-03-09 15:42:07 -08:00
Evan Hunt
b2fef3b438
migrate t_names to lib/dns/tests/name_test
...
(cherry picked from commit 8ecf69ef7b )
(cherry picked from commit aefad99e1e )
2018-03-09 15:40:21 -08:00
Evan Hunt
42fa3932ab
migrate t_rbt to lib/dns/tests/rbt_test
...
(cherry picked from commit 109546cbda )
(cherry picked from commit c505afd183 )
2018-03-09 15:39:42 -08:00
Evan Hunt
38f9cddcad
migrate t_tasks to lib/isc/tests/task_test
...
(cherry picked from commit c6c1e99252 )
(cherry picked from commit 88bfe56876 )
2018-03-09 15:38:53 -08:00
Evan Hunt
5dd25f2285
migrate t_resolver to lib/dns/tests/resolver_test
...
(cherry picked from commit d80825c40b )
(cherry picked from commit 30e157f6e4 )
2018-03-09 15:38:30 -08:00
Evan Hunt
274ee0b425
migrate t_timers to lib/isc/tests/timer_test
...
(cherry picked from commit e2b8699df9 )
(cherry picked from commit efccdad0ea )
2018-03-09 15:37:03 -08:00
Evan Hunt
492e19d6ec
migrate t_atomic to lib/isc/tests/atomic_test
...
(cherry picked from commit 874e2fc70c )
(cherry picked from commit c7fa56e8db )
2018-03-09 15:35:09 -08:00
Evan Hunt
814cd21e22
migrate t_mem to lib/isc/tests/mem_test
...
(cherry picked from commit 979f054702 )
(cherry picked from commit af48544b75 )
2018-03-09 15:34:31 -08:00
Evan Hunt
faedafd2b4
migrate t_net to lib/isc/tests
...
(cherry picked from commit 05b7251d51 )
(cherry picked from commit af0c9b2cee )
2018-03-09 15:33:48 -08:00
Evan Hunt
323e2f7152
migrate t_sockaddr to lib/isc/tests
...
(cherry picked from commit 62f650078a )
(cherry picked from commit fadb93cf43 )
2018-03-09 15:33:01 -08:00
Evan Hunt
fb076e0591
allow ATF tests to run in parallel
...
(cherry picked from commit ef0b4c91bc )
(cherry picked from commit 787c5d1394 )
2018-03-09 14:37:46 -08:00
Evan Hunt
3b559cf7f0
Merge branch 'v9_11_3_patch' into v9_11
2018-03-08 14:29:24 -08:00
Mark Andrews
229e9e2215
check for in-view zones colliding with other zone definitions; also check the syntax of the in-view zone name
...
(cherry picked from commit 3e7e280040 )
2018-03-08 12:20:59 +11:00
Michał Kępień
8f07fb476b
Remove duplicate irs_resconf_load() unit test
...
The "sortlist-v4.conf" unit test for irs_resconf_load() is always run
twice due to a duplicate entry in the "tests" table. Remove one of them
to prevent this.
(cherry picked from commit 6c09f305ae )
2018-03-06 09:24:41 +01:00