Evan Hunt
afa6d50cfe
[master] move release tag
2014-02-20 11:03:43 -08:00
Evan Hunt
bce9696c7a
[master] fix win32 installer
...
3754. [cleanup] win32: Installer now places files in the
Program Files area rather than system services.
[RT #35361 ]
2014-02-20 10:11:06 -08:00
Mark Andrews
80b37f909a
increment dns_nsstatscounter_recursclients when prefetching
2014-02-21 01:40:54 +11:00
Francis Dupont
b1acd6c424
updated Configure trailing comment
2014-02-20 14:48:03 +01:00
Francis Dupont
5a2a781e6a
Merge branch 'master' of ssh://repo.isc.org/proj/git/prod/bind9
2014-02-20 14:36:56 +01:00
Francis Dupont
651878e166
untabify win32utils/Configure
2014-02-20 14:36:16 +01:00
Mark Andrews
caac342072
add @ISC_OPENSSL_LIBS@
2014-02-21 00:35:22 +11:00
Mark Andrews
edd82b2ce2
3753. [bug] allow-notify was ignoring keys. [RT #35425 ]
2014-02-21 00:09:28 +11:00
Mark Andrews
86856f4f30
3752. [bug] Address potential REQUIRE failure if
...
DNS_STYLEFLAG_COMMENTDATA is set when printing out
a rdataset.
2014-02-20 23:04:54 +11:00
Mark Andrews
c62ead1ae7
check the result of dns_zone_getdb call
2014-02-20 20:33:46 +11:00
Mark Andrews
8f80420c71
don't set want_openssl_aes unless CRYPTO = -DOPENSSL
2014-02-20 20:30:50 +11:00
Evan Hunt
5b7dbbf172
[master] silence win64 warnings
2014-02-19 22:58:09 -08:00
Mark Andrews
47cb20eae1
add EDNS EXPIRE processing on ixfr and axfr out
2014-02-20 17:51:31 +11:00
Evan Hunt
83eecff731
[master] adjust default -U
...
3751. [tuning] The default setting for the -U option (setting
the number of UDP listeners per interface) has
been adjusted to improve performance. [RT #35417 ]
2014-02-19 21:54:43 -08:00
Evan Hunt
4a0beb64be
[master] start prep for 9.10.0b1
2014-02-19 21:39:35 -08:00
Evan Hunt
9576baafc0
[master] assert if sitok/sitbad are insane
2014-02-19 21:26:31 -08:00
Mark Andrews
d17d32a7bf
set setok/sitbad
2014-02-20 16:16:53 +11:00
Evan Hunt
7adf0928b9
[master] revised previous
2014-02-19 21:13:39 -08:00
Evan Hunt
fc73ba3528
[master] update README
2014-02-19 21:04:28 -08:00
Mark Andrews
f0c00f10a0
report if sit is good/bad
2014-02-20 15:55:09 +11:00
Mark Andrews
51d6d7eea4
continue rather than break
2014-02-20 15:20:12 +11:00
Mark Andrews
45b8dc626a
add #ifdef notdef check of DNS_OPT_EXPIRE length
2014-02-20 15:06:49 +11:00
Evan Hunt
6cba0b8e61
[expireopt] format expire time
2014-02-20 14:57:47 +11:00
Mark Andrews
16134801ce
3750. [experimental] Partially implement EDNS EXPIRE option as described
...
in draft-andrews-dnsext-expire-00. Retrivial of
remaining time to expiry from slave zones is supported.
EXPIRE uses an experimental option code (65002) and
is subject to change. [RT #35416 ]
2014-02-20 14:56:20 +11:00
Mark Andrews
801b958a5c
s/DNS_EDNSOPTIONS/DNS_EDNSOPTIONS/
2014-02-20 14:00:54 +11:00
Mark Andrews
72ba6ba736
define DNS_OPT_EDNSOPTIONS
2014-02-20 13:55:21 +11:00
Mark Andrews
86a85a3bbd
don't error on rpz percentage checks as they fail inconsistently on virtual machines
2014-02-20 12:22:14 +11:00
Evan Hunt
2af7d81efd
[master] unbalanced tag
2014-02-19 17:15:51 -08:00
Evan Hunt
98091cb21d
[master] add tuning option for win32
2014-02-19 16:35:40 -08:00
Evan Hunt
4357e13a4b
[master] whitespace
2014-02-19 15:54:57 -08:00
Mark Andrews
e676a59686
update copyrights
2014-02-20 10:53:11 +11:00
Evan Hunt
d7b9756a21
[master] ENDS client-subnet in dig
...
3749. [func] "dig +subnet" sends an EDNS client subnet option
containing the specified address/prefix when
querying. (Thanks to Wilmer van der Gaast.)
[RT #35415 ]
2014-02-19 15:51:02 -08:00
Tinderbox User
1361e03890
update copyright notice
2014-02-19 23:46:31 +00:00
Francis Dupont
f1a6c8e78c
WIN32 master fixes
2014-02-19 23:17:52 +01:00
Evan Hunt
fd75aaa2b9
[master] change tag
2014-02-19 07:51:22 -08:00
Mark Andrews
e0c6a3944d
silence Function returns no value
2014-02-20 00:27:36 +11:00
Mark Andrews
ab830e68aa
silence unreachable statement by adding #if/#endif
2014-02-20 00:24:56 +11:00
Mark Andrews
969728a667
--with-openssl=no failed
2014-02-19 20:25:12 +11:00
Mark Andrews
f45c36fb19
add client cookie in hmacsha*
2014-02-19 20:19:36 +11:00
Mark Andrews
7e2e41df67
3748. [func] Use delve to test dns_client interfaces. [RT #35383 ]
2014-02-19 19:33:21 +11:00
Evan Hunt
7f5bdf7f40
[master] fix dns_resolver_destroyfetch race
...
3747. [bug] A race condition could lead to a core dump when
destroying a resolver fetch object. [RT #35385 ]
2014-02-18 23:32:02 -08:00
Evan Hunt
35f6a21f5f
[master] max-zone-ttl
...
3746. [func] New "max-zone-ttl" option enforces maximum
TTLs for zones. If loading a zone containing a
higher TTL, the load fails. DDNS updates with
higher TTLs are accepted but the TTL is truncated.
(Note: Currently supported for master zones only;
inline-signing slaves will be added.) [RT #38405 ]
2014-02-18 23:26:50 -08:00
Mark Andrews
880c48d818
set ISC_OPENSSL_LIBS to DST_OPENSSL_LIBS for want_openssl_aes=yes
2014-02-19 18:14:13 +11:00
Evan Hunt
db955e6f01
[master] add SIT and the new stats counters to README
2014-02-18 22:52:06 -08:00
Evan Hunt
6a3fa181d1
[master] add "--with-tuning=large" option
...
3745. [func] "configure --with-tuning=large" adjusts various
compiled-in constants and default settings to
values suited to large servers with abundant
memory. [RT #29538 ]
2014-02-18 22:36:14 -08:00
Mark Andrews
fb507b955e
test for AES_encrypt and fall back to sha256
2014-02-19 15:22:31 +11:00
Mark Andrews
0a5927a14f
add 3rd
2014-02-19 13:33:24 +11:00
Mark Andrews
08d4b8d120
update SIT description
2014-02-19 13:15:40 +11:00
Evan Hunt
96a3590505
[master] edit
2014-02-18 17:59:43 -08:00
Mark Andrews
b5f6271f4d
3744. [experimental] SIT: send and process Source Identity Tokens
...
(which are similar to DNS Cookies by Donald Eastlake)
and are designed to help clients detect off path
spoofed responses and for servers to detect legitimate
clients.
SIT use a experimental EDNS option code (65001).
SIT can be enabled via --enable-developer or
--enable-sit. It is on by default in Windows.
RRL processing as been updated to know about SIT with
legitimate clients not being rate limited. [RT #35389 ]
2014-02-19 12:53:42 +11:00
