Commit Graph
22041 Commits
Author SHA1 Message Date
Evan Hunt afa6d50cfe [master] move release tag 2014-02-20 11:03:43 -08:00
Evan Hunt bce9696c7a [master] fix win32 installer
3754.	[cleanup]	win32: Installer now places files in the
			Program Files area rather than system services.
			[RT #35361]
2014-02-20 10:11:06 -08:00
Mark Andrews 80b37f909a increment dns_nsstatscounter_recursclients when prefetching 2014-02-21 01:40:54 +11:00
Francis Dupont b1acd6c424 updated Configure trailing comment 2014-02-20 14:48:03 +01:00
Francis Dupont 5a2a781e6a Merge branch 'master' of ssh://repo.isc.org/proj/git/prod/bind9 2014-02-20 14:36:56 +01:00
Francis Dupont 651878e166 untabify win32utils/Configure 2014-02-20 14:36:16 +01:00
Mark Andrews caac342072 add @ISC_OPENSSL_LIBS@ 2014-02-21 00:35:22 +11:00
Mark Andrews edd82b2ce2 3753. [bug] allow-notify was ignoring keys. [RT #35425] 2014-02-21 00:09:28 +11:00
Mark Andrews 86856f4f30 3752. [bug] Address potential REQUIRE failure if
DNS_STYLEFLAG_COMMENTDATA is set when printing out
                        a rdataset.
2014-02-20 23:04:54 +11:00
Mark Andrews c62ead1ae7 check the result of dns_zone_getdb call 2014-02-20 20:33:46 +11:00
Mark Andrews 8f80420c71 don't set want_openssl_aes unless CRYPTO = -DOPENSSL 2014-02-20 20:30:50 +11:00
Evan Hunt 5b7dbbf172 [master] silence win64 warnings 2014-02-19 22:58:09 -08:00
Mark Andrews 47cb20eae1 add EDNS EXPIRE processing on ixfr and axfr out 2014-02-20 17:51:31 +11:00
Evan Hunt 83eecff731 [master] adjust default -U
3751.	[tuning]	The default setting for the -U option (setting
			the number of UDP listeners per interface) has
			been adjusted to improve performance. [RT #35417]
2014-02-19 21:54:43 -08:00
Evan Hunt 4a0beb64be [master] start prep for 9.10.0b1 2014-02-19 21:39:35 -08:00
Evan Hunt 9576baafc0 [master] assert if sitok/sitbad are insane 2014-02-19 21:26:31 -08:00
Mark Andrews d17d32a7bf set setok/sitbad 2014-02-20 16:16:53 +11:00
Evan Hunt 7adf0928b9 [master] revised previous 2014-02-19 21:13:39 -08:00
Evan Hunt fc73ba3528 [master] update README 2014-02-19 21:04:28 -08:00
Mark Andrews f0c00f10a0 report if sit is good/bad 2014-02-20 15:55:09 +11:00
Mark Andrews 51d6d7eea4 continue rather than break 2014-02-20 15:20:12 +11:00
Mark Andrews 45b8dc626a add #ifdef notdef check of DNS_OPT_EXPIRE length 2014-02-20 15:06:49 +11:00
Evan HuntandMark Andrews 6cba0b8e61 [expireopt] format expire time 2014-02-20 14:57:47 +11:00
Mark Andrews 16134801ce 3750. [experimental] Partially implement EDNS EXPIRE option as described
in draft-andrews-dnsext-expire-00.  Retrivial of
                        remaining time to expiry from slave zones is supported.

                        EXPIRE uses an experimental option code (65002) and
                        is subject to change. [RT #35416]
2014-02-20 14:56:20 +11:00
Mark Andrews 801b958a5c s/DNS_EDNSOPTIONS/DNS_EDNSOPTIONS/ 2014-02-20 14:00:54 +11:00
Mark Andrews 72ba6ba736 define DNS_OPT_EDNSOPTIONS 2014-02-20 13:55:21 +11:00
Mark Andrews 86a85a3bbd don't error on rpz percentage checks as they fail inconsistently on virtual machines 2014-02-20 12:22:14 +11:00
Evan Hunt 2af7d81efd [master] unbalanced tag 2014-02-19 17:15:51 -08:00
Evan Hunt 98091cb21d [master] add tuning option for win32 2014-02-19 16:35:40 -08:00
Evan Hunt 4357e13a4b [master] whitespace 2014-02-19 15:54:57 -08:00
Mark Andrews e676a59686 update copyrights 2014-02-20 10:53:11 +11:00
Evan Hunt d7b9756a21 [master] ENDS client-subnet in dig
3749.	[func]		"dig +subnet" sends an EDNS client subnet option
			containing the specified address/prefix when
                        querying. (Thanks to Wilmer van der Gaast.)
                        [RT #35415]
2014-02-19 15:51:02 -08:00
Tinderbox User 1361e03890 update copyright notice 2014-02-19 23:46:31 +00:00
Francis Dupont f1a6c8e78c WIN32 master fixes 2014-02-19 23:17:52 +01:00
Evan Hunt fd75aaa2b9 [master] change tag 2014-02-19 07:51:22 -08:00
Mark Andrews e0c6a3944d silence Function returns no value 2014-02-20 00:27:36 +11:00
Mark Andrews ab830e68aa silence unreachable statement by adding #if/#endif 2014-02-20 00:24:56 +11:00
Mark Andrews 969728a667 --with-openssl=no failed 2014-02-19 20:25:12 +11:00
Mark Andrews f45c36fb19 add client cookie in hmacsha* 2014-02-19 20:19:36 +11:00
Mark Andrews 7e2e41df67 3748. [func] Use delve to test dns_client interfaces. [RT #35383] 2014-02-19 19:33:21 +11:00
Evan Hunt 7f5bdf7f40 [master] fix dns_resolver_destroyfetch race
3747.	[bug]		A race condition could lead to a core dump when
			destroying a resolver fetch object. [RT #35385]
2014-02-18 23:32:02 -08:00
Evan Hunt 35f6a21f5f [master] max-zone-ttl
3746.	[func]		New "max-zone-ttl" option enforces maximum
			TTLs for zones. If loading a zone containing a
			higher TTL, the load fails. DDNS updates with
			higher TTLs are accepted but the TTL is truncated.
			(Note: Currently supported for master zones only;
			inline-signing slaves will be added.) [RT #38405]
2014-02-18 23:26:50 -08:00
Mark Andrews 880c48d818 set ISC_OPENSSL_LIBS to DST_OPENSSL_LIBS for want_openssl_aes=yes 2014-02-19 18:14:13 +11:00
Evan Hunt db955e6f01 [master] add SIT and the new stats counters to README 2014-02-18 22:52:06 -08:00
Evan Hunt 6a3fa181d1 [master] add "--with-tuning=large" option
3745.	[func]		"configure --with-tuning=large" adjusts various
			compiled-in constants and default settings to
			values suited to large servers with abundant
			memory. [RT #29538]
2014-02-18 22:36:14 -08:00
Mark Andrews fb507b955e test for AES_encrypt and fall back to sha256 2014-02-19 15:22:31 +11:00
Mark Andrews 0a5927a14f add 3rd 2014-02-19 13:33:24 +11:00
Mark Andrews 08d4b8d120 update SIT description 2014-02-19 13:15:40 +11:00
Evan Hunt 96a3590505 [master] edit 2014-02-18 17:59:43 -08:00
Mark Andrews b5f6271f4d 3744. [experimental] SIT: send and process Source Identity Tokens
(which are similar to DNS Cookies by Donald Eastlake)
                        and are designed to help clients detect off path
                        spoofed responses and for servers to detect legitimate
                        clients.

                        SIT use a experimental EDNS option code (65001).

                        SIT can be enabled via --enable-developer or
                        --enable-sit.  It is on by default in Windows.

                        RRL processing as been updated to know about SIT with
                        legitimate clients not being rate limited. [RT #35389]
2014-02-19 12:53:42 +11:00