ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
22,041 Commits 589 Branches 805 Tags
afa6d50cfef774606f8fd6dab8b2a647d3ccc8fb
Commit Graph
2548 Commits
Author SHA1 Message Date
Mark Andrews caac342072 add @ISC_OPENSSL_LIBS@ 2014-02-21 00:35:22 +11:00
Mark Andrews 16134801ce 3750. [experimental] Partially implement EDNS EXPIRE option as described 
in draft-andrews-dnsext-expire-00.  Retrivial of
                        remaining time to expiry from slave zones is supported.

                        EXPIRE uses an experimental option code (65002) and
                        is subject to change. [RT #35416]
 2014-02-20 14:56:20 +11:00
Mark Andrews 86a85a3bbd don't error on rpz percentage checks as they fail inconsistently on virtual machines 2014-02-20 12:22:14 +11:00
Mark Andrews e676a59686 update copyrights 2014-02-20 10:53:11 +11:00
Mark Andrews 7e2e41df67 3748. [func] Use delve to test dns_client interfaces. [RT #35383] 2014-02-19 19:33:21 +11:00
Evan Hunt 35f6a21f5f [master] max-zone-ttl 
3746.	[func]		New "max-zone-ttl" option enforces maximum
			TTLs for zones. If loading a zone containing a
			higher TTL, the load fails. DDNS updates with
			higher TTLs are accepted but the TTL is truncated.
			(Note: Currently supported for master zones only;
			inline-signing slaves will be added.) [RT #38405]
 2014-02-18 23:26:50 -08:00
Mark Andrews b5f6271f4d 3744. [experimental] SIT: send and process Source Identity Tokens 
(which are similar to DNS Cookies by Donald Eastlake)
                        and are designed to help clients detect off path
                        spoofed responses and for servers to detect legitimate
                        clients.

                        SIT use a experimental EDNS option code (65001).

                        SIT can be enabled via --enable-developer or
                        --enable-sit.  It is on by default in Windows.

                        RRL processing as been updated to know about SIT with
                        legitimate clients not being rate limited. [RT #35389]
 2014-02-19 12:53:42 +11:00
Tinderbox User 3fd910dec5 update copyright notice 2014-02-17 23:46:29 +00:00
Evan Hunt 5efcb3a3e2 [master] fix test errors 
- require 5.006_001
- cut off the least significant figures of rrsig dates before
  comparison to avoid integer overflow
 2014-02-17 08:40:02 -08:00
Evan Hunt 7ba88e2a95 [master] fix dnssec test errors 2014-02-16 14:14:56 -08:00
Evan Hunt 72fd845d5a [master] remove accidentally committed changes 2014-02-16 13:59:19 -08:00
Evan Hunt 792915beb0 [master] fix accidental dig breakage 2014-02-16 13:42:42 -08:00
Mark Andrews 2729aea3c1 3738. [bug] --enable-openssl-hash failed to build. [RT #35343] 2014-02-13 15:09:08 +11:00
Evan Hunt dbb012765c [master] merge libiscpk11 to libisc 
3735.	[cleanup]	Merged the libiscpk11 library into libisc
			to simplify dependencies. [RT #35205]
 2014-02-11 21:20:28 -08:00
Mark Andrews 6b66ee9147 define and use BACKTRACECFLAGS 2014-02-12 09:07:54 +11:00
Tinderbox User 6874b16e4a update copyright notice 2014-02-10 23:46:26 +00:00
Mark Andrews d7729155df 3734. [bug] Improve building with libtool. [RT #35314] 2014-02-10 15:01:06 +11:00
Tinderbox User 81f58902eb update copyright notice 2014-02-07 23:46:39 +00:00
Mark Andrews 2870ee1fe5 use exit 255 2014-02-08 09:43:16 +11:00
Mark Andrews 0584ab7e9c #include <isc/util.h> 2014-02-07 16:46:11 +11:00
Evan Hunt 7983f6f77a [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2014-02-06 19:41:48 -08:00
Evan Hunt 166341d554 [master] add no-case-compress 
3731.	[func]		Added a "no-case-compress" ACL, which causes
			named to use case-insensitive compression
			(disabling change #3645) for specified
			clients. (This is useful when dealing
			with broken client implementations that
			use case-sensitive name comparisons,
			rejecting responses that fail to match the
			capitalization of the query that was sent.)
			[RT #35300]
 2014-02-06 19:37:26 -08:00
Mark Andrews a928b54fa9 silence unused parameter 2014-02-07 11:47:32 +11:00
Evan Hunt dd19c1a352 [master] report T_SKIPPED from t_dst 2014-02-06 16:21:38 -08:00
Evan Hunt a165a17a81 [master] dnssec-keygen fixes 
3730.	[cleanup]	Added "never" as a synonym for "none" when
			configuring key event dates in the dnssec tools.
			[RT #35277]

3729.	[bug]		dnssec-kegeyn could set the publication date
			incorrectly when only the activation date was
			specified on the command line. [RT #35278]
 2014-02-06 15:59:14 -08:00
Tinderbox User 7fa75f8e0e update copyright notice 2014-02-06 23:46:25 +00:00
Tinderbox User 0666e6db54 update copyright notice 2014-01-31 23:46:22 +00:00
Evan Hunt 48def18179 [master] silence coverity warnings 
- remove dead code in server.c
- initialize a struct tm.c
 2014-01-31 09:34:37 -08:00
Evan Hunt d0803df331 [master] fixed geoip in blackhole ACLs 
3722.	[bug]		Using geoip ACLs in a blackhole statement
			could cause a segfault. [RT #35272]
 2014-01-30 17:03:32 -08:00
Tinderbox User 4734976943 update copyright notice 2014-01-30 23:46:20 +00:00
Tinderbox User 04b5785fde update copyright notice 2014-01-29 23:46:19 +00:00
Mark Andrews 63add83a26 3720. [bug] Address compiler warnings. [RT #35261] 2014-01-30 10:33:28 +11:00
Mark Andrews 75d747e1c5 3719. [bug] Address memory leak in in peer.c. [RT #35255] 2014-01-30 07:54:52 +11:00
Mark Andrews 61932ed917 copyright cleanups 2014-01-29 14:05:46 +11:00
Tinderbox User aa7b16ec2a update copyright notice 2014-01-21 23:46:16 +00:00
Evan Hunt d58e33bfab [master] testcrypto.sh in system tests 
3714.	[test]		System tests that need to test for cryptography
			support before running can now use a common
			"testcrypto.sh" script to do so. [RT #35213]
 2014-01-20 16:08:09 -08:00
Evan Hunt e45d0508c3 [master] skip unnecesary also-notify data 
3713.	[bug]		Save memory by not storing "also-notify" addresses
			in zone objects that are configured not to send
			notify requests. [RT #35195]
 2014-01-20 15:53:51 -08:00
Tinderbox User dfd5f3b388 update copyright notice 2014-01-18 23:46:13 +00:00
Evan Hunt 12bf5d4796 [master] address several issues with native pkcs11 2014-01-18 11:51:07 -08:00
Tinderbox User c0682c2367 update copyright notice 2014-01-17 23:46:32 +00:00
Francis Dupont e02659b241 applied emacs filled-paragraph (ESC-q) to reindent SUBDIRS 2014-01-17 14:14:30 +01:00
Tinderbox User 1633aead67 update copyright notice 2014-01-16 23:46:28 +00:00
Mark Andrews db8938c993 3710. [bug] Address double dns_zone_detach when switching to 
using automatic empty zones from regular zones.
                        [RT #35177]
 2014-01-17 10:04:16 +11:00
Evan Hunt 5760095601 [master] skip xfer test with Net::DNS 0.73 2014-01-16 09:50:23 -08:00
Evan Hunt eb94c78be4 [master] atomic test doesn't need libdns 2014-01-16 09:24:44 -08:00
Francis Dupont 6080262ffe add iscpk11 dep in lwresd system test 2014-01-16 16:06:04 +01:00
Francis Dupont e2258edfef libtoolized pkcs11 Makefile.in files 2014-01-16 10:35:24 +01:00
Mark Andrews e20788e121 update copyrights 2014-01-16 15:19:24 +11:00
Mark Andrews 75e5062bc5 #include <isc/print.h> 2014-01-15 12:30:50 +11:00
Tinderbox User bf0266f286 update copyright notice 2014-01-14 23:46:22 +00:00