Mark Andrews
52254f7526
added -T keepstderr to keep stderr open when daemonizing [RT #43736 ]
...
(cherry picked from commit c9ee977f31 )
2016-12-05 10:38:50 +11:00
Evan Hunt
1c89e89eaf
[v9_11] log as error if entropy unavailable
...
4521. [cleanup] Log it as an error if an entropy source is not
found and there is no fallback available. [RT #43659 ]
(cherry picked from commit 6bdb70057d )
2016-11-29 11:30:47 -08:00
Tinderbox User
45571e7374
regen v9_11
2016-11-03 01:12:32 +00:00
Mark Andrews
744c1db635
4504. [security] Allow the maximum number of records in a zone to
...
be specified. This provides a control for issues
raised in CVE-2016-6170. [RT #42143 ]
(cherry picked from commit 5f8412a4cb )
2016-11-03 09:48:26 +11:00
Evan Hunt
8a5809527e
[v9_11] make uninstall
...
4503. [cleanup] "make uninstall" now removes file installed by
BIND. (This currently excludes Python files
due to lack of support in setup.py.) [RT #42912 ]
(cherry picked from commit 6087f87afb )
2016-11-01 19:17:23 -07:00
Mark Andrews
fd44151797
check for LIBRESSL_VERSION_NUMBER
...
(cherry picked from commit b2c1d6f0a2 )
2016-11-01 12:49:13 +11:00
Mark Andrews
76af83c9ad
4497. [port] Add support for OpenSSL 1.1.0. [RT #41284 ]
...
(cherry picked from commit 1fce0951ed )
2016-10-31 10:05:55 +11:00
Mark Andrews
54ee0b0eef
s/,/;/
...
(cherry picked from commit 856c77cc40 )
2016-10-26 22:38:50 +11:00
Witold Krecicki
cc51cd2d20
4487. [test] Make system tests work on Windows. [RT #42931 ]
2016-10-19 17:21:13 +02:00
Tinderbox User
17697000bc
regen v9_11
2016-10-16 01:10:31 +00:00
Mark Andrews
2e0d02503c
add managed keys to view section
...
(cherry picked from commit 7551ec1ebe )
2016-10-16 08:15:36 +11:00
Evan Hunt
94694e720a
[v9_11] add cfg_parse_buffer3() function with linenum parameter
...
4482. [cleanup] Change #4455 was incomplete. [RT #43252 ]
(cherry picked from commit 676ac3cc82 )
2016-10-10 17:12:30 -07:00
Mark Andrews
9ee66e3a5b
4472. [bug] Named could fail to find the correct NSEC3 records when
...
a zone was update between looking for the answer and
looking for the NSEC3 records proving non-existance
of the answer. [RT #43247 ]
2016-10-05 10:37:17 +11:00
Evan Hunt
fcadf0b320
[v9_11] render querylog format consistent, and add a release note
...
4471. [cleanup] Render client/query logging format consistent for
ease of log file parsing. (Note that this affects
"querylog" format: there is now an additional field
indicating the client object address.) [RT #43238 ]
(cherry picked from commit c4b7db4932 )
2016-09-22 14:49:26 -07:00
Mark Andrews
db9781d4a2
4468. [bug] Address ECS option handling issues. [RT #43191 ]
...
(cherry picked from commit df17290113 )
2016-09-14 08:23:07 +10:00
Mark Andrews
48ec547968
4465. [bug] Don't use "%z" as Windows doesn't support it.
...
[RT #43131 ]
(cherry picked from commit f1977af0d3 )
2016-09-08 14:17:32 +10:00
Mark Andrews
e51ba26500
4461. [bug] win32: not all external data was properly marked
...
as external data for windows dll. [RT #43161 ]
(cherry picked from commit 8eceb0bffe )
2016-09-07 14:14:40 +10:00
Evan Hunt
af326c2e3f
[v9_11] fix tcp client memory leak
...
4459. [bug] TCP client objects created to handle pipeline queries
were not cleaned up correctly, causing uncontrolled
memory growth. [RT #43106 ]
(cherry picked from commit a26a62cef2 )
2016-08-29 11:56:56 -07:00
Mark Andrews
d6fa26d0ad
4456. [doc] Add DOCTYPE and lang attribute to <html> tags.
...
[RT #42587 ]
(cherry picked from commit 63fe88e8d8 )
2016-08-26 15:14:32 +10:00
Evan Hunt
f503aa345b
[v9_11] pass source file and line to dyndb load function
...
4455. [cleanup] Allow dyndb modules to correctly log the filename
and line number when processing configuration text
from named.conf. [RT #43050 ]
(cherry picked from commit 02fb764681 )
2016-08-25 18:09:45 -07:00
Mark Andrews
7df3f06c0b
4454. [bug] 'rndc dnstap -reopen' had a race issue. [RT #43089 ]
...
(cherry picked from commit 726cddb564 )
2016-08-25 10:05:07 +10:00
Evan Hunt
32431c79c7
[master] fix dnstap query/response selectors
...
4427. [bug] The "query" and "response" parameters to the
"dnstap" option had their functions reversed.
(cherry picked from commit e9bd1496ed )
2016-08-19 11:41:07 +10:00
Tinderbox User
281ed127e3
regen v9_11
2016-08-19 01:08:24 +00:00
Mark Andrews
c40906dfad
4450. [port] Provide more nuanced HSM support which better matches
...
the specific PKCS11 providers capabilities. [RT #42458 ]
(cherry picked from commit 8ee6f289d8 )
2016-08-19 08:05:47 +10:00
Mark Andrews
7204d08a31
4447. [tuning] Allow the fstrm_iothr_init() options to be set using
...
named.conf to control how dnstap manages the data
flow. [RT #42974 ]
(cherry picked from commit 934837913f )
2016-08-18 11:16:58 +10:00
Tinderbox User
0cfa9af7ed
regen v9_11
2016-08-12 01:08:44 +00:00
Mark Andrews
2fb6d3782b
4437. [func] Minimal-responses now has two additional modes
...
no-auth and no-auth-recursive which suppress
adding the NS records to the authority section
as well as the associated address records for the
nameservers. [RT #42005 ]
(cherry picked from commit 78e31dd187 )
2016-08-12 10:49:57 +10:00
Mark Andrews
36be0aad8e
4435. [tuning] Only set IPV6_USE_MIN_MTU for UDP when the message
...
will not fit into a single IPv4 encapsulated IPv6
UDP packet when transmitted over a Ethernet link.
[RT #42871 ]
(cherry picked from commit 31ffec1541 )
2016-08-12 09:43:55 +10:00
Mark Andrews
33f91e248b
4434. [protocol] Return EDNS EXPIRE option for master zones in addition
...
to slave zones. [RT #43008 ]
(cherry picked from commit bf2238b064 )
2016-08-12 09:32:29 +10:00
Evan Hunt
51227d6f16
[v9_11] error on bad parameter to 'rndc dumpdb'
...
4433. [cleanup] Report an error when passing an invalid option or
view name to "rndc dumpdb". [RT #42958 ]
(cherry picked from commit c38d989fdd )
2016-08-11 16:04:38 -07:00
Mark Andrews
080582dc47
4430. [bug] Lwresd died if a search list was not defined.
...
Found by 0x710DDDD At Alibaba Security. [RT #42895 ]
(cherry picked from commit 3146be6fd6 )
2016-08-08 10:23:22 +10:00
Mark Andrews
3a71cd8ca3
4429. [bug] Address potential use after free on fclose() error.
...
[RT #42976 ]
(cherry picked from commit c1915935cf )
2016-08-08 09:51:13 +10:00
Witold Krecicki
a23f742c3d
Remove spurious isc_stdio_open
2016-07-28 14:26:36 +02:00
Witold Krecicki
ba340e4469
4426. [bug] Addressed Coverity warnings. [RT #42908 ]
2016-07-27 15:45:58 +02:00
Mark Andrews
b7161f9898
4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
...
to provide feedback to the trust-anchor administrators
about how key rollovers are progressing as per
draft-ietf-dnsop-edns-key-tag-02. This can be
disabled using 'trust-anchor-telemetry no;'.
[RT #40583 ]
(cherry picked from commit f20179857a )
2016-07-22 20:03:06 +10:00
Tinderbox User
adb0ac475d
update copyright notice / whitespace
2016-07-21 23:46:46 +00:00
Evan Hunt
801707fe19
[v9_11] store "addzone" zone config in a NZD database
...
4421. [func] When built with LMDB (Lightning Memory-mapped
Database), named will now use a database to store
the configuration for zones added by "rndc addzone"
instead of using a flat NZF file. This improves
performance of "rndc delzone" and "rndc modzone"
significantly. Existing NZF files will
automatically by converted to NZD databases.
To view the contents of an NZD or to roll back to
NZF format, use "named-nzd2nzf". To disable
this feature, use "configure --without-lmdb".
[RT #39837 ]
2016-07-21 11:14:16 -07:00
Tinderbox User
5347c0fcb0
regen v9_11
2016-07-21 07:53:18 +00:00
Mark Andrews
704e6c8876
copyright
...
(cherry picked from commit 813e9f7ee2 )
2016-07-21 17:02:22 +10:00
Mark Andrews
111ec860a8
Visual Studio 2005 doesn't like named elements, construct addr using isc_netaddr_fromin6
...
(cherry picked from commit d937f8e999 )
2016-07-14 11:31:01 +10:00
Mark Andrews
1ac74a984d
Windows doesn't like LLU use ULL instead
...
(cherry picked from commit 6b5d6472cdbdb57ee7d8247d85f07c42fb347663)
2016-07-14 11:13:56 +10:00
Mukund Sivaraman
2d5581de6e
Make fixes for GCC 6 ( #42721 )
...
(cherry picked from commit 4116177ac4 )
2016-07-13 13:56:22 +05:30
Evan Hunt
3525200d9f
[v9_11] rndc dnstap -roll
...
4411. [func] "rndc dnstap -roll" automatically rolls the
dnstap output file; the previous version is
saved with ".0" suffix, and earlier versions
with ".1" and so on. An optional numeric argument
indicates how many prior files to save. [RT #42830 ]
2016-07-13 01:18:41 -07:00
Mark Andrews
28303a06ce
4410. [bug] Address use after free and memory leak with dnstap.
...
[RT #42746 ]
(cherry picked from commit a2101037d9 )
2016-07-13 16:56:53 +10:00
Mark Andrews
35c014cb1d
4408. [func] Continue waiting for expected response when we the
...
response we get does not match the request. [RT #41026 ]
(cherry picked from commit ec5e01747a )
2016-07-12 11:33:49 +10:00
Tinderbox User
ebb8a69f33
update copyright notice / whitespace
2016-07-11 23:47:19 +00:00
Mark Andrews
4d8940486c
4409. [bug] DNS64 should exlude mapped addresses by default when
...
a exclude acl is not defined. [RT #42810 ]
(cherry picked from commit 557c7221fd )
2016-07-11 14:12:42 +10:00
Mark Andrews
f555b59e36
4406. [bug] getrrsetbyname with a non absolute name could
...
trigger a infinite recursion bug in lwresd
and named with lwres configured if when combined
with a search list entry the resulting name is
too long. [RT #42694 ]
(cherry picked from commit 38cc2d14e2 )
2016-07-07 13:50:38 +10:00
Tinderbox User
33d0a7767d
regen master
2016-06-27 05:29:38 +00:00
Mark Andrews
0c27b3fe77
4401. [misc] Change LICENSE to MPL 2.0.
2016-06-27 14:56:38 +10:00