ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
18,471 Commits 589 Branches 805 Tags
b05158a67dda8545f9d956edcd2fbbf520896d20
Commit Graph
1843 Commits
Author SHA1 Message Date
Mark Andrews b05158a67d 3051. [bug] NS records obsure DS records at the bottom of the 
zone if both are present. [RT #23035]
 2011-03-02 04:30:53 +00:00
Mark Andrews 5b4db46db2 3050. [bug] The autosign system test was timing dependent. 
Wait for the initial autosigning to complete
                        before running the rest of the test. [RT #23035]
 2011-03-02 04:13:02 +00:00
Mark Andrews fc7e537b45 3048. [bug] Fully seperate view key mangement. [RT #23419] 2011-03-01 23:22:42 +00:00
Scott Mann a8ab505429 Fixed DNSKEY NODATA responses not cached and added tests [RT #22908]. 2011-03-01 16:47:13 +00:00
Automatic Updater cf5edf83ec update copyright notice 2011-02-28 23:46:34 +00:00
Francis Dupont fcf1934be8 Use RRSIG original TTL in validated RRset TTL [RT #23332] 2011-02-28 14:28:01 +00:00
Automatic Updater 0f1c24fec6 update copyright notice 2011-02-28 01:19:28 +00:00
Mark Andrews 4e3697a06e 3041. [bug] dnssec-signzone failed to generate new signatures on 
ttl changes. [RT #23330]
 2011-02-24 03:14:37 +00:00
Mark Andrews d1828d831e 3040. [bug] Named failed to validate insecure zones where a node 
with a CNAME existed between the trust anchor and the
                        top of the zone. [RT #23338]
 2011-02-23 12:08:40 +00:00
Mark Andrews e009a9de75 2036. [bug] Check built-in zone arguments to see if the zone 
is re-usable or not. [RT #21914]
 2011-02-22 04:30:46 +00:00
Automatic Updater 1b2692a5b9 update copyright notice 2011-02-15 23:46:54 +00:00
Mark Andrews 9e1b196510 3020. [bug] auto-dnssec failed to correctly update the zone when 
changing the DNSKEY RRset. [RT #23232]
 2011-02-15 22:09:36 +00:00
Mark Andrews 7734aca6a1 3019. [func] Test: check apex NSEC3 records after adding DNSKEY 
record via UPDATE. [RT #23229]
 2011-02-15 00:03:03 +00:00
Automatic Updater 0321a1fd00 update copyright notice 2011-02-08 23:09:24 +00:00
Mark Andrews 5bf955196b Regression test for: 
3018.   [bug]           Named failed to check for the "none;" acl when deciding
                        if a zone may need to be re-signed. [RT #23120]
 2011-02-08 04:06:54 +00:00
Automatic Updater 8ce32752e6 update copyright notice 2011-02-03 12:17:23 +00:00
Mark Andrews 94d633f808 3012. [bug] Remove DNSKEY TTL change pairs before generating 
signing records for any remaining DNSKEY changes.
                        [RT #22590]
 2011-02-03 06:25:58 +00:00
Automatic Updater bdea0ea015 update copyright notice 2011-01-14 00:51:07 +00:00
Mark Andrews 03fbf41ea8 silence: warning: format not a string literal and no format arguments 2011-01-14 00:43:43 +00:00
Evan Hunt a8c55a41d5 Added files to clean.sh scripts that have been left around after tests run. 
Skipping the ticket/review steps because the change is trivial.
 2010-12-18 02:15:17 +00:00
Evan Hunt 23ae36911c 2985. [bug] Add a regression test for change #2896. [RT #21324] 2010-12-15 18:44:16 +00:00
Mark Andrews 93b433d299 2982. [bug] Reference count dst keys. dst_key_attach() can be used 
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
 2010-12-09 01:05:29 +00:00
Automatic Updater 39ba8c7737 update copyright notice 2010-12-07 23:46:26 +00:00
Mark Andrews e69bed0b94 2980. [bug] named didn't properly handle UPDATES that changed the 
TTL of the NSEC3PARAM RRset. [RT #22363]
 2010-12-07 03:01:40 +00:00
Mark Andrews a4aef00d65 2977. [bug] 'nsupdate -l' report if the session key is missing. 
[RT #21670]
 2010-12-03 00:39:46 +00:00
Automatic Updater 1517558cd3 update copyright notice 2010-12-02 23:46:30 +00:00
Mark Andrews e7ca8c91ec 2976. [bug] named die on exit after negotiating a GSS-TSIG key. 
[RT #3415]
 2010-12-02 23:26:58 +00:00
Automatic Updater 14f8d8220c update copyright notice 2010-11-30 23:46:15 +00:00
Evan Hunt f72883c6ae 2974. [bug] Some vaild UPDATE requests could fail due to a 
consistency check examining the existing version
			of the zone rather than the new version resulting
			from the UPDATE. [RT #22413]
 2010-11-30 02:27:38 +00:00
Automatic Updater 97c708294d update copyright notice 2010-11-17 23:46:32 +00:00
Mark Andrews 8f110ca521 2970. [security] Adding a NO DATA negative cache entry failed to clear 
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
 2010-11-16 07:28:37 +00:00
Shawn Routhier 75636f9b01 Fix acl type processing so that allow-query works in options and view 
statements.  Also add a new set of tests to verify proper functioning.
[RT #22418]
 2010-11-16 02:11:53 +00:00
Mark Andrews 8bdc865433 2968. [security] Named could fail to prove a data set was insecure 
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]
 2010-11-16 01:21:49 +00:00
Mark Andrews 49f7dba060 silence 'Null terminator in string initializer ignored.' warning 2010-10-04 22:25:25 +00:00
Automatic Updater fd56caffe6 update copyright notice 2010-09-29 23:46:44 +00:00
Mark Andrews f225d11b53 #include <isc/print.h> 2010-09-29 04:29:16 +00:00
Mark Andrews affc5a912e 2965. [func] Test HMAC functions using test data from RFC 2104 and 
RFC 4634. [RT #21702]
 2010-09-29 04:07:10 +00:00
Mark Andrews 0a2897853b 2963. [security] The allow-query acl was being applied instead of the 
allow-query-cache acl to cache lookups. [RT #22114]
 2010-09-24 05:54:06 +00:00
Mark Andrews 9960be0a54 simplify grep 2010-09-15 23:23:22 +00:00
Evan Hunt b1a6907e81 The "resolver" test was failing on systems with old versions of "grep". 2010-09-15 15:45:16 +00:00
Automatic Updater 6d7a4c30a2 update copyright notice 2010-09-15 12:38:04 +00:00
Mark Andrews 3f9371b30c 2960. [func] Check that named accepts non-authoritative answers. 
[RT #21594]
 2010-09-15 12:10:54 +00:00
Mark Andrews 311f97e2d4 2959. [func] Check that named starts with a missing masterfile. 
[RT #22076]

2958.   [bug]           named failed to start with a missing master file.
                        [RT #22076]
 2010-09-15 03:36:41 +00:00
Mark Andrews 1cbe92ed8c 2951. [bug] named failed to generate a correct signed response 
in a optout, delegation only zone with no secure
                        delegations. [RT #22007]
 2010-09-07 01:05:59 +00:00
Automatic Updater 63b93f0682 update copyright notice 2010-08-17 23:46:28 +00:00
Mark Andrews 82580033db update default id range to match that used (1..7) 2010-08-17 04:08:07 +00:00
Mark Andrews 30579c29be 2943. [func] Add support to load new keys into managed zones 
without signing immediately with "rndc loadkeys".
                        Add support to link keys with "dnssec-keygen -S"
                        and "dnssec-settime -S".  [RT #21351]
 2010-08-16 22:27:18 +00:00
Mark Andrews ff2047b685 2941. [bug] sdb and sdlz (dlz's zone database) failed to support 
DNAME at the zone apex.  [RT #21610]
 2010-08-16 05:14:58 +00:00
Automatic Updater 770279e013 update copyright notice 2010-08-13 23:46:29 +00:00
Mark Andrews 71e5c19636 2938. [bug] When generating signed responses, from a signed zone 
that uses NSEC3, named would use a uninitialised
                        pointer if it needed to skip a NSEC3 record because
                        it didn't match the selected NSEC3PARAM record for
                        zone. [RT# 21868]
 2010-08-13 07:00:40 +00:00