Evan Hunt
38e0fc106e
[v9_10] update pkcs11 headers
...
4353. [cleanup] Update PKCS#11 header files. [RT #42175 ]
2016-05-04 16:06:51 -07:00
Evan Hunt
01badd28ba
[v9_10] fixed revoked key regression
...
4436. [bug] Fixed a regression introduced in change #4337 which
caused signed domains with revoked KSKs to fail
validation. [RT #42147 ]
2016-04-14 18:53:54 -07:00
Evan Hunt
c443b6d0e1
[v9_10] prep 9.10.4rc1
2016-04-13 16:09:08 -07:00
Tinderbox User
34d112b3da
update copyright notice / whitespace
2016-04-05 23:45:34 +00:00
Mark Andrews
763e6386e0
4344. [port] Address openssl version differences. [RT #42059 ]
2016-04-06 04:32:55 +10:00
Mark Andrews
5ff9fb2299
attempt to create a node at the flushtree name
...
(cherry picked from commit dd185fb371 )
2016-03-27 08:26:03 +11:00
Evan Hunt
8f6dc230d0
[v9_10] prep 9.10.4b3
2016-03-24 12:41:57 -07:00
Evan Hunt
e8fd60b02d
[v9_10] fix unit test
2016-03-24 10:32:22 -07:00
Evan Hunt
a95ec4fb11
[v9_10] fix ECS family 0 handling
...
4341. [bug] Correct the handling of ECS options with
address family 0. [RT #41377 ]
2016-03-23 19:04:04 -07:00
Mark Andrews
4c981c3bf7
4341. [bug] 'rndc flushtree' could fail to clean the tree if there
...
wasn't a node at the specified name. [RT #41846 ]
(cherry picked from commit 6214c3c93a )
2016-03-24 11:32:52 +11:00
Evan Hunt
4d8742e668
[v9_10] remove obsolete unit test
2016-03-22 17:46:16 -07:00
Tinderbox User
2a28287aa7
update copyright notice / whitespace
2016-03-22 23:45:30 +00:00
Mark Andrews
57564eff5f
4338. [bug] Reimplement change 4324 as it wasn't properly doing
...
all the required book keeping. [RT #41941 ]
(cherry picked from commit 558278974e )
2016-03-23 10:39:02 +11:00
Evan Hunt
c82e4d2379
[v9_10] fix mkeys TTL 0 issue
...
4337. [bug] The previous change exposed a latent flaw in
key refresh queries for managed-keys when
a cached DNSKEY had TTL 0. [RT #41986 ]
2016-03-22 12:13:25 -07:00
Tinderbox User
9861d0b5c6
update copyright notice / whitespace
2016-03-21 23:45:41 +00:00
Mark Andrews
b7e6ee04a7
4336. [bug] Don't emit records with zero ttl unless the records
...
were learnt with a zero ttl. [RT #41687 ]
(cherry picked from commit 0993cd5f22 )
2016-03-21 13:24:55 +11:00
Mark Andrews
21c7ebce7d
4335. [bug] zone->view could be detached too early. [RT #41942 ]
...
(cherry picked from commit b8dcc13bc5 )
2016-03-21 13:03:19 +11:00
Tinderbox User
2995f694f2
update copyright notice / whitespace
2016-03-11 23:45:45 +00:00
Mark Andrews
8a51afbac5
4333. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42 and
...
2001:500:9f::42.
(cherry picked from commit 1add4a7939 )
2016-03-11 20:41:26 +11:00
Mark Andrews
35fed7be8c
9.10.4b2
2016-03-11 12:36:06 +11:00
Mark Andrews
3578e664e3
4331. [func] When loading managed signed zones detect if the
...
RRSIG's inception time is in the future and regenerate
the RRSIG immediately. [RT #41808 ]
(cherry picked from commit 7c52595464 )
2016-03-11 12:17:02 +11:00
Tinderbox User
48c13be6d9
update copyright notice / whitespace
2016-03-10 23:45:32 +00:00
Mark Andrews
9f8d166497
4330. [protocol] Identify the PAD option as "PAD" when printing out
...
a message.
(cherry picked from commit 33a4294f44 )
2016-03-10 16:54:08 +11:00
Mark Andrews
37a931d774
silence compiler warning
2016-03-09 14:43:27 +11:00
Mark Andrews
632f984881
silence compiler warning
...
(cherry picked from commit 0e5c8a65a2 )
2016-03-09 12:38:05 +11:00
Mark Andrews
13a95c3775
update copyrights
2016-03-08 16:20:10 +11:00
Mark Andrews
ff813ea134
add dns_name_isrfc1918 and dns_name_isula
...
(cherry picked from commit 56d1de40e4 )
2016-03-08 12:00:39 +11:00
Mark Andrews
b712215fcb
9.10.4b1
2016-03-08 11:53:41 +11:00
Mark Andrews
274ea210b0
sync w/ 9.10.3-P4
2016-03-08 11:34:15 +11:00
Tinderbox User
b45473686c
update copyright notice / whitespace
2016-03-07 23:45:44 +00:00
Mark Andrews
b8341f294c
4329. [func] Warn about a common misconfiguration when forwarding
...
RFC 1918 zones. [RT #41441 ]
2016-03-08 10:11:56 +11:00
Mukund Sivaraman
2a461f1348
Repack dns_rbtnode struct to gain some space (reduce packing holes) ( #41854 )
...
(cherry picked from commit 8dbf9ceb8c )
2016-03-07 16:16:32 +05:30
Mukund Sivaraman
19afa0cc8f
Fix rbt_remove_empty unittest
...
(reviewed by Evan on Jabber)
(cherry picked from commit f5cb0dd58b )
2016-03-05 13:55:10 +05:30
Tinderbox User
736b0ac1c8
update copyright notice / whitespace
2016-03-04 23:45:45 +00:00
Mukund Sivaraman
09b9ffc029
Revert DEFAULT_NODE_LOCK_COUNT back to 7 ( #40997 )
2016-03-04 16:30:33 +05:30
Mukund Sivaraman
1cbbc0bde6
Include missing isc/print.h
2016-03-04 14:56:58 +05:30
Mukund Sivaraman
491a5a2a3c
Check if threads support is available
...
(cherry picked from commit 2457a4b245 )
2016-03-04 14:06:32 +05:30
Mukund Sivaraman
cb93542612
Use libisc thread functions
...
(cherry picked from commit 051197362b )
2016-03-04 14:00:26 +05:30
Mukund Sivaraman
d820e8ff8a
Add dns_name_fromwire() benchmark
...
(cherry picked from commit 59328c7674 )
2016-03-04 13:47:31 +05:30
Mukund Sivaraman
666fa20ef3
Log query and depth counters during fetches when querytrace is enabled ( #41787 )
...
(cherry picked from commit 275265ab27 )
2016-03-04 13:26:33 +05:30
Mark Andrews
d489cf8fd7
4326. [protocol] Add support for AVC. [RT #41819
...
(cherry picked from commit 8398f00156 )
2016-03-04 18:14:04 +11:00
Mukund Sivaraman
b15dde2889
Code cleanups ( #41656 )
...
(cherry picked from commit 9da98335c1 )
2016-03-04 12:23:32 +05:30
Evan Hunt
db06cd726c
[v9_10] recursively clean empty interior nodes when deleting database records
...
4324. [bug] When deleting records from a zone database, interior
nodes could be left empty but not deleted, damaging
search performance afterward. [RT #40997 ]
(cherry picked from commit 44c86318ed )
2016-03-03 21:15:21 -08:00
Mark Andrews
c08e4c3636
silence may be used when unset false positive
...
(cherry picked from commit c7aae79b62 )
2016-02-29 11:25:08 +11:00
Mark Andrews
e87b18eb8f
more sit -> cookie cleanups
2016-02-29 11:15:44 +11:00
Mark Andrews
499952eb45
Part 2 of:
...
4319. [security] Fix resolver assertion failure due to improper
DNAME handling when parsing fetch reply messages.
(CVE-2016-1286) [RT #41753 ]
(cherry picked from commit 2de89ee9de )
2016-02-29 07:17:31 +11:00
Mark Andrews
7cd300abd6
4322. [security] Duplicate EDNS COOKIE options in a response could
...
trigger an assertion failure. (CVE-2016-2088)
[RT #41809 ]
(cherry picked from commit 455c0848f8 )
2016-02-27 11:46:16 +11:00
Mark Andrews
f0eb27c402
4321. [bug] Zones using mapped files containing out-of-zone data
...
could return SERVFAIL instead of the expected NODATA
or NXDOMAIN results. [RT #41596 ]
(cherry picked from commit f9da4a8e54 )
2016-02-24 11:25:04 +11:00
Mukund Sivaraman
456e1eadd2
Fix resolver assertion failure due to improper DNAME handling (CVE-2016-1286) ( #41753 )
...
(cherry picked from commit 5995fec51c )
2016-02-22 12:24:15 +05:30
Mark Andrews
849e9d6dce
4317. [bug] Age all unused servers on fetch timeout. [RT #41597 ]
...
(cherry picked from commit d372f426ca )
2016-02-12 12:34:49 +11:00