Commit Graph

3413 Commits

Author SHA1 Message Date
Mark Andrews
b498959ce2 properly test for yaml 2017-12-22 21:54:18 +11:00
Mark Andrews
b089df4f84 save why ydump.py failed
(cherry picked from commit f5d429e7c3)
2017-12-22 16:03:47 +11:00
Tinderbox User
2b9f526504 update copyright notice / whitespace 2017-12-20 23:47:04 +00:00
Mark Andrews
534057c9f9 4849. [bug] Duplicate zones could appear in the .nzf file if
addzone failed. [RT #46435]

(cherry picked from commit 2d7f89b9c7)
(cherry picked from commit 22a32060c1)
2017-12-20 17:16:49 +11:00
Mark Andrews
d1862fe530 test for key != NULL on error path
(cherry picked from commit 9bad78cbc2)
2017-12-13 15:13:18 +11:00
Mark Andrews
0f14b04132 4846. [test] Adjust timing values in runtime system test. Address
named.pid removal races in runtime system test.
                        [RT #46800]

(cherry picked from commit c67180f09b)
2017-12-13 10:26:58 +11:00
Mark Andrews
897d49e929 increment test number
(cherry picked from commit e5c2cfdbf9)
2017-12-08 14:50:46 +11:00
Mark Andrews
a5a1cbece4 4841. [bug] Address -fsanitize=undefined warnings. [RT #46786]
(cherry picked from commit 9d5a0abe81)
2017-12-06 21:02:24 +11:00
Mark Andrews
0d6328ce5f 4840. [test] Add tests to cover fallback to using ZSK on inactive
KSK. [RT #46787]

(cherry picked from commit 32d09cd7e0)
2017-12-06 20:38:26 +11:00
Curtis Blackburn
e5f0db4734 clarify "stage 1" and "stage 2" in autosign test 2017-12-05 10:03:23 -08:00
Mark Andrews
15057131d5 set the DNSKEY deletion time to now+5 once we got all the zones into their initial state
(cherry picked from commit ecafa2ae50)
2017-12-05 21:42:38 +11:00
Mark Andrews
7f31784c52 use 9.11 and earlier syntax for dnssec-keygen 2017-12-05 20:43:15 +11:00
Mark Andrews
e01ef6f01c 4839. [bug] zone.c:zone_sign was not properly determining
if there were active KSK and ZSK keys for
                        a algorithm when update-check-ksk is true
                        (default) leaving records unsigned with one or
                        more DNSKEY algorithms. [RT #46774]

(cherry picked from commit 00f5ea91cf)
2017-12-05 16:11:53 +11:00
Evan Hunt
95d40c1e9d [v9_11] fix test descriptions 2017-12-04 15:49:13 -08:00
Tinderbox User
45c5f40361 update copyright notice / whitespace 2017-12-04 23:47:42 +00:00
Mark Andrews
677f507de7 4838. [bug] zone.c:add_sigs was not properly determining
if there were active KSK and ZSK keys for
                        a algorithm when update-check-ksk is true
                        (default) leaving records unsigned with one or
                        more DNSKEY algorithms. [RT #46754]

(cherry picked from commit 6fa2a0691e)
2017-12-05 09:32:50 +11:00
Tinderbox User
8e13601a1b update copyright notice / whitespace 2017-12-03 23:46:15 +00:00
Mark Andrews
bf459d24a1 4837. [bug] dns_update_signatures{inc} (add_sigs) was not
properly determining if there were active KSK and
                        ZSK keys for a algorithm when update-check-ksk is
                        true (default) leaving records unsigned. [RT #46743]

(cherry picked from commit 196e01da5f)
2017-12-04 10:04:58 +11:00
Tinderbox User
701e9f3149 update copyright notice / whitespace 2017-11-30 23:46:50 +00:00
Evan Hunt
f53e0bda46 [v9_11] fix "allow-transfer" inheritance and clean up ACL configuration
4836.	[bug]		Zones created using "rndc addzone" could
			temporarily fail to inherit an "allow-transfer"
			ACL that had been configured in the options
			statement. [RT #46603]

(cherry picked from commit e197a2bd15)
2017-11-30 12:56:39 -08:00
Ondřej Surý
c62d9ac65f [v9_11] Type the shifted values to isc_uint32_t so the top bit is unsigned (found by UBSAN) [RT #46740]
(cherry picked from commit a4a148cf9a)
2017-11-30 18:27:07 +01:00
Tinderbox User
4c713bf940 update copyright notice / whitespace 2017-11-27 23:47:09 +00:00
Michał Kępień
1de48eb1e3 [v9_11] Stabilize nsupdate system test [RT #46673]
(cherry picked from commit 00ff44c7c2)
2017-11-27 10:11:42 +01:00
Michał Kępień
2b6aa86915 [v9_11] Minor mkeys system test tweaks [RT #46649]
(cherry picked from commit 2f13e0ef98)
2017-11-27 10:05:15 +01:00
Tinderbox User
675d004f49 update copyright notice / whitespace 2017-11-21 23:46:04 +00:00
Michał Kępień
2d517e233f [v9_11] Refactor reclimit system test
4823.	[test]		Refactor reclimit system test to improve its
			reliability and speed. [RT #46632]

(cherry picked from commit 6035d557c4)
2017-11-21 10:33:08 +01:00
Tinderbox User
50a1afc1f4 update copyright notice / whitespace 2017-11-16 23:46:02 +00:00
Michał Kępień
c7e57ce1b0 [v9_11] Stabilize logfileconfig system test
4818.	[test]		The logfileconfig system test could intermittently
			report false negatives on some platforms. [RT #46615]

(cherry picked from commit 7a0188774f)
2017-11-16 08:09:43 +01:00
Mark Andrews
49d11094de set SAMPLEUPDATE under windows; test if SAMPLEUPDATE exists and only run tests if it does
(cherry picked from commit 9eb5aa40aa)
2017-11-11 09:25:30 +11:00
Michał Kępień
eeb919b6f5 [v9_11] Minor improvements to code handling managed keys
4812.	[bug]		Minor improvements to stability and consistency of code
			handling managed keys. [RT #46468]

(cherry picked from commit 312c84c73a)
2017-11-09 15:19:32 +01:00
Tinderbox User
ea4722c529 update copyright notice / whitespace 2017-11-08 23:46:04 +00:00
Michał Kępień
afb531d846 [v9_11] Do not NOTIFY back the master view from slave views in notify system test
This prevents a Linux kernel bug discussed in RT #32355 from being
triggered and thus makes "checking notify to multiple views using tsig"
stable.

(cherry picked from commit 27bf48327c)
2017-11-08 09:21:53 +01:00
Mark Andrews
a55438eda3 4810. [test] The chain system test failed if the IPv6 interfaces
were not configured. [RT #46508]

(cherry picked from commit c652213857)
2017-11-08 10:18:23 +11:00
Michał Kępień
69b5b7eaa7 [v9_11] Replace FNR with NR in the awk script used by nextpart()
awk on Solaris does not support the FNR variable.  As nextpart() only
reads from one file, replace FNR with NR.

(cherry picked from commit 37039792cb)
2017-11-02 06:50:52 +01:00
Michał Kępień
9009045ae9 [v9_11] Copy nextpart() from conf.sh.in to conf.sh.win32
(cherry picked from commit 41b1a98545)
2017-11-02 06:50:43 +01:00
Tinderbox User
9159c4c80c update copyright notice / whitespace 2017-10-31 23:46:45 +00:00
Mark Andrews
24231e53a5 4804. [port] win32: access() does not work on directories as
required by POSIX.  Supply a alternative in
                        isc_file_isdirwritable. [RT #46394]
2017-11-01 09:39:08 +11:00
Michał Kępień
4b669b69ba [v9_11] Backport fix for RT #46055 and mkeys system test improvements
4803.   [bug]		Backport parts of RT #45293 and RT #46267, specifically
			the fix for RT #46055 and mkeys system test
			improvements. [RT #46430]
2017-10-31 06:06:07 +01:00
Tinderbox User
e74fcbd492 update copyright notice / whitespace 2017-10-30 23:46:33 +00:00
Tinderbox User
49cb160c1d update copyright notice / whitespace 2017-10-29 23:46:34 +00:00
Evan Hunt
7354f3248d [v9_11] copyrights 2017-10-29 16:42:24 -07:00
Mark Andrews
9052766cc5 number test 2017-10-30 08:44:14 +11:00
Mark Andrews
43e2c588ba number tests 2017-10-30 08:39:45 +11:00
Mark Andrews
7382f51602 Add system tests and remove redundent logging from:
4801.   [func]          'dnssec-lookaside auto;' and 'dnssec-lookaside .
                        trust-anchor dlv.isc.org;' now elicit warnings rather
                        than being fatal configuration errors. [RT #46410]

(cherry picked from commit f5e1b555c5)
2017-10-30 08:12:59 +11:00
Tinderbox User
c45e259c00 update copyright notice / whitespace 2017-10-26 23:46:46 +00:00
Evan Hunt
e7c0f97842 [v9_11] check file and tree headers when loading map files
4792.	[bug]		Fix map file header correctness check. [RT #38418]

(cherry picked from commit 5b69d3da83)
2017-10-25 21:37:21 -07:00
Evan Hunt
7c442d7fe0 [v9_11] log when update-policy local gets a key match from a remote host
4788.	[cleanup]	When using "update-policy local", log a warning
			when an update matching the session key is received
			from a remote host. [RT #46213]

- this completes change #4762.
2017-10-25 00:59:17 -07:00
Mark Andrews
41aef8f068 read dig.out.ns3.test$n rather than dig.out.ns2.test$n
(cherry picked from commit 80739779fc)
2017-10-25 15:03:18 +11:00
Tinderbox User
8ed107eab4 update copyright notice / whitespace 2017-10-24 23:48:58 +00:00
Mark Andrews
ba93bc80a7 4783. [test] dnssec: 'check that NOTIFY is sent at the end of
NSEC3 chain generation failed' required more time
                        on some machines for the IXFR to complete. [RT #46388]

(cherry picked from commit 969d923536)
2017-10-25 09:21:52 +11:00