Commit Graph

6196 Commits

Author SHA1 Message Date
Mark Andrews
f0471ca4b7 1336. [func] Nibble lookups under IP6.ARPA are now supported by
dns_byaddr_create().  dns_byaddr_createptrname() is
                        deprecated, use dns_byaddr_createptrname2() instead.
2002-07-24 06:42:32 +00:00
Mark Andrews
03d337f54a For some zones, querying for a DS record before anything else would SERVFAIL. 2002-07-23 03:41:44 +00:00
Mark Andrews
638fe804a5 1255. [bug] When performing a nonexistence proof, the validator
should discard parent NXTs from higher in the DNS.
2002-07-22 03:00:49 +00:00
Mark Andrews
9db3d9d14e 1254. [bug] When signing/verifying rdatasets, duplicate rdatas
need to be suppressed.
2002-07-22 02:49:14 +00:00
Mark Andrews
0b75a2dd3b 1252. [func] Report the current serial with periodic commits when
rolling forward the journal.
2002-07-22 02:06:04 +00:00
Mark Andrews
c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews
0d993c02ba 1250. [bug] When processing events (non-threaded) only allow
the task one chance to use to use its quantum.
2002-07-19 03:39:44 +00:00
Mark Andrews
ff30cdeb78 The validator didn't handle missing DS records correctly. 2002-07-19 03:29:15 +00:00
Mark Andrews
4d9f3f00d9 1249. [func] named-checkzone will now check if nameservers that
appear to be IP addresses.  Available modes "fail",
                        "warn" (default) and "ignore" the results of the
                        check.
2002-07-19 02:34:58 +00:00
Mark Andrews
d196b45738 1248. [bug] The validator could incorrectly verify an invalid
negative proof.
2002-07-15 03:27:44 +00:00
Mark Andrews
86f6b92e35 1248. [bug] The validator could incorrectly verify an invalid
negative proof.

When checking the range of the nxt record, the code needs to handle
the case where the 'next name' field points to the origin.  The way
that the origin was determined was looking at the 'signer' field
of the first SIG NXT, since NXTs are signed by the zone key.  This
doesn't work, because the first SIG could have been spoofed.  It
now defers checking the nxt range until both the SOA and NXT have
been verified, and uses the owner of the SOA name as the origin.
bwelling
2002-07-15 03:25:28 +00:00
Mark Andrews
25276bd1ec 1247. [bug] The validator would incorrectly mark data as insecure
when seeing a bogus signature before a correct
                        signature.
2002-07-15 02:57:14 +00:00
Mark Andrews
320d6ee24e 1246. [bug] DNAME/CNAME signatures were not being cached when
validation was not being performed. [RT #3284]
2002-07-15 02:23:58 +00:00
Mark Andrews
981e5046e0 max-journal-size is a zone option 2002-07-13 00:53:34 +00:00
Mark Andrews
0996973920 distclean 2002-07-12 01:42:22 +00:00
Mark Andrews
53f9ddf27c silence pointer mismatch 2002-07-04 04:19:54 +00:00
Mark Andrews
6244f49146 protect clua_context access w/ #ifdef 2002-07-03 06:25:32 +00:00
Mark Andrews
7fd9fd9e4c TRUCLUSTER support: isc_interfaceiter_first() should set clua_context. 2002-07-02 05:51:43 +00:00
Mark Andrews
89251e453b result undeclared, #include <isc/log.h> 2002-07-01 23:00:38 +00:00
Mark Andrews
ecf7a18125 isc_modules[2] not isc_modules[3] 2002-07-01 01:39:45 +00:00
Mark Andrews
fe4d3e1992 hpux: ioctl(SIOCGLIFCONF) failure -> debug(1) 2002-07-01 01:08:37 +00:00
Mark Andrews
54532c5413 1339. [func] libbind: log attempts to exploit #1338. 2002-06-28 06:12:42 +00:00
Mark Andrews
020f7361a4 1338. [bug] libbind: Remote buffer overrun. 2002-06-28 06:06:24 +00:00
Mark Andrews
e8fb857c20 consistant white space w/ BIND 8 2002-06-28 05:59:22 +00:00
Mark Andrews
1c0927d8a0 1337. [port] libbind: TrueUNIX 5.1 does not like __align as a
element name.
2002-06-28 05:46:10 +00:00
Mark Andrews
e817515a6c pullup: ns_r_badvers extended error code 2002-06-28 05:41:56 +00:00
Mark Andrews
446ff1959c pullup from BIND 8
1336.   [bug]           libbind: gethostans() could get out of sync parsing
                        the response if there was a very long CNAME chain.
2002-06-28 05:00:55 +00:00
Mark Andrews
33c5380153 1334. [port] Handle ECONNRESET from sendmsg() [unix]. 2002-06-26 00:12:54 +00:00
Mark Andrews
51ff296fef regen so both configures are built using the same autoconf 2002-06-24 23:41:06 +00:00
Mark Andrews
d9e0458a89 1331. [bug] lwres_getrrsetbyname leaked memory. [RT #3159] 2002-06-20 02:31:17 +00:00
Mark Andrews
880f50a1e6 Protect both the socket and fifo tests with #ifdef's. 2002-06-20 01:19:51 +00:00
Mark Andrews
de49761421 1330. [bug] 'rndc stop' failed to cause zones to be flushed
sometimes. [RT #3157]
2002-06-19 07:14:48 +00:00
Mark Andrews
5758e9adfb 1329. [func] Log that a zone transfer was covered by a TSIG. 2002-06-19 06:47:25 +00:00
Mark Andrews
b0d31c78bc uninitalised variable 2002-06-19 04:15:12 +00:00
Mark Andrews
0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Mark Andrews
e0fa16fe19 1326. [bug] Badly encoded LOC record when the size, horizontal
precision or vertical precision was 0.1m.
2002-06-14 23:40:14 +00:00
Mark Andrews
5991ce4236 remove change #1284 2002-06-13 07:25:25 +00:00
Mark Andrews
7d389c324c 1324. [func] New function: dns_zone_name(). 2002-06-13 07:05:47 +00:00
Mark Andrews
e2cf63c5df 1218. [port] Compaq Trucluster support. 2002-06-07 00:03:50 +00:00
Mark Andrews
38ded52dbb Handle OS's with incomplete API's 2002-06-06 00:55:48 +00:00
Mark Andrews
c3184b4e2a 1219. [bug] Set AI_ADDRCONFIG when looking up addresses
via getaddrinfo() (affects dig, host, nslookup, rndc
                        and nsupdate).
2002-06-06 00:27:37 +00:00
Mark Andrews
9b7c023fe6 1218. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
could be left with a trailing "\" after configure
                        has been run.
2002-06-05 22:34:57 +00:00
Mark Andrews
918102a7d2 mask of mode format bits and compare result 2002-06-05 02:20:59 +00:00
Mark Andrews
5ddbaad44e || should have been && in #if test. 2002-06-04 23:26:16 +00:00
Mark Andrews
0a1fa37641 1217. [port] linux: make handling EINVAL from socket() no longer
conditional on #ifdef LINUX.
2002-06-03 06:31:16 +00:00
Mark Andrews
c61ec97ae0 1216. [bug] isc_log_closefilelogs() needed to lock the log
context.
2002-06-03 04:34:19 +00:00
Mark Andrews
49f7d1585e 1215. [bug] isc_log_setdebuglevel() needed to lock the log
context.
2002-06-03 03:39:56 +00:00
Mark Andrews
0b1af13f68 pullup:
1314.   [func]          libbind: no longer attempts bit string labels for
                        IPv6 reverse resolution.  Try IP6.ARPA then IP6.INT
                        for nibble style resolution.
2002-06-03 00:34:58 +00:00
Mark Andrews
945cb085b8 1213. [func] Entropy can now be retrieved from EGDs. [RT #2438] 2002-05-30 04:21:17 +00:00
Mark Andrews
5ed4b0d445 1212. [func] Enable IPv6 support when using ioctl style interface
scanning and OS supports SIOCGLIFADDR using struct
                        if_laddrreq.
2002-05-30 01:28:53 +00:00