ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
27,450 Commits 589 Branches 805 Tags
bf98eb41bfc6a8580a5f430f11a2ded73ea9c234
Commit Graph

27450 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ondřej Surý
bf98eb41bf Merge branch 'configure.in-cmocka-CFLAGS-fix' into 'master' 
Fix missing $ in CMOCKA_CFLAGS when --with-cmocka=<path> was used

See merge request isc-projects/bind9!665
 2018-08-17 09:37:31 -04:00
Ondřej Surý
ab9f12c7f4 Fix missing $ in CMOCKA_CFLAGS when --with-cmocka=<path> was used 2018-08-17 15:28:42 +02:00
Witold Krecicki
28cf1a7a9c Merge branch '478-remove-support-for-unthreaded-bind' into 'master' 
Remove support for unthreaded BIND

Closes #478

See merge request isc-projects/bind9!655
 2018-08-16 15:09:43 -04:00
Witold Kręcicki
44cec639c4 CHANGES/notes/docs 2018-08-16 19:46:10 +02:00
Ondřej Surý
c692da2182 Improve autoconf pthread detection 2018-08-16 17:18:52 +02:00
Witold Kręcicki
5cdb38c2c7 Remove unthreaded support 2018-08-16 17:18:52 +02:00
Ondřej Surý
8e164f784d Merge branch 'gitlab-ci-make-install-job' into 'master' 
Add make install job to GitLab CI

See merge request isc-projects/bind9!661
 2018-08-16 09:38:06 -04:00
Ondřej Surý
9c950e5961 Add install test job 2018-08-16 09:13:41 -04:00
Ondřej Surý
28748db0b2 paste config.log to output if configure ends up with failure 2018-08-16 09:13:41 -04:00
Ondřej Surý
1ff71c7cee Merge branch 'config.h-fixes' into 'master' 
Replace "config.h" with <config.h>

See merge request isc-projects/bind9!660
 2018-08-16 06:54:57 -04:00
Ondřej Surý
e2c938d882 Replace "config.h" with <config.h> 2018-08-16 12:45:59 +02:00
Evan Hunt
0bdefcb599 Merge branch '237-validate-except' into 'master' 
Resolve "dnssec-validation exception domains"

Closes #237

See merge request isc-projects/bind9!224
 2018-08-14 16:38:00 -04:00
Evan Hunt
4eb0897c90 CHANGES, release notes, README 2018-08-14 13:28:02 -07:00
Evan Hunt
7ecd699e81 add a system test 2018-08-14 13:28:02 -07:00
Evan Hunt
eaac2057c7 option to disable validation under specified names 
- added new 'validate-except' option, which configures an NTA with
  expiry of 0xffffffff.  NTAs with that value in the expiry field do not
  expire, are are not written out when saving the NTA table and are not
  dumped by rndc secroots
 2018-08-14 13:28:02 -07:00
Evan Hunt
509d71e1aa Merge branch '465-missing-check-in-acl_test-c-unit-test' into 'master' 
Resolve "Missing check in acl_test.c unit test"

Closes #465

See merge request isc-projects/bind9!639
 2018-08-14 12:13:04 -04:00
Mark Andrews
0ce82e9d5f add missing ATF_REQUIRE 2018-08-14 09:04:16 -07:00
Ondřej Surý
53690ef21f Merge branch '476-fix-openssl-error-logging' into 'master' 
Fix OpenSSL error logging

Closes #476

See merge request isc-projects/bind9!644
 2018-08-14 07:05:20 -04:00
Michał Kępień
cab7c34fbd Add CHANGES entry 
5009.	[bug]		Upon an OpenSSL failure, the first error in the OpenSSL
			error queue was not logged. [GL #476]
 2018-08-14 12:49:19 +02:00
Michał Kępień
fe20f8fe25 Do not remove errors from the OpenSSL error queue in toresult() 
dst__openssl_toresult3() first calls toresult() and subsequently uses
ERR_get_error_line_data() in a loop.  Given this, it is a mistake to use
ERR_get_error() in toresult() because it causes the retrieved error to
be removed from the OpenSSL error queue, thus preventing it from being
retrieved by the subsequent ERR_get_error_line_data() calls.  Fix by
using ERR_peek_error() instead of ERR_get_error() in toresult().
 2018-08-14 12:49:19 +02:00
Michał Kępień
527614c750 Merge branch '471-fix-rbt_insert_and_remove-unit-test' into 'master' 
Prevent rare rbt_insert_and_remove unit test failures

Closes #471

See merge request isc-projects/bind9!614
 2018-08-14 05:11:17 -04:00
Michał Kępień
13fe763798 Prevent rare rbt_insert_and_remove unit test failures 
When two or more absolute, two-label names are added to a completely
empty RBT, an extra, empty node for the root name will be created due to
node splitting.  check_tree() expects that, but the extra node will not
be created when just one name is added to a completely empty RBT.  This
problem could be handled inside check_tree(), but that would introduce
unnecessary complexity into it since adding a single name will result in
a different node count for a completely empty RBT (node count will be 1)
and an RBT containing only an empty node for the root name, created due
to prior node splitting (node count will be 2).  Thus, first explicitly
create a node for the root name to prevent rare check_tree() failures
caused by a single name being added in the first iteration of the
insert/remove loop.
 2018-08-14 10:43:51 +02:00
Michał Kępień
495e10ba5a Merge branch '285-make-the-inline-system-test-more-lightweight' into 'master' 
Make the "inline" system test more lightweight

Closes #285

See merge request isc-projects/bind9!611
 2018-08-14 04:38:57 -04:00
Michał Kępień
24dd865b97 Make the "inline" system test more lightweight 
Each zone used in the "inline" system test contains a few dozen records.
Over a dozen of these zones are used in the test.  Most records present
in these zones are not subsequently used in the test itself, but all of
them need to be signed by the named instances launched by the test,
which puts quite a bit of strain on lower-end machines, leading to
intermittent failures of the "inline" system test.  Remove all redundant
records from the zones used in the "inline" system test in order to
stabilize it.
 2018-08-14 10:16:08 +02:00
Evan Hunt
e0d309572f Merge branch '474-mempool-is-broken-if-object-size-is-below-the-alignment-size' into 'master' 
Resolve "mempool is broken if object size is below the alignment size"

Closes #474

See merge request isc-projects/bind9!635
 2018-08-14 04:09:17 -04:00
Mark Andrews
5dd1beec8e mempool didn't work for sizes less than sizeof(void*) 2018-08-14 03:47:14 -04:00
Michał Kępień
dc5b8ec97a Merge branch '468-queue-rndc-signing-nsec3param-requests-if-needed' into 'master' 
Queue "rndc signing -nsec3param ..." requests if needed

Closes #468

See merge request isc-projects/bind9!610
 2018-08-14 03:44:53 -04:00
Michał Kępień
eed6778be4 Add CHANGES entry 
5008.	[bug]		"rndc signing -nsec3param ..." requests were silently
			ignored for zones which were not yet loaded or
			transferred. [GL #468]
 2018-08-14 09:22:43 +02:00
Michał Kępień
cb40c5229a Queue "rndc signing -nsec3param ..." requests if needed 
If "rndc signing -nsec3param ..." is ran for a zone which has not yet
been loaded or transferred (i.e. its "db" field is NULL), it will be
silently ignored by named despite rndc logging an "nsec3param request
queued" message, which is misleading.  Prevent this by keeping a
per-zone queue of NSEC3PARAM change requests which arrive before a zone
is loaded or transferred and processing that queue once the raw version
of an inline-signed zone becomes available.
 2018-08-14 09:22:43 +02:00
Ondřej Surý
f34e7ee612 Merge branch '462-full-recv-queue-on-netbsd' into 'master' 
Resolve "Full Recv-Queue"

Closes #462

See merge request isc-projects/bind9!629
 2018-08-13 13:19:48 -04:00
Ondřej Surý
ebf3083e08 Make ENOBUFS a soft error 2018-08-13 18:51:10 +02:00
Ondřej Surý
9689313331 Merge branch '9-use-C99-integer-types-fix-install' into 'master' 
Don't try to install removed int.h and boolean.h headers

See merge request isc-projects/bind9!627
 2018-08-13 09:38:55 -04:00
Mathieu Arnold
4c06eb20cc Don't try to install removed int.h and boolean.h headers 2018-08-13 15:30:36 +02:00
Ondřej Surý
a2188e61e7 Merge branch 'support-softhsm-2.4.0' into 'master' 
Fix build failures on Debian sid

See merge request isc-projects/bind9!626
 2018-08-13 07:22:25 -04:00
Ondřej Surý
c746037622 Disable libidn2 on Debian stretch images 2018-08-13 12:43:38 +02:00
Ondřej Surý
28b0de3e86 Use clang on Debian stretch to workaround Debian Bug #903709 2018-08-13 12:43:38 +02:00
Ondřej Surý
6bc771828c SoftHSM 2.4.0 only supports softhsm2.conf now, rewrite GitLab CI commands to properly support that 2018-08-13 12:43:38 +02:00
Ondřej Surý
2cd0a493ae Merge branch '469-typo-in-validate-glue-branch' into 'master' 
Resolve "Typo in validate-glue branch"

See merge request isc-projects/bind9!613
 2018-08-11 04:16:34 -04:00
Ondřej Surý
bdc9860262 Fix !!validate typo to -> !validate 2018-08-11 04:07:46 -04:00
Evan Hunt
d6f4592f6b Merge branch 'fix-ns-log-mismatch' into 'master' 
mismatch between defined log modules and ns_modules[] in lib/ns/log.c

See merge request isc-projects/bind9!612
 2018-08-10 15:14:10 -04:00
Evan Hunt
b865fb77de mismatch between defined log modules and ns_modules[] in lib/ns/log.c 2018-08-10 15:04:39 -04:00
Ondřej Surý
c3e4363303 Merge branch '434-after-isc_safe-merge-the-windows-build-fails-due-missing-openssl_libs-in-project-files' into 'master' 
Resolve "After isc_safe merge, the Windows build fails due missing OPENSSL_LIBS in project files"

Closes #434

See merge request isc-projects/bind9!617
 2018-08-10 10:58:04 -04:00
Ondřej Surý
c5040e5c9e Add @OPENSSL_LIB@ to Windows project files as needed 2018-08-10 16:45:00 +02:00
Ondřej Surý
86c377ccbb Merge branch '457-restore-logging-of-used-openssl-versions-upon-startup' into 'master' 
Restore logging of used OpenSSL versions upon startup

Closes #457

See merge request isc-projects/bind9!615
 2018-08-10 09:16:05 -04:00
Michał Kępień
b14e127569 Restore logging of used OpenSSL versions upon startup 
Remove an #ifdef which commit c3b8130fe8
should have removed.
 2018-08-10 13:58:41 +02:00
Evan Hunt
337f9dd0ec Merge branch 'security-complete-dname-fix' into 'master' 
Merge CVE-2018-5740 fix

See merge request isc-projects/bind9!607
 2018-08-08 18:33:21 -04:00
Evan Hunt
b4b4277f5a CHANGES, release note 2018-08-08 14:33:19 -07:00
Evan Hunt
3f907b8bee caclulate nlabels and set *chainingp correctly 2018-08-08 14:33:19 -07:00
Evan Hunt
9d7ad52506 test case 2018-08-08 14:33:19 -07:00
Evan Hunt
cac3978af2 explicit DNAME query could trigger a crash if deny-answer-aliases was set 2018-08-08 14:33:19 -07:00