ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
22,203 Commits 589 Branches 805 Tags
c1f26bd63cbd3ed0b068d07d994e23bb85ebfd8d
Commit Graph
5856 Commits
Author SHA1 Message Date
Mark Andrews c1f26bd63c silence clang compiler warnings 2014-03-26 16:20:31 +11:00
Mark Andrews b4a819a44f othererror should not include badvers now that we have a badvers counter 2014-03-25 16:46:11 +11:00
Tinderbox User 9d7e943c3d update copyright notice 2014-03-19 23:46:06 +00:00
Mark Andrews a78ffa0cc8 only set FCTX_ADDRINFO_NOSIT if we don't have a existing sit 2014-03-20 07:17:00 +11:00
Mark Andrews 09ab38c151 3790. [bug] Handle broken nameservers that send BADVERS in 
response to unknown EDNS options.  Maintain
                        statistics on BADVERS responses.
 2014-03-20 05:00:55 +11:00
Mark Andrews adbb48b4a0 3789. [bug] Null pointer dereference on rbt creation failure. 2014-03-17 23:25:21 +11:00
Mark Andrews 61cfadb50e 3788. [bug] dns_peer_getrequestsit was returning request_nsid by 
mistake.
 2014-03-16 03:31:40 +11:00
Evan Hunt 9896a01aeb [master] prep 9.10.0b2 2014-03-12 21:57:11 -07:00
Evan Hunt acbb301e64 [master] better error output when initializing pkcs11 
3786.	[func]		Provide more detailed error codes when using
			native PKCS#11. "pkcs11-tokens" now fails robustly
			rather than asserting when run against an HSM with
			an incomplete PCKS#11 API implementation. [RT #35479]
 2014-03-12 20:52:01 -07:00
Mark Andrews 3911e7610f 3785. [bug] Debugging code dumphex didn't accept arbitarily long 
input (only compiled with -DDEBUG). [RT #35544]
 2014-03-13 12:37:07 +11:00
Evan Hunt ffbd79e978 [master] fix possible uninitialized variable 2014-03-10 20:55:26 -07:00
Evan Hunt 7b46a4aa41 [master] fix negative numbers in $GENERATE 
3780.	[bug]		$GENERATE handled negative numbers incorrectly.
			[RT #25528]
 2014-03-10 11:55:32 -07:00
Francis Dupont 83bb42c635 fix opensslgost_link.c when OPENSSL is not defined 2014-03-08 19:32:34 +01:00
Evan Hunt e29c2b3903 [master] fix misuses of isc__buffer functions, update comment 2014-03-06 17:26:21 -08:00
Tinderbox User cc2a515684 update copyright notice 2014-03-04 23:46:15 +00:00
Evan Hunt b454c03196 [master] use ANSI prototypes, clean up some casts 2014-03-04 10:42:25 -08:00
Evan Hunt f6d0284ec2 [master] fix memory leak 2014-03-04 08:56:09 -08:00
Evan Hunt e69790ac00 [master] printable NSID logging 
3774.	[func]		When using "request-nsid", log the NSID value in
			printable form as well as hex. [RT #20864]
 2014-03-03 20:51:14 -08:00
Evan Hunt e71905610c [master] fixed out-of-tree build 
3766.	[cleanup]	Fixed problems with building outside the source
			tree when using native PKCS#11. [RT #35459]
 2014-02-27 16:49:35 -08:00
Evan Hunt 1aced7b870 [master] fix possible rndc secroots crash 
3765.	[bug]		Fixed a bug in "rndc secroots" that could crash
			named when dumping an empty keynode. [RT #35469]
 2014-02-27 16:42:35 -08:00
Tinderbox User 938440694b update copyright notice 2014-02-27 23:46:22 +00:00
Mark Andrews 7fbbc9bfd3 3762. [bug] Address build problems with --pkcs11-native + 
--with-openssl with ECDSA support. [RT #35467]
 2014-02-27 18:29:52 +11:00
Mark Andrews 96c17c5ecb 3761. [bug] Address dangling reference bug in dns_keytable_add. 
[RT #35471]
 2014-02-27 16:55:46 +11:00
Evan Hunt 98922b2b2b [master] merge several interdependent fixes 
3760.   [bug]           Improve SIT with native PKCS#11 and on Windows.
			[RT #35433]

3759.   [port]          Enable delve on Windows. [RT #35441]

3758.   [port]          Enable export library APIs on windows. [RT #35382]
 2014-02-26 19:00:05 -08:00
Mark Andrews 86ec04712b #include <inttypes.h> 2014-02-27 11:57:51 +11:00
Mark Andrews 79bd3cf027 we only use 32 octets 2014-02-26 15:54:23 +11:00
Mark Andrews f4193c2021 update copyrights 2014-02-25 12:07:41 +11:00
Mark Andrews 53ebc0959b #ifdef notyet error handling for bad sit 2014-02-24 23:49:21 +11:00
Mark Andrews 0072ae822d 3756. [bug] GSSAPI Kerberos realm checking was broken in 
check_config leading to spurious messages being
                        logged.  [RT #35443]
 2014-02-24 12:15:37 +11:00
Mark Andrews 9e39bafd2e adjust SIT computation 2014-02-24 09:29:49 +11:00
Mark Andrews edd82b2ce2 3753. [bug] allow-notify was ignoring keys. [RT #35425] 2014-02-21 00:09:28 +11:00
Mark Andrews 86856f4f30 3752. [bug] Address potential REQUIRE failure if 
DNS_STYLEFLAG_COMMENTDATA is set when printing out
                        a rdataset.
 2014-02-20 23:04:54 +11:00
Evan Hunt 4a0beb64be [master] start prep for 9.10.0b1 2014-02-19 21:39:35 -08:00
Evan Hunt 9576baafc0 [master] assert if sitok/sitbad are insane 2014-02-19 21:26:31 -08:00
Mark Andrews d17d32a7bf set setok/sitbad 2014-02-20 16:16:53 +11:00
Mark Andrews f0c00f10a0 report if sit is good/bad 2014-02-20 15:55:09 +11:00
Mark Andrews 51d6d7eea4 continue rather than break 2014-02-20 15:20:12 +11:00
Mark Andrews 45b8dc626a add #ifdef notdef check of DNS_OPT_EXPIRE length 2014-02-20 15:06:49 +11:00
Evan HuntandMark Andrews 6cba0b8e61 [expireopt] format expire time 2014-02-20 14:57:47 +11:00
Mark Andrews 16134801ce 3750. [experimental] Partially implement EDNS EXPIRE option as described 
in draft-andrews-dnsext-expire-00.  Retrivial of
                        remaining time to expiry from slave zones is supported.

                        EXPIRE uses an experimental option code (65002) and
                        is subject to change. [RT #35416]
 2014-02-20 14:56:20 +11:00
Mark Andrews 801b958a5c s/DNS_EDNSOPTIONS/DNS_EDNSOPTIONS/ 2014-02-20 14:00:54 +11:00
Mark Andrews 72ba6ba736 define DNS_OPT_EDNSOPTIONS 2014-02-20 13:55:21 +11:00
Mark Andrews e676a59686 update copyrights 2014-02-20 10:53:11 +11:00
Evan Hunt d7b9756a21 [master] ENDS client-subnet in dig 
3749.	[func]		"dig +subnet" sends an EDNS client subnet option
			containing the specified address/prefix when
                        querying. (Thanks to Wilmer van der Gaast.)
                        [RT #35415]
 2014-02-19 15:51:02 -08:00
Tinderbox User 1361e03890 update copyright notice 2014-02-19 23:46:31 +00:00
Francis Dupont f1a6c8e78c WIN32 master fixes 2014-02-19 23:17:52 +01:00
Evan Hunt 7f5bdf7f40 [master] fix dns_resolver_destroyfetch race 
3747.	[bug]		A race condition could lead to a core dump when
			destroying a resolver fetch object. [RT #35385]
 2014-02-18 23:32:02 -08:00
Evan Hunt 35f6a21f5f [master] max-zone-ttl 
3746.	[func]		New "max-zone-ttl" option enforces maximum
			TTLs for zones. If loading a zone containing a
			higher TTL, the load fails. DDNS updates with
			higher TTLs are accepted but the TTL is truncated.
			(Note: Currently supported for master zones only;
			inline-signing slaves will be added.) [RT #38405]
 2014-02-18 23:26:50 -08:00
Evan Hunt 6a3fa181d1 [master] add "--with-tuning=large" option 
3745.	[func]		"configure --with-tuning=large" adjusts various
			compiled-in constants and default settings to
			values suited to large servers with abundant
			memory. [RT #29538]
 2014-02-18 22:36:14 -08:00
Mark Andrews b5f6271f4d 3744. [experimental] SIT: send and process Source Identity Tokens 
(which are similar to DNS Cookies by Donald Eastlake)
                        and are designed to help clients detect off path
                        spoofed responses and for servers to detect legitimate
                        clients.

                        SIT use a experimental EDNS option code (65001).

                        SIT can be enabled via --enable-developer or
                        --enable-sit.  It is on by default in Windows.

                        RRL processing as been updated to know about SIT with
                        legitimate clients not being rate limited. [RT #35389]
 2014-02-19 12:53:42 +11:00