Evan Hunt
61bcc23203
3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
...
dnssec-keyfromlabel sets the default TTL of the
key. When possible, automatic signing will use that
TTL when the key is published. [RT #23304 ]
2011-03-17 01:40:40 +00:00
Automatic Updater
c1aef54e14
update copyright notice
2011-03-12 04:59:49 +00:00
Mark Andrews
6494526350
3070. [bug] dnssec-signzone potential NULL pointer dereference.
...
[RT #20256 ]
2011-03-11 12:37:01 +00:00
Mark Andrews
0874abad14
3069. [cleanup] Silence warnings messages from clang static analysis.
...
[RT #20256 ]
2011-03-11 06:11:27 +00:00
Francis Dupont
cf39976b89
while(1) -> for(;;) (cf 23588)
2011-03-10 13:37:21 +00:00
Automatic Updater
be6c1c5061
regen HEAD
2011-03-06 01:14:21 +00:00
Automatic Updater
0e27506ce3
update copyright notice
2011-03-05 23:52:31 +00:00
Mark Andrews
eff7f78bc6
3061. [func] New option "dnssec-signzone -D", only write out
...
generated DNSSEC records. [RT #22896 ]
2011-03-05 06:35:41 +00:00
Automatic Updater
60a900e83b
regen HEAD
2011-03-05 01:14:22 +00:00
Automatic Updater
26a7306397
update copyright notice
2011-03-04 23:47:47 +00:00
Evan Hunt
61271cdee6
3060. [func] New option "dnssec-signzone -X <date>" allows
...
specification of a separate expiration date
for DNSKEY RRSIGs and other RRSIGs. [RT #22141 ]
2011-03-04 22:20:21 +00:00
Automatic Updater
c8175ece69
update copyright notice
2011-03-01 23:48:07 +00:00
Mark Andrews
2f09e7c3fc
3041. [bug] dnssec-signzone failed to generate new signatures on
...
ttl changes. [RT #23330 ]
2011-02-24 03:04:43 +00:00
Automatic Updater
79cf9524b1
regen HEAD
2011-02-04 01:14:16 +00:00
Automatic Updater
784a904bd0
update copyright notice
2011-02-03 12:18:12 +00:00
Mark Andrews
5cfe4bcb0a
3017. [doc] dnssec-keyfromlabel -I was not properly documented.
...
[RT #22887 ]
2011-02-03 12:01:44 +00:00
Automatic Updater
0e9e255d16
regen HEAD
2010-12-24 01:14:21 +00:00
Automatic Updater
a094c46640
update copyright notice
2010-12-23 23:47:08 +00:00
Mark Andrews
37dee1ff94
2999. [func] Add GOST support (RFC 5933). [RT #20639 ]
2010-12-23 04:08:00 +00:00
Evan Hunt
584ad7dedd
2990. [bug] 'dnssec-settime -S' no longer tests prepublication
...
interval validity when the interval is set to 0.
[RT #22761 ]
2010-12-19 07:29:36 +00:00
Automatic Updater
3acf5eb97c
regen HEAD
2010-08-17 01:15:38 +00:00
Automatic Updater
f428e385a4
update copyright notice
2010-08-16 23:46:52 +00:00
Mark Andrews
c6f4972c74
2943. [func] Add support to load new keys into managed zones
...
without signing immediately with "rndc loadkeys".
Add support to link keys with "dnssec-keygen -S"
and "dnssec-settime -S". [RT #21351 ]
2010-08-16 22:21:07 +00:00
Automatic Updater
6e13ffa218
update copyright notice
2010-06-03 23:51:05 +00:00
Mark Andrews
675cc80975
2911. [bug] dnssec-signzone didn't handle out of zone records well.
...
[RT #21367 ]
2010-06-03 03:13:32 +00:00
Automatic Updater
bef75d63d7
regen HEAD
2010-05-19 01:14:14 +00:00
Automatic Updater
d3798f2bff
update copyright notice
2010-05-06 23:50:56 +00:00
Mark Andrews
707d9fbd86
2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
...
consistent. [RT #21078 ]
2010-05-06 05:31:19 +00:00
Automatic Updater
83f43b00a5
regen HEAD
2010-03-10 01:14:18 +00:00
Mark Andrews
c5259c013b
2861. [doc] dnssec-settime man pages didn't correctly document the
...
inactivation time. [RT #21039 ]
2860. [bug] named-checkconf's usage was out of date. [RT #21039 ]
2010-03-09 03:38:18 +00:00
Automatic Updater
6f1b350c3a
update copyright notice
2010-02-04 23:49:13 +00:00
Automatic Updater
44d0f0256f
regen
2010-02-04 01:14:17 +00:00
Automatic Updater
f1c89cb4f5
update copyright notice
2010-02-03 23:49:07 +00:00
Evan Hunt
dcfca6f18d
2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921 ]
2010-02-03 01:02:37 +00:00
Automatic Updater
a3416b0a1b
regen
2010-01-20 01:14:19 +00:00
Automatic Updater
ca4e44ebe8
update copyright notice
2010-01-19 23:48:56 +00:00
Evan Hunt
8a198fa776
2842. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
...
creating key files if there is a chance that the new
key ID will collide with an existing one after
either of the keys has been revoked. (To override
this in the case of dnssec-keyfromlabel, use the -y
option. dnssec-keygen will simply create a
different, noncolliding key, so an override is
not necessary.) [RT #20838 ]
2010-01-19 20:26:07 +00:00
Automatic Updater
65d1486535
update copyright notice
2010-01-11 23:48:37 +00:00
Francis Dupont
a91029a00e
Prevent Linux spurious warnings about fwrite(). [RT #20812 ]
2010-01-11 10:49:14 +00:00
Automatic Updater
a30c7003af
update copyright notice
2010-01-07 23:48:54 +00:00
Evan Hunt
8ebf67b7f0
2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
...
[RT #20851 ]
2010-01-07 19:13:59 +00:00
Automatic Updater
247f299fb0
update copyright notice
2010-01-06 23:48:47 +00:00
Evan Hunt
b1fbf2a4db
fix spacing
2010-01-06 00:53:45 +00:00
Automatic Updater
3ee1371212
update copyright notice
2010-01-05 23:48:37 +00:00
Evan Hunt
564d687132
missing newline in dnssec-signzone usage
2010-01-05 15:31:58 +00:00
Automatic Updater
928e12ccdc
update copyright notice
2009-12-18 23:49:03 +00:00
Evan Hunt
9de98fbbbe
2809. [cleanup] Restored accidentally-deleted text in usage output
...
in dnssec-settime and dnssec-revoke [RT #20739 ]
2009-12-18 07:49:42 +00:00
Evan Hunt
12178c8652
2805. [bug] Fixed namespace problems encountered when building
...
external programs using non-exported BIND9 libraries
(i.e., built without --enable-exportlib). [RT #20679 ]
2009-12-05 23:31:41 +00:00
Automatic Updater
4b6dc226f7
update copyright notice
2009-12-04 22:06:37 +00:00
Mark Andrews
3d17a3ba61
2801. [func] Detect and report records that are different according
...
to DNSSEC but are sematically equal according to plain
DNS. Apply plain DNS comparisons rather than DNSSEC
comparisons when processing UPDATE requests.
dnssec-signzone now removes such semantically duplicate
records prior to signing the RRset.
named-checkzone -r {ignore|warn|fail} (default warn)
named-compilezone -r {ignore|warn|fail} (default warn)
named.conf: check-dup-records {ignore|warn|fail};
2009-12-04 21:09:34 +00:00