Mark Andrews
020c4484fe
3173. [port] Correctly validate root DS responses. [RT #25726 ]
2011-10-15 05:00:15 +00:00
Mark Andrews
f96ba7c746
remove check for oldid as named may have already deleted it
2011-07-26 04:42:20 +00:00
Mark Andrews
acf34e66a8
id was not being properly set
2011-07-26 04:28:35 +00:00
Evan Hunt
b47c020d5c
3133. [bug] Change #3114 was incomplete. [RT #24577 ]
2011-07-08 01:43:26 +00:00
Automatic Updater
0f467ed4d4
update copyright notice
2011-06-10 23:47:32 +00:00
Evan Hunt
79ce3a9e82
3128. [func] Inserting an NSEC3PARAM via dynamic update in an
...
auto-dnssec zone that has not been signed yet
will cause it to be signed with the specified NSEC3
parameters when keys are activated. The
NSEC3PARAM record will not appear in the zone until
it is signed, but the parameters will be stored.
[RT #23684 ]
2011-06-10 01:51:09 +00:00
Evan Hunt
5e3affc6a0
3127. [bug] 'rndc thaw' will now remove a zone's journal file
...
if the zone serial number has been changed and
ixfr-from-differences is not in use. [RT #24687 ]
2011-06-10 01:32:38 +00:00
Mark Andrews
ae0691566a
date +%s is not portable, use perl -e 'print time();', Adjust messages
2011-05-30 22:32:06 +00:00
Mark Andrews
fe8572e116
The old active key could be deleted before the "former standby key has now
...
signed fully" ran causing it to fail. Delay the deletion by 10 seconds.
2011-05-30 07:25:19 +00:00
Automatic Updater
6406d6507a
update copyright notice
2011-05-26 23:47:28 +00:00
Evan Hunt
0245f7725c
3118. [bug] When rolling to a new DNSSEC key, a private-type
...
record could be created and never marked complete.
[RT #23253 ]
2011-05-26 04:25:47 +00:00
Mark Andrews
f1d4986b83
treat asb(x) < 500ms as 0
2011-05-02 23:56:59 +00:00
Mark Andrews
65043f48f2
force numeric comparision
2011-05-02 05:05:05 +00:00
Mark Andrews
07907fa31a
handle end of day
2011-05-02 01:35:04 +00:00
Mark Andrews
bbf46f1aa2
fix expression
2011-05-01 21:36:33 +00:00
Mark Andrews
f83682f368
awk -v is not portable, add floating point arithmetic effects
2011-05-01 11:29:20 +00:00
Automatic Updater
54968ae88e
update copyright notice
2011-04-29 23:47:18 +00:00
Evan Hunt
39f2d1a96a
3102. [func] New 'dnssec-loadkeys-interval' option configures
...
how often, in minutes, to check the key repository
for updates when using automatic key maintenance.
Default is every 60 minutes (formerly hard-coded
to 12 hours). [RT #23744 ]
3101. [bug] Zones using automatic key maintenance could fail
to check the key repository for updates. [RT #23744 ]
2011-04-29 21:37:15 +00:00
Evan Hunt
eb08f01b96
Forgot to add a data file for the autosign test.
2011-03-26 01:19:03 +00:00
Evan Hunt
319b8a1488
3092. [bug] Signatures for records at the zone apex could go
...
stale due to an incorrect timer setting. [RT #23769 ]
3091. [bug] Fixed a bug in which zone keys that were published
and then subsequently activated could fail to trigger
automatic signing. [RT #22991 ]
2011-03-25 23:53:02 +00:00
Evan Hunt
36b2d5f93c
use "rndc sync" instead of freeze/thaw cycle to dump zones, now that it's
...
available.
2011-03-21 16:53:44 +00:00
Automatic Updater
207cee019e
update copyright notice
2011-03-17 23:47:30 +00:00
Evan Hunt
61bcc23203
3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
...
dnssec-keyfromlabel sets the default TTL of the
key. When possible, automatic signing will use that
TTL when the key is published. [RT #23304 ]
2011-03-17 01:40:40 +00:00
Francis Dupont
624664e504
Fixed last autosign test report [RT #23256 ]
2011-03-02 09:03:45 +00:00
Mark Andrews
be789bc7eb
3045. [removed] Replaced by change #3050 .
2011-03-02 04:52:25 +00:00
Mark Andrews
ba88bcf08b
3050. [bug] The autosign system test was timing dependent.
...
Wait for the initial autosigning to complete
before running the rest of the test. [RT #23035 ]
2011-03-02 04:08:58 +00:00
Automatic Updater
c8175ece69
update copyright notice
2011-03-01 23:48:07 +00:00
Francis Dupont
17bc56e321
ove the testsock.pl sleep to autosign test suite [RT #23400 ]
2011-02-28 14:08:36 +00:00
Evan Hunt
af903e5008
Added files to clean.sh scripts that have been left around after tests run.
...
Skipping the ticket/review steps because the change is trivial.
2010-12-18 02:12:44 +00:00
Evan Hunt
bbedadf76a
2985. [bug] Add a regression test for change #2896 . [RT #21324 ]
2010-12-15 18:44:37 +00:00
Mark Andrews
c6f4972c74
2943. [func] Add support to load new keys into managed zones
...
without signing immediately with "rndc loadkeys".
Add support to link keys with "dnssec-keygen -S"
and "dnssec-settime -S". [RT #21351 ]
2010-08-16 22:21:07 +00:00
Mark Andrews
e24ccb512c
2914. [bug] Make the "autosign" system test more portable.
...
[RT #20997 ]
2010-06-07 04:45:43 +00:00
Mark Andrews
5ae2eac4c1
2902. [func] Add regression test for change 2897. [RT #21040 ]
2010-05-19 07:45:38 +00:00
Mark Andrews
44f175a90a
2892. [bug] Handle REVOKED keys better. [RT #20961 ]
2010-05-14 04:38:52 +00:00
Automatic Updater
6bb1560124
update copyright notice
2010-01-18 23:48:40 +00:00
Evan Hunt
e11a0c114c
2841. [func] Added "smartsign" and improved "autosign" and
...
"dnssec" regression tests. [RT #20865 ]
2010-01-18 19:19:31 +00:00
Evan Hunt
f766024a27
change all keys from rsasha1 to nsec3rsasha1 so that the nsec->nsec3
...
transitions work correctly. (they worked before, but weren't supposed
to; when that bug was fixed, the test broke.)
2009-12-19 17:30:31 +00:00
Evan Hunt
095810f8cb
fixed autosign/metadata brokenness on solaris [rt20685]
2009-12-02 05:42:15 +00:00
Automatic Updater
ffd297db79
update copyright notice
2009-11-30 23:48:02 +00:00
Evan Hunt
7511904837
add cvsignore files
2009-11-30 21:03:17 +00:00
Evan Hunt
75b8de8787
Create automatic tests "autosign" and "metadata". [rt19946]
2009-11-30 21:00:48 +00:00