Mark Andrews
7e87f04c6d
2910. [func] Sanity check Kerberos credentials. [RT #20986 ]
2010-06-03 02:35:53 +00:00
Mark Andrews
8659464250
2908. [bug] It was possible for re-signing to stop after removing
...
a DNSKEY. [RT #21384 ]
2010-06-02 01:01:35 +00:00
Mark Andrews
8cbf30d0c0
2904. [bug] When using DLV, sub-zones of the zones in the DLV,
...
could be incorrectly marked as insecure instead of
secure leading to negative proofs failing. This was
a unintended outcome from change 2890. [RT# 21392]
2010-05-26 06:58:17 +00:00
Mark Andrews
586e2589ca
silence compiler, explict coversion
2010-05-19 09:53:46 +00:00
Mark Andrews
3980c36048
cvs rdiff -r1.3390 -r1.3391 bind9/CHANGES
...
cvs rdiff -r1.11 -r1.12 bind9/bin/tests/system/resolver/tests.sh
cvs rdiff -r1.13 -r1.14 bind9/bin/tests/system/resolver/ans2/ans.pl
cvs rdiff -r1.48 -r1.49 bind9/lib/dns/ncache.c
2010-05-19 06:43:42 +00:00
Mark Andrews
171c192b73
silence compile warnings, explict conversion
2010-05-18 06:30:01 +00:00
Automatic Updater
01565f50ca
update copyright notice
2010-05-14 23:47:50 +00:00
Mark Andrews
69ed70d223
2890. [bug] Handle the introduction of new trusted-keys and
...
DS, DLV RRsets better. [RT #21097 ]
2010-05-14 00:33:23 +00:00
Mark Andrews
6fc85eeab8
2888. [bug] Only the first EDNS option was displayed. [RT #21273 ]
2010-05-13 00:43:37 +00:00
Automatic Updater
7475034677
update copyright notice
2010-05-12 23:48:30 +00:00
Mark Andrews
57e1fa2321
2884. [bug] Insufficient valadation in dns_name_getlabelsequence().
...
[RT #21283 ]
2010-05-12 05:45:05 +00:00
Automatic Updater
3e1ba44c9c
update copyright notice
2010-05-10 23:48:14 +00:00
Mark Andrews
2766e7b091
2881. [bug] Reduce the amount of time the rbtdb write lock
...
is held when closing a version. [RT #21198 ]
2010-05-10 01:42:36 +00:00
Automatic Updater
3c66ae1128
update copyright notice
2010-04-21 23:48:05 +00:00
Mark Andrews
1309b5cb7c
2877. [bug] The validator failed to skip obviously mismatching
...
RRSIGs. [RT #21138 ]
2010-04-21 05:48:13 +00:00
Mark Andrews
b656e4693a
2876. [bug] Named could return SERVFAIL for negative responses
...
from unsigned zones. [RT #21131 ]
2010-04-21 04:21:19 +00:00
Mark Andrews
744e03a255
2875. [bug] dns_time64_fromtext() could accept non digits.
...
[RT #21033 ]
2010-04-21 02:23:33 +00:00
Automatic Updater
859dc25b2a
update copyright notice
2010-04-20 23:48:22 +00:00
Mark Andrews
1077d5d5d7
2874. [bug] Cache lack of EDNS support only after the server
...
successfully responds to the query using plain DNS.
[RT #20930 ]
2010-04-20 07:33:54 +00:00
Automatic Updater
a273274614
update copyright notice
2010-04-07 23:48:30 +00:00
Mark Andrews
cd2a48b5cf
2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
2010-04-07 07:10:06 +00:00
Mark Andrews
928f535b8a
2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
...
[RT #20877 ]
2010-03-26 17:19:39 +00:00
Automatic Updater
08f36cf4fb
update copyright notice
2010-03-12 23:48:26 +00:00
Mark Andrews
df800d27d8
2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
...
don't like it. [RT #20986 ]
2010-03-12 03:50:26 +00:00
Mark Andrews
e163b0fe68
2866. [bug] Windows does not like the TSIG name being compressed.
...
[RT #20986 ]
2010-03-12 03:39:34 +00:00
Automatic Updater
875245e3c4
update copyright notice
2010-03-04 23:47:53 +00:00
Mark Andrews
39131fff99
2958. [bug] When canceling validation it was possible to leak
...
memory. [RT #20800 ]
2010-03-04 22:31:32 +00:00
Mark Andrews
b605bbbb0f
2957. [bug] RTT estimates were not being adjusted on ICMP errors.
...
[RT #20772 ]
2010-03-04 06:49:41 +00:00
Mark Andrews
b041f0ecb7
dns_rdataset_expire/dns_rdataset_settrust
2010-03-03 06:58:30 +00:00
Mark Andrews
2e77a957cb
dns_resolver_*badcache
2010-03-03 05:00:53 +00:00
Automatic Updater
372ce32e19
update copyright notice
2010-02-26 23:48:44 +00:00
Mark Andrews
5eee3743e2
2853. [bug] add_sigs() could run out of scratch space. [RT #21015 ]
2010-02-26 01:52:05 +00:00
Mark Andrews
0810b14604
grab a write lock before updating header->trust
2010-02-26 00:25:27 +00:00
Automatic Updater
b67c0e9a49
update copyright notice
2010-02-25 10:56:41 +00:00
Mark Andrews
b8c2fd6c72
2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619 ]
2010-02-25 05:35:11 +00:00
Mark Andrews
dbd13430ce
9.6.2
2010-02-18 03:40:09 +00:00
Mark Andrews
1077e73992
silence compiler warning
2010-01-22 02:36:49 +00:00
Automatic Updater
9feb8eda57
update copyright notice
2010-01-15 23:47:34 +00:00
Evan Hunt
9b72b0258e
prepare for 9.6.2rc1 release
2010-01-15 21:12:11 +00:00
Evan Hunt
3f39cbcc76
2838. [func] Backport support for SHA-2 DNSSEC algorithms,
...
RSASHA256 and RSASHA512, from BIND 9.7. (This
incorporates changes 2726 and 2738 from that
release branch.) [RT #20871 ]
2010-01-15 19:38:54 +00:00
Automatic Updater
d889e9701a
update copyright notice
2010-01-11 23:47:22 +00:00
Francis Dupont
6720b9fe94
Prevent Linux spurious warnings about fwrite(). [RT #20812 ]
2010-01-11 11:02:32 +00:00
Automatic Updater
c91b60a119
update copyright notice
2010-01-07 23:47:36 +00:00
Evan Hunt
0f83518a99
2831. [security] Do not attempt to validate or cache
...
out-of-bailiwick data returned with a secure
answer; it must be re-fetched from its original
source and validated in that context. [RT #20819 ]
2010-01-07 17:49:01 +00:00
Automatic Updater
ef413fafe5
update copyright notice
2009-12-30 23:47:31 +00:00
Tatuya JINMEI 神明達哉
450c3bb498
2828. [security] Cached CNAME or DNAME RR could be returned to clients
...
without DNSSEC validation. [RT #20737 ]
9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:34:30 +00:00
Evan Hunt
c7c6605eb0
2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712 ]
2009-12-30 06:44:45 +00:00
Mark Andrews
ae787010e1
2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781 ]
2009-12-29 22:12:35 +00:00
Evan Hunt
65bbefae47
2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define
...
[RT #20771 ]
2009-12-24 00:34:59 +00:00
Mark Andrews
669b1ee4d8
2814. [func] Provide a definitive error message when a master
...
zone is not loaded. [RT #20757 ]
2009-12-21 04:32:42 +00:00