Commit Graph
3811 Commits
Author SHA1 Message Date
Mark Andrews 0ad5cb4782 1350. [bug] dns_name_fromtext() failed to handle too many labels
gracefully.
2002-08-02 00:25:15 +00:00
Danny Mayer ace73367af Added files and functions 2002-08-01 03:37:01 +00:00
Danny Mayer 59d1535572 casts required 2002-08-01 03:31:44 +00:00
Mark Andrews 87f4715d6c 1344. [func] Log if the serial number on the master has gone backwards.
If you have multiple machines specified in the masters
                        clause you may want to set 'multi-master yes;' to suppress
                        this warning.
2002-07-29 06:58:46 +00:00
Mark Andrews 3733c24efa 1342, [func] Log remote address with TCP dispatch failures. 2002-07-29 01:03:24 +00:00
Mark Andrews f6ff008101 1340. [bug] Delay and spread out the startup refresh load. 2002-07-26 06:27:31 +00:00
Mark Andrews f0471ca4b7 1336. [func] Nibble lookups under IP6.ARPA are now supported by
dns_byaddr_create().  dns_byaddr_createptrname() is
                        deprecated, use dns_byaddr_createptrname2() instead.
2002-07-24 06:42:32 +00:00
Mark Andrews 03d337f54a For some zones, querying for a DS record before anything else would SERVFAIL. 2002-07-23 03:41:44 +00:00
Mark Andrews 638fe804a5 1255. [bug] When performing a nonexistence proof, the validator
should discard parent NXTs from higher in the DNS.
2002-07-22 03:00:49 +00:00
Mark Andrews 9db3d9d14e 1254. [bug] When signing/verifying rdatasets, duplicate rdatas
need to be suppressed.
2002-07-22 02:49:14 +00:00
Mark Andrews 0b75a2dd3b 1252. [func] Report the current serial with periodic commits when
rolling forward the journal.
2002-07-22 02:06:04 +00:00
Mark Andrews c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews ff30cdeb78 The validator didn't handle missing DS records correctly. 2002-07-19 03:29:15 +00:00
Mark Andrews 4d9f3f00d9 1249. [func] named-checkzone will now check if nameservers that
appear to be IP addresses.  Available modes "fail",
                        "warn" (default) and "ignore" the results of the
                        check.
2002-07-19 02:34:58 +00:00
Mark Andrews d196b45738 1248. [bug] The validator could incorrectly verify an invalid
negative proof.
2002-07-15 03:27:44 +00:00
Mark Andrews 86f6b92e35 1248. [bug] The validator could incorrectly verify an invalid
negative proof.

When checking the range of the nxt record, the code needs to handle
the case where the 'next name' field points to the origin.  The way
that the origin was determined was looking at the 'signer' field
of the first SIG NXT, since NXTs are signed by the zone key.  This
doesn't work, because the first SIG could have been spoofed.  It
now defers checking the nxt range until both the SOA and NXT have
been verified, and uses the owner of the SOA name as the origin.
bwelling
2002-07-15 03:25:28 +00:00
Mark Andrews 25276bd1ec 1247. [bug] The validator would incorrectly mark data as insecure
when seeing a bogus signature before a correct
                        signature.
2002-07-15 02:57:14 +00:00
Mark Andrews 320d6ee24e 1246. [bug] DNAME/CNAME signatures were not being cached when
validation was not being performed. [RT #3284]
2002-07-15 02:23:58 +00:00
Mark Andrews 53f9ddf27c silence pointer mismatch 2002-07-04 04:19:54 +00:00
Mark Andrews de49761421 1330. [bug] 'rndc stop' failed to cause zones to be flushed
sometimes. [RT #3157]
2002-06-19 07:14:48 +00:00
Mark Andrews 5758e9adfb 1329. [func] Log that a zone transfer was covered by a TSIG. 2002-06-19 06:47:25 +00:00
Mark Andrews b0d31c78bc uninitalised variable 2002-06-19 04:15:12 +00:00
Mark Andrews 0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Mark Andrews e0fa16fe19 1326. [bug] Badly encoded LOC record when the size, horizontal
precision or vertical precision was 0.1m.
2002-06-14 23:40:14 +00:00
Mark Andrews 5991ce4236 remove change #1284 2002-06-13 07:25:25 +00:00
Mark Andrews 7d389c324c 1324. [func] New function: dns_zone_name(). 2002-06-13 07:05:47 +00:00
Mark Andrews 9b7c023fe6 1218. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
could be left with a trailing "\" after configure
                        has been run.
2002-06-05 22:34:57 +00:00
Mark Andrews 8f96645217 1208. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
reflect written requirements.
2002-05-29 00:27:53 +00:00
Mark Andrews da091cda77 1207. [bug] REQUIRE that DNS_DBADD_MERGE only be set when adding
a rdataset to a zone db in the rbtdb implementation of
                        addrdataset.
2002-05-28 05:49:20 +00:00
Mark Andrews d8d489cd8e 1206. [bug] dns_name_downcase() enforce requirement that
target != NULL or name->buffer != NULL.
2002-05-28 03:39:46 +00:00
Mark Andrews c8aa2c8311 1204. [bug] The RTT estimate on unused servers was not aged.
[RT #2569]
2002-05-27 06:30:25 +00:00
Mark Andrews acc8b7ac3d 1299. [port] Darwin uses (unsigned long) for size_t. [RT #2590] 2002-05-23 04:32:30 +00:00
Mark Andrews b9efcf0a37 1297. [func] You can now create your own customised printing
styles: dns_master_stylecreate() and
                        dns_master_styledestroy().
2002-05-21 06:12:45 +00:00
Mark Andrews 29f5bb81e2 1284. [bug] Memory leak if dns_db_beginload() failed. 2002-05-08 06:51:52 +00:00
Mark Andrews ddc592d128 1283. [bug] Reference after free error if dns_dispatchmgr_create()
failed.
2002-05-08 06:34:30 +00:00
Mark Andrews ab36b9cfee add config.h 2002-05-02 06:55:23 +00:00
Mark Andrews c99d9017ba 1275. [bug] When verifying that an NXT proves nonexistence, check
the rcode of the message and only do the matching NXT
                        check.  That is, for NXDOMAIN responses, check that
                        the name is in the range between the NXT owner and
                        next name, and for NOERROR NODATA responses, check
                        that the type is not present in the NXT bitmap.
2002-04-29 23:50:26 +00:00
Mark Andrews c4a9ce445c 1274. [func] preferred-glue option from BIND 8.3. 2002-04-26 00:40:37 +00:00
Mark Andrews d6fbfd28ea 1243. [bug] It was possible to trigger a REQUIRE() in
dns_message_findtype(). [RT #2659]
2002-04-03 02:44:57 +00:00
Mark Andrews 2eeaed2812 missed one change 2002-04-02 08:04:42 +00:00
Mark Andrews 7791dd06ea 1242. [bug] named-checkzone failed if a journal existed. [RT #2657] 2002-04-02 06:54:07 +00:00
Mark Andrews abc93ada82 rrset-order cyclic w/ sortlist broken. 2002-04-02 06:06:29 +00:00
Mark Andrews 9be230cfca make val unsigned as we are now using strtoul(). 2002-03-27 23:31:32 +00:00
Mark Andrews f0ffc28f61 1238. [bug] It is possible to lockup the server when shutting down
if a notifies were being processed. [RT #2591]
2002-03-27 04:48:21 +00:00
Mark Andrews beed6a0e22 Change 1236 was incorrect. [RT #2611] 2002-03-27 03:31:49 +00:00
Mark Andrews 18360f880c missed it part 2002-03-20 22:25:58 +00:00
Mark Andrews 21ca3480cd 4->5 2002-03-20 22:06:07 +00:00
Mark Andrews 8695d7b357 1236. [bug] dns_rdata{class,type}_fromtext() didn't handle non
NULL terminated text regions. [RT #2588]
2002-03-20 17:12:29 +00:00
Mark Andrews f76c4ebaf5 1235. [func] Report 'out of memory' errors from openssl. 2002-03-19 04:30:57 +00:00
Brian Wellington d56fa53141 Only allow hex or decimal when parsing key flags, not octal. 2002-03-17 18:59:43 +00:00