Evan Hunt
d0c3272eaa
[master] copyrights
2017-10-11 21:11:37 -07:00
Evan Hunt
99ab7127e1
[master] prep 9.12.0b1
2017-10-11 21:10:49 -07:00
Evan Hunt
560d8b833e
[master] tag initializing keys so they can't be used for normal validation
...
4773. [bug] Keys specified in "managed-keys" statements
can now only be used when validating key refresh
queries during initialization of RFC 5011 key
maintenance. If initialization fails, DNSSEC
validation of normal queries will also fail.
Previously, validation of normal queries could
succeed using the initializing key, potentially
masking problems with managed-keys. [RT #46077 ]
2017-10-11 21:01:13 -07:00
Tinderbox User
77c7d1c555
regen master
2017-10-12 01:08:20 +00:00
Evan Hunt
9f1e715a64
[master] X_OK bit not supported on windows
2017-10-11 17:43:16 -07:00
Evan Hunt
025f606463
[master] copyrights
2017-10-11 17:08:21 -07:00
Evan Hunt
89b2fc092d
[master] use NUL instead of /dev/null for KRB5_CONFIG on windows
2017-10-11 16:03:13 -07:00
Evan Hunt
94f022ec02
[master] fix AFL compile error
2017-10-11 15:26:35 -07:00
Mark Andrews
a9a983781e
reserve subscription flags
2017-10-12 09:19:37 +11:00
Michał Kępień
defa292088
[master] expanded libns unit tests
...
4772. [test] Expanded unit testing framework for libns, using
hooks to interrupt query flow and inspect state
at specified locations. [RT #46173 ]
2017-10-11 15:02:50 -07:00
Evan Hunt
b2597ce86b
[master] ignore cache when sending 5011 refresh queries
...
4771. [bug] When sending RFC 5011 refresh queries, disregard
cached DNSKEY rrsets. [RT #46251 ]
2017-10-11 14:24:29 -07:00
Evan Hunt
800fbdfc9c
[master] change to func tag
2017-10-11 10:21:10 -07:00
Michał Kępień
0d61fe5dfd
[master] Remove non-portable isc_buffer_printf() unit test
2017-10-11 09:30:48 +02:00
Ondřej Surý
5de02a075b
[master] reduce unnecessary priming queries
...
4770. [bug] Cache additional data from priming queries as glue.
Previously they were ignored as unsigned
non-answer data from a secure zone, and never
actually got added to the cache, causing hints
to be used frequently for root-server
addresses, which triggered re-priming. [RT #45241 ]
2017-10-11 09:11:47 +02:00
Ondřej Surý
1ca7e01aa7
[master] make writable directory and managed-keys directory mandatory - check in load_configuration (cherry-picked from rt46077b)
2017-10-11 08:44:26 +02:00
Ondřej Surý
b4c8cab0e2
Move KRB5_CONFIG=/dev/null to conf.sh.* so the named run in the tests gets the setting
2017-10-11 06:30:53 +00:00
Evan Hunt and Ondřej Surý
16d6fab2e5
[master] make writable directory and managed-keys directory mandatory
...
4769. [bug] The working directory and managed-keys directory has
to be writeable (and seekable). [RT #46077 ]
2017-10-11 08:21:23 +02:00
Mark Andrews
9492533d46
ignore Makefile
2017-10-11 10:59:46 +11:00
Ondřej Surý
74f46c45b0
Move KRB5_CONFIG=/dev/null to conf.sh.* so it gets applied to named and not only the tsiggss test
2017-10-10 12:22:10 +02:00
Mark Andrews
23a4f70be0
remove unused variable
2017-10-10 20:02:35 +11:00
Tinderbox User
005bdf067b
regen master
2017-10-10 01:08:02 +00:00
Tinderbox User
5414e48606
update copyright notice / whitespace
2017-10-09 23:45:53 +00:00
Tinderbox User
971503762e
newcopyrights
2017-10-09 23:30:15 +00:00
Evan Hunt
4c368378fc
[master] print.h; add missing win32 declaration
2017-10-09 15:01:46 -07:00
Evan Hunt
bd08d94f8b
[master] add dnssec-cds man page to ARM
2017-10-09 10:58:27 -07:00
Evan Hunt
c89f1bf1b6
[master] turn off memory fill by default
...
4768. [func] By default, memory is no longer filled with tag values
when it is allocated or freed; this improves
performance but makes debugging of certain memory
issues more difficult. "named -M fill" turns memory
filling back on. (Building "configure
--enable-developer", turns memory fill on by
default again; it can then be disabled with
"named -M nofill".) [RT #45123 ]
2017-10-09 09:55:37 -07:00
Michał Kępień
6cdff94830
[master] Remove unused variable "len" from buildfilename()
2017-10-09 13:53:02 +02:00
Michał Kępień
077f9626c2
[master] Add isc_buffer_printf()
...
4767. [func] Add a new function, isc_buffer_printf(), which can be
used to append a formatted string to the used region of
a buffer. [RT #46201 ]
2017-10-09 11:43:07 +02:00
Michał Kępień
c0f78692ee
[master] Sync draft-durand-doa-over-dns snippet in lib/dns/tests/rdata_test.c with draft version -03
2017-10-09 10:52:50 +02:00
Mark Andrews
5df3f839b2
4766. [cleanup] Addresss Coverity warnings. [RT #46150 ]
...
4765. [bug] Address potential INSIST in dnssec-cds. [RT #46150 ]
2017-10-09 18:34:31 +11:00
Mark Andrews
2d22725336
4764. [bug] Address portability issues in cds system test.
...
[RT #46214 ]
2017-10-09 12:58:14 +11:00
Tinderbox User
8c3ee6e6a5
regen master
2017-10-09 01:08:14 +00:00
Mark Andrews
42ed778b94
cleanup
2017-10-09 11:05:46 +11:00
Evan Hunt
cd20cbc9c0
[master] add DOA to ARM
2017-10-07 19:34:13 -07:00
Tinderbox User
7623f92536
regen master
2017-10-08 01:08:55 +00:00
Tinderbox User
3b5e75c07a
update copyright notice / whitespace
2017-10-07 23:45:58 +00:00
Tinderbox User
2e3b69a800
newcopyrights
2017-10-07 23:30:20 +00:00
Mark Andrews
fa512bc524
ignore Makefile
...
(cherry picked from commit 65d59e1418
2017-10-08 06:53:12 +11:00
Mark Andrews
02a669a9a6
don't force souce port
2017-10-08 06:42:39 +11:00
Mark Andrews
e09b9e7a91
silence VC compiler warning
2017-10-07 14:04:23 +11:00
Mark Andrews
fb5c7e04d3
add lib\ns to link directories
2017-10-07 13:41:10 +11:00
Evan Hunt
fd140b1261
[master] use mysql_config if available
...
4763. [contrib] Improve compatibility when building MySQL DLZ
module by using mysql_config if available.
[RT #45558 ]
2017-10-06 19:09:30 -07:00
Mark Andrews
352185e9a8
map tat to trust-anchor-telemetry
2017-10-07 12:11:02 +11:00
Tinderbox User
0f91b4097f
regen master
2017-10-07 01:09:38 +00:00
Evan Hunt
4c6df1653c
[master] add missing names
2017-10-06 17:38:35 -07:00
Mark Andrews
f28498dca1
add dependancies on libns
2017-10-07 11:14:36 +11:00
Mark Andrews
ec0a9c0525
check* depend on libns
2017-10-07 10:59:32 +11:00
Tinderbox User
6636beb00b
update copyright notice / whitespace
2017-10-06 23:45:54 +00:00
Tinderbox User
81198ca4b8
newcopyrights
2017-10-06 23:30:23 +00:00
Evan Hunt
995c41e8f0
[master] further restrict update-policy local
...
4762. [func] "update-policy local" is now restricted to updates
from local addresses. (Previously, other addresses
were allowed so long as updates were signed by the
local session key.) [RT #45492 ]
2017-10-06 15:43:31 -07:00
Evan Hunt
Tinderbox User
Mark Andrews
Michał Kępień
Ondřej Surý