Evan Hunt
75b8de8787
Create automatic tests "autosign" and "metadata". [rt19946]
2009-11-30 21:00:48 +00:00
Vernon Schryver
5d9922e86f
Allow the optional filter-aaaa-on-v4 option in view statements to close #20635
2009-11-28 15:57:37 +00:00
Automatic Updater
521de9e5dd
update copyright notice
2009-11-25 23:46:52 +00:00
Mark Andrews
4bf4beede2
silence compiler warnings
2009-11-25 23:00:32 +00:00
Mark Andrews
29b3b31c0a
adjust dnssec-keygen command line to that supported before 9.7
2009-11-25 20:56:08 +00:00
Mark Andrews
6e849b28b0
fix genrandom location
2009-11-25 13:38:53 +00:00
Mark Andrews
b4bd8d0662
772. [security] When validating, track whether pending data was from
...
the additional section or not and only return it if
validates as secure. [RT #20438 ]
2009-11-25 04:50:25 +00:00
Evan Hunt
ce3b2c5189
2788. [bug] dnssec-signzone could sign with keys that were
...
not requested [RT #20625 ]
2009-11-25 03:17:11 +00:00
Mark Andrews
d0ca4e90e2
2786. [bug] Additional could be promoted to answer. [RT #20663 ]
2009-11-25 02:22:05 +00:00
Evan Hunt
d312bc5d81
2785. [bug] Revoked keys could fail to self-sign [RT #20652 ]
2009-11-24 03:42:32 +00:00
Mark Andrews
dc92707066
2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
...
buffer size of 512 or less. [RT #20654 ]
2009-11-24 03:09:57 +00:00
Evan Hunt
cef109efa7
2780. [bug] dnssec-keygen -A none didn't properly unset the
...
activation date in all cases. [RT #20648 ]
2779. [bug] Dynamic key revokation could fail. [RT #20644 ]
2778. [bug] dnssec-signzone could fail when a key was revoked
without deleting the unrevoked version. [RT #20638 ]
2009-11-23 02:55:41 +00:00
Francis Dupont
1cd538c051
20643: RSASHA2 NSEC3 compatible in dnssec-keyfromlabel
2009-11-21 17:54:09 +00:00
Evan Hunt
0088b45de5
2774. [bug] Existing cache DB wasn't being reused after
...
reconfiguration. [RT #20629 ]
2009-11-19 18:52:40 +00:00
cvs2git
0e3b4ffe86
This commit was manufactured by cvs2git to create branch 'v9_4'.
2009-11-18 23:48:08 +00:00
Automatic Updater
fe2b9bf570
update copyright notice
2009-11-18 23:48:07 +00:00
Evan Hunt
b08325a7f3
2773. [bug] In autosigned zones, the SOA could be signed
...
with the KSK. [RT #20628 ]
2009-11-18 21:22:31 +00:00
Mark Andrews
a39a5f4d81
2772. [security] When validating, track whether pending data was from
...
the additional section or not and only return it if
validates as secure. [RT #20438 ]
2009-11-17 23:55:18 +00:00
Evan Hunt
00295e0650
2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568 ]
2009-11-16 04:27:44 +00:00
Mark Andrews
adb4211586
2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610 ]
2009-11-12 14:02:38 +00:00
Automatic Updater
3a5fe5abf0
regen
2009-11-11 01:14:42 +00:00
Evan Hunt
2e2a294b05
remove unnecessary braces around {-o filename}
2009-11-10 21:30:42 +00:00
Evan Hunt
3839749200
2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533 ]
2009-11-10 20:02:01 +00:00
Evan Hunt
7fe4b0447f
2757. [bug] dig: assertion failure could occur in connect
...
timeout. [RT #20599 ]
2009-11-10 17:27:40 +00:00
Evan Hunt
e2facd7af2
2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
2009-11-09 01:28:32 +00:00
Evan Hunt
cc3ed192b0
2754. [bug] Secure-to-insecure transitions failed when zone
...
was signed with NSEC3. [RT #20587 ]
2009-11-06 08:38:56 +00:00
Evan Hunt
aa2f010f13
Switch from OpenSSL 0.9.8k to 0.9.8l
2009-11-06 03:14:10 +00:00
Evan Hunt
6f6f08b7a4
2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588 ]
2009-11-06 01:06:38 +00:00
Mark Andrews
052e7083ac
correct bind9.xsl.h dependancy
2009-11-05 02:59:04 +00:00
Evan Hunt
9a050780dc
2750. [bug] dig: assertion failure could occur when a server
...
didn't have an address. [RT #20579 ]
2009-11-05 01:57:49 +00:00
Mark Andrews
0a30185f80
2748. [func] Identify bad answers from GTLD servers and treat them
...
as referrals. [RT #18884 ]
2009-11-04 02:15:30 +00:00
Automatic Updater
64affc54f9
regen
2009-11-03 21:59:04 +00:00
Evan Hunt
f80b665135
fix typo: s/pcks11/pkcs11/
2009-11-03 21:44:46 +00:00
Mark Andrews
9d856845d6
2744. [func] Log if a query was over TCP. [RT #19961 ]
2009-11-03 04:39:41 +00:00
Mark Andrews
2162c1ed3d
add missing period
2009-11-03 01:31:17 +00:00
Automatic Updater
575e15fed9
regen
2009-10-28 01:14:38 +00:00
Mark Andrews
c6d2578fd6
2741. [func] Allow the dnssec-keygen progress messages to be
...
suppressed (dnssec-keygen -q). Automatically
suppress the progress messages when stdin is not
a tty. [RT #20474 ]
2009-10-28 00:27:10 +00:00
Automatic Updater
990dca4605
update copyright notice
2009-10-27 23:47:45 +00:00
Evan Hunt
95f2377b4f
2739. [cleanup] Clean up API for initializing and clearing trust
...
anchors for a view. [RT #20211 ]
2009-10-27 22:46:13 +00:00
Mark Andrews
e09cdbac08
2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
...
test. [RT #20453 ]
2009-10-27 22:25:37 +00:00
Evan Hunt
e3b59e4af7
Minor cleanup in dnssec-* tools
2009-10-27 18:56:49 +00:00
Evan Hunt
312a00fb75
add named-symtbl.c to .cvsignore
2009-10-27 06:06:46 +00:00
Evan Hunt
72cfcb48a7
cleanup ddns.key after nsupdate test
2009-10-27 05:57:06 +00:00
Evan Hunt
0ce9fba8f0
cleanup DLV test
2009-10-27 05:49:50 +00:00
Mark Andrews
9e9e7112f9
2737. [func] UPDATE requests can leak existance information.
...
[RT #17261 ]
2009-10-27 05:42:25 +00:00
Mark Andrews
63d5a6f680
2736. [func] Improve the performance of NSEC signed zones with
...
more than a normal amount of glue below a delegation.
[RT #20191 ]
2009-10-27 04:46:58 +00:00
Evan Hunt
e8831e51c1
2735. [bug] dnssec-signzone could fail to read keys
...
that were specified on the command line with
full paths, but weren't in the current
directory. [RT #20421 ]
2009-10-27 03:59:45 +00:00
Mark Andrews
af30180834
2734. [port] cygwin: arpaname did not compile. [RT #20473 ]
2009-10-27 03:05:33 +00:00
Automatic Updater
5f744ebbdc
update copyright notice
2009-10-26 23:47:35 +00:00
Evan Hunt
6f9c93a885
2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355 ]
2009-10-26 23:36:53 +00:00
