Brian Wellington
d0e69984a9
dnssec verification of cached sets was failing, since the ttl from the
...
rdataset was used instead of the ttl from the sig record. Also found
and fixed an unchecked memory allocation.
2000-04-11 18:04:35 +00:00
Andreas Gustafsson
864a05fa26
configuration failed when trusted-keys statement was missing
2000-04-11 17:52:57 +00:00
Brian Wellington
e7a8dfd296
If we mark an rdataset as secure, also mark the sigrdataset as secure.
2000-04-11 17:12:31 +00:00
Andreas Gustafsson
d9b7ec02d9
use the 'trusted-keys' statement to configure security roots
2000-04-11 00:37:59 +00:00
Andreas Gustafsson
84ef83d296
80 columns
2000-04-10 22:00:13 +00:00
Andreas Gustafsson
0f7045b0c4
moved a few more typedefs to <isc/types.h>: isc_region_t,
...
isc_textregion_t, isc_lex_t
2000-04-10 21:57:24 +00:00
Andreas Gustafsson
e9da40a783
no need to include <isc/buffer.h>, <isc/result.h> from <isc/base64.h>
2000-04-10 21:35:48 +00:00
Andreas Gustafsson
e3b279bfa9
no need to include <isc/buffer.h>, <isc/result.h>, <isc/mem.h> from <isc/base64.h>
2000-04-10 21:33:36 +00:00
Andreas Gustafsson
65e117d576
wired up the 'trusted-keys' config option
2000-04-10 21:31:41 +00:00
Brian Wellington
2a05fa7535
dst_key_iszonekey() was incorrectly checking the 'name type' field of a key.
...
The constants added to dst.h for dst_key_iszonekey() duplicated constants
in dns/keyvalues.h, and are now gone.
2000-04-10 19:48:05 +00:00
Brian Wellington
7c0e50b562
update
2000-04-08 04:43:50 +00:00
Brian Wellington
17e81b39cd
TSIG signed incoming zone transfer works now.
2000-04-08 04:42:42 +00:00
Brian Wellington
dc3fc5830a
A couple minor bugs relating to TCP TSIG verification
2000-04-08 04:40:21 +00:00
Andreas Gustafsson
8571e5ca37
failed to configure default view when there were zone statements
...
but no explicit views; the unconfigured default view had no resolver and therefore
denied recursion to all clients
2000-04-08 00:49:19 +00:00
Michael Graff
b7974ee772
Use sigaction() on NetBSD now, too. Note this requires unproven-pthreads-0.13 or higher.
2000-04-07 23:39:24 +00:00
Michael Graff
c2bb1a45d2
Install default handler for SIGCHLD -- more after I fix NetBSD's pthread code
2000-04-07 23:09:04 +00:00
Andreas Gustafsson
164f0b0cae
configure_view() failed to set result to ISC_R_SUCCESS
...
on successful completion
2000-04-07 22:37:42 +00:00
Andreas Gustafsson
0c637e129e
renamed variable configctx -> cctx for consistency and brevity
2000-04-07 22:36:15 +00:00
Andreas Gustafsson
edcb93b49c
wired up view options: request-ixfr, provide-ixfr
2000-04-07 22:30:43 +00:00
Brian Wellington
3676eeb6ca
snapshot. Includes creating a new validator to validate pending KEYs.
2000-04-07 21:44:47 +00:00
Brian Wellington
f383cdfeb8
Moved the (lame) random number seeding code to the dst initialize routine,
...
since the openssl dsa code calls the openssl random functions directly,
not through dst_random_get.
2000-04-07 20:50:30 +00:00
James Brister
09c9fc94cf
Fixed a function name for style.
...
Fixed validation of keys used in server statement. Now they must truly be
defined before used. Ditto for in address match list element. Keys
referenced can be inside the enclosing view or at file scope.
2000-04-07 20:41:29 +00:00
Andreas Gustafsson
a25310fd1d
if the first RR in an incoming zone transfer was not an SOA,
...
we got an assertion failure
2000-04-07 19:41:07 +00:00
Michael Graff
7e2c8092db
Include <isc/print.h> to get proper definition of vsnprintf() on machines which don't have it.
2000-04-07 19:17:33 +00:00
Michael Graff
c7dc3f60bc
Temporary hack to disable use of alarm() etc. on NetBSD. This is only
...
to help debug a specific pthreads-related problem by letting
the testing system do the real work.
2000-04-07 18:39:19 +00:00
Andreas Gustafsson
913d4c761c
cosmetics
2000-04-07 18:30:11 +00:00
Andreas Gustafsson
e82d19b0c7
wired up view options: max-transfer-time-out, max-transfer-idle-out
2000-04-07 18:16:02 +00:00
Andreas Gustafsson
807b4620fa
wired up view option: cleaning-interval
2000-04-07 18:04:24 +00:00
James Brister
6abdc5c090
Changes necessary to support server statements inside a view statement.
2000-04-07 17:40:43 +00:00
Brian Wellington
b5debbe212
snapshot. Sends a fetch when a KEY isn't present and would partially handle
...
a successful response if it got one. Starts the validator with an
event to avoid deadlock in the resolver.
2000-04-07 17:36:40 +00:00
Brian Wellington
48ba496518
Uncomment the dnssec validator related code that compiles. Without a
...
way to fill in the security roots tree, this code will not be called
yet in practice.
2000-04-07 17:34:28 +00:00
Andreas Gustafsson
cb284e7bd4
wired up view options: transfer-source, transfer-source-v6
2000-04-07 17:27:22 +00:00
Brian Wellington
b80a8db9f9
Added DNS_EVENT_VALIDATORSTART
2000-04-07 17:15:35 +00:00
Andreas Gustafsson
dded22b184
comment the fact that cview may be NULL in configure_view;
...
avoid NULL reference when reporting the (probably impossible) error of
the default view missing root hints
2000-04-07 17:08:12 +00:00
Andreas Gustafsson
8f9f5011b0
assertion failure setting forwarders of default view
2000-04-07 16:23:54 +00:00
James Brister
616ee4a3f7
Changes to support keys inside views.
2000-04-07 13:35:06 +00:00
Michael Graff
6324997211
add attributes (line singleton, exlcusive, meta, etc) to rdata C files, and
...
build a table of them using gen.c. This means the names are stored twice,
but that will change in the near future. This will speed up number to text
conversions for rdatatypes, and I plan on speeding up text->number as
well, soon.
2000-04-07 03:54:52 +00:00
Michael Graff
a4e2a43f79
s/DNS_R_/ISC_R_/ as needed
2000-04-07 03:50:33 +00:00
Michael Graff
2fce9cfbf8
add more ISC_R_* mappings
2000-04-07 03:49:10 +00:00
Michael Graff
927d494e07
s/DNS_R_/ISC_R_/ as needed
2000-04-07 03:35:58 +00:00
Michael Graff
674b41a94d
translate ISC_R_* values just like do with DNS_R_.
2000-04-07 03:35:36 +00:00
Andreas Gustafsson
57423b6cf9
wired up view options 'forward' and 'forwarders'
2000-04-07 01:07:07 +00:00
Andreas Gustafsson
2e91b1f3d4
configuring zone acl from default view caused assertion failure
2000-04-07 00:51:32 +00:00
Andreas Gustafsson
a672bfbee4
wired up view options: allow-query, allow-recursion, allow-transfer
2000-04-06 23:59:19 +00:00
Andreas Gustafsson
2e097e67d8
wired up view options: allow-query, allow-recursion, allow-transfer;
...
fixed recently broken creation of default view
2000-04-06 23:58:01 +00:00
Andreas Gustafsson
93c786e092
cleared up some DNS_R_CONTINUE/DNS_R_WAIT confusion;
...
commented get_dst_key()
2000-04-06 23:09:01 +00:00
Andreas Gustafsson
94497580d8
wired up view options: recursion, auth-nxdomain, transfer-format
2000-04-06 22:51:17 +00:00
Michael Graff
42712a426d
document changes
2000-04-06 22:08:48 +00:00
Michael Graff
4195904998
s/DNS_R_/ISC_R_/ change for some codes.
2000-04-06 22:03:35 +00:00
Michael Graff
c1a2cfef7f
s/DNS_R_/ISC_R_/ change for some codes. Mostly documentation in these files.
2000-04-06 20:59:29 +00:00