Commit Graph

3920 Commits

Author SHA1 Message Date
Brian Wellington
d0e69984a9 dnssec verification of cached sets was failing, since the ttl from the
rdataset was used instead of the ttl from the sig record.  Also found
and fixed an unchecked memory allocation.
2000-04-11 18:04:35 +00:00
Andreas Gustafsson
864a05fa26 configuration failed when trusted-keys statement was missing 2000-04-11 17:52:57 +00:00
Brian Wellington
e7a8dfd296 If we mark an rdataset as secure, also mark the sigrdataset as secure. 2000-04-11 17:12:31 +00:00
Andreas Gustafsson
d9b7ec02d9 use the 'trusted-keys' statement to configure security roots 2000-04-11 00:37:59 +00:00
Andreas Gustafsson
84ef83d296 80 columns 2000-04-10 22:00:13 +00:00
Andreas Gustafsson
0f7045b0c4 moved a few more typedefs to <isc/types.h>: isc_region_t,
isc_textregion_t, isc_lex_t
2000-04-10 21:57:24 +00:00
Andreas Gustafsson
e9da40a783 no need to include <isc/buffer.h>, <isc/result.h> from <isc/base64.h> 2000-04-10 21:35:48 +00:00
Andreas Gustafsson
e3b279bfa9 no need to include <isc/buffer.h>, <isc/result.h>, <isc/mem.h> from <isc/base64.h> 2000-04-10 21:33:36 +00:00
Andreas Gustafsson
65e117d576 wired up the 'trusted-keys' config option 2000-04-10 21:31:41 +00:00
Brian Wellington
2a05fa7535 dst_key_iszonekey() was incorrectly checking the 'name type' field of a key.
The constants added to dst.h for dst_key_iszonekey() duplicated constants
in dns/keyvalues.h, and are now gone.
2000-04-10 19:48:05 +00:00
Brian Wellington
7c0e50b562 update 2000-04-08 04:43:50 +00:00
Brian Wellington
17e81b39cd TSIG signed incoming zone transfer works now. 2000-04-08 04:42:42 +00:00
Brian Wellington
dc3fc5830a A couple minor bugs relating to TCP TSIG verification 2000-04-08 04:40:21 +00:00
Andreas Gustafsson
8571e5ca37 failed to configure default view when there were zone statements
but no explicit views; the unconfigured default view had no resolver and therefore
denied recursion to all clients
2000-04-08 00:49:19 +00:00
Michael Graff
b7974ee772 Use sigaction() on NetBSD now, too. Note this requires unproven-pthreads-0.13 or higher. 2000-04-07 23:39:24 +00:00
Michael Graff
c2bb1a45d2 Install default handler for SIGCHLD -- more after I fix NetBSD's pthread code 2000-04-07 23:09:04 +00:00
Andreas Gustafsson
164f0b0cae configure_view() failed to set result to ISC_R_SUCCESS
on successful completion
2000-04-07 22:37:42 +00:00
Andreas Gustafsson
0c637e129e renamed variable configctx -> cctx for consistency and brevity 2000-04-07 22:36:15 +00:00
Andreas Gustafsson
edcb93b49c wired up view options: request-ixfr, provide-ixfr 2000-04-07 22:30:43 +00:00
Brian Wellington
3676eeb6ca snapshot. Includes creating a new validator to validate pending KEYs. 2000-04-07 21:44:47 +00:00
Brian Wellington
f383cdfeb8 Moved the (lame) random number seeding code to the dst initialize routine,
since the openssl dsa code calls the openssl random functions directly,
not through dst_random_get.
2000-04-07 20:50:30 +00:00
James Brister
09c9fc94cf Fixed a function name for style.
Fixed validation of keys used in server statement. Now they must truly be
defined before used. Ditto for in address match list element. Keys
referenced can be inside the enclosing view or at file scope.
2000-04-07 20:41:29 +00:00
Andreas Gustafsson
a25310fd1d if the first RR in an incoming zone transfer was not an SOA,
we got an assertion failure
2000-04-07 19:41:07 +00:00
Michael Graff
7e2c8092db Include <isc/print.h> to get proper definition of vsnprintf() on machines which don't have it. 2000-04-07 19:17:33 +00:00
Michael Graff
c7dc3f60bc Temporary hack to disable use of alarm() etc. on NetBSD. This is only
to help debug a specific pthreads-related problem by letting
the testing system do the real work.
2000-04-07 18:39:19 +00:00
Andreas Gustafsson
913d4c761c cosmetics 2000-04-07 18:30:11 +00:00
Andreas Gustafsson
e82d19b0c7 wired up view options: max-transfer-time-out, max-transfer-idle-out 2000-04-07 18:16:02 +00:00
Andreas Gustafsson
807b4620fa wired up view option: cleaning-interval 2000-04-07 18:04:24 +00:00
James Brister
6abdc5c090 Changes necessary to support server statements inside a view statement. 2000-04-07 17:40:43 +00:00
Brian Wellington
b5debbe212 snapshot. Sends a fetch when a KEY isn't present and would partially handle
a successful response if it got one.  Starts the validator with an
event to avoid deadlock in the resolver.
2000-04-07 17:36:40 +00:00
Brian Wellington
48ba496518 Uncomment the dnssec validator related code that compiles. Without a
way to fill in the security roots tree, this code will not be called
yet in practice.
2000-04-07 17:34:28 +00:00
Andreas Gustafsson
cb284e7bd4 wired up view options: transfer-source, transfer-source-v6 2000-04-07 17:27:22 +00:00
Brian Wellington
b80a8db9f9 Added DNS_EVENT_VALIDATORSTART 2000-04-07 17:15:35 +00:00
Andreas Gustafsson
dded22b184 comment the fact that cview may be NULL in configure_view;
avoid NULL reference when reporting the (probably impossible) error of
the default view missing root hints
2000-04-07 17:08:12 +00:00
Andreas Gustafsson
8f9f5011b0 assertion failure setting forwarders of default view 2000-04-07 16:23:54 +00:00
James Brister
616ee4a3f7 Changes to support keys inside views. 2000-04-07 13:35:06 +00:00
Michael Graff
6324997211 add attributes (line singleton, exlcusive, meta, etc) to rdata C files, and
build a table of them using gen.c.  This means the names are stored twice,
but that will change in the near future.  This will speed up number to text
conversions for rdatatypes, and I plan on speeding up text->number as
well, soon.
2000-04-07 03:54:52 +00:00
Michael Graff
a4e2a43f79 s/DNS_R_/ISC_R_/ as needed 2000-04-07 03:50:33 +00:00
Michael Graff
2fce9cfbf8 add more ISC_R_* mappings 2000-04-07 03:49:10 +00:00
Michael Graff
927d494e07 s/DNS_R_/ISC_R_/ as needed 2000-04-07 03:35:58 +00:00
Michael Graff
674b41a94d translate ISC_R_* values just like do with DNS_R_. 2000-04-07 03:35:36 +00:00
Andreas Gustafsson
57423b6cf9 wired up view options 'forward' and 'forwarders' 2000-04-07 01:07:07 +00:00
Andreas Gustafsson
2e91b1f3d4 configuring zone acl from default view caused assertion failure 2000-04-07 00:51:32 +00:00
Andreas Gustafsson
a672bfbee4 wired up view options: allow-query, allow-recursion, allow-transfer 2000-04-06 23:59:19 +00:00
Andreas Gustafsson
2e097e67d8 wired up view options: allow-query, allow-recursion, allow-transfer;
fixed recently broken creation of default view
2000-04-06 23:58:01 +00:00
Andreas Gustafsson
93c786e092 cleared up some DNS_R_CONTINUE/DNS_R_WAIT confusion;
commented get_dst_key()
2000-04-06 23:09:01 +00:00
Andreas Gustafsson
94497580d8 wired up view options: recursion, auth-nxdomain, transfer-format 2000-04-06 22:51:17 +00:00
Michael Graff
42712a426d document changes 2000-04-06 22:08:48 +00:00
Michael Graff
4195904998 s/DNS_R_/ISC_R_/ change for some codes. 2000-04-06 22:03:35 +00:00
Michael Graff
c1a2cfef7f s/DNS_R_/ISC_R_/ change for some codes. Mostly documentation in these files. 2000-04-06 20:59:29 +00:00