Evan Hunt
cfb1587eb9
2619. [func] Add support for RFC 5011, automatic trust anchor
...
maintenance. The new "managed-keys" statement can
be used in place of "trusted-keys" for zones which
support this protocol. (Note: this syntax is
expected to change prior to 9.7.0 final.) [RT #19248 ]
2009-06-30 02:53:46 +00:00
Mark Andrews
858cc1200e
update description of 2517
2009-06-30 00:10:01 +00:00
Mark Andrews
01dbc4fc00
2618. [bug] The sdb and sdlz db_interator_seek() methods could
...
loop infinitely. [RT #19847 ]
2009-06-26 06:21:03 +00:00
Mark Andrews
870332fb6d
2617. [bug] ifconfig.sh failed to emit an error message when
...
run from the wrong location. [RT #19375 ]
2009-06-26 06:08:40 +00:00
Mark Andrews
371642de8b
update description
2009-06-25 05:32:48 +00:00
Mark Andrews
d8f118f4a0
2616. [bug] The nameserver argument to 'host' was being ignored.
...
[RT #19852 ]
2009-06-24 02:51:29 +00:00
Mark Andrews
76110b31fe
2615. [bug] "__attribute__((unused))" was in the wrong place
...
for ia64 gcc builds. [RT #19854 ]
2009-06-24 02:22:50 +00:00
Mark Andrews
8777696411
change number
2009-06-24 02:11:59 +00:00
Mark Andrews
f7b683b054
2615. [port] win32: 'named -v' should automatically be executed
...
in the foreground. [RT #19844 ]
2009-06-23 07:34:39 +00:00
Tatuya JINMEI 神明達哉
95f999508b
placeholder for rt#19828 (not necessary for the head)
2009-06-17 23:40:32 +00:00
Evan Hunt
b272d38cc5
2612. [func] Add default values for the arguments to
...
dnssec-keygen. Without arguments, it will now
generate a 1024-bit RSASHA1 zone-signing key,
or with the -f KSK option, a 2048-bit RSASHA1
key-signing key. [RT #19300 ]
2611. [func] Add -l option to dnssec-dsfromkey to generate
DLV records instead of DS records. [RT #19300 ]
2009-06-17 06:51:44 +00:00
Mark Andrews
e8a534049c
showsearh -> showsearch
2009-06-11 01:21:03 +00:00
Mark Andrews
f4ea363e3a
2610. [port] sunos: Change #2363 was not complete. [RT #19796 ]
2009-06-10 02:23:42 +00:00
Evan Hunt
351b62535d
2609. [func] Simplify the configuration of dynamic zones:
...
- add ddns-confgen command to generate
configuration text for named.conf
- add zone option "ddns-autoconf yes;", which
causes named to generate a TSIG session key
and allow updates to the zone using that key
- add '-l' (localhost) option to nsupdate, which
causes nsupdate to connect to a locally-running
named process using the session key generated
by named
[RT #19284 ]
2009-06-10 00:27:22 +00:00
Mark Andrews
2534a73a59
2608. [func] Perform post signing verification checks in
...
dnssec-signzone. These can be disabled with -P.
The post sign verification test ensures that for each
algorithm in use there is at least one non revoked
self signed KSK key. That all revoked KSK keys are
self signed. That all records in the zone are signed
by the algorithm. [RT #19653 ]
2009-06-04 02:13:37 +00:00
Mark Andrews
f05a6b110f
2607. [bug] named could incorrectly delete NSEC3 records for
...
empty nodes when processing a update request.
[RT #19749 ]
2009-06-04 01:43:41 +00:00
Mark Andrews
0bc3af9834
2606. [bug] "delegation-only" was not being accepted in
...
delegation-only type zones. [RT #19717 ]
2009-06-03 00:04:38 +00:00
Mark Andrews
5422cf284f
2605. [bug] Accept DS responses from delegation only zones.
...
[RT # 19296]
2009-06-02 05:51:44 +00:00
Tatuya JINMEI 神明達哉
40d0f115a6
2604. [func] Add support for DNS rebinding attack prevention through
...
new options, deny-answer-addresses and
deny-answer-aliases. Based on contributed code from
JD Nurmi, Google. [RT #18192 ]
2009-05-29 22:22:37 +00:00
Mark Andrews
fc7ecc628d
2603. [port] win32: handle .exe extension of named-checkzone and
...
named-comilezone argv[0] names under windows.
[RT #19767 ]
2009-05-29 02:14:31 +00:00
Mark Andrews
7be6336565
2602. [port] win32: fix debugging command line build of libisccfg.
...
[RT #19767 ]
2009-05-29 01:16:31 +00:00
Jeremy Reed
5d924e398e
2601. [doc] Mention file creation mode mask in the
...
named manual page.
Similar to what is also in the migration document.
Also see Support ticket 862.
2009-05-21 19:54:28 +00:00
Jeremy Reed
6c3c79e491
2600. [doc] ARM: miscellaneous reformatting for different
...
page widths. [RT #19574 ]
Split comments to multiple lines or move comments to own lines for
example.
Some fixed width examples are too wide for my printed page, so fixed
Splits many programlisting's to multiple lines.
Some move comments to above and some merge some comments.
Note that this patch covers configuration examples and also the "Grammar".
Also while here fix docbook formatting for a Not Implemented
check-names (but still that is too wide so I need to change). And
also the patch changes a couple tabs to spaces. And changed case of
example comments to be consistent with previous lines.
There shouldn't be any content changes here.
This doesn't complete this PR.
Even this patch, the official ARM PDF has other text that disappears
into the right margin. So still working on this.
2009-05-14 20:24:14 +00:00
Mark Andrews
4c2ed3d141
2599. [bug] Address rapid memory growth when validation fails.
...
[RT #19654 ]
2009-05-11 02:22:03 +00:00
Francis Dupont
ddac1a2b98
reserve -F
2009-05-07 09:33:52 +00:00
Mark Andrews
e7eede965d
2597. [bug] Handle a validation failure with a insecure delegation
...
from a NSEC3 signed master/slave zone. [RT #19464 ]
2009-05-07 02:34:19 +00:00
Tatuya JINMEI 神明達哉
5d7849ad7f
2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
...
long, leading to inefficient memory usage or rejecting
newer cache entries in the worst case. [RT #19563 ]
2009-05-06 22:53:54 +00:00
Francis Dupont
d302a620e0
Fix unknown extended rcodes in dig
2009-05-06 10:16:32 +00:00
Jeremy Reed
708ebf710e
Wrap long line (I added).
2009-05-04 17:57:59 +00:00
Jeremy Reed
4144efb390
2594. [func] Have rndc warn if using its default configuration file
...
when the key file also exists. [RT #19424 ]
2009-05-04 17:38:56 +00:00
Francis Dupont
cc620f9fdb
Improve a corner source of SERVFAILs [RT #19632 ]
2009-04-30 11:45:10 +00:00
Mark Andrews
3836f447ee
2592. [bug] Treat "any" as a type in nsupdate. [RT #19455 ]
2009-04-30 07:10:09 +00:00
Mark Andrews
47323be2af
2591. [bug] named could die when processing a update in
...
removed_orphaned_ds(). [RT #19507 ]
2009-04-30 06:59:11 +00:00
Mark Andrews
b770eae51e
s/diff/update/
2009-04-30 06:55:33 +00:00
Mark Andrews
d2c115f913
2590. [func] Report zone/class of "diff with no effect". [RT #19542 ]
2009-04-30 06:53:10 +00:00
Mark Andrews
f030c71500
2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
...
[RT #19626 ]
2009-04-29 22:11:34 +00:00
Tatuya JINMEI 神明達哉
089f456eb3
2588. [bug] SO_REUSEADDR could be set unconditionally after failure
...
of bind(2) call. This should be rare and mostly
harmless, but may cause interference with other
processes that happen to use the same port. [RT #19642 ]
2009-04-28 21:39:00 +00:00
Jeremy Reed
f20f19de19
2587. [func] Improve logging by reporting serial numbers for
...
when zone serial has gone backwards or unchanged.
[RT #19506 ]
2009-04-28 12:48:35 +00:00
Tatuya JINMEI 神明達哉
b1b0dca146
2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
...
or SDB. [RT #19577 ]
2009-04-21 00:41:02 +00:00
Tatuya JINMEI 神明達哉
cda7c783c3
2585. [bug] Uninitialized socket name could be referenced via a
...
statistics channel, triggering an assertion failure in
XML rendering. [RT #19427 ]
2009-04-18 01:28:17 +00:00
Tatuya JINMEI 神明達哉
af2e2f5ed7
2584. [bug] alpha: gcc optimization could break atomic operations.
...
[RT #19227 ]
2009-04-08 05:46:22 +00:00
Mark Andrews
b9636a8e43
2583. [port] netbsd: provide a control to not add the compile
...
date to the version string, -DNO_VERSION_DATE.
2009-04-03 19:55:59 +00:00
Jeremy Reed
00c8156b24
Update my 2562 doc ARM entry.
2009-04-02 15:44:20 +00:00
Mark Andrews
64e161a7f7
2582. [bug] Don't emit warning log message when we attempt to
...
remove non-existant journal. [RT #19516 ]
2009-03-26 22:51:54 +00:00
Mark Andrews
9384dc16a1
2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
...
Requires MySQL 5.0.19 or later. [RT #19084 ]
2009-03-26 17:40:15 +00:00
Tatuya JINMEI 神明達哉
3af7cd2661
2580. [bug] UpdateRej statistics counter could be incremented twice
...
for one rejection. [RT #19476 ]
2009-03-18 22:17:24 +00:00
Mark Andrews
f2e6839b8a
mis-aplied hunk
2009-03-17 02:09:44 +00:00
Mark Andrews
72dbc7216a
2579. [bug] DNSSEC lookaside validation failed to handle unknown
...
algorithms. [RT #19479 ]
2009-03-17 01:34:28 +00:00
Evan Hunt
ca23cf7e28
2578. [bug] Changed default sig-signing-type to 65534, because
...
65535 turns out to be reserved. [RT #19477 ]
2009-03-16 23:41:21 +00:00
Tatuya JINMEI 神明達哉
a142972ea9
2577. [doc] Clarified some statistics counters. [RT #19454 ]
2009-03-13 01:51:50 +00:00