Commit Graph

3077 Commits

Author SHA1 Message Date
Evan Hunt
cfb1587eb9 2619. [func] Add support for RFC 5011, automatic trust anchor
maintenance.  The new "managed-keys" statement can
			be used in place of "trusted-keys" for zones which
			support this protocol.  (Note: this syntax is
			expected to change prior to 9.7.0 final.) [RT #19248]
2009-06-30 02:53:46 +00:00
Mark Andrews
858cc1200e update description of 2517 2009-06-30 00:10:01 +00:00
Mark Andrews
01dbc4fc00 2618. [bug] The sdb and sdlz db_interator_seek() methods could
loop infinitely. [RT #19847]
2009-06-26 06:21:03 +00:00
Mark Andrews
870332fb6d 2617. [bug] ifconfig.sh failed to emit an error message when
run from the wrong location. [RT #19375]
2009-06-26 06:08:40 +00:00
Mark Andrews
371642de8b update description 2009-06-25 05:32:48 +00:00
Mark Andrews
d8f118f4a0 2616. [bug] The nameserver argument to 'host' was being ignored.
[RT #19852]
2009-06-24 02:51:29 +00:00
Mark Andrews
76110b31fe 2615. [bug] "__attribute__((unused))" was in the wrong place
for ia64 gcc builds. [RT #19854]
2009-06-24 02:22:50 +00:00
Mark Andrews
8777696411 change number 2009-06-24 02:11:59 +00:00
Mark Andrews
f7b683b054 2615. [port] win32: 'named -v' should automatically be executed
in the foreground. [RT #19844]
2009-06-23 07:34:39 +00:00
Tatuya JINMEI 神明達哉
95f999508b placeholder for rt#19828 (not necessary for the head) 2009-06-17 23:40:32 +00:00
Evan Hunt
b272d38cc5 2612. [func] Add default values for the arguments to
dnssec-keygen.  Without arguments, it will now
			generate a 1024-bit RSASHA1 zone-signing key,
			or with the -f KSK option, a 2048-bit RSASHA1
			key-signing key. [RT #19300]

2611.	[func]		Add -l option to dnssec-dsfromkey to generate
			DLV records instead of DS records. [RT #19300]
2009-06-17 06:51:44 +00:00
Mark Andrews
e8a534049c showsearh -> showsearch 2009-06-11 01:21:03 +00:00
Mark Andrews
f4ea363e3a 2610. [port] sunos: Change #2363 was not complete. [RT #19796] 2009-06-10 02:23:42 +00:00
Evan Hunt
351b62535d 2609. [func] Simplify the configuration of dynamic zones:
- add ddns-confgen command to generate
			  configuration text for named.conf
			- add zone option "ddns-autoconf yes;", which
			  causes named to generate a TSIG session key
			  and allow updates to the zone using that key
			- add '-l' (localhost) option to nsupdate, which
			  causes nsupdate to connect to a locally-running
			  named process using the session key generated
			  by named
			[RT #19284]
2009-06-10 00:27:22 +00:00
Mark Andrews
2534a73a59 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-04 02:13:37 +00:00
Mark Andrews
f05a6b110f 2607. [bug] named could incorrectly delete NSEC3 records for
empty nodes when processing a update request.
                        [RT #19749]
2009-06-04 01:43:41 +00:00
Mark Andrews
0bc3af9834 2606. [bug] "delegation-only" was not being accepted in
delegation-only type zones. [RT #19717]
2009-06-03 00:04:38 +00:00
Mark Andrews
5422cf284f 2605. [bug] Accept DS responses from delegation only zones.
[RT # 19296]
2009-06-02 05:51:44 +00:00
Tatuya JINMEI 神明達哉
40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
2009-05-29 22:22:37 +00:00
Mark Andrews
fc7ecc628d 2603. [port] win32: handle .exe extension of named-checkzone and
named-comilezone argv[0] names under windows.
                        [RT #19767]
2009-05-29 02:14:31 +00:00
Mark Andrews
7be6336565 2602. [port] win32: fix debugging command line build of libisccfg.
[RT #19767]
2009-05-29 01:16:31 +00:00
Jeremy Reed
5d924e398e 2601. [doc] Mention file creation mode mask in the
named manual page.

Similar to what is also in the migration document.
Also see Support ticket 862.
2009-05-21 19:54:28 +00:00
Jeremy Reed
6c3c79e491 2600. [doc] ARM: miscellaneous reformatting for different
page widths. [RT #19574]

Split comments to multiple lines or move comments to own lines for
example.

Some fixed width examples are too wide for my printed page, so fixed

Splits many programlisting's to multiple lines.
Some move comments to above and some merge some comments.

Note that this patch covers configuration examples and also the "Grammar".

Also while here fix docbook formatting for a Not Implemented
check-names (but still that is too wide so I need to change).  And
also the patch changes a couple tabs to spaces. And changed case of
example comments to be consistent with previous lines.

There shouldn't be any content changes here.

This doesn't complete this PR.
Even this patch, the official ARM PDF has other text that disappears
into the right margin. So still working on this.
2009-05-14 20:24:14 +00:00
Mark Andrews
4c2ed3d141 2599. [bug] Address rapid memory growth when validation fails.
[RT #19654]
2009-05-11 02:22:03 +00:00
Francis Dupont
ddac1a2b98 reserve -F 2009-05-07 09:33:52 +00:00
Mark Andrews
e7eede965d 2597. [bug] Handle a validation failure with a insecure delegation
from a NSEC3 signed master/slave zone.  [RT #19464]
2009-05-07 02:34:19 +00:00
Tatuya JINMEI 神明達哉
5d7849ad7f 2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
long, leading to inefficient memory usage or rejecting
			newer cache entries in the worst case. [RT #19563]
2009-05-06 22:53:54 +00:00
Francis Dupont
d302a620e0 Fix unknown extended rcodes in dig 2009-05-06 10:16:32 +00:00
Jeremy Reed
708ebf710e Wrap long line (I added). 2009-05-04 17:57:59 +00:00
Jeremy Reed
4144efb390 2594. [func] Have rndc warn if using its default configuration file
when the key file also exists. [RT #19424]
2009-05-04 17:38:56 +00:00
Francis Dupont
cc620f9fdb Improve a corner source of SERVFAILs [RT #19632] 2009-04-30 11:45:10 +00:00
Mark Andrews
3836f447ee 2592. [bug] Treat "any" as a type in nsupdate. [RT #19455] 2009-04-30 07:10:09 +00:00
Mark Andrews
47323be2af 2591. [bug] named could die when processing a update in
removed_orphaned_ds(). [RT #19507]
2009-04-30 06:59:11 +00:00
Mark Andrews
b770eae51e s/diff/update/ 2009-04-30 06:55:33 +00:00
Mark Andrews
d2c115f913 2590. [func] Report zone/class of "diff with no effect". [RT #19542] 2009-04-30 06:53:10 +00:00
Mark Andrews
f030c71500 2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
[RT #19626]
2009-04-29 22:11:34 +00:00
Tatuya JINMEI 神明達哉
089f456eb3 2588. [bug] SO_REUSEADDR could be set unconditionally after failure
of bind(2) call.  This should be rare and mostly
			harmless, but may cause interference with other
			processes that happen to use the same port. [RT #19642]
2009-04-28 21:39:00 +00:00
Jeremy Reed
f20f19de19 2587. [func] Improve logging by reporting serial numbers for
when zone serial has gone backwards or unchanged.
			[RT #19506]
2009-04-28 12:48:35 +00:00
Tatuya JINMEI 神明達哉
b1b0dca146 2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
or SDB. [RT #19577]
2009-04-21 00:41:02 +00:00
Tatuya JINMEI 神明達哉
cda7c783c3 2585. [bug] Uninitialized socket name could be referenced via a
statistics channel, triggering an assertion failure in
			XML rendering. [RT #19427]
2009-04-18 01:28:17 +00:00
Tatuya JINMEI 神明達哉
af2e2f5ed7 2584. [bug] alpha: gcc optimization could break atomic operations.
[RT #19227]
2009-04-08 05:46:22 +00:00
Mark Andrews
b9636a8e43 2583. [port] netbsd: provide a control to not add the compile
date to the version string, -DNO_VERSION_DATE.
2009-04-03 19:55:59 +00:00
Jeremy Reed
00c8156b24 Update my 2562 doc ARM entry. 2009-04-02 15:44:20 +00:00
Mark Andrews
64e161a7f7 2582. [bug] Don't emit warning log message when we attempt to
remove non-existant journal. [RT #19516]
2009-03-26 22:51:54 +00:00
Mark Andrews
9384dc16a1 2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
Requires MySQL 5.0.19 or later. [RT #19084]
2009-03-26 17:40:15 +00:00
Tatuya JINMEI 神明達哉
3af7cd2661 2580. [bug] UpdateRej statistics counter could be incremented twice
for one rejection. [RT #19476]
2009-03-18 22:17:24 +00:00
Mark Andrews
f2e6839b8a mis-aplied hunk 2009-03-17 02:09:44 +00:00
Mark Andrews
72dbc7216a 2579. [bug] DNSSEC lookaside validation failed to handle unknown
algorithms. [RT #19479]
2009-03-17 01:34:28 +00:00
Evan Hunt
ca23cf7e28 2578. [bug] Changed default sig-signing-type to 65534, because
65535 turns out to be reserved.  [RT #19477]
2009-03-16 23:41:21 +00:00
Tatuya JINMEI 神明達哉
a142972ea9 2577. [doc] Clarified some statistics counters. [RT #19454] 2009-03-13 01:51:50 +00:00