ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
13,451 Commits 589 Branches 805 Tags
d26c9abacfe7e333b9ab4cd9d565c8d94de84148
Commit Graph
13451 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mark Andrews 0b75a2dd3b 1252. [func] Report the current serial with periodic commits when 
rolling forward the journal.
 2002-07-22 02:06:04 +00:00
Mark Andrews 0f042c7c44 - improves tests of negative insecurity proofs, including tests for the 
SOA TTL 0 hack.
- adds +noauth to a few invocations of dig where the authority section is
  not important.
- removes the bogus first half of the dynamic zone test, which didn't
  do anything other than make the test suite fail if run twice.
- fixed the fact that the keyless.example zone wasn't being securely
  delegated.
bwelling
 2002-07-19 06:20:24 +00:00
Mark Andrews c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews 0d993c02ba 1250. [bug] When processing events (non-threaded) only allow 
the task one chance to use to use its quantum.
 2002-07-19 03:39:44 +00:00
Mark Andrews ff30cdeb78 The validator didn't handle missing DS records correctly. 2002-07-19 03:29:15 +00:00
Mark Andrews 4d9f3f00d9 1249. [func] named-checkzone will now check if nameservers that 
appear to be IP addresses.  Available modes "fail",
                        "warn" (default) and "ignore" the results of the
                        check.
 2002-07-19 02:34:58 +00:00
Mark Andrews 0d2dcaf4a5 replaced 2002-07-19 02:26:26 +00:00
Mark Andrews 240a5d160a When returning a delegation from the cache and the DO bit is set, always 
try to add a DS.  The test for the existence of the sigrdataset was bogus
and crashed the server.

to reproduce:
 - create a signed parent & child zone
 - query a recursive server for the ns record of the child
 - query the recursive server for a name in the child with +norec
bwelling
 2002-07-17 06:09:41 +00:00
Mark Andrews d196b45738 1248. [bug] The validator could incorrectly verify an invalid 
negative proof.
 2002-07-15 03:27:44 +00:00
Mark Andrews 86f6b92e35 1248. [bug] The validator could incorrectly verify an invalid 
negative proof.

When checking the range of the nxt record, the code needs to handle
the case where the 'next name' field points to the origin.  The way
that the origin was determined was looking at the 'signer' field
of the first SIG NXT, since NXTs are signed by the zone key.  This
doesn't work, because the first SIG could have been spoofed.  It
now defers checking the nxt range until both the SOA and NXT have
been verified, and uses the owner of the SOA name as the origin.
bwelling
 2002-07-15 03:25:28 +00:00
Mark Andrews 0b2aba2cd2 reviewed: marka/bwelling 
1247.   [bug]           The validator would incorrectly mark data as insecure
                        when seeing a bogus signature before a correct
                        signature.
 2002-07-15 03:02:56 +00:00
Mark Andrews 25276bd1ec 1247. [bug] The validator would incorrectly mark data as insecure 
when seeing a bogus signature before a correct
                        signature.
 2002-07-15 02:57:14 +00:00
Mark Andrews 0d4c51dfd6 reviewed: marka 
1246.   [bug]           DNAME/CNAME signatures were not being cached when
                        validation was not being performed. [RT #3284]
 2002-07-15 02:28:07 +00:00
Mark Andrews 320d6ee24e 1246. [bug] DNAME/CNAME signatures were not being cached when 
validation was not being performed. [RT #3284]
 2002-07-15 02:23:58 +00:00
Mark Andrews a009918e2f reviewed: bwelling 
1314.   [func]          libbind: no longer attempts bit string labels for
                        IPv6 reverse resolution.  Try IP6.ARPA then IP6.INT
                        for nibble style resolution.
 2002-07-14 04:31:45 +00:00
Mark Andrews 2099644f0d reviewed: bwelling 
1096.   [func]          libbind: "DNSSEC OK" (DO) support.
 2002-07-14 04:26:59 +00:00
Mark Andrews a2537d9b00 reviewed: bwelling 
1095.   [func]          libbind: resolver option: no-tld-query.  disables
                        trying unqualified as a tld.  no_tld_query is also
                        supported for FreeBSD compatability.
 2002-07-14 02:27:10 +00:00
Mark Andrews 981e5046e0 max-journal-size is a zone option 2002-07-13 00:53:34 +00:00
Mark Andrews 0f2442d926 sync with mainline 2002-07-12 03:13:24 +00:00
Mark Andrews e41340e97a make distclean should remove "make/rules", "make/includes" and "make/mkdep" 2002-07-12 01:45:59 +00:00
Mark Andrews 0996973920 distclean 2002-07-12 01:42:22 +00:00
Mark Andrews 730dfb9b6a Makefile 2002-07-12 01:31:55 +00:00
Mark Andrews c1a634d46b remove dead code 2002-07-12 01:23:16 +00:00
Mark Andrews d600a66f52 white space 2002-07-12 01:20:15 +00:00
Mark Andrews e2f5e9a858 reviewed: halley 
1339.   [func]          libbind: log attempts to exploit #1338.
 2002-07-12 01:10:23 +00:00
Mark Andrews 29a9388fc1 regen 2002-07-12 00:54:39 +00:00
Mark Andrews 96afc32570 silence warning 2002-07-12 00:51:41 +00:00
Mark Andrews 84805b3216 reviewed: bwelling 
gettimeofday.h is no longer require (prototype in port_after.h).
 2002-07-12 00:49:52 +00:00
Mark Andrews 65bbe3a2cb pullup: 
There are four "i":s in "initialize"
 2002-07-12 00:17:28 +00:00
Mark Andrews 750a62493d spelling 2002-07-12 00:10:26 +00:00
Mark Andrews 2dbeb26f3d reviewed: bwelling 
1094.   [func]          libbind: add support gcc's format string checking.
 2002-07-11 23:32:35 +00:00
Mark Andrews 41df3594b4 libtool 2002-07-11 06:02:37 +00:00
Mark Andrews b839c5abec 1338. [bug] libbind: Remote buffer overrun. 2002-07-11 05:55:05 +00:00
Mark Andrews 8e5017af68 Recursive quota should apply to tcp queries when the tcp quota is reached. 2002-07-11 05:45:33 +00:00
cvs2git 23045b97b6 This commit was manufactured by cvs2git to create branch 'v9_3'. 2002-07-11 05:44:12 +00:00
Mark Andrews e368e45536 reviewed: bwelling 
1242.   [bug]           named-checkzone failed if a journal existed. [RT #2657]
 2002-07-11 05:44:11 +00:00
Mark Andrews bca7f81db5 all references from -m to -j 2002-07-11 05:36:12 +00:00
Mark Andrews e14e853d86 usage should show -j 2002-07-11 04:50:36 +00:00
Mark Andrews e9359db5e9 use -j rather than -m to read the journal if it exists. 2002-07-11 04:49:27 +00:00
Mark Andrews ba06508f01 ISC_MEM_DEBUGRECORD was turned on accidently. 
'm' option was missing from isc_commandline_parse()
 2002-07-11 04:40:07 +00:00
Mark Andrews ee5bf99761 reviewed: bwelling 
1337.   [port]          libbind: TrueUNIX 5.1 does not like __align as a
                        element name.
 2002-07-11 04:15:20 +00:00
Mark Andrews 04a4e2f5c0 reviewed: bwelling 
pullup: ns_r_badvers extended error code
 2002-07-11 04:10:34 +00:00
Mark Andrews c3cdf325b5 reviewed: bwelling 
1336.   [bug]           libbind: gethostans() could get out of sync parsing
                        the response if there was a very long CNAME chain.
 2002-07-11 04:08:06 +00:00
Mark Andrews c6ce103cf8 reviewed: bwelling 
1334.   [port]          Handle ECONNRESET from sendmsg() [unix].
 2002-07-11 04:04:26 +00:00
Mark Andrews d322581e16 reviewed: bwelling 
1331.   [bug]           lwres_getrrsetbyname leaked memory.  [RT #3159]
 2002-07-11 04:01:17 +00:00
Mark Andrews 9d352ffc42 reviewed: bwelling 
1327.   [bug]           nsupdate: allow white space base64 key data.
 2002-07-11 03:51:27 +00:00
Mark Andrews 380a309889 reviewed: bwelling 
1318.   [bug]           The CINCLUDES macro in lib/dns/sec/dst/Makefile
                        could be left with a trailing "\" after configure
                        has been run.
 2002-07-11 03:47:17 +00:00
Mark Andrews a968e6b0b1 reviewed: bwelling 
1317.   [port]          linux: make handling EINVAL from socket() no longer
                        conditional on #ifdef LINUX.
 2002-07-11 03:43:19 +00:00
Mark Andrews b33cab0cdc reviewed: bwelling 
1316.   [bug]           isc_log_closefilelogs() needed to lock the log
                        context.
 2002-07-11 03:39:06 +00:00
Mark Andrews 90656e32ea reviewed: bwelling 
1315.   [bug]           isc_log_setdebuglevel() needed to lock the log
                        context.
 2002-07-11 02:32:35 +00:00