Commit Graph
38816 Commits
Author SHA1 Message Date
Ondřej SurýandMichal Nowak d41520b002 Drop Debian buster from the CI
The Debian buster is officially EoL and in LTS mode, so we can drop it
to stabilize the CI.

(cherry picked from commit 7238c85c88)
2024-04-25 13:19:47 +02:00
Ondřej Surý 3269256868 Merge branch '1879-fix-documentation-on-named--U-9.18' into 'bind-9.18'
Properly document `-U <n>` option to named

See merge request isc-projects/bind9!8978
2024-04-24 20:51:05 +00:00
Ondřej Surý 78d92a2a93 Properly document -U <n> option to named
In the past, before the netmgr, the `-U <n>` option to `named`
configured number of listening dispatches for UDP per-interface.

Since 9.16, it only affects the number of outgoing UDP dispatches.
Properly document that in the `named` man page.
2024-04-24 22:50:22 +02:00
Petr Špaček 13e9655936 Merge branch 'spdx-custom-test-driver-9.18' into 'bind-9.18'
[9.18] Use standard SPDX license for custom-test-driver

See merge request isc-projects/bind9!8975
2024-04-24 10:16:16 +00:00
Petr MenšíkandPetr Špaček b491a82f56 Change exception SPDX to Autoconf-exception-generic
License text is in fact Autoconf generic exception, with already defined
SPDX identificator. Use that instead.

https://spdx.org/licenses/Autoconf-exception-generic.html
(cherry picked from commit 2b348a5daa)
2024-04-24 09:52:19 +00:00
Mark Andrews 570c6ada9d Merge branch '4684-unit-test-error-handling-in-dns_name_-api-9.18' into 'bind-9.18'
[9.18] test dns_name_fromregion

See merge request isc-projects/bind9!8974
2024-04-24 02:55:07 +00:00
Mark Andrews 5901065534 Extract empty name in 'source' into 'name'
(cherry picked from commit e6984e5c07)
2024-04-24 12:22:48 +10:00
Mark Andrews 26b522b54d Extract non absolute name from source
The entire source region needs to be consumed for this usage.

(cherry picked from commit 7a13fcd601)
2024-04-24 12:22:48 +10:00
Mark Andrews a94bfb66f2 Extract fully qualified named from source without buffer
'name.ndata' should point to the source.

(cherry picked from commit 7d7fc8cb2d)
2024-04-24 12:22:48 +10:00
Mark Andrews 304086cd5a Test dns_name_fromregion
with a large source region and a large target buffer, both
larger than DNS_NAME_MAXWIRE.

(cherry picked from commit 254ba1b051)
2024-04-24 12:22:46 +10:00
Mark Andrews 8ca4b44fc5 Merge branch '4689-test-invalid-notify-source-address-9.18' into 'bind-9.18'
[9.18] Check behaviour using invalid notify source address

See merge request isc-projects/bind9!8973
2024-04-24 01:45:59 +00:00
Mark Andrews fc7cba3d43 check behaviour with invalid notify-source-v6 address
This was reported as causing the server to fail to shutdown on
NetBSD.  Look for the expected informational and error messages.

(cherry picked from commit 580c41de0d)
2024-04-24 01:10:01 +00:00
Michal Nowak c87300d83f Merge branch 'mnowak/llvm-18-9.18' into 'bind-9.18'
[9.18] Bump the LLVM version to 18 and reformat sources

See merge request isc-projects/bind9!8969
2024-04-23 14:31:16 +00:00
Michal Nowak ea413a6fae Update sources to Clang 18 formatting
(cherry picked from commit f454fa6dea)
2024-04-23 12:48:56 +00:00
Michal Nowak 55dc130c5c Update Clang to version 18
(cherry picked from commit 7107c44c7c)
2024-04-23 12:48:56 +00:00
Michal Nowak de389a8208 Merge branch 'mnowak/drop-respdiff-short-ci-jobs-9.18' into 'bind-9.18'
[9.18] Drop respdiff-short CI jobs

See merge request isc-projects/bind9!8961
2024-04-19 16:40:13 +00:00
Michal Nowak 67e3e75648 Drop respdiff-short CI jobs
In the past, our CI infrastructure was more sensitive to the number of
CI jobs running on it. We tried to limit long-running jobs in merge
request-triggered pipelines, as there are many of them, and spawned them
only in daily scheduled ones. Moving most of the CI infrastructure to
AWS has made it way better to run jobs in parallel, and the existence of
short respdiff jobs has lost its original merit. It can also be harmful
as some problems are detected only by the longer respdiff variant when a
faulty merge request has already been merged. We should run all long
respdiff tests in merge request-triggered pipelines.

Also, move the former respdiff-long job (now just "respdiff") to AWS as
old instance memory constraints (see
f09cf69594) are no longer an issue.

(cherry picked from commit 6a045cd8ec)
2024-04-19 18:15:05 +02:00
Petr Špaček efd8e90080 Merge branch 'pspacek/auto-backports-9.18' into 'bind-9.18'
[9.18] Attempt automatic MR backports after every merge

See merge request isc-projects/bind9!8960
2024-04-19 14:08:11 +00:00
Petr Špaček d263c29bbc Attempt automatic MR backports after every merge
(cherry picked from commit 49f9487577)
2024-04-19 14:05:04 +00:00
Matthijs Mekking 76cb1af2b3 Merge branch '4554-dnssec-policy-jitter-9.18' into 'bind-9.18'
[9.18] Add signatures-jitter option

See merge request isc-projects/bind9!8953
2024-04-18 15:00:17 +00:00
Matthijs Mekking 0134b91feb If kasp is not used, use legacy signature jitter
If the zone is signed with a different way than 'dnssec-policy', use
the legacy way of jittering signatures, that is calculate jitter by
taking the two values of 'sig-validity-interval' and subtracting the
second value from the first value.
2024-04-18 15:00:07 +00:00
Matthijs Mekking f211c05990 Add checkconf check for signatures-jitter
Having a value higher than signatures-validity does not make sense
and should be treated as a configuration error.

(cherry picked from commit c3d8932f79)
2024-04-18 15:00:07 +00:00
Matthijs Mekking 74d5f8f689 Add release notes and CHANGES for #4554
Mention the new signature jitter option.

(cherry picked from commit 8b7785bc23)
2024-04-18 15:00:07 +00:00
Matthijs Mekking 2d8ed9d5d2 Implement signature jitter
When calculating the RRSIG validity, jitter is now derived from the
config option rather than from the refresh value.

(cherry picked from commit 67f403a423)
2024-04-18 15:00:07 +00:00
Matthijs Mekking a1e61f179e Refactor code that calculates signature validity
There are three code blocks that are (almost) similar, refactor it
to one function.

(cherry picked from commit 0438d3655b)
2024-04-18 15:00:07 +00:00
Matthijs Mekking 104eabdc2e Add signatures-jitter option
Add an option to speficy signatures jitter.

(cherry picked from commit 2a4daaedca)
2024-04-18 15:00:07 +00:00
Petr Špaček 239867ba61 Merge branch 'pspacek/update-sphinx-9.18' into 'bind-9.18'
[9.18] Update Sphinx version used for documentation build

See merge request isc-projects/bind9!8954
2024-04-18 14:53:03 +00:00
Petr Špaček bd150d8886 Update Sphinx version used for documentation build
(cherry picked from commit da607d6a06)
2024-04-18 16:45:11 +02:00
Petr Špaček 1ca282f16b Merge tag 'v9.18.26' into bind-9.18 2024-04-18 09:30:11 +02:00
Petr Špaček c330ac7fef Merge branch 'pspacek/gitlab-cleanup' into 'bind-9.18'
Remove Gitlab issue templates from non-main branches

See merge request isc-projects/bind9!8943
2024-04-11 15:16:13 +00:00
Petr Špaček adb60cb261 Remove Gitlab issue templates from non-main branches
There is no reason to have templates in branches other than main.
Gitlab is not using them anyway and they are unnecessarily included
in tarballs.
2024-04-10 16:21:54 -04:00
Petr Špaček 73defe8aac Merge branch 'pspacek/set-up-version-and-release-notes-for-bind-9.18.27' into 'bind-9.18'
Set up version and release notes for BIND 9.18.27

See merge request isc-projects/bind9!8940
2024-04-04 19:15:40 +00:00
Petr Špaček d28dc30973 Set up release notes for BIND 9.18.27 2024-04-04 21:14:50 +02:00
Petr Špaček 4418f199b6 Update BIND version to 9.18.27-dev 2024-04-04 21:14:50 +02:00
Petr Špaček 936d80b4f4 Update BIND version for release v9.18.26 2024-04-03 11:32:43 +02:00
Petr Špaček 0d46054444 Add a CHANGES marker 2024-04-03 11:32:00 +02:00
Petr Špaček f74e3b8c2b Merge branch 'pspacek/prepare-documentation-for-bind-9.18.26' into 'v9.18.26-release'
Prepare documentation for BIND 9.18.26

See merge request isc-private/bind9!679
2024-04-03 09:30:13 +00:00
Suzanne GoldlustandPetr Špaček b0b4401faa Tweak and reword release notes 2024-04-03 11:19:25 +02:00
Petr Špaček acd084f076 Add release note for GL #4552 2024-04-03 11:16:00 +02:00
Petr Špaček b63f449411 Prepare release notes for BIND 9.18.26 2024-04-03 11:14:26 +02:00
Michał Kępień 3e88318d3b Merge branch 'pspacek/hazard-improvements-9.18' into 'bind-9.18'
[9.18] CI hazard improvements

See merge request isc-projects/bind9!8901
2024-03-29 09:45:00 +00:00
Michał Kępień 9425ccb2b6 Warn if security fixes are not marked for testing
(cherry picked from commit 5e02a007ca)
2024-03-29 10:41:43 +01:00
Petr ŠpačekandMichał Kępień c7cc09185c Warn about release notes without CHANGES entry
(cherry picked from commit 0ba29730f7)
2024-03-29 10:41:43 +01:00
Petr ŠpačekandMichał Kępień 61158132c6 Detect change in supported RR types and issue Hazard warning
(cherry picked from commit 82cfb48295)
2024-03-29 10:41:43 +01:00
Michał Kępień 6f6d15e7de Merge branch 'michal/extract-changes-checks-to-a-separate-gitlab-ci-job-9.18' into 'bind-9.18'
[9.18] Extract CHANGES checks to a separate GitLab CI job

See merge request isc-projects/bind9!8927
2024-03-29 07:40:35 +00:00
Michał Kępień 4b52bd0090 Restore consistency in YAML anchor names
Commit d29fa288d4 added "pipelines" to CI
job trigger lists without updating the names of the YAML anchors
containing those lists accordingly.  Update YAML anchor names so that
they are consistent with their own contents.

(cherry picked from commit a7ece8e0bd)
2024-03-29 08:33:30 +01:00
Michał Kępień a4fa8e6335 Do not check CHANGES in pre-release pipelines
Since pre-release testing is usually carried out for branches in which
CHANGES entries are intentionally malformed to prevent entry numbering
conflicts down the road, do not run the "changes" GitLab CI job in
pipelines that are triggered by a parent pipeline (which can currently
only be a pre-release testing pipeline) to prevent triggering job
failures that would be meaningless anyway.

(cherry picked from commit 8c2503947f)
2024-03-29 08:33:30 +01:00
Michał Kępień f594a93b90 Extract CHANGES checks to a separate GitLab CI job
Checking the contents of the CHANGES file currently requires invoking
multiple shell scripts.  These invocations are conflated with those for
other test scripts in the "misc" GitLab CI job.  Extract the commands
checking the contents of the CHANGES file to a separate GitLab CI job,
"changes", to improve readability.  Remove similar checks for the
CHANGES.SE file altogether as they are only relevant for BIND -S and
therefore should not be present in an open source branch.

(cherry picked from commit 1335e139f2)
2024-03-29 08:33:30 +01:00
Michał Kępień 2f468b515a Merge branch '4334-CVE-2023-5679-test-fix-9.18' into 'bind-9.18'
[9.18] Fix check interaction in the "serve-stale" test

See merge request isc-projects/bind9!8925
2024-03-28 18:31:27 +00:00
Michał Kępień cd64a3747b Fix check interaction in the "serve-stale" test
Commit 2eee1e1761 modified the
"serve-stale" system test by adding the ns3/named9.conf.in configuration
file and making the ns3 named instance load that file near the end of
the test.  However, ns3/named9.conf.in changes the
stale-answer-client-timeout setting to a very low value, which affects
all subsequent checks in tests.sh (rather than just the check that needs
the low value to be set) and may cause false positives.  Fix by
reloading configuration from ns3/named8.conf.in as soon as the check
using a very low stale-answer-client-timeout value is finished.
2024-03-28 18:56:35 +01:00