ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
22,890 Commits 589 Branches 805 Tags
d478dbae80bd215df3fef6cfc207b078ea285b8d
Commit Graph
6029 Commits
Author SHA1 Message Date
Evan Hunt ce96d4326c [master] new mkeys and nzf naming format 
3999.	[func]		"mkeys" and "nzf" files are now named after
			their corresponding views, unless the view name
			contains characters that would be incompatible
			with use in a filename (i.e., slash, backslash,
			or capital letters). If a view name does contain
			these characters, the files will still be named
			using a cryptographic hash of the view name.
			Regardless of this, if a file using the old name
			format is found to exist, it will continue to be
			used. [RT #37704]
 2014-11-04 19:43:27 -08:00
Tinderbox User 5781d00939 update copyright notice 2014-11-04 23:45:20 +00:00
Mark Andrews a31d0513c3 add missing opening bracket 2014-11-04 17:02:32 +11:00
Mark Andrews 1feee79e1f 3997. [protocol] Add OPENGPGKEY record. [RT# 37671] 2014-11-04 12:24:39 +11:00
Tinderbox User 03fc2ff527 update copyright notice 2014-10-31 23:45:23 +00:00
Mark Andrews c2f8108123 3996. [bug] Address use after free on out of memory error in 
keyring_add. [RT #37639]
 2014-10-31 11:44:09 +11:00
Mark Andrews 4e59131f18 3995. [bug] receive_secure_serial holds the zone lock for too 
long. [RT #37626]
 2014-10-31 11:38:14 +11:00
Mark Andrews eb5243365c 3989. [cleanup] Remove redundent dns_db_resigned calls. [RT #35748] 2014-10-30 10:53:12 +11:00
Mark Andrews bad93fb90c missing comma 2014-10-28 16:10:49 +11:00
Tinderbox User 6932de75ef update copyright notice 2014-10-21 23:45:24 +00:00
Francis Dupont 4d6329c1b3 Handle VS14 incompatible changes [RT #37380] 2014-10-21 09:34:33 +02:00
Mark Andrews 4140a96f22 3987. [func] Allow the zone serial of a dynamically updatable 
zone to be updated via rndc. [RT #37404]
 2014-10-21 18:15:42 +11:00
Mark Andrews 72775a79fe 3981. [bug] Cache DS/NXDOMAIN independently of other query types. 
[RT #37467]
 2014-10-18 13:09:09 +11:00
Mark Andrews 48f97c23b7 3979. [bug] Negative trust anchor fetches where not properly 
managed. [RT #37488]
 2014-10-18 10:07:24 +11:00
Evan Hunt 188690149b [master] add diffie-hellman key unit test 
3978.	[test]		Added a unit test for Diffie-Hellman key
			computation, completing change #3974. [RT #37477]
 2014-10-17 15:55:37 -07:00
Evan Hunt eb6d61d5e0 [master] correctly validate 5011 trust anchors 
3976.	[bug]		When refreshing managed-key trust anchors, clear
			any cached trust so that they will always be
			revalidated with the current set of secure
			roots. [RT #37506]
 2014-10-17 15:40:07 -07:00
Tinderbox User 28b2fddfd4 update copyright notice 2014-10-16 23:45:23 +00:00
Mark Andrews ca77632f65 initialize rdataset->private7 2014-10-16 11:23:01 +11:00
Mark Andrews 58a1051e92 3974. [bug] handle DH_compute_key() failure correctly in 
openssldh_link.c. [RT #37477]
 2014-10-13 23:41:36 +11:00
Evan Hunt 34cb27055a [master] install badcache.h 2014-10-08 19:42:48 -07:00
Mark Andrews bbec761a67 silence compiler warning 2014-10-08 17:47:46 +11:00
Tinderbox User d1573beb05 update copyright notice 2014-10-04 23:45:22 +00:00
Mark Andrews c81d56c03e 3971. [bug] Reduce the cascasding failures due to a bad $TTL line 
in named-checkconf / named-checkzone. [RT #37138]
 2014-10-05 08:29:34 +11:00
Tinderbox User 7a3f584cfc update copyright notice 2014-10-02 23:45:25 +00:00
Mark Andrews 9c0589bc8b 3966. [bug] Missing dns_db_closeversion call in receive_secure_db. 
[RT #35746]
 2014-10-03 07:50:09 +10:00
Mark Andrews dda69168ea 3965. [func] Log outgoing packets and improve packet logging to 
support logging the remote address. [RT #36624]
 2014-10-02 09:40:11 +10:00
Mark Andrews ed1c845c1d 3964. [func] nsupdate now performs check-names processing. 
[RT #36266]
 2014-10-02 09:35:43 +10:00
Tinderbox User be484acb22 update copyright notice 2014-09-30 23:45:22 +00:00
Mark Andrews ffeaac1d82 3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with 
BADSIG.  [RT #37216]
 2014-10-01 07:24:16 +10:00
Mark Andrews fa827173df 3959. [bug] Updates could be lost if they arrived immediately 
after a rndc thaw. [RT #37233]
 2014-10-01 06:59:19 +10:00
Tinderbox User 2fb35a6d59 update copyright notice 2014-09-29 23:45:24 +00:00
Mark Andrews 80169c379d 3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256 
and ECDSAP384SHA384. [RT #37183]
 2014-09-29 10:18:54 +10:00
Mark Andrews 10c12aa549 3956. [func] Notify messages are now rate limited by notify-rate and 
startup-notify-rate instead of serial-query-rate.
                        [RT #24454]

3955.   [bug]           Notify messages due to changes are no longer queued
                        behind startup notify messages. [RT #24454]
 2014-09-29 10:01:08 +10:00
Mark Andrews 4b92bc0022 don't redefine GEOIP_DATA 2014-09-29 09:33:24 +10:00
Tinderbox User e64f32cd04 update copyright notice 2014-09-27 23:45:22 +00:00
Mark Andrews 9a36fb86f5 3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159] 2014-09-27 12:14:20 +10:00
Mark Andrews a266ab205b 3952. [bug] dns_name_fullcompare failed to set *nlabelsp when the 
two name pointers were the same. [RT #37176]
 2014-09-27 11:41:44 +10:00
Evan Hunt 6896fdd3b2 [master] spelling 2014-09-15 18:18:12 -07:00
Mark Andrews 48b093c864 update named-checkzone manpage for SPF changes 2014-09-13 07:55:57 +10:00
Mark Andrews 1bf72e5325 silence compiler warning 2014-09-11 13:34:17 +10:00
Mark Andrews 947cf282a7 3949. [experimental] Experimental support for draft-andrews-edns1 by sending 
EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
                        building).  Add support for limiting the EDNS version
                        advertised to servers: server { edns-version 0; };
                        Log the EDNS version received in the query log.
                        [RT #35864]
 2014-09-10 15:31:40 +10:00
Mark Andrews 2b703026f3 check isc_mutext_init and destoy mutex when done 2014-09-07 08:24:36 +10:00
Mark Andrews 8aa098c633 update copyrights 2014-09-06 09:38:48 +10:00
Evan Hunt f687e639f0 [master] [rt36786] use INSTALL_PROGRAM for shared libs 
3947.	[cleanup]	Set the executable bit on libraries when using
			libtool. [RT #36786]
 2014-09-05 10:24:20 -07:00
Mark Andrews 2fa1fc5332 3945. [bug] Invalid wildcard expansions could be incorrectly 
accepted by the validator. [RT #37093]
 2014-09-05 12:10:55 +10:00
Mark Andrews 06dbd20c66 move declaration to start of block 2014-09-05 11:39:42 +10:00
Tinderbox User 948c80ffa8 update copyright notice 2014-09-04 23:45:24 +00:00
Evan Hunt a878301981 [master] servfail cache 
3943.	[func]		SERVFAIL responses can now be cached for a
			limited time (configured by "servfail-ttl",
			default 10 seconds, limit 30). This can reduce
			the frequency of retries when an authoritative
			server is known to be failing, e.g., due to
			ongoing DNSSEC validation problems. [RT #21347]
 2014-09-03 23:28:14 -07:00
Mark Andrews 3560b7d66c move declaration to start of block 2014-09-04 14:20:25 +10:00
Mark Andrews fec7998314 3942. [bug] Wildcard responses from a optout range should be 
marked as insecure. [RT #37072]
 2014-09-04 13:57:50 +10:00