Commit Graph
1045 Commits
Author SHA1 Message Date
Tinderbox User 46542343c5 regen v9_9 2013-01-11 01:13:25 +00:00
Tinderbox User b04b60e1b5 9.9.3b1 2013-01-11 00:36:35 +00:00
Tinderbox User e16cd87685 regen v9_9 2013-01-10 20:29:00 +00:00
Evan Hunt 21113a1649 [v9_9] clarify managed-keys syntax
(cherry picked from commit 54ca241334)
2013-01-10 12:00:18 -08:00
Tinderbox User c2358595ab regen v9_9 2013-01-05 01:13:49 +00:00
Tinderbox User 04b852c0b4 update copyright notice 2013-01-04 23:45:39 +00:00
Tinderbox User 4517d14723 regen v9_9 2013-01-04 01:13:53 +00:00
Tinderbox User c53da0f5d9 Merge branch 'v9_9' of ssh://repo.isc.org/proj/git/prod/bind9 into v9_9 2013-01-04 01:10:43 +00:00
Evan Hunt 8d9207a17b [v9_9] allow-query-on works now
3448.	[bug]		The allow-query-on ACL was not processed correctly.
			[RT #29486]
(cherry picked from commit 222d38735f)
2013-01-03 15:14:17 -08:00
Tinderbox User 91cf232efe regen v9_9 2012-11-30 01:27:38 +00:00
Jeremy C. ReedandMark Andrews 1f1c4a9f29 Remove link to AUSCERT article about ACLs. It has been broken
for at least 6 years.
See ticket #16479 for details.
No CHANGES entry added.
This was not reviewed. It is minor.
2012-11-30 10:40:16 +11:00
Tinderbox User 4c3f5e0ee3 regen v9_9 2012-11-29 01:15:55 +00:00
Evan Hunt 71d99e04c4 [v9_9] s/size spec/size_spec/ 2012-11-27 22:48:07 -08:00
Jeremy C. ReedandMark Andrews f701199ce4 [master] fix spelling
Noticed one while reading during Alan's training today.
Fixed two other misspellings while here.

Conflicts:
	doc/arm/Bv9ARM-book.xml
2012-11-07 09:04:48 +11:00
Evan Hunt d708e4c4f1 [v9_9] allow dnssec options in inline-signing slaves
3408.	[bug]		Some DNSSEC-related options (update-check-ksk,
			dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
			are now legal in slave zones as long as
			inline-signing is in use. [RT #31078]
(cherry picked from commit f46168b879)
2012-10-26 16:15:48 -07:00
Evan Hunt ea6aa47f47 [v9_9] note RPZ performance issues in ARM 2012-10-25 18:06:45 -07:00
Evan Hunt 2ba4321d17 [v9_9] Fix typo (repeated word) 2012-10-25 13:31:58 -07:00
Evan Hunt 77c9c35975 [v9_9] fix ulink typo 2012-10-25 09:21:32 -07:00
Mark Andrews a6d4848f6e 3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
                        [RT #31336]
2012-10-16 12:35:28 +11:00
Evan Hunt 2b58833f58 improve managed-keys-directory documentation 2012-09-25 16:33:27 -07:00
Tinderbox User 44dc05aff3 update copyright notice 2012-08-23 07:34:46 +00:00
Tinderbox User c0ec228368 9.9.2rc1 2012-08-23 07:29:38 +00:00
Tinderbox User e185384c3a 9.9.2rc1 2012-08-23 07:29:08 +00:00
Tinderbox User 74e9abe28b regen v9_9 2012-08-15 01:10:39 +00:00
Evan Hunt efc3ebed17 support '-' salt in rndc signing -nsec3param
3361.	[bug]		"rndc signing -nsec3param" didn't work correctly
			when salt was set to '-' (no salt). [RT #30099]
2012-08-13 22:25:16 -07:00
Tinderbox User 1a36a41aed 9.9.2b1 2012-07-20 04:58:22 +00:00
Tinderbox User c62705f13a regen v9_9 2012-07-20 04:28:38 +00:00
Tinderbox User ae52aa71af Merge branch 'v9_9' of ssh://repo.isc.org/proj/git/prod/bind9 into v9_9 2012-07-20 04:14:14 +00:00
Tinderbox User 0ebe6c723f 9.9.2b1 2012-07-20 04:13:25 +00:00
Tinderbox User 03565e899d update copyright notice 2012-06-29 23:45:45 +00:00
Mark Andrews cb421b69c3 reverse bad copyright update 2012-06-29 11:41:43 +10:00
Tinderbox User cd24b114bf update copyright notice 2012-06-29 01:22:07 +00:00
Mark Andrews 7c25aaf620 3341. [func] New "dnssec-verify" command checks a signed zone
to ensure correctness of signatures and of NSEC/NSEC3
                        chains. [RT #23673]
2012-06-25 14:57:32 +10:00
Mark Andrews acebc2457c 3339. [func] Allow the maximum supported rsa exponent size to be
specified: "max-rsa-exponent-size <value>;" [RT #29228]
2012-06-20 21:34:24 +10:00
Mark Andrews 4db66665f5 3333. [bug] Setting resolver-query-timeout too low can cause
named to not recover if it looses connectivity.
                        [RT #29623]
2012-06-08 12:38:48 +10:00
Tinderbox User d652c009c2 regen v9_9 2012-06-01 01:16:17 +00:00
Vernon Schryver f05089ea5c For rt26172:
Add
      - optional "recursive-only yes|no" to the response-policy statement
      - optional max-policy-ttl to limit the lies that "recursive-only no"
          can introduce into resolvers' caches
      - test that queries with RD=0 are not rewritten by default
      - performance smoke test

    Change encoding of PASSTHRU action to "rpz-passthru".
          (The old encoding is still accepted.)
    Fix rt26180  assert botch in zone_findrdataset() in this branch
         as well.

    Fix missing signatures on NOERROR results despite RPZ hits
        when there are signatures and the client asks for DNSSEC,
2012-06-01 01:03:43 +00:00
Tinderbox User 36556c1406 regen v9_9 2012-05-31 01:17:36 +00:00
Evan Hunt 0f633846a0 fixed ARM typo: s/replacable/replaceable/ 2012-05-30 08:16:15 -07:00
Tinderbox User fb19802ccd 9.9.1 2012-04-27 03:36:28 +00:00
Tinderbox User 791a94a22f regen v9_9 2012-03-12 01:16:30 +00:00
Tinderbox User 6d32344d3b regen v9_9 2012-03-07 02:21:06 +00:00
Tinderbox User c201888c2a regen v9_9 2012-03-07 01:59:30 +00:00
Evan Hunt 8047e7c06f re-remove cvsignore files 2012-03-05 08:29:31 -08:00
Evan Hunt f94af76649 Revert "added gitignore, removed cvsignore"
This reverts commit e8ae173655.
2012-03-05 08:24:17 -08:00
Evan Hunt e8ae173655 added gitignore, removed cvsignore 2012-03-03 23:24:11 -08:00
Automatic Updater 88919fd161 regen 2012-01-29 05:14:58 +00:00
Automatic Updater 37664e68e4 regen HEAD 2012-01-17 01:15:03 +00:00
Evan Hunt 122d2cf43d add section explaining how to build with SoftHSM 2012-01-16 22:50:12 +00:00
Evan Hunt 73c124421f updated pkcs11 documentation 2012-01-16 19:09:01 +00:00