ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
21,888 Commits 589 Branches 805 Tags
daa098822e9798fa22fa704cfb1dddf96c8f253b
Commit Graph

198 Commits

Author SHA1 Message Date
Jeremy C. Reed
daa098822e fix misspelling / typos 2014-01-31 10:30:04 -06:00
Evan Hunt
45e74d65bd [master] some items were missing from README 2014-01-30 11:51:53 -08:00
Evan Hunt
ba41a19666 [master] reformat acknowledgements 2014-01-24 09:58:38 -08:00
Evan Hunt
bff64bf12b [master] correct copyrights and attributions 
see RT #35423 for details; highlights:
    - remove license clauses 3 and 4 from NetBSD code
    - remove advertising clause from historical BSD code
    - add openssl advertising attributions
 2014-01-24 09:46:00 -08:00
Evan Hunt
ba751492fc [master] native PKCS#11 support 
3705.	[func]		"configure --enable-native-pkcs11" enables BIND
			to use the PKCS#11 API for all cryptographic
			functions, so that it can drive a hardware service
			module directly without the need to use a modified
			OpenSSL as intermediary (so long as the HSM's vendor
			provides a complete-enough implementation of the
			PKCS#11 interface). This has been tested successfully
			with the Thales nShield HSM and with SoftHSMv2 from
			the OpenDNSSEC project. [RT #29031]
 2014-01-14 15:40:56 -08:00
Evan Hunt
b751788932 [master] improve prefetch doc 2014-01-13 21:08:20 -08:00
Evan Hunt
3b1b34f762 README formatting 2013-12-11 20:07:25 -08:00
Evan Hunt
f1b1a07eca [master] typo 2013-11-21 18:14:02 -08:00
Evan Hunt
15eb0cb8e1 [master] bump release tag 2013-11-18 16:03:50 -08:00
Evan Hunt
aa4cd84a72 [master] added reference to new RPZ features 2013-09-24 11:04:26 -07:00
Evan Hunt
dc3ac7e79a [master] clarify case preservation feature 2013-09-04 19:30:41 -07:00
Mark Andrews
ca9bf8644a document case sensitive responses 2013-09-05 12:25:59 +10:00
Evan Hunt
0d18225b5e [master] enable threads by default 
3572.	[func]		Threads are now enabled by default on most
			operating systems. [RT #25483]
 2013-05-08 15:57:47 -07:00
Evan Hunt
b99bfa184b [master] unify internal and export libraries 
3550.	[func]		Unified the internal and export versions of the
			BIND libraries, allowing external clients to use
			the same libraries as BIND. [RT #33131]
 2013-04-10 13:49:57 -07:00
Evan Hunt
e08d5f3e3b [master] update README feature list for 9.10.0 2013-03-20 16:44:55 -07:00
Mark Andrews
06a05efc07 3529. [func] Named now listens on both IPv4 and IPv6 interfaces 
by default.  Named previously only listened on IPv4
                        interfaces by default unless named was running in
                        IPv6 only mode.  [RT #32945]
 2013-03-21 10:16:12 +11:00
Evan Hunt
feb067b25a [master] add JSON statistics channel 
3524.	[func]		Added an alternate statistics channel in JSON format,
			when the server is built with the json-c library:
			http://[address]:[port]/json.  [RT #32630]
 2013-03-13 14:24:50 -07:00
Mark Andrews
c5e2e93f62 add linux kernel version note 2012-05-25 14:47:38 +10:00
Evan Hunt
3e366d0beb nicer release notes URL 2012-02-23 03:53:38 +00:00
Evan Hunt
62714accee add pointer to release notes (ugly URL; should be updated to a pretty one) 2012-02-22 00:55:46 +00:00
Evan Hunt
949eefdda4 prep for 9.9.0rc1 release 2011-12-22 17:49:49 +00:00
Evan Hunt
b375b22fb0 Added documentation of change types. 2011-11-04 22:27:09 +00:00
Evan Hunt
151bab9195 removed the list of new features and known issues from 9.7.0 from 
the 9.9.0 README (one release back seems sufficient).
 2011-11-04 18:16:25 +00:00
Evan Hunt
8496c276b0 update "known good OS's" list based on recent reports 2011-11-03 21:30:34 +00:00
Evan Hunt
923ba8158a add note about 'dig +rrcomments' 2011-10-31 18:03:50 +00:00
Evan Hunt
cb143a725f added a note about locking fixes 2011-10-28 16:54:55 +00:00
Evan Hunt
5f6b9acfe9 imported the list of 9.8.0 new features from the 9.8 README file 2011-10-28 16:37:20 +00:00
Evan Hunt
96b1a311fc updated README with a more complete list of new features (it 
hadn't been touched since 9.9.0a1)
 2011-10-28 16:30:44 +00:00
Evan Hunt
e4c4cf5177 Prepare for release of 9.9.0a1 2011-08-23 02:06:46 +00:00
Mark Andrews
73dbd4e933 9.8.0a1 2010-12-09 04:39:10 +00:00
Evan Hunt
b497531c76 Added HISTORY, put a pointer to it in README. (text changes reviewed by 
Larissa.)
 2010-02-04 23:34:04 +00:00
Evan Hunt
9d86a2e1c1 one more compatibility note 2010-01-21 21:24:03 +00:00
Evan Hunt
77fdd17568 Added new compatibility notes and information about key ID collisions. 2010-01-21 21:11:17 +00:00
Evan Hunt
306b36adb6 - moved NSEC3-NOTES to README.dnssec 
- moved README.idnkit to contrib/idn
 2009-12-04 20:14:28 +00:00
Evan Hunt
af104911b7 missing period in a sentence 2009-11-02 20:04:39 +00:00
Mark Andrews
2847930722 2708. [func] Insecure to secure and NSEC3 parameter changes via 
update are now fully supported and no longer require
                        defines to enable.  We now no longer overload the
                        NSEC3PARAM flag field, nor the NSEC OPT bit at the
                        apex.  Secure to insecure changes are controlled by
                        by the named.conf option 'secure-to-insecure'.

                        Warning: If you had previously enabled support by
                        adding defines at compile time to BIND 9.6 you should
                        ensure that all changes that are in progress have
                        completed prior to upgrading to BIND 9.7.  BIND 9.7
                        is not backwards compatible.
 2009-10-08 23:13:07 +00:00
Evan Hunt
a88f8c2dd1 update README for 9.7.0b1 release 2009-10-05 22:02:44 +00:00
Evan Hunt
0e4fda8862 typo fix 2009-09-15 19:30:28 +00:00
Evan Hunt
523598fafa - update README for a3 release 
- update README.rfc5011 to remove info now in the ARM, and to add
  smart-signing info
 2009-09-08 16:33:01 +00:00
Evan Hunt
d699672160 Initial prep for 9.7.0a3 release. 2009-09-02 06:41:31 +00:00
Tatuya JINMEI 神明達哉
307d208450 2660. [func] Add a new set of DNS libraries for non-BIND9 
applications.  See README.libdns. [RT #19369]
 2009-09-01 00:22:28 +00:00
Evan Hunt
553ead32ff 2636. [func] Simplify zone signing and key maintenance with the 
dnssec-* tools.  Major changes:
			- all dnssec-* tools now take a -K option to
			  specify a directory in which key files will be
			  stored
			- DNSSEC can now store metadata indicating when
			  they are scheduled to be published, acttivated,
			  revoked or removed; these values can be set by
			  dnssec-keygen or overwritten by the new
			  dnssec-settime command
			- dnssec-signzone -S (for "smart") option reads key
			  metadata and uses it to determine automatically
			  which keys to publish to the zone, use for
			  signing, revoke, or remove from the zone
			[RT #19816]
 2009-07-19 04:18:05 +00:00
Evan Hunt
b272d38cc5 2612. [func] Add default values for the arguments to 
dnssec-keygen.  Without arguments, it will now
			generate a 1024-bit RSASHA1 zone-signing key,
			or with the -f KSK option, a 2048-bit RSASHA1
			key-signing key. [RT #19300]

2611.	[func]		Add -l option to dnssec-dsfromkey to generate
			DLV records instead of DS records. [RT #19300]
 2009-06-17 06:51:44 +00:00
Evan Hunt
76786c2904 - assorted changes needed for windows build 
- began versioning for 9.7.0a1
 2009-06-12 02:33:21 +00:00
Tatuya JINMEI 神明達哉
40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through 
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
 2009-05-29 22:22:37 +00:00
Mark Andrews
e80b693272 2539. [security] Update the interaction between recursion, allow-query, 
allow-query-cache and allow-recursion.  [RT #19198]
 2009-01-30 03:48:54 +00:00
Tatuya JINMEI 神明達哉
492df05874 added new features for 9.7.0 so that they won't be forgotten (we can remove 
them later if they are considered minor details).
 2009-01-10 03:02:37 +00:00
Jeremy Reed
df6663c900 Add another NetBSD version. (I use that.) 
These lists of operating systems and versions need to be updated
-- working on that in bugs ticket 16378.
 2008-12-19 18:22:37 +00:00
Tatuya JINMEI 神明達哉
35726c4745 wording consistency 2008-11-08 22:44:10 +00:00
Tatuya JINMEI 神明達哉
f99fd90097 2489. [port] solaris: Workaround Solaris's kernel bug about 
/dev/poll:
			http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
			Define ISC_SOCKET_USE_POLLWATCH at build time to enable
			this workaround. [RT #18870]
 2008-11-08 22:35:12 +00:00