Commit Graph
5467 Commits
Author SHA1 Message Date
Mark Andrews d12179ca91 date +%s is not portable, use perl -e 'print time();', Adjust messages 2011-05-30 22:31:28 +00:00
Mark Andrews aa7d0857f0 The old active key could be deleted before the "former standby key has now
signed fully" ran causing it to fail.  Delay the deletion by 10 seconds.
2011-05-30 07:26:41 +00:00
Automatic Updater 9e914eadd0 update copyright notice 2011-05-26 23:47:06 +00:00
Mark Andrews 22fdcb03cc 3120. [bug] Named could fail to validate zones list in a DLV
that validated insecure without using DLV and had
                        DS records in the parent zone. [RT #24631]
2011-05-26 04:47:16 +00:00
Evan Hunt 17968c1451 3118. [bug] When rolling to a new DNSSEC key, a private-type
record could be created and never marked complete.
			[RT #23253]
2011-05-26 04:25:09 +00:00
Evan Hunt 77b55b7446 3118. [bug] nsupdate could dump core on shutdown when using
SIG(0) keys. [RT #24604]
2011-05-23 22:12:15 +00:00
Evan Hunt 2127785ad7 3117. [cleanup] Remove doc and parser references to the
never-implemented 'auto-dnssec create' option.
			[RT #24533]
2011-05-23 20:56:11 +00:00
Mark Andrews 7e773a23d9 3115. [bug] Named could fail to return requested data when
following a CNAME that points into the same zone.
                        [RT #2445]
2011-05-20 05:12:18 +00:00
Evan Hunt b62b7fbe9e 3114. [bug] Retain expired RRSIGs in dynamic zones if key is
inactive and there is no replacement key. [RT #23136]
2011-05-19 04:42:51 +00:00
Mark Andrews 8e9cba0e58 named.conf copyrights 2011-05-08 07:09:28 +00:00
Automatic Updater 699be80fb2 update copyright notice 2011-05-07 23:47:05 +00:00
Evan Hunt 13ab5f75cb 3111. [bug] Improved consistency checks for dnssec-enable and
dnssec-validation, added test cases to the
                        checkconf system test. [RT #24398]
2011-05-07 05:53:24 +00:00
Evan Hunt 79951b66bd 3110. [bug] dnssec-signzone: Wrong error message could appear
when attempting to sign with no KSK. [RT #24369]
2011-05-07 00:24:41 +00:00
Automatic Updater 75569ec3ab update copyright notice 2011-05-06 23:47:05 +00:00
Evan Hunt 46994fc008 3107. [bug] dnssec-signzone: Report the correct number of ZSKs
when using -x. [RT #20852]
2011-05-06 21:07:50 +00:00
Mark Andrews d079f5a6af set/reset client->signer. 2011-05-05 23:53:16 +00:00
Automatic Updater f4264361da update copyright notice 2011-05-05 23:46:53 +00:00
Scott Mann 4ffc24ee8a remove trailing newline from pid (RT #24388) 2011-05-05 22:58:59 +00:00
Evan Hunt f4b07b09d0 3103. [bug] Configuring 'dnssec-validation auto' in a view
instead of in the options statement could trigger
			an assertion failure in named-checkconf. [RT #24382]
2011-05-05 16:11:43 +00:00
Mark Andrews 0be165b93f explictly kill the process if the server fails to start, check for a non zero length pid file 2011-05-05 04:55:46 +00:00
Mark Andrews 4304925ee2 grep was not precise enough leading to test failure 2011-05-03 16:09:23 +00:00
Mark Andrews 6ce2aace2e treat abs(x) < 500ms as 0 2011-05-03 00:36:47 +00:00
Mark Andrews fe7fbb3e26 force numeric comparision 2011-05-02 05:03:28 +00:00
Mark Andrews 9e37015bd6 handle end of day 2011-05-02 01:40:59 +00:00
Mark Andrews 985d667732 fix expression 2011-05-01 21:37:53 +00:00
Mark Andrews 446554d615 awk -v is not portable, add floating point arithmetic effects 2011-05-01 11:32:34 +00:00
Evan Hunt 9cde8e0c6c 3101. [bug] Zones using automatic key maintenance could fail
to check the key repository for updates. [RT #23744]
2011-04-29 21:42:00 +00:00
Automatic Updater 1076a78dd9 update copyright notice 2011-04-27 23:47:01 +00:00
Evan Hunt e3579205fe 3100. [security] Certain response policy zone configurations could
trigger an INSIST when receiving a query of type
			RRSIG. [RT #24280]
2011-04-27 17:43:07 +00:00
Automatic Updater f13dc3a4ea update copyright notice 2011-04-19 23:47:31 +00:00
Evan Hunt 6ecc5850ef 3099. [test] "dlz" system test now runs but gives R:SKIPPED if
not compiled with --with-dlz-filesystem.  [RT #24146]

3098.	[bug]		DLZ zones were answering without setting the AA bit.
			[RT #24146]
2011-04-19 22:31:43 +00:00
Scott Mann f7b8c29abb forgot to add these files for RT #23836. 2011-04-19 22:12:14 +00:00
Scott Mann 4bbb19b67f backport --with-gssapi and fixes (RT 23836/23738) 2011-04-19 21:23:35 +00:00
Evan Hunt 711f69c266 3097. [test] Add a tool to test handling of malformed packets.
[RT #24096]
2011-04-15 01:00:08 +00:00
Evan Hunt 613b6fc9c7 Corrected a bug in the dnssec test introduced in change #3046. 2011-03-31 15:56:44 +00:00
Mark Andrews 3218c3f491 style 2011-03-28 05:14:18 +00:00
Mark Andrews 475175e93c while (1) -> for (;;) 2011-03-28 05:13:16 +00:00
Automatic Updater 44ecaec099 update copyright notice 2011-03-26 23:47:13 +00:00
Evan Hunt b74ca0bcea Forgot to add a data file for the autosign test. 2011-03-26 01:08:26 +00:00
Evan Hunt f2f94ddeb4 3092. [bug] Signatures for records at the zone apex could go
stale due to an incorrect timer setting. [RT #23769]

3091.	[bug]		Fixed a bug in which zone keys that were published
			and then subsequently activated could fail to trigger
			automatic signing. [RT #22991]
2011-03-25 23:53:52 +00:00
Automatic Updater 5cabfa26d2 update copyright notice 2011-03-22 23:47:07 +00:00
Scott Mann abbd1825c8 Failed to add setup.sh for RT #23687. 2011-03-22 18:37:19 +00:00
Scott Mann bad80ece64 Remove bin/tests/system/logfileconfig/ns1/named.conf and add setup.sh
in order to resolve changing named.conf issue.  [RT #23687]
2011-03-22 18:24:08 +00:00
Evan Hunt 71edc4cd46 Corrected a mistake that was exposed by change #3085 in 9.9 (though it
has no deleterious effect in 9.8 and earlier).
2011-03-22 03:21:17 +00:00
Automatic Updater 25146eea0e regen v9_8 2011-03-22 02:37:47 +00:00
Automatic Updater df5b2dc59d update copyright notice 2011-03-21 23:46:59 +00:00
Mark Andrews 72c69a0276 adjust rt23702 test to take less time 2011-03-21 20:32:15 +00:00
Evan Hunt 2cac211c0a 3087. [bug] DDNS updates using SIG(0) with update-policy match
type "external" could cause a crash. [RT #23735]
2011-03-21 19:53:35 +00:00
Evan Hunt cb363bc246 3086. [bug] Running dnssec-settime -f on an old-style key will
now force an update to the new key format even if no
			other change has been specified, using "-P now -A now"
			as default values.  [RT #22474]
2011-03-21 15:56:12 +00:00
Mark Andrews 767f311173 wait longer for the nsec3chain generation to complete 2011-03-21 03:32:13 +00:00