Mark Andrews
dc2200c1da
Declare the 'rdata' argument for dns_rdata_tostruct() to be const
...
(cherry picked from commit abb2fd1027 )
2018-06-15 08:52:47 +02:00
Ondřej Surý
839db4a693
Merge branch '309-fix-default-recursion-v9_10' into 'v9_10'
...
Resolve "Recursion improperly allowed by default"
See merge request isc-projects/bind9!375
2018-06-14 08:54:00 -04:00
Evan Hunt
6894028f27
add a regression test for default allow-recursion settings
2018-06-14 14:47:56 +02:00
Evan Hunt
97600626c7
allow-recursion could incorrectly inherit from the default allow-query
2018-06-14 14:47:56 +02:00
Michał Kępień
f7f43843d2
Merge branch '298-fix-dname-handling-in-dnssec-tools-v9_10' into 'v9_10'
...
[v9_10] Fix DNAME handling in DNSSEC tools
See merge request isc-projects/bind9!365
2018-06-13 07:29:26 -04:00
Michał Kępień
de5916a7bf
Add CHANGES entry
...
4971. [bug] dnssec-signzone and dnssec-verify did not treat records
below a DNAME as out-of-zone data. [GL #298 ]
(cherry picked from commit 28b8ab8891 )
2018-06-13 13:02:27 +02:00
Mark Andrews
ec75a07023
Pull out the saving of the zone cut into a separate function
...
(cherry picked from commit 0c3ddaafb5 )
2018-06-13 13:02:25 +02:00
Michał Kępień
9a4145168c
Treat records below a DNAME as out-of-zone data
...
DNAME records indicate bottom of zone and thus no records below a DNAME
should be DNSSEC-signed or included in NSEC(3) chains. Add a helper
function, has_dname(), for detecting DNAME records at a given node.
Prevent signing DNAME-obscured records. Check that DNAME-obscured
records are not signed.
(cherry picked from commit 6d8a514ecb )
2018-06-13 13:01:54 +02:00
Evan Hunt
b56c3d3102
Merge branch 'fix-strtok' into 'v9_10'
2018-06-09 23:04:36 -07:00
Evan Hunt
0bca85e18d
complete strtok fix
...
(cherry picked from commit 74c3b9d3b2 )
2018-06-09 23:04:35 -07:00
Evan Hunt
6b881704e9
Merge branch 'fix-strtok' into 'v9_10'
2018-06-09 22:37:08 -07:00
Evan Hunt
48ff5b29be
use strtok() instead of strtok_r() in command line processing
...
(cherry picked from commit 1734f1b3b9 )
2018-06-09 22:37:05 -07:00
Evan Hunt
74de81ee42
Merge branch 'validate-glue' into v9_10
2018-06-08 11:51:48 -07:00
Evan Hunt
b9bc020d5f
ensure we try to validate glue records so RRSIG TTLs will be capped
2018-06-08 11:42:40 -07:00
Mukund Sivaraman
eac5619b6a
Add CHANGES entry
...
(cherry picked from commit dfd73d7e16 )
2018-06-08 11:05:01 -07:00
Mukund Sivaraman
da620da38b
Add system test
...
(cherry picked from commit 303391ea41 )
2018-06-08 11:05:00 -07:00
Mukund Sivaraman
54e3529d55
Don't validate non-pending glue when adding to the additional section
...
(cherry picked from commit 31bd3147d1 )
2018-06-08 11:05:00 -07:00
Mark Andrews
2e2616d876
Merge branch '325-add-cfg_parse_buffer4-v9_10' into 'v9_10'
...
Resolve "add cfg_parse_buffer4"
Closes #325
See merge request isc-projects/bind9!353
2018-06-08 17:42:10 +10:00
Mark Andrews
51c78898fb
add cfg_parse_buffer4
...
(cherry picked from commit b313084af2 )
2018-06-08 17:41:58 +10:00
Mark Andrews
431f7c8636
Merge branch '322-add-support-for-marking-options-as-deprecated-v9_10' into 'v9_10'
...
Resolve "add support for marking options as deprecated."
Closes #322
See merge request isc-projects/bind9!351
2018-06-08 16:06:35 +10:00
Mark Andrews
99ac87cac4
Add support for marking a option as deprecated.
...
(cherry picked from commit befff9452c )
2018-06-08 16:06:17 +10:00
Mark Andrews
f5df032a58
Merge branch '240-multiple-rrsigs-on-some-records-in-signed-zone-even-though-only-one-key-is-ever-active-at-a-time-v9_12-v9_11-v9_10' into 'v9_10'
...
Resolve "Multiple RRSIGs on some records in signed zone even though only one key is ever active at a time"
Closes #240
See merge request isc-projects/bind9!231
2018-06-06 17:46:01 +10:00
Mark Andrews
b331bb8038
add CHANGES note
...
(cherry picked from commit ba7a343156 )
(cherry picked from commit 00f1956c9e )
(cherry picked from commit 1c8aa28455 )
2018-06-06 17:45:23 +10:00
Mark Andrews
abbfbeffa6
add duplicate signature test
...
(cherry picked from commit 0db5b087ed )
(cherry picked from commit 1783fa5aba )
(cherry picked from commit 1710e5cfca )
2018-06-06 17:45:23 +10:00
Mark Andrews
ba76a92338
add support -T sigvalinsecs
...
(cherry picked from commit 87a3dc8ab9 )
(cherry picked from commit 69340b5ac5 )
(cherry picked from commit dd05287a31 )
2018-06-06 17:29:24 +10:00
Mark Andrews
5686e3bb6a
only sign with other keys when deleting a key if there are not already existing signature for the deleted algorithm
...
(cherry picked from commit 0667bf7ae7 )
(cherry picked from commit c1e342cedb )
(cherry picked from commit 298372d8d2 )
2018-06-06 17:23:08 +10:00
Mark Andrews
4c632d69c8
Merge branch '316-move-named-t-processing-to-its-own-function-v9_10' into 'v9_10'
...
Resolve "move named -T processing to its own function"
Closes #316
See merge request isc-projects/bind9!343
2018-06-06 15:15:40 +10:00
Mark Andrews
63bbd658f0
add CHANGES
...
(cherry picked from commit ef7401e4a7 )
2018-06-06 15:15:26 +10:00
Mark Andrews
4330d43d1c
move -T parsing to its own function
...
(cherry picked from commit b491ceeb50 )
2018-06-06 15:14:57 +10:00
Evan Hunt
ff5fb60c8a
Merge branch '302-use-ip-for-ifconfig' into 'v9_10'
...
Resolve "ifconfig.sh doesn't work on centos7"
Closes #302
See merge request isc-projects/bind9!330
2018-06-05 21:48:09 -07:00
Evan Hunt
7b1a637fde
CHANGES
...
(cherry picked from commit 71f2335f5a )
(cherry picked from commit 7f16672ab8 )
2018-06-05 21:48:06 -07:00
Evan Hunt
33880e35cd
use "ip" on linux, falling back to "ifconfig" when it isn't available
...
(cherry picked from commit d7c5400798 )
(cherry picked from commit 3e1a0c2b62 )
2018-06-05 21:48:06 -07:00
Evan Hunt
2ec7b60d89
expand address range in ifconfig.sh to include more than one subnet
...
(cherry picked from commit 41b29a436b )
(cherry picked from commit e4487b160c )
2018-06-05 21:48:06 -07:00
Evan Hunt
91be209055
Merge branch 'backport-sentinel' into v9_10
2018-06-04 20:05:30 -07:00
Evan Hunt
a5ac84370c
add prerequisite check
...
(cherry picked from commit e229ae6999 )
2018-06-04 20:05:09 -07:00
Mark Andrews
bfbf3baff7
CHANGES entry for root-key-sentinel
...
(cherry picked from commit 2845d7160e )
(cherry picked from commit af267c4da9 )
(cherry picked from commit 106fc761de )
2018-06-04 20:05:09 -07:00
Mark Andrews
56628dffc7
add release note for root-key-sentinel
...
(cherry picked from commit e20790c956 )
(cherry picked from commit edb761b08c )
(cherry picked from commit b3e93d1b0f )
2018-06-04 20:05:09 -07:00
Mark Andrews
8f139956ba
add system test for root-key-sentinel
...
(cherry picked from commit a23b305e6b )
(cherry picked from commit b9e6b124aa )
(cherry picked from commit 9448c4fd21 )
2018-06-04 20:05:09 -07:00
Mark Andrews
468a3bcdac
add named.conf option root-key-sentinel
...
(cherry picked from commit 68e9315c7d )
(cherry picked from commit ee763ef281 )
(cherry picked from commit 9a5f308287 )
2018-06-04 20:05:09 -07:00
Mark Andrews
a624e884d4
detect and process root-key-sentinel labels.
...
(cherry picked from commit 8fc9f64df9 )
(cherry picked from commit 7111eff80c )
(cherry picked from commit afa97c6552 )
2018-06-04 20:05:09 -07:00
Evan Hunt
70eea15db1
clean up CHANGES numbers
2018-06-04 19:44:34 -07:00
Evan Hunt
3f41637a4a
Merge branch '310-check-changes-needs-to-be-called-for-v9_10' into 'v9_10'
...
Resolve "check-changes needs to be called for v9_10"
See merge request isc-projects/bind9!337
2018-06-04 19:24:40 -07:00
Mark Andrews
7e6d697b79
call util/check-changes in setup
...
(cherry picked from commit c0e69cc406 )
2018-06-04 19:24:19 -07:00
Mark Andrews
3aed431969
Merge branch '281-dont-insert-extra-space-between-nsec3-nexthash-and-typemap-v9_10' into 'v9_10'
...
Resolve "9.11.3-S1 totext_nsec3 inserts a redundant white space between next hash and type map [ISC-support #12887 ]"
See merge request isc-projects/bind9!313
2018-06-04 13:22:26 +10:00
Mark Andrews
53f43ae526
Add CHANGES note
...
(cherry picked from commit f98d8115e3 )
2018-06-04 13:22:15 +10:00
Mukund Sivaraman
3923685bfe
Add NSEC3 fromtext/totext unittests
...
(cherry picked from commit b0d9198e03 )
2018-06-04 13:21:57 +10:00
Mukund Sivaraman
f72911dd12
Don't insert 2nd space between NSEC3 nexthash and typemap fields
...
(cherry picked from commit d4ea1edd2c )
2018-06-04 13:21:57 +10:00
Mark Andrews
0e474b2236
Merge branch '286-new-cppcheck-detected-errors-v9_10' into 'v9_10'
...
Resolve "New cppcheck-detected errors"
See merge request isc-projects/bind9!324
2018-05-29 09:53:19 +10:00
Mark Andrews
c72275b897
add CHANGES note
...
(cherry picked from commit e9134b15eb )
2018-05-29 09:53:09 +10:00
Mark Andrews
6120aba080
work around cppcheck false positive
...
(cherry picked from commit cb5802e854 )
2018-05-29 09:52:37 +10:00