Commit Graph
87 Commits
Author SHA1 Message Date
Ondřej Surý 843d389661 Update license headers to not include years in copyright in all applicable files 2018-02-23 10:12:02 +01:00
Evan Hunt 0c559199bf final cleanup
- add CHANGES note
- update copyrights and license headers
- add -j to the make commands in .gitlab-ci.yml to take
  advantage of parallelization in the gitlab CI process
2018-02-22 22:58:15 -08:00
Evan Hunt c032c54dda parallelize most system tests 2018-02-22 15:29:02 -08:00
Mark Andrews b98a92071d perform rpz testing with a loop rather that recursion 2018-02-22 14:01:42 +11:00
Mark Andrews 05f9deba0b use symbolic test modes native/dnsrps 2018-02-22 14:01:42 +11:00
Mark Andrews 034450ba02 add test numbers as use them in file names 2018-02-22 14:01:42 +11:00
Mark Andrews 865115f30c use %u instead of %d 2018-02-16 10:20:38 +11:00
Evan Hunt 534c43860e [master] update copyrights 2017-09-11 17:47:12 -07:00
Evan Hunt f3ce87e1a1 [master] copyrights 2017-09-11 17:01:09 -07:00
Tinderbox User 0d9572e437 update copyright notice / whitespace 2017-09-11 23:46:33 +00:00
Evan Hunt 2e0493c046 [master] add print.h 2017-09-11 12:37:58 -07:00
Evan Hunt 3363f3147a [master] DNS Response Policy Service API
4713.	[func]		Added support for the DNS Response Policy Service
			(DNSRPS) API, which allows named to use an external
			response policy daemon when built with
			"configure --enable-dnsrps".  Thanks to Vernon
			Schryver and Farsight Security. [RT #43376]
2017-09-11 11:57:43 -07:00
Evan Hunt 45afdb2672 [master] remove default algorithm in dnssec-keygen
4594.	[func]		dnssec-keygen no longer uses RSASHA1 by default;
			the signing algorithm must be specified on
			the command line with the "-a" option.  Signing
			scripts that rely on the existing default behavior
			will break; use "dnssec-keygen -a RSASHA1" to
			repair them. (The goal of this change is to make
			it easier to find scripts using RSASHA1 so they
			can be changed in the event of that algorithm
			being deprecated in the future.) [RT #44755]
2017-08-30 18:51:11 -07:00
Evan Hunt 6ce8a05f6c [master] update copyrights that had been missed recently 2017-04-23 17:06:00 -07:00
Tinderbox User 1f6505a424 update copyright notice / whitespace 2017-04-22 23:45:41 +00:00
Mukund Sivaraman 03be5a6b4e Improve performance for delegation heavy answers and also general query performance (#44029) 2017-04-22 09:22:44 +05:30
Mukund Sivaraman dd7d1df874 Increase minimum RSA keygen size to 1024 bits (#36895) 2017-04-21 12:00:40 +05:30
Mark Andrews 9301c35ae6 adjust range 2017-03-02 12:32:04 +11:00
Tinderbox User 1baa50950b update copyright notice / whitespace 2017-03-01 01:52:56 +00:00
Mark Andrews f240f4a5de Reimplement:
4578.   [security]      Some chaining (CNAME or DNAME) responses to upstream
                        queries could trigger assertion failures.
                        (CVE-2017-3137) [RT #44734]
2017-03-01 12:01:16 +11:00
Tinderbox User e66aaccfd8 update copyright notice / whitespace 2017-02-20 23:45:32 +00:00
Witold Krecicki fa9b4de716 4576. [func] The RPZ implementation has been substantially refactored for improved performance and reliability. [RT #43449] 2017-02-20 11:57:28 +01:00
Evan Hunt 5480a74b70 [master] simplify prereq checks by using feature-test.c
4498.	[test]		Simplify prerequisite checks in system tests.
			[RT #43516]
2016-10-31 16:53:37 -07:00
Witold Krecicki 358dfaee18 4487. [test] Make system tests work on Windows. [RT #42931] 2016-10-19 17:18:42 +02:00
Mark Andrews 0c27b3fe77 4401. [misc] Change LICENSE to MPL 2.0. 2016-06-27 14:56:38 +10:00
Mark Andrews 3635d8f910 do not overflow exit status. [RT #42643] 2016-06-14 13:48:39 +10:00
Tinderbox User 7d4f45f6bd update copyright notice / whitespace 2016-01-21 23:45:23 +00:00
Evan Hunt 9b789c54f8 [master] add regression test for RT #41518
4297.	[test]		Ensure delegations in RPZ zones fail robustly.
			[RT #41518]
2016-01-20 17:44:11 -08:00
Tinderbox User 3865e18d3d update copyright notice / whitespace 2015-11-09 23:45:22 +00:00
Evan Hunt e13d04fda9 [master] fix python script versions
4257.	[cleanup]	Python scripts reported incorrect version. [RT #41080]
2015-11-08 21:34:24 -08:00
Tinderbox User 9ae1588020 update copyright notice / whitespace 2015-05-08 23:45:24 +00:00
Mukund Sivaraman b947e1a521 Fix a bug in RPZ that could cause unwanted recursion (#39229)
Conflicts:
	doc/arm/notes.xml
2015-05-07 08:29:36 +05:30
Mukund Sivaraman 47d837a499 Make named a singleton process [RT#37908]
Conflicts:
	bin/tests/system/conf.sh.in
	lib/dns/win32/libdns.def.in
	lib/isc/win32/file.c

The merge also needed to update files in legacy and tcp system tests
(newly introduced in master after branch was created) to introduce use
of lockfile.
2014-12-18 12:31:25 +05:30
Mark Andrews 7301df07cf extend the permissible number of queries to 25 from 24 2014-11-24 10:20:39 +11:00
Mark Andrews 06e28e50bd give the nameserver a little longer to response 2014-09-18 10:06:48 +10:00
Mark Andrews cef76ee5bd 3921. [bug] AD was inappopriately set on RPZ responses. [RT #36833] 2014-08-22 15:45:40 +10:00
Mark Andrews f2a91da02e adjust range 2014-07-31 20:32:50 +10:00
Mark Andrews ac5ed74860 3897. [bug] RPZ summary information was not properly being updated
after a AXFR resulting in changes sometimes being
                        ignored.  [RT #35885]
2014-07-22 10:57:58 +10:00
Mark Andrews 48789995c1 use $NSUPDATE 2014-06-15 18:35:19 +10:00
Tinderbox User 4ded8003e3 update copyright notice 2014-06-12 23:45:22 +00:00
Evan Hunt 06e0d6bb12 [master] address rpz bugs
3877.	[bug]		Inserting and deleting parent and child nodes
			in response policy zones could trigger an assertion
			failure. [RT #36272]
2014-06-11 20:00:19 -07:00
Mark Andrews 5360986092 set max 2014-06-02 13:42:58 +10:00
Mark Andrews 3a26e75e3c accept a range of stats values 2014-06-02 08:15:47 +10:00
Mark Andrews 536da846f6 update copyrights 2014-05-30 09:41:33 +10:00
Mark Andrews 44b0e0b1d5 More changes for:
3864.   [bug]           RPZ didn't work well when being used as forwarder.
                        [RT #36060]
2014-05-30 08:41:27 +10:00
Mark Andrews 3d75189141 3864. [bug] RPZ didn't work well when being used as forwarder.
[RT #36060]
2014-05-29 17:02:10 +10:00
Evan Hunt 60988462e5 [master] use posix-compatible shell in system tests
3839.	[test]		Use only posix-compatible shell in system tests.
			[RT #35625]
2014-05-06 22:06:04 -07:00
Evan Hunt 92fe6db3e4 [master] use test -r in system tests
3806.	[test]		Improved system test portability. [RT #35625]
2014-04-09 20:29:52 -07:00
Tinderbox User 20a96edbf9 update copyright notice 2014-02-20 23:46:35 +00:00
Mark Andrews 86a85a3bbd don't error on rpz percentage checks as they fail inconsistently on virtual machines 2014-02-20 12:22:14 +11:00