Commit Graph
2592 Commits
Author SHA1 Message Date
Evan Hunt ba751492fc [master] native PKCS#11 support
3705.	[func]		"configure --enable-native-pkcs11" enables BIND
			to use the PKCS#11 API for all cryptographic
			functions, so that it can drive a hardware service
			module directly without the need to use a modified
			OpenSSL as intermediary (so long as the HSM's vendor
			provides a complete-enough implementation of the
			PKCS#11 interface). This has been tested successfully
			with the Thales nShield HSM and with SoftHSMv2 from
			the OpenDNSSEC project. [RT #29031]
2014-01-14 15:40:56 -08:00
Mark Andrews fef19ce621 fix for pre C99 compiler 2014-01-13 17:07:52 +11:00
Tinderbox User 2cf1d5b098 update copyright notice 2014-01-12 23:46:23 +00:00
Mark Andrews fb756ba304 3703. [func] Prefetch about to expire records if they are queried
for, see prefetch option for details. [RT #35041]
2014-01-12 21:29:15 +11:00
Tinderbox User 7a50e338b5 regen 2014-01-10 20:22:53 +00:00
Mark Andrews a7c412f37c update copyrights 2014-01-11 07:07:56 +11:00
Evan Hunt 1bb2f53b9f [master] fix win32 build problems 2014-01-10 10:58:06 -08:00
Evan Hunt 57a46f4b19 [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2014-01-09 19:05:46 -08:00
Evan Hunt 789252d55f [master] stats improvements
3700.	[func]		Allow access to subgroups of XML statistics via
			special URLs http://<server>:<port>/xml/v3/server,
			/zones, /net, /tasks, /mem, and /status.  [RT #35115]

3699.	[bug]		Improvements to statistics channel XSL stylesheet:
			the stylesheet can now be cached by the browser;
			section headers are omitted from the stats display
			when there is no data in those sections to be
			displayed; counters are now right-justified for
			easier readability. [RT #35117]
2014-01-09 18:46:25 -08:00
Tinderbox User 431a83fb29 update copyright notice 2014-01-09 23:46:35 +00:00
Evan Hunt 080977753e [master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2014-01-08 18:28:49 -08:00
Tinderbox User b29285b88f regen master 2014-01-09 01:05:03 +00:00
Evan Hunt e851ea8260 [master] replace memcpy() with memmove().
3698.	[cleanup]	Replaced all uses of memcpy() with memmove().
			[RT #35120]
2014-01-08 16:39:05 -08:00
Tinderbox User 869a7fe8e0 update copyright notice 2014-01-08 23:46:09 +00:00
Evan Hunt 2f0c7f1de7 [master] removed reference to "auto-dnssec create" 2014-01-08 11:33:25 -08:00
Mark Andrews fa467e60c5 3693. [security] memcpy was incorrectly called with overlapping
ranges resulting in malformed names being generated
                        on some platforms.  This could cause INSIST failures
                        when serving NSEC3 signed zones.  [RT #35120]
2013-12-20 10:58:32 +11:00
Evan Hunt 445a354e63 [master] fix 'rndc refresh' in inline-signing zones
3685.	[bug]		"rndc refresh" didn't work correctly with slave
			zones using inline-signing. [RT #35105]
2013-12-11 12:59:04 -08:00
Mark Andrews 99c3e8e09c cleanup 2013-12-10 09:31:38 +11:00
Mark Andrews 06a0b00bb6 use snprintf; check the result of putstr 2013-12-10 08:55:26 +11:00
Mark Andrews 2bdfb330af update copyrights 2013-12-05 15:04:53 +11:00
Tinderbox User 5465b124f1 update copyright notice 2013-12-04 23:46:51 +00:00
Evan Hunt bee9a28af0 [master] clearer "not found" message for rndc commands
3683.	[cleanup]	Add a more detailed "not found" message to rndc
			commands which specify a zone name. [RT #35059]
2013-12-04 12:47:56 -08:00
Mark Andrews 545b8a7295 remove redundent assignment 2013-12-04 16:12:43 +11:00
Mark Andrews c3c8823fed 3681. [port] Update the Windows build system to support feature
selection and WIN64 builds.  This is a work in
                        progress. [RT #34160]
2013-12-04 12:47:23 +11:00
Evan Hunt 2c2be89824 [master] buffer could overflow in rndc zonestatus
3680.	[bug]		Ensure buffer space is available in "rndc zonestatus".
			[RT #35084]
2013-12-02 15:38:24 -08:00
Mark Andrews 225146b2c8 3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026] 2013-11-18 11:22:59 +11:00
Evan Hunt 434bfc3dfa [master] "in-view" zone option
3673.	[func]		New "in-view" zone option allows direct sharing
			of zones between views. [RT #32968]
2013-11-13 20:35:40 -08:00
Mark Andrews 9800974419 fix dereference before null check warning 2013-11-14 12:31:25 +11:00
Tinderbox User 3b7b634d56 update copyright notice 2013-11-12 23:46:31 +00:00
Mark Andrews eb5e0b8dec 3670. [bug] Address read after free in server side of
lwres_getrrsetbyname. [RT #29075]
2013-11-12 15:00:03 +11:00
Mark Andrews 7433a204d3 3658. [port] linux: Address platform specific compilation issue
when libcap-devel is installed. [RT #34838]
2013-09-26 15:26:43 +10:00
Mark Andrews c9ee72cb3a 3656. [bug] Treat a all zero netmask as invalid when generating
the localnets acl. [RT #34687]
2013-09-26 07:40:34 +10:00
Mark Andrews 00043fc284 3653. [func] Create delegations for all "children" of empty zones
except "forward first". [RT #34826]
2013-09-25 09:40:21 +10:00
Mark Andrews 9a7f89279e remove unnecessary assignment 2013-09-22 23:21:54 +10:00
Mark Andrews 9fa2a0deed 3652. [bug] Address bug with rpz-drop policy. [RT #34816] 2013-09-21 17:27:43 +10:00
Tinderbox User bcbb556868 update copyright notice 2013-09-19 23:46:20 +00:00
Evan Hunt c7965f84c2 [master] comment nzf files
3649.	[cleanup]	Include a comment in .nzf files, giving the name of
			the associated view. [RT #34765]
2013-09-19 15:37:09 -07:00
Mark Andrews 5bdb12d2c6 assignment not read 2013-09-09 14:05:04 +10:00
Mark Andrews cb69994ff8 3645. [protocol] Use case sensitive compression when responding to
queries. [RT #34737]
2013-09-05 12:22:34 +10:00
Mark Andrews b5f4cc132e 3641. [bug] Handle changes to sig-validity-interval settings
better. [RT #34625]
2013-09-04 13:45:00 +10:00
Mark Andrews 92f2cf45ce style 2013-09-01 17:08:09 +10:00
Mark Andrews 601d1a9aad remove dead code 2013-08-19 12:43:47 +10:00
Mark Andrews 997c2c5116 3636. [bug] Automatic empty zones now behave better with
forward only "zones" beneath them. [RT #34583]
2013-08-19 09:18:28 +10:00
Mark Andrews e548e07a9a 3636. [bug] Automatic empty zones now behave better with
forward only "zones" beneath them. [RT #34583]
2013-08-16 13:54:23 +10:00
Mark Andrews 0e1dfb8ff5 3634. [func] Report build-id in rndc status. Report build-id
when building from a git repository. [RT #20422]
2013-08-15 12:41:52 +10:00
Mark Andrews 8e091f3d3e 3633. [cleanup] Refactor OPT processing in named to make it easier
to support new EDNS options. [RT #34414]
2013-08-15 12:01:12 +10:00
Mark Andrews 06ace051e7 3631. [bug] Remove spurious warning about missing signatures when
qtype is SIG. [RT #34600]
2013-08-15 08:04:58 +10:00
Evan Hunt d640b4a0ab [master] perf: eliminate cache stats attach/detach
3622.	[tuning]	Eliminate an unnecessary lock when incrementing
			cache statistics. [RT #34339]
2013-07-25 10:51:31 -07:00
Evan Hunt 960958c610 [master] silence warning 2013-07-12 19:05:09 -07:00
Tinderbox User 50464a3398 update copyright notice 2013-07-12 23:46:05 +00:00