Commit Graph

4677 Commits

Author SHA1 Message Date
Mark Andrews
e7f4d4e09d 2772. [security] When validating, track whether pending data was from
the additional section or not and only return it if
                        validates as secure. [RT #20438]
2009-11-18 00:15:38 +00:00
Mark Andrews
7dc66d649a 2765. [bug] Skip masters for which the TSIG key cannot be found.
[RT #20595]
2009-11-12 23:39:23 +00:00
Automatic Updater
a1b08748d8 update copyright notice 2009-11-04 23:47:25 +00:00
Mark Andrews
450d4ae030 spelling 2009-11-04 04:21:57 +00:00
Mark Andrews
fb76b4340c 2749. [bug] ixfr-from-differences generated a non-minimal ixfr
for NSEC3 signed zones. [RT #20452]
2009-11-04 04:05:45 +00:00
Mark Andrews
5211674cef 2747. [bug] Journal roll forwards failed to set the re-signing
time of RRSIGs correctly. [RT #20541]
2009-11-04 01:35:07 +00:00
Automatic Updater
ef2dfb76b9 update copyright notice 2009-11-03 23:47:46 +00:00
Mark Andrews
ef55474f25 2743. [bug] RRSIG could be incorrectly sent in the NSEC3 record
for a insecure delegation.
2009-11-03 01:16:19 +00:00
Mark Andrews
2a2e4dbefb 2722. [bug] Ensure that the memory associated with the name of
a node in a rbt tree is not altered during the life
                        of the node. [RT #20431]
2009-10-20 05:06:04 +00:00
Mark Andrews
27f8258b13 2721. [port] Have dst__entropy_status() prime the random number
generator. [RT #20369]
2009-10-20 04:44:37 +00:00
Mark Andrews
fff31a08a9 2718. [bug] The space calculations in opensslrsa_todns() were
incorrect. [RT #20394]
2009-10-20 03:03:09 +00:00
Evan Hunt
a9775fe88d 2706. [bug] Loading a zone with a very large NSEC3 salt could
trigger an assert. [RT #20368]
2009-10-06 21:20:18 +00:00
Automatic Updater
b91b3c4f09 update copyright notice 2009-10-05 23:47:50 +00:00
Evan Hunt
c459aec591 2705. [bug] Reconcile the XML stats version number with a later
BIND9 release, by adding a "name" attribute to
                        "cache" elements and increasing the version number
                        to 2.2.  (This is a minor version change, but may
                        affect XML parsers if they assume the cache element
                        doesn't take an attribute.)

2704.	[bug]		Serial of dynamic and stub zones could be inconsistent
			with their SOA serial.  [RT #19387]
2009-10-05 21:57:00 +00:00
Automatic Updater
e4aad620d2 update copyright notice 2009-10-03 23:47:29 +00:00
Evan Hunt
02a7cfcc8a 2699. [bug] Missing lock in rbtdb.c. [RT #20037] 2009-10-03 22:39:04 +00:00
Mark Andrews
d738f55bbf silence signed/unsigned comparision warning 2009-09-25 01:46:58 +00:00
Mark Andrews
7648521c39 2689. [bug] Correctly handle snprintf result. [RT #20306] 2009-09-24 22:20:32 +00:00
Francis Dupont
199726face minor fix, cf 20295 2009-09-22 08:39:44 +00:00
Tatuya JINMEI 神明達哉
194d3c5a10 2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
decoded [RT #20269].

BIND 9.7.0, 9.6.2, 9.5.2, 9.4.4
2009-09-18 21:55:48 +00:00
Mark Andrews
99c0705417 2653. [bug] Treat ENGINE_load_private_key() failures as key
not found rather than out of memory.  [RT #18033]
2009-08-18 08:05:02 +00:00
Automatic Updater
dfc1a21b59 update copyright notice 2009-08-13 07:13:31 +00:00
Mark Andrews
6b7a9242d6 2649. [bug] Set the domain for forward only zones. [RT #19944] 2009-08-13 04:53:24 +00:00
Mark Andrews
2ec35a7772 2647. [bug] Remove unnecessary SOA updates when a new KSK is
added. [RT #19913]
2009-08-13 02:57:45 +00:00
Evan Hunt
a6c4d1405e 2642. [bug] nsupdate could dump core on solaris when reading
improperly formatted key files.  [RT #20015]
2009-07-29 23:53:22 +00:00
Mark Andrews
c83d2dbb2b 2639. [bug] Silence compiler warnings in gssapi code. [RT #19954] 2009-07-21 07:27:13 +00:00
Mark Andrews
c5296e040b char mechbuf[17] -> unsigned char mechbuf[17] 2009-07-20 01:54:46 +00:00
Mark Andrews
785eb615e3 2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865] 2009-07-13 07:04:36 +00:00
Mark Andrews
49c3a15727 2623. [bug] Named started seaches for DS non-optimally. [RT #19915] 2009-07-13 06:32:12 +00:00
Automatic Updater
0da8837d0e update copyright notice 2009-07-11 23:47:17 +00:00
Mark Andrews
a416993543 2920. [bug] Delay thawing the zone until the reload of it has
completed successfully.  [RT #19750]
2009-07-11 04:23:54 +00:00
Mark Andrews
be30c7f74e 2618. [bug] The sdb and sdlz db_interator_seek() methods could
loop infinitely. [RT #19847]
2009-06-26 06:25:44 +00:00
Automatic Updater
d84b71a0a9 update copyright notice 2009-06-23 00:19:34 +00:00
Automatic Updater
6e67205ba7 update copyright notice 2009-06-22 23:47:18 +00:00
Mark Andrews
e6be77a26c 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-22 05:05:01 +00:00
Mark Andrews
fb1c018ecc 2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
[RT #19626]
2009-06-22 03:53:05 +00:00
Mark Andrews
8286a91388 missing line breaks 2009-06-17 04:53:57 +00:00
Automatic Updater
4b24acd9f1 update copyright notice 2009-06-08 23:47:00 +00:00
Evan Hunt
4d6469ffd8 Back out dnssec-signzone fix for 9.6.1 2009-06-08 22:23:07 +00:00
Mark Andrews
22b2741ede dns_dnssec_selfsigns 2009-06-04 04:58:54 +00:00
Mark Andrews
a42b13d33c 9.6.0 2009-06-04 04:02:41 +00:00
Mark Andrews
442d6ced85 9.6.0 2009-06-04 04:00:44 +00:00
Automatic Updater
c441671e8f update copyright notice 2009-06-04 02:56:14 +00:00
Mark Andrews
5fa0c17a78 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-04 02:41:54 +00:00
Mark Andrews
64b01fda14 2607. [bug] named could incorrectly delete NSEC3 records for
empty nodes when processing a update request.
                        [RT #19749]
2009-06-04 01:47:41 +00:00
Automatic Updater
2c0dd6a4a0 update copyright notice 2009-06-02 23:47:13 +00:00
Mark Andrews
ba58299f9f 2605. [bug] Accept DS responses from delegation only zones.
[RT # 19296]
2009-06-02 05:56:27 +00:00
Automatic Updater
cb1aa919c6 update copyright notice 2009-05-11 02:38:03 +00:00
Mark Andrews
d6b57bc73c spelling 2009-05-11 02:29:12 +00:00
Mark Andrews
a6ddec4212 2599. [bug] Address rapid memory growth when validation fails.
[RT #19654]
2009-05-11 02:25:11 +00:00