Michał Kępień
4034b098d8
[master] Prevent junk from being logged when using "also-notify { <ip> key <keyname>; };"
2017-11-08 09:21:23 +01:00
Mukund Sivaraman
7e1df5182c
[master] isc_rng_randombytes()
...
4807. [cleanup] isc_rng_randombytes() returns a specified number of
bytes from the PRNG; this is now used instead of
calling isc_rng_random() multiple times. [RT #46230 ]
2017-11-06 10:44:37 -08:00
Evan Hunt
8d23105547
[master] prep 9.12.0b2
2017-11-02 11:50:07 -07:00
Evan Hunt
9bb007fd2d
[master] "zoneload" logging category
...
4806. [func] Log messages related to loading of zones are now
directed to the "zoneload" logging category.
[RT #41640 ]
2017-11-01 22:48:12 -07:00
Mark Andrews
6e02359034
tmp should be a (struct in_addr) not (struct in_addr *)
2017-10-31 10:35:07 +11:00
Michał Kępień
c6c1193e39
[master] Improve clarity of keytable unit tests
...
4799. [cleanup] Improve clarity of keytable unit tests. [RT #46407 ]
2017-10-28 19:59:40 +02:00
Evan Hunt
c9f8165a06
[master] tag initializing keys
...
4798. [func] Keys specified in "managed-keys" statements
are tagged as "initializing" until they have been
updated by a key refresh query. If initialization
fails it will be visible from "rndc secroots".
[RT #46267 ]
2017-10-27 15:49:44 -07:00
Evan Hunt
06049b1c6c
[master] stats counter for priming queries
...
4795. [func] A new statistics counter has been added to track
priming queries. [RT #46313 ]
2017-10-26 21:38:43 -07:00
Tinderbox User
08f18efba2
update copyright notice / whitespace
2017-10-26 23:45:58 +00:00
Mark Andrews
c341e524dc
address resource leak [RT #46413 ]
2017-10-27 09:58:55 +11:00
Evan Hunt
5b69d3da83
[master] check file and tree headers when loading map files
...
4792. [bug] Fix map file header correctness check. [RT #38418 ]
2017-10-25 21:37:00 -07:00
Evan Hunt
89d1777560
[master] clean up DNS_MESSAGETEXTFLAG comments
2017-10-25 21:33:24 -07:00
Tinderbox User
8e2a8a3855
update copyright notice / whitespace
2017-10-25 23:47:47 +00:00
Evan Hunt
aebdc6cd7d
[master] log when update-policy local gets a key match from a remote host
...
4788. [cleanup] When using "update-policy local", log a warning
when an update matching the session key is received
from a remote host. [RT #46213 ]
- this completes change #4762 .
2017-10-25 00:58:11 -07:00
Michał Kępień
910a01550a
[master] Rename nsec3param_salt_totext() to dns_nsec3param_salttotext(), make it public, add unit tests
...
4786. [cleanup] Turn nsec3param_salt_totext() into a public function,
dns_nsec3param_salttotext(), and add unit tests for it.
[RT #46289 ]
2017-10-25 09:46:18 +02:00
Evan Hunt
65314b0fd8
[master] "enable-filter-aaaa" no longer optional
...
4786. [func] The "filter-aaaa-on-v4" and "filter-aaaa-on-v6"
options are no longer conditionally compiled.
[RT #46340 ]
2017-10-25 00:33:51 -07:00
Michał Kępień
a94d68ce43
[master] Remove REQUIRE preventing change 4592 from working
...
Change 4592 was supposed to replace a REQUIRE with a conditional return.
While the latter was added, the former was not removed. Remove the
relevant REQUIRE to fix RT #43822 for good.
2017-10-24 21:11:31 +02:00
Evan Hunt
7810817b71
[master] update B.ROOT-SERVERS.NET
2017-10-24 09:17:08 -07:00
Mark Andrews
c9438ee2e0
4779. [bug] Expire NTA at the start of the second. Don't update
...
the expiry value if the record has already expired
after a successful check. [RT #46368 ]
2017-10-24 09:54:25 +11:00
Evan Hunt
b284857f96
[master] mapapi should have been bumped when rbtdb changed
2017-10-20 09:39:55 -07:00
Tinderbox User
429a43b720
update copyright notice / whitespace
2017-10-19 23:46:02 +00:00
Mark Andrews
0fab171196
s/REQUIRE/ISC_REQUIRE/; include <isc/assertions.h> if ISC_REQUIRE is used; include <isc/likely.h> if ISC_{UN}LIKELY is used
2017-10-19 16:39:53 +11:00
Mark Andrews
fe79e2efbf
4774. [bug] <isc/util.h> was incorrectly included in several
...
header files. [RT #46311 ]
2017-10-19 12:26:32 +11:00
Tinderbox User
6e87e723a4
update copyright notice / whitespace
2017-10-17 23:47:21 +00:00
Michał Kępień
2361003a88
[master] Doxygen fixes and cleanups
...
4773. [doc] Fixed generating Doxygen documentation for functions
annotated using certain macros. Miscellaneous
Doxygen-related cleanups. [RT #46276 ]
2017-10-17 06:56:46 +02:00
Evan Hunt
838a7c6c6b
[master] Revert "add dns_keynode_initial, dns_keynode_trust, and dns_keytable_add2"
...
This reverts commit 8422d43dbc .
2017-10-12 11:06:29 -07:00
Evan Hunt
3abcd7cd8a
[master] Revert "[master] tag initializing keys so they can't be used for normal validation"
...
This reverts commit 560d8b833e .
This change created a potential race between key refresh queries and
root zone priming queries which could leave the root name servers in
the bad-server cache.
2017-10-12 10:53:35 -07:00
Mark Andrews
8422d43dbc
add dns_keynode_initial, dns_keynode_trust, and dns_keytable_add2
2017-10-12 05:26:55 +00:00
Evan Hunt
d0c3272eaa
[master] copyrights
2017-10-11 21:11:37 -07:00
Evan Hunt
99ab7127e1
[master] prep 9.12.0b1
2017-10-11 21:10:49 -07:00
Evan Hunt
560d8b833e
[master] tag initializing keys so they can't be used for normal validation
...
4773. [bug] Keys specified in "managed-keys" statements
can now only be used when validating key refresh
queries during initialization of RFC 5011 key
maintenance. If initialization fails, DNSSEC
validation of normal queries will also fail.
Previously, validation of normal queries could
succeed using the initializing key, potentially
masking problems with managed-keys. [RT #46077 ]
2017-10-11 21:01:13 -07:00
Mark Andrews
a9a983781e
reserve subscription flags
2017-10-12 09:19:37 +11:00
Evan Hunt
b2597ce86b
[master] ignore cache when sending 5011 refresh queries
...
4771. [bug] When sending RFC 5011 refresh queries, disregard
cached DNSKEY rrsets. [RT #46251 ]
2017-10-11 14:24:29 -07:00
Ondřej Surý
5de02a075b
[master] reduce unnecessary priming queries
...
4770. [bug] Cache additional data from priming queries as glue.
Previously they were ignored as unsigned
non-answer data from a secure zone, and never
actually got added to the cache, causing hints
to be used frequently for root-server
addresses, which triggered re-priming. [RT #45241 ]
2017-10-11 09:11:47 +02:00
Michał Kępień
6cdff94830
[master] Remove unused variable "len" from buildfilename()
2017-10-09 13:53:02 +02:00
Michał Kępień
077f9626c2
[master] Add isc_buffer_printf()
...
4767. [func] Add a new function, isc_buffer_printf(), which can be
used to append a formatted string to the used region of
a buffer. [RT #46201 ]
2017-10-09 11:43:07 +02:00
Michał Kępień
c0f78692ee
[master] Sync draft-durand-doa-over-dns snippet in lib/dns/tests/rdata_test.c with draft version -03
2017-10-09 10:52:50 +02:00
Evan Hunt
4c6df1653c
[master] add missing names
2017-10-06 17:38:35 -07:00
Tinderbox User
6636beb00b
update copyright notice / whitespace
2017-10-06 23:45:54 +00:00
Evan Hunt
995c41e8f0
[master] further restrict update-policy local
...
4762. [func] "update-policy local" is now restricted to updates
from local addresses. (Previously, other addresses
were allowed so long as updates were signed by the
local session key.) [RT #45492 ]
2017-10-06 15:43:31 -07:00
Evan Hunt
7baa39fc96
[master] it's okay if dns_db_setgluecachestats() returns ISC_R_NOTIMPLEMENTED
2017-10-06 12:52:21 -07:00
Evan Hunt
4101e6d31d
[master] incorrect goto label
2017-10-06 12:21:27 -07:00
Michał Kępień
417218837e
[master] Add support for DOA
...
4761. [protocol] Add support for DOA. [RT #45612 ]
2017-10-06 12:22:08 +02:00
Mukund Sivaraman
a0c408c90d
Add statistics for glue cache usage ( #46028 )
2017-10-06 15:44:37 +05:30
Tinderbox User
ddcf6c7d2b
update copyright notice / whitespace
2017-10-05 23:45:49 +00:00
Evan Hunt
c370305901
[master] 4754. [bug] dns_zone_setview needs a two stage commit to properly
...
handle errors. [RT #45841 ]
2017-10-04 23:44:15 -07:00
Mark Andrews
34efd9ad93
cast to unsigned int
2017-10-04 20:55:23 +11:00
Tinderbox User
ca0ae70046
update copyright notice / whitespace
2017-10-03 23:45:48 +00:00
Evan Hunt
a5a60037e5
[master] fix out-of-order synchronization that affected the dnssec test
2017-10-03 14:07:08 -07:00
Evan Hunt
f29359299a
[master] de-DLV
...
4749. [func] The ISC DLV service has been shut down, and all
DLV records have been removed from dlv.isc.org.
- Removed references to ISC DLV in documentation
- Removed DLV key from bind.keys
- No longer use ISC DLV by default in delv
[RT #46155 ]
2017-10-03 00:41:57 -07:00