Commit Graph

38872 Commits

Author SHA1 Message Date
Mark Andrews
e27acff332 Address qp/rbtdb backup file style differences
qp and rbtdb produce stylistically different backup files.  This
was causing the xferquota system test to fail.  This has been
addressed by making the test independent of the stylistic differences.

(cherry picked from commit 1482e9bbb9)
2024-05-15 10:58:42 +02:00
Matthijs Mekking
5bb7d952a7 Fix xferquota system test
The change from RBT to QP has changed the contents of generated zone
files slightly: node names are now always absolute, so instead of using
$ORIGIN and relative names, generated zone files use full names for all
records.

This caused a failure in the xferquota system test, which was looking
for a relative name in secondary zone files. Replace the string
matching with a regular expression to fix the test.

(cherry picked from commit 618c963cb7)
2024-05-15 10:58:37 +02:00
Nicki Křížek
9c6c5628ed Merge branch 'nicki/add-mailmap-9.18' into 'bind-9.18'
[9.18] Add .mailmap to the git repo

See merge request isc-projects/bind9!9030
2024-05-14 12:54:14 +00:00
Nicki Křížek
59d337e8d7 Add .mailmap to the git repo
Mailmap can be used to unify the display name in standard git tools.

(cherry picked from commit 986013a708)
2024-05-14 14:23:42 +02:00
Michal Nowak
3ce5b76d31 Merge branch 'mnowak/pytest_rewrite_include-multiplecfg-9.18' into 'bind-9.18'
[9.18] Rewrite include-multiplecfg system test to pytest

See merge request isc-projects/bind9!9029
2024-05-14 11:52:48 +00:00
Michal Nowak
fb7366db3e Rewrite include-multiplecfg system test to pytest
(cherry picked from commit e9e8753306)
2024-05-14 12:54:40 +02:00
Michal Nowak
ec42164265 Use isctest.run.cmd() helper function in tests
(cherry picked from commit 77a42f8875)
2024-05-14 12:54:26 +02:00
Tom Krizek
78c3838310 Add isctest.run.cmd() helper function
(cherry picked from commit a9f3fb3db5)
2024-05-14 10:47:51 +00:00
Mark Andrews
6ef02ffd69 Merge branch '4502-missing-reference-9.18' into 'bind-9.18'
[9.18] Resolve "Missing reference?"

See merge request isc-projects/bind9!9024
2024-05-13 23:52:31 +00:00
Mark Andrews
f7c76fe6da Add CHANGES for [GL #4502]
(cherry picked from commit 53698ad58d)
2024-05-14 08:46:00 +10:00
Mark Andrews
35f1e43273 Use dns_view_findzone instead of dns_zt_find
With weak zone attachments being used for catzs, catzs->view->zonetable
may be NULL so we need to account for this which dns_view_findzone
does.  This is already done in main.
2024-05-14 08:46:00 +10:00
Mark Andrews
35d908caa8 catz should use weak attachment to the view
(cherry picked from commit 941ad2b3c5)
2024-05-09 10:53:02 +10:00
Mark Andrews
d12def13f6 catzs->view should maintain a view reference
Use dns_view_weakattach and dns_view_weakdetach to maintain a
reference to the view referenced through catzs->view.

(cherry picked from commit 307e3ed9a6)
2024-05-09 10:22:00 +10:00
Petr Špaček
af3763a35d Merge branch 'pspacek/doc-rfc-ref-update-9.18' into 'bind-9.18'
[9.18] Update RFC references in documentation

See merge request isc-projects/bind9!9021
2024-05-08 07:16:32 +00:00
Petr Špaček
834621f53f Update reference for Catalog Zones spec to RFC9432
(cherry picked from commit ead4a110ad)
2024-05-08 07:09:35 +00:00
Petr Špaček
9291689720 Update KSK root sentinel references
The mechanism was published as RFC 8509. I've briefly looked at diff
between versions -08 and the RFC and did not find significant protocol
change. Quick manual check confirms what we seem to comply with the
published protocol.

(cherry picked from commit 153311da2d)
2024-05-08 07:09:35 +00:00
Petr Špaček
f148d39a9b Mention RFC 9276 Guidance for NSEC3 Parameter Settings
Draft was eventually published as RFC 9276 but we did not update our
docs. Also add couple mentions in relevant places in the ARM and
dnssec-signzone man page, mainly around "do not touch" places.

(cherry picked from commit 8e4c0329c3)
2024-05-08 07:09:35 +00:00
Petr Špaček
7817a483a4 Update DNSSEC Operational Practices references to Version 2
RFC 4641 was obsoleted by 6781.

(cherry picked from commit c5d6769e11)
2024-05-08 07:09:35 +00:00
Mark Andrews
4b8331e1c0 Merge branch '4704-svcb-https-bind9-and-dig-fail-to-parse-packet-if-zero-svcpriority-and-existing-svcparams-9.18' into 'bind-9.18'
[9.18] Resolve "SVCB/HTTPS: Bind9 and Dig fail to parse packet if zero SvcPriority and existing SvcParams"

See merge request isc-projects/bind9!9019
2024-05-07 02:38:56 +00:00
Mark Andrews
f7a600d8c3 Add CHANGES note for [GL #4704]
(cherry picked from commit e0b5c85f5a)
2024-05-07 02:08:27 +00:00
Mark Andrews
d1cc8a271d Only check SVBC alias forms at higher levels
Allow SVBC (HTTPS) alias form with parameters to be accepted from
the wire and when transfered.  This is for possible future extensions.

(cherry picked from commit 799046929c)
2024-05-07 02:08:27 +00:00
Mark Andrews
2bfc72c12b Merge branch '4357-treat-notfile-as-eof-9.18' into 'bind-9.18'
[9.18] Remove infinite loop on ISC_R_NOFILE

See merge request isc-projects/bind9!9018
2024-05-07 01:51:55 +00:00
Mark Andrews
44034b4ef2 Add CHANGES note for [GL #4357]
(cherry picked from commit 236a38a7c9)
2024-05-07 01:06:14 +00:00
Mark Andrews
602b20d3f5 Test including a directory in a zone file
(cherry picked from commit e697d20f00)
2024-05-07 01:06:14 +00:00
Mark Andrews
3f25f3349e Remove infinite loop on ISC_R_NOFILE
When parsing a zonefile named-checkzone (and others) could loop
infinitely if a directory was $INCLUDED.  Record the error and treat
as EOF when looking for multiple errors.

This was found by Eric Sesterhenn from X41.

(cherry picked from commit efd27bb82d)
2024-05-07 01:06:14 +00:00
Mark Andrews
0b740dfee6 Merge branch '4353-fix-nibbles-9.18' into 'bind-9.18'
[9.18] Address infinite loop when processing $GENERATE

See merge request isc-projects/bind9!9017
2024-05-07 00:40:13 +00:00
Mark Andrews
71cb3d4bc4 Add CHANGES note for [GL #4353]
(cherry picked from commit f154187fd0)
2024-05-06 23:59:06 +00:00
Mark Andrews
c8166d67f6 Test $GENERATE in nibble mode with a negative value
Negative values used to cause $GENERATE to loop forever.

(cherry picked from commit 32535de856)
2024-05-06 23:59:06 +00:00
Mark Andrews
58efb2f740 Address infinite loop when processing $GENERATE
In nibble mode if the value to be converted was negative the parser
would loop forever.  Process the value as an unsigned int instead
of as an int to prevent sign extension when shifting.

This was found by Eric Sesterhenn from X41.

(cherry picked from commit 371824f078)
2024-05-06 23:59:06 +00:00
Michal Nowak
1bc1fc5a18 Merge branch 'mnowak/fedora-40-9.18' into 'bind-9.18'
[9.18] Add Fedora 40

See merge request isc-projects/bind9!9015
2024-05-06 18:48:51 +00:00
Michal Nowak
13692907d0 Add Fedora 40
(cherry picked from commit 1a09f822ad)
2024-05-06 19:45:43 +02:00
Michal Nowak
36aa5ee8c3 Merge branch 'mnowak/ubuntu-24.04-noble-numbat-9.18' into 'bind-9.18'
[9.18] Add Ubuntu 24.04 LTS (Noble Numbat)

See merge request isc-projects/bind9!9013
2024-05-06 17:04:59 +00:00
Michal Nowak
335dbfcb17 Configure Ubuntu "focal" with --disable-doh
At least one CI job should be configured with disabled DoH to catch
build problems.
2024-05-06 18:38:44 +02:00
Michal Nowak
5e4a995a55 Add Ubuntu 24.04 LTS (Noble Numbat)
(cherry picked from commit d02ed1a0eb)
2024-05-06 18:38:15 +02:00
Michal Nowak
04cb2634e5 Merge branch 'mnowak/openbsd-7.5-9.18' into 'bind-9.18'
[9.18] Add OpenBSD 7.5

See merge request isc-projects/bind9!9011
2024-05-06 15:36:59 +00:00
Michal Nowak
08e20993fc Add OpenBSD 7.5
(cherry picked from commit 102fccdcba)
2024-05-06 15:28:14 +00:00
Michal Nowak
6cdb59ffbf Merge branch '4711-stress-test-finer-runtime-granularity-9.18' into 'bind-9.18'
[9.18] Add short version of "stress" tests to MR-triggered pipelines

See merge request isc-projects/bind9!9009
2024-05-06 14:35:08 +00:00
Michal Nowak
8738a58412 Add short "stress" test jobs
(cherry picked from commit f33b746353)
2024-05-06 14:08:21 +00:00
Michal Nowak
769dc23862 Rename "stress" tests to long "stress" tests
(cherry picked from commit 58a1a50e76)
2024-05-06 14:08:21 +00:00
Michal Nowak
5d1ea40c8e Revert "Drop parallel build from stress tests"
This reverts commit 3fd7e7c81f.

In AWS this is no longer a concern.

(cherry picked from commit 1d77a3b3c6)
2024-05-06 14:08:21 +00:00
Matthijs Mekking
6f5e423814 Merge branch '3323-different-rpz-soa-ttl-9.18' into 'bind-9.18'
[9.18] RPZ response's SOA record is incorrectly set to 1

See merge request isc-projects/bind9!9008
2024-05-06 11:25:01 +00:00
Matthijs Mekking
7c8ae66f9e Add release note and CHANGES for #3323
(cherry picked from commit 2726b569b1)
2024-05-06 12:18:45 +02:00
Matthijs Mekking
4ef23ad0ff RPZ response's SOA record is incorrectly set to 1
An RPZ response's SOA record TTL is set to 1 instead of the SOA TTL,
a boolean value is passed on to query_addsoa, which is supposed to be
a TTL value. I don't see what value is appropriate to be used for
overriding, so we will pass UINT32_MAX.

(cherry picked from commit 5d7e613e81)
2024-05-06 12:18:08 +02:00
Michal Nowak
7ed19b1e1e Merge branch 'mnowak/set-up-version-and-release-notes-for-bind-9.18.28' into 'bind-9.18'
Set up version and release notes for BIND 9.18.28

See merge request isc-projects/bind9!9007
2024-05-03 14:15:05 +00:00
Michal Nowak
d3845b768a Set up release notes for BIND 9.18.28 2024-05-03 16:05:20 +02:00
Michal Nowak
9c82b79a68 Update BIND version to 9.18.28-dev 2024-05-03 16:05:20 +02:00
Ondřej Surý
c4331e9302 Merge branch '4586-don-t-count-expired-future-rrsigs-in-verification-failure-quota-bind-9.18' into 'bind-9.18'
[9.18] Draft: Resolve "Don't count expired / future RRSIGs in verification failure quota"

See merge request isc-projects/bind9!8749
2024-04-30 19:39:06 +00:00
Mark Andrews
297472bfcc Add CHANGES and release note for [GL #4586] for BIND 9.18 2024-04-30 17:52:27 +02:00
Mark Andrews
82ca80c2e9 Move onto the next RRSIG on DNS_R_SIGEXPIRED or DNS_R_SIGFUTURE 2024-04-30 17:47:49 +02:00
Michal Nowak
1f1685ef67 Merge branch 'mnowak/stress-tests-freebsd-instance-autoscaler-9.18' into 'bind-9.18'
[9.18] Use FreeBSD autoscaler for "stress" tests

See merge request isc-projects/bind9!8994
2024-04-29 20:44:29 +00:00