ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
34,725 Commits 589 Branches 805 Tags
e392bb194caa8275dfbb2815fb049ec7cc41a3e6
Commit Graph

34725 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michał Kępień
e392bb194c Tweak and reword release notes 2022-10-07 13:40:53 +02:00
Michał Kępień
1fbff9bc80 Prepare release notes for BIND 9.16.34 2022-10-07 13:40:53 +02:00
Michał Kępień
1a90242ce4 Fix the location of a misplaced CHANGES entry 2022-10-07 13:40:53 +02:00
Petr Špaček
6e3ca66116 Merge branch '3554-improve-dnssec-policy-inline-signing-err-msg-v9_16' into 'v9_16' 
Clarify new configuration incompabitility: dnssec-policy vs. inline-signing [v9_16]

See merge request isc-projects/bind9!6872
 2022-10-06 08:55:44 +00:00
Petr Špaček
21c58497e2 Add Known Issue about config incompatibility 
(cherry picked from commit 5589d0a49c)

Adapted for v9_16 branch: Removed hyperlinks, removed note about 9.18.
 2022-10-06 10:32:52 +02:00
Petr Špaček
d63bc6af08 Clarify error message about missing inline-signing & dnssec-policy 
(cherry picked from commit 058c1744ba)
 2022-10-06 10:31:15 +02:00
Mark Andrews
1920c3d073 Merge branch '3577-reloads-in-ixfr-system-test-happen-too-fast-v9_16' into 'v9_16' 
Add sleeps to ixfr system test [v9_16]

See merge request isc-projects/bind9!6870
 2022-10-05 22:04:04 +00:00
Mark Andrews
03d363d0ee Add sleeps to ixfr system test 
ensure that at least a second has passed since a zone was last loaded
to prevent it accidentally being skipped as up to date.

(cherry picked from commit 491a8cfe96)
 2022-10-06 08:36:38 +11:00
Michal Nowak
2227974961 Merge branch 'mnowak/drop-flake8-ignore-lists-v9_16' into 'v9_16' 
[v9_16] Drop flake8 ignore lists

See merge request isc-projects/bind9!6868
 2022-10-05 16:40:05 +00:00
Michal Nowak
9f27c3f95e Drop flake8 ignore lists 
flake8 is not used in BIND 9 CI and inline ignore lists are not needed
anymore.

(cherry picked from commit f5d9fa6ea4)
 2022-10-05 18:33:34 +02:00
Petr Špaček
4fab54454d Merge branch 'pspacek/tsan-ci-artifacts-fix-v9_16' into 'v9_16' 
Fix TSAN artifact gathering in CI [v9_16]

See merge request isc-projects/bind9!6859
 2022-10-05 08:20:31 +00:00
Petr Špaček
815f89dbf9 Fix TSAN artifact gathering in CI 
Fixup for 2c3b2dabe9.

We forgot to update TSAN paths when moving all the unit tests to
/tests/.  Let's remove paths from find to make it less dependent on
exact location, and store all untracked files as we do in the normal
unit test template.

Related: !6243

(cherry picked from commit 9559eb3b21)
Adapted for v9_16 branch.
 2022-10-05 09:50:54 +02:00
Evan Hunt
5770858152 Merge branch '3493-clear-httpd-buffer-v9_16' into 'v9_16' 
compression buffer was not cleared properly

See merge request isc-projects/bind9!6854
 2022-10-05 06:06:49 +00:00
Evan Hunt
7b6140e756 compression buffer was not cleared properly 
clear the compression buffer before use. this eliminates the
possibility of a latent bug that, when combined with other changes,
allowed an overread in a later version of BIND.
 2022-10-04 10:12:24 -07:00
Mark Andrews
59230bb58f Merge branch '3544-add-dohpath-parsing-to-svbc-v9_16' into 'v9_16' 
Add support for 'dohpath' to SVCB (and HTTPS) [v9_16]

See merge request isc-projects/bind9!6850
 2022-10-04 06:24:57 +00:00
Mark Andrews
9bb5157adf Use strnstr implementation from FreeBSD if not provided by OS 
(cherry picked from commit 5f07fe8cbb)
 2022-10-04 17:05:18 +11:00
Mark Andrews
5568aca5a5 Add release note for [GL #3544] 
(cherry picked from commit 2f3441b40a)
 2022-10-04 15:34:10 +11:00
Mark Andrews
14f4dadfe5 Add CHANGES note for [GL #3544] 
(cherry picked from commit 335b397e15)
 2022-10-04 15:34:08 +11:00
Mark Andrews
e396d5d72d Add support for 'dohpath' to SVCB (and HTTPS) 
dohpath is specfied in draft-ietf-add-svcb-dns and has a value
of 7.  It must be a relative path (start with a /), be encoded
as UTF8 and contain the variable dns ({?dns}).

(cherry picked from commit 6d561d3886)
 2022-10-04 15:33:49 +11:00
Michal Nowak
120077bcc2 Merge branch 'mnowak/add-oracle-linux-9-v9_16' into 'v9_16' 
[v9_16] Add Oracle Linux 9

See merge request isc-projects/bind9!6808
 2022-10-03 13:17:57 +00:00
Michal Nowak
7ae22392da Add Oracle Linux 9 
(cherry picked from commit be08cf41d9)
 2022-10-03 13:28:26 +02:00
Mark Andrews
47e8a98240 keymgr: use DEFAULT_ALGORITHM instead of {nsec3}rsasha1 2022-10-03 13:28:26 +02:00
Michal Nowak
f822943473 coverage: use $DEFAULT_ALGORITHM 2022-10-03 13:28:25 +02:00
Mark Andrews
21cd56b42b Fix mkeys to work with DEFAULT_ALGORITHM properly 
Stop using a RSASHA1 fixed key in ns3's named.conf as the
trusted key and instead compute a broken digest from the
real digest to use in trusted-keys.

(cherry picked from commit be4cbe2b80)
 2022-10-03 13:28:25 +02:00
Mark Andrews
42727aab9a kasp: stop using RSASHA1 unless necessary for the test 
Moves tests from being RSASHA1 based to RSASHA256 based where possible
and split out the remaining RSASHA1 based tests so that they are not
run on OS's that don't support RSASHA1.

(cherry picked from commit db028684e5)
 2022-10-03 13:28:25 +02:00
Mark Andrews
4daa3d6dae keymgr2kasp: use FIPS compliant algorithms and key sizes 
migrate-nomatch-alglen: switched to RSASHA256 instead of RSASHA1
and the key size now changes from 2048 bits to 3072 bits instead
of 1024 bits to 2048 bits.

migrate-nomatch-algnum: switched to RSASHA256 instead of RSASHA1
as initial algorithm and adjusted mininum key size to 2048 bits.

rsasha256: adjusted minimum key size to 2048 bits.

(cherry picked from commit 048b015166)
 2022-10-03 13:28:25 +02:00
Mark Andrews
3d642f46f2 dnssec/signer/general: Replace RSASHA1 keys with RSASHA512 keys 
RSASHA1 is verify only in FIPS mode. Use RSASHA256 instead.

(cherry picked from commit 9c6de6d12d)
 2022-10-03 13:28:25 +02:00
Mark Andrews
c6abcefee1 Check if RSASHA1 is supported by the OS 
(cherry picked from commit 1690cb7bb4)
 2022-10-03 13:28:25 +02:00
Mark Andrews
77e0878444 autosign: use FIPS compatible algorithms and key sizes 
The nsec-only.example zone was not converted as we use it to
test nsec-only DNSSEC algorithms to nsec3 conversion failure.
The subtest is skipped in fips mode.

Update "checking revoked key with duplicate key ID" test
to use FIPS compatible algorithm.

(cherry picked from commit 99ad09975e)
 2022-10-03 13:28:25 +02:00
Mark Andrews
e6d1117891 rsabigexponent: convert the test from RSASHA1 to RSASHA256 
RSASHA1 is not supported on some platforms.

(cherry picked from commit 8c3c011860)
 2022-10-03 13:28:25 +02:00
Mark Andrews
fe4d8ca7c7 mkeys: use $() instead of back quotes 
(cherry picked from commit 0e45a2b02c)
 2022-10-03 13:19:35 +02:00
Mark Andrews
4950ab72e8 Upgrade uses of hmac-sha1 to DEFAULT_HMAC 
where the test is not hmac-sha1 specific

(cherry picked from commit c533e8bc5b)
 2022-10-03 13:19:35 +02:00
Mark Andrews
aafc3f8cf3 Add CHANGES not for [GL #3440] 
(cherry picked from commit be88c583bd)
 2022-10-03 13:19:35 +02:00
Mark Andrews
e8545ad255 zonechecks: use $DEFAULT_ALGORITHM 
(cherry picked from commit 459e6980e5)
 2022-10-03 13:19:35 +02:00
Mark Andrews
864a2b127a wildcard: use $DEFAULT_ALGORITHM 
(cherry picked from commit 3f65c9cf85)
 2022-10-03 13:19:34 +02:00
Mark Andrews
76a154d8b1 views: use $DEFAULT_ALGORITHM 
(cherry picked from commit 86b29606c3)
 2022-10-03 13:19:34 +02:00
Mark Andrews
16c6557aa2 verify: use $DEFAULT_ALGORITHM 
(cherry picked from commit 93f7c7cdcd)
 2022-10-03 13:19:34 +02:00
Mark Andrews
150ace9801 upforwd: use $DEFAULT_ALGORITHM 
(cherry picked from commit 5585909904)
 2022-10-03 13:19:34 +02:00
Mark Andrews
516694cd8c unknown: use $DEFAULT_ALGORITHM 
(cherry picked from commit 9970d4317d)
 2022-10-03 13:19:34 +02:00
Mark Andrews
b8645af516 synthfromdnssec: use $DEFAULT_ALGORITHM 
(cherry picked from commit 73fd49f8bb)
 2022-10-03 13:19:34 +02:00
Mark Andrews
a2d8660485 staticstub: use $DEFAULT_ALGORITHM 
(cherry picked from commit 32337b9dbf)
 2022-10-03 13:19:34 +02:00
Mark Andrews
204811ae41 smartsign: use $DEFAULT_ALGORITHM 
(cherry picked from commit 941b95edb0)
 2022-10-03 13:19:34 +02:00
Mark Andrews
49d8978cb4 rpz: use $DEFAULT_ALGORITHM 
(cherry picked from commit 1861c3e503)
 2022-10-03 13:19:34 +02:00
Mark Andrews
b26a89df34 rootkeysentinel: use $DEFAULT_ALGORITHM 
(cherry picked from commit b0e1d9b1b3)
 2022-10-03 13:19:34 +02:00
Mark Andrews
e78c158ba6 resolver: use $DEFAULT_ALGORITHM 
(cherry picked from commit 05ef8c81dd)
 2022-10-03 13:19:34 +02:00
Mark Andrews
52ce408f0d redirect: use $DEFAULT_ALGORITHM 
(cherry picked from commit e0e03602ba)
 2022-10-03 13:19:33 +02:00
Mark Andrews
ce8cef8a4b pending: use $DEFAULT_ALGORITHM 
(cherry picked from commit 6fd50b9fda)
 2022-10-03 13:19:33 +02:00
Mark Andrews
1b94de8d1f nsupdate: use $DEFAULT_ALGORITHM 
(cherry picked from commit c2d18567fc)
 2022-10-03 13:19:33 +02:00
Mark Andrews
fd8bd94212 mkeys: use $DEFAULT_ALGORITHM 
(cherry picked from commit 78fa082999)
 2022-10-03 13:19:33 +02:00
Mark Andrews
61cfb9a68e mirror: use $DEFAULT_ALGORITHM 
(cherry picked from commit ff95bafa39)
 2022-10-03 13:19:33 +02:00