Commit Graph
4929 Commits
Author SHA1 Message Date
Automatic Updater a471195d58 update copyright notice 2009-09-29 23:47:29 +00:00
Mark Andrews 7de6178969 2792. [port] win32: 32/64 bit cleanups. [RT #128244] 2009-09-29 05:06:55 +00:00
Automatic Updater ca31221f5b update copyright notice 2009-09-23 23:47:15 +00:00
Mark Andrews ee73600181 2684. [bug] dnssec-signzone should clean the old NSEC chain when
signing with NSEC3 and vica versa. [RT #20301]
2009-09-23 14:06:42 +00:00
Mark Andrews f2445757f1 2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
the NSEC3 parameters used to sign the zone change.
                        [RT #20246]
2009-09-23 07:08:01 +00:00
Mark Andrews 69f73c967e 2678. [func] Treat DS queries as if "minimal-response yes;"
was set. [RT #20258]
2009-09-14 23:19:36 +00:00
Mark Andrews dbd66db23f 2672. [bug] Don't enable searching in 'host' when doing reverse
lookups. [RT #20218]
2009-09-08 23:28:20 +00:00
Automatic Updater c33527c0d2 update copyright notice 2009-09-04 23:46:58 +00:00
Mark Andrews 42e5782189 ALG_FORMATSIZE -> 20 2009-09-04 02:38:33 +00:00
Mark Andrews 2df4d8d3dd isc_resourcevalue_t is unsigned. use %ISC_PRINT_QUADFORMATu 2009-09-04 01:31:29 +00:00
Mark Andrews 00d47e05ae 2663. [func] win32: allow named to run as a service using
"NT AUTHORITY\LocalService" as the account. [RT #19977]
2009-09-02 00:21:08 +00:00
Automatic Updater 1c210d73bd update copyright notice 2009-08-25 23:46:55 +00:00
Mark Andrews e08ab67c41 2656. [func] win32: add a "tools only" check box to the installer
which causes it to only install dig, host, nslookup,
                        nsupdate and relevent dlls.  [RT #19998]
2009-08-25 06:54:43 +00:00
Mark Andrews 4a8fa74137 2643. [bug] Stub zones interacted badly with NSEC3 support.
[RT #19777]
2009-08-05 02:11:48 +00:00
Mark Andrews fcf7d085b9 2640. [security] A specially crafted update packet will cause named
to exit. [RT #20000]
2009-07-28 15:51:31 +00:00
Mark Andrews 23cb85e6e6 2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
[RT #19959]
2009-07-21 03:33:05 +00:00
Automatic Updater 0da8837d0e update copyright notice 2009-07-11 23:47:17 +00:00
Mark Andrews a416993543 2920. [bug] Delay thawing the zone until the reload of it has
completed successfully.  [RT #19750]
2009-07-11 04:23:54 +00:00
Automatic Updater 76728b8bc6 regen 2009-07-11 01:55:23 +00:00
Automatic Updater bf06c5e25a update copyright notice 2009-06-26 23:47:12 +00:00
Tatuya JINMEI 神明達哉 81bae80881 cleanup: removed redundant initialization [RT #19866] 2009-06-26 08:03:47 +00:00
Mark Andrews 99525899e8 2617. [bug] ifconfig.sh failed to emit an error message when
run from the wrong location. [RT #19375]
2009-06-26 06:16:31 +00:00
Mark Andrews 6ecf117f14 2616. [bug] The nameserver argument to 'host' was being ignored.
[RT #19852]
2009-06-24 03:40:42 +00:00
Mark Andrews ee93a63b2f missing unsigned 2009-06-24 01:26:32 +00:00
Automatic Updater 1862010c83 update copyright notice 2009-06-23 23:47:11 +00:00
Mark Andrews 8ce2b50c32 2615. [port] win32: 'named -v' should automatically be executed
in the foreground. [RT #19844]
2009-06-23 07:51:00 +00:00
Automatic Updater 8fa3d35e1b regen 2009-06-23 01:53:58 +00:00
Mark Andrews f4dd23b4f4 remove 2009-06-23 00:12:50 +00:00
Automatic Updater 6e67205ba7 update copyright notice 2009-06-22 23:47:18 +00:00
Mark Andrews e6be77a26c 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-22 05:05:01 +00:00
Mark Andrews 0d5a20cb05 2580. [bug] UpdateRej statistics counter could be incremented twice
for one rejection. [RT #19476]
2009-06-22 03:29:20 +00:00
Tatuya JINMEI 神明達哉 dc653165b0 2613. [bug] Option argument validation was missing for
dnssec-dsfromkey. [RT #19828]
2009-06-17 23:41:58 +00:00
Automatic Updater 0aa00c0fbe regen 2009-06-10 01:54:15 +00:00
Evan Hunt 2d7fc2d5a6 added "known bugs" section to dnssec-signzone man page, edited
KNOWN-DEFECTS a bit
2009-06-09 01:47:19 +00:00
Automatic Updater 4b24acd9f1 update copyright notice 2009-06-08 23:47:00 +00:00
Evan Hunt 4d6469ffd8 Back out dnssec-signzone fix for 9.6.1 2009-06-08 22:23:07 +00:00
Automatic Updater b3def9bbf7 regen 2009-06-07 01:53:42 +00:00
Jeremy Reed d9cf22cc5a Please bump date on manpage. So we know we aren't using 2000 docs.
For -P: clean up sentence and clarify that the option skips the tests.

(This is for RT19653. No CHANGES entry added for this minor fix.)

This is v9_6, okayed in RT19653.
2009-06-06 01:46:54 +00:00
Mark Andrews b13b64028b missing unsigned 2009-06-05 06:56:40 +00:00
Mark Andrews e5e510dbab fix up merge 2009-06-04 03:11:31 +00:00
Automatic Updater 91c526913b regen 2009-06-04 03:07:24 +00:00
Automatic Updater c441671e8f update copyright notice 2009-06-04 02:56:14 +00:00
Mark Andrews 5fa0c17a78 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-04 02:41:54 +00:00
cvs2git a75a29c672 This commit was manufactured by cvs2git to create branch 'v9_6'. 2009-06-04 02:13:38 +00:00
Mark Andrews 2534a73a59 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-04 02:13:37 +00:00
Automatic Updater e6ada020f5 update copyright notice 2009-05-29 23:47:49 +00:00
Tatuya JINMEI 神明達哉 40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
2009-05-29 22:22:37 +00:00
Mark Andrews 2e8bd7f1b7 2603. [port] win32: handle .exe extension of named-checkzone and
named-comilezone argv[0] names under windows.
                        [RT #19767]
2009-05-29 02:17:43 +00:00
Mark Andrews fc7ecc628d 2603. [port] win32: handle .exe extension of named-checkzone and
named-comilezone argv[0] names under windows.
                        [RT #19767]
2009-05-29 02:14:31 +00:00
Automatic Updater a9a054302d regen 2009-05-22 01:14:49 +00:00