Commit Graph
597 Commits
Author SHA1 Message Date
Automatic Updater d78521d0f1 update copyright notice 2011-08-18 23:45:29 +00:00
Mark Andrews d7ffccecc0 3143. [bug] Silence clang compiler warnings. [RT #25174] 2011-08-18 05:04:37 +00:00
Evan Hunt 015872cba9 3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664] 2011-06-02 20:23:49 +00:00
Evan Hunt 932d1ded69 3110. [bug] dnssec-signzone: Wrong error message could appear
when attempting to sign with no KSK. [RT #24369]
2011-05-07 00:24:13 +00:00
Evan Hunt 77e391dcf0 3107. [bug] dnssec-signzone: Report the correct number of ZSKs
when using -x. [RT #20852]
2011-05-06 21:07:23 +00:00
Evan Hunt 2ca671d4d2 Corrected a mistake that was exposed by change #3085 in 9.9 (though it
has no deleterious effect in 9.8 and earlier).
2011-03-22 03:30:33 +00:00
Automatic Updater 1e98c82a59 regen v9_7 2011-03-22 02:10:56 +00:00
Automatic Updater 8850c3eb35 update copyright notice 2011-03-21 23:46:29 +00:00
Evan Hunt 585530bce3 3086. [bug] Running dnssec-settime -f on an old-style key will
now force an update to the new key format even if no
			other change has been specified, using "-P now -A now"
			as default values.  [RT #22474]
2011-03-21 15:55:48 +00:00
Automatic Updater 88a65863a5 update copyright notice 2011-03-12 04:58:33 +00:00
Mark Andrews 5b8794da73 3070. [bug] dnssec-signzone potential NULL pointer dereference.
[RT #20256]
2011-03-11 12:42:47 +00:00
Mark Andrews 526b51ec93 3069. [cleanup] Silence warnings messages from clang static analysis.
[RT #20256]
2011-03-11 07:12:03 +00:00
Automatic Updater 0f1c24fec6 update copyright notice 2011-02-28 01:19:28 +00:00
Mark Andrews 4e3697a06e 3041. [bug] dnssec-signzone failed to generate new signatures on
ttl changes. [RT #23330]
2011-02-24 03:14:37 +00:00
Automatic Updater eb19518256 regen v9_7 2011-02-04 02:10:43 +00:00
Automatic Updater 8ce32752e6 update copyright notice 2011-02-03 12:17:23 +00:00
Mark Andrews f2af5e6496 3017. [doc] dnssec-keyfromlabel -I was not properly documented.
[RT #22887]
2011-02-03 12:03:09 +00:00
Evan Hunt 92f198ef9d When prepublication interval is set to 0 (-i 0), don't check 2010-12-19 07:27:23 +00:00
Automatic Updater 0a583f82eb regen v9_7 2010-08-17 00:08:26 +00:00
Automatic Updater 5d98af56f2 update copyright notice 2010-08-16 23:46:31 +00:00
Mark Andrews 30579c29be 2943. [func] Add support to load new keys into managed zones
without signing immediately with "rndc loadkeys".
                        Add support to link keys with "dnssec-keygen -S"
                        and "dnssec-settime -S".  [RT #21351]
2010-08-16 22:27:18 +00:00
Automatic Updater 4a885f26a0 update copyright notice 2010-06-03 23:49:23 +00:00
Mark Andrews b42093b971 2911. [bug] dnssec-signzone didn't handle out of zone records well.
[RT #21367]
2010-06-03 03:32:25 +00:00
Automatic Updater 7fad6b61d2 regen v9_7 2010-05-18 04:04:36 +00:00
Automatic Updater 435add4fdd update copyright notice 2010-05-06 23:49:37 +00:00
Mark Andrews 1c21efedfe 2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
consistent. [RT #21078]
2010-05-06 05:32:56 +00:00
Automatic Updater 7b2366db70 regen v9_7 2010-03-10 02:41:46 +00:00
Mark Andrews 261995c57e 2861. [doc] dnssec-settime man pages didn't correctly document the
inactivation time. [RT #21039]

2860.   [bug]           named-checkconf's usage was out of date. [RT #21039]
2010-03-09 03:40:01 +00:00
Automatic Updater 6a2827695a regen 2010-02-04 02:08:20 +00:00
Automatic Updater 91bb55c45d update copyright notice 2010-02-03 23:48:29 +00:00
Automatic Updater 85166e0140 regen 2010-02-03 02:08:11 +00:00
Evan Hunt 46b40010ae 2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921] 2010-02-03 01:02:17 +00:00
Automatic Updater 451cd3395a regen 2010-01-20 02:08:51 +00:00
Automatic Updater 3c7ee580d8 update copyright notice 2010-01-19 23:48:13 +00:00
Evan Hunt 5cd5eceba0 2842. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
creating key files if there is a chance that the new
			key ID will collide with an existing one after
			either of the keys has been revoked.  (To override
			this in the case of dnssec-keyfromlabel, use the -y
			option.  dnssec-keygen will simply create a
			different, noncolliding key, so an override is
			not necessary.) [RT #20838]
2010-01-19 20:25:49 +00:00
Evan Hunt 96c51eadc9 Commit to v9_7 some changes that had been left out:
2838.	[bug]		A KSK revoked by named could not be deleted.
			[RT #20881]

2837.	[port]		Prevent Linux spurious warnings about fwrite().
			[RT #20812]
2010-01-13 19:31:53 +00:00
Automatic Updater ed0fd28aff update copyright notice 2010-01-07 23:48:16 +00:00
Evan Hunt b916fd3d7f 2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
[RT #20851]
2010-01-07 19:16:30 +00:00
Automatic Updater f9d193397a update copyright notice 2010-01-06 23:48:07 +00:00
Evan Hunt 5337c00cbb fix spacing 2010-01-06 00:53:56 +00:00
Automatic Updater 0d12fdeb7c update copyright notice 2010-01-05 23:47:58 +00:00
Evan Hunt bd41f944d4 missing newline in dnssec-signzone usage 2010-01-05 15:32:15 +00:00
Automatic Updater 5470afd66b update copyright notice 2009-12-18 23:48:18 +00:00
Evan Hunt d1ebdb2de9 2809. [cleanup] Restored accidentally-deleted text in usage output
in dnssec-settime and dnssec-revoke [RT #20739]
2009-12-18 07:48:37 +00:00
Evan Hunt 12178c8652 2805. [bug] Fixed namespace problems encountered when building
external programs using non-exported BIND9 libraries
			(i.e., built without --enable-exportlib). [RT #20679]
2009-12-05 23:31:41 +00:00
Automatic Updater 4b6dc226f7 update copyright notice 2009-12-04 22:06:37 +00:00
Mark Andrews 3d17a3ba61 2801. [func] Detect and report records that are different according
to DNSSEC but are sematically equal according to plain
                        DNS.  Apply plain DNS comparisons rather than DNSSEC
                        comparisons when processing UPDATE requests.
                        dnssec-signzone now removes such semantically duplicate
                        records prior to signing the RRset.

                        named-checkzone -r {ignore|warn|fail} (default warn)
                        named-compilezone -r {ignore|warn|fail} (default warn)

                        named.conf: check-dup-records {ignore|warn|fail};
2009-12-04 21:09:34 +00:00
Automatic Updater 089c63b69c regen 2009-12-04 01:13:45 +00:00
Evan Hunt 8e4f3f1cbc 2799. [cleanup] Changed the "secure-to-insecure" option to
"dnssec-secure-to-insecure", and "dnskey-ksk-only"
			to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
2009-12-03 23:18:17 +00:00
Mark Andrews 4bf4beede2 silence compiler warnings 2009-11-25 23:00:32 +00:00