Commit Graph

3201 Commits

Author SHA1 Message Date
Tinderbox User
8ac81d900f update copyright notice / whitespace 2018-02-07 23:50:55 +00:00
Mark Andrews
c02650fe38 4885. [security] update-policy rules that otherwise ignore the name
field now require that it be set to "." to ensure
                        that any type list present is properly interpreted.
                        [RT #47126]

(cherry picked from commit ec771bbdc8)
2018-02-07 13:50:31 +11:00
Tinderbox User
d35a3eab4a update copyright notice / whitespace 2018-01-22 23:48:04 +00:00
Mukund Sivaraman
96456c0834 Don't permit loading meta RR types such as TKEY from master files (#47009)
(cherry picked from commit 8a4ce20172)
(cherry picked from commit c8eb726046)
(cherry picked from commit 6fb3db01ac)
2018-01-22 14:39:57 +05:30
Tinderbox User
b5c5aed2e1 update copyright notice / whitespace 2018-01-13 23:48:59 +00:00
Mark Andrews
969bc5e14b ret was not being set to 1 on dig error. [RT #46990]
(cherry picked from commit 69c4c987f6)
2018-01-13 13:16:58 +11:00
Tinderbox User
0df4e44735 update copyright notice / whitespace 2018-01-04 23:46:47 +00:00
Mark Andrews
c975f0cc5c 4856. [bug] 'rndc zonestatus' reported the wrong underlying type
for a inline slave zone. [RT #46875]
2018-01-04 10:53:11 +11:00
Tinderbox User
808bb5a170 update copyright notice / whitespace 2018-01-03 23:46:39 +00:00
Mark Andrews
602aead571 wait for status: line to be readable, before checking status
(cherry picked from commit 4674127443)
2018-01-03 13:57:05 +11:00
Mark Andrews
c92193d7ff test for key != NULL on error path
(cherry picked from commit 9bad78cbc2)
2017-12-13 15:13:25 +11:00
Mark Andrews
265ba7d08b 4846. [test] Adjust timing values in runtime system test. Address
named.pid removal races in runtime system test.
                        [RT #46800]

(cherry picked from commit c67180f09b)
(cherry picked from commit 0f14b04132)
2017-12-13 10:38:23 +11:00
Mark Andrews
5baf99be21 increment test number
(cherry picked from commit e5c2cfdbf9)
2017-12-08 14:51:32 +11:00
Tinderbox User
4724ccdf11 update copyright notice / whitespace 2017-12-06 23:46:58 +00:00
Mark Andrews
51f13bcd2f 4840. [test] Add tests to cover fallback to using ZSK on inactive
KSK. [RT #46787]

(cherry picked from commit 32d09cd7e0)
(cherry picked from commit 0d6328ce5f)
2017-12-06 20:50:38 +11:00
Tinderbox User
a8cb98cbb6 update copyright notice / whitespace 2017-12-05 23:47:08 +00:00
Tinderbox User
d6ff7497bb Merge branch 'v9_10' of /proj/git/prod/bind9 into v9_10 2017-12-05 23:46:41 +00:00
Curtis Blackburn
ab78a92bd9 clarify "stage 1" and "stage 2" in autosign test 2017-12-05 10:04:36 -08:00
Mark Andrews
452037ae74 set the DNSKEY deletion time to now+5 once we got all the zones into their initial state
(cherry picked from commit ecafa2ae50)
(cherry picked from commit 15057131d5)
2017-12-05 21:43:07 +11:00
Mark Andrews
7d0fdbae22 use 9.11 and earlier syntax for dnssec-keygen
(cherry picked from commit 7f31784c52)
2017-12-05 20:44:01 +11:00
Mark Andrews
0ebc93648f 4839. [bug] zone.c:zone_sign was not properly determining
if there were active KSK and ZSK keys for
                        a algorithm when update-check-ksk is true
                        (default) leaving records unsigned with one or
                        more DNSKEY algorithms. [RT #46774]

(cherry picked from commit 00f5ea91cf)
2017-12-05 16:12:00 +11:00
Tinderbox User
cc6a9d7ec5 update copyright notice / whitespace 2017-12-04 23:48:29 +00:00
Evan Hunt
78fb0699c1 [v9_10] fix test descriptions 2017-12-04 15:48:03 -08:00
Mark Andrews
376a8e1fbc 4838. [bug] zone.c:add_sigs was not properly determining
if there were active KSK and ZSK keys for
                        a algorithm when update-check-ksk is true
                        (default) leaving records unsigned with one or
                        more DNSKEY algorithms. [RT #46754]

(cherry picked from commit 6fa2a0691e)
(cherry picked from commit 677f507de7)
2017-12-05 09:39:36 +11:00
Tinderbox User
3c8235a46a update copyright notice / whitespace 2017-12-03 23:46:48 +00:00
Mark Andrews
5623f65cc4 4837. [bug] dns_update_signatures{inc} (add_sigs) was not
properly determining if there were active KSK and
                        ZSK keys for a algorithm when update-check-ksk is
                        true (default) leaving records unsigned. [RT #46743]

(cherry picked from commit 196e01da5f)
(cherry picked from commit bf459d24a1)
2017-12-04 10:09:29 +11:00
Tinderbox User
3beaa67016 update copyright notice / whitespace 2017-11-30 23:48:18 +00:00
Evan Hunt
9dfff4e378 [v9_10] fix "allow-transfer" inheritance and clean up ACL configuration
4836.	[bug]		Zones created using "rndc addzone" could
			temporarily fail to inherit an "allow-transfer"
			ACL that had been configured in the options
			statement. [RT #46603]

(cherry picked from commit e197a2bd15)
(cherry picked from commit f53e0bda46)
2017-11-30 13:13:18 -08:00
Tinderbox User
796d7d08c0 update copyright notice / whitespace 2017-11-27 23:48:26 +00:00
Michał Kępień
8d0a756394 [v9_10] Stabilize nsupdate system test [RT #46673]
(cherry picked from commit 00ff44c7c2)
2017-11-27 10:14:02 +01:00
Tinderbox User
eb94e05127 update copyright notice / whitespace 2017-11-21 23:46:55 +00:00
Michał Kępień
1fd4803e84 [v9_10] Refactor reclimit system test
4823.	[test]		Refactor reclimit system test to improve its
			reliability and speed. [RT #46632]

(cherry picked from commit 6035d557c4)
2017-11-21 10:33:53 +01:00
Tinderbox User
11f56a1458 update copyright notice / whitespace 2017-11-16 23:46:59 +00:00
Michał Kępień
169ce30bf7 [v9_10] Stabilize logfileconfig system test
4818.	[test]		The logfileconfig system test could intermittently
			report false negatives on some platforms. [RT #46615]

(cherry picked from commit c7e57ce1b0)
2017-11-16 08:16:15 +01:00
Mark Andrews
676047afda set SAMPLEUPDATE under windows; test if SAMPLEUPDATE exists and only run tests if it does
(cherry picked from commit 9eb5aa40aa)
2017-11-11 09:26:07 +11:00
Tinderbox User
64ccc050d7 update copyright notice / whitespace 2017-11-08 23:46:59 +00:00
Michał Kępień
074e2ab876 [v9_10] Do not NOTIFY back the master view from slave views in notify system test
This prevents a Linux kernel bug discussed in RT #32355 from being
triggered and thus makes "checking notify to multiple views using tsig"
stable.

(cherry picked from commit 27bf48327c)
2017-11-08 09:22:17 +01:00
Mark Andrews
78644f5577 4810. [test] The chain system test failed if the IPv6 interfaces
were not configured. [RT #46508]

(cherry picked from commit c652213857)
2017-11-08 10:18:41 +11:00
Mark Andrews
9f56e47984 4804. [port] win32: access() does not work on directories as
required by POSIX.  Supply a alternative in
                        isc_file_isdirwritable. [RT #46394]
2017-11-01 09:43:11 +11:00
Evan Hunt
c1c4ad6d1f [v9_10] copyrights 2017-10-29 16:43:58 -07:00
Mark Andrews
4bffe41773 number tests 2017-10-30 08:39:14 +11:00
Mark Andrews
4f4552b9fd Add system tests and remove redundent logging from:
4801.   [func]          'dnssec-lookaside auto;' and 'dnssec-lookaside .
                        trust-anchor dlv.isc.org;' now elicit warnings rather
                        than being fatal configuration errors. [RT #46410]

(cherry picked from commit f5e1b555c5)
2017-10-30 08:17:49 +11:00
Tinderbox User
a6a4520076 update copyright notice / whitespace 2017-10-26 23:47:43 +00:00
Evan Hunt
436ba0a39d [v9_10] check file and tree headers when loading map files
4792.	[bug]		Fix map file header correctness check. [RT #38418]

(cherry picked from commit 5b69d3da83)
2017-10-25 21:37:37 -07:00
Evan Hunt
2586526a0a [v9_10] log when update-policy local gets a key match from a remote host
4788.	[cleanup]	When using "update-policy local", log a warning
			when an update matching the session key is received
			from a remote host. [RT #46213]

- this completes change #4762.
2017-10-25 01:08:07 -07:00
Mark Andrews
68a4bb4f09 read dig.out.ns3.test$n rather than dig.out.ns2.test$n
(cherry picked from commit 80739779fc)
2017-10-25 15:03:24 +11:00
Tinderbox User
cab57c79b4 update copyright notice / whitespace 2017-10-24 23:50:30 +00:00
Mark Andrews
bd646f9229 4783. [test] dnssec: 'check that NOTIFY is sent at the end of
NSEC3 chain generation failed' required more time
                        on some machines for the IXFR to complete. [RT #46388]

(cherry picked from commit 969d923536)
2017-10-25 09:22:11 +11:00
Mark Andrews
5ca903ae3d remove redundent reconfig; number tests 2017-10-24 14:49:14 +11:00
Evan Hunt
13435af49a [v9_10] omit NS from authority section if it was in answer
4780.	[bug]		When answering ANY queries, don't include the NS
			RRset in the authority section if it was already
			in the answer section. [RT #44543]

(cherry picked from commit b7b76d6b85)
2017-10-23 19:35:45 -07:00