Commit Graph

3081 Commits

Author SHA1 Message Date
Witold Krecicki
e846f127d6 4362. [func] Changed rndc reconfig behaviour so that newly added
zones are loaded asynchronously and the loading does
			not block the server. [RT #41934]
2016-05-05 21:41:12 +02:00
Mark Andrews
5ac427050f 4360. [bug] Silence spurious 'bad key type' message when there is
a existing TSIG key. [RT #42195]
2016-05-05 22:27:08 +10:00
Mark Andrews
594d15df25 4359. [bug] Inherited 'also-notify' lists were not being checked
by named-checkconf. [RT #42174]
2016-05-05 21:59:09 +10:00
Witold Krecicki
dc2a4887c4 4357. [func] Add the python RNDC module. [RT #42093] 2016-05-05 11:33:47 +02:00
Mark Andrews
08e36aa5a5 4356. [func] Add the ability to specify whether to wait for
nameserver addresses to be looked up or not to
                        rpz with a new modifying directive 'nsip-wait-recurse'.                         [RT #35009]
2016-05-05 16:29:05 +10:00
Tinderbox User
99bbb58ce7 update copyright notice / whitespace 2016-05-04 23:45:36 +00:00
Evan Hunt
699f790c49 [master] update pkcs11 headers
4353.	[cleanup]	Update PKCS#11 header files. [RT #42175]
2016-05-04 15:55:03 -07:00
Evan Hunt
66074f152f [master] log message when using ISC DLV
4352.	[cleanup]	The ISC DNSSEC Lookaside Validation (DLV) service
			is scheduled to be disabled in 2017.  A warning is
			now logged when named is configured to use it,
			either explicitly or via "dnssec-lookaside auto;"
			[RT #42207]
2016-05-04 14:37:25 -07:00
Tinderbox User
9e6e0881fa update copyright notice / whitespace 2016-04-30 23:45:50 +00:00
Mark Andrews
cbad856135 support truncated hashes longer that 7
(cherry picked from commit 5b291f619e312689e25de8fd5662b0b9d4a62679)
2016-05-01 07:48:40 +10:00
Evan Hunt
a27dc50157 [master] copyrights 2016-04-28 22:30:53 -07:00
Evan Hunt
f6096b958c [master] dnssec-keymgr
4349.   [contrib]       kasp2policy: A python script to create a DNSSEC
                        policy file from an OpenDNSSEC KASP XML file.

4348.	[func]		dnssec-keymgr: A new python-based DNSSEC key
			management utility, which reads a policy definition
			file and can create or update DNSSEC keys as needed
			to ensure that a zone's keys match policy, roll over
			correctly on schedule, etc.  Thanks to Sebastian
			Castro for assistance in development. [RT #39211]
2016-04-28 00:16:01 -07:00
Evan Hunt
5ecfee97ba [master] copyrights 2016-04-14 19:12:13 -07:00
Evan Hunt
3cd204c4a4 [master] fixed revoked key regression
4436.	[bug]		Fixed a regression introduced in change #4337 which
			caused signed domains with revoked KSKs to fail
			validation. [RT #42147]
2016-04-14 18:52:52 -07:00
Mark Andrews
7f79448198 remove unnecessary return 2016-04-08 04:24:47 +10:00
Tinderbox User
c19f42a378 update copyright notice / whitespace 2016-03-24 23:45:21 +00:00
Mark Andrews
6214c3c93a 4341. [bug] 'rndc flushtree' could fail to clean the tree if there
wasn't a node at the specified name. [RT #41846]
2016-03-24 11:31:25 +11:00
Tinderbox User
a63461cc4b update copyright notice / whitespace 2016-03-23 23:45:22 +00:00
Evan Hunt
7fa4c18451 [master] ECS family 0 handling was still broken 2016-03-23 15:00:30 -07:00
Evan Hunt
ddf3342cca [master] test pipelining with mdig
4339.	[test]		Use "mdig" to test pipelined queries. [RT #41929]
2016-03-22 17:26:38 -07:00
Evan Hunt
132a571179 [master] fix mkeys TTL 0 issue
4337.	[bug]		The previous change exposed a latent flaw in
			key refresh queries for managed-keys when
			a cached DNSKEY had TTL 0. [RT #41986]
2016-03-22 12:12:32 -07:00
Tinderbox User
27def92931 update copyright notice / whitespace 2016-03-21 23:45:22 +00:00
Mark Andrews
0993cd5f22 4336. [bug] Don't emit records with zero ttl unless the records
were learnt with a zero ttl. [RT #41687]
2016-03-21 13:22:21 +11:00
Tinderbox User
b1aac28027 update copyright notice / whitespace 2016-03-16 23:45:17 +00:00
Jeremy C. Reed
e12c78ebf6 add comments about why the configuration is bad
I didn't get review. This is trivial.
2016-03-16 15:42:56 -04:00
Jeremy C. Reed
81780ffd74 use -r $RANDFILE for test using keygen
stops hang
this is for ticket #41898
2016-03-11 09:27:15 -05:00
Tinderbox User
4a7004f3ce update copyright notice / whitespace 2016-03-10 23:45:16 +00:00
Mark Andrews
7c52595464 4331. [func] When loading managed signed zones detect if the
RRSIG's inception time is in the future and regenerate
                        the RRSIG immediately. [RT #41808]
2016-03-10 17:01:08 +11:00
Mark Andrews
93ca5ee4c4 update copyrights 2016-03-08 16:21:19 +11:00
Mark Andrews
d6357f09aa 4329. [func] Warn about a common misconfiguration when forwarding
RFC 1918 zones. [RT #41441]
2016-03-08 10:11:23 +11:00
Tinderbox User
220ba6da87 update copyright notice / whitespace 2016-03-04 23:45:23 +00:00
Mark Andrews
8398f00156 4326. [protocol] Add support for AVC. [RT #41819 2016-03-04 18:11:41 +11:00
Evan Hunt
023ba1e6ef [master] add OS details to rndc status
4325.	[func]		Add a line to "rndc status" indicating the
			hostname and operating system details. [RT #41610]
2016-03-03 22:02:52 -08:00
Tinderbox User
f254ab049e update copyright notice / whitespace 2016-03-02 23:45:17 +00:00
Mark Andrews
ce7216c40a 4223. [bug] Improve HTTP header processing on statschannel.
[RT #41674]
2016-03-02 11:04:59 +11:00
Mark Andrews
7f514657e2 update copyrights 2016-02-25 10:55:40 +11:00
Mark Andrews
f9da4a8e54 4321. [bug] Zones using mapped files containing out-of-zone data
could return SERVFAIL instead of the expected NODATA
                        or NXDOMAIN results. [RT #41596]
2016-02-24 11:13:24 +11:00
Tinderbox User
62735fcde3 update copyright notice / whitespace 2016-02-23 23:45:35 +00:00
Mukund Sivaraman
293a9e9978 Fix allocation for "none" ACL that caused assertion failure (#41745) 2016-02-23 12:51:34 +05:30
Tinderbox User
27424c351d update copyright notice / whitespace 2016-02-20 23:45:16 +00:00
Mark Andrews
c968a257c1 fix subnet prefix 2016-02-20 12:01:30 +11:00
Tinderbox User
53ba272721 update copyright notice / whitespace 2016-02-18 23:45:32 +00:00
Mark Andrews
37176663e0 don't used class in grep e.g. [:space:] 2016-02-17 13:17:40 +11:00
Evan Hunt
93c211afc9 [master] fixed a regression in dyndb due to change #4277 2016-02-12 00:22:45 -08:00
Mark Andrews
b91d11bfcc copyrights / whitespace 2016-02-11 10:44:21 +11:00
Mukund Sivaraman
79a55d4f4d Add option to tools to print RRs in unknown presentation format (#41595) 2016-02-09 15:39:02 +05:30
Mukund Sivaraman
0c29904b27 Check that configured view class isn't a meta class (#41572) 2016-02-08 13:58:01 +05:30
Mark Andrews
08913705e9 specify what to copy
(cherry picked from commit 88624c9c32)
2016-02-05 13:54:47 +11:00
Tinderbox User
d83a9a980a update copyright notice / whitespace 2016-02-02 23:45:23 +00:00
Mukund Sivaraman
f9b167290a Remove 45 second sleeps from notify system test (#41248)
No CHANGES entry required.
2016-02-02 09:46:57 +05:30