Commit Graph

4808 Commits

Author SHA1 Message Date
Mark Andrews
e979efefac pkey is only used if USE_ENGINE is defined or USE_EVP is 1 2011-03-11 03:02:50 +00:00
Mark Andrews
63876ecca1 3068. [bug] Named failed to build with a OpenSSL without engine
support. [RT #23473]
2011-03-11 01:39:11 +00:00
Evan Hunt
9d5d261240 Reversing prior change, turns out not to be legal on all compilers. 2011-03-11 01:28:38 +00:00
Evan Hunt
db4562497e Silence a compiler warning by using #if comparison instead of if. No
CHANGES note because it's trivial. [RT #23587]
2011-03-11 01:22:55 +00:00
Automatic Updater
595b55f3db update copyright notice 2011-03-09 23:45:50 +00:00
Mark Andrews
13feff2b58 3065. [bug] RRSIG could have time stamps too far in the future.
[RT #23356]
2011-03-09 07:31:47 +00:00
Automatic Updater
9ff8a0fdd7 update copyright notice 2011-03-03 23:46:02 +00:00
Evan Hunt
58a91f8111 3053. [bug] Under a sustained high query load with a finite
max-cache-size, it was possible for cache memory
			to be exhausted and not recovered. [RT #23371]
2011-03-03 04:45:59 +00:00
Mark Andrews
b7147009da 3051. [bug] NS records obsure DS records at the bottom of the
zone if both are present. [RT #23035]
2011-03-02 04:34:22 +00:00
Francis Dupont
1b6423ff8c Use RRSIG original TTL in validated RRset TTL [RT #23332] 2011-02-28 14:44:00 +00:00
Automatic Updater
b82a8a428c update copyright notice 2011-02-28 01:18:47 +00:00
Evan Hunt
218d0d146a 3043. [test] Merged in the NetBSD ATF test framework (currently
version 0.12) for development of future unit tests.
                        Use configure --with-atf to build ATF internally
                        or configure --with-atf=prefix to use an external
                        copy.  [RT #23209]
2011-02-26 05:46:59 +00:00
Mark Andrews
21deff3df5 3040. [bug] Named failed to validate insecure zones where a node
with a CNAME existed between the trust anchor and the
                        top of the zone. [RT #23338]
2011-02-23 12:48:21 +00:00
Mark Andrews
810779bf8d 2036. [bug] Check built-in zone arguments to see if the zone
is re-usable or not. [RT #21914]
2011-02-22 04:33:49 +00:00
Automatic Updater
49e7dc2ad1 update copyright notice 2011-02-21 23:45:49 +00:00
Mark Andrews
f7eb0ef71f 3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
[RT #22521]
2011-02-21 07:12:50 +00:00
Mark Andrews
8ecd249a9e 3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521] 2011-02-21 07:04:54 +00:00
Mark Andrews
08bf17fabb 3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
[RT #22521]
2011-02-21 06:55:13 +00:00
Mark Andrews
9d7c7023e6 3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
[RT #22521]
2011-02-21 06:46:14 +00:00
Automatic Updater
81890674ce update copyright notice 2011-02-19 23:45:47 +00:00
Evan Hunt
678d543786 Fixed an error in change 3023, ensuring that journal file isn't
removed after IXFR.  No CHANGES note.
2011-02-19 01:26:48 +00:00
Evan Hunt
08c0b5f032 3025. [bug] Fixed a possible deadlock due to zone resigning.
[RT #22964]
2011-02-19 00:44:13 +00:00
Automatic Updater
4618f6f8e8 update copyright notice 2011-02-18 23:45:48 +00:00
Evan Hunt
7dd81b570d 3023. [bug] Named could be left in an inconsistent state when
receiving multiple AXFR response messages that were
			not all TSIG-signed. [RT #23254]
2011-02-18 21:34:41 +00:00
Automatic Updater
bf7327383b update copyright notice 2011-02-07 12:15:09 +00:00
Mark Andrews
7a2c642272 3018. [bug] Named failed to check for the "none;" acl when deciding
if a zone may need to be re-signed. RT #23120]
2011-02-07 00:18:39 +00:00
Mark Andrews
350f45bed8 9.6.3 2011-01-30 06:39:08 +00:00
Automatic Updater
92306578c0 update copyright notice 2011-01-27 23:45:47 +00:00
Mark Andrews
1be3bd3c8f 3009. [bug] clients-per-query code didn't work as expected with
particular query patterns. [RT #22972]
2011-01-27 02:29:47 +00:00
Mark Andrews
dbb2c2bb65 9.6.3rc1 2011-01-14 00:52:40 +00:00
Automatic Updater
166b841b92 update copyright notice 2011-01-13 04:48:23 +00:00
Mark Andrews
b41db83139 3007. [bug] Named failed to preserve the case of domain names in
rdata which is no compressable when writing master
                        files.  [RT #22863]
2011-01-13 02:14:46 +00:00
Mark Andrews
0219620a50 3007. [bug] Named failed to preserve the case of domain names in
rdata which is no compressable when writing master
                        files.  [RT #22863]
2011-01-13 02:06:13 +00:00
Mark Andrews
d8bf1487c7 2995. [bug] The Kerberos realm was not being correctly extracted
from the signer's identity. [RT #22770]
2010-12-22 02:37:55 +00:00
Automatic Updater
27ee4b8ca4 update copyright notice 2010-12-14 23:46:09 +00:00
Mark Andrews
8c5ba02091 2984. [bug] Don't run MX checks when the target of the MX record
is ".".  [RT #22645]
2010-12-14 00:48:23 +00:00
Mark Andrews
57628d8c51 dst_key_attach 2010-12-09 07:55:34 +00:00
Mark Andrews
f3786154f8 9.6.3b1 2010-12-09 07:29:04 +00:00
Mark Andrews
12fd7da162 2982. [bug] Reference count dst keys. dst_key_attach() can be used
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
2010-12-09 01:12:55 +00:00
Mark Andrews
4df431ecde 2976. [bug] named could die on exit after negotiating a GSS-TSIG
key.  [RT #3415]
2010-12-02 23:40:28 +00:00
Mark Andrews
bf0013e9a5 2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() aquired the
wrong lock which could lead to server deadlock.
                        [RT #22614]
2010-12-02 05:09:58 +00:00
Automatic Updater
fff1bf76bd update copyright notice 2010-11-17 23:45:46 +00:00
Evan Hunt
886b4dfbb5 2971. [bug] Fixed a bug that caused journal files not to be
compacted on Windows systems as a result of
			non-POSIX-compliant rename() semantics. [RT #22434]
2010-11-17 00:36:27 +00:00
Mark Andrews
7e3fa21d40 2970. [security] Adding a NO DATA negative cache entry failed to clear
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
2010-11-16 07:35:03 +00:00
Mark Andrews
c1e4f06f90 2968. [security] Named could fail to prove a data set was insecure
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]
2010-11-16 02:23:44 +00:00
Automatic Updater
c828f12404 update copyright notice 2010-09-24 08:30:28 +00:00
Mark Andrews
ff826c2844 2964. [bug] view->queryacl was being overloaded. Seperate the
usage into view->queryacl, view->cacheacl and
                        view->queryonacl. [RT #22114]
2010-09-24 08:09:08 +00:00
Automatic Updater
ce26def095 update copyright notice 2010-09-15 12:37:35 +00:00
Mark Andrews
6fd0466e76 2957. [bug] entropy_get() and entropy_getpseudo() failed to match
the API for RAND_bytes() and RAND_pseudo_bytes()
                        respectively. [RT #21962]
2010-09-15 03:26:09 +00:00
Mark Andrews
4616a212ab 9.6.3b1 2010-09-10 07:41:42 +00:00