Evan Hunt
efb0d1e83d
documentation changes setting up 9.15 development branch
2019-02-21 16:42:17 -08:00
Evan Hunt
d7b82380ff
Merge branch 'fix-changes' into security-master
2019-02-20 19:44:40 -08:00
Evan Hunt
15b18d8a38
remove "released" line (retained in v9_14) so check-changes won't complain
2019-02-20 19:44:40 -08:00
Evan Hunt
8514320271
Merge branch 'security-dlz-axfr-deny-broken' into security-master
...
denied axfr requests were not effective for writable DLZ zones
See merge request isc-private/bind9!57
2019-02-20 19:44:39 -08:00
Mark Andrews
821f917db8
add CHANGES and release notes entries
2019-02-20 19:44:38 -08:00
Mark Andrews
a9307de85e
denied axfr requests were not effective for writable DLZ zones
2019-02-20 19:44:38 -08:00
Evan Hunt
5e7f1a8d67
Merge 'keytag-memleak' into security-master
2019-02-20 19:44:37 -08:00
Evan Hunt
747035dcc5
fix test error
2019-02-20 19:44:37 -08:00
Mark Andrews
9ae991751c
add CHANGES and release note entries
2019-02-20 19:44:37 -08:00
Mark Andrews
fe4810f1f8
check that multiple KEY-TAG trust-anchor-telemetry options don't leak memory
2019-02-20 19:44:36 -08:00
Mark Andrews
35025b6e88
silently ignore additional keytag options
2019-02-20 19:44:36 -08:00
Evan Hunt
6f1ac89c1a
Merge 'managed-key-assert' into security-master
2019-02-20 19:44:35 -08:00
Evan Hunt
41a851861e
Merge 'managed-key-assert' into security-master
2019-02-20 19:44:34 -08:00
Evan Hunt
3022633d79
use algorithm 255 for both unsupported keys
2019-02-20 19:44:34 -08:00
Matthijs Mekking
e7c12bffbd
CHANGES, notes
2019-02-20 19:44:33 -08:00
Matthijs Mekking
f09352d20a
Update keyfetch_done compute_tag check
...
If in keyfetch_done the compute_tag fails (because for example the
algorithm is not supported), don't crash, but instead ignore the
key.
2019-02-20 19:44:33 -08:00
Matthijs Mekking
38c2bdba0a
Add tests for mkeys with unsupported algorithm
...
These tests check if a key with an unsupported algorithm in
managed-keys is ignored and when seeing an algorithm rollover to
an unsupported algorithm, the new key will be ignored too.
2019-02-20 19:44:33 -08:00
Matthijs Mekking
235a64a5a4
Don't free key in compute_tag in case of failure
...
If `dns_dnssec_keyfromrdata` failed we don't need to call
`dst_key_free` because no `dstkey` was created. Doing so
nevertheless will result in an assertion failure.
This can happen if the key uses an unsupported algorithm.
2019-02-20 19:44:32 -08:00
Evan Hunt
91550e21cd
Merge branch 'placeholder' into 'master'
...
placeholder
See merge request isc-projects/bind9!1551
2019-02-20 21:41:58 -05:00
Evan Hunt
5893689592
placeholder
2019-02-20 18:41:26 -08:00
Evan Hunt
3d1bb8038e
Merge branch 'start-915' into 'master'
...
9.15.0-dev
See merge request isc-projects/bind9!1550
2019-02-20 21:23:51 -05:00
Evan Hunt
040c23e3d7
9.15.0-dev
2019-02-20 18:22:54 -08:00
Evan Hunt
f4ade46f4a
Merge branch '428-remove-contrib-sdb' into 'master'
...
remove contrib/sdb
Closes #428
See merge request isc-projects/bind9!1501
2019-02-19 20:47:55 -05:00
Evan Hunt
bcc2fd679b
CHANGES
2019-02-19 17:19:40 -08:00
Evan Hunt
c79e2f12fe
remove contrib/sdb
...
removed the SDB databases in contrib/sdb as they hadn't been
maintained in some time, and were no longer able to link to named
without modification. also:
- cleaned up contrib/README, which still referred to contrib
subdirectores that were removed already, and linked to an obsolete URL.
- removed references to sdb in doc/misc/roadmap and doc/misc/sdb.
2019-02-19 17:19:40 -08:00
Mark Andrews
d27f41cb7f
Merge branch '884-patches-to-review' into 'master'
...
Correct errno to result translation
Closes #884
See merge request isc-projects/bind9!1519
2019-02-19 18:11:42 -05:00
Mark Andrews
a0c0d76029
add CHANGES
2019-02-20 09:44:56 +11:00
Mark Andrews
218ce34e7d
correct errno to result translation
2019-02-20 09:43:16 +11:00
Mark Andrews
fa79f4b899
Merge branch '836-building-fails-in-build-subdirectory-when-dnstap-is-enabled' into 'master'
...
Resolve "Building fails in build subdirectory when dnstap is enabled"
Closes #836
See merge request isc-projects/bind9!1510
2019-02-19 17:40:59 -05:00
Mark Andrews
3a21fdf884
add CHANGES
2019-02-20 09:29:07 +11:00
Mark Andrews
c0d4ff5796
teach proto_c to look in the source directory for out of tree builds
2019-02-20 09:27:00 +11:00
Mark Andrews
d76e172480
Merge branch '877-clang-scan-build-redundant-assignments-detected' into 'master'
...
Remove redundant assignments
Closes #877
See merge request isc-projects/bind9!1513
2019-02-18 18:01:56 -05:00
Mark Andrews
f475dc75b1
remove redundant assignment
2019-02-18 17:40:56 -05:00
Mark Andrews
7b60f6832e
silence clang
2019-02-18 17:40:56 -05:00
Mark Andrews
9a9dc4072f
declarations before assertions
2019-02-18 17:40:56 -05:00
Mark Andrews
70fab477b1
don't overwrite result
2019-02-18 17:40:56 -05:00
Mark Andrews
63c03cdb2d
remove seen_dname
2019-02-18 17:40:56 -05:00
Mark Andrews
a92d281e10
Merge branch '877-clang-scan-build-redundant-assignments-detected-3' into 'master'
...
Uninitialised reads in dns_tsig_sign after change 5148.
See merge request isc-projects/bind9!1528
2019-02-18 17:39:38 -05:00
Mark Andrews
4938f97c97
record when querytsig is valid
2019-02-18 17:39:08 -05:00
Mark Andrews
0de6a3835f
Merge branch '877-clang-scan-build-redundant-assignments-detected-2' into 'master'
...
decode_NegTokenInit failed to cleanup allocated memory on error.
See merge request isc-projects/bind9!1527
2019-02-18 17:34:50 -05:00
Mark Andrews
7114d16098
fix memory leak
2019-02-19 09:17:03 +11:00
Mark Andrews
d2ca9e79e3
Merge branch '877-clang-scan-build-redundant-assignments-detected-2' into 'master'
...
Cleanup no longer necessary assignments post refactoring in socket.c
See merge request isc-projects/bind9!1526
2019-02-18 16:14:56 -05:00
Mark Andrews
f87b88e520
remove dead assignments
2019-02-19 08:12:09 +11:00
Mark Andrews
26c0eaf6e0
Merge branch '877-clang-scan-build-redundant-assignments-detected-2' into 'master'
...
Add missing asserts to socket_test.c and dnstest.c
See merge request isc-projects/bind9!1523
2019-02-18 15:57:46 -05:00
Mark Andrews
76a1c1531a
assert result is ISC_R_SUCCESS
2019-02-19 07:57:14 +11:00
Matthijs Mekking
ee6a378fde
Merge branch '513-matthijs-update-xfr-logs' into 'master'
...
Update to !1427 : Make primary's transfer log more detailed
See merge request isc-projects/bind9!1511
2019-02-18 06:33:15 -05:00
Matthijs Mekking
24507abee3
Update to !1427 : Make primary's transfer log more detailed
2019-02-18 06:33:15 -05:00
Mark Andrews
7125d1484e
Merge branch 'u/fanf2/dnssec-keymgr-man' into 'master'
...
Improve dnssec-keymgr manual
See merge request isc-projects/bind9!1518
2019-02-17 23:43:26 -05:00
Tony Finch
7ee56e2abd
Improve dnssec-keymgr manual
...
Illustrate the syntax for the policy options, with semicolons.
Explicitly mention the "default" policy.
Fix a few typos and remove some redundant wording.
2019-02-18 14:12:45 +11:00
Evan Hunt
4d4233f637
Merge branch '879-dnssec-checkds-help' into 'master'
...
Correct path in dnssec-checkds help
Closes #879
See merge request isc-projects/bind9!1515
2019-02-14 15:51:39 -05:00